diff options
Diffstat (limited to 'kevlar')
144 files changed, 29728 insertions, 0 deletions
diff --git a/kevlar/2026-08-31/OPERATIONS_LOG.md b/kevlar/2026-08-31/OPERATIONS_LOG.md new file mode 100644 index 0000000..ab687a7 --- /dev/null +++ b/kevlar/2026-08-31/OPERATIONS_LOG.md @@ -0,0 +1,37 @@ +# Weekly BP Report -- 2026-08-31 + +Generated: 2026-08-31T10:40:00Z +Baseline: 2026-08-23 +Note: deception honeypot fleet reconfigured 2026-08-28; fleet reports (28-31 Aug) attached to run. Fleet data used for attack/IoC enrichment only. + +## 2026-08-31 11:15:00 -- Phase 1: Sponge (Arkime) +- ASNs queried: 25 +- API calls: 1 timeline + 50 stats (2/ASN) + 1 split timeline + 9 session searches +- Results cached: 52 files sponge/ +- Errors: none + +## 2026-08-31 11:20:00 -- Phase 2: Honeylabs +- ASNs queried: 25 (3 calls/ASN + per-day events pagination + IOC drilldowns) +- API calls: ~190 +- Results cached: events-*.ndjson (9 ASNs with data, 492 sampled events), top-attackers.csv, fingerprints.csv, observed-ips.json, summary.json, ioc-*.json +- Errors: initial passes hit MCP bridge truncation on large responses; fixed via per-day limit=20 + rawContent extraction. Final pass 0 errors. +- Note: ioc_lookup does not support ASN strings (returns 0); used top_attackers(asn) + per-IP IOC drilldown instead. + +## 2026-08-31 11:37:00 -- Phase 1d: BP IP session searches +- 9 IPs searched, caches in sponge/ip-sessions/ +- Cross-corroboration: 204.76.203.7 (PFCLOUD), 176.120.22.61 (PROTON66), 185.100.87.136 (FLOKINET), 147.45.71.214 (AEZA) all present in Arkime at scale + +## 2026-08-31 11:55:00 -- Phase 3: Censys +- 25 ASNs aggregated x5 fields (125 calls) + 10 IP enrichments (get_host + get_host_services) +- Cached: censys/aggregations-*.ndjson, aggregations-all.json, ip-enrichments.ndjson, fleet-correlation.csv +- Key: all 25 ASNs carry BULLETPROOF label; KPRONET zero visible services (scan-only profile) +- Errors: 1 truncated host lookup (204.76.203.49) retried OK + +## 2026-08-31 12:00:00 -- Phase 4: Change detection +- Baseline 2026-08-23. SPONGE FLEET RECONFIGURED 2026-08-28: prior-week Arkime volumes are NOT comparable (sensor coverage change). Deltas recorded but flagged as baseline break; this run becomes the new baseline. +- Cached: changes/diff-vs-prior-week.csv, changes/anomalies.csv (50 rows, volume+churn+fingerprints) + +## 2026-08-31 12:30:00 -- Phase 5+6: Report and archival +- Blog post: ai.rud.is/src/data/blog/2026-08-31-weekly-bulletproof-report.md (build passed, 32.8s) +- IoCs: 416 unique IPs, fingerprints, paths, README cached in iocs/ +- Run complete diff --git a/kevlar/2026-08-31/censys/aggregations-AS138915.ndjson b/kevlar/2026-08-31/censys/aggregations-AS138915.ndjson new file mode 100644 index 0000000..200f5bb --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS138915.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 7319, "key": "22"}, {"count": 2669, "key": "443"}, {"count": 2501, "key": "80"}, {"count": 2430, "key": "32080"}, {"count": 2379, "key": "43080"}, {"count": 2243, "key": "40003"}, {"count": 2238, "key": "40801"}, {"count": 2235, "key": "40803"}, {"count": 2234, "key": "40804"}, {"count": 2229, "key": "40810"}], "is_more_than_total_hits": false, "other_count": 62162, "query_duration_millis": 306, "total_count": 13554}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 7679, "key": "openssh"}, {"count": 6327, "key": "openresty"}, {"count": 4526, "key": "tengine"}, {"count": 3369, "key": "nginx"}, {"count": 1055, "key": "http_api"}, {"count": 553, "key": "http_server"}, {"count": 435, "key": "express"}, {"count": 430, "key": "jquery"}, {"count": 309, "key": "bootstrap"}, {"count": 309, "key": "openvpn_access_server"}], "is_more_than_total_hits": false, "other_count": 4900, "query_duration_millis": 154, "total_count": 13554}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 13554, "key": "BULLETPROOF"}, {"count": 99, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 470, "total_count": 13554}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 4619, "key": "GlobalSign GCC R3 OV TLS CA 2024"}, {"count": 2393, "key": "localhost"}, {"count": 2346, "key": "prod-vpn.example.com"}, {"count": 2310, "key": "GlobalSign GCC R46 OV TLS CA 2025"}, {"count": 2240, "key": "GlobalSign RSA OV SSL CA 2018"}, {"count": 1206, "key": "Sectigo Public Server Authentication CA DV R36"}, {"count": 431, "key": "NONE"}, {"count": 431, "key": "WoTrus RSA DV SSL CA 2"}, {"count": 361, "key": "YR1"}, {"count": 345, "key": "WIN-9QFKHJ39QE9"}], "is_more_than_total_hits": false, "other_count": 7531, "query_duration_millis": 511, "total_count": 13554}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 6092, "key": "linux"}, {"count": 626, "key": "windows"}, {"count": 66, "key": "routeros"}, {"count": 36, "key": "ubuntu"}, {"count": 33, "key": "debian_linux"}, {"count": 31, "key": "centos"}, {"count": 10, "key": "adaptive_security_appliance_software"}, {"count": 10, "key": "proxmox"}, {"count": 4, "key": "linux_kernel"}, {"count": 3, "key": "freebsd"}], "is_more_than_total_hits": false, "other_count": 10, "query_duration_millis": 195, "total_count": 13554}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS140666.ndjson b/kevlar/2026-08-31/censys/aggregations-AS140666.ndjson new file mode 100644 index 0000000..48305e4 --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS140666.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 1652, "key": "22"}, {"count": 694, "key": "443"}, {"count": 535, "key": "80"}, {"count": 376, "key": "6004"}, {"count": 376, "key": "6011"}, {"count": 375, "key": "6001"}, {"count": 375, "key": "6006"}, {"count": 375, "key": "6007"}, {"count": 375, "key": "6010"}, {"count": 375, "key": "6012"}], "is_more_than_total_hits": false, "other_count": 12271, "query_duration_millis": 32, "total_count": 2805}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 1615, "key": "openssh"}, {"count": 1378, "key": "nginx"}, {"count": 146, "key": "openresty"}, {"count": 131, "key": "http_api"}, {"count": 80, "key": "jquery"}, {"count": 74, "key": "internet_information_services"}, {"count": 58, "key": "tengine"}, {"count": 54, "key": "bootstrap"}, {"count": 39, "key": "express"}, {"count": 36, "key": "node_exporter"}], "is_more_than_total_hits": false, "other_count": 575, "query_duration_millis": 168, "total_count": 2805}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 2805, "key": "BULLETPROOF"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 244, "total_count": 2805}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 338, "key": "Sectigo Public Server Authentication CA DV R36"}, {"count": 183, "key": "NONE"}, {"count": 135, "key": "RapidSSL TLS RSA CA G1"}, {"count": 109, "key": "tudog_node_agent._reserved.bytefcdn.com"}, {"count": 107, "key": "RTCTS"}, {"count": 102, "key": "GeoTrust TLS RSA CA G1"}, {"count": 92, "key": "QY"}, {"count": 65, "key": "RapidSSL TLS ECC CA G1"}, {"count": 60, "key": "tls.internal.ypc.org"}, {"count": 47, "key": "GlobalSign GCC R3 OV TLS CA 2024"}], "is_more_than_total_hits": false, "other_count": 717, "query_duration_millis": 67, "total_count": 2805}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 1089, "key": "linux"}, {"count": 95, "key": "windows"}, {"count": 13, "key": "ubuntu"}, {"count": 3, "key": "routeros"}, {"count": 2, "key": "adaptive_security_appliance_software"}, {"count": 2, "key": "debian_linux"}, {"count": 1, "key": "linux_kernel"}, {"count": 1, "key": "proxmox"}, {"count": 1, "key": "windows_server_2008_r2"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 20, "total_count": 2805}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS14956.ndjson b/kevlar/2026-08-31/censys/aggregations-AS14956.ndjson new file mode 100644 index 0000000..c24b187 --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS14956.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 15480, "key": "22"}, {"count": 8450, "key": "443"}, {"count": 7520, "key": "3389"}, {"count": 7412, "key": "80"}, {"count": 1091, "key": "2096"}, {"count": 1021, "key": "5985"}, {"count": 985, "key": "135"}, {"count": 842, "key": "445"}, {"count": 797, "key": "53"}, {"count": 786, "key": "8443"}], "is_more_than_total_hits": false, "other_count": 20519, "query_duration_millis": 125, "total_count": 25654}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 14570, "key": "openssh"}, {"count": 10034, "key": "nginx"}, {"count": 2567, "key": "express"}, {"count": 1582, "key": "http_server"}, {"count": 1224, "key": "dovecot"}, {"count": 1124, "key": "http_api"}, {"count": 859, "key": "google_web_services"}, {"count": 804, "key": "web_server"}, {"count": 705, "key": "caddy"}, {"count": 666, "key": "jquery"}], "is_more_than_total_hits": false, "other_count": 16007, "query_duration_millis": 91, "total_count": 25654}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 25654, "key": "BULLETPROOF"}, {"count": 210, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 22, "total_count": 25654}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 2029, "key": "YE2"}, {"count": 1907, "key": "YE1"}, {"count": 995, "key": "windows-Dallas0"}, {"count": 977, "key": "YR1"}, {"count": 967, "key": "YR2"}, {"count": 870, "key": "invalid2.invalid"}, {"count": 429, "key": "windows-Utah-4g"}, {"count": 378, "key": "www.example.com"}, {"count": 373, "key": "windows-Amsterd"}, {"count": 343, "key": "TRAEFIK DEFAULT CERT"}], "is_more_than_total_hits": false, "other_count": 13042, "query_duration_millis": 160, "total_count": 25654}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 13776, "key": "linux"}, {"count": 5506, "key": "windows"}, {"count": 218, "key": "ubuntu"}, {"count": 135, "key": "debian_linux"}, {"count": 101, "key": "routeros"}, {"count": 30, "key": "freebsd"}, {"count": 21, "key": "linux_kernel"}, {"count": 21, "key": "windows_server"}, {"count": 9, "key": "proxmox"}, {"count": 8, "key": "adaptive_security_appliance_software"}], "is_more_than_total_hits": false, "other_count": 20, "query_duration_millis": 126, "total_count": 25654}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS198953.ndjson b/kevlar/2026-08-31/censys/aggregations-AS198953.ndjson new file mode 100644 index 0000000..b76afdb --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS198953.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 166, "key": "3389"}, {"count": 161, "key": "22"}, {"count": 89, "key": "80"}, {"count": 83, "key": "443"}, {"count": 52, "key": "135"}, {"count": 41, "key": "137"}, {"count": 39, "key": "53"}, {"count": 36, "key": "139"}, {"count": 35, "key": "5985"}, {"count": 25, "key": "21"}], "is_more_than_total_hits": false, "other_count": 374, "query_duration_millis": 185, "total_count": 360}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 128, "key": "nginx"}, {"count": 123, "key": "openssh"}, {"count": 63, "key": "dovecot"}, {"count": 44, "key": "http_api"}, {"count": 36, "key": "express"}, {"count": 31, "key": "http_server"}, {"count": 30, "key": "fastpanel"}, {"count": 24, "key": "exim"}, {"count": 22, "key": "requirejs"}, {"count": 19, "key": "parallels_plesk_panel"}], "is_more_than_total_hits": false, "other_count": 231, "query_duration_millis": 146, "total_count": 360}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 360, "key": "BULLETPROOF"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 923, "total_count": 360}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 23, "key": "Plesk"}, {"count": 19, "key": "YR1"}, {"count": 16, "key": "etc"}, {"count": 11, "key": "AnyDesk Client"}, {"count": 10, "key": "localhost"}, {"count": 9, "key": "R11"}, {"count": 9, "key": "parking"}, {"count": 8, "key": "R12"}, {"count": 8, "key": "YR2"}, {"count": 8, "key": "test"}], "is_more_than_total_hits": false, "other_count": 272, "query_duration_millis": 147, "total_count": 360}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 117, "key": "linux"}, {"count": 41, "key": "windows"}, {"count": 4, "key": "ubuntu"}, {"count": 3, "key": "debian_linux"}, {"count": 2, "key": "proxmox"}, {"count": 1, "key": "adaptive_security_appliance_software"}, {"count": 1, "key": "freenas_firmware"}, {"count": 1, "key": "ios"}, {"count": 1, "key": "linux_kernel"}, {"count": 1, "key": "routeros"}], "is_more_than_total_hits": false, "other_count": 2, "query_duration_millis": 25, "total_count": 360}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS200593.ndjson b/kevlar/2026-08-31/censys/aggregations-AS200593.ndjson new file mode 100644 index 0000000..407b511 --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS200593.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 201, "key": "22"}, {"count": 133, "key": "3389"}, {"count": 113, "key": "80"}, {"count": 81, "key": "443"}, {"count": 38, "key": "53"}, {"count": 26, "key": "135"}, {"count": 26, "key": "5985"}, {"count": 23, "key": "21"}, {"count": 21, "key": "25"}, {"count": 20, "key": "143"}], "is_more_than_total_hits": false, "other_count": 310, "query_duration_millis": 245, "total_count": 348}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 150, "key": "nginx"}, {"count": 137, "key": "openssh"}, {"count": 60, "key": "dovecot"}, {"count": 35, "key": "parallels_plesk_panel"}, {"count": 35, "key": "prototype"}, {"count": 35, "key": "requirejs"}, {"count": 33, "key": "express"}, {"count": 30, "key": "http_server"}, {"count": 29, "key": "http_api"}, {"count": 24, "key": "plesk"}], "is_more_than_total_hits": false, "other_count": 180, "query_duration_millis": 32, "total_count": 348}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 348, "key": "BULLETPROOF"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 97, "total_count": 348}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 42, "key": "Plesk"}, {"count": 29, "key": "YR1"}, {"count": 24, "key": "YR2"}, {"count": 13, "key": "YE1"}, {"count": 12, "key": "R13"}, {"count": 9, "key": "TRAEFIK DEFAULT CERT"}, {"count": 7, "key": "DESKTOP-GKGI28A"}, {"count": 6, "key": "R12"}, {"count": 6, "key": "ckicksp-1.example.com"}, {"count": 6, "key": "devin-coo-1.example.com"}], "is_more_than_total_hits": false, "other_count": 207, "query_duration_millis": 183, "total_count": 348}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 138, "key": "linux"}, {"count": 26, "key": "windows"}, {"count": 3, "key": "proxmox"}, {"count": 2, "key": "debian_linux"}, {"count": 1, "key": "ubuntu"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 262, "total_count": 348}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS200651.ndjson b/kevlar/2026-08-31/censys/aggregations-AS200651.ndjson new file mode 100644 index 0000000..b59c7c8 --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS200651.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 2841, "key": "22"}, {"count": 2118, "key": "443"}, {"count": 1917, "key": "80"}, {"count": 380, "key": "53"}, {"count": 282, "key": "25"}, {"count": 234, "key": "587"}, {"count": 222, "key": "993"}, {"count": 189, "key": "111"}, {"count": 186, "key": "143"}, {"count": 168, "key": "110"}], "is_more_than_total_hits": false, "other_count": 4831, "query_duration_millis": 180, "total_count": 3806}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 2825, "key": "nginx"}, {"count": 2589, "key": "openssh"}, {"count": 585, "key": "dovecot"}, {"count": 465, "key": "http_server"}, {"count": 361, "key": "cpanel"}, {"count": 303, "key": "express"}, {"count": 270, "key": "exim"}, {"count": 258, "key": "caddy"}, {"count": 247, "key": "openresty"}, {"count": 196, "key": "authoritative_server"}], "is_more_than_total_hits": false, "other_count": 3469, "query_duration_millis": 79, "total_count": 3806}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 3806, "key": "BULLETPROOF"}, {"count": 130, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 20, "total_count": 3806}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 725, "key": "YE1"}, {"count": 637, "key": "YR2"}, {"count": 612, "key": "YE2"}, {"count": 562, "key": "YR1"}, {"count": 131, "key": "TRAEFIK DEFAULT CERT"}, {"count": 99, "key": "invalid2.invalid"}, {"count": 59, "key": "localhost"}, {"count": 47, "key": "WE1"}, {"count": 40, "key": "GlobalSign Atlas R3 DV TLS CA 2025 Q3"}, {"count": 40, "key": "www.example.com"}], "is_more_than_total_hits": false, "other_count": 1621, "query_duration_millis": 128, "total_count": 3806}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 2167, "key": "linux"}, {"count": 56, "key": "ubuntu"}, {"count": 48, "key": "debian_linux"}, {"count": 30, "key": "proxmox"}, {"count": 27, "key": "windows"}, {"count": 10, "key": "freebsd"}, {"count": 8, "key": "routeros"}, {"count": 6, "key": "enterprise_linux"}, {"count": 6, "key": "openbsd"}, {"count": 5, "key": "centos"}], "is_more_than_total_hits": false, "other_count": 8, "query_duration_millis": 162, "total_count": 3806}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS202685.ndjson b/kevlar/2026-08-31/censys/aggregations-AS202685.ndjson new file mode 100644 index 0000000..4a3143e --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS202685.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 4, "key": "80"}, {"count": 2, "key": "443"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 484, "total_count": 4}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 4, "key": "internet_information_services"}, {"count": 2, "key": "asp.net"}, {"count": 2, "key": "asp\\.net"}, {"count": 2, "key": "http_api"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 154, "total_count": 4}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 4, "key": "BULLETPROOF"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 116, "total_count": 4}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 1, "key": "GeoTrust TLS RSA CA G1"}, {"count": 1, "key": "YR1"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 155, "total_count": 4}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 4, "key": "windows"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 120, "total_count": 4}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS206728.ndjson b/kevlar/2026-08-31/censys/aggregations-AS206728.ndjson new file mode 100644 index 0000000..88567ee --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS206728.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 7, "key": "443"}, {"count": 6, "key": "80"}, {"count": 3, "key": "53"}, {"count": 2, "key": "22"}, {"count": 2, "key": "445"}, {"count": 2, "key": "5910"}, {"count": 2, "key": "5934"}, {"count": 1, "key": "135"}, {"count": 1, "key": "139"}, {"count": 1, "key": "500"}], "is_more_than_total_hits": false, "other_count": 7, "query_duration_millis": 26, "total_count": 20}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 5, "key": "nginx"}, {"count": 4, "key": "http_api"}, {"count": 2, "key": "asp.net"}, {"count": 2, "key": "asp\\.net"}, {"count": 2, "key": "internet_information_services"}, {"count": 1, "key": "moment"}, {"count": 1, "key": "openssh"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 89, "total_count": 20}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 20, "key": "BULLETPROOF"}, {"count": 6, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 777, "total_count": 20}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 2, "key": "GlobalSign RSA OV SSL CA 2018"}, {"count": 1, "key": "YE1"}, {"count": 1, "key": "hotelsoft.cer"}, {"count": 1, "key": "invalid2.invalid"}, {"count": 1, "key": "v673"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 132, "total_count": 20}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 6, "key": "windows"}, {"count": 1, "key": "linux"}, {"count": 1, "key": "routeros"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 58, "total_count": 20}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS209847.ndjson b/kevlar/2026-08-31/censys/aggregations-AS209847.ndjson new file mode 100644 index 0000000..e4b2cfd --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS209847.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 980, "key": "22"}, {"count": 564, "key": "8080"}, {"count": 517, "key": "1030"}, {"count": 517, "key": "1050"}, {"count": 514, "key": "24442"}, {"count": 499, "key": "1235"}, {"count": 494, "key": "1234"}, {"count": 440, "key": "443"}, {"count": 419, "key": "53"}, {"count": 387, "key": "80"}], "is_more_than_total_hits": false, "other_count": 2363, "query_duration_millis": 111, "total_count": 1784}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 1567, "key": "python"}, {"count": 1554, "key": "aiohttp"}, {"count": 1231, "key": "openssh"}, {"count": 723, "key": "nginx"}, {"count": 367, "key": "bind"}, {"count": 312, "key": "dovecot"}, {"count": 217, "key": "exim"}, {"count": 201, "key": "proftpd"}, {"count": 130, "key": "google_web_services"}, {"count": 130, "key": "web_server"}], "is_more_than_total_hits": false, "other_count": 737, "query_duration_millis": 109, "total_count": 1784}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 1784, "key": "BULLETPROOF"}, {"count": 5, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 190, "total_count": 1784}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 221, "key": "YR1"}, {"count": 203, "key": "YR2"}, {"count": 132, "key": "invalid2.invalid"}, {"count": 121, "key": "YE2"}, {"count": 107, "key": "YE1"}, {"count": 30, "key": "server"}, {"count": 22, "key": "GeoTrust TLS RSA CA G1"}, {"count": 21, "key": "GlobalSign RSA OV SSL CA 2018"}, {"count": 19, "key": "Sectigo Public Server Authentication CA DV E36"}, {"count": 17, "key": "GlobalSign Atlas R3 DV TLS CA 2025 Q3"}], "is_more_than_total_hits": false, "other_count": 1073, "query_duration_millis": 118, "total_count": 1784}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 1210, "key": "linux"}, {"count": 42, "key": "ubuntu"}, {"count": 14, "key": "windows"}, {"count": 5, "key": "routeros"}, {"count": 2, "key": "linux_kernel"}, {"count": 1, "key": "adaptive_security_appliance_software"}, {"count": 1, "key": "centos"}, {"count": 1, "key": "debian_linux"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 125, "total_count": 1784}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS210644.ndjson b/kevlar/2026-08-31/censys/aggregations-AS210644.ndjson new file mode 100644 index 0000000..0210dc2 --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS210644.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 62401, "key": "22"}, {"count": 35627, "key": "443"}, {"count": 18220, "key": "80"}, {"count": 12493, "key": "2096"}, {"count": 8314, "key": "8443"}, {"count": 6208, "key": "8080"}, {"count": 3499, "key": "2053"}, {"count": 1995, "key": "2222"}, {"count": 1737, "key": "3389"}, {"count": 1158, "key": "53"}], "is_more_than_total_hits": false, "other_count": 59626, "query_duration_millis": 77, "total_count": 72191}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 61805, "key": "openssh"}, {"count": 30153, "key": "nginx"}, {"count": 7299, "key": "google_web_services"}, {"count": 7299, "key": "web_server"}, {"count": 5523, "key": "ghost"}, {"count": 5521, "key": "app_and_api_protector"}, {"count": 4247, "key": "express"}, {"count": 3438, "key": "caddy"}, {"count": 3128, "key": "waf"}, {"count": 2926, "key": "cloudflare_load_balancer"}], "is_more_than_total_hits": false, "other_count": 34593, "query_duration_millis": 158, "total_count": 72191}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 72191, "key": "BULLETPROOF"}, {"count": 509, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 238, "total_count": 72191}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 13117, "key": "YE2"}, {"count": 13008, "key": "YE1"}, {"count": 7385, "key": "invalid2.invalid"}, {"count": 5097, "key": "YR2"}, {"count": 3278, "key": "YR1"}, {"count": 2117, "key": "GeoTrust TLS RSA CA G1"}, {"count": 2056, "key": "WE1"}, {"count": 1819, "key": "GlobalSign RSA OV SSL CA 2018"}, {"count": 1341, "key": "Microsoft TLS G2 RSA CA OCSP 04"}, {"count": 1288, "key": "GlobalSign ECC OV SSL CA 2018"}], "is_more_than_total_hits": false, "other_count": 25046, "query_duration_millis": 193, "total_count": 72191}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 60420, "key": "linux"}, {"count": 719, "key": "ubuntu"}, {"count": 573, "key": "windows"}, {"count": 209, "key": "debian_linux"}, {"count": 84, "key": "routeros"}, {"count": 83, "key": "linux_kernel"}, {"count": 34, "key": "adaptive_security_appliance_software"}, {"count": 14, "key": "linux_ami"}, {"count": 13, "key": "centos"}, {"count": 12, "key": "windows_server"}], "is_more_than_total_hits": false, "other_count": 16, "query_duration_millis": 56, "total_count": 72191}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS211720.ndjson b/kevlar/2026-08-31/censys/aggregations-AS211720.ndjson new file mode 100644 index 0000000..9816c61 --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS211720.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 28, "key": "22"}, {"count": 19, "key": "3389"}, {"count": 14, "key": "179"}, {"count": 9, "key": "80"}, {"count": 7, "key": "443"}, {"count": 6, "key": "111"}, {"count": 6, "key": "5985"}, {"count": 4, "key": "8081"}, {"count": 3, "key": "8080"}, {"count": 2, "key": "135"}], "is_more_than_total_hits": false, "other_count": 14, "query_duration_millis": 260, "total_count": 50}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 25, "key": "openssh"}, {"count": 11, "key": "nginx"}, {"count": 6, "key": "http_api"}, {"count": 2, "key": "mariadb"}, {"count": 2, "key": "tor"}, {"count": 1, "key": "caddy"}, {"count": 1, "key": "dropbear_ssh"}, {"count": 1, "key": "gunicorn"}, {"count": 1, "key": "http_server"}, {"count": 1, "key": "libupnp"}], "is_more_than_total_hits": false, "other_count": 2, "query_duration_millis": 111, "total_count": 50}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 50, "key": "BULLETPROOF"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 80, "total_count": 50}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 3, "key": "IPMI"}, {"count": 2, "key": "FREE"}, {"count": 1, "key": "WIN-JDCEOBUFJUS"}, {"count": 1, "key": "WIN-JP7KUDECHOR"}, {"count": 1, "key": "YE1"}, {"count": 1, "key": "YE2"}, {"count": 1, "key": "YR2"}, {"count": 1, "key": "agent-ca@1757674441"}, {"count": 1, "key": "agent-ca@1757925038"}, {"count": 1, "key": "agent-ca@1759158944"}], "is_more_than_total_hits": false, "other_count": 16, "query_duration_millis": 122, "total_count": 50}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 10, "key": "linux"}, {"count": 3, "key": "windows"}, {"count": 1, "key": "debian_linux"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 98, "total_count": 50}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS213702.ndjson b/kevlar/2026-08-31/censys/aggregations-AS213702.ndjson new file mode 100644 index 0000000..1345dd5 --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS213702.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 6376, "key": "22"}, {"count": 4393, "key": "443"}, {"count": 2150, "key": "80"}, {"count": 2020, "key": "2222"}, {"count": 820, "key": "8443"}, {"count": 671, "key": "2096"}, {"count": 404, "key": "3389"}, {"count": 242, "key": "8080"}, {"count": 193, "key": "2053"}, {"count": 160, "key": "9443"}], "is_more_than_total_hits": false, "other_count": 4685, "query_duration_millis": 3206, "total_count": 7381}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 6147, "key": "openssh"}, {"count": 3386, "key": "nginx"}, {"count": 621, "key": "caddy"}, {"count": 522, "key": "google_web_services"}, {"count": 521, "key": "web_server"}, {"count": 472, "key": "app_and_api_protector"}, {"count": 472, "key": "ghost"}, {"count": 333, "key": "express"}, {"count": 266, "key": "waf"}, {"count": 254, "key": "cloudflare_load_balancer"}], "is_more_than_total_hits": false, "other_count": 2854, "query_duration_millis": 37, "total_count": 7381}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 7381, "key": "BULLETPROOF"}, {"count": 16, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 27, "total_count": 7381}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 1187, "key": "YE2"}, {"count": 1098, "key": "YE1"}, {"count": 768, "key": "2LqvyXLUXjAf2MoZx6VEPgJuz1349naDyLo"}, {"count": 524, "key": "invalid2.invalid"}, {"count": 331, "key": "YR2"}, {"count": 234, "key": "YR1"}, {"count": 217, "key": "GeoTrust TLS RSA CA G1"}, {"count": 193, "key": "zAqJHcz8C2V0TC9uVVmwYr8jbL2sjgaT_5"}, {"count": 185, "key": "NvJhHp68p5mjSuW_EK9Lab6bH9"}, {"count": 169, "key": "WE1"}], "is_more_than_total_hits": false, "other_count": 3494, "query_duration_millis": 144, "total_count": 7381}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 6029, "key": "linux"}, {"count": 98, "key": "windows"}, {"count": 63, "key": "ubuntu"}, {"count": 14, "key": "debian_linux"}, {"count": 10, "key": "linux_kernel"}, {"count": 1, "key": "enterprise_linux"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 49, "total_count": 7381}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS214351.ndjson b/kevlar/2026-08-31/censys/aggregations-AS214351.ndjson new file mode 100644 index 0000000..a86b0f5 --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS214351.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 547, "key": "80"}, {"count": 536, "key": "22"}, {"count": 340, "key": "443"}, {"count": 94, "key": "21"}, {"count": 93, "key": "53"}, {"count": 89, "key": "25"}, {"count": 87, "key": "8085"}, {"count": 86, "key": "22509"}, {"count": 81, "key": "143"}, {"count": 81, "key": "993"}], "is_more_than_total_hits": false, "other_count": 1019, "query_duration_millis": 291, "total_count": 712}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 795, "key": "nginx"}, {"count": 586, "key": "openssh"}, {"count": 251, "key": "express"}, {"count": 216, "key": "dovecot"}, {"count": 149, "key": "fastpanel"}, {"count": 147, "key": "exim"}, {"count": 81, "key": "http_server"}, {"count": 56, "key": "proftpd"}, {"count": 37, "key": "http_api"}, {"count": 37, "key": "next.js"}], "is_more_than_total_hits": false, "other_count": 394, "query_duration_millis": 40, "total_count": 712}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 712, "key": "BULLETPROOF"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 161, "total_count": 712}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 97, "key": "etc"}, {"count": 60, "key": "YR2"}, {"count": 53, "key": "vm4660.defhost.co"}, {"count": 51, "key": "YR1"}, {"count": 39, "key": "parking"}, {"count": 37, "key": "FASTPANEL"}, {"count": 34, "key": "YE2"}, {"count": 31, "key": "misp.goodip"}, {"count": 27, "key": "YE1"}, {"count": 15, "key": "tech0.test"}], "is_more_than_total_hits": false, "other_count": 545, "query_duration_millis": 153, "total_count": 712}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 516, "key": "linux"}, {"count": 33, "key": "windows"}, {"count": 6, "key": "linux_kernel"}, {"count": 4, "key": "ubuntu"}, {"count": 1, "key": "centos"}, {"count": 1, "key": "debian_linux"}, {"count": 1, "key": "windows_server"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 162, "total_count": 712}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS214940.ndjson b/kevlar/2026-08-31/censys/aggregations-AS214940.ndjson new file mode 100644 index 0000000..467361a --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS214940.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 118, "total_count": 0}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 39, "total_count": 0}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 1001, "total_count": 0}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 126, "total_count": 0}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 568, "total_count": 0}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS216139.ndjson b/kevlar/2026-08-31/censys/aggregations-AS216139.ndjson new file mode 100644 index 0000000..1a2a897 --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS216139.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 5492, "key": "22"}, {"count": 3315, "key": "443"}, {"count": 2125, "key": "80"}, {"count": 946, "key": "51821"}, {"count": 782, "key": "53"}, {"count": 621, "key": "21"}, {"count": 554, "key": "2096"}, {"count": 464, "key": "25"}, {"count": 425, "key": "110"}, {"count": 410, "key": "143"}], "is_more_than_total_hits": false, "other_count": 8904, "query_duration_millis": 46, "total_count": 9100}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 4460, "key": "openssh"}, {"count": 2997, "key": "nginx"}, {"count": 1354, "key": "dovecot"}, {"count": 1069, "key": "ddos-guard"}, {"count": 933, "key": "wg-easy"}, {"count": 836, "key": "exim"}, {"count": 783, "key": "express"}, {"count": 625, "key": "google_web_services"}, {"count": 623, "key": "web_server"}, {"count": 399, "key": "bind"}], "is_more_than_total_hits": false, "other_count": 5971, "query_duration_millis": 277, "total_count": 9100}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 9100, "key": "BULLETPROOF"}, {"count": 4, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 52, "total_count": 9100}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 701, "key": "invalid2.invalid"}, {"count": 634, "key": "YE1"}, {"count": 604, "key": "YE2"}, {"count": 404, "key": "GlobalSign GCC R6 AlphaSSL CA 2025"}, {"count": 231, "key": "YR2"}, {"count": 220, "key": "YR1"}, {"count": 203, "key": "WE1"}, {"count": 189, "key": "idrac"}, {"count": 179, "key": "MySQL_Server_5.7.22-22_Auto_Generated_CA_Certificate"}, {"count": 177, "key": "DigiCert Global G2 TLS RSA SHA256 2020 CA1"}], "is_more_than_total_hits": false, "other_count": 3551, "query_duration_millis": 173, "total_count": 9100}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 3886, "key": "linux"}, {"count": 184, "key": "ubuntu"}, {"count": 55, "key": "enterprise_linux"}, {"count": 53, "key": "routeros"}, {"count": 32, "key": "debian_linux"}, {"count": 26, "key": "centos"}, {"count": 16, "key": "adaptive_security_appliance_software"}, {"count": 4, "key": "freebsd"}, {"count": 3, "key": "linux_kernel"}, {"count": 1, "key": "linux_ami"}], "is_more_than_total_hits": false, "other_count": 1, "query_duration_millis": 1440, "total_count": 9100}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS216246.ndjson b/kevlar/2026-08-31/censys/aggregations-AS216246.ndjson new file mode 100644 index 0000000..879c1e3 --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS216246.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 5672, "key": "22"}, {"count": 4259, "key": "443"}, {"count": 3282, "key": "80"}, {"count": 704, "key": "2096"}, {"count": 693, "key": "8443"}, {"count": 390, "key": "8080"}, {"count": 368, "key": "2222"}, {"count": 310, "key": "3389"}, {"count": 193, "key": "3000"}, {"count": 179, "key": "3478"}], "is_more_than_total_hits": false, "other_count": 5444, "query_duration_millis": 519, "total_count": 7024}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 5230, "key": "openssh"}, {"count": 5040, "key": "nginx"}, {"count": 642, "key": "caddy"}, {"count": 501, "key": "express"}, {"count": 284, "key": "dovecot"}, {"count": 261, "key": "ghost"}, {"count": 260, "key": "app_and_api_protector"}, {"count": 238, "key": "traefik_proxy"}, {"count": 232, "key": "next.js"}, {"count": 221, "key": "next\\.js"}], "is_more_than_total_hits": false, "other_count": 3954, "query_duration_millis": 92, "total_count": 7024}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 7024, "key": "BULLETPROOF"}, {"count": 136, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 112, "total_count": 7024}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 1388, "key": "YE1"}, {"count": 1307, "key": "YE2"}, {"count": 349, "key": "YR2"}, {"count": 275, "key": "YR1"}, {"count": 273, "key": "GlobalSign ECC OV SSL CA 2018"}, {"count": 239, "key": "TRAEFIK DEFAULT CERT"}, {"count": 202, "key": "invalid2.invalid"}, {"count": 155, "key": "GlobalSign RSA OV SSL CA 2018"}, {"count": 119, "key": "WE1"}, {"count": 113, "key": "WR1"}], "is_more_than_total_hits": false, "other_count": 2483, "query_duration_millis": 186, "total_count": 7024}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 5090, "key": "linux"}, {"count": 220, "key": "ubuntu"}, {"count": 135, "key": "windows"}, {"count": 30, "key": "debian_linux"}, {"count": 10, "key": "routeros"}, {"count": 7, "key": "linux_kernel"}, {"count": 3, "key": "proxmox"}, {"count": 2, "key": "adaptive_security_appliance_software"}, {"count": 2, "key": "windows_server"}, {"count": 1, "key": "centos"}], "is_more_than_total_hits": false, "other_count": 2, "query_duration_millis": 152, "total_count": 7024}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS216309.ndjson b/kevlar/2026-08-31/censys/aggregations-AS216309.ndjson new file mode 100644 index 0000000..609218c --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS216309.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 35, "key": "22"}, {"count": 13, "key": "80"}, {"count": 8, "key": "443"}, {"count": 4, "key": "111"}, {"count": 2, "key": "25"}, {"count": 2, "key": "53"}, {"count": 2, "key": "110"}, {"count": 2, "key": "143"}, {"count": 2, "key": "161"}, {"count": 2, "key": "993"}], "is_more_than_total_hits": false, "other_count": 36, "query_duration_millis": 24, "total_count": 37}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 25, "key": "openssh"}, {"count": 16, "key": "nginx"}, {"count": 10, "key": "http_server"}, {"count": 9, "key": "express"}, {"count": 6, "key": "bootstrap"}, {"count": 6, "key": "dovecot"}, {"count": 6, "key": "php"}, {"count": 5, "key": "prototype"}, {"count": 4, "key": "jquery"}, {"count": 4, "key": "openssl"}], "is_more_than_total_hits": false, "other_count": 34, "query_duration_millis": 198, "total_count": 37}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 37, "key": "BULLETPROOF"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 197, "total_count": 37}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 9, "key": "YR2"}, {"count": 4, "key": "Plesk"}, {"count": 3, "key": "YE2"}, {"count": 3, "key": "YR1"}, {"count": 2, "key": "pbx.invisiontech.eu"}, {"count": 1, "key": "MySQL_Server_8.0.42_Auto_Generated_CA_Certificate"}, {"count": 1, "key": "OpenWrt"}, {"count": 1, "key": "YE1"}, {"count": 1, "key": "www.jxb5pzqmff4pcbab.com"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 134, "total_count": 37}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 12, "key": "linux"}, {"count": 2, "key": "debian_linux"}, {"count": 1, "key": "centos"}, {"count": 1, "key": "proxmox"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 49, "total_count": 37}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS30823.ndjson b/kevlar/2026-08-31/censys/aggregations-AS30823.ndjson new file mode 100644 index 0000000..55ac943 --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS30823.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 1203, "key": "22"}, {"count": 808, "key": "443"}, {"count": 614, "key": "80"}, {"count": 457, "key": "53"}, {"count": 388, "key": "27015"}, {"count": 296, "key": "3389"}, {"count": 109, "key": "25"}, {"count": 109, "key": "8443"}, {"count": 95, "key": "2096"}, {"count": 84, "key": "8080"}], "is_more_than_total_hits": false, "other_count": 2409, "query_duration_millis": 98, "total_count": 2036}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 1113, "key": "openssh"}, {"count": 776, "key": "nginx"}, {"count": 198, "key": "express"}, {"count": 137, "key": "http_server"}, {"count": 102, "key": "google_web_services"}, {"count": 102, "key": "web_server"}, {"count": 92, "key": "dovecot"}, {"count": 92, "key": "http_api"}, {"count": 69, "key": "caddy"}, {"count": 66, "key": "cloudflare_load_balancer"}], "is_more_than_total_hits": false, "other_count": 1549, "query_duration_millis": 144, "total_count": 2036}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 2036, "key": "BULLETPROOF"}, {"count": 28, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 421, "total_count": 2036}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 201, "key": "YE2"}, {"count": 198, "key": "YE1"}, {"count": 108, "key": "invalid2.invalid"}, {"count": 97, "key": "YR2"}, {"count": 92, "key": "YR1"}, {"count": 62, "key": "windows-DE-Fran"}, {"count": 58, "key": "172.86.93"}, {"count": 56, "key": "windows-Frankfu"}, {"count": 51, "key": "GoGetSSL RSA DV CA"}, {"count": 36, "key": "WE1"}], "is_more_than_total_hits": false, "other_count": 986, "query_duration_millis": 184, "total_count": 2036}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 1025, "key": "linux"}, {"count": 162, "key": "windows"}, {"count": 21, "key": "proxmox"}, {"count": 17, "key": "routeros"}, {"count": 15, "key": "debian_linux"}, {"count": 11, "key": "ubuntu"}, {"count": 9, "key": "centos"}, {"count": 6, "key": "freebsd"}, {"count": 4, "key": "adaptive_security_appliance_software"}, {"count": 3, "key": "megarac_spx"}], "is_more_than_total_hits": false, "other_count": 6, "query_duration_millis": 338, "total_count": 2036}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS33993.ndjson b/kevlar/2026-08-31/censys/aggregations-AS33993.ndjson new file mode 100644 index 0000000..f699b5b --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS33993.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 3135, "key": "22"}, {"count": 2062, "key": "443"}, {"count": 2022, "key": "80"}, {"count": 1411, "key": "53"}, {"count": 713, "key": "21"}, {"count": 601, "key": "3000"}, {"count": 555, "key": "1500"}, {"count": 548, "key": "25"}, {"count": 523, "key": "993"}, {"count": 512, "key": "143"}], "is_more_than_total_hits": false, "other_count": 9561, "query_duration_millis": 362, "total_count": 4842}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 3759, "key": "nginx"}, {"count": 3248, "key": "openssh"}, {"count": 1719, "key": "dovecot"}, {"count": 1155, "key": "exim"}, {"count": 1141, "key": "bind"}, {"count": 570, "key": "proftpd"}, {"count": 384, "key": "express"}, {"count": 290, "key": "python"}, {"count": 230, "key": "aiohttp"}, {"count": 228, "key": "bootstrap"}], "is_more_than_total_hits": false, "other_count": 3414, "query_duration_millis": 42, "total_count": 4842}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 4842, "key": "BULLETPROOF"}, {"count": 9, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 50, "total_count": 4842}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 769, "key": "YR2"}, {"count": 715, "key": "YR1"}, {"count": 516, "key": "YE2"}, {"count": 487, "key": "YE1"}, {"count": 322, "key": "ssl.by"}, {"count": 242, "key": "Sectigo Public Server Authentication CA DV E36"}, {"count": 173, "key": "issssrt.ru"}, {"count": 124, "key": "GlobalSign GCC R3 DV TLS CA 2020"}, {"count": 113, "key": "invalid2.invalid"}, {"count": 105, "key": "TRAEFIK DEFAULT CERT"}], "is_more_than_total_hits": false, "other_count": 4885, "query_duration_millis": 107, "total_count": 4842}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 2989, "key": "linux"}, {"count": 132, "key": "ubuntu"}, {"count": 57, "key": "windows"}, {"count": 38, "key": "enterprise_linux"}, {"count": 23, "key": "debian_linux"}, {"count": 21, "key": "routeros"}, {"count": 6, "key": "freebsd"}, {"count": 5, "key": "centos"}, {"count": 4, "key": "windows_server"}, {"count": 3, "key": "linux_kernel"}], "is_more_than_total_hits": false, "other_count": 5, "query_duration_millis": 335, "total_count": 4842}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS394711.ndjson b/kevlar/2026-08-31/censys/aggregations-AS394711.ndjson new file mode 100644 index 0000000..634a1e8 --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS394711.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 2, "key": "80"}, {"count": 2, "key": "443"}, {"count": 1, "key": "3389"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 272, "total_count": 3}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 4, "key": "bootstrap"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 31, "total_count": 3}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 3, "key": "BULLETPROOF"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 25, "total_count": 3}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 2, "key": "vergeos.local.root"}, {"count": 1, "key": "pcmrp-test"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 113, "total_count": 3}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 158, "total_count": 3}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS400992.ndjson b/kevlar/2026-08-31/censys/aggregations-AS400992.ndjson new file mode 100644 index 0000000..e355479 --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS400992.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 6669, "key": "22"}, {"count": 3214, "key": "443"}, {"count": 1298, "key": "80"}, {"count": 1045, "key": "2096"}, {"count": 494, "key": "8443"}, {"count": 193, "key": "2222"}, {"count": 192, "key": "8080"}, {"count": 183, "key": "3389"}, {"count": 174, "key": "2053"}, {"count": 121, "key": "25"}], "is_more_than_total_hits": false, "other_count": 4258, "query_duration_millis": 61, "total_count": 7781}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 5750, "key": "openssh"}, {"count": 1959, "key": "nginx"}, {"count": 909, "key": "google_web_services"}, {"count": 906, "key": "web_server"}, {"count": 434, "key": "app_and_api_protector"}, {"count": 434, "key": "ghost"}, {"count": 321, "key": "waf"}, {"count": 306, "key": "cloudflare_load_balancer"}, {"count": 266, "key": "caddy"}, {"count": 237, "key": "express"}], "is_more_than_total_hits": false, "other_count": 2595, "query_duration_millis": 179, "total_count": 7781}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 7781, "key": "BULLETPROOF"}, {"count": 41, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 41, "total_count": 7781}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 998, "key": "YE2"}, {"count": 908, "key": "invalid2.invalid"}, {"count": 877, "key": "YE1"}, {"count": 253, "key": "DigiCert Global G2 TLS RSA SHA256 2020 CA1"}, {"count": 244, "key": "YR2"}, {"count": 198, "key": "WE1"}, {"count": 191, "key": "YR1"}, {"count": 136, "key": "GeoTrust TLS RSA CA G1"}, {"count": 105, "key": "GlobalSign ECC OV SSL CA 2018"}, {"count": 100, "key": "Sectigo Public Server Authentication CA DV E36"}], "is_more_than_total_hits": false, "other_count": 2008, "query_duration_millis": 122, "total_count": 7781}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 5522, "key": "linux"}, {"count": 63, "key": "ubuntu"}, {"count": 44, "key": "windows"}, {"count": 26, "key": "debian_linux"}, {"count": 17, "key": "routeros"}, {"count": 9, "key": "adaptive_security_appliance_software"}, {"count": 5, "key": "linux_kernel"}, {"count": 2, "key": "centos"}, {"count": 2, "key": "freebsd"}, {"count": 1, "key": "linux_ami"}], "is_more_than_total_hits": false, "other_count": 1, "query_duration_millis": 28, "total_count": 7781}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS51396.ndjson b/kevlar/2026-08-31/censys/aggregations-AS51396.ndjson new file mode 100644 index 0000000..47caf64 --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS51396.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 838, "key": "22"}, {"count": 360, "key": "80"}, {"count": 281, "key": "443"}, {"count": 129, "key": "3389"}, {"count": 100, "key": "1407"}, {"count": 99, "key": "11407"}, {"count": 94, "key": "135"}, {"count": 93, "key": "445"}, {"count": 87, "key": "5985"}, {"count": 84, "key": "139"}], "is_more_than_total_hits": false, "other_count": 3342, "query_duration_millis": 457, "total_count": 1917}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 744, "key": "openssh"}, {"count": 398, "key": "nginx"}, {"count": 191, "key": "http_server"}, {"count": 129, "key": "http_api"}, {"count": 105, "key": "express"}, {"count": 69, "key": "php"}, {"count": 53, "key": "python"}, {"count": 48, "key": "jquery"}, {"count": 48, "key": "pve"}, {"count": 48, "key": "virtual_environment"}], "is_more_than_total_hits": false, "other_count": 801, "query_duration_millis": 1064, "total_count": 1917}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 1917, "key": "BULLETPROOF"}, {"count": 15, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 159, "total_count": 1917}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 110, "key": "YE1"}, {"count": 105, "key": "YE2"}, {"count": 45, "key": "YR2"}, {"count": 42, "key": "YR1"}, {"count": 27, "key": "WIN-9QL4SDRB93L"}, {"count": 24, "key": "localhost"}, {"count": 20, "key": "Proxmox Virtual Environment"}, {"count": 20, "key": "TRAEFIK DEFAULT CERT"}, {"count": 20, "key": "WIN-IK7N6SD2UBU"}, {"count": 17, "key": "invalid2.invalid"}], "is_more_than_total_hits": false, "other_count": 440, "query_duration_millis": 126, "total_count": 1917}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 668, "key": "linux"}, {"count": 85, "key": "windows"}, {"count": 39, "key": "debian_linux"}, {"count": 22, "key": "proxmox"}, {"count": 13, "key": "ubuntu"}, {"count": 3, "key": "centos"}, {"count": 3, "key": "routeros"}, {"count": 1, "key": "linux_kernel"}, {"count": 1, "key": "windows_server"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 72, "total_count": 1917}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS51852.ndjson b/kevlar/2026-08-31/censys/aggregations-AS51852.ndjson new file mode 100644 index 0000000..1f2f611 --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS51852.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 4338, "key": "443"}, {"count": 4060, "key": "22"}, {"count": 3590, "key": "161"}, {"count": 2799, "key": "80"}, {"count": 1886, "key": "123"}, {"count": 1547, "key": "53"}, {"count": 829, "key": "25"}, {"count": 829, "key": "500"}, {"count": 798, "key": "21"}, {"count": 796, "key": "143"}], "is_more_than_total_hits": false, "other_count": 15977, "query_duration_millis": 966, "total_count": 8641}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 4731, "key": "nginx"}, {"count": 4036, "key": "openssh"}, {"count": 2536, "key": "dovecot"}, {"count": 1391, "key": "exim"}, {"count": 819, "key": "openvpn_access_server"}, {"count": 816, "key": "cpanel"}, {"count": 753, "key": "bind"}, {"count": 740, "key": "http_server"}, {"count": 598, "key": "ceph"}, {"count": 512, "key": "webmail"}], "is_more_than_total_hits": false, "other_count": 8305, "query_duration_millis": 143, "total_count": 8641}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 8641, "key": "BULLETPROOF"}, {"count": 39, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 131, "total_count": 8641}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 1906, "key": "server"}, {"count": 1451, "key": "YR2"}, {"count": 962, "key": "YR1"}, {"count": 903, "key": "Hydra Authentication RSA SubCA #155"}, {"count": 804, "key": "server.domain.com"}, {"count": 534, "key": "YE2"}, {"count": 405, "key": "YE1"}, {"count": 348, "key": "server.ibras.eu"}, {"count": 295, "key": "''"}, {"count": 263, "key": "invalid2.invalid"}], "is_more_than_total_hits": false, "other_count": 4001, "query_duration_millis": 132, "total_count": 8641}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 3029, "key": "linux"}, {"count": 208, "key": "windows"}, {"count": 157, "key": "proxmox"}, {"count": 129, "key": "enterprise_linux"}, {"count": 47, "key": "ubuntu"}, {"count": 36, "key": "debian_linux"}, {"count": 32, "key": "freebsd"}, {"count": 26, "key": "centos"}, {"count": 22, "key": "routeros"}, {"count": 17, "key": "vmware_esxi_server"}], "is_more_than_total_hits": false, "other_count": 21, "query_duration_millis": 177, "total_count": 8641}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS57043.ndjson b/kevlar/2026-08-31/censys/aggregations-AS57043.ndjson new file mode 100644 index 0000000..887eabe --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS57043.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 77135, "key": "22"}, {"count": 49750, "key": "443"}, {"count": 32331, "key": "80"}, {"count": 14629, "key": "2096"}, {"count": 8459, "key": "8443"}, {"count": 4010, "key": "111"}, {"count": 2912, "key": "8080"}, {"count": 2598, "key": "2222"}, {"count": 2515, "key": "2053"}, {"count": 2258, "key": "53"}], "is_more_than_total_hits": false, "other_count": 125759, "query_duration_millis": 220, "total_count": 101011}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 76785, "key": "openssh"}, {"count": 59721, "key": "nginx"}, {"count": 8938, "key": "google_web_services"}, {"count": 8936, "key": "web_server"}, {"count": 6500, "key": "ghost"}, {"count": 6499, "key": "app_and_api_protector"}, {"count": 5458, "key": "express"}, {"count": 3900, "key": "caddy"}, {"count": 3435, "key": "waf"}, {"count": 3313, "key": "cloudflare_load_balancer"}], "is_more_than_total_hits": false, "other_count": 57657, "query_duration_millis": 372, "total_count": 101011}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 101011, "key": "BULLETPROOF"}, {"count": 8, "key": "IPV6"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 171, "total_count": 101011}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 13508, "key": "YE2"}, {"count": 13247, "key": "YE1"}, {"count": 9044, "key": "invalid2.invalid"}, {"count": 4967, "key": "YR1"}, {"count": 4513, "key": "YR2"}, {"count": 2378, "key": "GeoTrust TLS RSA CA G1"}, {"count": 2369, "key": "WE1"}, {"count": 2034, "key": "TRAEFIK DEFAULT CERT"}, {"count": 1748, "key": "DigiCert Global G2 TLS RSA SHA256 2020 CA1"}, {"count": 1538, "key": "Microsoft TLS G2 RSA CA OCSP 04"}], "is_more_than_total_hits": false, "other_count": 35502, "query_duration_millis": 171, "total_count": 101011}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 72754, "key": "linux"}, {"count": 800, "key": "ubuntu"}, {"count": 573, "key": "windows"}, {"count": 305, "key": "routeros"}, {"count": 273, "key": "debian_linux"}, {"count": 180, "key": "proxmox"}, {"count": 139, "key": "linux_kernel"}, {"count": 108, "key": "adaptive_security_appliance_software"}, {"count": 55, "key": "freebsd"}, {"count": 44, "key": "centos"}], "is_more_than_total_hits": false, "other_count": 132, "query_duration_millis": 61, "total_count": 101011}}} diff --git a/kevlar/2026-08-31/censys/aggregations-AS58854.ndjson b/kevlar/2026-08-31/censys/aggregations-AS58854.ndjson new file mode 100644 index 0000000..3aaabd1 --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-AS58854.ndjson @@ -0,0 +1,5 @@ +{"field": "host.services.port", "result": {"result": {"buckets": [{"count": 180, "key": "8887"}, {"count": 177, "key": "80"}, {"count": 163, "key": "443"}, {"count": 116, "key": "0"}, {"count": 82, "key": "8081"}, {"count": 79, "key": "8888"}, {"count": 78, "key": "111"}, {"count": 74, "key": "16257"}, {"count": 74, "key": "16259"}, {"count": 72, "key": "16258"}], "is_more_than_total_hits": false, "other_count": 4440, "query_duration_millis": 120, "total_count": 624}}} +{"field": "host.services.software.product", "result": {"result": {"buckets": [{"count": 1169, "key": "mysql"}, {"count": 349, "key": "nginx"}, {"count": 228, "key": "python"}, {"count": 183, "key": "wsgiserver"}, {"count": 163, "key": "jquery"}, {"count": 152, "key": "bootstrap"}, {"count": 103, "key": "node_exporter"}, {"count": 79, "key": "openssh"}, {"count": 78, "key": "kestrel_web_server"}, {"count": 72, "key": "cadvisor"}], "is_more_than_total_hits": false, "other_count": 279, "query_duration_millis": 536, "total_count": 624}}} +{"field": "host.labels.value", "result": {"result": {"buckets": [{"count": 624, "key": "BULLETPROOF"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 102, "total_count": 624}}} +{"field": "host.services.cert.parsed.issuer.common_name", "result": {"result": {"buckets": [{"count": 47, "key": "GlobalSign RSA OV SSL CA 2018"}, {"count": 13, "key": "TrustAsia DV TLS RSA CA 2025"}, {"count": 10, "key": "FtpServer"}, {"count": 9, "key": "YR1"}, {"count": 8, "key": "RapidSSL TLS RSA CA G1"}, {"count": 6, "key": "TrustAsia DV TLS RSA CA 2024"}, {"count": 5, "key": "IPMI"}, {"count": 5, "key": "WIN-RIK6D08VRRQ"}, {"count": 4, "key": "Firecloud Root Client Certification Authority"}, {"count": 4, "key": "Sectigo Public Server Authentication CA DV R36"}], "is_more_than_total_hits": false, "other_count": 78, "query_duration_millis": 101, "total_count": 624}}} +{"field": "host.operating_system.product", "result": {"result": {"buckets": [{"count": 33, "key": "linux"}, {"count": 26, "key": "windows"}, {"count": 13, "key": "ubuntu"}, {"count": 2, "key": "routeros"}, {"count": 1, "key": "centos"}], "is_more_than_total_hits": false, "other_count": 0, "query_duration_millis": 411, "total_count": 624}}} diff --git a/kevlar/2026-08-31/censys/aggregations-all.json b/kevlar/2026-08-31/censys/aggregations-all.json new file mode 100644 index 0000000..2280a60 --- /dev/null +++ b/kevlar/2026-08-31/censys/aggregations-all.json @@ -0,0 +1,4907 @@ +{ + "AS57043": { + "name": "HOSTKEY-AS", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 77135, + "key": "22" + }, + { + "count": 49750, + "key": "443" + }, + { + "count": 32331, + "key": "80" + }, + { + "count": 14629, + "key": "2096" + }, + { + "count": 8459, + "key": "8443" + }, + { + "count": 4010, + "key": "111" + }, + { + "count": 2912, + "key": "8080" + }, + { + "count": 2598, + "key": "2222" + }, + { + "count": 2515, + "key": "2053" + }, + { + "count": 2258, + "key": "53" + } + ], + "is_more_than_total_hits": false, + "other_count": 125759, + "query_duration_millis": 220, + "total_count": 101011 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 76785, + "key": "openssh" + }, + { + "count": 59721, + "key": "nginx" + }, + { + "count": 8938, + "key": "google_web_services" + }, + { + "count": 8936, + "key": "web_server" + }, + { + "count": 6500, + "key": "ghost" + }, + { + "count": 6499, + "key": "app_and_api_protector" + }, + { + "count": 5458, + "key": "express" + }, + { + "count": 3900, + "key": "caddy" + }, + { + "count": 3435, + "key": "waf" + }, + { + "count": 3313, + "key": "cloudflare_load_balancer" + } + ], + "is_more_than_total_hits": false, + "other_count": 57657, + "query_duration_millis": 372, + "total_count": 101011 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 101011, + "key": "BULLETPROOF" + }, + { + "count": 8, + "key": "IPV6" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 171, + "total_count": 101011 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 13508, + "key": "YE2" + }, + { + "count": 13247, + "key": "YE1" + }, + { + "count": 9044, + "key": "invalid2.invalid" + }, + { + "count": 4967, + "key": "YR1" + }, + { + "count": 4513, + "key": "YR2" + }, + { + "count": 2378, + "key": "GeoTrust TLS RSA CA G1" + }, + { + "count": 2369, + "key": "WE1" + }, + { + "count": 2034, + "key": "TRAEFIK DEFAULT CERT" + }, + { + "count": 1748, + "key": "DigiCert Global G2 TLS RSA SHA256 2020 CA1" + }, + { + "count": 1538, + "key": "Microsoft TLS G2 RSA CA OCSP 04" + } + ], + "is_more_than_total_hits": false, + "other_count": 35502, + "query_duration_millis": 171, + "total_count": 101011 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 72754, + "key": "linux" + }, + { + "count": 800, + "key": "ubuntu" + }, + { + "count": 573, + "key": "windows" + }, + { + "count": 305, + "key": "routeros" + }, + { + "count": 273, + "key": "debian_linux" + }, + { + "count": 180, + "key": "proxmox" + }, + { + "count": 139, + "key": "linux_kernel" + }, + { + "count": 108, + "key": "adaptive_security_appliance_software" + }, + { + "count": 55, + "key": "freebsd" + }, + { + "count": 44, + "key": "centos" + } + ], + "is_more_than_total_hits": false, + "other_count": 132, + "query_duration_millis": 61, + "total_count": 101011 + } + } + } + }, + "AS209847": { + "name": "THE", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 980, + "key": "22" + }, + { + "count": 564, + "key": "8080" + }, + { + "count": 517, + "key": "1030" + }, + { + "count": 517, + "key": "1050" + }, + { + "count": 514, + "key": "24442" + }, + { + "count": 499, + "key": "1235" + }, + { + "count": 494, + "key": "1234" + }, + { + "count": 440, + "key": "443" + }, + { + "count": 419, + "key": "53" + }, + { + "count": 387, + "key": "80" + } + ], + "is_more_than_total_hits": false, + "other_count": 2363, + "query_duration_millis": 111, + "total_count": 1784 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 1567, + "key": "python" + }, + { + "count": 1554, + "key": "aiohttp" + }, + { + "count": 1231, + "key": "openssh" + }, + { + "count": 723, + "key": "nginx" + }, + { + "count": 367, + "key": "bind" + }, + { + "count": 312, + "key": "dovecot" + }, + { + "count": 217, + "key": "exim" + }, + { + "count": 201, + "key": "proftpd" + }, + { + "count": 130, + "key": "google_web_services" + }, + { + "count": 130, + "key": "web_server" + } + ], + "is_more_than_total_hits": false, + "other_count": 737, + "query_duration_millis": 109, + "total_count": 1784 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 1784, + "key": "BULLETPROOF" + }, + { + "count": 5, + "key": "IPV6" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 190, + "total_count": 1784 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 221, + "key": "YR1" + }, + { + "count": 203, + "key": "YR2" + }, + { + "count": 132, + "key": "invalid2.invalid" + }, + { + "count": 121, + "key": "YE2" + }, + { + "count": 107, + "key": "YE1" + }, + { + "count": 30, + "key": "server" + }, + { + "count": 22, + "key": "GeoTrust TLS RSA CA G1" + }, + { + "count": 21, + "key": "GlobalSign RSA OV SSL CA 2018" + }, + { + "count": 19, + "key": "Sectigo Public Server Authentication CA DV E36" + }, + { + "count": 17, + "key": "GlobalSign Atlas R3 DV TLS CA 2025 Q3" + } + ], + "is_more_than_total_hits": false, + "other_count": 1073, + "query_duration_millis": 118, + "total_count": 1784 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 1210, + "key": "linux" + }, + { + "count": 42, + "key": "ubuntu" + }, + { + "count": 14, + "key": "windows" + }, + { + "count": 5, + "key": "routeros" + }, + { + "count": 2, + "key": "linux_kernel" + }, + { + "count": 1, + "key": "adaptive_security_appliance_software" + }, + { + "count": 1, + "key": "centos" + }, + { + "count": 1, + "key": "debian_linux" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 125, + "total_count": 1784 + } + } + } + }, + "AS210644": { + "name": "AEZA-AS", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 62401, + "key": "22" + }, + { + "count": 35627, + "key": "443" + }, + { + "count": 18220, + "key": "80" + }, + { + "count": 12493, + "key": "2096" + }, + { + "count": 8314, + "key": "8443" + }, + { + "count": 6208, + "key": "8080" + }, + { + "count": 3499, + "key": "2053" + }, + { + "count": 1995, + "key": "2222" + }, + { + "count": 1737, + "key": "3389" + }, + { + "count": 1158, + "key": "53" + } + ], + "is_more_than_total_hits": false, + "other_count": 59626, + "query_duration_millis": 77, + "total_count": 72191 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 61805, + "key": "openssh" + }, + { + "count": 30153, + "key": "nginx" + }, + { + "count": 7299, + "key": "google_web_services" + }, + { + "count": 7299, + "key": "web_server" + }, + { + "count": 5523, + "key": "ghost" + }, + { + "count": 5521, + "key": "app_and_api_protector" + }, + { + "count": 4247, + "key": "express" + }, + { + "count": 3438, + "key": "caddy" + }, + { + "count": 3128, + "key": "waf" + }, + { + "count": 2926, + "key": "cloudflare_load_balancer" + } + ], + "is_more_than_total_hits": false, + "other_count": 34593, + "query_duration_millis": 158, + "total_count": 72191 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 72191, + "key": "BULLETPROOF" + }, + { + "count": 509, + "key": "IPV6" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 238, + "total_count": 72191 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 13117, + "key": "YE2" + }, + { + "count": 13008, + "key": "YE1" + }, + { + "count": 7385, + "key": "invalid2.invalid" + }, + { + "count": 5097, + "key": "YR2" + }, + { + "count": 3278, + "key": "YR1" + }, + { + "count": 2117, + "key": "GeoTrust TLS RSA CA G1" + }, + { + "count": 2056, + "key": "WE1" + }, + { + "count": 1819, + "key": "GlobalSign RSA OV SSL CA 2018" + }, + { + "count": 1341, + "key": "Microsoft TLS G2 RSA CA OCSP 04" + }, + { + "count": 1288, + "key": "GlobalSign ECC OV SSL CA 2018" + } + ], + "is_more_than_total_hits": false, + "other_count": 25046, + "query_duration_millis": 193, + "total_count": 72191 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 60420, + "key": "linux" + }, + { + "count": 719, + "key": "ubuntu" + }, + { + "count": 573, + "key": "windows" + }, + { + "count": 209, + "key": "debian_linux" + }, + { + "count": 84, + "key": "routeros" + }, + { + "count": 83, + "key": "linux_kernel" + }, + { + "count": 34, + "key": "adaptive_security_appliance_software" + }, + { + "count": 14, + "key": "linux_ami" + }, + { + "count": 13, + "key": "centos" + }, + { + "count": 12, + "key": "windows_server" + } + ], + "is_more_than_total_hits": false, + "other_count": 16, + "query_duration_millis": 56, + "total_count": 72191 + } + } + } + }, + "AS138915": { + "name": "KAOPU-HK (Kaopu Cloud HK Limited)", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 7319, + "key": "22" + }, + { + "count": 2669, + "key": "443" + }, + { + "count": 2501, + "key": "80" + }, + { + "count": 2430, + "key": "32080" + }, + { + "count": 2379, + "key": "43080" + }, + { + "count": 2243, + "key": "40003" + }, + { + "count": 2238, + "key": "40801" + }, + { + "count": 2235, + "key": "40803" + }, + { + "count": 2234, + "key": "40804" + }, + { + "count": 2229, + "key": "40810" + } + ], + "is_more_than_total_hits": false, + "other_count": 62162, + "query_duration_millis": 306, + "total_count": 13554 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 7679, + "key": "openssh" + }, + { + "count": 6327, + "key": "openresty" + }, + { + "count": 4526, + "key": "tengine" + }, + { + "count": 3369, + "key": "nginx" + }, + { + "count": 1055, + "key": "http_api" + }, + { + "count": 553, + "key": "http_server" + }, + { + "count": 435, + "key": "express" + }, + { + "count": 430, + "key": "jquery" + }, + { + "count": 309, + "key": "bootstrap" + }, + { + "count": 309, + "key": "openvpn_access_server" + } + ], + "is_more_than_total_hits": false, + "other_count": 4900, + "query_duration_millis": 154, + "total_count": 13554 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 13554, + "key": "BULLETPROOF" + }, + { + "count": 99, + "key": "IPV6" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 470, + "total_count": 13554 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 4619, + "key": "GlobalSign GCC R3 OV TLS CA 2024" + }, + { + "count": 2393, + "key": "localhost" + }, + { + "count": 2346, + "key": "prod-vpn.example.com" + }, + { + "count": 2310, + "key": "GlobalSign GCC R46 OV TLS CA 2025" + }, + { + "count": 2240, + "key": "GlobalSign RSA OV SSL CA 2018" + }, + { + "count": 1206, + "key": "Sectigo Public Server Authentication CA DV R36" + }, + { + "count": 431, + "key": "NONE" + }, + { + "count": 431, + "key": "WoTrus RSA DV SSL CA 2" + }, + { + "count": 361, + "key": "YR1" + }, + { + "count": 345, + "key": "WIN-9QFKHJ39QE9" + } + ], + "is_more_than_total_hits": false, + "other_count": 7531, + "query_duration_millis": 511, + "total_count": 13554 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 6092, + "key": "linux" + }, + { + "count": 626, + "key": "windows" + }, + { + "count": 66, + "key": "routeros" + }, + { + "count": 36, + "key": "ubuntu" + }, + { + "count": 33, + "key": "debian_linux" + }, + { + "count": 31, + "key": "centos" + }, + { + "count": 10, + "key": "adaptive_security_appliance_software" + }, + { + "count": 10, + "key": "proxmox" + }, + { + "count": 4, + "key": "linux_kernel" + }, + { + "count": 3, + "key": "freebsd" + } + ], + "is_more_than_total_hits": false, + "other_count": 10, + "query_duration_millis": 195, + "total_count": 13554 + } + } + } + }, + "AS14956": { + "name": "ROUTERHOSTING (RouterHosting LLC)", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 15480, + "key": "22" + }, + { + "count": 8450, + "key": "443" + }, + { + "count": 7520, + "key": "3389" + }, + { + "count": 7412, + "key": "80" + }, + { + "count": 1091, + "key": "2096" + }, + { + "count": 1021, + "key": "5985" + }, + { + "count": 985, + "key": "135" + }, + { + "count": 842, + "key": "445" + }, + { + "count": 797, + "key": "53" + }, + { + "count": 786, + "key": "8443" + } + ], + "is_more_than_total_hits": false, + "other_count": 20519, + "query_duration_millis": 125, + "total_count": 25654 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 14570, + "key": "openssh" + }, + { + "count": 10034, + "key": "nginx" + }, + { + "count": 2567, + "key": "express" + }, + { + "count": 1582, + "key": "http_server" + }, + { + "count": 1224, + "key": "dovecot" + }, + { + "count": 1124, + "key": "http_api" + }, + { + "count": 859, + "key": "google_web_services" + }, + { + "count": 804, + "key": "web_server" + }, + { + "count": 705, + "key": "caddy" + }, + { + "count": 666, + "key": "jquery" + } + ], + "is_more_than_total_hits": false, + "other_count": 16007, + "query_duration_millis": 91, + "total_count": 25654 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 25654, + "key": "BULLETPROOF" + }, + { + "count": 210, + "key": "IPV6" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 22, + "total_count": 25654 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 2029, + "key": "YE2" + }, + { + "count": 1907, + "key": "YE1" + }, + { + "count": 995, + "key": "windows-Dallas0" + }, + { + "count": 977, + "key": "YR1" + }, + { + "count": 967, + "key": "YR2" + }, + { + "count": 870, + "key": "invalid2.invalid" + }, + { + "count": 429, + "key": "windows-Utah-4g" + }, + { + "count": 378, + "key": "www.example.com" + }, + { + "count": 373, + "key": "windows-Amsterd" + }, + { + "count": 343, + "key": "TRAEFIK DEFAULT CERT" + } + ], + "is_more_than_total_hits": false, + "other_count": 13042, + "query_duration_millis": 160, + "total_count": 25654 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 13776, + "key": "linux" + }, + { + "count": 5506, + "key": "windows" + }, + { + "count": 218, + "key": "ubuntu" + }, + { + "count": 135, + "key": "debian_linux" + }, + { + "count": 101, + "key": "routeros" + }, + { + "count": 30, + "key": "freebsd" + }, + { + "count": 21, + "key": "linux_kernel" + }, + { + "count": 21, + "key": "windows_server" + }, + { + "count": 9, + "key": "proxmox" + }, + { + "count": 8, + "key": "adaptive_security_appliance_software" + } + ], + "is_more_than_total_hits": false, + "other_count": 20, + "query_duration_millis": 126, + "total_count": 25654 + } + } + } + }, + "AS216139": { + "name": "IRONHOST", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 5492, + "key": "22" + }, + { + "count": 3315, + "key": "443" + }, + { + "count": 2125, + "key": "80" + }, + { + "count": 946, + "key": "51821" + }, + { + "count": 782, + "key": "53" + }, + { + "count": 621, + "key": "21" + }, + { + "count": 554, + "key": "2096" + }, + { + "count": 464, + "key": "25" + }, + { + "count": 425, + "key": "110" + }, + { + "count": 410, + "key": "143" + } + ], + "is_more_than_total_hits": false, + "other_count": 8904, + "query_duration_millis": 46, + "total_count": 9100 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 4460, + "key": "openssh" + }, + { + "count": 2997, + "key": "nginx" + }, + { + "count": 1354, + "key": "dovecot" + }, + { + "count": 1069, + "key": "ddos-guard" + }, + { + "count": 933, + "key": "wg-easy" + }, + { + "count": 836, + "key": "exim" + }, + { + "count": 783, + "key": "express" + }, + { + "count": 625, + "key": "google_web_services" + }, + { + "count": 623, + "key": "web_server" + }, + { + "count": 399, + "key": "bind" + } + ], + "is_more_than_total_hits": false, + "other_count": 5971, + "query_duration_millis": 277, + "total_count": 9100 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 9100, + "key": "BULLETPROOF" + }, + { + "count": 4, + "key": "IPV6" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 52, + "total_count": 9100 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 701, + "key": "invalid2.invalid" + }, + { + "count": 634, + "key": "YE1" + }, + { + "count": 604, + "key": "YE2" + }, + { + "count": 404, + "key": "GlobalSign GCC R6 AlphaSSL CA 2025" + }, + { + "count": 231, + "key": "YR2" + }, + { + "count": 220, + "key": "YR1" + }, + { + "count": 203, + "key": "WE1" + }, + { + "count": 189, + "key": "idrac" + }, + { + "count": 179, + "key": "MySQL_Server_5.7.22-22_Auto_Generated_CA_Certificate" + }, + { + "count": 177, + "key": "DigiCert Global G2 TLS RSA SHA256 2020 CA1" + } + ], + "is_more_than_total_hits": false, + "other_count": 3551, + "query_duration_millis": 173, + "total_count": 9100 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 3886, + "key": "linux" + }, + { + "count": 184, + "key": "ubuntu" + }, + { + "count": 55, + "key": "enterprise_linux" + }, + { + "count": 53, + "key": "routeros" + }, + { + "count": 32, + "key": "debian_linux" + }, + { + "count": 26, + "key": "centos" + }, + { + "count": 16, + "key": "adaptive_security_appliance_software" + }, + { + "count": 4, + "key": "freebsd" + }, + { + "count": 3, + "key": "linux_kernel" + }, + { + "count": 1, + "key": "linux_ami" + } + ], + "is_more_than_total_hits": false, + "other_count": 1, + "query_duration_millis": 1440, + "total_count": 9100 + } + } + } + }, + "AS51852": { + "name": "PLI-AS", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 4338, + "key": "443" + }, + { + "count": 4060, + "key": "22" + }, + { + "count": 3590, + "key": "161" + }, + { + "count": 2799, + "key": "80" + }, + { + "count": 1886, + "key": "123" + }, + { + "count": 1547, + "key": "53" + }, + { + "count": 829, + "key": "25" + }, + { + "count": 829, + "key": "500" + }, + { + "count": 798, + "key": "21" + }, + { + "count": 796, + "key": "143" + } + ], + "is_more_than_total_hits": false, + "other_count": 15977, + "query_duration_millis": 966, + "total_count": 8641 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 4731, + "key": "nginx" + }, + { + "count": 4036, + "key": "openssh" + }, + { + "count": 2536, + "key": "dovecot" + }, + { + "count": 1391, + "key": "exim" + }, + { + "count": 819, + "key": "openvpn_access_server" + }, + { + "count": 816, + "key": "cpanel" + }, + { + "count": 753, + "key": "bind" + }, + { + "count": 740, + "key": "http_server" + }, + { + "count": 598, + "key": "ceph" + }, + { + "count": 512, + "key": "webmail" + } + ], + "is_more_than_total_hits": false, + "other_count": 8305, + "query_duration_millis": 143, + "total_count": 8641 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 8641, + "key": "BULLETPROOF" + }, + { + "count": 39, + "key": "IPV6" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 131, + "total_count": 8641 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 1906, + "key": "server" + }, + { + "count": 1451, + "key": "YR2" + }, + { + "count": 962, + "key": "YR1" + }, + { + "count": 903, + "key": "Hydra Authentication RSA SubCA #155" + }, + { + "count": 804, + "key": "server.domain.com" + }, + { + "count": 534, + "key": "YE2" + }, + { + "count": 405, + "key": "YE1" + }, + { + "count": 348, + "key": "server.ibras.eu" + }, + { + "count": 295, + "key": "''" + }, + { + "count": 263, + "key": "invalid2.invalid" + } + ], + "is_more_than_total_hits": false, + "other_count": 4001, + "query_duration_millis": 132, + "total_count": 8641 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 3029, + "key": "linux" + }, + { + "count": 208, + "key": "windows" + }, + { + "count": 157, + "key": "proxmox" + }, + { + "count": 129, + "key": "enterprise_linux" + }, + { + "count": 47, + "key": "ubuntu" + }, + { + "count": 36, + "key": "debian_linux" + }, + { + "count": 32, + "key": "freebsd" + }, + { + "count": 26, + "key": "centos" + }, + { + "count": 22, + "key": "routeros" + }, + { + "count": 17, + "key": "vmware_esxi_server" + } + ], + "is_more_than_total_hits": false, + "other_count": 21, + "query_duration_millis": 177, + "total_count": 8641 + } + } + } + }, + "AS400992": { + "name": "ZHOUYISAT-COMMUNICATIONS", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 6669, + "key": "22" + }, + { + "count": 3214, + "key": "443" + }, + { + "count": 1298, + "key": "80" + }, + { + "count": 1045, + "key": "2096" + }, + { + "count": 494, + "key": "8443" + }, + { + "count": 193, + "key": "2222" + }, + { + "count": 192, + "key": "8080" + }, + { + "count": 183, + "key": "3389" + }, + { + "count": 174, + "key": "2053" + }, + { + "count": 121, + "key": "25" + } + ], + "is_more_than_total_hits": false, + "other_count": 4258, + "query_duration_millis": 61, + "total_count": 7781 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 5750, + "key": "openssh" + }, + { + "count": 1959, + "key": "nginx" + }, + { + "count": 909, + "key": "google_web_services" + }, + { + "count": 906, + "key": "web_server" + }, + { + "count": 434, + "key": "app_and_api_protector" + }, + { + "count": 434, + "key": "ghost" + }, + { + "count": 321, + "key": "waf" + }, + { + "count": 306, + "key": "cloudflare_load_balancer" + }, + { + "count": 266, + "key": "caddy" + }, + { + "count": 237, + "key": "express" + } + ], + "is_more_than_total_hits": false, + "other_count": 2595, + "query_duration_millis": 179, + "total_count": 7781 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 7781, + "key": "BULLETPROOF" + }, + { + "count": 41, + "key": "IPV6" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 41, + "total_count": 7781 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 998, + "key": "YE2" + }, + { + "count": 908, + "key": "invalid2.invalid" + }, + { + "count": 877, + "key": "YE1" + }, + { + "count": 253, + "key": "DigiCert Global G2 TLS RSA SHA256 2020 CA1" + }, + { + "count": 244, + "key": "YR2" + }, + { + "count": 198, + "key": "WE1" + }, + { + "count": 191, + "key": "YR1" + }, + { + "count": 136, + "key": "GeoTrust TLS RSA CA G1" + }, + { + "count": 105, + "key": "GlobalSign ECC OV SSL CA 2018" + }, + { + "count": 100, + "key": "Sectigo Public Server Authentication CA DV E36" + } + ], + "is_more_than_total_hits": false, + "other_count": 2008, + "query_duration_millis": 122, + "total_count": 7781 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 5522, + "key": "linux" + }, + { + "count": 63, + "key": "ubuntu" + }, + { + "count": 44, + "key": "windows" + }, + { + "count": 26, + "key": "debian_linux" + }, + { + "count": 17, + "key": "routeros" + }, + { + "count": 9, + "key": "adaptive_security_appliance_software" + }, + { + "count": 5, + "key": "linux_kernel" + }, + { + "count": 2, + "key": "centos" + }, + { + "count": 2, + "key": "freebsd" + }, + { + "count": 1, + "key": "linux_ami" + } + ], + "is_more_than_total_hits": false, + "other_count": 1, + "query_duration_millis": 28, + "total_count": 7781 + } + } + } + }, + "AS33993": { + "name": "UFO-AS", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 3135, + "key": "22" + }, + { + "count": 2062, + "key": "443" + }, + { + "count": 2022, + "key": "80" + }, + { + "count": 1411, + "key": "53" + }, + { + "count": 713, + "key": "21" + }, + { + "count": 601, + "key": "3000" + }, + { + "count": 555, + "key": "1500" + }, + { + "count": 548, + "key": "25" + }, + { + "count": 523, + "key": "993" + }, + { + "count": 512, + "key": "143" + } + ], + "is_more_than_total_hits": false, + "other_count": 9561, + "query_duration_millis": 362, + "total_count": 4842 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 3759, + "key": "nginx" + }, + { + "count": 3248, + "key": "openssh" + }, + { + "count": 1719, + "key": "dovecot" + }, + { + "count": 1155, + "key": "exim" + }, + { + "count": 1141, + "key": "bind" + }, + { + "count": 570, + "key": "proftpd" + }, + { + "count": 384, + "key": "express" + }, + { + "count": 290, + "key": "python" + }, + { + "count": 230, + "key": "aiohttp" + }, + { + "count": 228, + "key": "bootstrap" + } + ], + "is_more_than_total_hits": false, + "other_count": 3414, + "query_duration_millis": 42, + "total_count": 4842 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 4842, + "key": "BULLETPROOF" + }, + { + "count": 9, + "key": "IPV6" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 50, + "total_count": 4842 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 769, + "key": "YR2" + }, + { + "count": 715, + "key": "YR1" + }, + { + "count": 516, + "key": "YE2" + }, + { + "count": 487, + "key": "YE1" + }, + { + "count": 322, + "key": "ssl.by" + }, + { + "count": 242, + "key": "Sectigo Public Server Authentication CA DV E36" + }, + { + "count": 173, + "key": "issssrt.ru" + }, + { + "count": 124, + "key": "GlobalSign GCC R3 DV TLS CA 2020" + }, + { + "count": 113, + "key": "invalid2.invalid" + }, + { + "count": 105, + "key": "TRAEFIK DEFAULT CERT" + } + ], + "is_more_than_total_hits": false, + "other_count": 4885, + "query_duration_millis": 107, + "total_count": 4842 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 2989, + "key": "linux" + }, + { + "count": 132, + "key": "ubuntu" + }, + { + "count": 57, + "key": "windows" + }, + { + "count": 38, + "key": "enterprise_linux" + }, + { + "count": 23, + "key": "debian_linux" + }, + { + "count": 21, + "key": "routeros" + }, + { + "count": 6, + "key": "freebsd" + }, + { + "count": 5, + "key": "centos" + }, + { + "count": 4, + "key": "windows_server" + }, + { + "count": 3, + "key": "linux_kernel" + } + ], + "is_more_than_total_hits": false, + "other_count": 5, + "query_duration_millis": 335, + "total_count": 4842 + } + } + } + }, + "AS51396": { + "name": "PFCLOUD (Pfcloud UG)", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 838, + "key": "22" + }, + { + "count": 360, + "key": "80" + }, + { + "count": 281, + "key": "443" + }, + { + "count": 129, + "key": "3389" + }, + { + "count": 100, + "key": "1407" + }, + { + "count": 99, + "key": "11407" + }, + { + "count": 94, + "key": "135" + }, + { + "count": 93, + "key": "445" + }, + { + "count": 87, + "key": "5985" + }, + { + "count": 84, + "key": "139" + } + ], + "is_more_than_total_hits": false, + "other_count": 3342, + "query_duration_millis": 457, + "total_count": 1917 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 744, + "key": "openssh" + }, + { + "count": 398, + "key": "nginx" + }, + { + "count": 191, + "key": "http_server" + }, + { + "count": 129, + "key": "http_api" + }, + { + "count": 105, + "key": "express" + }, + { + "count": 69, + "key": "php" + }, + { + "count": 53, + "key": "python" + }, + { + "count": 48, + "key": "jquery" + }, + { + "count": 48, + "key": "pve" + }, + { + "count": 48, + "key": "virtual_environment" + } + ], + "is_more_than_total_hits": false, + "other_count": 801, + "query_duration_millis": 1064, + "total_count": 1917 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 1917, + "key": "BULLETPROOF" + }, + { + "count": 15, + "key": "IPV6" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 159, + "total_count": 1917 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 110, + "key": "YE1" + }, + { + "count": 105, + "key": "YE2" + }, + { + "count": 45, + "key": "YR2" + }, + { + "count": 42, + "key": "YR1" + }, + { + "count": 27, + "key": "WIN-9QL4SDRB93L" + }, + { + "count": 24, + "key": "localhost" + }, + { + "count": 20, + "key": "Proxmox Virtual Environment" + }, + { + "count": 20, + "key": "TRAEFIK DEFAULT CERT" + }, + { + "count": 20, + "key": "WIN-IK7N6SD2UBU" + }, + { + "count": 17, + "key": "invalid2.invalid" + } + ], + "is_more_than_total_hits": false, + "other_count": 440, + "query_duration_millis": 126, + "total_count": 1917 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 668, + "key": "linux" + }, + { + "count": 85, + "key": "windows" + }, + { + "count": 39, + "key": "debian_linux" + }, + { + "count": 22, + "key": "proxmox" + }, + { + "count": 13, + "key": "ubuntu" + }, + { + "count": 3, + "key": "centos" + }, + { + "count": 3, + "key": "routeros" + }, + { + "count": 1, + "key": "linux_kernel" + }, + { + "count": 1, + "key": "windows_server" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 72, + "total_count": 1917 + } + } + } + }, + "AS213702": { + "name": "QWINS-LTD", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 6376, + "key": "22" + }, + { + "count": 4393, + "key": "443" + }, + { + "count": 2150, + "key": "80" + }, + { + "count": 2020, + "key": "2222" + }, + { + "count": 820, + "key": "8443" + }, + { + "count": 671, + "key": "2096" + }, + { + "count": 404, + "key": "3389" + }, + { + "count": 242, + "key": "8080" + }, + { + "count": 193, + "key": "2053" + }, + { + "count": 160, + "key": "9443" + } + ], + "is_more_than_total_hits": false, + "other_count": 4685, + "query_duration_millis": 3206, + "total_count": 7381 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 6147, + "key": "openssh" + }, + { + "count": 3386, + "key": "nginx" + }, + { + "count": 621, + "key": "caddy" + }, + { + "count": 522, + "key": "google_web_services" + }, + { + "count": 521, + "key": "web_server" + }, + { + "count": 472, + "key": "app_and_api_protector" + }, + { + "count": 472, + "key": "ghost" + }, + { + "count": 333, + "key": "express" + }, + { + "count": 266, + "key": "waf" + }, + { + "count": 254, + "key": "cloudflare_load_balancer" + } + ], + "is_more_than_total_hits": false, + "other_count": 2854, + "query_duration_millis": 37, + "total_count": 7381 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 7381, + "key": "BULLETPROOF" + }, + { + "count": 16, + "key": "IPV6" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 27, + "total_count": 7381 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 1187, + "key": "YE2" + }, + { + "count": 1098, + "key": "YE1" + }, + { + "count": 768, + "key": "2LqvyXLUXjAf2MoZx6VEPgJuz1349naDyLo" + }, + { + "count": 524, + "key": "invalid2.invalid" + }, + { + "count": 331, + "key": "YR2" + }, + { + "count": 234, + "key": "YR1" + }, + { + "count": 217, + "key": "GeoTrust TLS RSA CA G1" + }, + { + "count": 193, + "key": "zAqJHcz8C2V0TC9uVVmwYr8jbL2sjgaT_5" + }, + { + "count": 185, + "key": "NvJhHp68p5mjSuW_EK9Lab6bH9" + }, + { + "count": 169, + "key": "WE1" + } + ], + "is_more_than_total_hits": false, + "other_count": 3494, + "query_duration_millis": 144, + "total_count": 7381 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 6029, + "key": "linux" + }, + { + "count": 98, + "key": "windows" + }, + { + "count": 63, + "key": "ubuntu" + }, + { + "count": 14, + "key": "debian_linux" + }, + { + "count": 10, + "key": "linux_kernel" + }, + { + "count": 1, + "key": "enterprise_linux" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 49, + "total_count": 7381 + } + } + } + }, + "AS216246": { + "name": "RU-AEZA-AS", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 5672, + "key": "22" + }, + { + "count": 4259, + "key": "443" + }, + { + "count": 3282, + "key": "80" + }, + { + "count": 704, + "key": "2096" + }, + { + "count": 693, + "key": "8443" + }, + { + "count": 390, + "key": "8080" + }, + { + "count": 368, + "key": "2222" + }, + { + "count": 310, + "key": "3389" + }, + { + "count": 193, + "key": "3000" + }, + { + "count": 179, + "key": "3478" + } + ], + "is_more_than_total_hits": false, + "other_count": 5444, + "query_duration_millis": 519, + "total_count": 7024 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 5230, + "key": "openssh" + }, + { + "count": 5040, + "key": "nginx" + }, + { + "count": 642, + "key": "caddy" + }, + { + "count": 501, + "key": "express" + }, + { + "count": 284, + "key": "dovecot" + }, + { + "count": 261, + "key": "ghost" + }, + { + "count": 260, + "key": "app_and_api_protector" + }, + { + "count": 238, + "key": "traefik_proxy" + }, + { + "count": 232, + "key": "next.js" + }, + { + "count": 221, + "key": "next\\.js" + } + ], + "is_more_than_total_hits": false, + "other_count": 3954, + "query_duration_millis": 92, + "total_count": 7024 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 7024, + "key": "BULLETPROOF" + }, + { + "count": 136, + "key": "IPV6" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 112, + "total_count": 7024 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 1388, + "key": "YE1" + }, + { + "count": 1307, + "key": "YE2" + }, + { + "count": 349, + "key": "YR2" + }, + { + "count": 275, + "key": "YR1" + }, + { + "count": 273, + "key": "GlobalSign ECC OV SSL CA 2018" + }, + { + "count": 239, + "key": "TRAEFIK DEFAULT CERT" + }, + { + "count": 202, + "key": "invalid2.invalid" + }, + { + "count": 155, + "key": "GlobalSign RSA OV SSL CA 2018" + }, + { + "count": 119, + "key": "WE1" + }, + { + "count": 113, + "key": "WR1" + } + ], + "is_more_than_total_hits": false, + "other_count": 2483, + "query_duration_millis": 186, + "total_count": 7024 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 5090, + "key": "linux" + }, + { + "count": 220, + "key": "ubuntu" + }, + { + "count": 135, + "key": "windows" + }, + { + "count": 30, + "key": "debian_linux" + }, + { + "count": 10, + "key": "routeros" + }, + { + "count": 7, + "key": "linux_kernel" + }, + { + "count": 3, + "key": "proxmox" + }, + { + "count": 2, + "key": "adaptive_security_appliance_software" + }, + { + "count": 2, + "key": "windows_server" + }, + { + "count": 1, + "key": "centos" + } + ], + "is_more_than_total_hits": false, + "other_count": 2, + "query_duration_millis": 152, + "total_count": 7024 + } + } + } + }, + "AS200651": { + "name": "FLOKINET", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 2841, + "key": "22" + }, + { + "count": 2118, + "key": "443" + }, + { + "count": 1917, + "key": "80" + }, + { + "count": 380, + "key": "53" + }, + { + "count": 282, + "key": "25" + }, + { + "count": 234, + "key": "587" + }, + { + "count": 222, + "key": "993" + }, + { + "count": 189, + "key": "111" + }, + { + "count": 186, + "key": "143" + }, + { + "count": 168, + "key": "110" + } + ], + "is_more_than_total_hits": false, + "other_count": 4831, + "query_duration_millis": 180, + "total_count": 3806 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 2825, + "key": "nginx" + }, + { + "count": 2589, + "key": "openssh" + }, + { + "count": 585, + "key": "dovecot" + }, + { + "count": 465, + "key": "http_server" + }, + { + "count": 361, + "key": "cpanel" + }, + { + "count": 303, + "key": "express" + }, + { + "count": 270, + "key": "exim" + }, + { + "count": 258, + "key": "caddy" + }, + { + "count": 247, + "key": "openresty" + }, + { + "count": 196, + "key": "authoritative_server" + } + ], + "is_more_than_total_hits": false, + "other_count": 3469, + "query_duration_millis": 79, + "total_count": 3806 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 3806, + "key": "BULLETPROOF" + }, + { + "count": 130, + "key": "IPV6" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 20, + "total_count": 3806 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 725, + "key": "YE1" + }, + { + "count": 637, + "key": "YR2" + }, + { + "count": 612, + "key": "YE2" + }, + { + "count": 562, + "key": "YR1" + }, + { + "count": 131, + "key": "TRAEFIK DEFAULT CERT" + }, + { + "count": 99, + "key": "invalid2.invalid" + }, + { + "count": 59, + "key": "localhost" + }, + { + "count": 47, + "key": "WE1" + }, + { + "count": 40, + "key": "GlobalSign Atlas R3 DV TLS CA 2025 Q3" + }, + { + "count": 40, + "key": "www.example.com" + } + ], + "is_more_than_total_hits": false, + "other_count": 1621, + "query_duration_millis": 128, + "total_count": 3806 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 2167, + "key": "linux" + }, + { + "count": 56, + "key": "ubuntu" + }, + { + "count": 48, + "key": "debian_linux" + }, + { + "count": 30, + "key": "proxmox" + }, + { + "count": 27, + "key": "windows" + }, + { + "count": 10, + "key": "freebsd" + }, + { + "count": 8, + "key": "routeros" + }, + { + "count": 6, + "key": "enterprise_linux" + }, + { + "count": 6, + "key": "openbsd" + }, + { + "count": 5, + "key": "centos" + } + ], + "is_more_than_total_hits": false, + "other_count": 8, + "query_duration_millis": 162, + "total_count": 3806 + } + } + } + }, + "AS30823": { + "name": "AUROLOGIC (aurologic GmbH)", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 1203, + "key": "22" + }, + { + "count": 808, + "key": "443" + }, + { + "count": 614, + "key": "80" + }, + { + "count": 457, + "key": "53" + }, + { + "count": 388, + "key": "27015" + }, + { + "count": 296, + "key": "3389" + }, + { + "count": 109, + "key": "25" + }, + { + "count": 109, + "key": "8443" + }, + { + "count": 95, + "key": "2096" + }, + { + "count": 84, + "key": "8080" + } + ], + "is_more_than_total_hits": false, + "other_count": 2409, + "query_duration_millis": 98, + "total_count": 2036 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 1113, + "key": "openssh" + }, + { + "count": 776, + "key": "nginx" + }, + { + "count": 198, + "key": "express" + }, + { + "count": 137, + "key": "http_server" + }, + { + "count": 102, + "key": "google_web_services" + }, + { + "count": 102, + "key": "web_server" + }, + { + "count": 92, + "key": "dovecot" + }, + { + "count": 92, + "key": "http_api" + }, + { + "count": 69, + "key": "caddy" + }, + { + "count": 66, + "key": "cloudflare_load_balancer" + } + ], + "is_more_than_total_hits": false, + "other_count": 1549, + "query_duration_millis": 144, + "total_count": 2036 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 2036, + "key": "BULLETPROOF" + }, + { + "count": 28, + "key": "IPV6" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 421, + "total_count": 2036 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 201, + "key": "YE2" + }, + { + "count": 198, + "key": "YE1" + }, + { + "count": 108, + "key": "invalid2.invalid" + }, + { + "count": 97, + "key": "YR2" + }, + { + "count": 92, + "key": "YR1" + }, + { + "count": 62, + "key": "windows-DE-Fran" + }, + { + "count": 58, + "key": "172.86.93" + }, + { + "count": 56, + "key": "windows-Frankfu" + }, + { + "count": 51, + "key": "GoGetSSL RSA DV CA" + }, + { + "count": 36, + "key": "WE1" + } + ], + "is_more_than_total_hits": false, + "other_count": 986, + "query_duration_millis": 184, + "total_count": 2036 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 1025, + "key": "linux" + }, + { + "count": 162, + "key": "windows" + }, + { + "count": 21, + "key": "proxmox" + }, + { + "count": 17, + "key": "routeros" + }, + { + "count": 15, + "key": "debian_linux" + }, + { + "count": 11, + "key": "ubuntu" + }, + { + "count": 9, + "key": "centos" + }, + { + "count": 6, + "key": "freebsd" + }, + { + "count": 4, + "key": "adaptive_security_appliance_software" + }, + { + "count": 3, + "key": "megarac_spx" + } + ], + "is_more_than_total_hits": false, + "other_count": 6, + "query_duration_millis": 338, + "total_count": 2036 + } + } + } + }, + "AS140666": { + "name": "ADPL-AS-AP (ANY DIGITAL PTE. LTD.)", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 1652, + "key": "22" + }, + { + "count": 694, + "key": "443" + }, + { + "count": 535, + "key": "80" + }, + { + "count": 376, + "key": "6004" + }, + { + "count": 376, + "key": "6011" + }, + { + "count": 375, + "key": "6001" + }, + { + "count": 375, + "key": "6006" + }, + { + "count": 375, + "key": "6007" + }, + { + "count": 375, + "key": "6010" + }, + { + "count": 375, + "key": "6012" + } + ], + "is_more_than_total_hits": false, + "other_count": 12271, + "query_duration_millis": 32, + "total_count": 2805 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 1615, + "key": "openssh" + }, + { + "count": 1378, + "key": "nginx" + }, + { + "count": 146, + "key": "openresty" + }, + { + "count": 131, + "key": "http_api" + }, + { + "count": 80, + "key": "jquery" + }, + { + "count": 74, + "key": "internet_information_services" + }, + { + "count": 58, + "key": "tengine" + }, + { + "count": 54, + "key": "bootstrap" + }, + { + "count": 39, + "key": "express" + }, + { + "count": 36, + "key": "node_exporter" + } + ], + "is_more_than_total_hits": false, + "other_count": 575, + "query_duration_millis": 168, + "total_count": 2805 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 2805, + "key": "BULLETPROOF" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 244, + "total_count": 2805 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 338, + "key": "Sectigo Public Server Authentication CA DV R36" + }, + { + "count": 183, + "key": "NONE" + }, + { + "count": 135, + "key": "RapidSSL TLS RSA CA G1" + }, + { + "count": 109, + "key": "tudog_node_agent._reserved.bytefcdn.com" + }, + { + "count": 107, + "key": "RTCTS" + }, + { + "count": 102, + "key": "GeoTrust TLS RSA CA G1" + }, + { + "count": 92, + "key": "QY" + }, + { + "count": 65, + "key": "RapidSSL TLS ECC CA G1" + }, + { + "count": 60, + "key": "tls.internal.ypc.org" + }, + { + "count": 47, + "key": "GlobalSign GCC R3 OV TLS CA 2024" + } + ], + "is_more_than_total_hits": false, + "other_count": 717, + "query_duration_millis": 67, + "total_count": 2805 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 1089, + "key": "linux" + }, + { + "count": 95, + "key": "windows" + }, + { + "count": 13, + "key": "ubuntu" + }, + { + "count": 3, + "key": "routeros" + }, + { + "count": 2, + "key": "adaptive_security_appliance_software" + }, + { + "count": 2, + "key": "debian_linux" + }, + { + "count": 1, + "key": "linux_kernel" + }, + { + "count": 1, + "key": "proxmox" + }, + { + "count": 1, + "key": "windows_server_2008_r2" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 20, + "total_count": 2805 + } + } + } + }, + "AS214351": { + "name": "FEMOIT", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 547, + "key": "80" + }, + { + "count": 536, + "key": "22" + }, + { + "count": 340, + "key": "443" + }, + { + "count": 94, + "key": "21" + }, + { + "count": 93, + "key": "53" + }, + { + "count": 89, + "key": "25" + }, + { + "count": 87, + "key": "8085" + }, + { + "count": 86, + "key": "22509" + }, + { + "count": 81, + "key": "143" + }, + { + "count": 81, + "key": "993" + } + ], + "is_more_than_total_hits": false, + "other_count": 1019, + "query_duration_millis": 291, + "total_count": 712 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 795, + "key": "nginx" + }, + { + "count": 586, + "key": "openssh" + }, + { + "count": 251, + "key": "express" + }, + { + "count": 216, + "key": "dovecot" + }, + { + "count": 149, + "key": "fastpanel" + }, + { + "count": 147, + "key": "exim" + }, + { + "count": 81, + "key": "http_server" + }, + { + "count": 56, + "key": "proftpd" + }, + { + "count": 37, + "key": "http_api" + }, + { + "count": 37, + "key": "next.js" + } + ], + "is_more_than_total_hits": false, + "other_count": 394, + "query_duration_millis": 40, + "total_count": 712 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 712, + "key": "BULLETPROOF" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 161, + "total_count": 712 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 97, + "key": "etc" + }, + { + "count": 60, + "key": "YR2" + }, + { + "count": 53, + "key": "vm4660.defhost.co" + }, + { + "count": 51, + "key": "YR1" + }, + { + "count": 39, + "key": "parking" + }, + { + "count": 37, + "key": "FASTPANEL" + }, + { + "count": 34, + "key": "YE2" + }, + { + "count": 31, + "key": "misp.goodip" + }, + { + "count": 27, + "key": "YE1" + }, + { + "count": 15, + "key": "tech0.test" + } + ], + "is_more_than_total_hits": false, + "other_count": 545, + "query_duration_millis": 153, + "total_count": 712 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 516, + "key": "linux" + }, + { + "count": 33, + "key": "windows" + }, + { + "count": 6, + "key": "linux_kernel" + }, + { + "count": 4, + "key": "ubuntu" + }, + { + "count": 1, + "key": "centos" + }, + { + "count": 1, + "key": "debian_linux" + }, + { + "count": 1, + "key": "windows_server" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 162, + "total_count": 712 + } + } + } + }, + "AS198953": { + "name": "PROTON66", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 166, + "key": "3389" + }, + { + "count": 161, + "key": "22" + }, + { + "count": 89, + "key": "80" + }, + { + "count": 83, + "key": "443" + }, + { + "count": 52, + "key": "135" + }, + { + "count": 41, + "key": "137" + }, + { + "count": 39, + "key": "53" + }, + { + "count": 36, + "key": "139" + }, + { + "count": 35, + "key": "5985" + }, + { + "count": 25, + "key": "21" + } + ], + "is_more_than_total_hits": false, + "other_count": 374, + "query_duration_millis": 185, + "total_count": 360 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 128, + "key": "nginx" + }, + { + "count": 123, + "key": "openssh" + }, + { + "count": 63, + "key": "dovecot" + }, + { + "count": 44, + "key": "http_api" + }, + { + "count": 36, + "key": "express" + }, + { + "count": 31, + "key": "http_server" + }, + { + "count": 30, + "key": "fastpanel" + }, + { + "count": 24, + "key": "exim" + }, + { + "count": 22, + "key": "requirejs" + }, + { + "count": 19, + "key": "parallels_plesk_panel" + } + ], + "is_more_than_total_hits": false, + "other_count": 231, + "query_duration_millis": 146, + "total_count": 360 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 360, + "key": "BULLETPROOF" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 923, + "total_count": 360 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 23, + "key": "Plesk" + }, + { + "count": 19, + "key": "YR1" + }, + { + "count": 16, + "key": "etc" + }, + { + "count": 11, + "key": "AnyDesk Client" + }, + { + "count": 10, + "key": "localhost" + }, + { + "count": 9, + "key": "R11" + }, + { + "count": 9, + "key": "parking" + }, + { + "count": 8, + "key": "R12" + }, + { + "count": 8, + "key": "YR2" + }, + { + "count": 8, + "key": "test" + } + ], + "is_more_than_total_hits": false, + "other_count": 272, + "query_duration_millis": 147, + "total_count": 360 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 117, + "key": "linux" + }, + { + "count": 41, + "key": "windows" + }, + { + "count": 4, + "key": "ubuntu" + }, + { + "count": 3, + "key": "debian_linux" + }, + { + "count": 2, + "key": "proxmox" + }, + { + "count": 1, + "key": "adaptive_security_appliance_software" + }, + { + "count": 1, + "key": "freenas_firmware" + }, + { + "count": 1, + "key": "ios" + }, + { + "count": 1, + "key": "linux_kernel" + }, + { + "count": 1, + "key": "routeros" + } + ], + "is_more_than_total_hits": false, + "other_count": 2, + "query_duration_millis": 25, + "total_count": 360 + } + } + } + }, + "AS200593": { + "name": "PROSPERO-AS", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 201, + "key": "22" + }, + { + "count": 133, + "key": "3389" + }, + { + "count": 113, + "key": "80" + }, + { + "count": 81, + "key": "443" + }, + { + "count": 38, + "key": "53" + }, + { + "count": 26, + "key": "135" + }, + { + "count": 26, + "key": "5985" + }, + { + "count": 23, + "key": "21" + }, + { + "count": 21, + "key": "25" + }, + { + "count": 20, + "key": "143" + } + ], + "is_more_than_total_hits": false, + "other_count": 310, + "query_duration_millis": 245, + "total_count": 348 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 150, + "key": "nginx" + }, + { + "count": 137, + "key": "openssh" + }, + { + "count": 60, + "key": "dovecot" + }, + { + "count": 35, + "key": "parallels_plesk_panel" + }, + { + "count": 35, + "key": "prototype" + }, + { + "count": 35, + "key": "requirejs" + }, + { + "count": 33, + "key": "express" + }, + { + "count": 30, + "key": "http_server" + }, + { + "count": 29, + "key": "http_api" + }, + { + "count": 24, + "key": "plesk" + } + ], + "is_more_than_total_hits": false, + "other_count": 180, + "query_duration_millis": 32, + "total_count": 348 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 348, + "key": "BULLETPROOF" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 97, + "total_count": 348 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 42, + "key": "Plesk" + }, + { + "count": 29, + "key": "YR1" + }, + { + "count": 24, + "key": "YR2" + }, + { + "count": 13, + "key": "YE1" + }, + { + "count": 12, + "key": "R13" + }, + { + "count": 9, + "key": "TRAEFIK DEFAULT CERT" + }, + { + "count": 7, + "key": "DESKTOP-GKGI28A" + }, + { + "count": 6, + "key": "R12" + }, + { + "count": 6, + "key": "ckicksp-1.example.com" + }, + { + "count": 6, + "key": "devin-coo-1.example.com" + } + ], + "is_more_than_total_hits": false, + "other_count": 207, + "query_duration_millis": 183, + "total_count": 348 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 138, + "key": "linux" + }, + { + "count": 26, + "key": "windows" + }, + { + "count": 3, + "key": "proxmox" + }, + { + "count": 2, + "key": "debian_linux" + }, + { + "count": 1, + "key": "ubuntu" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 262, + "total_count": 348 + } + } + } + }, + "AS214940": { + "name": "KPRONET", + "agg": { + "host.services.port": { + "result": { + "buckets": [], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 118, + "total_count": 0 + } + }, + "host.services.software.product": { + "result": { + "buckets": [], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 39, + "total_count": 0 + } + }, + "host.labels.value": { + "result": { + "buckets": [], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 1001, + "total_count": 0 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 126, + "total_count": 0 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 568, + "total_count": 0 + } + } + } + }, + "AS206728": { + "name": "MEDIALAND-AS", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 7, + "key": "443" + }, + { + "count": 6, + "key": "80" + }, + { + "count": 3, + "key": "53" + }, + { + "count": 2, + "key": "22" + }, + { + "count": 2, + "key": "445" + }, + { + "count": 2, + "key": "5910" + }, + { + "count": 2, + "key": "5934" + }, + { + "count": 1, + "key": "135" + }, + { + "count": 1, + "key": "139" + }, + { + "count": 1, + "key": "500" + } + ], + "is_more_than_total_hits": false, + "other_count": 7, + "query_duration_millis": 26, + "total_count": 20 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 5, + "key": "nginx" + }, + { + "count": 4, + "key": "http_api" + }, + { + "count": 2, + "key": "asp.net" + }, + { + "count": 2, + "key": "asp\\.net" + }, + { + "count": 2, + "key": "internet_information_services" + }, + { + "count": 1, + "key": "moment" + }, + { + "count": 1, + "key": "openssh" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 89, + "total_count": 20 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 20, + "key": "BULLETPROOF" + }, + { + "count": 6, + "key": "IPV6" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 777, + "total_count": 20 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 2, + "key": "GlobalSign RSA OV SSL CA 2018" + }, + { + "count": 1, + "key": "YE1" + }, + { + "count": 1, + "key": "hotelsoft.cer" + }, + { + "count": 1, + "key": "invalid2.invalid" + }, + { + "count": 1, + "key": "v673" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 132, + "total_count": 20 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 6, + "key": "windows" + }, + { + "count": 1, + "key": "linux" + }, + { + "count": 1, + "key": "routeros" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 58, + "total_count": 20 + } + } + } + }, + "AS211720": { + "name": "Datashield, Inc.", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 28, + "key": "22" + }, + { + "count": 19, + "key": "3389" + }, + { + "count": 14, + "key": "179" + }, + { + "count": 9, + "key": "80" + }, + { + "count": 7, + "key": "443" + }, + { + "count": 6, + "key": "111" + }, + { + "count": 6, + "key": "5985" + }, + { + "count": 4, + "key": "8081" + }, + { + "count": 3, + "key": "8080" + }, + { + "count": 2, + "key": "135" + } + ], + "is_more_than_total_hits": false, + "other_count": 14, + "query_duration_millis": 260, + "total_count": 50 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 25, + "key": "openssh" + }, + { + "count": 11, + "key": "nginx" + }, + { + "count": 6, + "key": "http_api" + }, + { + "count": 2, + "key": "mariadb" + }, + { + "count": 2, + "key": "tor" + }, + { + "count": 1, + "key": "caddy" + }, + { + "count": 1, + "key": "dropbear_ssh" + }, + { + "count": 1, + "key": "gunicorn" + }, + { + "count": 1, + "key": "http_server" + }, + { + "count": 1, + "key": "libupnp" + } + ], + "is_more_than_total_hits": false, + "other_count": 2, + "query_duration_millis": 111, + "total_count": 50 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 50, + "key": "BULLETPROOF" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 80, + "total_count": 50 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 3, + "key": "IPMI" + }, + { + "count": 2, + "key": "FREE" + }, + { + "count": 1, + "key": "WIN-JDCEOBUFJUS" + }, + { + "count": 1, + "key": "WIN-JP7KUDECHOR" + }, + { + "count": 1, + "key": "YE1" + }, + { + "count": 1, + "key": "YE2" + }, + { + "count": 1, + "key": "YR2" + }, + { + "count": 1, + "key": "agent-ca@1757674441" + }, + { + "count": 1, + "key": "agent-ca@1757925038" + }, + { + "count": 1, + "key": "agent-ca@1759158944" + } + ], + "is_more_than_total_hits": false, + "other_count": 16, + "query_duration_millis": 122, + "total_count": 50 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 10, + "key": "linux" + }, + { + "count": 3, + "key": "windows" + }, + { + "count": 1, + "key": "debian_linux" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 98, + "total_count": 50 + } + } + } + }, + "AS216309": { + "name": "INVISIONTECH-GROUP-SRL", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 35, + "key": "22" + }, + { + "count": 13, + "key": "80" + }, + { + "count": 8, + "key": "443" + }, + { + "count": 4, + "key": "111" + }, + { + "count": 2, + "key": "25" + }, + { + "count": 2, + "key": "53" + }, + { + "count": 2, + "key": "110" + }, + { + "count": 2, + "key": "143" + }, + { + "count": 2, + "key": "161" + }, + { + "count": 2, + "key": "993" + } + ], + "is_more_than_total_hits": false, + "other_count": 36, + "query_duration_millis": 24, + "total_count": 37 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 25, + "key": "openssh" + }, + { + "count": 16, + "key": "nginx" + }, + { + "count": 10, + "key": "http_server" + }, + { + "count": 9, + "key": "express" + }, + { + "count": 6, + "key": "bootstrap" + }, + { + "count": 6, + "key": "dovecot" + }, + { + "count": 6, + "key": "php" + }, + { + "count": 5, + "key": "prototype" + }, + { + "count": 4, + "key": "jquery" + }, + { + "count": 4, + "key": "openssl" + } + ], + "is_more_than_total_hits": false, + "other_count": 34, + "query_duration_millis": 198, + "total_count": 37 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 37, + "key": "BULLETPROOF" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 197, + "total_count": 37 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 9, + "key": "YR2" + }, + { + "count": 4, + "key": "Plesk" + }, + { + "count": 3, + "key": "YE2" + }, + { + "count": 3, + "key": "YR1" + }, + { + "count": 2, + "key": "pbx.invisiontech.eu" + }, + { + "count": 1, + "key": "MySQL_Server_8.0.42_Auto_Generated_CA_Certificate" + }, + { + "count": 1, + "key": "OpenWrt" + }, + { + "count": 1, + "key": "YE1" + }, + { + "count": 1, + "key": "www.jxb5pzqmff4pcbab.com" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 134, + "total_count": 37 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 12, + "key": "linux" + }, + { + "count": 2, + "key": "debian_linux" + }, + { + "count": 1, + "key": "centos" + }, + { + "count": 1, + "key": "proxmox" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 49, + "total_count": 37 + } + } + } + }, + "AS58854": { + "name": "KAOPY (Kaopu Cloud)", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 180, + "key": "8887" + }, + { + "count": 177, + "key": "80" + }, + { + "count": 163, + "key": "443" + }, + { + "count": 116, + "key": "0" + }, + { + "count": 82, + "key": "8081" + }, + { + "count": 79, + "key": "8888" + }, + { + "count": 78, + "key": "111" + }, + { + "count": 74, + "key": "16257" + }, + { + "count": 74, + "key": "16259" + }, + { + "count": 72, + "key": "16258" + } + ], + "is_more_than_total_hits": false, + "other_count": 4440, + "query_duration_millis": 120, + "total_count": 624 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 1169, + "key": "mysql" + }, + { + "count": 349, + "key": "nginx" + }, + { + "count": 228, + "key": "python" + }, + { + "count": 183, + "key": "wsgiserver" + }, + { + "count": 163, + "key": "jquery" + }, + { + "count": 152, + "key": "bootstrap" + }, + { + "count": 103, + "key": "node_exporter" + }, + { + "count": 79, + "key": "openssh" + }, + { + "count": 78, + "key": "kestrel_web_server" + }, + { + "count": 72, + "key": "cadvisor" + } + ], + "is_more_than_total_hits": false, + "other_count": 279, + "query_duration_millis": 536, + "total_count": 624 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 624, + "key": "BULLETPROOF" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 102, + "total_count": 624 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 47, + "key": "GlobalSign RSA OV SSL CA 2018" + }, + { + "count": 13, + "key": "TrustAsia DV TLS RSA CA 2025" + }, + { + "count": 10, + "key": "FtpServer" + }, + { + "count": 9, + "key": "YR1" + }, + { + "count": 8, + "key": "RapidSSL TLS RSA CA G1" + }, + { + "count": 6, + "key": "TrustAsia DV TLS RSA CA 2024" + }, + { + "count": 5, + "key": "IPMI" + }, + { + "count": 5, + "key": "WIN-RIK6D08VRRQ" + }, + { + "count": 4, + "key": "Firecloud Root Client Certification Authority" + }, + { + "count": 4, + "key": "Sectigo Public Server Authentication CA DV R36" + } + ], + "is_more_than_total_hits": false, + "other_count": 78, + "query_duration_millis": 101, + "total_count": 624 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 33, + "key": "linux" + }, + { + "count": 26, + "key": "windows" + }, + { + "count": 13, + "key": "ubuntu" + }, + { + "count": 2, + "key": "routeros" + }, + { + "count": 1, + "key": "centos" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 411, + "total_count": 624 + } + } + } + }, + "AS202685": { + "name": "TR-ARKEL", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 4, + "key": "80" + }, + { + "count": 2, + "key": "443" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 484, + "total_count": 4 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 4, + "key": "internet_information_services" + }, + { + "count": 2, + "key": "asp.net" + }, + { + "count": 2, + "key": "asp\\.net" + }, + { + "count": 2, + "key": "http_api" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 154, + "total_count": 4 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 4, + "key": "BULLETPROOF" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 116, + "total_count": 4 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 1, + "key": "GeoTrust TLS RSA CA G1" + }, + { + "count": 1, + "key": "YR1" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 155, + "total_count": 4 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [ + { + "count": 4, + "key": "windows" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 120, + "total_count": 4 + } + } + } + }, + "AS394711": { + "name": "KORGRID (KorGrid LLC)", + "agg": { + "host.services.port": { + "result": { + "buckets": [ + { + "count": 2, + "key": "80" + }, + { + "count": 2, + "key": "443" + }, + { + "count": 1, + "key": "3389" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 272, + "total_count": 3 + } + }, + "host.services.software.product": { + "result": { + "buckets": [ + { + "count": 4, + "key": "bootstrap" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 31, + "total_count": 3 + } + }, + "host.labels.value": { + "result": { + "buckets": [ + { + "count": 3, + "key": "BULLETPROOF" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 25, + "total_count": 3 + } + }, + "host.services.cert.parsed.issuer.common_name": { + "result": { + "buckets": [ + { + "count": 2, + "key": "vergeos.local.root" + }, + { + "count": 1, + "key": "pcmrp-test" + } + ], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 113, + "total_count": 3 + } + }, + "host.operating_system.product": { + "result": { + "buckets": [], + "is_more_than_total_hits": false, + "other_count": 0, + "query_duration_millis": 158, + "total_count": 3 + } + } + } + } +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/censys/fleet-correlation.csv b/kevlar/2026-08-31/censys/fleet-correlation.csv new file mode 100644 index 0000000..eafafd9 --- /dev/null +++ b/kevlar/2026-08-31/censys/fleet-correlation.csv @@ -0,0 +1,11 @@ +ip,asn,as_description,cc,service_count,ports,software,greynoise_class,greynoise_tags
+176.120.22.61,AS198953,proton66 - Proton66 OOO,RU,6,135;137;139;3389;5985;47001,http_api,malicious,"Looks Like Windows 7 server,MSSQL TDS PRELOGIN Scanner,MySQL Protocol,RDP Crawler,RDP Protocol,SSH Alternative Port Crawler,SSH Bruteforcer,SSH Connection Attempt,Web Crawler"
+204.76.203.7,AS51396,PFCLOUD - Pfcloud UG (haftungsbeschrankt),DE,2,22;9001,nginx,malicious,"Carries HTTP Referer,CrushFTP Scanner,F5 BIG-IP Crawler,FTP Protocol,Generic IoT Default Password Attempt,Generic Open Redirect,Generic XSS Commands in Request,Go HTTP Client,ICMPv4 Protocol,Ivanti Co"
+204.76.203.14,AS51396,PFCLOUD - Pfcloud UG (haftungsbeschrankt),DE,0,,,malicious,"AWS Configuration Scanner,Carries HTTP Referer,CrushFTP Scanner,ENV Crawler,F5 BIG-IP Crawler,Generic /proc Enumeration Attempt,Generic Login Attempt,Generic PHPInfo Access Attempt,Generic Path Traver"
+45.135.193.193,AS51396,PFCLOUD - Pfcloud UG (haftungsbeschrankt),DE,1,22,,malicious,"Generic Path Traversal Attempt,Generic Sensitive File Access Attempt,Generic XSS Commands in Request,ICMPv4 Protocol,Looks Like Debian server,Open Proxy Scanner,Ping Scanner,TLS/SSL Crawler,Web Crawle"
+204.76.203.49,AS51396,,,0,,,,
+45.135.194.113,AS51396,PFCLOUD - Pfcloud UG (haftungsbeschrankt),DE,1,22,,malicious,"Carries HTTP Referer,Go HTTP Client,ICMPv4 Protocol,Looks Like Debian server,Open Proxy Scanner,Ping Scanner,SOCKS5 Proxy Scanner,Web Crawler"
+45.135.193.198,AS51396,PFCLOUD - Pfcloud UG (haftungsbeschrankt),DE,1,22,,suspicious,"Generic XSS Commands in Request,ICMPv4 Protocol,Looks Like Debian server,Ping Scanner,TLS/SSL Crawler,Web Crawler"
+204.76.203.4,AS51396,PFCLOUD - Pfcloud UG (haftungsbeschrankt),DE,1,22,,unknown,
+176.120.22.43,AS198953,proton66 - Proton66 OOO,RU,1,3389,,malicious,"Cisco ASA Scanner,Cisco SSL VPN Bruteforcer,ConnectWise ScreenConnect Auth Bypass Check,CrushFTP Scanner,F5 BIG-IP Crawler,Generic Login Attempt,Generic Path Traversal Attempt,Looks Like Windows 10 la"
+176.65.148.226,AS51396,PFCLOUD - Pfcloud UG (haftungsbeschrankt),DE,2,22;80,,malicious,"Carries HTTP Referer,ConnectWise ScreenConnect Auth Bypass Check,CrushFTP Scanner,DNS Protocol,F5 BIG-IP Crawler,Generic Sensitive File Access Attempt,Generic XSS Commands in Request,ICMPv4 Protocol,I"
diff --git a/kevlar/2026-08-31/censys/ip-enrichments.ndjson b/kevlar/2026-08-31/censys/ip-enrichments.ndjson new file mode 100644 index 0000000..4efc7e4 --- /dev/null +++ b/kevlar/2026-08-31/censys/ip-enrichments.ndjson @@ -0,0 +1,10 @@ +{"ip": "176.120.22.61", "asn": "AS198953", "name": "PROTON66", "honeylabs_events": 1141, "host": {"result": {"extensions": {}, "resource": {"autonomous_system": {"asn": 198953, "bgp_prefix": "176.120.22.0/24", "country_code": "RU", "description": "proton66 - Proton66 OOO", "name": "proton66 - Proton66 OOO"}, "dns": {"reverse_dns": {"resolve_time": "2026-08-27T14:52:41Z"}}, "greynoise": {"actor": "unknown", "classification": "malicious", "last_observed_time": "2026-08-30T00:00:00Z", "tags": [{"name": "Looks Like Windows 7 server"}, {"name": "MSSQL TDS PRELOGIN Scanner"}, {"name": "MySQL Protocol"}, {"name": "RDP Crawler"}, {"name": "RDP Protocol"}, {"name": "SSH Alternative Port Crawler"}, {"name": "SSH Bruteforcer"}, {"name": "SSH Connection Attempt"}, {"name": "Web Crawler"}]}, "ip": "176.120.22.61", "labels": [{"confidence": 0.75, "source": "censys", "value": "BULLETPROOF"}], "location": {"city": "Saint Petersburg", "continent": "Europe", "coordinates": {"latitude": 59.93863, "longitude": 30.31413}, "country": "Russia", "country_code": "RU", "postal_code": "195213", "province": "St.-Petersburg", "timezone": "Europe/Moscow"}, "network": [{"hosting": true, "source": "IPINFO"}], "operating_system": {"confidence": 0.25, "cpe": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "evidence": [{"data_path": "http.headers.server"}], "part": "o", "product": "windows", "source": "recog", "vendor": "microsoft"}, "privacy": [{"source": "IPINFO"}], "reputation": {"evidence": [{"additional_fields": [{"field": "label", "value": "BULLETPROOF"}], "category": "network_infra", "evidence_score": 1}], "model_version": "0.1.0", "score": 0.42, "score_level": "medium_risk"}, "service_count": 6, "services": [{"banner_hash_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855", "dcerpc": {"could_bind": true, "could_query_epm": true, "endpoints": [{"bindings": ["ncalrpc:[actkernel]", "ncalrpc:[umpo]"], "executable": "N/A", "explained_uuid": "0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e v1.0", "protocol": "N/A"}, {"bindings": ["ncalrpc:[actkernel]", "ncalrpc:[umpo]"], "executable": "N/A", "explained_uuid": "bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760 v1.0", "protocol": "N/A"}, {"bindings": ["ncalrpc:[LRPC-8dc8f5673df46eb52d]", "ncacn_ip_tcp:176.120.22.61[1026]", "ncacn_np:\\\\M051108[\\pipe\\eventlog]", "ncalrpc:[eventlog]"], "executable": "nrpsrv.dll", "explained_uuid": "30adc50c-5cbc-46ce-9a0e-91914789e23c v1.0 NRP server endpoint", "protocol": "N/A"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1027]", "ncalrpc:[ubpmtaskhostchannel]", "ncacn_np:\\\\M051108[\\PIPE\\atsvc]", "ncalrpc:[senssvc]", "ncalrpc:[OLECCD6EA245DBE3DB48EB998DFA810]", "ncalrpc:[IUserProfile2]"], "executable": "srvsvc.dll", "explained_uuid": "98716d03-89ac-44c7-bb8c-285824e51c4a v1.0 XactSrv service", "protocol": "N/A"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1027]", "ncalrpc:[ubpmtaskhostchannel]", "ncacn_np:\\\\M051108[\\PIPE\\atsvc]", "ncalrpc:[senssvc]", "ncalrpc:[OLECCD6EA245DBE3DB48EB998DFA810]", "ncalrpc:[IUserProfile2]"], "executable": "N/A", "explained_uuid": "3a9ef155-691d-4449-8d05-09ad57031823 v1.0", "protocol": "N/A"}, {"bindings": ["ncalrpc:[LRPC-a2f1d3b7cddc139c78]"], "executable": "gpsvc.dll", "explained_uuid": "2eb08e3e-639f-4fba-97b1-14f878961076 v1.0 Group Policy RPC Interface", "protocol": "N/A"}, {"bindings": ["ncalrpc:[LRPC-75133026b353cf66c2]", "ncalrpc:[LRPC-8116c31a18a2af404a]"], "executable": "N/A", "explained_uuid": "f47433c3-3e9d-4157-aad4-83aa1f5c2d4c v1.0 Fw APIs", "protocol": "N/A"}, {"bindings": ["ncalrpc:[LRPC-43ef2ed6ee1c17eb27]", "ncalrpc:[DNSResolver]"], "executable": "N/A", "explained_uuid": "eb081a0d-10ee-478a-a1dd-50995283e7a8 v3.0 Witness Client Test Interface", "protocol": "N/A"}, {"bindings": ["ncalrpc:[actkernel]", "ncalrpc:[umpo]"], "executable": "N/A", "explained_uuid": "8782d3b9-ebbd-4644-a3d8-e8725381919b v1.0", "protocol": "N/A"}, {"bindings": ["ncalrpc:[dabrpc]", "ncalrpc:[LRPC-7563631bf11d56b19e]", "ncacn_np:\\\\M051108[\\pipe\\LSM_API_service]", "ncalrpc:[LSMApi]", "ncalrpc:[LRPC-87c422f6707b03390f]", "ncalrpc:[actkernel]", "ncalrpc:[umpo]"], "executable": "N/A", "explained_uuid": "9b008953-f195-4bf9-bde0-4471971e58ed v1.0", "protocol": "N/A"}, {"bindings": ["ncalrpc:[actkernel]", "ncalrpc:[umpo]"], "executable": "N/A", "explained_uuid": "1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0 v1.0", "protocol": "N/A"}, {"bindings": ["ncalrpc:[LRPC-8dc8f5673df46eb52d]", "ncacn_ip_tcp:176.120.22.61[1026]", "ncacn_np:\\\\M051108[\\pipe\\eventlog]", "ncalrpc:[eventlog]"], "executable": "N/A", "explained_uuid": "abfb6ca3-0c5e-4734-9285-0aee72fe8d1c v1.0 Wcm Service", "protocol": "N/A"}, {"bindings": ["ncalrpc:[LRPC-ddacc17bdd42921044]"], "executable": "N/A", "explained_uuid": "b2507c30-b126-494a-92ac-ee32b6eeb039 v1.0", "protocol": "N/A"}, {"bindings": ["ncalrpc:[LRPC-75133026b353cf66c2]", "ncalrpc:[LRPC-8116c31a18a2af404a]"], "executable": "MPSSVC.dll", "explained_uuid": "2fb92682-6599-42dc-ae13-bd2ca89bd11c v1.0 Fw APIs", "protocol": "N/A"}, {"bindings": ["ncacn_np:\\\\M051108[\\PIPE\\wkssvc]", "ncalrpc:[LRPC-43ef2ed6ee1c17eb27]", "ncalrpc:[DNSResolver]"], "executable": "N/A", "explained_uuid": "7f1343fe-50a9-4927-a778-0c5859517bac v1.0 DfsDs service", "protocol": "N/A"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1028]", "ncalrpc:[LRPC-697e8331bb546929eb]"], "executable": "spoolsv.exe", "explained_uuid": "0b6edbfa-4a24-4fc6-8a23-942b1eca65d1 v1.0", "protocol": "[MS-PAN]: Print System Asynchronous Notification Protocol"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1026]", "ncacn_np:\\\\M051108[\\pipe\\eventlog]", "ncalrpc:[eventlog]"], "executable": "wevtsvc.dll", "explained_uuid": "f6beaff7-1e19-4fbb-9f8f-b89e2018337c v1.0 Event log TCPIP", "protocol": "[MS-EVEN6]: EventLog Remoting Protocol"}, {"bindings": ["ncacn_np:\\\\M051108[\\PIPE\\atsvc]", "ncalrpc:[senssvc]", "ncalrpc:[OLECCD6EA245DBE3DB48EB998DFA810]", "ncalrpc:[IUserProfile2]"], "executable": "taskcomp.dll", "explained_uuid": "1ff70682-0a51-30e8-076d-740be8cee98b v1.0", "protocol": "[MS-TSCH]: Task Scheduler Service Remoting Protocol"}, {"bindings": ["ncalrpc:[senssvc]", "ncalrpc:[OLECCD6EA245DBE3DB48EB998DFA810]", "ncalrpc:[IUserProfile2]"], "executable": "schedsvc.dll", "explained_uuid": "0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 v1.0", "protocol": "N/A"}, {"bindings": ["ncalrpc:[LRPC-43ef2ed6ee1c17eb27]", "ncalrpc:[DNSResolver]"], "executable": "N/A", "explained_uuid": "f2c9b409-c1c9-4100-8639-d8ab1486694a v1.0 Witness Client Upcall Server", "protocol": "N/A"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1028]", "ncalrpc:[LRPC-697e8331bb546929eb]"], "executable": "spoolsv.exe", "explained_uuid": "12345678-1234-abcd-ef00-0123456789ab v1.0", "protocol": "[MS-RPRN]: Print System Remote Protocol"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1032]", "ncalrpc:[samss lpc]", "ncalrpc:[SidKey Local End Point]", "ncalrpc:[protected_storage]", "ncalrpc:[lsasspirpc]", "ncalrpc:[lsapolicylookup]", "ncalrpc:[LSA_EAS_ENDPOINT]", "ncalrpc:[lsacap]", "ncalrpc:[LSARPC_ENDPOINT]", "ncalrpc:[securityevent]", "ncalrpc:[audit]", "ncacn_np:\\\\M051108[\\pipe\\lsass]"], "executable": "N/A", "explained_uuid": "b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 v2.0 KeyIso", "protocol": "N/A"}, {"bindings": ["ncalrpc:[WindowsShutdown]", "ncacn_np:\\\\M051108[\\PIPE\\InitShutdown]", "ncalrpc:[WMsgKRpc068920]", "ncalrpc:[WMsgKRpc0BA091]", "ncalrpc:[WMsgKRpc0289BF2]"], "executable": "winlogon.exe", "explained_uuid": "76f226c3-ec14-4325-8a99-6a46348418af v1.0", "protocol": "N/A"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1027]", "ncalrpc:[ubpmtaskhostchannel]", "ncacn_np:\\\\M051108[\\PIPE\\atsvc]", "ncalrpc:[senssvc]", "ncalrpc:[OLECCD6EA245DBE3DB48EB998DFA810]", "ncalrpc:[IUserProfile2]"], "executable": "N/A", "explained_uuid": "1a0d010f-1c33-432c-b0f5-8cf4e8053099 v1.0 IdSegSrv service", "protocol": "N/A"}, {"bindings": ["ncacn_np:\\\\M051108[\\PIPE\\W32TIME_ALT]", "ncalrpc:[W32TIME_ALT]", "ncalrpc:[LRPC-1f4f400a89fd304001]", "ncalrpc:[OLE3F68D0A5E28727226273257A66A5]"], "executable": "N/A", "explained_uuid": "3473dd4d-2e88-4006-9cba-22570909dd10 v5.1 WinHttp Auto-Proxy Service", "protocol": "N/A"}, {"bindings": ["ncalrpc:[LRPC-75133026b353cf66c2]", "ncalrpc:[LRPC-8116c31a18a2af404a]"], "executable": "MPSSVC.dll", "explained_uuid": "7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 v1.0 Fw APIs", "protocol": "N/A"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1028]", "ncalrpc:[LRPC-697e8331bb546929eb]"], "executable": "spoolsv.exe", "explained_uuid": "4a452661-8290-4b36-8fbe-7f4093a94978 v1.0", "protocol": "N/A"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1032]", "ncalrpc:[samss lpc]", "ncalrpc:[SidKey Local End Point]", "ncalrpc:[protected_storage]", "ncalrpc:[lsasspirpc]", "ncalrpc:[lsapolicylookup]", "ncalrpc:[LSA_EAS_ENDPOINT]", "ncalrpc:[lsacap]", "ncalrpc:[LSARPC_ENDPOINT]", "ncalrpc:[securityevent]", "ncalrpc:[audit]", "ncacn_np:\\\\M051108[\\pipe\\lsass]"], "executable": "samsrv.dll", "explained_uuid": "12345778-1234-abcd-ef00-0123456789ac v1.0", "protocol": "[MS-SAMR]: Security Account Manager (SAM) Remote Protocol"}, {"bindings": ["ncalrpc:[LRPC-5b3c020788ba8cdd19]", "ncalrpc:[LRPC-5b3c020788ba8cdd19]", "ncalrpc:[LRPC-5b3c020788ba8cdd19]"], "executable": "msdtcprx.dll", "explained_uuid": "906b0ce0-c70b-1067-b317-00dd010662da v1.0", "protocol": "[MS-CMPO]: MSDTC Connection Manager:"}, {"bindings": ["ncalrpc:[WMsgKRpc0289BF2]"], "executable": "winlogon.exe", "explained_uuid": "12e65dd8-887f-41ef-91bf-8d816c42c2e7 v1.0 Secure Desktop LRPC interface", "protocol": "N/A"}, {"bindings": ["ncalrpc:[LRPC-7563631bf11d56b19e]", "ncacn_np:\\\\M051108[\\pipe\\LSM_API_service]", "ncalrpc:[LSMApi]", "ncalrpc:[LRPC-87c422f6707b03390f]", "ncalrpc:[actkernel]", "ncalrpc:[umpo]"], "executable": "N/A", "explained_uuid": "697dcda9-3ba9-4eb2-9247-e11f1901b0d2 v1.0", "protocol": "N/A"}, {"bindings": ["ncalrpc:[dhcpcsvc6]", "ncalrpc:[dhcpcsvc]", "ncalrpc:[LRPC-8dc8f5673df46eb52d]", "ncacn_ip_tcp:176.120.22.61[1026]", "ncacn_np:\\\\M051108[\\pipe\\eventlog]", "ncalrpc:[eventlog]"], "executable": "dhcpcsvc6.dll", "explained_uuid": "3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 v1.0 DHCPv6 Client LRPC Endpoint", "protocol": "N/A"}, {"bindings": ["ncalrpc:[dhcpcsvc]", "ncalrpc:[LRPC-8dc8f5673df46eb52d]", "ncacn_ip_tcp:176.120.22.61[1026]", "ncacn_np:\\\\M051108[\\pipe\\eventlog]", "ncalrpc:[eventlog]"], "executable": "dhcpcsvc.dll", "explained_uuid": "3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 v1.0 DHCP Client LRPC Endpoint", "protocol": "N/A"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1027]", "ncalrpc:[ubpmtaskhostchannel]", "ncacn_np:\\\\M051108[\\PIPE\\atsvc]", "ncalrpc:[senssvc]", "ncalrpc:[OLECCD6EA245DBE3DB48EB998DFA810]", "ncalrpc:[IUserProfile2]"], "executable": "N/A", "explained_uuid": "c36be077-e14b-4fe9-8abc-e856ef4f048b v1.0 Proxy Manager client server endpoint", "protocol": "N/A"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1027]", "ncalrpc:[ubpmtaskhostchannel]", "ncacn_np:\\\\M051108[\\PIPE\\atsvc]", "ncalrpc:[senssvc]", "ncalrpc:[OLECCD6EA245DBE3DB48EB998DFA810]", "ncalrpc:[IUserProfile2]"], "executable": "iphlpsvc.dll", "explained_uuid": "552d076a-cb29-4e44-8b6a-d15e59e2c0af v1.0 IP Transition Configuration endpoint", "protocol": "N/A"}, {"bindings": ["ncalrpc:[LRPC-8116c31a18a2af404a]"], "executable": "BFE.DLL", "explained_uuid": "dd490425-5325-4565-b774-7e27d6c09c24 v1.0 Base Firewall Engine API", "protocol": "N/A"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1028]", "ncalrpc:[LRPC-697e8331bb546929eb]"], "executable": "spoolsv.exe", "explained_uuid": "76f03f96-cdfd-44fc-a22c-64950a001209 v1.0", "protocol": "[MS-PAR]: Print System Asynchronous Remote Protocol"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1027]", "ncalrpc:[ubpmtaskhostchannel]", "ncacn_np:\\\\M051108[\\PIPE\\atsvc]", "ncalrpc:[senssvc]", "ncalrpc:[OLECCD6EA245DBE3DB48EB998DFA810]", "ncalrpc:[IUserProfile2]"], "executable": "IKEEXT.DLL", "explained_uuid": "a398e520-d59a-4bdd-aa7a-3c1e0303a511 v1.0 IKE/Authip API", "protocol": "N/A"}, {"bindings": ["ncalrpc:[LRPC-87c422f6707b03390f]", "ncalrpc:[actkernel]", "ncalrpc:[umpo]", "ncacn_np:\\\\M051108[\\PIPE\\srvsvc]", "ncacn_ip_tcp:176.120.22.61[1027]", "ncalrpc:[ubpmtaskhostchannel]", "ncacn_np:\\\\M051108[\\PIPE\\atsvc]", "ncalrpc:[senssvc]", "ncalrpc:[OLECCD6EA245DBE3DB48EB998DFA810]", "ncalrpc:[IUserProfile2]", "ncalrpc:[senssvc]", "ncalrpc:[OLECCD6EA245DBE3DB48EB998DFA810]", "ncalrpc:[IUserProfile2]", "ncalrpc:[OLECCD6EA245DBE3DB48EB998DFA810]", "ncalrpc:[IUserProfile2]", "ncalrpc:[IUserProfile2]"], "executable": "sysntfy.dll", "explained_uuid": "c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 v1.0 Impl friendly name", "protocol": "N/A"}, {"bindings": ["ncalrpc:[actkernel]", "ncalrpc:[umpo]"], "executable": "N/A", "explained_uuid": "4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9 v1.0", "protocol": "N/A"}, {"bindings": ["ncalrpc:[LRPC-729277d6e71e759854]", "ncacn_np:\\\\M051108[\\PIPE\\srvsvc]", "ncacn_ip_tcp:176.120.22.61[1027]", "ncalrpc:[ubpmtaskhostchannel]", "ncacn_np:\\\\M051108[\\PIPE\\atsvc]", "ncalrpc:[senssvc]", "ncalrpc:[OLECCD6EA245DBE3DB48EB998DFA810]", "ncalrpc:[IUserProfile2]"], "executable": "certprop.dll", "explained_uuid": "30b044a5-a225-43f0-b3a4-e060df91f9c1 v1.0", "protocol": "N/A"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1027]", "ncalrpc:[ubpmtaskhostchannel]", "ncacn_np:\\\\M051108[\\PIPE\\atsvc]", "ncalrpc:[senssvc]", "ncalrpc:[OLECCD6EA245DBE3DB48EB998DFA810]", "ncalrpc:[IUserProfile2]"], "executable": "schedsvc.dll", "explained_uuid": "86d35949-83c9-4044-b424-db363231fd0c v1.0", "protocol": "[MS-TSCH]: Task Scheduler Service Remoting Protocol"}, {"bindings": ["ncalrpc:[LRPC-1f4f400a89fd304001]", "ncalrpc:[OLE3F68D0A5E28727226273257A66A5]"], "executable": "nsisvc.dll", "explained_uuid": "7ea70bcf-48af-4f6a-8968-6a440754d5fa v1.0 NSI server endpoint", "protocol": "N/A"}, {"bindings": ["ncalrpc:[actkernel]", "ncalrpc:[umpo]"], "executable": "N/A", "explained_uuid": "3b338d89-6cfa-44b8-847e-531531bc9992 v1.0", "protocol": "N/A"}, {"bindings": ["ncalrpc:[actkernel]", "ncalrpc:[umpo]"], "executable": "N/A", "explained_uuid": "085b0334-e454-4d91-9b8c-4134f9e793f3 v1.0", "protocol": "N/A"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1027]", "ncalrpc:[ubpmtaskhostchannel]", "ncacn_np:\\\\M051108[\\PIPE\\atsvc]", "ncalrpc:[senssvc]", "ncalrpc:[OLECCD6EA245DBE3DB48EB998DFA810]", "ncalrpc:[IUserProfile2]"], "executable": "N/A", "explained_uuid": "2e6035b2-e8f1-41a7-a044-656b439c4c34 v1.0 Proxy Manager provider server endpoint", "protocol": "N/A"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1029]"], "executable": "services.exe", "explained_uuid": "367abb81-9844-35f1-ad32-98f038001003 v2.0", "protocol": "[MS-SCMR]: Service Control Manager Remote Protocol"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1025]", "ncalrpc:[WindowsShutdown]", "ncacn_np:\\\\M051108[\\PIPE\\InitShutdown]", "ncalrpc:[WMsgKRpc068920]"], "executable": "wininit.exe", "explained_uuid": "d95afe70-a6d5-4259-822e-2c84da1ddb0d v1.0", "protocol": "[MS-RSP]: Remote Shutdown Protocol"}, {"bindings": ["ncalrpc:[actkernel]", "ncalrpc:[umpo]"], "executable": "N/A", "explained_uuid": "c605f9fb-f0a3-4e2a-a073-73560f8d9e3e v1.0", "protocol": "N/A"}, {"bindings": ["ncalrpc:[actkernel]", "ncalrpc:[umpo]"], "executable": "N/A", "explained_uuid": "8bfc3be1-6def-4e2d-af74-7c47cd0ade4a v1.0", "protocol": "N/A"}, {"bindings": ["ncalrpc:[actkernel]", "ncalrpc:[umpo]"], "executable": "N/A", "explained_uuid": "2d98a740-581d-41b9-aa0d-a88b9d5ce938 v1.0", "protocol": "N/A"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1027]", "ncalrpc:[ubpmtaskhostchannel]", "ncacn_np:\\\\M051108[\\PIPE\\atsvc]", "ncalrpc:[senssvc]", "ncalrpc:[OLECCD6EA245DBE3DB48EB998DFA810]", "ncalrpc:[IUserProfile2]"], "executable": "N/A", "explained_uuid": "c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1 v1.0 Adh APIs", "protocol": "N/A"}, {"bindings": ["ncacn_np:\\\\M051108[\\PIPE\\atsvc]", "ncalrpc:[senssvc]", "ncalrpc:[OLECCD6EA245DBE3DB48EB998DFA810]", "ncalrpc:[IUserProfile2]"], "executable": "taskcomp.dll", "explained_uuid": "378e52b0-c0a9-11cf-822d-00aa0051e40f v1.0", "protocol": "[MS-TSCH]: Task Scheduler Service Remoting Protocol"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1028]", "ncalrpc:[LRPC-697e8331bb546929eb]"], "executable": "spoolsv.exe", "explained_uuid": "ae33069b-a2a8-46ee-a235-ddfd339be281 v1.0", "protocol": "[MS-PAN]: Print System Asynchronous Notification Protocol"}, {"bindings": ["ncacn_ip_tcp:176.120.22.61[1030]"], "executable": "FwRemoteSvr.dll", "explained_uuid": "6b5bdd1e-528c-422c-af8c-a4079be4fe48 v1.0 Remote Fw APIs", "protocol": "[MS-FASP]: Firewall and Advanced Security Protocol"}]}, "exposures": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "DCERPC", "literal_match": "DCERPC"}], "id": "CENSYS-2022-1025", "metrics": {}, "name": "Exposed DCERPC Service", "risk_source": "censys", "severity": "high", "source": "censys", "year": 2022}], "ip": "176.120.22.61", "ja4tscan": {"fingerprint": "8192_2-1-3-4-8_1460_8_3-6", "scan_time": "2026-08-31T01:10:33Z"}, "labels": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "DCERPC", "literal_match": "DCERPC"}], "source": "censys", "value": "REMOTE_ACCESS"}], "port": 135, "protocol": "DCERPC", "scan_time": "2026-08-31T11:38:40Z", "software": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "DCERPC", "literal_match": "DCERPC"}], "part": "a", "source": "censys", "type": ["REMOTE_ACCESS"]}], "transport_protocol": "tcp"}, {"banner": "\ufffd\u0604\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000 CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\u0000\u0000!\u0000\u0001\u0000\u0000\u0000\u0000\u0000/\u0000<\ufffd\ufffdp\ufffdp\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000", "banner_hash_sha256": "3eafb65f29d04699ee533a5329edd7fcc03a4a623be0e41032afe81389e2e9cc", "banner_hex": "e5d88400000000010000000020434b414141414141414141414141414141414141414141414141414141414141000021000100000000002f003cecef70ab7000000000000000000000000000000000000000000000000000000000000000000000000000000000", "exposures": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "NETBIOS", "literal_match": "NETBIOS"}], "id": "CENSYS-2022-1048", "metrics": {}, "name": "Exposed NetBIOS Service", "risk_source": "censys", "severity": "high", "source": "censys", "year": 2022}], "ip": "176.120.22.61", "port": 137, "protocol": "NETBIOS", "scan_time": "2026-08-30T23:38:15Z", "transport_protocol": "udp"}, {"banner": "\ufffd\u0000\u0000\u0001\ufffd", "banner_hash_sha256": "58107a5ecf9946731642e90c1697df14cd2256d86b0b12ce5f49c002271d9ab1", "banner_hex": "830000018f", "ip": "176.120.22.61", "ja4tscan": {"fingerprint": "8192_2-1-3-4-8_1460_8_3-6", "scan_time": "2026-08-28T18:18:17Z"}, "port": 139, "protocol": "UNKNOWN", "scan_time": "2026-08-31T05:20:25Z", "transport_protocol": "tcp"}, {"cert": {"added_at": "2026-08-15T08:45:19Z", "ever_seen_in_scan": true, "fingerprint_md5": "d1c6245ff53529256936944f02bbb799", "fingerprint_sha1": "8ed826c5a4d251e4114c41bd805cadbaaa453d28", "fingerprint_sha256": "5675a959342e713a3f29e67f65da3bdbada9488cfc1cdb49e763c1471f84bbf9", "modified_at": "2026-08-15T08:45:19Z", "names": ["M051108"], "parse_status": "success", "parsed": {"extensions": {"extended_key_usage": {"server_auth": true}, "key_usage": {"data_encipherment": true, "key_encipherment": true, "value": 12}}, "issuer": {"common_name": ["M051108"]}, "issuer_dn": "CN=M051108", "ja4x": "7022c563de38_7022c563de38_e73b053161df", "serial_number": "41589344625908147176989412798876321205", "serial_number_hex": "1f49d100c949abb941aa0fb62bdf85b5", "signature": {"self_signed": true, "signature_algorithm": {"name": "SHA1-RSA", "oid": "1.2.840.113549.1.1.5"}, "valid": true, "value": "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"}, "subject": {"common_name": ["M051108"]}, "subject_dn": "CN=M051108", "subject_key_info": {"fingerprint_sha256": "b9df7ebb8ef6601132112b543ac023199a9fe33e8fce6ef03ee2250c5d2728e6", "key_algorithm": {"name": "RSA", "oid": "1.2.840.113549.1.1.1"}, "rsa": {"exponent": 65537, "length": 2048, "modulus": "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"}}, "validity_period": {"length_seconds": 15811201, "not_after": "2027-02-12T17:38:09Z", "not_before": "2026-08-13T17:38:09Z"}, "version": 3}, "revocation": {"crl": {}, "ocsp": {}}, "spki_fingerprint_sha256": "327d02d5dbdacd30babf1821153434758680ab53c94a9eceb40becc86dd8fbf5", "spki_subject_fingerprint_sha256": "327d02d5dbdacd30babf1821153434758680ab53c94a9eceb40becc86dd8fbf5", "tbs_fingerprint_sha256": "1440f978a4d1acb56c72be659a2289ab3a2c5d9f3f3964c2edda1776dabefaa2", "tbs_no_ct_fingerprint_sha256": "1440f978a4d1acb56c72be659a2289ab3a2c5d9f3f3964c2edda1776dabefaa2", "validated_at": "2026-08-30T18:04:11Z", "validation": {"apple": {}, "chrome": {}, "microsoft": {}, "nss": {}}, "zlint": {"errors_present": true, "failed_lints": ["e_ext_san_missing", "e_sub_cert_aia_does_not_contain_ocsp_url", "e_sub_cert_aia_missing", "e_sub_cert_cert_policy_empty", "e_sub_cert_certificate_policies_missing", "e_sub_cert_or_sub_ca_using_sha1", "e_subject_common_name_not_exactly_from_san", "n_subject_common_name_included", "w_ext_key_usage_not_critical", "w_ext_subject_key_identifier_missing_sub_cert", "w_sub_cert_sha1_expiration_too_long"], "notices_present": true, "timestamp": "2026-08-15T08:45:19Z", "version": 3, "warnings_present": true}}, "exposures": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "RDP", "literal_match": "RDP"}], "id": "CENSYS-2022-1054", "metrics": {}, "name": "Exposed RDP Service", "risk_source": "censys", "severity": "high", "source": "censys", "year": 2022}], "ip": "176.120.22.61", "ja4tscan": {"fingerprint": "64000_2-1-3-4-8_1460_0_3-6", "scan_time": "2026-08-28T09:03:26Z"}, "labels": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "RDP", "literal_match": "RDP"}], "source": "censys", "value": "REMOTE_ACCESS"}], "misconfigs": [{"confidence": 0.5, "evidence": [{"data_path": "service.tls.cipher_selected", "found_value": "TLS_RSA_WITH_AES_256_GCM_SHA384", "literal_match": "TLS_RSA_WITH_AES_256_GCM_SHA384"}], "id": "CENSYS-2026-1193", "metrics": {}, "name": "Weak TLS Cipher Selected", "risk_source": "censys", "severity": "medium", "source": "censys", "year": 2026}, {"confidence": 1, "evidence": [{"data_path": "cert.parsed.signature.self_signed", "found_value": "true"}], "id": "CENSYS-2026-1196", "metrics": {}, "name": "Self-Signed Certificate", "risk_source": "censys", "severity": "low", "source": "censys", "year": 2026}], "port": 3389, "protocol": "RDP", "rdp": {"certificate_info": {}, "connect_response": {"domain_parameters": {"domain_protocol_version": 2, "max_channel_ids": 34, "max_mcspdu_size": 65528, "max_provider_height": 1, "max_user_id_channels": 3, "num_priorities": 1}}, "protocol_flags": {"dynvc_graphics_pipeline": true, "extended_client_data_supported": true, "neg_resp_reserved": true, "restricted_admin_mode": true}, "selected_security_protocol": {"raw_value": 1, "standard_rdp": true, "tls": true}, "version": {"major": 5, "raw": "00000000"}, "x224_cc_pdu_dstref": 51966, "x224_cc_pdu_srcref": 13330}, "scan_time": "2026-08-30T21:40:35Z", "screenshots": [{"extracted_text": "", "handle": "0f61e0e0c8e24862b48e983b0284604d", "phash": "0000000000000000"}], "software": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "RDP", "literal_match": "RDP"}], "part": "a", "source": "censys", "type": ["REMOTE_ACCESS"]}], "tls": {"cipher_selected": "TLS_RSA_WITH_AES_256_GCM_SHA384", "fingerprint_sha256": "5675a959342e713a3f29e67f65da3bdbada9488cfc1cdb49e763c1471f84bbf9", "ja3s": "f75082535b4a79c07b31bdd0e2b7eb87", "ja4s": "t120100_009d_bc98f8e001b5", "version_selected": "tlsv1_2", "versions": [{"ja3s": "f75082535b4a79c07b31bdd0e2b7eb87", "ja4s": "t120100_009d_bc98f8e001b5", "version": "tlsv1_2"}, {"ja3s": "1308be477c8afb355e2860ab89378ae5", "ja4s": "t110100_c014_bc98f8e001b5", "version": "tlsv1_1"}, {"ja3s": "bcf3a836c82d12ee988005fb0c011445", "ja4s": "t100100_c014_bc98f8e001b5", "version": "tlsv1_0"}]}, "transport_protocol": "tcp"}, {"banner": "HTTP/1.1 404 Not Found\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: <REDACTED>\r\nConnection: close\r\nContent-Length: 315\r\n", "banner_hash_sha256": "d7de42c1e8c09cf951e3ad6248fda3ab48a60ca3eac8b25effd4b3067df8f362", "endpoints": [{"banner": "HTTP/1.1 404 Not Found\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: <REDACTED>\r\nConnection: close\r\nContent-Length: 315\r\n", "banner_hash_sha256": "d7de42c1e8c09cf951e3ad6248fda3ab48a60ca3eac8b25effd4b3067df8f362", "endpoint_type": "HTTP", "hostname": "176.120.22.61", "http": {"body": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Not Found</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Not Found</h2>\r\n<hr><p>HTTP Error 404. The requested resource is not found.</p>\r\n</BODY></HTML>\r\n", "body_hash_sha1": "a66898b36c94c53766e66c1a7aaeb149447ec083", "body_hash_sha256": "ce7127c38e30e92a021ed2bd09287713c6a923db9ffdb43f126e8965d777fbf0", "body_hash_tlsh": "8be07d6d9856aac542a0f4bc75d193b48115038fd4e547d90051b21714891bcc1f0dcf", "body_size": 315, "headers": {"Connection": {"headers": ["close"]}, "Content-Length": {"headers": ["315"]}, "Content-Type": {"headers": ["text/html; charset=us-ascii"]}, "Date": {"headers": ["<REDACTED>"]}, "Server": {"headers": ["Microsoft-HTTPAPI/2.0"]}}, "html_tags": ["<TITLE>Not Found</TITLE>", "<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\">"], "html_title": "Not Found", "protocol": "HTTP/1.1", "status_code": 404, "status_reason": "Not Found", "supported_versions": ["HTTP/1.1"], "uri": "http://176.120.22.61:5985/"}, "ip": "176.120.22.61", "path": "/", "port": 5985, "scan_time": "2026-08-31T11:10:22Z", "transport_protocol": "tcp"}], "ip": "176.120.22.61", "ja4tscan": {"fingerprint": "8192_2-1-3-4-8_1460_8_3-6", "scan_time": "2026-08-29T17:48:59Z"}, "operating_systems": [{"confidence": 0.25, "cpe": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "evidence": [{"data_path": "http.headers.server"}], "part": "o", "product": "windows", "source": "recog", "vendor": "microsoft"}], "port": 5985, "protocol": "HTTP", "scan_time": "2026-08-31T11:10:22Z", "software": [{"confidence": 0.25, "cpe": "cpe:2.3:a:microsoft:http_api:2.0:*:*:*:*:*:*:*", "evidence": [{"data_path": "http.headers.server"}], "part": "a", "product": "http_api", "source": "recog", "vendor": "microsoft", "version": "2.0"}], "transport_protocol": "tcp"}, {"banner": "HTTP/1.1 404 Not Found\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: <REDACTED>\r\nConnection: close\r\nContent-Length: 315\r\n", "banner_hash_sha256": "d7de42c1e8c09cf951e3ad6248fda3ab48a60ca3eac8b25effd4b3067df8f362", "endpoints": [{"banner": "HTTP/1.1 404 Not Found\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: <REDACTED>\r\nConnection: close\r\nContent-Length: 315\r\n", "banner_hash_sha256": "d7de42c1e8c09cf951e3ad6248fda3ab48a60ca3eac8b25effd4b3067df8f362", "endpoint_type": "HTTP", "hostname": "176.120.22.61", "http": {"body": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Not Found</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Not Found</h2>\r\n<hr><p>HTTP Error 404. The requested resource is not found.</p>\r\n</BODY></HTML>\r\n", "body_hash_sha1": "a66898b36c94c53766e66c1a7aaeb149447ec083", "body_hash_sha256": "ce7127c38e30e92a021ed2bd09287713c6a923db9ffdb43f126e8965d777fbf0", "body_hash_tlsh": "8be07d6d9856aac542a0f4bc75d193b48115038fd4e547d90051b21714891bcc1f0dcf", "body_size": 315, "headers": {"Connection": {"headers": ["close"]}, "Content-Length": {"headers": ["315"]}, "Content-Type": {"headers": ["text/html; charset=us-ascii"]}, "Date": {"headers": ["<REDACTED>"]}, "Server": {"headers": ["Microsoft-HTTPAPI/2.0"]}}, "html_tags": ["<TITLE>Not Found</TITLE>", "<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\">"], "html_title": "Not Found", "protocol": "HTTP/1.1", "status_code": 404, "status_reason": "Not Found", "supported_versions": ["HTTP/1.1"], "uri": "http://176.120.22.61:47001/"}, "ip": "176.120.22.61", "path": "/", "port": 47001, "scan_time": "2026-08-30T15:39:31Z", "transport_protocol": "tcp"}], "ip": "176.120.22.61", "ja4tscan": {"fingerprint": "8192_2-1-3-4-8_1460_8_3-6", "scan_time": "2026-08-29T16:32:27Z"}, "operating_systems": [{"confidence": 0.25, "cpe": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "evidence": [{"data_path": "http.headers.server"}], "part": "o", "product": "windows", "source": "recog", "vendor": "microsoft"}], "port": 47001, "protocol": "HTTP", "scan_time": "2026-08-30T15:39:31Z", "software": [{"confidence": 0.25, "cpe": "cpe:2.3:a:microsoft:http_api:2.0:*:*:*:*:*:*:*", "evidence": [{"data_path": "http.headers.server"}], "part": "a", "product": "http_api", "source": "recog", "vendor": "microsoft", "version": "2.0"}], "transport_protocol": "tcp"}], "whois": {"network": {"cidrs": ["176.120.22.0/24"], "created": "2024-08-27T00:00:00Z", "handle": "RU-PROTON66-20240827", "name": "Proton66 OOO", "updated": "2024-08-27T00:00:00Z"}, "organization": {"abuse_contacts": [{"email": "abuse@proton66.ru", "handle": "AR70098-RIPE", "name": "Abuse-C Role"}], "address": "DISTRICT No. 54, ISKROVSKY PR-KT, D. 21, LIT. U, kv.218\\n193230\\nST. PETERSBURG\\nRUSSIAN FEDERATION", "admin_contacts": [{"email": "mail@proton66.ru", "handle": "TD6653-RIPE", "name": "Tech dept."}], "handle": "ORG-PO84-RIPE", "name": "Proton66 OOO"}}}}}, "services": {"result": {"next_page_token": "8792023c86b702f03a6a7fb8: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", "ranges": [{"end_time": "2026-08-30T23:38:16.099607Z", "ip": "176.120.22.61", "port": "137", "protocol": "NETBIOS", "start_time": "2026-08-20T07:42:14.372647Z", "transport_protocol": "UDP"}, {"end_time": "2026-08-30T21:40:36.639126Z", "ip": "176.120.22.61", "port": "3389", "protocol": "RDP", "start_time": "2026-08-06T19:47:31.859886Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-30T15:39:32.01147Z", "ip": "176.120.22.61", "port": "47001", "protocol": "HTTP", "start_time": "2026-08-06T02:43:52.747803Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-30T10:32:06.311402Z", "ip": "176.120.22.61", "port": "139", "protocol": "NETBIOS", "start_time": "2026-08-27T12:18:02.047257Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-30T10:31:24.813461Z", "ip": "176.120.22.61", "port": "135", "protocol": "DCERPC", "start_time": "2026-08-06T02:43:46.311271Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-30T10:06:33.398707Z", "ip": "176.120.22.61", "port": "5985", "protocol": "HTTP", "start_time": "2026-08-06T02:44:01.749124Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-27T08:43:41.570019Z", "ip": "176.120.22.61", "port": "139", "protocol": "UNKNOWN", "start_time": "2026-08-27T08:43:40.570019Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-26T10:21:46.760391Z", "ip": "176.120.22.61", "port": "139", "protocol": "NETBIOS", "start_time": "2026-08-26T10:20:25.67231Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-26T08:13:36.504647Z", "ip": "176.120.22.61", "port": "139", "protocol": "UNKNOWN", "start_time": "2026-08-26T08:13:35.504647Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-26T08:13:12.42251Z", "ip": "176.120.22.61", "port": "139", "protocol": "UNKNOWN", "start_time": "2026-08-25T04:43:30.494382Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-25T17:34:19.531526Z", "ip": "176.120.22.61", "port": "5985", "protocol": "WINRM", "start_time": "2026-08-08T19:17:33.821091Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-24T07:36:40.054527Z", "ip": "176.120.22.61", "port": "139", "protocol": "NETBIOS", "start_time": "2026-08-23T06:50:12.773792Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-22T15:23:44.11493Z", "ip": "176.120.22.61", "port": "139", "protocol": "UNKNOWN", "start_time": "2026-08-22T08:38:09.523732Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-22T08:37:33.581826Z", "ip": "176.120.22.61", "port": "139", "protocol": "UNKNOWN", "start_time": "2026-08-21T07:41:17.778311Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-21T07:38:14.917603Z", "ip": "176.120.22.61", "port": "139", "protocol": "UNKNOWN", "start_time": "2026-08-21T07:38:13.917603Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-21T07:19:00.451075Z", "ip": "176.120.22.61", "port": "139", "protocol": "NETBIOS", "start_time": "2026-08-21T07:18:59.451075Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-20T06:44:17.276544Z", "ip": "176.120.22.61", "port": "139", "protocol": "UNKNOWN", "start_time": "2026-08-20T06:44:16.276544Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-19T07:50:18.707543Z", "ip": "176.120.22.61", "port": "139", "protocol": "NETBIOS", "start_time": "2026-08-18T11:41:13.716445Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-19T02:49:51.723149Z", "ip": "176.120.22.61", "port": "137", "protocol": "NETBIOS", "start_time": "2026-08-09T20:06:57.477747Z", "transport_protocol": "UDP"}, {"end_time": "2026-08-17T14:01:55.895553Z", "ip": "176.120.22.61", "port": "139", "protocol": "UNKNOWN", "start_time": "2026-08-17T14:01:53.811806Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-17T14:01:48.234317Z", "ip": "176.120.22.61", "port": "139", "protocol": "UNKNOWN", "start_time": "2026-08-17T14:01:47.234317Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-17T14:01:34.438545Z", "ip": "176.120.22.61", "port": "139", "protocol": "UNKNOWN", "start_time": "2026-08-16T07:32:40.445243Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-15T13:38:22.298154Z", "ip": "176.120.22.61", "port": "139", "protocol": "NETBIOS", "start_time": "2026-08-06T18:41:27.264213Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-05T01:37:40.529844Z", "ip": "176.120.22.61", "port": "139", "protocol": "NETBIOS", "start_time": "2026-08-05T01:37:39.529844Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-04T18:00:08.854314Z", "ip": "176.120.22.61", "port": "3389", "protocol": "RDP", "start_time": "2026-08-04T18:00:07.854314Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-04T00:07:25.545518Z", "ip": "176.120.22.61", "port": "135", "protocol": "DCERPC", "start_time": "2026-08-04T00:07:24.545518Z", "transport_protocol": "TCP"}, {"end_time": "2026-06-11T18:17:40.953526Z", "ip": "176.120.22.61", "port": "139", "protocol": "UNKNOWN", "start_time": "2026-06-11T18:17:39.953526Z", "transport_protocol": "TCP"}, {"end_time": "2026-06-11T17:13:52.184593Z", "ip": "176.120.22.61", "port": "139", "protocol": "NETBIOS", "start_time": "2026-06-11T17:13:51.184593Z", "transport_protocol": "TCP"}, {"end_time": "2026-06-03T05:21:47.778097Z", "ip": "176.120.22.61", "port": "47001", "protocol": "UNKNOWN", "start_time": "2026-06-03T05:21:46.778097Z", "transport_protocol": "TCP"}, {"end_time": "2026-06-01T13:21:45.552973Z", "ip": "176.120.22.61", "port": "47001", "protocol": "UNKNOWN", "start_time": "2026-06-01T13:21:44.552973Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-31T11:59:37.716174Z", "ip": "176.120.22.61", "port": "139", "protocol": "NETBIOS", "start_time": "2026-05-31T11:59:36.716174Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-31T04:38:06.680817Z", "ip": "176.120.22.61", "port": "47001", "protocol": "UNKNOWN", "start_time": "2026-05-31T04:38:05.680817Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-29T22:14:19.208939Z", "ip": "176.120.22.61", "port": "139", "protocol": "NETBIOS", "start_time": "2026-05-29T22:14:18.208939Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-29T07:02:58.389854Z", "ip": "176.120.22.61", "port": "139", "protocol": "NETBIOS", "start_time": "2026-05-29T07:02:57.389854Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-29T04:05:25.20307Z", "ip": "176.120.22.61", "port": "47001", "protocol": "UNKNOWN", "start_time": "2026-05-29T04:05:24.20307Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-28T17:28:28.787203Z", "ip": "176.120.22.61", "port": "3389", "protocol": "UNKNOWN", "start_time": "2026-05-28T17:28:27.787203Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-27T13:13:50.268721Z", "ip": "176.120.22.61", "port": "139", "protocol": "NETBIOS", "start_time": "2026-05-27T01:07:49.294913Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-21T11:39:31.149123Z", "ip": "176.120.22.61", "port": "47001", "protocol": "UNKNOWN", "start_time": "2026-05-21T11:39:30.149123Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-20T06:35:47.601788Z", "ip": "176.120.22.61", "port": "47001", "protocol": "UNKNOWN", "start_time": "2026-05-18T05:24:08.392658Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-17T01:18:18.028105Z", "ip": "176.120.22.61", "port": "47001", "protocol": "UNKNOWN", "start_time": "2026-05-17T01:18:17.028105Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-15T15:31:29.175412Z", "ip": "176.120.22.61", "port": "5985", "protocol": "UNKNOWN", "start_time": "2026-05-15T15:31:28.175412Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-15T04:14:16.791927Z", "ip": "176.120.22.61", "port": "135", "protocol": "DCERPC", "start_time": "2026-05-15T04:14:15.791927Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-15T03:55:36.848816Z", "ip": "176.120.22.61", "port": "47001", "protocol": "UNKNOWN", "start_time": "2026-05-15T03:55:35.848816Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-14T14:56:17.761063Z", "ip": "176.120.22.61", "port": "5985", "protocol": "UNKNOWN", "start_time": "2026-05-14T14:56:16.761063Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-13T15:08:00.800876Z", "ip": "176.120.22.61", "port": "47001", "protocol": "UNKNOWN", "start_time": "2026-05-13T15:07:59.800876Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-13T03:26:28.627729Z", "ip": "176.120.22.61", "port": "135", "protocol": "DCERPC", "start_time": "2026-05-12T07:50:34.962837Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-13T02:20:49.751824Z", "ip": "176.120.22.61", "port": "5985", "protocol": "UNKNOWN", "start_time": "2026-05-13T02:20:48.751824Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-12T18:40:14.353273Z", "ip": "176.120.22.61", "port": "5985", "protocol": "UNKNOWN", "start_time": "2026-05-12T18:40:13.353273Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-11T18:48:39.930699Z", "ip": "176.120.22.61", "port": "47001", "protocol": "UNKNOWN", "start_time": "2026-05-11T18:48:38.930699Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-11T02:01:01.410146Z", "ip": "176.120.22.61", "port": "139", "protocol": "NETBIOS", "start_time": "2026-05-10T02:24:06.195117Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-10T22:31:35.377374Z", "ip": "176.120.22.61", "port": "5985", "protocol": "UNKNOWN", "start_time": "2026-05-10T22:31:34.377374Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-10T05:37:23.559231Z", "ip": "176.120.22.61", "port": "47001", "protocol": "UNKNOWN", "start_time": "2026-05-10T05:37:22.559231Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-09T21:37:43.506453Z", "ip": "176.120.22.61", "port": "5985", "protocol": "UNKNOWN", "start_time": "2026-05-09T21:37:42.506453Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-09T21:37:29.450271Z", "ip": "176.120.22.61", "port": "5985", "protocol": "UNKNOWN", "start_time": "2026-05-09T21:37:28.450271Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-09T19:54:50.330648Z", "ip": "176.120.22.61", "port": "139", "protocol": "UNKNOWN", "start_time": "2026-05-09T19:54:49.330648Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-08T21:15:58.311145Z", "ip": "176.120.22.61", "port": "5985", "protocol": "UNKNOWN", "start_time": "2026-05-07T22:59:54.997321Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-08T21:15:51.999282Z", "ip": "176.120.22.61", "port": "47001", "protocol": "UNKNOWN", "start_time": "2026-05-08T21:15:50.999282Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-07T18:31:48.72907Z", "ip": "176.120.22.61", "port": "5985", "protocol": "UNKNOWN", "start_time": "2026-05-06T17:48:21.177639Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-05T02:28:47.751376Z", "ip": "176.120.22.61", "port": "137", "protocol": "NETBIOS", "start_time": "2026-05-05T02:28:46.751376Z", "transport_protocol": "UDP"}, {"end_time": "2026-05-04T08:28:18.641295Z", "ip": "176.120.22.61", "port": "47001", "protocol": "HTTP", "start_time": "2026-05-04T08:28:17.641295Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-03T02:16:38.304547Z", "ip": "176.120.22.61", "port": "137", "protocol": "NETBIOS", "start_time": "2026-05-03T02:16:37.304547Z", "transport_protocol": "UDP"}, {"end_time": "2026-05-02T04:21:56.385586Z", "ip": "176.120.22.61", "port": "47001", "protocol": "HTTP", "start_time": "2026-05-02T04:21:55.385586Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-01T11:51:04.381131Z", "ip": "176.120.22.61", "port": "5985", "protocol": "HTTP", "start_time": "2026-04-30T11:09:07.220963Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-30T22:59:39.760584Z", "ip": "176.120.22.61", "port": "47001", "protocol": "HTTP", "start_time": "2026-04-29T21:47:33.085667Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-30T00:32:19.26696Z", "ip": "176.120.22.61", "port": "135", "protocol": "DCERPC", "start_time": "2026-04-27T23:16:37.032761Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-29T12:17:13.960929Z", "ip": "176.120.22.61", "port": "3389", "protocol": "UNKNOWN", "start_time": "2026-04-29T12:17:12.960929Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-29T06:41:09.172449Z", "ip": "176.120.22.61", "port": "5985", "protocol": "HTTP", "start_time": "2026-04-29T06:41:08.172449Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-28T22:32:55.762689Z", "ip": "176.120.22.61", "port": "137", "protocol": "NETBIOS", "start_time": "2026-04-27T01:40:45.637947Z", "transport_protocol": "UDP"}, {"end_time": "2026-04-28T21:27:04.225648Z", "ip": "176.120.22.61", "port": "3389", "protocol": "UNKNOWN", "start_time": "2026-04-28T21:27:03.225648Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-28T16:35:18.810593Z", "ip": "176.120.22.61", "port": "3389", "protocol": "RDP", "start_time": "2026-04-28T16:35:17.810593Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-28T12:48:34.982189Z", "ip": "176.120.22.61", "port": "47001", "protocol": "HTTP", "start_time": "2026-04-27T11:58:42.4909Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-28T08:44:26.059079Z", "ip": "176.120.22.61", "port": "139", "protocol": "UNKNOWN", "start_time": "2026-04-28T08:44:25.059079Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-27T22:15:41.662264Z", "ip": "176.120.22.61", "port": "5985", "protocol": "HTTP", "start_time": "2026-04-27T22:15:40.662264Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-27T16:13:54.947103Z", "ip": "176.120.22.61", "port": "3389", "protocol": "UNKNOWN", "start_time": "2026-04-27T16:13:53.947103Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-27T07:45:54.375223Z", "ip": "176.120.22.61", "port": "139", "protocol": "UNKNOWN", "start_time": "2026-04-27T07:45:53.375223Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-26T13:58:08.231706Z", "ip": "176.120.22.61", "port": "5985", "protocol": "HTTP", "start_time": "2026-04-26T13:58:07.231706Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-26T02:15:30.006463Z", "ip": "176.120.22.61", "port": "3389", "protocol": "UNKNOWN", "start_time": "2026-04-26T02:15:29.006463Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-25T18:53:50.934945Z", "ip": "176.120.22.61", "port": "47001", "protocol": "HTTP", "start_time": "2026-04-21T15:02:44.256579Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-24T21:16:57.206015Z", "ip": "176.120.22.61", "port": "3389", "protocol": "RDP", "start_time": "2026-04-24T21:16:56.206015Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-24T21:08:12.467422Z", "ip": "176.120.22.61", "port": "5985", "protocol": "HTTP", "start_time": "2026-04-23T19:45:59.138797Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-24T12:41:05.027246Z", "ip": "176.120.22.61", "port": "135", "protocol": "DCERPC", "start_time": "2026-04-24T12:41:04.027246Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-24T12:33:52.933439Z", "ip": "176.120.22.61", "port": "139", "protocol": "UNKNOWN", "start_time": "2026-04-23T12:17:21.241554Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-22T18:51:16.543959Z", "ip": "176.120.22.61", "port": "139", "protocol": "NETBIOS", "start_time": "2026-04-22T18:51:15.543959Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-22T15:36:46.004145Z", "ip": "176.120.22.61", "port": "135", "protocol": "DCERPC", "start_time": "2026-04-22T15:36:45.004145Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-22T11:21:05.741384Z", "ip": "176.120.22.61", "port": "5985", "protocol": "HTTP", "start_time": "2026-04-22T11:21:04.741384Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-21T10:32:12.509336Z", "ip": "176.120.22.61", "port": "135", "protocol": "DCERPC", "start_time": "2026-04-18T07:58:05.149909Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-21T04:32:24.241526Z", "ip": "176.120.22.61", "port": "3389", "protocol": "RDP", "start_time": "2026-04-19T02:57:17.731764Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-20T23:16:25.20814Z", "ip": "176.120.22.61", "port": "5985", "protocol": "UNKNOWN", "start_time": "2026-04-20T23:16:24.20814Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-20T19:17:26.020854Z", "ip": "176.120.22.61", "port": "5985", "protocol": "HTTP", "start_time": "2026-04-20T19:17:25.020854Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-20T10:05:01.609157Z", "ip": "176.120.22.61", "port": "47001", "protocol": "HTTP", "start_time": "2026-04-20T10:05:00.609157Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-20T02:35:39.603981Z", "ip": "176.120.22.61", "port": "5985", "protocol": "UNKNOWN", "start_time": "2026-04-19T01:36:31.641712Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-19T04:53:03.044811Z", "ip": "176.120.22.61", "port": "47001", "protocol": "HTTP", "start_time": "2026-04-17T02:48:43.238301Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-19T01:36:00.433291Z", "ip": "176.120.22.61", "port": "5985", "protocol": "UNKNOWN", "start_time": "2026-04-18T00:53:03.996167Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-17T19:42:29.956391Z", "ip": "176.120.22.61", "port": "5985", "protocol": "UNKNOWN", "start_time": "2026-04-17T19:42:28.956391Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-17T13:37:34.38622Z", "ip": "176.120.22.61", "port": "3389", "protocol": "RDP", "start_time": "2026-04-16T12:40:28.151909Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-17T02:45:51.877095Z", "ip": "176.120.22.61", "port": "135", "protocol": "DCERPC", "start_time": "2026-04-17T02:45:50.877095Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-16T20:36:17.354577Z", "ip": "176.120.22.61", "port": "137", "protocol": "NETBIOS", "start_time": "2026-04-15T19:35:20.166111Z", "transport_protocol": "UDP"}, {"end_time": "2026-04-16T18:42:11.019621Z", "ip": "176.120.22.61", "port": "5985", "protocol": "UNKNOWN", "start_time": "2026-04-16T18:42:10.019621Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-16T10:34:55.268684Z", "ip": "176.120.22.61", "port": "139", "protocol": "UNKNOWN", "start_time": "2026-04-16T10:34:54.268684Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-16T01:02:53.809618Z", "ip": "176.120.22.61", "port": "139", "protocol": "NETBIOS", "start_time": "2026-04-16T01:02:52.809618Z", "transport_protocol": "TCP"}]}}} +{"ip": "204.76.203.7", "asn": "AS51396", "name": "PFCLOUD (Pfcloud UG)", "honeylabs_events": 1095, "host": {"result": {"extensions": {}, "resource": {"autonomous_system": {"asn": 51396, "bgp_prefix": "204.76.203.0/24", "country_code": "DE", "description": "PFCLOUD - Pfcloud UG (haftungsbeschrankt)", "name": "PFCLOUD - Pfcloud UG (haftungsbeschrankt)"}, "dns": {"reverse_dns": {"names": ["204.76.203.7.ptr.pfcloud.network"], "resolve_time": "2026-08-26T14:49:40Z"}}, "greynoise": {"actor": "unknown", "classification": "malicious", "last_observed_time": "2026-08-30T00:00:00Z", "tags": [{"name": "Carries HTTP Referer"}, {"name": "CrushFTP Scanner"}, {"name": "F5 BIG-IP Crawler"}, {"name": "FTP Protocol"}, {"name": "Generic IoT Default Password Attempt"}, {"name": "Generic Open Redirect"}, {"name": "Generic XSS Commands in Request"}, {"name": "Go HTTP Client"}, {"name": "ICMPv4 Protocol"}, {"name": "Ivanti Connect Secure (ICS) Scanner"}, {"name": "Ivanti VTM Scanner"}, {"name": "Looks Like Debian server"}, {"name": "MySQL Protocol"}, {"name": "Open Proxy Scanner"}, {"name": "Outlook Web Access Crawler"}, {"name": "Outlook Web Access Login Crawler"}, {"name": "Ping Scanner"}, {"name": "Pulse Secure VPN Scanner"}, {"name": "SOCKS5 Proxy Scanner"}, {"name": "SSH Alternative Port Crawler"}, {"name": "SSH Connection Attempt"}, {"name": "Sophos XG Firewall User Portal Scanner"}, {"name": "Telnet Login Attempt"}, {"name": "Telnet Protocol"}, {"name": "Web Crawler"}, {"name": "Wordpress Enumeration"}]}, "ip": "204.76.203.7", "labels": [{"confidence": 0.75, "source": "censys", "value": "BULLETPROOF"}], "location": {"city": "Eygelshoven", "continent": "Europe", "coordinates": {"latitude": 50.89394, "longitude": 6.0587}, "country": "Netherlands", "country_code": "NL", "postal_code": "6471", "province": "Limburg", "timezone": "Europe/Amsterdam"}, "network": [{"hosting": true, "source": "IPINFO"}], "operating_system": {"confidence": 0.25, "cpe": "cpe:2.3:o:canonical:linux:*:*:*:*:*:*:*:*", "evidence": [{"data_path": "ssh.endpoint_id.raw"}], "part": "o", "product": "linux", "source": "recog", "vendor": "canonical"}, "privacy": [{"source": "IPINFO"}], "reputation": {"evidence": [{"additional_fields": [{"field": "label", "value": "BULLETPROOF"}], "category": "network_infra", "evidence_score": 1}], "model_version": "0.1.0", "score": 0.42, "score_level": "medium_risk"}, "service_count": 2, "services": [{"banner": "SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18", "banner_hash_sha256": "b04692223bd773fee5925703ef034b57925f84bbb50484fb653f809efe00baca", "banner_hex": "5353482d322e302d4f70656e5353485f392e367031205562756e74752d337562756e747531332e3138", "exposures": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "SSH", "literal_match": "SSH"}], "id": "CENSYS-2022-1066", "metrics": {}, "name": "Exposed SSH Service", "risk_source": "censys", "severity": "medium", "source": "censys", "year": 2022}], "ip": "204.76.203.7", "ja4tscan": {"fingerprint": "65160_2-4-8-1-3_1460_7_1-2-4-8-16", "scan_time": "2026-08-29T17:42:23Z"}, "labels": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "SSH", "literal_match": "SSH"}], "source": "censys", "value": "REMOTE_ACCESS"}], "operating_systems": [{"confidence": 0.25, "cpe": "cpe:2.3:o:canonical:linux:*:*:*:*:*:*:*:*", "evidence": [{"data_path": "ssh.endpoint_id.raw"}], "part": "o", "product": "linux", "source": "recog", "vendor": "canonical"}], "port": 22, "protocol": "SSH", "scan_time": "2026-08-31T00:36:57Z", "software": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "SSH", "literal_match": "SSH"}], "part": "a", "source": "censys", "type": ["REMOTE_ACCESS"]}, {"confidence": 0.25, "cpe": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "evidence": [{"data_path": "ssh.endpoint_id.raw"}], "part": "a", "product": "openssh", "source": "recog", "vendor": "openbsd", "version": "9.6p1"}], "ssh": {"algorithm_selection": {"client_to_server_alg_group": {"cipher": "aes128-ctr", "compression": "none", "mac": "hmac-sha2-256"}, "host_key_algorithm": "ecdsa-sha2-nistp256", "kex_algorithm": "curve25519-sha256@libssh.org", "server_to_client_alg_group": {"cipher": "aes128-ctr", "compression": "none", "mac": "hmac-sha2-256"}}, "endpoint_id": {"comment": "Ubuntu-3ubuntu13.18", "protocol_version": "2.0", "raw": "SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18", "software_version": "OpenSSH_9.6p1"}, "hassh_fingerprint": "e42184b06d45385a906f0803d04c83da", "kex_init_message": {"client_to_server_ciphers": ["chacha20-poly1305@openssh.com", "aes128-ctr", "aes192-ctr", "aes256-ctr", "aes128-gcm@openssh.com", "aes256-gcm@openssh.com"], "client_to_server_compression": ["none", "zlib@openssh.com"], "client_to_server_macs": ["umac-64-etm@openssh.com", "umac-128-etm@openssh.com", "hmac-sha2-256-etm@openssh.com", "hmac-sha2-512-etm@openssh.com", "hmac-sha1-etm@openssh.com", "umac-64@openssh.com", "umac-128@openssh.com", "hmac-sha2-256", "hmac-sha2-512", "hmac-sha1"], "host_key_algorithms": ["rsa-sha2-512", "rsa-sha2-256", "ecdsa-sha2-nistp256", "ssh-ed25519"], "kex_algorithms": ["sntrup761x25519-sha512@openssh.com", "curve25519-sha256", "curve25519-sha256@libssh.org", "ecdh-sha2-nistp256", "ecdh-sha2-nistp384", "ecdh-sha2-nistp521", "diffie-hellman-group-exchange-sha256", "diffie-hellman-group16-sha512", "diffie-hellman-group18-sha512", "diffie-hellman-group14-sha256", "ext-info-s", "kex-strict-s-v00@openssh.com"], "server_to_client_ciphers": ["chacha20-poly1305@openssh.com", "aes128-ctr", "aes192-ctr", "aes256-ctr", "aes128-gcm@openssh.com", "aes256-gcm@openssh.com"], "server_to_client_compression": ["none", "zlib@openssh.com"], "server_to_client_macs": ["umac-64-etm@openssh.com", "umac-128-etm@openssh.com", "hmac-sha2-256-etm@openssh.com", "hmac-sha2-512-etm@openssh.com", "hmac-sha1-etm@openssh.com", "umac-64@openssh.com", "umac-128@openssh.com", "hmac-sha2-256", "hmac-sha2-512", "hmac-sha1"]}, "server_host_key": {"ecdsa_public_key": {"b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=", "curve": "P-256", "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=", "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=", "length": 256, "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=", "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=", "x": "w+tcwcFaslsel1gEvQ2csUu+bsTKUJrEHtFJqB/PGiI=", "y": "jroXSsWhNDvOKZ0rdr2n8mLXOVVABLF5+eP/ZS4nwz4="}, "fingerprint_sha256": "5b832758258137c8f09d36551d7dd770f192ea181de615f24eefe6835e04e064"}}, "transport_protocol": "tcp", "vulns": [{"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=8.5p1 && <=9.7p1"}, {"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=8.6 && <=9.8"}], "id": "CVE-2024-6387", "kev": [{"date_added": "2024-07-17T00:00:00Z", "source": "third_party"}], "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "high", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 8.1, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "epss": {"percentile": 0.999, "score": 0.995}}, "name": "CVE-2024-6387", "risk_source": "cve", "severity": "high", "source": "third_party", "year": 2024}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=6.8p1 && <=9.9p1"}, {"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=6.9 && <=9.8"}], "id": "CVE-2025-26465", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 6.8, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"}, "epss": {"percentile": 0.941, "score": 0.076}}, "name": "CVE-2025-26465", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2025}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=9.5p1 && <=9.9p1"}], "id": "CVE-2025-26466", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "high", "confidentiality": "none", "integrity": "none", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 5.9, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "epss": {"percentile": 0.985, "score": 0.398}}, "name": "CVE-2025-26466", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2025}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=7.4 && <10.0"}], "id": "CVE-2025-32728", "metrics": {"cvss_v31": {"components": {"attack_complexity": "low", "attack_vector": "local", "availability": "none", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "changed", "user_interaction": "none"}, "score": 4.3, "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N"}, "epss": {"percentile": 0.085, "score": 0.002}}, "name": "CVE-2025-32728", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2025}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35385", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "high", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 7.5, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}, "epss": {"percentile": 0.468, "score": 0.006}}, "name": "CVE-2026-35385", "risk_source": "cve", "severity": "high", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35386", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "local", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "low", "scope": "unchanged", "user_interaction": "none"}, "score": 3.6, "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.242, "score": 0.003}}, "name": "CVE-2026-35386", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35387", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "none", "integrity": "low", "privileges_required": "low", "scope": "unchanged", "user_interaction": "none"}, "score": 3.1, "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N"}, "epss": {"percentile": 0.145, "score": 0.002}}, "name": "CVE-2026-35387", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35388", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "local", "availability": "none", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 2.5, "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N"}, "epss": {"percentile": 0.029, "score": 0.001}}, "name": "CVE-2026-35388", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35414", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "low", "scope": "unchanged", "user_interaction": "none"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.072, "score": 0.002}}, "name": "CVE-2026-35414", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59995", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L"}, "epss": {"percentile": 0.162, "score": 0.002}}, "name": "CVE-2026-59995", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59996", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L"}, "epss": {"percentile": 0.162, "score": 0.002}}, "name": "CVE-2026-59996", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59997", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.07, "score": 0.002}}, "name": "CVE-2026-59997", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59998", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 4.8, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.075, "score": 0.002}}, "name": "CVE-2026-59998", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59999", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "none", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 5.9, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"}, "epss": {"percentile": 0.054, "score": 0.002}}, "name": "CVE-2026-59999", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-60000", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "none", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 3.7, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "epss": {"percentile": 0.367, "score": 0.004}}, "name": "CVE-2026-60000", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-60001", "metrics": {"cvss_v31": {"components": {"attack_complexity": "low", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 6.5, "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"}, "epss": {"percentile": 0.211, "score": 0.003}}, "name": "CVE-2026-60001", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-60002", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 7.7, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L"}, "epss": {"percentile": 0.221, "score": 0.003}}, "name": "CVE-2026-60002", "risk_source": "cve", "severity": "high", "source": "third_party", "year": 2026}]}, {"banner": "HTTP/1.1 403 Forbidden\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n", "banner_hash_sha256": "19ae3399290fabf66adfeaeafb625210012fe0e4a857cd3ff1f1ddc5c6c1d6fc", "endpoints": [{"banner": "HTTP/1.1 403 Forbidden\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n", "banner_hash_sha256": "19ae3399290fabf66adfeaeafb625210012fe0e4a857cd3ff1f1ddc5c6c1d6fc", "endpoint_type": "HTTP", "hostname": "204.76.203.7", "http": {"body": "<html>\r\n<head><title>403 Forbidden</title></head>\r\n<body>\r\n<center><h1>403 Forbidden</h1></center>\r\n<hr><center>nginx/1.24.0 (Ubuntu)</center>\r\n</body>\r\n</html>\r\n", "body_hash_sha1": "323b3ebdc78e3e6f9581706771cbd61bfed318a4", "body_hash_sha256": "2de2499f4e5f896995ee7ebaa527a39b75f520f98e12110ec6c156a2433dbe75", "body_hash_tlsh": "d6c08c67351e3c0ce7a322b422c36aa0d08bd3b088da1a10c640025331c31278ac7315", "body_size": 162, "headers": {"Connection": {"headers": ["keep-alive"]}, "Content-Encoding": {"headers": ["gzip"]}, "Content-Type": {"headers": ["text/html"]}, "Date": {"headers": ["<REDACTED>"]}, "Server": {"headers": ["nginx/1.24.0 (Ubuntu)"]}, "Transfer-Encoding": {"headers": ["chunked"]}}, "html_tags": ["<title>403 Forbidden</title>"], "html_title": "403 Forbidden", "protocol": "HTTP/1.1", "status_code": 403, "status_reason": "Forbidden", "supported_versions": ["HTTP/1.1"], "uri": "http://204.76.203.7:9001/"}, "ip": "204.76.203.7", "path": "/", "port": 9001, "scan_time": "2026-08-31T04:23:34Z", "transport_protocol": "tcp"}], "ip": "204.76.203.7", "ja4tscan": {"fingerprint": "65160_2-4-8-1-3_1460_7_1-2-4-8-16", "scan_time": "2026-08-29T00:48:26Z"}, "operating_systems": [{"confidence": 0.5, "cpe": "cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*", "evidence": [{"data_path": "http.headers.key", "found_value": "Server", "literal_match": "Server"}, {"data_path": "http.headers.value", "found_value": "Ubuntu"}], "part": "o", "product": "ubuntu", "source": "third_party", "vendor": "canonical"}], "port": 9001, "protocol": "HTTP", "scan_time": "2026-08-31T04:23:34Z", "software": [{"confidence": 0.5, "cpe": "cpe:2.3:a:f5:nginx:1.24.0:*:*:*:*:*:*:*", "evidence": [{"data_path": "http.headers.key", "found_value": "Server", "literal_match": "Server"}, {"data_path": "http.headers.value", "found_value": "nginx/1.24.0"}], "life_cycle": {"release_date": "2023-04-11T00:00:00Z"}, "part": "a", "product": "nginx", "source": "third_party", "vendor": "f5", "version": "1.24.0"}], "transport_protocol": "tcp", "vulns": [{"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:f5:nginx:1.24.0:*:*:*:*:*:*:*", "semver_expression": ">=1.9.5 && <=1.25.2"}], "id": "CVE-2023-44487", "kev": [{"date_added": "2023-10-10T00:00:00Z", "date_due": "2023-10-31T00:00:00Z", "source": "cisa"}, {"date_added": "2023-10-10T00:00:00Z", "source": "third_party"}], "metrics": {"cvss_v31": {"components": {"attack_complexity": "low", "attack_vector": "network", "availability": "high", "confidentiality": "none", "integrity": "none", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 7.5, "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "epss": {"percentile": 1, "score": 1}}, "name": "CVE-2023-44487", "risk_source": "cve", "severity": "high", "source": "third_party", "year": 2023}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:f5:nginx:1.24.0:*:*:*:*:*:*:*", "semver_expression": ">=1.11.0 && <1.34.2"}], "id": "CVE-2025-1695", "metrics": {"cvss_v31": {"components": {"attack_complexity": "low", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "none", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 5.3, "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "cvss_v40": {"components": {"attack_complexity": "low", "attack_requirements": "none", "attack_vector": "network", "privileges_required": "none", "user_interaction": "none"}, "score": 6.9, "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"}, "epss": {"percentile": 0.449, "score": 0.006}}, "name": "CVE-2025-1695", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2025}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:f5:nginx:1.24.0:*:*:*:*:*:*:*", "semver_expression": ">=1.11.4 && <1.26.3"}], "id": "CVE-2025-23419", "metrics": {"cvss_v31": {"components": {"attack_complexity": "low", "attack_vector": "network", "availability": "none", "confidentiality": "low", "integrity": "none", "privileges_required": "low", "scope": "unchanged", "user_interaction": "none"}, "score": 4.3, "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}, "cvss_v40": {"components": {"attack_complexity": "low", "attack_requirements": "none", "attack_vector": "network", "privileges_required": "low", "user_interaction": "none"}, "score": 5.3, "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"}, "epss": {"percentile": 0.85, "score": 0.027}}, "name": "CVE-2025-23419", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2025}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:f5:nginx:1.24.0:*:*:*:*:*:*:*", "semver_expression": "<1.29.8"}], "id": "CVE-2026-49975", "metrics": {"cvss_v31": {"components": {"attack_complexity": "low", "attack_vector": "network", "availability": "high", "confidentiality": "none", "integrity": "none", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 7.5, "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "epss": {"percentile": 0.982, "score": 0.31}}, "name": "CVE-2026-49975", "risk_source": "cve", "severity": "high", "source": "third_party", "year": 2026}]}], "whois": {"network": {"allocation_type": "ALLOCATION", "cidrs": ["204.76.203.0/24"], "created": "2025-01-15T00:00:00Z", "handle": "INTEL-NET1-25", "name": "Intelligence Hosting LLC", "updated": "2025-08-05T00:00:00Z"}, "organization": {"abuse_contacts": [{"email": "abuse@pfcloud.io", "handle": "ABUSE8542-ARIN", "name": "Abuse"}], "admin_contacts": [{"email": "admin@pfcloud.io", "handle": "ADMIN8226-ARIN", "name": "Admin"}], "city": "Eygelshoven", "country": "NL", "handle": "IHL-76", "name": "Intelligence Hosting LLC", "postal_code": "6471WV", "street": "Bart van Slobbestraat 16B", "tech_contacts": [{"email": "admin@pfcloud.io", "handle": "TECH1363-ARIN", "name": "Tech"}]}}}}}, "services": {"result": {"next_page_token": "", "ranges": [{"end_time": "2026-08-31T00:36:58.912589Z", "ip": "204.76.203.7", "port": "22", "protocol": "SSH", "start_time": "2026-08-02T18:27:51.550418Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-30T17:26:10.944201Z", "ip": "204.76.203.7", "port": "9001", "protocol": "HTTP", "start_time": "2026-08-05T11:01:58.291048Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-05T00:59:03.233243Z", "ip": "204.76.203.7", "port": "80", "protocol": "HTTP", "start_time": "2026-08-04T19:00:24.660869Z", "transport_protocol": "TCP"}, {"end_time": "2026-06-20T23:13:00.27843Z", "ip": "204.76.203.7", "port": "22", "protocol": "SSH", "start_time": "2026-04-13T01:57:40.525712Z", "transport_protocol": "TCP"}, {"end_time": "2026-06-20T22:41:15.954445Z", "ip": "204.76.203.7", "port": "631", "protocol": "IPP", "start_time": "2025-12-31T14:40:10.242137Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-14T12:31:10.595721Z", "ip": "204.76.203.7", "port": "27015", "protocol": "VALVE", "start_time": "2026-04-10T23:23:32.006147Z", "transport_protocol": "UDP"}, {"end_time": "2026-04-13T19:31:28.808357Z", "ip": "204.76.203.7", "port": "53", "protocol": "DNS", "start_time": "2026-04-10T15:33:09.288174Z", "transport_protocol": "UDP"}, {"end_time": "2026-04-10T17:52:12.943061Z", "ip": "204.76.203.7", "port": "22", "protocol": "SSH", "start_time": "2026-02-04T09:21:00.552446Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-04T05:31:37.648212Z", "ip": "204.76.203.7", "port": "22", "protocol": "SSH", "start_time": "2025-12-31T06:31:51.118589Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-30T22:13:19.908921Z", "ip": "204.76.203.7", "port": "631", "protocol": "IPP", "start_time": "2025-12-09T05:54:24.121285Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-30T05:48:51.407267Z", "ip": "204.76.203.7", "port": "22", "protocol": "SSH", "start_time": "2025-12-08T22:30:45.299411Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-08T13:07:45.123075Z", "ip": "204.76.203.7", "port": "631", "protocol": "IPP", "start_time": "2025-11-16T11:19:55.831603Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-07T21:31:56.172415Z", "ip": "204.76.203.7", "port": "22", "protocol": "SSH", "start_time": "2025-11-16T16:11:55.968141Z", "transport_protocol": "TCP"}, {"end_time": "2025-11-16T05:05:23.573539Z", "ip": "204.76.203.7", "port": "631", "protocol": "IPP", "start_time": "2025-10-25T23:01:15.318546Z", "transport_protocol": "TCP"}, {"end_time": "2025-11-15T11:36:11.459205Z", "ip": "204.76.203.7", "port": "22", "protocol": "SSH", "start_time": "2025-10-25T03:11:48.650242Z", "transport_protocol": "TCP"}]}}} +{"ip": "204.76.203.14", "asn": "AS51396", "name": "PFCLOUD (Pfcloud UG)", "honeylabs_events": 424, "host": {"result": {"extensions": {}, "resource": {"autonomous_system": {"asn": 51396, "bgp_prefix": "204.76.203.0/24", "country_code": "DE", "description": "PFCLOUD - Pfcloud UG (haftungsbeschrankt)", "name": "PFCLOUD - Pfcloud UG (haftungsbeschrankt)"}, "dns": {"reverse_dns": {"names": ["204.76.203.14.ptr.pfcloud.network"], "resolve_time": "2026-08-23T06:45:12Z"}}, "greynoise": {"actor": "unknown", "classification": "malicious", "last_observed_time": "2026-08-30T00:00:00Z", "tags": [{"name": "AWS Configuration Scanner"}, {"name": "Carries HTTP Referer"}, {"name": "CrushFTP Scanner"}, {"name": "ENV Crawler"}, {"name": "F5 BIG-IP Crawler"}, {"name": "Generic /proc Enumeration Attempt"}, {"name": "Generic Login Attempt"}, {"name": "Generic PHPInfo Access Attempt"}, {"name": "Generic Path Traversal Attempt"}, {"name": "Generic SQL Commands in Request"}, {"name": "Generic Sensitive File Access Attempt"}, {"name": "Generic Suspicious Linux Command in Request"}, {"name": "Generic XSS Commands in Request"}, {"name": "Git Config Crawler"}, {"name": "Ivanti Connect Secure (ICS) Scanner"}, {"name": "Ivanti VTM Scanner"}, {"name": "Outlook Web Access Crawler"}, {"name": "Palo Alto Networks PAN-OS CVE-2020-2034 Crawler"}, {"name": "Pulse Secure VPN Scanner"}, {"name": "Sophos XG Firewall User Portal Scanner"}, {"name": "Spring Boot Actuator Crawler"}, {"name": "TLS/SSL Crawler"}, {"name": "Vite Arbitrary File Disclosure CVE-2025-30208 Attempt"}, {"name": "Web Crawler"}, {"name": "Wordpress Enumeration"}]}, "ip": "204.76.203.14", "labels": [{"confidence": 0.75, "source": "censys", "value": "BULLETPROOF"}], "location": {"city": "Eygelshoven", "continent": "Europe", "coordinates": {"latitude": 50.89394, "longitude": 6.0587}, "country": "Netherlands", "country_code": "NL", "postal_code": "6471", "province": "Limburg", "timezone": "Europe/Amsterdam"}, "network": [{"hosting": true, "source": "IPINFO"}], "privacy": [{"source": "IPINFO"}], "reputation": {"evidence": [{"additional_fields": [{"field": "label", "value": "BULLETPROOF"}], "category": "network_infra", "evidence_score": 1}], "model_version": "0.1.0", "score": 0.42, "score_level": "medium_risk"}, "whois": {"network": {"allocation_type": "ALLOCATION", "cidrs": ["204.76.203.0/24"], "created": "2025-01-15T00:00:00Z", "handle": "INTEL-NET1-25", "name": "Intelligence Hosting LLC", "updated": "2025-08-05T00:00:00Z"}, "organization": {"abuse_contacts": [{"email": "abuse@pfcloud.io", "handle": "ABUSE8542-ARIN", "name": "Abuse"}], "admin_contacts": [{"email": "admin@pfcloud.io", "handle": "ADMIN8226-ARIN", "name": "Admin"}], "city": "Eygelshoven", "country": "NL", "handle": "IHL-76", "name": "Intelligence Hosting LLC", "postal_code": "6471WV", "street": "Bart van Slobbestraat 16B", "tech_contacts": [{"email": "admin@pfcloud.io", "handle": "TECH1363-ARIN", "name": "Tech"}]}}}}}, "services": {"result": {"next_page_token": "", "ranges": [{"end_time": "2026-08-27T16:32:07.491338Z", "ip": "204.76.203.14", "port": "22", "protocol": "SSH", "start_time": "2026-08-09T21:47:05.820745Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-10T01:31:59.502596Z", "ip": "204.76.203.14", "port": "22", "protocol": "SSH", "start_time": "2025-12-31T17:32:54.114183Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-09T19:28:55.684035Z", "ip": "204.76.203.14", "port": "443", "protocol": "HTTP", "start_time": "2025-12-31T05:54:23.690691Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-09T19:25:15.458301Z", "ip": "204.76.203.14", "port": "6661", "protocol": "HTTP", "start_time": "2025-12-31T11:02:00.985028Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-09T16:06:39.295043Z", "ip": "204.76.203.14", "port": "7771", "protocol": "HTTP", "start_time": "2025-12-31T12:52:37.603701Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-09T16:04:23.715036Z", "ip": "204.76.203.14", "port": "8080", "protocol": "HTTP", "start_time": "2025-12-31T16:18:18.02257Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-09T11:21:57.537286Z", "ip": "204.76.203.14", "port": "80", "protocol": "HTTP", "start_time": "2025-12-31T22:51:09.822806Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-09T09:27:35.367524Z", "ip": "204.76.203.14", "port": "9090", "protocol": "HTTP", "start_time": "2025-12-31T07:44:32.497925Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-09T09:27:23.46064Z", "ip": "204.76.203.14", "port": "9090", "protocol": "UNKNOWN", "start_time": "2025-12-31T07:44:18.475828Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-31T03:04:32.921751Z", "ip": "204.76.203.14", "port": "8080", "protocol": "HTTP", "start_time": "2025-12-09T18:01:47.570803Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-30T23:21:01.397645Z", "ip": "204.76.203.14", "port": "7771", "protocol": "HTTP", "start_time": "2025-12-29T19:21:46.048084Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-30T21:55:58.953856Z", "ip": "204.76.203.14", "port": "80", "protocol": "HTTP", "start_time": "2025-12-09T01:33:50.324763Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-30T19:12:54.516066Z", "ip": "204.76.203.14", "port": "9090", "protocol": "HTTP", "start_time": "2025-12-09T00:03:03.512292Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-30T16:31:08.387004Z", "ip": "204.76.203.14", "port": "22", "protocol": "SSH", "start_time": "2025-12-09T13:32:16.390577Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-30T15:15:08.964512Z", "ip": "204.76.203.14", "port": "443", "protocol": "HTTP", "start_time": "2025-12-09T16:55:32.982426Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-30T12:44:15.477675Z", "ip": "204.76.203.14", "port": "9090", "protocol": "UNKNOWN", "start_time": "2025-12-12T07:31:32.792976Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-30T10:23:20.041498Z", "ip": "204.76.203.14", "port": "6661", "protocol": "HTTP", "start_time": "2025-12-27T23:21:42.260369Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-08T17:09:52.761007Z", "ip": "204.76.203.14", "port": "9090", "protocol": "HTTP", "start_time": "2025-11-28T21:16:11.436292Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-08T17:06:24.517869Z", "ip": "204.76.203.14", "port": "8080", "protocol": "HTTP", "start_time": "2025-11-16T15:54:19.834371Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-08T16:38:27.216705Z", "ip": "204.76.203.14", "port": "443", "protocol": "HTTP", "start_time": "2025-11-16T07:16:47.666993Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-08T15:46:54.532402Z", "ip": "204.76.203.14", "port": "80", "protocol": "HTTP", "start_time": "2025-11-16T15:42:12.380467Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-08T12:30:59.777678Z", "ip": "204.76.203.14", "port": "22", "protocol": "SSH", "start_time": "2025-11-16T19:28:54.328909Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-07T23:35:48.990996Z", "ip": "204.76.203.14", "port": "9090", "protocol": "UNKNOWN", "start_time": "2025-11-28T21:15:57.816764Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-04T11:05:56.794605Z", "ip": "204.76.203.14", "port": "31210", "protocol": "HTTP", "start_time": "2025-11-16T17:54:23.026233Z", "transport_protocol": "TCP"}, {"end_time": "2025-11-16T05:48:06.325853Z", "ip": "204.76.203.14", "port": "80", "protocol": "HTTP", "start_time": "2025-10-25T00:57:30.596288Z", "transport_protocol": "TCP"}, {"end_time": "2025-11-16T04:10:20.882915Z", "ip": "204.76.203.14", "port": "22", "protocol": "SSH", "start_time": "2025-10-25T06:00:09.990157Z", "transport_protocol": "TCP"}, {"end_time": "2025-11-15T14:38:39.450768Z", "ip": "204.76.203.14", "port": "8080", "protocol": "HTTP", "start_time": "2025-10-25T09:12:06.696562Z", "transport_protocol": "TCP"}, {"end_time": "2025-11-15T13:20:03.98947Z", "ip": "204.76.203.14", "port": "31210", "protocol": "HTTP", "start_time": "2025-10-25T01:41:00.727394Z", "transport_protocol": "TCP"}, {"end_time": "2025-11-15T06:38:04.335943Z", "ip": "204.76.203.14", "port": "443", "protocol": "HTTP", "start_time": "2025-10-24T23:53:49.128131Z", "transport_protocol": "TCP"}, {"end_time": "2025-10-24T20:27:44.221976Z", "ip": "204.76.203.14", "port": "443", "protocol": "HTTP", "start_time": "2025-10-03T07:31:55.473777Z", "transport_protocol": "TCP"}, {"end_time": "2025-10-24T17:27:23.337529Z", "ip": "204.76.203.14", "port": "8080", "protocol": "HTTP", "start_time": "2025-10-02T18:16:57.54472Z", "transport_protocol": "TCP"}, {"end_time": "2025-10-24T12:44:43.569972Z", "ip": "204.76.203.14", "port": "22", "protocol": "SSH", "start_time": "2025-10-02T11:30:38.477411Z", "transport_protocol": "TCP"}, {"end_time": "2025-10-24T09:07:04.57467Z", "ip": "204.76.203.14", "port": "31210", "protocol": "HTTP", "start_time": "2025-10-03T07:44:20.933542Z", "transport_protocol": "TCP"}, {"end_time": "2025-10-23T14:16:38.146422Z", "ip": "204.76.203.14", "port": "80", "protocol": "HTTP", "start_time": "2025-10-03T03:46:20.32549Z", "transport_protocol": "TCP"}, {"end_time": "2025-10-02T06:54:28.012997Z", "ip": "204.76.203.14", "port": "31210", "protocol": "HTTP", "start_time": "2025-09-13T19:35:54.224346Z", "transport_protocol": "TCP"}, {"end_time": "2025-10-02T06:02:41.025814Z", "ip": "204.76.203.14", "port": "443", "protocol": "HTTP", "start_time": "2025-09-11T15:02:25.402242Z", "transport_protocol": "TCP"}, {"end_time": "2025-10-02T02:45:59.278139Z", "ip": "204.76.203.14", "port": "80", "protocol": "HTTP", "start_time": "2025-09-11T17:20:51.555559Z", "transport_protocol": "TCP"}, {"end_time": "2025-10-01T16:51:30.328372Z", "ip": "204.76.203.14", "port": "8080", "protocol": "HTTP", "start_time": "2025-09-11T17:34:33.864449Z", "transport_protocol": "TCP"}, {"end_time": "2025-10-01T10:47:37.675564Z", "ip": "204.76.203.14", "port": "22", "protocol": "SSH", "start_time": "2025-09-10T23:09:01.5135Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-04T10:20:19.851871Z", "ip": "204.76.203.14", "port": "4084", "protocol": "HTTP", "start_time": "2025-08-19T09:58:28.919314Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-04T10:19:45.723481Z", "ip": "204.76.203.14", "port": "4085", "protocol": "HTTP", "start_time": "2025-08-19T12:30:33.019872Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-03T21:07:17.524497Z", "ip": "204.76.203.14", "port": "5917", "protocol": "VNC", "start_time": "2025-08-25T16:38:00.601156Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-03T21:06:28.318099Z", "ip": "204.76.203.14", "port": "5926", "protocol": "VNC", "start_time": "2025-08-21T10:15:03.177483Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-03T21:06:24.147852Z", "ip": "204.76.203.14", "port": "5924", "protocol": "VNC", "start_time": "2025-08-26T13:24:18.648994Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-03T19:15:58.582378Z", "ip": "204.76.203.14", "port": "4082", "protocol": "HTTP", "start_time": "2025-08-23T16:20:45.006131Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-03T16:45:22.772713Z", "ip": "204.76.203.14", "port": "5918", "protocol": "VNC", "start_time": "2025-08-26T11:28:59.889609Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-03T14:38:05.470186Z", "ip": "204.76.203.14", "port": "5901", "protocol": "VNC", "start_time": "2025-08-25T21:06:09.464648Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-03T13:16:55.229694Z", "ip": "204.76.203.14", "port": "4081", "protocol": "HTTP", "start_time": "2025-08-29T22:17:47.523614Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-03T07:41:23.916325Z", "ip": "204.76.203.14", "port": "5920", "protocol": "VNC", "start_time": "2025-09-01T06:12:08.558126Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-03T07:41:17.810059Z", "ip": "204.76.203.14", "port": "5906", "protocol": "VNC", "start_time": "2025-09-01T06:20:34.524637Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-03T07:41:10.279449Z", "ip": "204.76.203.14", "port": "5905", "protocol": "VNC", "start_time": "2025-09-01T06:12:08.278306Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-03T00:39:48.435469Z", "ip": "204.76.203.14", "port": "4343", "protocol": "SSH", "start_time": "2025-08-25T16:36:34.832227Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-02T23:39:10.275297Z", "ip": "204.76.203.14", "port": "5902", "protocol": "VNC", "start_time": "2025-08-18T22:36:24.327044Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-02T22:07:36.113143Z", "ip": "204.76.203.14", "port": "4083", "protocol": "HTTP", "start_time": "2025-08-20T11:46:02.760969Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-02T21:43:59.36743Z", "ip": "204.76.203.14", "port": "5903", "protocol": "VNC", "start_time": "2025-08-21T16:33:00.69731Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-02T21:43:27.138353Z", "ip": "204.76.203.14", "port": "5921", "protocol": "VNC", "start_time": "2025-08-26T11:45:23.629551Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-02T20:39:52.441029Z", "ip": "204.76.203.14", "port": "5913", "protocol": "VNC", "start_time": "2025-08-21T10:14:59.283235Z", "transport_protocol": "TCP"}]}}} +{"ip": "45.135.193.193", "asn": "AS51396", "name": "PFCLOUD (Pfcloud UG)", "honeylabs_events": 416, "host": {"result": {"extensions": {}, "resource": {"autonomous_system": {"asn": 51396, "bgp_prefix": "45.135.193.0/24", "country_code": "DE", "description": "PFCLOUD - Pfcloud UG (haftungsbeschrankt)", "name": "PFCLOUD - Pfcloud UG (haftungsbeschrankt)"}, "dns": {"reverse_dns": {"names": ["45.135.193.193.ptr.pfcloud.network"], "resolve_time": "2026-08-30T16:35:37Z"}}, "greynoise": {"actor": "unknown", "classification": "malicious", "last_observed_time": "2026-08-30T00:00:00Z", "tags": [{"name": "Generic Path Traversal Attempt"}, {"name": "Generic Sensitive File Access Attempt"}, {"name": "Generic XSS Commands in Request"}, {"name": "ICMPv4 Protocol"}, {"name": "Looks Like Debian server"}, {"name": "Open Proxy Scanner"}, {"name": "Ping Scanner"}, {"name": "TLS/SSL Crawler"}, {"name": "Web Crawler"}]}, "ip": "45.135.193.193", "labels": [{"confidence": 0.75, "source": "censys", "value": "BULLETPROOF"}], "location": {"city": "Langen", "continent": "Europe", "coordinates": {"latitude": 49.98955, "longitude": 8.66852}, "country": "Germany", "country_code": "DE", "postal_code": "63225", "province": "Hesse", "timezone": "Europe/Berlin"}, "network": [{"hosting": true, "source": "IPINFO"}], "operating_system": {"confidence": 0.25, "cpe": "cpe:2.3:o:canonical:linux:*:*:*:*:*:*:*:*", "evidence": [{"data_path": "ssh.endpoint_id.raw"}], "part": "o", "product": "linux", "source": "recog", "vendor": "canonical"}, "privacy": [{"source": "IPINFO"}], "reputation": {"evidence": [{"additional_fields": [{"field": "label", "value": "BULLETPROOF"}], "category": "network_infra", "evidence_score": 1}], "model_version": "0.1.0", "score": 0.42, "score_level": "medium_risk"}, "service_count": 1, "services": [{"banner": "SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16", "banner_hash_sha256": "8dbf398ecbec9e03f954155af43b811fbc66cad8f52b19c82de83c651475442b", "banner_hex": "5353482d322e302d4f70656e5353485f392e367031205562756e74752d337562756e747531332e3136", "exposures": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "SSH", "literal_match": "SSH"}], "id": "CENSYS-2022-1066", "metrics": {}, "name": "Exposed SSH Service", "risk_source": "censys", "severity": "medium", "source": "censys", "year": 2022}], "ip": "45.135.193.193", "ja4tscan": {"fingerprint": "65160_2-4-8-1-3_1460_7_1-2-4-9-16", "scan_time": "2026-08-31T08:17:23Z"}, "labels": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "SSH", "literal_match": "SSH"}], "source": "censys", "value": "REMOTE_ACCESS"}], "operating_systems": [{"confidence": 0.25, "cpe": "cpe:2.3:o:canonical:linux:*:*:*:*:*:*:*:*", "evidence": [{"data_path": "ssh.endpoint_id.raw"}], "part": "o", "product": "linux", "source": "recog", "vendor": "canonical"}], "port": 22, "protocol": "SSH", "scan_time": "2026-08-31T09:32:08Z", "software": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "SSH", "literal_match": "SSH"}], "part": "a", "source": "censys", "type": ["REMOTE_ACCESS"]}, {"confidence": 0.25, "cpe": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "evidence": [{"data_path": "ssh.endpoint_id.raw"}], "part": "a", "product": "openssh", "source": "recog", "vendor": "openbsd", "version": "9.6p1"}], "ssh": {"algorithm_selection": {"client_to_server_alg_group": {"cipher": "aes128-ctr", "compression": "none", "mac": "hmac-sha2-256"}, "host_key_algorithm": "ecdsa-sha2-nistp256", "kex_algorithm": "curve25519-sha256@libssh.org", "server_to_client_alg_group": {"cipher": "aes128-ctr", "compression": "none", "mac": "hmac-sha2-256"}}, "endpoint_id": {"comment": "Ubuntu-3ubuntu13.16", "protocol_version": "2.0", "raw": "SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16", "software_version": "OpenSSH_9.6p1"}, "hassh_fingerprint": "e42184b06d45385a906f0803d04c83da", "kex_init_message": {"client_to_server_ciphers": ["chacha20-poly1305@openssh.com", "aes128-ctr", "aes192-ctr", "aes256-ctr", "aes128-gcm@openssh.com", "aes256-gcm@openssh.com"], "client_to_server_compression": ["none", "zlib@openssh.com"], "client_to_server_macs": ["umac-64-etm@openssh.com", "umac-128-etm@openssh.com", "hmac-sha2-256-etm@openssh.com", "hmac-sha2-512-etm@openssh.com", "hmac-sha1-etm@openssh.com", "umac-64@openssh.com", "umac-128@openssh.com", "hmac-sha2-256", "hmac-sha2-512", "hmac-sha1"], "host_key_algorithms": ["rsa-sha2-512", "rsa-sha2-256", "ecdsa-sha2-nistp256", "ssh-ed25519"], "kex_algorithms": ["sntrup761x25519-sha512@openssh.com", "curve25519-sha256", "curve25519-sha256@libssh.org", "ecdh-sha2-nistp256", "ecdh-sha2-nistp384", "ecdh-sha2-nistp521", "diffie-hellman-group-exchange-sha256", "diffie-hellman-group16-sha512", "diffie-hellman-group18-sha512", "diffie-hellman-group14-sha256", "ext-info-s", "kex-strict-s-v00@openssh.com"], "server_to_client_ciphers": ["chacha20-poly1305@openssh.com", "aes128-ctr", "aes192-ctr", "aes256-ctr", "aes128-gcm@openssh.com", "aes256-gcm@openssh.com"], "server_to_client_compression": ["none", "zlib@openssh.com"], "server_to_client_macs": ["umac-64-etm@openssh.com", "umac-128-etm@openssh.com", "hmac-sha2-256-etm@openssh.com", "hmac-sha2-512-etm@openssh.com", "hmac-sha1-etm@openssh.com", "umac-64@openssh.com", "umac-128@openssh.com", "hmac-sha2-256", "hmac-sha2-512", "hmac-sha1"]}, "server_host_key": {"ecdsa_public_key": {"b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=", "curve": "P-256", "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=", "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=", "length": 256, "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=", "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=", "x": "UZb4tdSYUpzpCpRs+dgt7eDL7+Kq99FMRqa+nEsINgI=", "y": "YpeuIH9iMpwrFd7o8WzV/xosEMVXq0Cu+iXoLrQ4GsE="}, "fingerprint_sha256": "bf2a0ebc24a49e1d4466e269eeabe0d8b9526c8b8deddc03fc208b1cba988e74"}}, "transport_protocol": "tcp", "vulns": [{"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=8.5p1 && <=9.7p1"}, {"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=8.6 && <=9.8"}], "id": "CVE-2024-6387", "kev": [{"date_added": "2024-07-17T00:00:00Z", "source": "third_party"}], "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "high", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 8.1, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "epss": {"percentile": 0.999, "score": 0.995}}, "name": "CVE-2024-6387", "risk_source": "cve", "severity": "high", "source": "third_party", "year": 2024}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=6.8p1 && <=9.9p1"}, {"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=6.9 && <=9.8"}], "id": "CVE-2025-26465", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 6.8, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"}, "epss": {"percentile": 0.942, "score": 0.076}}, "name": "CVE-2025-26465", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2025}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=9.5p1 && <=9.9p1"}], "id": "CVE-2025-26466", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "high", "confidentiality": "none", "integrity": "none", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 5.9, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "epss": {"percentile": 0.986, "score": 0.398}}, "name": "CVE-2025-26466", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2025}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=7.4 && <10.0"}], "id": "CVE-2025-32728", "metrics": {"cvss_v31": {"components": {"attack_complexity": "low", "attack_vector": "local", "availability": "none", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "changed", "user_interaction": "none"}, "score": 4.3, "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N"}, "epss": {"percentile": 0.085, "score": 0.002}}, "name": "CVE-2025-32728", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2025}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35385", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "high", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 7.5, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}, "epss": {"percentile": 0.443, "score": 0.006}}, "name": "CVE-2026-35385", "risk_source": "cve", "severity": "high", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35386", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "local", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "low", "scope": "unchanged", "user_interaction": "none"}, "score": 3.6, "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.242, "score": 0.003}}, "name": "CVE-2026-35386", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35387", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "none", "integrity": "low", "privileges_required": "low", "scope": "unchanged", "user_interaction": "none"}, "score": 3.1, "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N"}, "epss": {"percentile": 0.146, "score": 0.002}}, "name": "CVE-2026-35387", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35388", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "local", "availability": "none", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 2.5, "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N"}, "epss": {"percentile": 0.029, "score": 0.001}}, "name": "CVE-2026-35388", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35414", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "low", "scope": "unchanged", "user_interaction": "none"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.072, "score": 0.002}}, "name": "CVE-2026-35414", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59995", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L"}, "epss": {"percentile": 0.162, "score": 0.002}}, "name": "CVE-2026-59995", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59996", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L"}, "epss": {"percentile": 0.162, "score": 0.002}}, "name": "CVE-2026-59996", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59997", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.07, "score": 0.002}}, "name": "CVE-2026-59997", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59998", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 4.8, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.076, "score": 0.002}}, "name": "CVE-2026-59998", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59999", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "none", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 5.9, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"}, "epss": {"percentile": 0.054, "score": 0.002}}, "name": "CVE-2026-59999", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-60000", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "none", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 3.7, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "epss": {"percentile": 0.367, "score": 0.004}}, "name": "CVE-2026-60000", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-60001", "metrics": {"cvss_v31": {"components": {"attack_complexity": "low", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 6.5, "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"}, "epss": {"percentile": 0.211, "score": 0.003}}, "name": "CVE-2026-60001", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-60002", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 7.7, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L"}, "epss": {"percentile": 0.221, "score": 0.003}}, "name": "CVE-2026-60002", "risk_source": "cve", "severity": "high", "source": "third_party", "year": 2026}]}], "whois": {"network": {"cidrs": ["45.135.193.0/24"], "created": "2025-01-26T00:00:00Z", "handle": "PFCLOUD-NET", "name": "Pfcloud UG", "updated": "2025-09-01T00:00:00Z"}, "organization": {"abuse_contacts": [{"email": "abuse@pfcloud.io", "handle": "AA42303-RIPE", "name": "Admin"}], "address": "Lilienstra\u00dfe 5\\n94051 Hauzenberg", "handle": "ORG-PU39-RIPE", "name": "Pfcloud UG"}}}}}, "services": {"result": {"next_page_token": "", "ranges": [{"end_time": "2026-08-30T08:33:09.819981Z", "ip": "45.135.193.193", "port": "22", "protocol": "SSH", "start_time": "2026-04-25T10:24:19.02431Z", "transport_protocol": "TCP"}]}}} +{"ip": "204.76.203.49", "asn": "AS51396", "name": "PFCLOUD (Pfcloud UG)", "honeylabs_events": 338, "host": {"_error": "truncated"}, "services": {"result": {"next_page_token": "", "ranges": [{"end_time": "2026-08-30T22:54:02.524393Z", "ip": "204.76.203.49", "port": "22", "protocol": "SSH", "start_time": "2026-07-14T23:47:32.178653Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-30T20:03:32.393966Z", "ip": "204.76.203.49", "port": "80", "protocol": "HTTP", "start_time": "2026-07-15T15:34:18.053498Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-30T14:52:00.936284Z", "ip": "204.76.203.49", "port": "443", "protocol": "HTTP", "start_time": "2026-08-08T03:57:25.178485Z", "transport_protocol": "TCP"}, {"end_time": "2026-07-13T11:28:05.694557Z", "ip": "204.76.203.49", "port": "80", "protocol": "HTTP", "start_time": "2026-06-21T16:21:29.958187Z", "transport_protocol": "TCP"}, {"end_time": "2026-07-13T10:31:28.301432Z", "ip": "204.76.203.49", "port": "22", "protocol": "SSH", "start_time": "2026-06-18T15:36:07.541491Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-08T00:57:12.851796Z", "ip": "204.76.203.49", "port": "22", "protocol": "SSH", "start_time": "2025-12-31T06:31:19.933557Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-18T00:34:10.336836Z", "ip": "204.76.203.49", "port": "2222", "protocol": "SSH", "start_time": "2026-01-18T04:02:38.523603Z", "transport_protocol": "TCP"}, {"end_time": "2026-01-30T03:37:43.692582Z", "ip": "204.76.203.49", "port": "80", "protocol": "HTTP", "start_time": "2026-01-27T13:05:42.680668Z", "transport_protocol": "TCP"}, {"end_time": "2026-01-17T19:35:26.043791Z", "ip": "204.76.203.49", "port": "2222", "protocol": "SSH", "start_time": "2026-01-01T02:34:28.69705Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-31T02:23:14.611832Z", "ip": "204.76.203.49", "port": "2222", "protocol": "SSH", "start_time": "2025-12-22T16:45:14.367472Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-30T06:18:43.719466Z", "ip": "204.76.203.49", "port": "22", "protocol": "SSH", "start_time": "2025-12-09T04:48:11.418406Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-08T16:56:19.18789Z", "ip": "204.76.203.49", "port": "22", "protocol": "SSH", "start_time": "2025-12-08T16:56:18.18789Z", "transport_protocol": "TCP"}]}}} +{"ip": "45.135.194.113", "asn": "AS51396", "name": "PFCLOUD (Pfcloud UG)", "honeylabs_events": 264, "host": {"result": {"extensions": {}, "resource": {"autonomous_system": {"asn": 51396, "bgp_prefix": "45.135.194.0/24", "country_code": "DE", "description": "PFCLOUD - Pfcloud UG (haftungsbeschrankt)", "name": "PFCLOUD - Pfcloud UG (haftungsbeschrankt)"}, "dns": {"forward_dns": {"45.135.194.113.ptr.pfcloud.network": {"name": "45.135.194.113.ptr.pfcloud.network", "record_type": "a", "resolve_time": "2026-08-31T04:16:57Z"}}, "names": ["45.135.194.113.ptr.pfcloud.network"], "reverse_dns": {"names": ["45.135.194.113.ptr.pfcloud.network"], "resolve_time": "2026-08-31T07:54:58Z"}}, "greynoise": {"actor": "unknown", "classification": "malicious", "last_observed_time": "2026-08-30T00:00:00Z", "tags": [{"name": "Carries HTTP Referer"}, {"name": "Go HTTP Client"}, {"name": "ICMPv4 Protocol"}, {"name": "Looks Like Debian server"}, {"name": "Open Proxy Scanner"}, {"name": "Ping Scanner"}, {"name": "SOCKS5 Proxy Scanner"}, {"name": "Web Crawler"}]}, "ip": "45.135.194.113", "labels": [{"confidence": 0.75, "source": "censys", "value": "BULLETPROOF"}], "location": {"city": "Langen", "continent": "Europe", "coordinates": {"latitude": 49.98955, "longitude": 8.66852}, "country": "Germany", "country_code": "DE", "postal_code": "63225", "province": "Hesse", "timezone": "Europe/Berlin"}, "network": [{"hosting": true, "source": "IPINFO"}], "operating_system": {"confidence": 0.25, "cpe": "cpe:2.3:o:canonical:linux:*:*:*:*:*:*:*:*", "evidence": [{"data_path": "ssh.endpoint_id.raw"}], "part": "o", "product": "linux", "source": "recog", "vendor": "canonical"}, "privacy": [{"source": "IPINFO"}], "reputation": {"evidence": [{"additional_fields": [{"field": "label", "value": "BULLETPROOF"}], "category": "network_infra", "evidence_score": 1}], "model_version": "0.1.0", "score": 0.42, "score_level": "medium_risk"}, "service_count": 1, "services": [{"banner": "SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13", "banner_hash_sha256": "6696bfc0b643975c307fb5453c2544456d934b0e2939af20acf0711f2aa24665", "banner_hex": "5353482d322e302d4f70656e5353485f392e367031205562756e74752d337562756e74753133", "exposures": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "SSH", "literal_match": "SSH"}], "id": "CENSYS-2022-1066", "metrics": {}, "name": "Exposed SSH Service", "risk_source": "censys", "severity": "medium", "source": "censys", "year": 2022}], "ip": "45.135.194.113", "ja4tscan": {"fingerprint": "31856_2-4-8-1-3_1460_7_1-2-4-9-16", "scan_time": "2026-08-29T11:12:05Z"}, "labels": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "SSH", "literal_match": "SSH"}], "source": "censys", "value": "REMOTE_ACCESS"}], "operating_systems": [{"confidence": 0.25, "cpe": "cpe:2.3:o:canonical:linux:*:*:*:*:*:*:*:*", "evidence": [{"data_path": "ssh.endpoint_id.raw"}], "part": "o", "product": "linux", "source": "recog", "vendor": "canonical"}], "port": 22, "protocol": "SSH", "scan_time": "2026-08-31T00:32:18Z", "software": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "SSH", "literal_match": "SSH"}], "part": "a", "source": "censys", "type": ["REMOTE_ACCESS"]}, {"confidence": 0.25, "cpe": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "evidence": [{"data_path": "ssh.endpoint_id.raw"}], "part": "a", "product": "openssh", "source": "recog", "vendor": "openbsd", "version": "9.6p1"}], "ssh": {"endpoint_id": {"comment": "Ubuntu-3ubuntu13", "protocol_version": "2.0", "raw": "SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13", "software_version": "OpenSSH_9.6p1"}, "hassh_fingerprint": "e42184b06d45385a906f0803d04c83da", "kex_init_message": {"client_to_server_ciphers": ["chacha20-poly1305@openssh.com", "aes128-ctr", "aes192-ctr", "aes256-ctr", "aes128-gcm@openssh.com", "aes256-gcm@openssh.com"], "client_to_server_compression": ["none", "zlib@openssh.com"], "client_to_server_macs": ["umac-64-etm@openssh.com", "umac-128-etm@openssh.com", "hmac-sha2-256-etm@openssh.com", "hmac-sha2-512-etm@openssh.com", "hmac-sha1-etm@openssh.com", "umac-64@openssh.com", "umac-128@openssh.com", "hmac-sha2-256", "hmac-sha2-512", "hmac-sha1"], "host_key_algorithms": ["rsa-sha2-512", "rsa-sha2-256"], "kex_algorithms": ["sntrup761x25519-sha512@openssh.com", "curve25519-sha256", "curve25519-sha256@libssh.org", "ecdh-sha2-nistp256", "ecdh-sha2-nistp384", "ecdh-sha2-nistp521", "diffie-hellman-group-exchange-sha256", "diffie-hellman-group16-sha512", "diffie-hellman-group18-sha512", "diffie-hellman-group14-sha256", "ext-info-s", "kex-strict-s-v00@openssh.com"], "server_to_client_ciphers": ["chacha20-poly1305@openssh.com", "aes128-ctr", "aes192-ctr", "aes256-ctr", "aes128-gcm@openssh.com", "aes256-gcm@openssh.com"], "server_to_client_compression": ["none", "zlib@openssh.com"], "server_to_client_macs": ["umac-64-etm@openssh.com", "umac-128-etm@openssh.com", "hmac-sha2-256-etm@openssh.com", "hmac-sha2-512-etm@openssh.com", "hmac-sha1-etm@openssh.com", "umac-64@openssh.com", "umac-128@openssh.com", "hmac-sha2-256", "hmac-sha2-512", "hmac-sha1"]}}, "transport_protocol": "tcp", "vulns": [{"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=8.5p1 && <=9.7p1"}, {"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=8.6 && <=9.8"}], "id": "CVE-2024-6387", "kev": [{"date_added": "2024-07-17T00:00:00Z", "source": "third_party"}], "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "high", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 8.1, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "epss": {"percentile": 0.999, "score": 0.995}}, "name": "CVE-2024-6387", "risk_source": "cve", "severity": "high", "source": "third_party", "year": 2024}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=6.8p1 && <=9.9p1"}, {"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=6.9 && <=9.8"}], "id": "CVE-2025-26465", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 6.8, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"}, "epss": {"percentile": 0.941, "score": 0.076}}, "name": "CVE-2025-26465", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2025}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=9.5p1 && <=9.9p1"}], "id": "CVE-2025-26466", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "high", "confidentiality": "none", "integrity": "none", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 5.9, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "epss": {"percentile": 0.985, "score": 0.398}}, "name": "CVE-2025-26466", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2025}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=7.4 && <10.0"}], "id": "CVE-2025-32728", "metrics": {"cvss_v31": {"components": {"attack_complexity": "low", "attack_vector": "local", "availability": "none", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "changed", "user_interaction": "none"}, "score": 4.3, "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N"}, "epss": {"percentile": 0.085, "score": 0.002}}, "name": "CVE-2025-32728", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2025}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35385", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "high", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 7.5, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}, "epss": {"percentile": 0.468, "score": 0.006}}, "name": "CVE-2026-35385", "risk_source": "cve", "severity": "high", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35386", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "local", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "low", "scope": "unchanged", "user_interaction": "none"}, "score": 3.6, "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.242, "score": 0.003}}, "name": "CVE-2026-35386", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35387", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "none", "integrity": "low", "privileges_required": "low", "scope": "unchanged", "user_interaction": "none"}, "score": 3.1, "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N"}, "epss": {"percentile": 0.145, "score": 0.002}}, "name": "CVE-2026-35387", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35388", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "local", "availability": "none", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 2.5, "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N"}, "epss": {"percentile": 0.029, "score": 0.001}}, "name": "CVE-2026-35388", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35414", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "low", "scope": "unchanged", "user_interaction": "none"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.072, "score": 0.002}}, "name": "CVE-2026-35414", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59995", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L"}, "epss": {"percentile": 0.162, "score": 0.002}}, "name": "CVE-2026-59995", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59996", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L"}, "epss": {"percentile": 0.162, "score": 0.002}}, "name": "CVE-2026-59996", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59997", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.07, "score": 0.002}}, "name": "CVE-2026-59997", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59998", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 4.8, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.075, "score": 0.002}}, "name": "CVE-2026-59998", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59999", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "none", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 5.9, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"}, "epss": {"percentile": 0.054, "score": 0.002}}, "name": "CVE-2026-59999", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-60000", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "none", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 3.7, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "epss": {"percentile": 0.367, "score": 0.004}}, "name": "CVE-2026-60000", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-60001", "metrics": {"cvss_v31": {"components": {"attack_complexity": "low", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 6.5, "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"}, "epss": {"percentile": 0.211, "score": 0.003}}, "name": "CVE-2026-60001", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-60002", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 7.7, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L"}, "epss": {"percentile": 0.221, "score": 0.003}}, "name": "CVE-2026-60002", "risk_source": "cve", "severity": "high", "source": "third_party", "year": 2026}]}], "whois": {"network": {"cidrs": ["45.135.194.0/24"], "created": "2025-01-26T00:00:00Z", "handle": "PFCLOUD-NET", "name": "Pfcloud UG", "updated": "2025-09-01T00:00:00Z"}, "organization": {"abuse_contacts": [{"email": "abuse@pfcloud.io", "handle": "AA42303-RIPE", "name": "Admin"}], "address": "Lilienstra\u00dfe 5\\n94051 Hauzenberg", "handle": "ORG-PU39-RIPE", "name": "Pfcloud UG"}}}}}, "services": {"result": {"next_page_token": "", "ranges": [{"end_time": "2026-08-31T00:32:19.41593Z", "ip": "45.135.194.113", "port": "22", "protocol": "SSH", "start_time": "2026-04-04T19:06:05.232152Z", "transport_protocol": "TCP"}, {"end_time": "2025-10-10T15:31:29.702084Z", "ip": "45.135.194.113", "port": "22", "protocol": "SSH", "start_time": "2025-10-08T14:05:35.808042Z", "transport_protocol": "TCP"}]}}} +{"ip": "45.135.193.198", "asn": "AS51396", "name": "PFCLOUD (Pfcloud UG)", "honeylabs_events": 192, "host": {"result": {"extensions": {}, "resource": {"autonomous_system": {"asn": 51396, "bgp_prefix": "45.135.193.0/24", "country_code": "DE", "description": "PFCLOUD - Pfcloud UG (haftungsbeschrankt)", "name": "PFCLOUD - Pfcloud UG (haftungsbeschrankt)"}, "dns": {"reverse_dns": {"names": ["45.135.193.198.ptr.pfcloud.network"], "resolve_time": "2026-08-27T16:37:07Z"}}, "greynoise": {"actor": "unknown", "classification": "suspicious", "last_observed_time": "2026-08-30T00:00:00Z", "tags": [{"name": "Generic XSS Commands in Request"}, {"name": "ICMPv4 Protocol"}, {"name": "Looks Like Debian server"}, {"name": "Ping Scanner"}, {"name": "TLS/SSL Crawler"}, {"name": "Web Crawler"}]}, "ip": "45.135.193.198", "labels": [{"confidence": 0.75, "source": "censys", "value": "BULLETPROOF"}], "location": {"city": "Langen", "continent": "Europe", "coordinates": {"latitude": 49.98955, "longitude": 8.66852}, "country": "Germany", "country_code": "DE", "postal_code": "63225", "province": "Hesse", "timezone": "Europe/Berlin"}, "network": [{"hosting": true, "source": "IPINFO"}], "privacy": [{"source": "IPINFO"}], "reputation": {"evidence": [{"additional_fields": [{"field": "label", "value": "BULLETPROOF"}], "category": "network_infra", "evidence_score": 1}], "model_version": "0.1.0", "score": 0.42, "score_level": "medium_risk"}, "service_count": 1, "services": [{"banner": "SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u10", "banner_hash_sha256": "2a8b0f7a2e893d5e76ae53eb3d06394a5c26cb86fe0e0d5e8cc377afdc5b43e0", "banner_hex": "5353482d322e302d4f70656e5353485f392e3270312044656269616e2d322b6465623132753130", "exposures": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "SSH", "literal_match": "SSH"}], "id": "CENSYS-2022-1066", "metrics": {}, "name": "Exposed SSH Service", "risk_source": "censys", "severity": "medium", "source": "censys", "year": 2022}], "ip": "45.135.193.198", "ja4tscan": {"fingerprint": "65160_2-4-8-1-3_1460_7_1-2-4-8-16", "scan_time": "2026-08-31T01:59:16Z"}, "labels": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "SSH", "literal_match": "SSH"}], "source": "censys", "value": "REMOTE_ACCESS"}], "port": 22, "protocol": "SSH", "scan_time": "2026-08-30T20:01:35Z", "software": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "SSH", "literal_match": "SSH"}], "part": "a", "source": "censys", "type": ["REMOTE_ACCESS"]}], "ssh": {"algorithm_selection": {"client_to_server_alg_group": {"cipher": "aes128-ctr", "compression": "none", "mac": "hmac-sha2-256"}, "host_key_algorithm": "ecdsa-sha2-nistp256", "kex_algorithm": "curve25519-sha256@libssh.org", "server_to_client_alg_group": {"cipher": "aes128-ctr", "compression": "none", "mac": "hmac-sha2-256"}}, "endpoint_id": {"comment": "Debian-2+deb12u10", "protocol_version": "2.0", "raw": "SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u10", "software_version": "OpenSSH_9.2p1"}, "hassh_fingerprint": "425d29fe50d8e4f5e37efb6e24bcf660", "kex_init_message": {"client_to_server_ciphers": ["chacha20-poly1305@openssh.com", "aes128-ctr", "aes192-ctr", "aes256-ctr", "aes128-gcm@openssh.com", "aes256-gcm@openssh.com"], "client_to_server_compression": ["none", "zlib@openssh.com"], "client_to_server_macs": ["umac-64-etm@openssh.com", "umac-128-etm@openssh.com", "hmac-sha2-256-etm@openssh.com", "hmac-sha2-512-etm@openssh.com", "hmac-sha1-etm@openssh.com", "umac-64@openssh.com", "umac-128@openssh.com", "hmac-sha2-256", "hmac-sha2-512", "hmac-sha1"], "host_key_algorithms": ["rsa-sha2-512", "rsa-sha2-256", "ecdsa-sha2-nistp256", "ssh-ed25519"], "kex_algorithms": ["sntrup761x25519-sha512", "sntrup761x25519-sha512@openssh.com", "curve25519-sha256", "curve25519-sha256@libssh.org", "ecdh-sha2-nistp256", "ecdh-sha2-nistp384", "ecdh-sha2-nistp521", "diffie-hellman-group-exchange-sha256", "diffie-hellman-group16-sha512", "diffie-hellman-group18-sha512", "diffie-hellman-group14-sha256", "kex-strict-s-v00@openssh.com"], "server_to_client_ciphers": ["chacha20-poly1305@openssh.com", "aes128-ctr", "aes192-ctr", "aes256-ctr", "aes128-gcm@openssh.com", "aes256-gcm@openssh.com"], "server_to_client_compression": ["none", "zlib@openssh.com"], "server_to_client_macs": ["umac-64-etm@openssh.com", "umac-128-etm@openssh.com", "hmac-sha2-256-etm@openssh.com", "hmac-sha2-512-etm@openssh.com", "hmac-sha1-etm@openssh.com", "umac-64@openssh.com", "umac-128@openssh.com", "hmac-sha2-256", "hmac-sha2-512", "hmac-sha1"]}, "server_host_key": {"ecdsa_public_key": {"b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=", "curve": "P-256", "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=", "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=", "length": 256, "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=", "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=", "x": "g0oUOYcov5eIU8Ji2gLTU3BfG8B82Vg3CMUnoi/VtLo=", "y": "VnWDSu1ug15uI+6MAxnc4hMG26Ke0D3l6BFRQ9tt1Hk="}, "fingerprint_sha256": "6e619be4e1624236fd199261c15b48d2ef25b877d0bac3381b8c0fa559baf32f"}}, "transport_protocol": "tcp"}], "whois": {"network": {"cidrs": ["45.135.193.0/24"], "created": "2025-01-26T00:00:00Z", "handle": "PFCLOUD-NET", "name": "Pfcloud UG", "updated": "2025-09-01T00:00:00Z"}, "organization": {"abuse_contacts": [{"email": "abuse@pfcloud.io", "handle": "AA42303-RIPE", "name": "Admin"}], "address": "Lilienstra\u00dfe 5\\n94051 Hauzenberg", "handle": "ORG-PU39-RIPE", "name": "Pfcloud UG"}}}}}, "services": {"result": {"next_page_token": "", "ranges": [{"end_time": "2026-08-30T20:01:36.236264Z", "ip": "45.135.193.198", "port": "22", "protocol": "SSH", "start_time": "2026-08-23T22:52:14.030106Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-13T16:37:34.477837Z", "ip": "45.135.193.198", "port": "80", "protocol": "HTTP", "start_time": "2026-07-13T21:07:46.449201Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-13T11:32:39.266721Z", "ip": "45.135.193.198", "port": "22", "protocol": "SSH", "start_time": "2026-07-16T01:45:35.031395Z", "transport_protocol": "TCP"}]}}} +{"ip": "204.76.203.4", "asn": "AS51396", "name": "PFCLOUD (Pfcloud UG)", "honeylabs_events": 171, "host": {"result": {"extensions": {}, "resource": {"autonomous_system": {"asn": 51396, "bgp_prefix": "204.76.203.0/24", "country_code": "DE", "description": "PFCLOUD - Pfcloud UG (haftungsbeschrankt)", "name": "PFCLOUD - Pfcloud UG (haftungsbeschrankt)"}, "dns": {"forward_dns": {"protect2.pfcloud.io": {"name": "protect2.pfcloud.io", "record_type": "a", "resolve_time": "2026-08-30T22:51:07Z"}}, "names": ["protect2.pfcloud.io"], "reverse_dns": {"names": ["204.76.203.4.ptr.pfcloud.network"], "resolve_time": "2026-08-24T15:44:29Z"}}, "greynoise": {"actor": "unknown", "classification": "unknown", "last_observed_time": "2026-08-30T00:00:00Z"}, "ip": "204.76.203.4", "labels": [{"confidence": 0.75, "source": "censys", "value": "BULLETPROOF"}], "location": {"city": "Eygelshoven", "continent": "Europe", "coordinates": {"latitude": 50.89394, "longitude": 6.0587}, "country": "Netherlands", "country_code": "NL", "postal_code": "6471", "province": "Limburg", "timezone": "Europe/Amsterdam"}, "network": [{"hosting": true, "source": "IPINFO"}], "operating_system": {"confidence": 0.25, "cpe": "cpe:2.3:o:canonical:linux:*:*:*:*:*:*:*:*", "evidence": [{"data_path": "ssh.endpoint_id.raw"}], "part": "o", "product": "linux", "source": "recog", "vendor": "canonical"}, "privacy": [{"source": "IPINFO"}], "reputation": {"evidence": [{"additional_fields": [{"field": "label", "value": "BULLETPROOF"}], "category": "network_infra", "evidence_score": 1}], "model_version": "0.1.0", "score": 0.42, "score_level": "medium_risk"}, "service_count": 1, "services": [{"banner": "SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18", "banner_hash_sha256": "b04692223bd773fee5925703ef034b57925f84bbb50484fb653f809efe00baca", "banner_hex": "5353482d322e302d4f70656e5353485f392e367031205562756e74752d337562756e747531332e3138", "exposures": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "SSH", "literal_match": "SSH"}], "id": "CENSYS-2022-1066", "metrics": {}, "name": "Exposed SSH Service", "risk_source": "censys", "severity": "medium", "source": "censys", "year": 2022}], "ip": "204.76.203.4", "ja4tscan": {"fingerprint": "65160_2-4-8-1-3_1460_7_1-2-4-9-16", "scan_time": "2026-08-31T00:19:58Z"}, "labels": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "SSH", "literal_match": "SSH"}], "source": "censys", "value": "REMOTE_ACCESS"}], "operating_systems": [{"confidence": 0.25, "cpe": "cpe:2.3:o:canonical:linux:*:*:*:*:*:*:*:*", "evidence": [{"data_path": "ssh.endpoint_id.raw"}], "part": "o", "product": "linux", "source": "recog", "vendor": "canonical"}], "port": 22, "protocol": "SSH", "scan_time": "2026-08-30T15:05:45Z", "software": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "SSH", "literal_match": "SSH"}], "part": "a", "source": "censys", "type": ["REMOTE_ACCESS"]}, {"confidence": 0.25, "cpe": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "evidence": [{"data_path": "ssh.endpoint_id.raw"}], "part": "a", "product": "openssh", "source": "recog", "vendor": "openbsd", "version": "9.6p1"}], "ssh": {"algorithm_selection": {"client_to_server_alg_group": {"cipher": "aes128-ctr", "compression": "none", "mac": "hmac-sha2-256"}, "host_key_algorithm": "ecdsa-sha2-nistp256", "kex_algorithm": "curve25519-sha256@libssh.org", "server_to_client_alg_group": {"cipher": "aes128-ctr", "compression": "none", "mac": "hmac-sha2-256"}}, "endpoint_id": {"comment": "Ubuntu-3ubuntu13.18", "protocol_version": "2.0", "raw": "SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18", "software_version": "OpenSSH_9.6p1"}, "hassh_fingerprint": "e42184b06d45385a906f0803d04c83da", "kex_init_message": {"client_to_server_ciphers": ["chacha20-poly1305@openssh.com", "aes128-ctr", "aes192-ctr", "aes256-ctr", "aes128-gcm@openssh.com", "aes256-gcm@openssh.com"], "client_to_server_compression": ["none", "zlib@openssh.com"], "client_to_server_macs": ["umac-64-etm@openssh.com", "umac-128-etm@openssh.com", "hmac-sha2-256-etm@openssh.com", "hmac-sha2-512-etm@openssh.com", "hmac-sha1-etm@openssh.com", "umac-64@openssh.com", "umac-128@openssh.com", "hmac-sha2-256", "hmac-sha2-512", "hmac-sha1"], "host_key_algorithms": ["rsa-sha2-512", "rsa-sha2-256", "ecdsa-sha2-nistp256", "ssh-ed25519"], "kex_algorithms": ["sntrup761x25519-sha512@openssh.com", "curve25519-sha256", "curve25519-sha256@libssh.org", "ecdh-sha2-nistp256", "ecdh-sha2-nistp384", "ecdh-sha2-nistp521", "diffie-hellman-group-exchange-sha256", "diffie-hellman-group16-sha512", "diffie-hellman-group18-sha512", "diffie-hellman-group14-sha256", "ext-info-s", "kex-strict-s-v00@openssh.com"], "server_to_client_ciphers": ["chacha20-poly1305@openssh.com", "aes128-ctr", "aes192-ctr", "aes256-ctr", "aes128-gcm@openssh.com", "aes256-gcm@openssh.com"], "server_to_client_compression": ["none", "zlib@openssh.com"], "server_to_client_macs": ["umac-64-etm@openssh.com", "umac-128-etm@openssh.com", "hmac-sha2-256-etm@openssh.com", "hmac-sha2-512-etm@openssh.com", "hmac-sha1-etm@openssh.com", "umac-64@openssh.com", "umac-128@openssh.com", "hmac-sha2-256", "hmac-sha2-512", "hmac-sha1"]}, "server_host_key": {"ecdsa_public_key": {"b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=", "curve": "P-256", "gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=", "gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=", "length": 256, "n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=", "p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=", "x": "iEdiWZmg10DSdIEivNhKTgRYMLfsMQc114Zi5H19Zl4=", "y": "WjCGRcp9AStq3Vay+y/wuu8xPGbXh3ZUAXB+R+aGGp4="}, "fingerprint_sha256": "22f0d4166644f984615902ff745eebca78b5f19ce7bcbe482e0cdc0af84995bd"}}, "transport_protocol": "tcp", "vulns": [{"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=8.5p1 && <=9.7p1"}, {"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=8.6 && <=9.8"}], "id": "CVE-2024-6387", "kev": [{"date_added": "2024-07-17T00:00:00Z", "source": "third_party"}], "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "high", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 8.1, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "epss": {"percentile": 0.999, "score": 0.995}}, "name": "CVE-2024-6387", "risk_source": "cve", "severity": "high", "source": "third_party", "year": 2024}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=6.8p1 && <=9.9p1"}, {"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=6.9 && <=9.8"}], "id": "CVE-2025-26465", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 6.8, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"}, "epss": {"percentile": 0.942, "score": 0.076}}, "name": "CVE-2025-26465", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2025}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=9.5p1 && <=9.9p1"}], "id": "CVE-2025-26466", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "high", "confidentiality": "none", "integrity": "none", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 5.9, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "epss": {"percentile": 0.986, "score": 0.398}}, "name": "CVE-2025-26466", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2025}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": ">=7.4 && <10.0"}], "id": "CVE-2025-32728", "metrics": {"cvss_v31": {"components": {"attack_complexity": "low", "attack_vector": "local", "availability": "none", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "changed", "user_interaction": "none"}, "score": 4.3, "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N"}, "epss": {"percentile": 0.085, "score": 0.002}}, "name": "CVE-2025-32728", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2025}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35385", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "high", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 7.5, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}, "epss": {"percentile": 0.466, "score": 0.006}}, "name": "CVE-2026-35385", "risk_source": "cve", "severity": "high", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35386", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "local", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "low", "scope": "unchanged", "user_interaction": "none"}, "score": 3.6, "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.242, "score": 0.003}}, "name": "CVE-2026-35386", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35387", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "none", "integrity": "low", "privileges_required": "low", "scope": "unchanged", "user_interaction": "none"}, "score": 3.1, "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N"}, "epss": {"percentile": 0.146, "score": 0.002}}, "name": "CVE-2026-35387", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35388", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "local", "availability": "none", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 2.5, "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N"}, "epss": {"percentile": 0.029, "score": 0.001}}, "name": "CVE-2026-35388", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35414", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "low", "scope": "unchanged", "user_interaction": "none"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.072, "score": 0.002}}, "name": "CVE-2026-35414", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59995", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L"}, "epss": {"percentile": 0.162, "score": 0.002}}, "name": "CVE-2026-59995", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59996", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L"}, "epss": {"percentile": 0.162, "score": 0.002}}, "name": "CVE-2026-59996", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59997", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.07, "score": 0.002}}, "name": "CVE-2026-59997", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59998", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 4.8, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.075, "score": 0.002}}, "name": "CVE-2026-59998", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59999", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "none", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 5.9, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"}, "epss": {"percentile": 0.054, "score": 0.002}}, "name": "CVE-2026-59999", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-60000", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "none", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 3.7, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "epss": {"percentile": 0.366, "score": 0.004}}, "name": "CVE-2026-60000", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-60001", "metrics": {"cvss_v31": {"components": {"attack_complexity": "low", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 6.5, "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"}, "epss": {"percentile": 0.211, "score": 0.003}}, "name": "CVE-2026-60001", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:9.6p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-60002", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 7.7, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L"}, "epss": {"percentile": 0.221, "score": 0.003}}, "name": "CVE-2026-60002", "risk_source": "cve", "severity": "high", "source": "third_party", "year": 2026}]}], "whois": {"network": {"allocation_type": "ALLOCATION", "cidrs": ["204.76.203.0/24"], "created": "2025-01-15T00:00:00Z", "handle": "INTEL-NET1-25", "name": "Intelligence Hosting LLC", "updated": "2025-08-05T00:00:00Z"}, "organization": {"abuse_contacts": [{"email": "abuse@pfcloud.io", "handle": "ABUSE8542-ARIN", "name": "Abuse"}], "admin_contacts": [{"email": "admin@pfcloud.io", "handle": "ADMIN8226-ARIN", "name": "Admin"}], "city": "Eygelshoven", "country": "NL", "handle": "IHL-76", "name": "Intelligence Hosting LLC", "postal_code": "6471WV", "street": "Bart van Slobbestraat 16B", "tech_contacts": [{"email": "admin@pfcloud.io", "handle": "TECH1363-ARIN", "name": "Tech"}]}}}}}, "services": {"result": {"next_page_token": "", "ranges": [{"end_time": "2026-08-30T15:05:46.055921Z", "ip": "204.76.203.4", "port": "22", "protocol": "SSH", "start_time": "2026-08-30T15:05:45.055921Z", "transport_protocol": "TCP"}, {"end_time": "2026-07-17T22:22:36.331685Z", "ip": "204.76.203.4", "port": "902", "protocol": "SMTP", "start_time": "2026-06-18T07:33:09.846165Z", "transport_protocol": "TCP"}, {"end_time": "2026-07-17T11:01:33.543272Z", "ip": "204.76.203.4", "port": "9080", "protocol": "HTTP", "start_time": "2026-06-17T21:13:38.419072Z", "transport_protocol": "TCP"}, {"end_time": "2026-07-17T09:48:35.852835Z", "ip": "204.76.203.4", "port": "443", "protocol": "HTTP", "start_time": "2026-06-18T09:35:12.519209Z", "transport_protocol": "TCP"}, {"end_time": "2026-07-17T08:53:19.612241Z", "ip": "204.76.203.4", "port": "80", "protocol": "HTTP", "start_time": "2026-05-21T22:25:15.006898Z", "transport_protocol": "TCP"}, {"end_time": "2026-07-17T08:22:23.341701Z", "ip": "204.76.203.4", "port": "9080", "protocol": "UNKNOWN", "start_time": "2026-06-17T21:13:28.105485Z", "transport_protocol": "TCP"}, {"end_time": "2026-06-22T02:51:57.397676Z", "ip": "204.76.203.4", "port": "22", "protocol": "SSH", "start_time": "2026-06-21T19:18:02.240578Z", "transport_protocol": "TCP"}, {"end_time": "2026-06-17T08:32:16.438316Z", "ip": "204.76.203.4", "port": "443", "protocol": "UNKNOWN", "start_time": "2026-05-21T22:11:32.023785Z", "transport_protocol": "TCP"}, {"end_time": "2026-06-17T03:05:57.762709Z", "ip": "204.76.203.4", "port": "22", "protocol": "SSH", "start_time": "2026-05-21T00:00:24.600671Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-22T00:12:03.979388Z", "ip": "204.76.203.4", "port": "443", "protocol": "HTTP", "start_time": "2026-05-22T00:12:02.979388Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-14T19:45:53.494621Z", "ip": "204.76.203.4", "port": "80", "protocol": "HTTP", "start_time": "2026-05-13T19:42:10.705404Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-14T19:34:14.853175Z", "ip": "204.76.203.4", "port": "22", "protocol": "SSH", "start_time": "2026-04-26T11:27:12.00625Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-07T07:37:08.453213Z", "ip": "204.76.203.4", "port": "27015", "protocol": "VALVE", "start_time": "2026-05-07T07:37:07.453213Z", "transport_protocol": "UDP"}, {"end_time": "2026-04-29T21:25:14.610151Z", "ip": "204.76.203.4", "port": "27015", "protocol": "VALVE", "start_time": "2026-04-29T21:25:13.610151Z", "transport_protocol": "UDP"}, {"end_time": "2026-04-27T21:02:12.711535Z", "ip": "204.76.203.4", "port": "27015", "protocol": "VALVE", "start_time": "2026-04-26T05:04:55.159709Z", "transport_protocol": "UDP"}, {"end_time": "2026-04-25T02:27:08.183691Z", "ip": "204.76.203.4", "port": "22", "protocol": "SSH", "start_time": "2025-12-31T19:31:08.931128Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-14T07:52:35.975394Z", "ip": "204.76.203.4", "port": "27015", "protocol": "VALVE", "start_time": "2026-04-14T07:52:34.975394Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-30T18:31:05.460098Z", "ip": "204.76.203.4", "port": "22", "protocol": "SSH", "start_time": "2025-12-09T16:31:02.167827Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-08T16:17:31.506772Z", "ip": "204.76.203.4", "port": "22", "protocol": "SSH", "start_time": "2025-11-17T13:54:18.366171Z", "transport_protocol": "TCP"}, {"end_time": "2025-10-30T17:13:14.955208Z", "ip": "204.76.203.4", "port": "22", "protocol": "SSH", "start_time": "2025-10-25T21:39:35.342112Z", "transport_protocol": "TCP"}, {"end_time": "2025-10-24T09:02:14.505932Z", "ip": "204.76.203.4", "port": "22", "protocol": "SSH", "start_time": "2025-10-02T21:32:20.592531Z", "transport_protocol": "TCP"}, {"end_time": "2025-10-01T20:32:10.064001Z", "ip": "204.76.203.4", "port": "22", "protocol": "SSH", "start_time": "2025-09-10T01:35:55.46924Z", "transport_protocol": "TCP"}, {"end_time": "2025-09-09T10:21:05.139254Z", "ip": "204.76.203.4", "port": "22", "protocol": "SSH", "start_time": "2025-09-08T21:04:27.780559Z", "transport_protocol": "TCP"}]}}} +{"ip": "176.120.22.43", "asn": "AS198953", "name": "PROTON66", "honeylabs_events": 134, "host": {"result": {"extensions": {}, "resource": {"autonomous_system": {"asn": 198953, "bgp_prefix": "176.120.22.0/24", "country_code": "RU", "description": "proton66 - Proton66 OOO", "name": "proton66 - Proton66 OOO"}, "dns": {"reverse_dns": {"resolve_time": "2026-08-30T20:53:21Z"}}, "greynoise": {"actor": "unknown", "classification": "malicious", "last_observed_time": "2026-08-30T00:00:00Z", "tags": [{"name": "Cisco ASA Scanner"}, {"name": "Cisco SSL VPN Bruteforcer"}, {"name": "ConnectWise ScreenConnect Auth Bypass Check"}, {"name": "CrushFTP Scanner"}, {"name": "F5 BIG-IP Crawler"}, {"name": "Generic Login Attempt"}, {"name": "Generic Path Traversal Attempt"}, {"name": "Looks Like Windows 10 laptop"}, {"name": "PAN-OS CVE-2026-0257 Authentication Bypass Attempt"}, {"name": "Palo Alto Networks Login Scanner"}, {"name": "Palo Alto Networks PAN-OS CVE-2020-2034 Crawler"}, {"name": "TLS/SSL Crawler"}, {"name": "Web Crawler"}]}, "ip": "176.120.22.43", "labels": [{"confidence": 0.75, "source": "censys", "value": "BULLETPROOF"}], "location": {"city": "Saint Petersburg", "continent": "Europe", "coordinates": {"latitude": 59.93863, "longitude": 30.31413}, "country": "Russia", "country_code": "RU", "postal_code": "195213", "province": "St.-Petersburg", "timezone": "Europe/Moscow"}, "network": [{"hosting": true, "source": "IPINFO"}], "privacy": [{"source": "IPINFO"}], "reputation": {"evidence": [{"additional_fields": [{"field": "label", "value": "BULLETPROOF"}], "category": "network_infra", "evidence_score": 1}], "model_version": "0.1.0", "score": 0.42, "score_level": "medium_risk"}, "service_count": 1, "services": [{"cert": {"added_at": "2026-08-05T08:56:21Z", "ever_seen_in_scan": true, "fingerprint_md5": "f1e0262ff49135794f5cedb3b645b0ed", "fingerprint_sha1": "aafb6a3b2c772bd4d63e1809c799c5640163417d", "fingerprint_sha256": "45698b4840a0aa52c95154108e1acf013b1ae4f65deca1851798ed1ed8ae7fac", "modified_at": "2026-08-05T08:56:21Z", "names": ["DESKTOP-AGLA913"], "parse_status": "success", "parsed": {"extensions": {"extended_key_usage": {"server_auth": true}, "key_usage": {"data_encipherment": true, "key_encipherment": true, "value": 12}}, "issuer": {"common_name": ["DESKTOP-AGLA913"]}, "issuer_dn": "CN=DESKTOP-AGLA913", "ja4x": "7022c563de38_7022c563de38_e73b053161df", "serial_number": "35314202516191734875055970526662751169", "serial_number_hex": "1a91449c39ad2685406912a0702bf3c1", "signature": {"self_signed": true, "signature_algorithm": {"name": "SHA256-RSA", "oid": "1.2.840.113549.1.1.11"}, "valid": true, "value": "6a9f5554fdc4917b6dc485e7e179788476832d33885b496fa531a576f842d5d7c3f98ce3e7992772ae457acbc15fc901cbab7bfe91c31e7f72572242e58d38285593cfc7b8f93278db1c38dc8dd596ada2d9c8326f743441b0c6eae1a83864f293abe7bfa01b29c63faac60cceb371f4e29f3c09312d64597c5cf8ff9b2b6247b6f2460a904ab6b5269e52e2d9154bb89892a08a7e83d73a6328bfa8b7dc0e2d3e7d6acb20eb883719b52f19e05e1e94d717c10087c086b9de1b58cb24af32881f5293a64087ab6c504225523afaf69a6668eae269cb191c3e5aa18b0a1c7bf88a941001e77cdf363c191fa47f21341b3bfb1da2b3a75a8d4721a98ef9b79b2a"}, "subject": {"common_name": ["DESKTOP-AGLA913"]}, "subject_dn": "CN=DESKTOP-AGLA913", "subject_key_info": {"fingerprint_sha256": "8386d4fc4e085c3ca396f0ac50bed132b6cfdb691d77752e067facb10f5a1d26", "key_algorithm": {"name": "RSA", "oid": "1.2.840.113549.1.1.1"}, "rsa": {"exponent": 65537, "length": 2048, "modulus": "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"}}, "validity_period": {"length_seconds": 15811201, "not_after": "2026-12-28T03:15:11Z", "not_before": "2026-06-28T03:15:11Z"}, "version": 3}, "revocation": {"crl": {}, "ocsp": {}}, "spki_fingerprint_sha256": "7ba82c761f1c751cb7918015c8e1dce7be2e8cd51b7c3baabdf083d96eeec288", "spki_subject_fingerprint_sha256": "7ba82c761f1c751cb7918015c8e1dce7be2e8cd51b7c3baabdf083d96eeec288", "tbs_fingerprint_sha256": "ddf275d66d3484493956549341f6e1869a3557980554f53548ba55d7d606693c", "tbs_no_ct_fingerprint_sha256": "ddf275d66d3484493956549341f6e1869a3557980554f53548ba55d7d606693c", "validated_at": "2026-08-30T22:21:38Z", "validation": {"apple": {}, "chrome": {}, "microsoft": {}, "nss": {}}, "zlint": {"errors_present": true, "failed_lints": ["e_ext_san_missing", "e_sub_cert_aia_does_not_contain_ocsp_url", "e_sub_cert_aia_missing", "e_sub_cert_cert_policy_empty", "e_sub_cert_certificate_policies_missing", "e_subject_common_name_not_exactly_from_san", "n_subject_common_name_included", "w_ext_key_usage_not_critical", "w_ext_subject_key_identifier_missing_sub_cert"], "notices_present": true, "timestamp": "2026-08-05T08:56:21Z", "version": 3, "warnings_present": true}}, "exposures": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "RDP", "literal_match": "RDP"}], "id": "CENSYS-2022-1054", "metrics": {}, "name": "Exposed RDP Service", "risk_source": "censys", "severity": "high", "source": "censys", "year": 2022}], "ip": "176.120.22.43", "ja4tscan": {"fingerprint": "64000_2-1-3-1-1-4_1460_0_1-2-4-8", "scan_time": "2026-08-29T00:22:39Z"}, "jarm": {"cipher_and_version_fingerprint": "14d14d16d14d14d08c14d14d14d14d", "fingerprint": "14d14d16d14d14d08c14d14d14d14dfd9c9d14e4f4f67f94f0359f8b28f532", "ip": "176.120.22.43", "is_success": true, "port": 3389, "scan_time": "2026-08-27T22:16:18Z", "tls_extensions_sha256": "fd9c9d14e4f4f67f94f0359f8b28f532", "transport_protocol": "tcp"}, "labels": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "RDP", "literal_match": "RDP"}], "source": "censys", "value": "REMOTE_ACCESS"}], "misconfigs": [{"confidence": 0.5, "evidence": [{"data_path": "service.tls.cipher_selected", "found_value": "TLS_RSA_WITH_AES_256_GCM_SHA384", "literal_match": "TLS_RSA_WITH_AES_256_GCM_SHA384"}], "id": "CENSYS-2026-1193", "metrics": {}, "name": "Weak TLS Cipher Selected", "risk_source": "censys", "severity": "medium", "source": "censys", "year": 2026}, {"confidence": 1, "evidence": [{"data_path": "cert.parsed.signature.self_signed", "found_value": "true"}], "id": "CENSYS-2026-1196", "metrics": {}, "name": "Self-Signed Certificate", "risk_source": "censys", "severity": "low", "source": "censys", "year": 2026}], "port": 3389, "protocol": "RDP", "rdp": {"certificate_info": {}, "connect_response": {"domain_parameters": {"domain_protocol_version": 2, "max_channel_ids": 34, "max_mcspdu_size": 65528, "max_provider_height": 1, "max_user_id_channels": 3, "num_priorities": 1}}, "protocol_flags": {"dynvc_graphics_pipeline": true, "extended_client_data_supported": true, "neg_resp_reserved": true, "restricted_admin_mode": true, "restricted_auth_mode": true}, "selected_security_protocol": {"raw_value": 1, "standard_rdp": true, "tls": true}, "version": {"major": -1, "minor": -1, "raw": "00000000"}, "x224_cc_pdu_dstref": 51966, "x224_cc_pdu_srcref": 13330}, "scan_time": "2026-08-30T15:31:46Z", "screenshots": [{"extracted_text": "", "handle": "25f48c3acdbf45ae90026dfb5a36d2e2", "phash": "0000000000000000"}], "software": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "RDP", "literal_match": "RDP"}], "part": "a", "source": "censys", "type": ["REMOTE_ACCESS"]}], "tls": {"cipher_selected": "TLS_RSA_WITH_AES_256_GCM_SHA384", "fingerprint_sha256": "45698b4840a0aa52c95154108e1acf013b1ae4f65deca1851798ed1ed8ae7fac", "ja3s": "f75082535b4a79c07b31bdd0e2b7eb87", "ja4s": "t120100_009d_bc98f8e001b5", "version_selected": "tlsv1_2", "versions": [{"ja3s": "f75082535b4a79c07b31bdd0e2b7eb87", "ja4s": "t120100_009d_bc98f8e001b5", "version": "tlsv1_2"}, {"ja3s": "9f2e2080c0409c26ea913d9273e88773", "ja4s": "t110100_0035_bc98f8e001b5", "version": "tlsv1_1"}, {"ja3s": "91589ea825a2ee41810c85fab06d2ef6", "ja4s": "t100100_0035_bc98f8e001b5", "version": "tlsv1_0"}]}, "transport_protocol": "tcp"}], "whois": {"network": {"cidrs": ["176.120.22.0/24"], "created": "2024-08-27T00:00:00Z", "handle": "RU-PROTON66-20240827", "name": "Proton66 OOO", "updated": "2024-08-27T00:00:00Z"}, "organization": {"abuse_contacts": [{"email": "abuse@proton66.ru", "handle": "AR70098-RIPE", "name": "Abuse-C Role"}], "address": "DISTRICT No. 54, ISKROVSKY PR-KT, D. 21, LIT. U, kv.218\\n193230\\nST. PETERSBURG\\nRUSSIAN FEDERATION", "admin_contacts": [{"email": "mail@proton66.ru", "handle": "TD6653-RIPE", "name": "Tech dept."}], "handle": "ORG-PO84-RIPE", "name": "Proton66 OOO"}}}}}, "services": {"result": {"next_page_token": "cbb917a301abae5309d9712f:PQ5N/lXUrnO+qwEay0+9UOgfj8/gSbsWMBXDtGzyRLnExhMO449iSg3vNltQ+xEInMzRbTxnVqa/B6UvtqnO9kn9YA/lBedCtjisS/d9TG+72w8+jiTANsriccXQ+pGLlrfYm3ooFe77lIvROt4nu2xuiyfpV9rrzmerK9LvfRPSTUzrtG34dWNDxPa8hTZ5sJMMRniDS8yaL9EFhRcS1mZpVB7F7yeBlLKqd8mAq86maEAhG+qM/o4OJBiIGLZd3uhLAOt2/OkdSzeHDjZ9FX56cHzttcOtOWME+8kSpWwqL8XVVRTye/va/hDBTeQnxi590p0THBCzWm1tLF8u+iAbMq+Qc3QoUU0N8xcAjMfvTsB8Rdo06uuUVXU/A/HnOEY5NXWeg4hYnEw1p5jcZg5xL94Ji0/pNqyanVgSGibONkE7cnbvVp1udmStRvx6ZfBxITibVDql1Ru1q52hNavEgESCBMeyr+KuIx5FSzXS7to0FQ2gPwZlZoxTkdnZfAWJiokrRqAs4572HzYCPS2rGdm41D5VwhnWqaj0lkgqqd/8SWGaRganXH7mE8kJvwnhw9EWocr9+sQBSIDz4i1WjBGCJikv4tFHHse4wGOpHFoeSE93zK/92mTGtKrLCdbrosjBZaQvPYg1q1ILmyxSPbBUkc4tIP/6i4Hfq6JiMRQgNb7IDRALyKx7Wy/o2zmn2c6w+PaS7HkIq2b7Ww/VdcgvHkDSvObKsJ6e6iodJQag5JmU/Y3P1kjmgwo8o60vesR7", "ranges": [{"end_time": "2026-08-30T15:31:47.904152Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-08-06T18:04:54.713786Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-28T08:39:31.574586Z", "ip": "176.120.22.43", "port": "2222", "protocol": "SSH", "start_time": "2026-08-06T18:40:04.588173Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-05T09:55:41.919496Z", "ip": "176.120.22.43", "port": "2222", "protocol": "SSH", "start_time": "2026-08-05T09:55:40.919496Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-05T08:56:13.01543Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-08-05T08:56:12.01543Z", "transport_protocol": "TCP"}, {"end_time": "2026-06-04T17:01:57.115053Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-06-04T17:01:56.115053Z", "transport_protocol": "TCP"}, {"end_time": "2026-06-02T20:18:26.941613Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-06-02T20:18:25.941613Z", "transport_protocol": "TCP"}, {"end_time": "2026-06-01T12:00:09.475638Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-06-01T12:00:08.475638Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-30T18:30:09.168164Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-05-30T18:30:08.168164Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-29T10:08:47.860302Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-05-29T10:08:46.860302Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-29T09:55:52.2321Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-05-29T09:55:51.2321Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-28T00:35:22.10442Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-05-25T22:35:19.4074Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-20T01:20:22.247456Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-05-20T01:20:21.247456Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-19T21:35:57.132068Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-05-19T21:35:56.132068Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-18T21:11:25.641317Z", "ip": "176.120.22.43", "port": "3389", "protocol": "UNKNOWN", "start_time": "2026-05-18T21:11:24.641317Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-18T21:11:03.150726Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-05-18T21:11:02.150726Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-17T22:12:00.465128Z", "ip": "176.120.22.43", "port": "22", "protocol": "UNKNOWN", "start_time": "2026-05-17T22:11:59.465128Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-15T19:55:12.823723Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-05-15T19:55:11.823723Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-14T10:33:53.562704Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-05-14T10:33:52.562704Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-13T09:35:30.207679Z", "ip": "176.120.22.43", "port": "3389", "protocol": "UNKNOWN", "start_time": "2026-05-13T09:35:29.207679Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-12T09:13:46.182244Z", "ip": "176.120.22.43", "port": "3389", "protocol": "UNKNOWN", "start_time": "2026-05-12T09:13:45.182244Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-07T17:45:31.5799Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-05-07T17:45:30.5799Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-06T04:49:06.444241Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-05-06T04:49:05.444241Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-05T04:33:29.970563Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-05-05T04:33:28.970563Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-04T04:12:05.099742Z", "ip": "176.120.22.43", "port": "22", "protocol": "UNKNOWN", "start_time": "2026-05-04T04:12:04.099742Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-29T01:26:02.400218Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-04-29T01:26:01.400218Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-27T04:52:21.91487Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-04-27T04:52:20.91487Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-26T15:34:39.46526Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-04-25T15:01:38.563944Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-25T23:32:06.742959Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-04-24T22:33:09.877381Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-25T05:56:09.353184Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-04-25T05:56:08.353184Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-24T00:42:55.923006Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-04-20T22:27:51.747418Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-23T14:00:37.149054Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-04-23T14:00:36.149054Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-21T13:30:09.713506Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-04-21T13:30:08.713506Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-20T01:18:39.824804Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-04-20T01:18:38.824804Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-19T09:58:54.860379Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-04-19T09:58:53.860379Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-18T12:03:33.441355Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-04-18T12:03:32.441355Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-18T01:17:36.979116Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-04-18T01:17:35.979116Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-17T17:26:04.91615Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-04-17T17:26:03.91615Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-16T21:40:22.242206Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-04-15T21:09:01.243186Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-16T00:36:19.434162Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-04-14T23:38:46.833812Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-13T23:34:30.96172Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-04-13T23:34:29.96172Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-13T19:13:14.188572Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-04-13T19:13:13.188572Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-12T14:55:17.473144Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-04-12T14:55:16.473144Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-12T14:33:04.242991Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-04-11T14:21:58.140396Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-11T03:27:11.362627Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-04-11T03:27:10.362627Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-10T09:48:24.044407Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-04-10T09:48:23.044407Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-09T18:40:08.451169Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-04-06T15:33:04.258551Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-09T04:40:41.10597Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-04-09T04:40:40.10597Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-07T08:36:36.138946Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-04-06T08:00:13.623684Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-04T14:42:31.74082Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-04-04T14:42:30.74082Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-04T14:30:59.220612Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-04-03T13:33:35.312386Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-03T05:34:22.013178Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-04-02T04:36:33.653145Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-02T08:33:35.777491Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-04-01T07:43:54.32199Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-31T23:33:24.070551Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-03-30T23:11:51.579659Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-30T23:06:04.325638Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-03-30T23:06:03.325638Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-29T06:44:31.530172Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-03-29T06:44:30.530172Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-27T21:59:36.199266Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-03-27T21:59:35.199266Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-27T02:18:46.635367Z", "ip": "176.120.22.43", "port": "22", "protocol": "UNKNOWN", "start_time": "2026-03-27T02:18:45.635367Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-27T00:09:11.080846Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-03-27T00:09:10.080846Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-25T03:38:08.069535Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-03-25T03:38:07.069535Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-24T03:32:24.523921Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-03-21T08:32:28.397408Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-23T22:59:31.881459Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-03-23T15:20:24.338884Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-21T22:41:41.390339Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-03-21T22:41:40.390339Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-20T18:16:59.344662Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-03-20T18:16:58.344662Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-20T03:55:17.823415Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-03-20T03:55:16.823415Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-19T13:32:18.195868Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-03-17T11:44:38.498309Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-18T18:36:03.722678Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-03-17T17:36:42.738572Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-16T06:33:49.903523Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-03-15T05:32:18.647811Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-15T20:31:15.847369Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-03-14T19:53:12.742287Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-14T01:25:16.694816Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-03-14T01:25:15.694816Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-13T03:32:55.866484Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-03-11T01:44:51.111153Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-12T09:08:27.657275Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-03-12T09:08:26.657275Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-10T05:04:32.565077Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-03-10T05:04:31.565077Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-09T20:34:31.256936Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-03-08T20:00:15.373422Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-08T11:30:56.259252Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-03-08T11:30:55.259252Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-07T14:46:02.20181Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-03-07T14:46:01.20181Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-07T02:47:01.539547Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-03-07T02:47:00.539547Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-06T09:43:04.899918Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-03-06T09:43:03.899918Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-05T21:36:24.8316Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-03-05T21:36:23.8316Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-04T21:22:58.029361Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-03-04T21:22:57.029361Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-04T08:36:50.770445Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-03-04T08:36:49.770445Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-03T07:36:57.42704Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-03-01T05:33:34.274134Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-02T21:08:23.033716Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-03-02T21:08:22.033716Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-01T00:33:02.946439Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-02-23T20:27:41.202724Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-28T00:36:46.043827Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-02-25T23:29:35.346679Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-22T08:32:44.672988Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-02-22T08:32:43.672988Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-22T02:36:40.471815Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-02-21T01:57:47.381879Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-21T07:56:48.814386Z", "ip": "176.120.22.43", "port": "22", "protocol": "UNKNOWN", "start_time": "2026-02-21T07:56:47.814386Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-20T10:03:03.126017Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-02-20T10:03:02.126017Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-19T00:37:30.465747Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-02-19T00:37:29.465747Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-18T22:14:17.985611Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-02-18T22:14:16.985611Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-17T15:35:16.75724Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-02-16T14:56:59.448106Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-17T13:32:41.48919Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-02-15T11:35:35.405886Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-14T13:36:54.754036Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-02-11T11:25:15.767907Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-14T06:53:56.488259Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-02-14T06:53:55.488259Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-12T14:08:19.656862Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-02-12T14:08:18.656862Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-11T01:30:51.539884Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-02-10T00:42:47.873839Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-09T23:07:55.7667Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-02-09T23:07:54.7667Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-08T19:31:57.003628Z", "ip": "176.120.22.43", "port": "22", "protocol": "SSH", "start_time": "2026-02-06T18:02:28.571076Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-07T18:40:33.797077Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-02-07T18:40:32.797077Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-06T09:34:58.911724Z", "ip": "176.120.22.43", "port": "3389", "protocol": "RDP", "start_time": "2026-02-05T09:20:55.417626Z", "transport_protocol": "TCP"}]}}} +{"ip": "176.65.148.226", "asn": "AS51396", "name": "PFCLOUD (Pfcloud UG)", "honeylabs_events": 111, "host": {"result": {"extensions": {}, "resource": {"autonomous_system": {"asn": 51396, "bgp_prefix": "176.65.148.0/24", "country_code": "DE", "description": "PFCLOUD - Pfcloud UG (haftungsbeschrankt)", "name": "PFCLOUD - Pfcloud UG (haftungsbeschrankt)"}, "dns": {"reverse_dns": {"names": ["176.65.148.226.ptr.pfcloud.network"], "resolve_time": "2026-08-25T20:11:44Z"}}, "greynoise": {"actor": "unknown", "classification": "malicious", "last_observed_time": "2026-08-30T00:00:00Z", "tags": [{"name": "Carries HTTP Referer"}, {"name": "ConnectWise ScreenConnect Auth Bypass Check"}, {"name": "CrushFTP Scanner"}, {"name": "DNS Protocol"}, {"name": "F5 BIG-IP Crawler"}, {"name": "Generic Sensitive File Access Attempt"}, {"name": "Generic XSS Commands in Request"}, {"name": "ICMPv4 Protocol"}, {"name": "Ivanti Connect Secure (ICS) Scanner"}, {"name": "LDAP Protocol"}, {"name": "Looks Like Debian server"}, {"name": "Metabase RCE Attempt"}, {"name": "Outlook Web Access Crawler"}, {"name": "Outlook Web Access Login Crawler"}, {"name": "Palo Alto Networks PAN-OS CVE-2020-2034 Crawler"}, {"name": "Ping Scanner"}, {"name": "Pulse Secure VPN Scanner"}, {"name": "SSH Bruteforcer"}, {"name": "SSH Connection Attempt"}, {"name": "Sophos XG Firewall User Portal Scanner"}, {"name": "TLS/SSL Crawler"}, {"name": "Web Crawler"}, {"name": "Wordpress Enumeration"}]}, "ip": "176.65.148.226", "labels": [{"confidence": 0.75, "source": "censys", "value": "BULLETPROOF"}], "location": {"city": "Eygelshoven", "continent": "Europe", "coordinates": {"latitude": 50.89394, "longitude": 6.0587}, "country": "Netherlands", "country_code": "NL", "postal_code": "6471", "province": "Limburg", "timezone": "Europe/Amsterdam"}, "network": [{"hosting": true, "source": "IPINFO"}], "operating_system": {"confidence": 0.25, "cpe": "cpe:2.3:o:canonical:linux:*:*:*:*:*:*:*:*", "evidence": [{"data_path": "ssh.endpoint_id.raw"}], "part": "o", "product": "linux", "source": "recog", "vendor": "canonical"}, "privacy": [{"source": "IPINFO"}], "reputation": {"evidence": [{"additional_fields": [{"field": "label", "value": "BULLETPROOF"}], "category": "network_infra", "evidence_score": 1}], "model_version": "0.1.0", "score": 0.42, "score_level": "medium_risk"}, "service_count": 2, "services": [{"banner": "SSH-2.0-OpenSSH_8.9p1 Ubuntu-3", "banner_hash_sha256": "7dccf9b301dd45a86d3a287b510e93214c74d5faf513f0cf72143960afd46669", "banner_hex": "5353482d322e302d4f70656e5353485f382e397031205562756e74752d33", "exposures": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "SSH", "literal_match": "SSH"}], "id": "CENSYS-2022-1066", "metrics": {}, "name": "Exposed SSH Service", "risk_source": "censys", "severity": "medium", "source": "censys", "year": 2022}], "ip": "176.65.148.226", "ja4tscan": {"fingerprint": "65160_2-4-8-1-3_1460_7_1-2-4-8-16", "scan_time": "2026-08-28T09:28:52Z"}, "labels": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "SSH", "literal_match": "SSH"}], "source": "censys", "value": "REMOTE_ACCESS"}], "operating_systems": [{"confidence": 0.25, "cpe": "cpe:2.3:o:canonical:linux:*:*:*:*:*:*:*:*", "evidence": [{"data_path": "ssh.endpoint_id.raw"}], "part": "o", "product": "linux", "source": "recog", "vendor": "canonical"}], "port": 22, "protocol": "SSH", "scan_time": "2026-08-31T10:32:04Z", "software": [{"confidence": 1, "evidence": [{"data_path": "protocol", "found_value": "SSH", "literal_match": "SSH"}], "part": "a", "source": "censys", "type": ["REMOTE_ACCESS"]}, {"confidence": 0.25, "cpe": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "evidence": [{"data_path": "ssh.endpoint_id.raw"}], "part": "a", "product": "openssh", "source": "recog", "vendor": "openbsd", "version": "8.9p1"}], "ssh": {"endpoint_id": {"comment": "Ubuntu-3", "protocol_version": "2.0", "raw": "SSH-2.0-OpenSSH_8.9p1 Ubuntu-3", "software_version": "OpenSSH_8.9p1"}, "hassh_fingerprint": "699519fdcc30cbcd093d5cd01e4b1d56", "kex_init_message": {"client_to_server_ciphers": ["chacha20-poly1305@openssh.com", "aes128-ctr", "aes192-ctr", "aes256-ctr", "aes128-gcm@openssh.com", "aes256-gcm@openssh.com"], "client_to_server_compression": ["none", "zlib@openssh.com"], "client_to_server_macs": ["umac-64-etm@openssh.com", "umac-128-etm@openssh.com", "hmac-sha2-256-etm@openssh.com", "hmac-sha2-512-etm@openssh.com", "hmac-sha1-etm@openssh.com", "umac-64@openssh.com", "umac-128@openssh.com", "hmac-sha2-256", "hmac-sha2-512", "hmac-sha1"], "host_key_algorithms": ["rsa-sha2-512", "rsa-sha2-256"], "kex_algorithms": ["curve25519-sha256", "curve25519-sha256@libssh.org", "ecdh-sha2-nistp256", "ecdh-sha2-nistp384", "ecdh-sha2-nistp521", "sntrup761x25519-sha512@openssh.com", "diffie-hellman-group-exchange-sha256", "diffie-hellman-group16-sha512", "diffie-hellman-group18-sha512", "diffie-hellman-group14-sha256"], "server_to_client_ciphers": ["chacha20-poly1305@openssh.com", "aes128-ctr", "aes192-ctr", "aes256-ctr", "aes128-gcm@openssh.com", "aes256-gcm@openssh.com"], "server_to_client_compression": ["none", "zlib@openssh.com"], "server_to_client_macs": ["umac-64-etm@openssh.com", "umac-128-etm@openssh.com", "hmac-sha2-256-etm@openssh.com", "hmac-sha2-512-etm@openssh.com", "hmac-sha1-etm@openssh.com", "umac-64@openssh.com", "umac-128@openssh.com", "hmac-sha2-256", "hmac-sha2-512", "hmac-sha1"]}}, "transport_protocol": "tcp", "vulns": [{"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": ">=8.9 && <9.3"}], "id": "CVE-2023-28531", "metrics": {"cvss_v31": {"components": {"attack_complexity": "low", "attack_vector": "network", "availability": "high", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 9.8, "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "epss": {"percentile": 0.816, "score": 0.023}}, "name": "CVE-2023-28531", "risk_source": "cve", "severity": "critical", "source": "third_party", "year": 2023}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": "<9.3"}], "id": "CVE-2023-38408", "kev": [{"date_added": "2023-07-26T00:00:00Z", "source": "third_party"}], "metrics": {"cvss_v31": {"components": {"attack_complexity": "low", "attack_vector": "network", "availability": "high", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 9.8, "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "epss": {"percentile": 0.996, "score": 0.797}}, "name": "CVE-2023-38408", "risk_source": "cve", "severity": "critical", "source": "third_party", "year": 2023}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": "<9.6"}], "id": "CVE-2023-48795", "kev": [{"date_added": "2025-02-05T00:00:00Z", "source": "third_party"}], "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "none", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 5.9, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"}, "epss": {"percentile": 0.998, "score": 0.933}}, "name": "CVE-2023-48795", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2023}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": ">=8.9 && <9.6"}], "id": "CVE-2023-51384", "metrics": {"cvss_v31": {"components": {"attack_complexity": "low", "attack_vector": "local", "availability": "none", "confidentiality": "high", "integrity": "none", "privileges_required": "low", "scope": "unchanged", "user_interaction": "none"}, "score": 5.5, "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}, "epss": {"percentile": 0.354, "score": 0.004}}, "name": "CVE-2023-51384", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2023}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": "<9.6"}], "id": "CVE-2023-51385", "metrics": {"cvss_v31": {"components": {"attack_complexity": "low", "attack_vector": "network", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 6.5, "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.973, "score": 0.198}}, "name": "CVE-2023-51385", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2023}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": ">=8.5p1 && <=9.7p1"}, {"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": ">=8.6 && <=9.8"}], "id": "CVE-2024-6387", "kev": [{"date_added": "2024-07-17T00:00:00Z", "source": "third_party"}], "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "high", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 8.1, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "epss": {"percentile": 0.999, "score": 0.995}}, "name": "CVE-2024-6387", "risk_source": "cve", "severity": "high", "source": "third_party", "year": 2024}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": ">=6.8p1 && <=9.9p1"}, {"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": ">=6.9 && <=9.8"}], "id": "CVE-2025-26465", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 6.8, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"}, "epss": {"percentile": 0.942, "score": 0.076}}, "name": "CVE-2025-26465", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2025}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": ">=7.4 && <10.0"}], "id": "CVE-2025-32728", "metrics": {"cvss_v31": {"components": {"attack_complexity": "low", "attack_vector": "local", "availability": "none", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "changed", "user_interaction": "none"}, "score": 4.3, "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N"}, "epss": {"percentile": 0.085, "score": 0.002}}, "name": "CVE-2025-32728", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2025}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35385", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "high", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 7.5, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}, "epss": {"percentile": 0.443, "score": 0.006}}, "name": "CVE-2026-35385", "risk_source": "cve", "severity": "high", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35386", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "local", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "low", "scope": "unchanged", "user_interaction": "none"}, "score": 3.6, "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.242, "score": 0.003}}, "name": "CVE-2026-35386", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35387", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "none", "integrity": "low", "privileges_required": "low", "scope": "unchanged", "user_interaction": "none"}, "score": 3.1, "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N"}, "epss": {"percentile": 0.146, "score": 0.002}}, "name": "CVE-2026-35387", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35388", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "local", "availability": "none", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 2.5, "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N"}, "epss": {"percentile": 0.029, "score": 0.001}}, "name": "CVE-2026-35388", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": "<10.3"}], "id": "CVE-2026-35414", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "low", "scope": "unchanged", "user_interaction": "none"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.072, "score": 0.002}}, "name": "CVE-2026-35414", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59995", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L"}, "epss": {"percentile": 0.162, "score": 0.002}}, "name": "CVE-2026-59995", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59996", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L"}, "epss": {"percentile": 0.162, "score": 0.002}}, "name": "CVE-2026-59996", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59997", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "required"}, "score": 4.2, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.07, "score": 0.002}}, "name": "CVE-2026-59997", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59998", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "low", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 4.8, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"}, "epss": {"percentile": 0.076, "score": 0.002}}, "name": "CVE-2026-59998", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-59999", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "none", "confidentiality": "none", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 5.9, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"}, "epss": {"percentile": 0.054, "score": 0.002}}, "name": "CVE-2026-59999", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-60000", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "none", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 3.7, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}, "epss": {"percentile": 0.367, "score": 0.004}}, "name": "CVE-2026-60000", "risk_source": "cve", "severity": "low", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-60001", "metrics": {"cvss_v31": {"components": {"attack_complexity": "low", "attack_vector": "network", "availability": "low", "confidentiality": "none", "integrity": "low", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 6.5, "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"}, "epss": {"percentile": 0.211, "score": 0.003}}, "name": "CVE-2026-60001", "risk_source": "cve", "severity": "medium", "source": "third_party", "year": 2026}, {"confidence": 0.25, "evidence": [{"found_value": "cpe:2.3:a:openbsd:openssh:8.9p1:*:*:*:*:*:*:*", "semver_expression": "<10.4"}], "id": "CVE-2026-60002", "metrics": {"cvss_v31": {"components": {"attack_complexity": "high", "attack_vector": "network", "availability": "low", "confidentiality": "high", "integrity": "high", "privileges_required": "none", "scope": "unchanged", "user_interaction": "none"}, "score": 7.7, "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L"}, "epss": {"percentile": 0.221, "score": 0.003}}, "name": "CVE-2026-60002", "risk_source": "cve", "severity": "high", "source": "third_party", "year": 2026}]}, {"banner": "HTTP/1.0 200 OK\r\nContent-Type: text/css\r\n", "banner_hash_sha256": "126c23a7f1051a583bdc0b9ef401a476db4d570e1de664443b47eca8b0ca8bb1", "endpoints": [{"banner": "HTTP/1.0 200 OK\r\nContent-Type: text/css\r\n", "banner_hash_sha256": "126c23a7f1051a583bdc0b9ef401a476db4d570e1de664443b47eca8b0ca8bb1", "endpoint_type": "HTTP", "hostname": "176.65.148.226", "http": {"body": "body{margin:0}\n", "body_hash_sha1": "a36c1c732510cc4b48afc5a654029d0a45deab76", "body_hash_sha256": "6d6068180a5c710c68c8ee0e290cb9b37b3450492d3f9e3ae46083deb152fbcf", "body_size": 15, "headers": {"Connection": {"headers": ["close"]}, "Content-Type": {"headers": ["text/css"]}}, "protocol": "HTTP/1.0", "status_code": 200, "status_reason": "OK", "supported_versions": ["HTTP/1.0"], "uri": "http://176.65.148.226/"}, "ip": "176.65.148.226", "path": "/", "port": 80, "scan_time": "2026-08-30T22:50:00Z", "transport_protocol": "tcp"}], "ip": "176.65.148.226", "ja4tscan": {"fingerprint": "65160_2-4-8-1-3_1460_7_1-2-4", "scan_time": "2026-08-31T08:53:38Z"}, "port": 80, "protocol": "HTTP", "scan_time": "2026-08-30T22:50:00Z", "transport_protocol": "tcp"}], "whois": {"network": {"cidrs": ["176.65.148.0/24"], "created": "2025-04-09T00:00:00Z", "handle": "PF-CLOUD-NET-1", "name": "Pfcloud UG", "updated": "2025-09-08T00:00:00Z"}, "organization": {"abuse_contacts": [{"email": "abuse@pfcloud.io", "handle": "AA42303-RIPE", "name": "Admin"}], "address": "Lilienstra\u00dfe 5\\n94051 Hauzenberg", "handle": "ORG-PU39-RIPE", "name": "Pfcloud UG"}}}}}, "services": {"result": {"next_page_token": "c41c92998b11213c855736e7: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", "ranges": [{"end_time": "2026-08-30T22:50:01.694659Z", "ip": "176.65.148.226", "port": "80", "protocol": "HTTP", "start_time": "2026-08-27T17:41:47.632553Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-30T05:11:16.517085Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2026-08-24T14:49:08.385041Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-21T10:01:49.554088Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2026-07-16T21:39:36.225009Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-20T21:01:37.559263Z", "ip": "176.65.148.226", "port": "80", "protocol": "HTTP", "start_time": "2026-08-18T16:05:28.469515Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-18T11:19:29.003179Z", "ip": "176.65.148.226", "port": "8444", "protocol": "HTTP", "start_time": "2026-08-13T20:06:13.031072Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-18T11:19:11.981449Z", "ip": "176.65.148.226", "port": "8444", "protocol": "UNKNOWN", "start_time": "2026-08-13T20:05:59.903487Z", "transport_protocol": "TCP"}, {"end_time": "2026-08-18T07:57:01.084126Z", "ip": "176.65.148.226", "port": "8443", "protocol": "HTTP", "start_time": "2026-08-11T23:17:25.353304Z", "transport_protocol": "TCP"}, {"end_time": "2026-07-12T03:32:09.27197Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2026-06-09T21:58:37.332687Z", "transport_protocol": "TCP"}, {"end_time": "2026-06-08T16:41:01.386314Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2026-06-04T02:02:02.712005Z", "transport_protocol": "TCP"}, {"end_time": "2026-06-08T02:31:24.782996Z", "ip": "176.65.148.226", "port": "1080", "protocol": "SOCKS", "start_time": "2026-06-04T20:02:04.571684Z", "transport_protocol": "TCP"}, {"end_time": "2026-05-12T00:08:27.77647Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2026-05-09T21:59:05.380145Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-05T22:37:02.664125Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2026-03-20T13:00:21.561535Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-05T21:11:33.235667Z", "ip": "176.65.148.226", "port": "25", "protocol": "SMTP", "start_time": "2026-03-19T18:20:02.579056Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-05T21:08:14.928159Z", "ip": "176.65.148.226", "port": "80", "protocol": "HTTP", "start_time": "2026-03-23T17:32:24.02035Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-05T19:08:48.085995Z", "ip": "176.65.148.226", "port": "8080", "protocol": "HTTP", "start_time": "2026-04-05T16:38:22.120284Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-03T20:01:46.231001Z", "ip": "176.65.148.226", "port": "3000", "protocol": "HTTP", "start_time": "2026-03-28T19:37:59.211318Z", "transport_protocol": "TCP"}, {"end_time": "2026-04-03T05:05:12.061303Z", "ip": "176.65.148.226", "port": "23", "protocol": "TELNET", "start_time": "2026-04-03T05:05:11.061303Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-31T22:52:53.642611Z", "ip": "176.65.148.226", "port": "23", "protocol": "UNKNOWN", "start_time": "2026-03-31T22:52:52.642611Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-31T22:52:49.955491Z", "ip": "176.65.148.226", "port": "4444", "protocol": "UNKNOWN", "start_time": "2026-03-31T22:52:48.955491Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-29T23:53:55.47516Z", "ip": "176.65.148.226", "port": "8080", "protocol": "UNKNOWN", "start_time": "2026-03-29T23:53:54.47516Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-26T03:44:29.300596Z", "ip": "176.65.148.226", "port": "8080", "protocol": "HTTP", "start_time": "2026-03-26T01:49:19.178075Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-26T02:40:00.079456Z", "ip": "176.65.148.226", "port": "4444", "protocol": "UNKNOWN", "start_time": "2026-03-26T02:39:59.079456Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-23T21:02:49.493026Z", "ip": "176.65.148.226", "port": "23", "protocol": "UNKNOWN", "start_time": "2026-03-23T21:02:48.493026Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-23T21:02:47.262144Z", "ip": "176.65.148.226", "port": "8080", "protocol": "HTTP", "start_time": "2026-03-23T06:13:58.298706Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-23T21:02:30.471856Z", "ip": "176.65.148.226", "port": "4444", "protocol": "UNKNOWN", "start_time": "2026-03-23T05:45:46.431493Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-23T17:25:34.718209Z", "ip": "176.65.148.226", "port": "23", "protocol": "TELNET", "start_time": "2026-03-23T17:25:33.718209Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-23T02:32:44.237207Z", "ip": "176.65.148.226", "port": "23", "protocol": "UNKNOWN", "start_time": "2026-03-23T02:32:43.237207Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-16T13:27:16.422361Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2026-03-05T12:02:30.597537Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-15T02:19:05.555933Z", "ip": "176.65.148.226", "port": "8080", "protocol": "HTTP", "start_time": "2026-03-13T19:48:13.836935Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-15T01:44:25.687934Z", "ip": "176.65.148.226", "port": "4444", "protocol": "UNKNOWN", "start_time": "2026-03-15T01:44:24.687934Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-15T01:43:26.045084Z", "ip": "176.65.148.226", "port": "23", "protocol": "UNKNOWN", "start_time": "2026-03-14T22:31:45.669727Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-13T18:24:33.131582Z", "ip": "176.65.148.226", "port": "23", "protocol": "UNKNOWN", "start_time": "2026-03-13T18:24:32.131582Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-12T04:35:36.88889Z", "ip": "176.65.148.226", "port": "8080", "protocol": "HTTP", "start_time": "2026-03-10T18:07:02.142343Z", "transport_protocol": "TCP"}, {"end_time": "2026-03-12T02:27:52.72858Z", "ip": "176.65.148.226", "port": "23", "protocol": "UNKNOWN", "start_time": "2026-03-12T02:27:51.72858Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-20T16:15:04.444581Z", "ip": "176.65.148.226", "port": "3389", "protocol": "RDP", "start_time": "2026-02-11T01:06:32.925788Z", "transport_protocol": "TCP"}, {"end_time": "2026-02-07T20:52:21.645478Z", "ip": "176.65.148.226", "port": "3389", "protocol": "RDP", "start_time": "2026-01-31T03:33:01.359761Z", "transport_protocol": "TCP"}, {"end_time": "2026-01-29T03:15:00.530345Z", "ip": "176.65.148.226", "port": "80", "protocol": "HTTP", "start_time": "2026-01-01T00:51:36.889911Z", "transport_protocol": "TCP"}, {"end_time": "2026-01-28T05:29:30.707884Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2025-12-31T11:31:28.079875Z", "transport_protocol": "TCP"}, {"end_time": "2026-01-07T23:31:46.743592Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2026-01-06T23:08:47.61419Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-30T23:48:55.54976Z", "ip": "176.65.148.226", "port": "80", "protocol": "HTTP", "start_time": "2025-12-26T21:56:09.044778Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-30T10:31:05.587841Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2025-12-26T20:57:08.442711Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-26T15:33:47.923913Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-12-25T14:58:48.095642Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-26T04:31:57.122208Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2025-12-21T17:53:46.413175Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-24T23:32:47.585073Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-12-23T23:28:03.784249Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-23T15:31:20.426933Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-12-22T14:55:00.624035Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-21T15:36:00.772792Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-12-19T01:13:05.269801Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-21T14:32:11.536799Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-12-17T20:13:49.398862Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-21T13:31:37.326041Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2025-12-16T01:18:25.801625Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-16T23:31:45.101586Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-12-14T21:42:54.314423Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-16T12:37:09.566017Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-12-14T11:04:23.716296Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-15T21:33:22.92686Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2025-12-13T15:02:25.367875Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-14T13:32:14.972411Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-12-10T22:34:32.321982Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-14T10:37:35.689404Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-12-13T10:02:15.993988Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-13T11:31:07.659152Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2025-12-12T05:18:23.001437Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-12T22:36:12.938497Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-12-10T20:31:17.842766Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-12T01:31:57.328646Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2025-12-08T23:36:01.916194Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-10T11:31:33.39918Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-12-09T10:32:35.448294Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-10T00:36:38.001955Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-12-08T23:30:39.887941Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-08T15:35:59.639234Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-12-07T15:22:27.78215Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-08T14:57:53.741847Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2025-12-08T04:20:53.452195Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-08T09:31:31.959811Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-12-04T19:33:22.807195Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-08T00:31:39.248772Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2025-11-30T09:56:28.432962Z", "transport_protocol": "TCP"}, {"end_time": "2025-12-07T11:39:52.003234Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-12-04T09:19:07.774709Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-04T15:31:24.082926Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-12-03T14:48:53.686237Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-04T01:36:57.452815Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-12-02T00:15:56.549769Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-03T10:31:42.798948Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-12-01T08:54:51.572251Z", "transport_protocol": "UDP"}, {"end_time": "2025-12-01T04:31:55.759313Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-11-30T03:41:54.957914Z", "transport_protocol": "UDP"}, {"end_time": "2025-11-30T05:31:09.846034Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2025-11-17T00:33:05.565383Z", "transport_protocol": "TCP"}, {"end_time": "2025-11-15T23:41:46.52722Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2025-11-11T19:18:00.813714Z", "transport_protocol": "TCP"}, {"end_time": "2025-11-11T21:43:12.263668Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-11-08T12:46:47.96044Z", "transport_protocol": "UDP"}, {"end_time": "2025-11-11T15:33:38.526382Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2025-11-07T02:40:28.645253Z", "transport_protocol": "TCP"}, {"end_time": "2025-11-08T00:34:15.042292Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-11-06T22:10:54.972343Z", "transport_protocol": "UDP"}, {"end_time": "2025-11-06T18:35:36.824446Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2025-10-25T03:07:17.429068Z", "transport_protocol": "TCP"}, {"end_time": "2025-11-06T08:47:12.685982Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-11-03T17:16:05.229344Z", "transport_protocol": "UDP"}, {"end_time": "2025-11-03T13:12:39.592373Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-10-31T19:43:39.308505Z", "transport_protocol": "UDP"}, {"end_time": "2025-11-02T08:00:06.905549Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-11-02T08:00:05.905549Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-31T12:08:13.950716Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-10-29T18:24:42.284291Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-30T06:04:58.717967Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-10-30T00:59:09.120868Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-28T23:54:08.394035Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-10-28T16:56:39.049368Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-28T23:45:00.424163Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-10-28T16:22:10.104029Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-27T20:24:26.295789Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-10-26T18:02:18.661242Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-27T12:47:10.682705Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-10-26T11:45:12.74926Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-24T19:13:51.17001Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-10-24T19:13:50.17001Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-24T14:38:50.777997Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-10-24T14:38:49.777997Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-24T07:03:22.868353Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-10-22T17:33:25.72241Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-24T06:51:27.730773Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-10-20T15:35:48.772053Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-24T05:23:52.857888Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2025-10-08T23:37:11.030479Z", "transport_protocol": "TCP"}, {"end_time": "2025-10-21T21:08:01.857784Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-10-20T19:29:47.200249Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-20T14:35:37.431075Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-10-18T13:23:26.299863Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-19T23:52:43.086669Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-10-15T19:15:54.220946Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-18T01:05:13.949317Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-10-13T17:56:20.457098Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-14T22:27:23.831438Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-10-13T20:34:57.925373Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-13T10:32:37.08059Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-10-11T08:50:42.951622Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-13T00:42:51.994252Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-10-10T23:10:38.775735Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-10T20:55:26.73465Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-10-09T19:42:38.745713Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-10T19:28:08.725196Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-10-08T17:26:50.983126Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-08T19:33:48.837657Z", "ip": "176.65.148.226", "port": "22", "protocol": "SSH", "start_time": "2025-10-04T01:14:10.659248Z", "transport_protocol": "TCP"}, {"end_time": "2025-10-08T18:31:51.05918Z", "ip": "176.65.148.226", "port": "53", "protocol": "DNS", "start_time": "2025-10-07T18:13:45.068788Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-08T13:34:37.985798Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-10-07T12:43:40.143279Z", "transport_protocol": "UDP"}, {"end_time": "2025-10-06T21:43:10.412856Z", "ip": "176.65.148.226", "port": "27015", "protocol": "VALVE", "start_time": "2025-10-05T21:02:07.697037Z", "transport_protocol": "UDP"}]}}} diff --git a/kevlar/2026-08-31/changes/anomalies.csv b/kevlar/2026-08-31/changes/anomalies.csv new file mode 100644 index 0000000..e42e1f8 --- /dev/null +++ b/kevlar/2026-08-31/changes/anomalies.csv @@ -0,0 +1,51 @@ +asn,type,severity,detail
+AS57043,volume,high,top-20 IP session volume +99400% vs prior week (2 -> 1990)
+AS57043,churn,medium,20 new source IPs in top-20 vs prior week
+AS209847,volume,high,top-20 IP session volume +23650% vs prior week (12 -> 2850)
+AS209847,churn,medium,19 new source IPs in top-20 vs prior week
+AS210644,volume,high,top-20 IP session volume +1187100% vs prior week (7 -> 83104)
+AS210644,churn,medium,20 new source IPs in top-20 vs prior week
+AS138915,volume,high,top-20 IP session volume +2118% vs prior week (62216 -> 1380255)
+AS14956,volume,high,top-20 IP session volume +5516% vs prior week (154 -> 8649)
+AS14956,churn,medium,19 new source IPs in top-20 vs prior week
+AS51852,volume,high,top-20 IP session volume +1583% vs prior week (5301 -> 89208)
+AS51852,churn,medium,13 new source IPs in top-20 vs prior week
+AS400992,volume,high,top-20 IP session volume +1269% vs prior week (217 -> 2970)
+AS400992,churn,medium,18 new source IPs in top-20 vs prior week
+AS33993,volume,high,top-20 IP session volume +4700% vs prior week (1 -> 48)
+AS51396,volume,high,top-20 IP session volume +1684% vs prior week (48952 -> 873217)
+AS51396,churn,medium,11 new source IPs in top-20 vs prior week
+AS216246,volume,high,top-20 IP session volume +6677500% vs prior week (1 -> 66776)
+AS216246,churn,medium,20 new source IPs in top-20 vs prior week
+AS200651,volume,high,top-20 IP session volume +1849% vs prior week (167 -> 3255)
+AS200651,churn,medium,17 new source IPs in top-20 vs prior week
+AS30823,volume,high,top-20 IP session volume +241% vs prior week (274 -> 935)
+AS30823,churn,medium,17 new source IPs in top-20 vs prior week
+AS214351,volume,medium,top-20 IP session volume +100% vs prior week (9 -> 18)
+AS198953,volume,high,top-20 IP session volume +18247% vs prior week (677 -> 124209)
+AS198953,churn,medium,16 new source IPs in top-20 vs prior week
+AS200593,volume,high,top-20 IP session volume +14695% vs prior week (20 -> 2959)
+AS200593,churn,medium,16 new source IPs in top-20 vs prior week
+AS214940,volume,high,top-20 IP session volume +3831% vs prior week (219 -> 8609)
+AS214940,churn,medium,17 new source IPs in top-20 vs prior week
+AS211720,volume,high,top-20 IP session volume +1200% vs prior week (23 -> 299)
+AS138915,fingerprint,low,new JA4 fingerprint not in prior week: t13i220900_231e334592e8_29829a46703f
+AS138915,fingerprint,low,new JA4H fingerprint not in prior week: po11nn0400_52fce913cf3b
+AS14956,fingerprint,low,new HASSH fingerprint not in prior week: bf7dbf67fa9b26ee9f9deb99c49320ba
+AS14956,fingerprint,low,new JA4 fingerprint not in prior week: t13i100900_61a7ad8aa9b6_88aa062a14c8
+AS14956,fingerprint,low,new JA4 fingerprint not in prior week: t13i311000_e8f1e7e78f70_d41ae481755e
+AS14956,fingerprint,low,new JA4H fingerprint not in prior week: ge11nn0300_7fd797acd99d
+AS14956,fingerprint,low,new JA4H fingerprint not in prior week: ge11nn0400_9c3956fad5da
+AS14956,fingerprint,low,new JA4H fingerprint not in prior week: ge11nn0500_39072d476f20
+AS198953,fingerprint,low,new JA4 fingerprint not in prior week: t13i1010h1_61a7ad8aa9b6_3a8073edd8ef
+AS198953,fingerprint,low,new JA4 fingerprint not in prior week: t13i1010h1_61a7ad8aa9b6_792d2c6655cb
+AS198953,fingerprint,low,new JA4H fingerprint not in prior week: ge11cn06ru_b2fb244bb31f
+AS198953,fingerprint,low,new JA4H fingerprint not in prior week: ge11nn0400_8b1ed2202073
+AS198953,fingerprint,low,new JA4H fingerprint not in prior week: ge11nn05en_3bd45b6f184e
+AS198953,fingerprint,low,new JA4H fingerprint not in prior week: po11nn0500_63d29dec8e1d
+AS198953,fingerprint,low,new JA4H fingerprint not in prior week: po11nn18en_9a6afedbb443
+AS200651,fingerprint,low,new HASSH fingerprint not in prior week: e54ef3ec27fe1fea7ab64d3fa05359fd
+AS200651,fingerprint,low,new JA4 fingerprint not in prior week: t13i1909h2_9dc949149365_97f8aa674fd9
+AS200651,fingerprint,low,new JA4H fingerprint not in prior week: ge11nn0400_88d30a62b7ad
+AS200651,fingerprint,low,new JA4H fingerprint not in prior week: po11nn0500_e4a47a99f1ac
+AS200651,fingerprint,low,new JA4H fingerprint not in prior week: po11nn0600_c9506d37ac14
diff --git a/kevlar/2026-08-31/changes/diff-vs-prior-week.csv b/kevlar/2026-08-31/changes/diff-vs-prior-week.csv new file mode 100644 index 0000000..385b416 --- /dev/null +++ b/kevlar/2026-08-31/changes/diff-vs-prior-week.csv @@ -0,0 +1,26 @@ +asn,cur_top20_sessions,prior_top20_sessions,delta_pct,new_ips,gone_ips,new_ports,gone_ports
+AS57043,1990,2,99400%,20,2,23;22;2222;80;8081;2000;8000;22222;8080;502;1741;3306;2762;7001;6002;4242;548;2150;19,6882
+AS209847,2850,12,23650%,19,0,0;22;443;2222;2096;8080;8443;2053;54321;80;2083;8022;2087;8880;9000;10000;5000;3000;8000,
+AS210644,83104,7,1187100%,20,4,22;8022;2222;22222;80;82;88;1723;25565;50000;1883;53;20002;2376;21;444;110;111;85;143,8890;443;6882;2096
+AS138915,1380255,62216,2118%,7,7,23;34569;49960;4242;54378;46030;28591;35372,22;4466;32108;36748;53;10101;64373;39192
+AS14956,8649,154,5516%,19,19,22222;23;8022;21;13;19;5901;2222;81;26;53;111;82;37,3389;5069;5072;5073;8090;5071;0;5076;5068;5070;5067;5075;1080;5074
+AS216139,150,0,n/a,7,0,22222;2222;22;19898,
+AS51852,89208,5301,1583%,13,13,23;5432;135;8080;8443;3306;3000;27017;5061;5433;8291;8000,139;1723;9090;1701;4000;82;9001;0;9091;4001;591;3001
+AS400992,2970,217,1269%,18,0,8080;22;2222;22222;1080;3128;4022;39222;7235;25565;389;3389;23;222;81;83;2525;82,
+AS33993,48,1,4700%,5,0,22;80;443;0;7860;6379,
+AS51396,873217,48952,1684%,11,11,5900;23;81;5555;8081;82;88;83;4000,1081;3128;8000;443;5678;9993;1088;9050;9051
+AS213702,2341,0,n/a,8,0,443;22;6060;8546;8551;9000;8900;8501;80;8332;8899;8443;3030;1317;8888;2375;8080;3000;8545;8000,
+AS216246,66776,1,6677500%,20,1,8888;8080;80;5000;81;2082;82;3000;1194;110;111;554;1024;21;993;888;53;444;85;143,443
+AS200651,3255,167,1849%,17,1,80;23;22;1080;18190;19009;2222;3128;9006;20001;18264;8888;20201;5555,0
+AS30823,935,274,241%,17,0,443;5060;22;445;27017;23;3306;1434;1521;2222;21;5432;6000;1433;1194;53;1883;2022,
+AS140666,7,0,n/a,4,0,0,
+AS214351,18,9,100%,2,0,42021,
+AS198953,124209,677,18247%,16,1,5405;22222;4433;6001;10443;5678;1434;3389;5000;1800;4443;8888,0;5006;3305;1443;3306;4000;2019;3308;1501;3310;1688;3307
+AS200593,2959,20,14695%,16,0,9443;4433;8443;4443;444;3389;5443;10443;6443;9000;4444;20443;7443;8888;40443;30443;3390,1433
+AS214940,8609,219,3831%,17,4,465;8022;2222;22222;26;8080;8888;3128;48388;1433;110;3306;3000;22;143,
+AS206728,0,0,n/a,0,0,,
+AS211720,299,23,1200%,5,0,5405;5900;3389;8013;0;445;30443;1434;21;40443;1433;50443,10443
+AS216309,0,0,n/a,0,0,,
+AS58854,5,0,n/a,1,0,3389,
+AS202685,0,0,n/a,0,0,,
+AS394711,0,0,n/a,0,0,,
diff --git a/kevlar/2026-08-31/honeylabs/events-AS138915.ndjson b/kevlar/2026-08-31/honeylabs/events-AS138915.ndjson new file mode 100644 index 0000000..a22aeb5 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS138915.ndjson @@ -0,0 +1 @@ +{"timestamp": "2026-08-27T07:59:32", "event_id": "dbbe5212-e3ec-4649-a753-7e8ad3b2bfd6", "source_ip": "154.90.37.55", "source_port": 55537, "source_domain": "", "country_code": "PH", "country_name": "Philippines", "city_name": "Manila", "asn_number": 138915, "asn_org": "Kaopu Cloud HK Limited", "dest_port": 5986, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Microsoft WinRM Client", "url_path": "/wsman?PSVersion=5.1.19041.1", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"authorization\":\"Negotiate TlRMTVNTUAABAAAAN4II4gAAAAAAAAAAAAAAAAAAAAAGAbAdAAAADw==\",\"content-length\":\"0\",\"host\":\"<HONEYPOT>:5986\",\"user-agent\":\"Microsoft WinRM Client\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i220900_231e334592e8_29829a46703f", "tls_client_ja3": "622a7fd6adbafa3736c1a3468db8a8e0", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0400_52fce913cf3b", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 211, "dest_bytes": 77, "network_bytes": 288, "event_summary": ""} diff --git a/kevlar/2026-08-31/honeylabs/events-AS140666.ndjson b/kevlar/2026-08-31/honeylabs/events-AS140666.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS140666.ndjson diff --git a/kevlar/2026-08-31/honeylabs/events-AS14956.ndjson b/kevlar/2026-08-31/honeylabs/events-AS14956.ndjson new file mode 100644 index 0000000..33e3ee4 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS14956.ndjson @@ -0,0 +1,36 @@ +{"timestamp": "2026-08-24T22:17:44", "event_id": "e3652ca7-8ef2-411e-bdbe-62448b320f7c", "source_ip": "172.86.114.162", "source_port": 57239, "source_domain": "162.114.86.172.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Dallas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 445, "network_protocol": "", "application_protocol": "smbv1", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 469000000, "source_bytes": 455, "dest_bytes": 56, "network_bytes": 511, "event_summary": "\u0000\u0000\u0000N\ufffdSMB2\u0000\u0000\u0000\u0000\u0018\u0007\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\u0000\u0000A\u0000\u000f\f\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00014\ufffd\u0000\u0000\u0000\f\u0000B\u0000\u0000\u0000N\u0000\u0001\u0000\u000e\u0000\r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T22:17:40", "event_id": "987eac5e-6dc9-4c47-85ae-f09afadb2abf", "source_ip": "172.86.114.162", "source_port": 56423, "source_domain": "162.114.86.172.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Dallas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 445, "network_protocol": "", "application_protocol": "smbv1", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 469000000, "source_bytes": 364, "dest_bytes": 56, "network_bytes": 420, "event_summary": "\u0000\u0000\u0000J\ufffdSMB%\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000J\u0000\u0000\u0000J\u0000\u0002\u0000#\u0000\u0000\u0000\u0007\u0000\\PIPE\\\u0000"} +{"timestamp": "2026-08-24T22:01:14", "event_id": "9515b94b-2e0f-450c-975a-bf0a1510453c", "source_ip": "172.86.114.162", "source_port": 55118, "source_domain": "162.114.86.172.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Dallas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 445, "network_protocol": "", "application_protocol": "smbv1", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 471000000, "source_bytes": 455, "dest_bytes": 56, "network_bytes": 511, "event_summary": "\u0000\u0000\u0000N\ufffdSMB2\u0000\u0000\u0000\u0000\u0018\u0007\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\u0000\u0000A\u0000\u000f\f\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00014\ufffd\u0000\u0000\u0000\f\u0000B\u0000\u0000\u0000N\u0000\u0001\u0000\u000e\u0000\r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T22:01:11", "event_id": "cab9eac0-2ece-43f3-8fef-368d40284229", "source_ip": "172.86.114.162", "source_port": 54322, "source_domain": "162.114.86.172.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Dallas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 445, "network_protocol": "", "application_protocol": "smbv1", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 471000000, "source_bytes": 364, "dest_bytes": 56, "network_bytes": 420, "event_summary": "\u0000\u0000\u0000J\ufffdSMB%\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000J\u0000\u0000\u0000J\u0000\u0002\u0000#\u0000\u0000\u0000\u0007\u0000\\PIPE\\\u0000"} +{"timestamp": "2026-08-24T20:43:14", "event_id": "816fb942-ef87-435a-9d2f-1eddef1c6292", "source_ip": "172.86.114.162", "source_port": 53844, "source_domain": "", "country_code": "US", "country_name": "United States", "city_name": "Dallas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 445, "network_protocol": "", "application_protocol": "smbv1", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 469000000, "source_bytes": 455, "dest_bytes": 56, "network_bytes": 511, "event_summary": "\u0000\u0000\u0000N\ufffdSMB2\u0000\u0000\u0000\u0000\u0018\u0007\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\u0000\u0000A\u0000\u000f\f\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00014\ufffd\u0000\u0000\u0000\f\u0000B\u0000\u0000\u0000N\u0000\u0001\u0000\u000e\u0000\r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-25T23:21:07", "event_id": "5a66921e-1611-416f-972c-1b2b14edfff3", "source_ip": "107.189.26.103", "source_port": 51734, "source_domain": "103.26.189.107.static.cloudzy.com", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Zaandam", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 80, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "libredtail-http", "url_path": "/containers/json", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0500_39072d476f20", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 49, "event_duration": 21320000000, "source_bytes": 19145, "dest_bytes": 3871, "network_bytes": 23016, "event_summary": ""} +{"timestamp": "2026-08-26T13:35:07", "event_id": "d3513389-2207-4ff1-9756-1c5341ab5860", "source_ip": "107.189.17.181", "source_port": 36309, "source_domain": "181.17.189.107.static.cloudzy.com", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Zaandam", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 402, "dest_bytes": 79, "network_bytes": 481, "event_summary": "OPTIONS sip:<HONEYPOT>:5060 SIP/2.0\r\nVia: SIP/2.0/TCP 107.189.17.181:36309;branch=z9hG4bKf7bdb105bc304299b1846392adcc4825;rport\r\nMax-Forwards: 70\r\nTo: <sip:<HONEYPOT>:5060>\r\nFrom: \"306898751\" <sip:306898751@107.189.17.181>;tag=288630618\r\nCall-ID: 7526c76e39e0447b98e7237f13949988\r\nContact: <sip:306898751@107.189.17.181:36309>\r\nUser-Agent: Z 5.6.4 v2.10.20.4\r\nCSeq: 1 OPTIONS\r\nContent-Length: 0\r\n\r\n"} +{"timestamp": "2026-08-26T13:35:01", "event_id": "093afdf1-ad72-4792-b74a-516a5a3e24ff", "source_ip": "107.189.17.181", "source_port": 34819, "source_domain": "181.17.189.107.static.cloudzy.com", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Zaandam", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 402, "dest_bytes": 79, "network_bytes": 481, "event_summary": "OPTIONS sip:<HONEYPOT>:5060 SIP/2.0\r\nVia: SIP/2.0/TCP 107.189.17.181:34819;branch=z9hG4bK22d506c18ecd40bc9a52ee95354fa970;rport\r\nMax-Forwards: 70\r\nTo: <sip:<HONEYPOT>:5060>\r\nFrom: \"347968744\" <sip:347968744@107.189.17.181>;tag=780011372\r\nCall-ID: 9024c9deb5094e7a96a5584de702411a\r\nContact: <sip:347968744@107.189.17.181:34819>\r\nUser-Agent: Z 5.6.4 v2.10.20.4\r\nCSeq: 1 OPTIONS\r\nContent-Length: 0\r\n\r\n"} +{"timestamp": "2026-08-27T21:19:12", "event_id": "71901ade-895a-4cfd-b64a-6ad0f85f98a5", "source_ip": "144.172.99.12", "source_port": 55206, "source_domain": "12.99.172.144.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Staten Island", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36", "url_path": "/.env", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i100900_61a7ad8aa9b6_88aa062a14c8", "tls_client_ja3": "92e3065cf9444ba90adc1bce4206011c", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0300_7fd797acd99d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 193, "dest_bytes": 78, "network_bytes": 271, "event_summary": ""} +{"timestamp": "2026-08-27T21:11:23", "event_id": "09b3fe28-4a88-492e-a54e-2135f43502c4", "source_ip": "144.172.99.12", "source_port": 59694, "source_domain": "12.99.172.144.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Staten Island", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36", "url_path": "/.env", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i100900_61a7ad8aa9b6_88aa062a14c8", "tls_client_ja3": "92e3065cf9444ba90adc1bce4206011c", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0300_7fd797acd99d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 193, "dest_bytes": 78, "network_bytes": 271, "event_summary": ""} +{"timestamp": "2026-08-27T18:42:45", "event_id": "3fcc8342-6edb-41dc-b64a-8a06a58cd19c", "source_ip": "107.189.17.181", "source_port": 11207, "source_domain": "181.17.189.107.static.cloudzy.com", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Zaandam", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 404, "dest_bytes": 79, "network_bytes": 483, "event_summary": "OPTIONS sip:<HONEYPOT>:5060 SIP/2.0\r\nVia: SIP/2.0/TCP 107.189.17.181:11207;branch=z9hG4bK4389b244c27c4e638cef8b92266da0bd;rport\r\nMax-Forwards: 70\r\nTo: <sip:<HONEYPOT>:5060>\r\nFrom: \"539062981\" <sip:539062981@107.189.17.181>;tag=678161121\r\nCall-ID: b6891c008a1d4c52a9c7bdf7260d21bc\r\nContact: <sip:539062981@107.189.17.181:11207>\r\nUser-Agent: Z 5.6.4 v2.10.20.4\r\nCSeq: 1 OPTIONS\r\nContent-Length: 0\r\n\r\n"} +{"timestamp": "2026-08-27T17:33:12", "event_id": "ac563e81-2afc-4677-af55-6812c473a8ed", "source_ip": "144.172.94.243", "source_port": 5207, "source_domain": "243.94.172.144.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Ogden", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 404, "dest_bytes": 79, "network_bytes": 483, "event_summary": "OPTIONS sip:<HONEYPOT>:5060 SIP/2.0\r\nVia: SIP/2.0/TCP 144.172.94.243:5207;branch=z9hG4bK9e6f7ce508844a508cc8e4c938e8d715;rport\r\nMax-Forwards: 70\r\nTo: <sip:<HONEYPOT>:5060>\r\nFrom: \"636960680\" <sip:636960680@144.172.94.243>;tag=376297213\r\nCall-ID: 736b8198516345d292c3b3ac27f11387\r\nContact: <sip:636960680@144.172.94.243:5207>\r\nUser-Agent: Z 5.6.4 v2.10.20.4\r\nCSeq: 1 OPTIONS\r\nContent-Length: 0\r\n\r\n"} +{"timestamp": "2026-08-27T16:30:48", "event_id": "4bfe9040-6a55-4a5a-8543-c2630eb82e7a", "source_ip": "45.61.182.81", "source_port": 47858, "source_domain": "81.182.61.45.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Dallas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 22, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "bf7dbf67fa9b26ee9f9deb99c49320ba", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 218000000, "source_bytes": 1388, "dest_bytes": 12, "network_bytes": 1400, "event_summary": "SSH-2.0-Go\r\n\u0000\u0000\u0005\\\u0012\u0014Rf{8\ufffd\ufffdVU\ufffdM\u0017\ufffd'\ufffdU?\u0000\u0000\u0001`mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com\u0000\u0000\u0001\ufffdrsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-256,rsa-sha2-512,ssh-rsa,ssh-dss,ssh-ed25519\u0000\u0000\u0000\ufffdaes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour\u0000\u0000\u0000\ufffdaes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour\u0000\u0000\u0000nhmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000nhmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000)\ufffd\u0004\ufffd\u070bEZZ:\ufffd\ufffd\u0010\u0014\ufffd\u000e\ufffd\ufffd"} +{"timestamp": "2026-08-27T16:30:47", "event_id": "8884740f-ff7a-43b8-8b17-07987681daec", "source_ip": "45.61.182.81", "source_port": 47852, "source_domain": "81.182.61.45.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Dallas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 22, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "bf7dbf67fa9b26ee9f9deb99c49320ba", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 221000000, "source_bytes": 1388, "dest_bytes": 12, "network_bytes": 1400, "event_summary": "SSH-2.0-Go\r\n\u0000\u0000\u0005\\\u0012\u0014*N\ufffdw'\u0010\ufffd=k\ufffd\u0014\ufffd\ufffd8r\ufffd\u0000\u0000\u0001`mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com\u0000\u0000\u0001\ufffdrsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-256,rsa-sha2-512,ssh-rsa,ssh-dss,ssh-ed25519\u0000\u0000\u0000\ufffdaes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour\u0000\u0000\u0000\ufffdaes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour\u0000\u0000\u0000nhmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000nhmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000C\ufffd\ufffd\ufffd\ufffd\ufffd~(\ufffdI\bIrK\ufffd\ufffd\ufffd\ufffd"} +{"timestamp": "2026-08-27T13:48:28", "event_id": "e08397c6-4ae8-4c4c-b808-7ea985fdb1ed", "source_ip": "153.75.82.185", "source_port": 51978, "source_domain": "", "country_code": "US", "country_name": "United States", "city_name": "Ogden", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 22, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "bf7dbf67fa9b26ee9f9deb99c49320ba", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 133000000, "source_bytes": 1388, "dest_bytes": 13, "network_bytes": 1401, "event_summary": "SSH-2.0-Go\r\n\u0000\u0000\u0005\\\u0012\u0014\ufffd*\ufffdU5\ufffd\ufffd\u0011(V\u04bdP\ufffdz\ufffd\u0000\u0000\u0001`mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com\u0000\u0000\u0001\ufffdrsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-256,rsa-sha2-512,ssh-rsa,ssh-dss,ssh-ed25519\u0000\u0000\u0000\ufffdaes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour\u0000\u0000\u0000\ufffdaes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour\u0000\u0000\u0000nhmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000nhmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd*@\u0014qmO\u000e\ufffd\ufffd~ \r\ufffd\ufffd\ufffd\u001d\ufffd"} +{"timestamp": "2026-08-27T13:48:28", "event_id": "3e933299-7703-445d-922f-3f9faeb399d3", "source_ip": "153.75.82.185", "source_port": 51964, "source_domain": "", "country_code": "US", "country_name": "United States", "city_name": "Ogden", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 22, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "bf7dbf67fa9b26ee9f9deb99c49320ba", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 132000000, "source_bytes": 1388, "dest_bytes": 13, "network_bytes": 1401, "event_summary": "SSH-2.0-Go\r\n\u0000\u0000\u0005\\\u0012\u0014\ufffd\ufffd\u0003g\ufffd\ufffd\ufffdu\ufffd\u0007\ufffd.\u0005\ufffd\b:\u0000\u0000\u0001`mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com\u0000\u0000\u0001\ufffdrsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-256,rsa-sha2-512,ssh-rsa,ssh-dss,ssh-ed25519\u0000\u0000\u0000\ufffdaes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour\u0000\u0000\u0000\ufffdaes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour\u0000\u0000\u0000nhmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000nhmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u001d\u03b0Jw#L\ufffd\u0011Q\ufffd\ufffdk7\u00d4\ufffd\u0001"} +{"timestamp": "2026-08-27T12:46:18", "event_id": "44f04d10-b1ae-403d-8da1-ac22416ac39c", "source_ip": "45.61.177.179", "source_port": 40906, "source_domain": "179.177.61.45.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Ogden", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 22, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "bf7dbf67fa9b26ee9f9deb99c49320ba", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 191000000, "source_bytes": 1388, "dest_bytes": 13, "network_bytes": 1401, "event_summary": "SSH-2.0-Go\r\n\u0000\u0000\u0005\\\u0012\u00142\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd&q\ufffd\ufffd\ufffd\ufffd\fb\ufffd\u0000\u0000\u0001`mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com\u0000\u0000\u0001\ufffdrsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-256,rsa-sha2-512,ssh-rsa,ssh-dss,ssh-ed25519\u0000\u0000\u0000\ufffdaes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour\u0000\u0000\u0000\ufffdaes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour\u0000\u0000\u0000nhmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000nhmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000j\ufffd\ufffd\ufffd\ufffdK\ufffd\ufffd\u000eWuLD\ufffd5\ufffd.:"} +{"timestamp": "2026-08-27T12:46:17", "event_id": "35c8367a-9ec7-4de2-983f-dfa92904fbff", "source_ip": "45.61.177.179", "source_port": 40892, "source_domain": "179.177.61.45.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Ogden", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 22, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "bf7dbf67fa9b26ee9f9deb99c49320ba", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 426000000, "source_bytes": 1388, "dest_bytes": 13, "network_bytes": 1401, "event_summary": "SSH-2.0-Go\r\n\u0000\u0000\u0005\\\u0012\u0014\u6ff9\u001a\u04489\ufffdr=U\ufffd\ufffd\ufffd\ufffdI\u0000\u0000\u0001`mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com\u0000\u0000\u0001\ufffdrsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-256,rsa-sha2-512,ssh-rsa,ssh-dss,ssh-ed25519\u0000\u0000\u0000\ufffdaes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour\u0000\u0000\u0000\ufffdaes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour\u0000\u0000\u0000nhmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000nhmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00000z\u000b[\ufffd\u0019\"\ufffd\ufffd\u00fbR\ufffd\ufffd\ufffd\u0005\u0003\u0014"} +{"timestamp": "2026-08-27T11:42:29", "event_id": "18346f67-3fec-4682-a407-d0e00f5d6b72", "source_ip": "144.172.99.12", "source_port": 35054, "source_domain": "12.99.172.144.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Staten Island", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36", "url_path": "/.env", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i100900_61a7ad8aa9b6_88aa062a14c8", "tls_client_ja3": "92e3065cf9444ba90adc1bce4206011c", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0300_7fd797acd99d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 191, "dest_bytes": 78, "network_bytes": 269, "event_summary": ""} +{"timestamp": "2026-08-27T10:35:10", "event_id": "f9848029-509b-4477-bf14-19ef54c588be", "source_ip": "45.61.129.23", "source_port": 63690, "source_domain": "23.129.61.45.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Las Vegas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 445, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 51, "dest_bytes": 12, "network_bytes": 63, "event_summary": "\u0000\u0000\u0000/\ufffdSMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd \u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000"} +{"timestamp": "2026-08-27T10:35:10", "event_id": "734cc4ff-8014-4845-ac7c-378bc472453d", "source_ip": "45.61.129.23", "source_port": 63664, "source_domain": "23.129.61.45.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Las Vegas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 445, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 51, "dest_bytes": 12, "network_bytes": 63, "event_summary": "\u0000\u0000\u0000/\ufffdSMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd \u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000"} +{"timestamp": "2026-08-27T09:48:12", "event_id": "073137a7-f4bf-4f1b-863d-ef38dc7d33d3", "source_ip": "45.61.177.185", "source_port": 45368, "source_domain": "185.177.61.45.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Ogden", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 22, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "bf7dbf67fa9b26ee9f9deb99c49320ba", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 142000000, "source_bytes": 1388, "dest_bytes": 13, "network_bytes": 1401, "event_summary": "SSH-2.0-Go\r\n\u0000\u0000\u0005\\\u0012\u0014\b\ufffd\ufffd\ufffd\ufffd\ufffd\u0007\u03a0QO\ufffd\ufffd\ufffd\ufffd>\u0000\u0000\u0001`mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com\u0000\u0000\u0001\ufffdrsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-256,rsa-sha2-512,ssh-rsa,ssh-dss,ssh-ed25519\u0000\u0000\u0000\ufffdaes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour\u0000\u0000\u0000\ufffdaes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour\u0000\u0000\u0000nhmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000nhmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\\c\ufffd.e\ufffd\ufffd_\u0019@\ufffd\u0012\ufffd\ufffd\ufffd(''"} +{"timestamp": "2026-08-27T01:23:55", "event_id": "17aceb51-9c31-4de4-86ad-13b40d2b3b33", "source_ip": "45.61.177.185", "source_port": 58928, "source_domain": "185.177.61.45.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Ogden", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 22, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "bf7dbf67fa9b26ee9f9deb99c49320ba", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 132000000, "source_bytes": 1388, "dest_bytes": 13, "network_bytes": 1401, "event_summary": "SSH-2.0-Go\r\n\u0000\u0000\u0005\\\u0012\u0014\ufffd\ufffd\u0003\ufffds\ufffd\ufffd;\ufffdV=\ufffd\ufffdc\ufffd\u001f\u0000\u0000\u0001`mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com\u0000\u0000\u0001\ufffdrsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-256,rsa-sha2-512,ssh-rsa,ssh-dss,ssh-ed25519\u0000\u0000\u0000\ufffdaes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour\u0000\u0000\u0000\ufffdaes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour\u0000\u0000\u0000nhmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000nhmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0200\u001cqL\ufffd\u0007\tSp{ \u001e\ufffd\ufffd\u0005\u007f\ufffd"} +{"timestamp": "2026-08-27T00:57:33", "event_id": "80b4b385-ca8b-4315-8c83-168f3b29217f", "source_ip": "45.61.170.85", "source_port": 36984, "source_domain": "powered-by.atomicnetworks.co", "country_code": "US", "country_name": "United States", "city_name": "Las Vegas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 22, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "bf7dbf67fa9b26ee9f9deb99c49320ba", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 250000000, "source_bytes": 1388, "dest_bytes": 12, "network_bytes": 1400, "event_summary": "SSH-2.0-Go\r\n\u0000\u0000\u0005\\\u0012\u0014\ufffd\ufffdP>u\ufffd=\ufffdY\ufffd\ufffd,\u00039\ufffdu\u0000\u0000\u0001`mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com\u0000\u0000\u0001\ufffdrsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-256,rsa-sha2-512,ssh-rsa,ssh-dss,ssh-ed25519\u0000\u0000\u0000\ufffdaes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour\u0000\u0000\u0000\ufffdaes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour\u0000\u0000\u0000nhmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000nhmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\u02dc\ufffd\r\u0019\ufffd~\ufffd\ufffdY\u0007\ufffd/n\ufffdYg"} +{"timestamp": "2026-08-28T23:50:10", "event_id": "80199e47-111b-4806-8c8e-d55e08f30a57", "source_ip": "167.88.168.121", "source_port": 60540, "source_domain": "121.168.88.167.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Dallas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 80, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 164, "dest_bytes": 79, "network_bytes": 243, "event_summary": ""} +{"timestamp": "2026-08-28T23:08:44", "event_id": "7989b41a-30ef-4ae6-985a-96d2bebc5614", "source_ip": "167.88.168.121", "source_port": 32782, "source_domain": "121.168.88.167.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Dallas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 80, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 164, "dest_bytes": 79, "network_bytes": 243, "event_summary": ""} +{"timestamp": "2026-08-28T21:31:40", "event_id": "01995649-8cc2-4929-b829-ab3d1b4e8bb7", "source_ip": "172.86.114.254", "source_port": 61592, "source_domain": "254.114.86.172.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Dallas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 445, "network_protocol": "", "application_protocol": "smbv1", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 469000000, "source_bytes": 455, "dest_bytes": 56, "network_bytes": 511, "event_summary": "\u0000\u0000\u0000N\ufffdSMB2\u0000\u0000\u0000\u0000\u0018\u0007\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\u0000\u0000A\u0000\u000f\f\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00014\ufffd\u0000\u0000\u0000\f\u0000B\u0000\u0000\u0000N\u0000\u0001\u0000\u000e\u0000\r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T21:31:36", "event_id": "203d3d38-170b-443a-a261-006ccf36b8e1", "source_ip": "172.86.114.254", "source_port": 60820, "source_domain": "254.114.86.172.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Dallas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 445, "network_protocol": "", "application_protocol": "smbv1", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 470000000, "source_bytes": 364, "dest_bytes": 56, "network_bytes": 420, "event_summary": "\u0000\u0000\u0000J\ufffdSMB%\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000J\u0000\u0000\u0000J\u0000\u0002\u0000#\u0000\u0000\u0000\u0007\u0000\\PIPE\\\u0000"} +{"timestamp": "2026-08-30T07:11:38", "event_id": "be5e969e-3b83-4571-84f3-08a56e79d504", "source_ip": "144.172.111.21", "source_port": 33266, "source_domain": "21.111.172.144.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Las Vegas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-30T06:28:55", "event_id": "28a77f01-7c47-4fb8-82d6-1aaddda981b5", "source_ip": "172.86.91.225", "source_port": 60129, "source_domain": "225.91.86.172.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Dallas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 445, "network_protocol": "", "application_protocol": "smbv1", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 469000000, "source_bytes": 455, "dest_bytes": 52, "network_bytes": 507, "event_summary": "\u0000\u0000\u0000N\ufffdSMB2\u0000\u0000\u0000\u0000\u0018\u0007\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\u0000\u0000A\u0000\u000f\f\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00014\ufffd\u0000\u0000\u0000\f\u0000B\u0000\u0000\u0000N\u0000\u0001\u0000\u000e\u0000\r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-30T06:28:52", "event_id": "568c6672-5c26-48bd-9cd0-11b5ecc6bd8f", "source_ip": "172.86.91.225", "source_port": 59369, "source_domain": "225.91.86.172.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Dallas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 445, "network_protocol": "", "application_protocol": "smbv1", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 471000000, "source_bytes": 364, "dest_bytes": 52, "network_bytes": 416, "event_summary": "\u0000\u0000\u0000J\ufffdSMB%\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000J\u0000\u0000\u0000J\u0000\u0002\u0000#\u0000\u0000\u0000\u0007\u0000\\PIPE\\\u0000"} +{"timestamp": "2026-08-30T05:46:57", "event_id": "209f2087-a447-475c-adf5-9af8921767da", "source_ip": "144.172.115.222", "source_port": 45912, "source_domain": "222.115.172.144.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Ogden", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 5061, "network_protocol": "tls", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "t13i311000_e8f1e7e78f70_d41ae481755e", "tls_client_ja3": "004556e859f3c26c5d19746b3a957c74", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 465000000, "source_bytes": 691, "dest_bytes": 15, "network_bytes": 706, "event_summary": "INVITE sip:001011972567158234@<HONEYPOT>:5061 SIP/2.0\r\nVia: SIP/2.0/TLS 144.172.115.222:45912;branch=z9hG4bK86f2e261d5;rport\r\nFrom: <sip:scanner@144.172.115.222>;tag=41bf8220\r\nTo: <sip:001011972567158234@<HONEYPOT>:5061>\r\nCall-ID: b15233ac-2733-4105-81a4-a481cce74742@144.172.115.222\r\nCSeq: 1 INVITE\r\nContact: <sip:scanner@144.172.115.222:45912>\r\nMax-Forwards: 70\r\nUser-Agent: 1001/GOLIATH\r\nAccept: application/sdp\r\nContent-Type: application/sdp\r\nContent-Length: 217\r\n\r\nv=0\r\no=- 1787742823 1787742823 IN IP4 144.172.115.222\r\ns=Call\r\nc=IN IP4 144.172.115.222\r\nt=0 0\r\nm=audio 7078 RTP/AVP 0 8 101\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:101 telephone-event/8000\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T05:46:50", "event_id": "0262682e-0ab6-4b85-823b-e8af651fab99", "source_ip": "144.172.115.222", "source_port": 38624, "source_domain": "222.115.172.144.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Ogden", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 5061, "network_protocol": "tls", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "t13i311000_e8f1e7e78f70_d41ae481755e", "tls_client_ja3": "004556e859f3c26c5d19746b3a957c74", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 474000000, "source_bytes": 424, "dest_bytes": 80, "network_bytes": 504, "event_summary": "OPTIONS sip:<HONEYPOT>:5061 SIP/2.0\r\nVia: SIP/2.0/TLS 144.172.115.222:38624;branch=z9hG4bK929f7920c7;rport\r\nFrom: <sip:scanner@144.172.115.222>;tag=afdcb41c\r\nTo: <sip:001011972567158234@<HONEYPOT>:5061>\r\nCall-ID: c304a861-41e9-4047-9568-490a46629140@144.172.115.222\r\nCSeq: 1 OPTIONS\r\nContact: <sip:scanner@144.172.115.222:38624>\r\nMax-Forwards: 70\r\nUser-Agent: 1001/GOLIATH\r\nAccept: application/sdp\r\nContent-Length: 0\r\n\r\n"} +{"timestamp": "2026-08-30T05:07:17", "event_id": "fc7ee807-c618-4aeb-8c9b-544c624f3bea", "source_ip": "172.86.91.225", "source_port": 52492, "source_domain": "225.91.86.172.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Dallas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 445, "network_protocol": "", "application_protocol": "smbv1", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 469000000, "source_bytes": 455, "dest_bytes": 52, "network_bytes": 507, "event_summary": "\u0000\u0000\u0000N\ufffdSMB2\u0000\u0000\u0000\u0000\u0018\u0007\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\u0000\u0000A\u0000\u000f\f\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00014\ufffd\u0000\u0000\u0000\f\u0000B\u0000\u0000\u0000N\u0000\u0001\u0000\u000e\u0000\r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-30T05:07:14", "event_id": "f1c34577-bffc-4658-97df-5020d5e96308", "source_ip": "172.86.91.225", "source_port": 51736, "source_domain": "225.91.86.172.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Dallas", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 445, "network_protocol": "", "application_protocol": "smbv1", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 469000000, "source_bytes": 364, "dest_bytes": 52, "network_bytes": 416, "event_summary": "\u0000\u0000\u0000J\ufffdSMB%\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000J\u0000\u0000\u0000J\u0000\u0002\u0000#\u0000\u0000\u0000\u0007\u0000\\PIPE\\\u0000"} +{"timestamp": "2026-08-30T00:48:19", "event_id": "51d0bf9d-938d-4f8c-8b51-c8a331f2b7cb", "source_ip": "144.172.99.12", "source_port": 43924, "source_domain": "12.99.172.144.static.cloudzy.com", "country_code": "US", "country_name": "United States", "city_name": "Staten Island", "asn_number": 14956, "asn_org": "RouterHosting LLC", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36", "url_path": "/.env", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i100900_61a7ad8aa9b6_88aa062a14c8", "tls_client_ja3": "92e3065cf9444ba90adc1bce4206011c", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0300_7fd797acd99d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 191, "dest_bytes": 78, "network_bytes": 269, "event_summary": ""} diff --git a/kevlar/2026-08-31/honeylabs/events-AS198953.ndjson b/kevlar/2026-08-31/honeylabs/events-AS198953.ndjson new file mode 100644 index 0000000..0baf647 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS198953.ndjson @@ -0,0 +1,134 @@ +{"timestamp": "2026-08-24T23:24:43", "event_id": "7b065982-1f58-4363-acc5-08e773e9e3d2", "source_ip": "176.120.22.240", "source_port": 63464, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3389, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 34, "dest_bytes": 14, "network_bytes": 48, "event_summary": "\u0003\u0000\u0000\"\u001d\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=test\r\n"} +{"timestamp": "2026-08-24T23:24:43", "event_id": "64fae195-6e4a-4e1d-a740-f4eba9b30502", "source_ip": "176.120.22.240", "source_port": 63527, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 6379, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 34, "dest_bytes": 5, "network_bytes": 39, "event_summary": "\u0003\u0000\u0000\"\u001d\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=test\r\n"} +{"timestamp": "2026-08-25T17:44:29", "event_id": "aeb4d906-8c02-446e-980f-b69f95d28fcd", "source_ip": "176.120.22.61", "source_port": 43023, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 7788, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 102000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:28", "event_id": "ab880744-2e86-4e22-bc41-dcf517e7f700", "source_ip": "176.120.22.61", "source_port": 33440, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1434, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:28", "event_id": "9ad6a857-0c62-4535-8ffe-23a4657f92c3", "source_ip": "176.120.22.61", "source_port": 27756, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 10443, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:27", "event_id": "71985b33-7b8c-4095-bca6-4a109d31eb58", "source_ip": "176.120.22.61", "source_port": 18067, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3005, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:27", "event_id": "a6c54efc-8670-4e23-aabb-6fc12681e0b1", "source_ip": "176.120.22.61", "source_port": 14644, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 28433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 104000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:27", "event_id": "68d7462f-241a-49b1-9423-3d2a48146606", "source_ip": "176.120.22.61", "source_port": 12782, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1501, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:27", "event_id": "dcf074b8-20cf-4e33-b065-c5ca4d08fe12", "source_ip": "176.120.22.61", "source_port": 10515, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5367, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:26", "event_id": "8bee6654-134c-42f2-a95f-aa3e0a2ecfd1", "source_ip": "176.120.22.61", "source_port": 6933, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 13433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 102000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:26", "event_id": "cc3f6a2c-20c6-4895-bcea-692ba7846e22", "source_ip": "176.120.22.61", "source_port": 1246, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1444, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:26", "event_id": "5452c6f7-3a70-4bff-8cf5-88154418d82e", "source_ip": "176.120.22.61", "source_port": 58596, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 11433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:25", "event_id": "61880cd2-865d-4760-94ff-2824abd6618f", "source_ip": "176.120.22.61", "source_port": 51637, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 2999, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:25", "event_id": "6fa93b8f-729d-4343-85b4-b31629322757", "source_ip": "176.120.22.61", "source_port": 48600, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:25", "event_id": "e1f51111-eaa0-4f18-9202-642a0ae02652", "source_ip": "176.120.22.61", "source_port": 48578, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 12433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:25", "event_id": "284ca315-7a69-4e4a-8a5b-77856806e611", "source_ip": "176.120.22.61", "source_port": 47643, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 7366, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:25", "event_id": "1affc509-74a8-44db-ba32-f5f2b0dae89c", "source_ip": "176.120.22.61", "source_port": 45262, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 9999, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:24", "event_id": "9a2fcf2d-7a4d-47e7-9531-155661e4e42f", "source_ip": "176.120.22.61", "source_port": 36443, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1002, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:24", "event_id": "dc9a781d-5ea9-45d2-b29f-aa5294945b06", "source_ip": "176.120.22.61", "source_port": 36302, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 6602, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:24", "event_id": "251766e7-fa96-4619-a0a4-ee192da4194a", "source_ip": "176.120.22.61", "source_port": 36251, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 7433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:24", "event_id": "a7542363-1811-4a6d-a71a-96dca3ccafd9", "source_ip": "176.120.22.61", "source_port": 33560, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5369, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-25T17:44:24", "event_id": "0119ac2a-aa55-424d-a6eb-01dfbb37b85a", "source_ip": "176.120.22.61", "source_port": 32928, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5368, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-26T23:34:16", "event_id": "8e60c757-742e-430a-bc7a-b9ce2f52f96e", "source_ip": "176.120.22.43", "source_port": 52130, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/global-protect/login.esp", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"max-age=0\",\"content-length\":\"117\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"<HONEYPOT>\",\"priority\":\"u=0, i\",\"referrer-policy\":\"strict-origin-when-cross-origin\",\"sec-ch-ua\":\"\\\"Chromium\\\";v=\\\"121\\\", \\\"Not A(Brand\\\";v=\\\"99\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"Windows\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"same-origin\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_792d2c6655cb", "tls_client_ja3": "03420579546b5bb7995da3f28c5d0a4d", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn18en_9a6afedbb443", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 926, "dest_bytes": 78, "network_bytes": 1004, "event_summary": ""} +{"timestamp": "2026-08-26T23:34:16", "event_id": "256b4e43-6fe7-4398-b40d-51455c79d279", "source_ip": "176.120.22.43", "source_port": 51748, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/global-protect/login.esp", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "872f0de3821c50e5dbbcb216fe2f9348", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0400_8b1ed2202073", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 242, "dest_bytes": 78, "network_bytes": 320, "event_summary": ""} +{"timestamp": "2026-08-26T23:03:42", "event_id": "dddacf65-63f5-4d2b-bd40-1d5413196186", "source_ip": "176.120.22.43", "source_port": 65365, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/global-protect/login.esp", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"max-age=0\",\"content-length\":\"117\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"<HONEYPOT>\",\"priority\":\"u=0, i\",\"referrer-policy\":\"strict-origin-when-cross-origin\",\"sec-ch-ua\":\"\\\"Chromium\\\";v=\\\"121\\\", \\\"Not A(Brand\\\";v=\\\"99\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"Windows\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"same-origin\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_792d2c6655cb", "tls_client_ja3": "3c2bebcbcdf3878f1d867d465b49fc7b", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn18en_9a6afedbb443", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 926, "dest_bytes": 78, "network_bytes": 1004, "event_summary": ""} +{"timestamp": "2026-08-26T23:03:41", "event_id": "12a192ae-4a96-494c-b4ca-551b5c46fff1", "source_ip": "176.120.22.43", "source_port": 58112, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/global-protect/login.esp", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "8efc7ad36009d21e478a281093a5c37f", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0400_8b1ed2202073", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 242, "dest_bytes": 78, "network_bytes": 320, "event_summary": ""} +{"timestamp": "2026-08-26T18:55:48", "event_id": "ff5a8bb3-a482-492e-9f26-18cf9ed8747a", "source_ip": "176.120.22.43", "source_port": 63429, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/+CSCOE+/logon.html", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"ru,en;q=0.9,en-GB;q=0.8,en-US;q=0.7\",\"cache-control\":\"max-age=0\",\"cookie\":\"sdesktop=\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "70d138c17f4966d5da81466da15bedaa", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11cn06ru_b2fb244bb31f", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 335, "dest_bytes": 78, "network_bytes": 413, "event_summary": ""} +{"timestamp": "2026-08-26T17:09:58", "event_id": "892ebefb-f315-4f2c-bd5b-40a7c0a6c4aa", "source_ip": "176.120.22.43", "source_port": 53088, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/+CSCOE+/logon.html", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"ru,en;q=0.9,en-GB;q=0.8,en-US;q=0.7\",\"cache-control\":\"max-age=0\",\"cookie\":\"sdesktop=\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "117c9f03c81fe6372a3a63a910bcc349", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11cn06ru_b2fb244bb31f", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 335, "dest_bytes": 78, "network_bytes": 413, "event_summary": ""} +{"timestamp": "2026-08-26T13:12:31", "event_id": "a2f1db2c-9995-4c48-b32c-962cec95fa83", "source_ip": "193.143.1.66", "source_port": 21657, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3396, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T13:12:31", "event_id": "4b07c5d2-9ab2-4e71-8ac8-0f5cdd9bc7cf", "source_ip": "193.143.1.66", "source_port": 21564, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3396, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T13:12:31", "event_id": "53474ad4-536d-47bc-92b5-4062981d14e6", "source_ip": "193.143.1.66", "source_port": 21422, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3396, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T11:10:35", "event_id": "dc480b5b-9a53-4c42-a355-a2bf8c4c24a8", "source_ip": "193.143.1.66", "source_port": 28171, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3389, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T11:10:34", "event_id": "80761f83-e94c-4ffe-9f57-bbae14bdee4f", "source_ip": "193.143.1.66", "source_port": 25707, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3389, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T11:10:34", "event_id": "33f7b2a3-02f8-44ba-8a35-95641506e7b1", "source_ip": "193.143.1.66", "source_port": 23191, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3389, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-27T21:25:45", "event_id": "4c7e4f4a-b329-4843-8571-0128174f6145", "source_ip": "176.120.22.43", "source_port": 63611, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "aed793e929470b8ee9f387ec4a564630", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 259, "dest_bytes": 78, "network_bytes": 337, "event_summary": ""} +{"timestamp": "2026-08-27T16:54:08", "event_id": "018d7b34-6c78-4cdc-980f-4b12def6f38c", "source_ip": "176.120.22.61", "source_port": 62386, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1435, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-27T16:54:07", "event_id": "e736f13a-abde-45f8-af4e-8b79c9a9da62", "source_ip": "176.120.22.61", "source_port": 64448, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5367, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-27T16:54:07", "event_id": "8cf7e5a5-5e86-497d-9258-c15cb76ead26", "source_ip": "176.120.22.61", "source_port": 62480, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 23341, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-27T16:54:07", "event_id": "81050aa5-d0f5-4c06-a1fc-c979b7583a16", "source_ip": "176.120.22.61", "source_port": 62548, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 41433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-27T16:54:07", "event_id": "2dda33df-f9f1-44ac-bc3a-fab988fc6380", "source_ip": "176.120.22.61", "source_port": 63382, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 22433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-27T16:54:06", "event_id": "52b19e7e-1f86-4041-9350-a37a0ae11c28", "source_ip": "176.120.22.61", "source_port": 64142, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 14333, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-27T16:54:06", "event_id": "213cfbea-7316-4aa4-aeef-5f0378c2956c", "source_ip": "176.120.22.61", "source_port": 62716, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5000, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-27T16:54:06", "event_id": "fe883683-346a-48c6-a935-665ffcd67eb8", "source_ip": "176.120.22.61", "source_port": 62925, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 8001, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-27T16:54:06", "event_id": "07614720-d010-4e35-9736-5e346e877e15", "source_ip": "176.120.22.61", "source_port": 63794, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-27T16:54:06", "event_id": "18b07496-00dc-4747-9963-dffb88040f50", "source_ip": "176.120.22.61", "source_port": 62137, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 21433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-27T16:54:06", "event_id": "3b4145f3-1713-452a-93ea-35c0d7f58e6c", "source_ip": "176.120.22.61", "source_port": 62667, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-27T16:54:06", "event_id": "7dd1db5b-5e31-46c9-8080-6c938edf2650", "source_ip": "176.120.22.61", "source_port": 65150, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1434, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-27T16:54:06", "event_id": "e312dfeb-2833-4aff-8de4-b0ab327246fb", "source_ip": "176.120.22.61", "source_port": 62551, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1444, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-27T16:54:06", "event_id": "053b180d-fa3d-49d7-9e84-1f205478b320", "source_ip": "176.120.22.61", "source_port": 62911, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1455, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-27T16:54:06", "event_id": "95f40063-9ffd-4b43-b6ff-f6dc124e3c28", "source_ip": "176.120.22.61", "source_port": 63719, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 6366, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-27T16:54:06", "event_id": "3cee93b9-5fcc-4491-8078-d3988e2af46e", "source_ip": "176.120.22.61", "source_port": 62423, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 9001, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-27T16:54:06", "event_id": "240e84a0-7178-4dba-9926-3fc30052e364", "source_ip": "176.120.22.61", "source_port": 64960, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1488, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-27T16:54:06", "event_id": "42f5be74-b078-43c7-8bd4-b8302f22ea89", "source_ip": "176.120.22.61", "source_port": 64750, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4171, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-27T16:54:06", "event_id": "315285bd-0540-4403-a526-006fc1d1be5e", "source_ip": "176.120.22.61", "source_port": 62870, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 14433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-28T22:31:54", "event_id": "539b50fc-7c89-4625-99c9-35096fd01df4", "source_ip": "176.120.22.43", "source_port": 59620, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "3a89a0cfb584ed7681562dc7c9fec664", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 259, "dest_bytes": 78, "network_bytes": 337, "event_summary": ""} +{"timestamp": "2026-08-28T19:10:21", "event_id": "0239d33d-1344-45e8-9c60-ffda3b6f8484", "source_ip": "193.143.1.66", "source_port": 31464, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3397, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T19:10:21", "event_id": "517a4300-7b76-4581-908e-da755838f81a", "source_ip": "193.143.1.66", "source_port": 30528, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3397, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T19:10:21", "event_id": "d5159e18-5898-4529-b6d5-99715838688f", "source_ip": "193.143.1.66", "source_port": 29226, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3397, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T19:10:21", "event_id": "aa1d2902-0fbf-4cb5-b715-a1f531982061", "source_ip": "193.143.1.66", "source_port": 31414, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3394, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T19:10:21", "event_id": "1574c814-c7f9-4e8d-8062-04578aed52f7", "source_ip": "193.143.1.66", "source_port": 30337, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3394, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T19:10:20", "event_id": "a8b066ec-b471-4012-b41a-c4c9b26984e0", "source_ip": "193.143.1.66", "source_port": 29224, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3394, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T19:09:31", "event_id": "ba3c7b04-728d-424d-8bf3-e95b728a7b9a", "source_ip": "193.143.1.66", "source_port": 18675, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3390, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T19:09:31", "event_id": "a992aadb-4528-4896-9823-6044761d546a", "source_ip": "193.143.1.66", "source_port": 18106, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3390, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T19:09:31", "event_id": "2ed6d639-0c95-423d-a236-f0784392d4c1", "source_ip": "193.143.1.66", "source_port": 15385, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3390, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T09:47:34", "event_id": "1f44a320-30bb-4155-bb3b-529ee88aabf8", "source_ip": "193.143.1.66", "source_port": 43008, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3397, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T09:47:34", "event_id": "1a12cb7a-7eac-4124-817b-ff3b3f029b25", "source_ip": "193.143.1.66", "source_port": 42863, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3394, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T09:47:33", "event_id": "f46ec8a2-f6d1-4273-978d-699709b220f9", "source_ip": "193.143.1.66", "source_port": 41630, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3397, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T09:47:33", "event_id": "2dbd567e-2a52-4de2-ac52-0f21b10866c4", "source_ip": "193.143.1.66", "source_port": 40655, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3397, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T09:47:33", "event_id": "7d92b520-9d52-40b4-a61c-c746b640a35e", "source_ip": "193.143.1.66", "source_port": 41617, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3394, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T09:47:33", "event_id": "8b9d50de-43ed-4532-ba96-0ff77d9abc82", "source_ip": "193.143.1.66", "source_port": 40650, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3394, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T09:46:51", "event_id": "34d71652-b3eb-4ba6-9b57-824c5a44386f", "source_ip": "193.143.1.66", "source_port": 39282, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3390, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T09:46:51", "event_id": "c7731289-e171-452a-8521-4a2685afd9fd", "source_ip": "193.143.1.66", "source_port": 38835, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3390, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T09:46:51", "event_id": "f3acb1a4-5a4d-449e-a29b-658d099d1a69", "source_ip": "193.143.1.66", "source_port": 34679, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3390, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T07:59:56", "event_id": "0597b410-526c-4c7d-af47-e773ff275c54", "source_ip": "176.120.22.61", "source_port": 41428, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 23341, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"} +{"timestamp": "2026-08-29T19:33:51", "event_id": "89946316-cb27-416c-b8af-876f4671988c", "source_ip": "176.120.22.43", "source_port": 64537, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "5a6ae6288fbcfde4161d1687a4fc3513", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 263, "dest_bytes": 78, "network_bytes": 341, "event_summary": ""} +{"timestamp": "2026-08-29T16:47:48", "event_id": "af9237dd-1a57-4088-9bf4-7cca3010aece", "source_ip": "176.120.22.43", "source_port": 50504, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 10443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "b46e867d24b4e8f6cba4c62bca323c64", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 265, "dest_bytes": 78, "network_bytes": 343, "event_summary": ""} +{"timestamp": "2026-08-29T16:44:51", "event_id": "4de75088-2a22-4a74-8736-2c40edd3a5db", "source_ip": "176.120.22.43", "source_port": 60143, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "10059e06caa2f42edba8a70ddaa0349c", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 259, "dest_bytes": 78, "network_bytes": 337, "event_summary": ""} +{"timestamp": "2026-08-29T16:25:54", "event_id": "d746b530-9b31-4df4-93e6-041bfbbd1bff", "source_ip": "176.120.22.43", "source_port": 63357, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4433, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:4433\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "6683e5cb0948aae53914e2ea9d0af75e", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""} +{"timestamp": "2026-08-29T15:40:52", "event_id": "4ee697fe-ec5d-455a-b253-3d2eb8cac2d8", "source_ip": "176.120.22.43", "source_port": 61115, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4439, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:4439\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "d0129b32c9047e7ad3246f7920eb5971", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""} +{"timestamp": "2026-08-29T15:37:05", "event_id": "c2801ce9-6605-4a8a-80b6-037c56999047", "source_ip": "176.120.22.43", "source_port": 51422, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "3044f8c83ee39bd394e020b929730509", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 259, "dest_bytes": 78, "network_bytes": 337, "event_summary": ""} +{"timestamp": "2026-08-29T15:27:31", "event_id": "23cfec6a-d08b-4539-b9d6-4678b6911814", "source_ip": "176.120.22.43", "source_port": 57321, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 2443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:2443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "7b0a3955854b645bd5b8b30eff9d3762", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""} +{"timestamp": "2026-08-29T15:24:36", "event_id": "f9c68396-2473-4312-929d-9f0683643ee3", "source_ip": "176.120.22.43", "source_port": 54280, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:5443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "a393c3afe0dbf89c403ea58f815aee7a", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""} +{"timestamp": "2026-08-29T15:21:23", "event_id": "435976fd-d30f-4e1c-85d9-32974a14e1fd", "source_ip": "176.120.22.43", "source_port": 51118, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4432, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:4432\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "dbb41f7d149a32718210a3b6122b79bf", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""} +{"timestamp": "2026-08-29T15:21:11", "event_id": "fb71a9c0-7a5d-4d84-91a3-daf3bf5d75cf", "source_ip": "176.120.22.43", "source_port": 58255, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4435, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:4435\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "0a0909629ab2b016a0daa8e75cdc86fa", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""} +{"timestamp": "2026-08-29T14:43:13", "event_id": "c421365e-4ea0-4c81-b5ac-dbeb2e156fc5", "source_ip": "176.120.22.43", "source_port": 54459, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4435, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:4435\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "2f7bb26f5917a619b12f4f54312d9cf3", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""} +{"timestamp": "2026-08-29T13:41:39", "event_id": "576e7408-4b1d-48de-af91-7bb01c6965ad", "source_ip": "176.120.22.43", "source_port": 60218, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:3443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "f633450e45aa2b2017bc60428e9686f8", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""} +{"timestamp": "2026-08-29T13:39:50", "event_id": "fb7c534f-dea9-4994-9260-a7324853e537", "source_ip": "176.120.22.43", "source_port": 60919, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 9443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:9443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "b6072ffb73369edecc41fd2ca920adcb", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""} +{"timestamp": "2026-08-29T13:26:00", "event_id": "43c89ca9-3d6c-49c7-b7a9-6e7d8999481b", "source_ip": "176.120.22.43", "source_port": 62803, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:4443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "660176adc5f2a0d6cbcf794a2989076b", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""} +{"timestamp": "2026-08-29T12:50:17", "event_id": "c8468f91-bef5-4ee4-8e78-3effba01b0cd", "source_ip": "176.120.22.43", "source_port": 50152, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4434, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:4434\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "c4a2ef792fca6616eceb254f4143570f", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""} +{"timestamp": "2026-08-29T12:15:39", "event_id": "c0ea2ad4-feec-45e2-8ef6-ba84f9a48da1", "source_ip": "176.120.22.43", "source_port": 62142, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4436, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:4436\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "3f8ae5c25f23e67cb36ab5c6157ea5b5", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""} +{"timestamp": "2026-08-29T12:07:32", "event_id": "4115346b-687e-4aae-b6a1-4831aae26a71", "source_ip": "176.120.22.43", "source_port": 59175, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 10443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "47456f8a08540c328fc4a903c6faa47d", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 265, "dest_bytes": 78, "network_bytes": 343, "event_summary": ""} +{"timestamp": "2026-08-29T12:03:27", "event_id": "fc112721-7cc5-48a1-aac8-3ded9d745729", "source_ip": "176.120.22.43", "source_port": 49328, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4433, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:4433\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "bbf846d7f7301f733c16d281b2a197b8", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""} +{"timestamp": "2026-08-29T11:34:54", "event_id": "da41e17c-0dcd-49e3-a057-9e53cdeba2d2", "source_ip": "176.120.22.43", "source_port": 60427, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 2443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:2443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "3f0db94e0d38e24d532ea0b9b983b088", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""} +{"timestamp": "2026-08-29T11:14:43", "event_id": "704eb47a-6377-4ded-a7d5-17a95063281a", "source_ip": "176.120.22.43", "source_port": 52876, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:5443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "0ab9169a5aae946a2b9a23a0119c4b48", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""} +{"timestamp": "2026-08-30T14:00:29", "event_id": "f7c53913-ea89-45be-b603-feb65fdc3d95", "source_ip": "176.120.22.43", "source_port": 54293, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 10443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "7b431b0653be3522b70b57c06ccaf70d", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 269, "dest_bytes": 78, "network_bytes": 347, "event_summary": ""} +{"timestamp": "2026-08-30T13:57:28", "event_id": "f09a2a47-1f61-44b2-91c2-c7aea8a84a58", "source_ip": "176.120.22.43", "source_port": 62390, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "31b02e25c5273efb339e7bba65a69f9d", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 263, "dest_bytes": 78, "network_bytes": 341, "event_summary": ""} +{"timestamp": "2026-08-30T13:38:18", "event_id": "87beb273-335e-4886-af60-0f9a22593bed", "source_ip": "176.120.22.43", "source_port": 56251, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4433, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:4433\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "1d70b097372d37b920ba597018b06f4c", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""} +{"timestamp": "2026-08-30T12:52:56", "event_id": "caebb65e-9d19-41f4-84b0-684b54be187a", "source_ip": "176.120.22.43", "source_port": 64571, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4439, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:4439\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "4282b62271907c1a2d23bd1c4db40920", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""} +{"timestamp": "2026-08-30T12:49:07", "event_id": "eaa1de84-b4a3-448c-9af9-9b4132693d2f", "source_ip": "176.120.22.43", "source_port": 52938, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "e445ba4c8424263d85c394c77cae613c", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 263, "dest_bytes": 78, "network_bytes": 341, "event_summary": ""} +{"timestamp": "2026-08-30T12:39:21", "event_id": "5514a617-9ca7-41ed-ba92-036178abefe1", "source_ip": "176.120.22.43", "source_port": 53898, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 2443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:2443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "49db6577b76dbcc13126269051d44469", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""} +{"timestamp": "2026-08-30T12:36:26", "event_id": "0ba5fffc-a290-4a3b-8900-11a38553aaa0", "source_ip": "176.120.22.43", "source_port": 65131, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:5443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "47e700b062aeb7ebd36f42e8ed020fec", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""} +{"timestamp": "2026-08-30T12:33:09", "event_id": "8deb9aa9-f8d9-445a-90cc-54abbc37dca6", "source_ip": "176.120.22.43", "source_port": 59695, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4432, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:4432\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "1d38eae37e77650d3c32f219f212b61d", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""} +{"timestamp": "2026-08-30T12:33:01", "event_id": "46685f5e-560a-48af-b978-608ad97c1d80", "source_ip": "176.120.22.43", "source_port": 50736, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4435, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:4435\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "38a95ee00d2b9695cdb13f233d975c33", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""} +{"timestamp": "2026-08-30T11:54:55", "event_id": "2b9273cc-39d3-488f-9e41-7469116bc06c", "source_ip": "176.120.22.43", "source_port": 59785, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4435, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:4435\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "b1afa34213cb9129efab621e53280356", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""} +{"timestamp": "2026-08-30T10:53:13", "event_id": "38e74a50-d7bc-47b5-abf1-f892fb55ae4e", "source_ip": "176.120.22.43", "source_port": 52069, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:3443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "312a74dbd08a7366e69a0ca374423af9", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""} +{"timestamp": "2026-08-30T10:51:22", "event_id": "67ed105e-15a2-4454-b5a1-ca7f9241b961", "source_ip": "176.120.22.43", "source_port": 52309, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 9443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:9443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "2ef83d2c668e22507a03840c431b0b64", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""} +{"timestamp": "2026-08-30T10:37:28", "event_id": "69050b60-9f73-46f7-b6f4-0ad034aa425a", "source_ip": "176.120.22.43", "source_port": 63099, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:4443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "7bf4d7c6246e624b57d2dcc649188cd3", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""} +{"timestamp": "2026-08-30T10:01:25", "event_id": "983197af-d073-412b-a585-c111bf1047c7", "source_ip": "176.120.22.43", "source_port": 58545, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4434, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:4434\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "1a4a9c829647c94dfa19e8c87694b341", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""} +{"timestamp": "2026-08-30T09:31:13", "event_id": "f6d8d5b8-2bba-40f0-b6f6-ec2dacb486ae", "source_ip": "176.120.22.61", "source_port": 2104, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 9999, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 13, "network_bytes": 169, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0001detector\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000pptp-check\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-30T09:31:13", "event_id": "1d6be3bf-e484-4d11-b184-5ace56aabc1e", "source_ip": "176.120.22.61", "source_port": 2085, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 9433, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 13, "network_bytes": 169, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0001detector\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000pptp-check\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-30T09:31:13", "event_id": "6b9da5aa-85e9-467d-bb29-6d8109146813", "source_ip": "176.120.22.61", "source_port": 2072, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 9001, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 13, "network_bytes": 169, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0001detector\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000pptp-check\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-30T09:31:13", "event_id": "85c9cf05-c890-476f-8cad-d29d983e118f", "source_ip": "176.120.22.61", "source_port": 2069, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 8989, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 13, "network_bytes": 169, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0001detector\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000pptp-check\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-30T09:31:13", "event_id": "d6fe786d-a8c1-4d07-b0f6-8c2b128585a4", "source_ip": "176.120.22.61", "source_port": 2047, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 8899, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 13, "network_bytes": 169, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0001detector\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000pptp-check\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-30T09:31:13", "event_id": "54246c34-207a-42d0-9432-bd4db6e8fe07", "source_ip": "176.120.22.61", "source_port": 2036, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 8433, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 13, "network_bytes": 169, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0001detector\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000pptp-check\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-31T09:44:38", "event_id": "86994bef-e65b-4c9d-8337-aa2cfc41351d", "source_ip": "176.120.22.61", "source_port": 63649, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 2433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:38", "event_id": "fdfd7923-2ad3-4d6a-8efe-e7b4f14a4bde", "source_ip": "176.120.22.61", "source_port": 62335, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 14433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:38", "event_id": "4260594a-7612-45c4-9568-46f76500ebda", "source_ip": "176.120.22.61", "source_port": 63185, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 37628, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:37", "event_id": "d9cf3028-c927-4ba9-a088-9b39ad9bd0e6", "source_ip": "176.120.22.61", "source_port": 63441, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:37", "event_id": "4208a628-3d25-4a82-964b-2a543b4f15b0", "source_ip": "176.120.22.61", "source_port": 63224, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 10443, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:37", "event_id": "6e73573f-a846-4d3e-b9a1-1d0fdecb68c6", "source_ip": "176.120.22.61", "source_port": 62307, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 8899, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:37", "event_id": "ba5c1731-b5f0-4f9c-b8b0-9984c0074791", "source_ip": "176.120.22.61", "source_port": 63745, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 55366, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:37", "event_id": "45efda38-0458-4145-9023-ffdef8884fed", "source_ip": "176.120.22.61", "source_port": 62489, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 16433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:37", "event_id": "8662493f-0a6c-40f4-b7c0-a799880eeddb", "source_ip": "176.120.22.61", "source_port": 65473, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 51234, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:37", "event_id": "04824e9f-2d7a-430e-9d6b-d3e56f8ffd94", "source_ip": "176.120.22.61", "source_port": 63895, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1501, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:36", "event_id": "8a67ad3d-e25c-43fc-b0cc-f16f2e6c5a01", "source_ip": "176.120.22.61", "source_port": 63642, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 7366, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:36", "event_id": "f8cbc6e5-bfce-49f0-802c-73c03bf7fa2f", "source_ip": "176.120.22.61", "source_port": 63777, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 8001, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:36", "event_id": "fe5f4b04-8886-4d4e-b78f-fb1e46c6bc9e", "source_ip": "176.120.22.61", "source_port": 63833, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 61433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:36", "event_id": "a90d5ebb-a492-450b-b8dd-a51ff9d1b1bb", "source_ip": "176.120.22.61", "source_port": 62312, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 11443, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:36", "event_id": "2b90cb66-b34f-4439-90c1-8122216b3a2e", "source_ip": "176.120.22.61", "source_port": 64064, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 6433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:36", "event_id": "986c34e2-fc73-479d-ab26-ed39f3b93a9d", "source_ip": "176.120.22.61", "source_port": 64590, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 6802, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:36", "event_id": "bb880e9d-01c4-48a3-b7c5-c54690fd6b84", "source_ip": "176.120.22.61", "source_port": 64290, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 25366, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:36", "event_id": "df97152d-6f04-4d9c-85ca-cb852feaca40", "source_ip": "176.120.22.61", "source_port": 62479, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 6602, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:36", "event_id": "2af57e95-bb61-4f55-a7f2-24a2d7f7a08e", "source_ip": "176.120.22.61", "source_port": 64589, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 19433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} +{"timestamp": "2026-08-31T09:44:36", "event_id": "6ee75613-5e61-44e2-9356-87c2d7af9a19", "source_ip": "176.120.22.61", "source_port": 62171, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 27433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"} diff --git a/kevlar/2026-08-31/honeylabs/events-AS200593.ndjson b/kevlar/2026-08-31/honeylabs/events-AS200593.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS200593.ndjson diff --git a/kevlar/2026-08-31/honeylabs/events-AS200651.ndjson b/kevlar/2026-08-31/honeylabs/events-AS200651.ndjson new file mode 100644 index 0000000..4553dee --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS200651.ndjson @@ -0,0 +1,12 @@ +{"timestamp": "2026-08-24T19:48:42", "event_id": "34b4f6af-eb90-44db-9e60-f350a6de848e", "source_ip": "185.100.87.136", "source_port": 55302, "source_domain": "", "country_code": "RO", "country_name": "Romania", "city_name": "Bucharest", "asn_number": 200651, "asn_org": "FlokiNET ehf", "dest_port": 2222, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "e54ef3ec27fe1fea7ab64d3fa05359fd", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 231000000, "source_bytes": 888, "dest_bytes": 14, "network_bytes": 902, "event_summary": "SSH-2.0-OpenSSH_10.2p1\r\n\u0000\u0000\u0003\\\u0010\u0014\ufffd5(f\ufffd\u0001\ufffdA\ufffdP\ufffd\ufffd\u074a\u0013:\u0000\u0000\u0001\u0004curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1\u0000\u0000\u0000Aecdsa-sha2-nistp256,ssh-rsa,rsa-sha2-512,rsa-sha2-256,ssh-ed25519\u0000\u0000\u0000\ufffdchacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc\u0000\u0000\u0000\ufffdchacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc\u0000\u0000\u0000Bhmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000Bhmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000x\ufffd\ufffd\ufffd\u000b\u069dp3\u001b\ufffd)\ufffdU-\ufffd"} +{"timestamp": "2026-08-24T18:23:10", "event_id": "ad536f82-0928-405b-a30b-c2f7141fb572", "source_ip": "185.100.87.136", "source_port": 37914, "source_domain": "", "country_code": "RO", "country_name": "Romania", "city_name": "Bucharest", "asn_number": 200651, "asn_org": "FlokiNET ehf", "dest_port": 2222, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "e54ef3ec27fe1fea7ab64d3fa05359fd", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 145000000, "source_bytes": 888, "dest_bytes": 14, "network_bytes": 902, "event_summary": "SSH-2.0-OpenSSH_10.2p1\r\n\u0000\u0000\u0003\\\u0010\u0014\ufffd\ufffdw\ufffd0\b\u0004UA\ufffd-(\ufffd\ufffdV\ufffd\u0000\u0000\u0001\u0004curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1\u0000\u0000\u0000Aecdsa-sha2-nistp256,ssh-rsa,rsa-sha2-512,rsa-sha2-256,ssh-ed25519\u0000\u0000\u0000\ufffdchacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc\u0000\u0000\u0000\ufffdchacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc\u0000\u0000\u0000Bhmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000Bhmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000*\ufffd\u3083>Ph\ufffdx\ufffd\ufffd9\ufffd\u0016\ufffd"} +{"timestamp": "2026-08-24T15:18:35", "event_id": "78cd8b8f-6acc-4627-bdf1-1c8f65a4b17b", "source_ip": "185.100.87.136", "source_port": 60692, "source_domain": "", "country_code": "RO", "country_name": "Romania", "city_name": "Bucharest", "asn_number": 200651, "asn_org": "FlokiNET ehf", "dest_port": 443, "network_protocol": "", "application_protocol": "http", "http_method": "POST", "user_agent": "SPARK COMMIT: 08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17", "url_path": "/api/client/update?arch=amd64&commit=08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17&os=windows", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"content-length\":\"384\",\"content-type\":\"application/octet-stream\",\"host\":\"<HONEYPOT>:443\",\"secret\":\"3de172c65c5204dbce4c985d6616ca6fbbf337be4ddd40746307af802fa510a2\",\"user-agent\":\"SPARK COMMIT: 08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "po11nn0600_c9506d37ac14", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 741, "dest_bytes": 79, "network_bytes": 820, "event_summary": ""} +{"timestamp": "2026-08-24T15:18:34", "event_id": "08f3a2a7-c0eb-4d09-8509-78dc0eb957f7", "source_ip": "185.100.87.136", "source_port": 60688, "source_domain": "", "country_code": "RO", "country_name": "Romania", "city_name": "Bucharest", "asn_number": 200651, "asn_org": "FlokiNET ehf", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:104.71.6212.24) Gecko/25.2.4212.671 Firefox/2.0", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:104.71.6212.24) Gecko/25.2.4212.671 Firefox/2.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1909h2_9dc949149365_97f8aa674fd9", "tls_client_ja3": "7c1e207beb00684bbbe144f1b0abe1d5", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 181, "dest_bytes": 79, "network_bytes": 260, "event_summary": ""} +{"timestamp": "2026-08-25T11:45:33", "event_id": "8652ea7f-db7d-4ed3-8a54-5e0f6bc1ca98", "source_ip": "185.100.87.136", "source_port": 55660, "source_domain": "", "country_code": "RO", "country_name": "Romania", "city_name": "Bucharest", "asn_number": 200651, "asn_org": "FlokiNET ehf", "dest_port": 8443, "network_protocol": "", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/api/checkin", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"cache-control\":\"no-cache\",\"content-length\":\"26\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "po11nn0500_e4a47a99f1ac", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 213, "dest_bytes": 79, "network_bytes": 292, "event_summary": ""} +{"timestamp": "2026-08-25T10:42:31", "event_id": "7e41c811-753f-4c98-8b19-f7585e520c3d", "source_ip": "185.100.87.136", "source_port": 45876, "source_domain": "", "country_code": "RO", "country_name": "Romania", "city_name": "Bucharest", "asn_number": 200651, "asn_org": "FlokiNET ehf", "dest_port": 8443, "network_protocol": "", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/api/checkin", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"cache-control\":\"no-cache\",\"content-length\":\"26\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "po11nn0500_e4a47a99f1ac", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 214, "dest_bytes": 79, "network_bytes": 293, "event_summary": ""} +{"timestamp": "2026-08-28T17:03:24", "event_id": "f3977816-21ce-42b8-8f11-ce64da6791df", "source_ip": "185.100.87.136", "source_port": 56908, "source_domain": "", "country_code": "RO", "country_name": "Romania", "city_name": "Bucharest", "asn_number": 200651, "asn_org": "FlokiNET ehf", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Android 12; Mobile; rv:117.0) Gecko/117.0 Focus/117.0", "url_path": "/eventmanager", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Android 12; Mobile; rv:117.0) Gecko/117.0 Focus/117.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1909h2_9dc949149365_97f8aa674fd9", "tls_client_ja3": "7c1e207beb00684bbbe144f1b0abe1d5", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 167, "dest_bytes": 79, "network_bytes": 246, "event_summary": ""} +{"timestamp": "2026-08-28T13:29:27", "event_id": "e11669e7-f035-4e1e-abae-98d5aa790e5d", "source_ip": "185.100.87.136", "source_port": 46970, "source_domain": "", "country_code": "RO", "country_name": "Romania", "city_name": "Bucharest", "asn_number": 200651, "asn_org": "FlokiNET ehf", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Android 12; Mobile; rv:117.0) Gecko/117.0 Focus/117.0", "url_path": "/eventmanager", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Android 12; Mobile; rv:117.0) Gecko/117.0 Focus/117.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1909h2_9dc949149365_97f8aa674fd9", "tls_client_ja3": "7c1e207beb00684bbbe144f1b0abe1d5", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 166, "dest_bytes": 79, "network_bytes": 245, "event_summary": ""} +{"timestamp": "2026-08-28T13:22:03", "event_id": "1a56d90d-0ea4-41c1-8a1f-28aa363a0f16", "source_ip": "185.100.87.136", "source_port": 39796, "source_domain": "", "country_code": "RO", "country_name": "Romania", "city_name": "Bucharest", "asn_number": 200651, "asn_org": "FlokiNET ehf", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Android 12; Mobile; rv:117.0) Gecko/117.0 Focus/117.0", "url_path": "/eventmanager", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Android 12; Mobile; rv:117.0) Gecko/117.0 Focus/117.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1909h2_9dc949149365_97f8aa674fd9", "tls_client_ja3": "7c1e207beb00684bbbe144f1b0abe1d5", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 166, "dest_bytes": 79, "network_bytes": 245, "event_summary": ""} +{"timestamp": "2026-08-31T06:06:56", "event_id": "7ae2542a-f64f-4c51-903f-b2274cc16211", "source_ip": "185.100.87.136", "source_port": 47020, "source_domain": "", "country_code": "RO", "country_name": "Romania", "city_name": "Bucharest", "asn_number": 200651, "asn_org": "FlokiNET ehf", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3 rv:3.0; eu-FR) AppleWebKit/533.4.2 (KHTML, like Gecko) Version/5.0.1 Safari/533.4.2", "url_path": "/images/transparentpix.gif", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3 rv:3.0; eu-FR) AppleWebKit/533.4.2 (KHTML, like Gecko) Version/5.0.1 Safari/533.4.2\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1909h2_9dc949149365_97f8aa674fd9", "tls_client_ja3": "7c1e207beb00684bbbe144f1b0abe1d5", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 243, "dest_bytes": 79, "network_bytes": 322, "event_summary": ""} +{"timestamp": "2026-08-31T05:00:49", "event_id": "32bde13b-d088-49bf-9f4b-c07080faae72", "source_ip": "185.100.87.136", "source_port": 54264, "source_domain": "", "country_code": "RO", "country_name": "Romania", "city_name": "Bucharest", "asn_number": 200651, "asn_org": "FlokiNET ehf", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3 rv:3.0; eu-FR) AppleWebKit/533.4.2 (KHTML, like Gecko) Version/5.0.1 Safari/533.4.2", "url_path": "/images/transparentpix.gif", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3 rv:3.0; eu-FR) AppleWebKit/533.4.2 (KHTML, like Gecko) Version/5.0.1 Safari/533.4.2\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1909h2_9dc949149365_97f8aa674fd9", "tls_client_ja3": "7c1e207beb00684bbbe144f1b0abe1d5", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 242, "dest_bytes": 79, "network_bytes": 321, "event_summary": ""} +{"timestamp": "2026-08-31T01:12:02", "event_id": "4486ee38-07be-4f89-af15-2474d6d06b49", "source_ip": "185.100.87.136", "source_port": 41682, "source_domain": "", "country_code": "RO", "country_name": "Romania", "city_name": "Bucharest", "asn_number": 200651, "asn_org": "FlokiNET ehf", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3 rv:3.0; eu-FR) AppleWebKit/533.4.2 (KHTML, like Gecko) Version/5.0.1 Safari/533.4.2", "url_path": "/images/transparentpix.gif", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3 rv:3.0; eu-FR) AppleWebKit/533.4.2 (KHTML, like Gecko) Version/5.0.1 Safari/533.4.2\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1909h2_9dc949149365_97f8aa674fd9", "tls_client_ja3": "7c1e207beb00684bbbe144f1b0abe1d5", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 242, "dest_bytes": 79, "network_bytes": 321, "event_summary": ""} diff --git a/kevlar/2026-08-31/honeylabs/events-AS202685.ndjson b/kevlar/2026-08-31/honeylabs/events-AS202685.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS202685.ndjson diff --git a/kevlar/2026-08-31/honeylabs/events-AS206728.ndjson b/kevlar/2026-08-31/honeylabs/events-AS206728.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS206728.ndjson diff --git a/kevlar/2026-08-31/honeylabs/events-AS209847.ndjson b/kevlar/2026-08-31/honeylabs/events-AS209847.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS209847.ndjson diff --git a/kevlar/2026-08-31/honeylabs/events-AS210644.ndjson b/kevlar/2026-08-31/honeylabs/events-AS210644.ndjson new file mode 100644 index 0000000..b9ce07c --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS210644.ndjson @@ -0,0 +1,44 @@ +{"timestamp": "2026-08-27T20:36:08", "event_id": "99eb9f4b-e854-4b81-bf3b-b539d4718e85", "source_ip": "217.144.190.138", "source_port": 37966, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 6363, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36", "url_path": "/favicon.ico", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6363\",\"user-agent\":\"Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 112000000, "source_bytes": 238, "dest_bytes": 80, "network_bytes": 318, "event_summary": ""} +{"timestamp": "2026-08-27T20:36:08", "event_id": "74d246ba-7d1f-4843-b3a0-6e3784a7ee58", "source_ip": "217.144.190.138", "source_port": 37950, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 6363, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6363\",\"user-agent\":\"Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 227, "dest_bytes": 80, "network_bytes": 307, "event_summary": ""} +{"timestamp": "2026-08-27T20:35:09", "event_id": "fe1a2ae3-da08-4ed9-994b-29c56ab18489", "source_ip": "217.144.190.138", "source_port": 48222, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 6363, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:6363\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 210, "dest_bytes": 80, "network_bytes": 290, "event_summary": ""} +{"timestamp": "2026-08-27T18:50:16", "event_id": "c5dd8381-ef5e-4346-97da-e7eb0b72c21f", "source_ip": "217.144.190.138", "source_port": 55096, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8999, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36", "url_path": "/favicon.ico", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8999\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 105000000, "source_bytes": 249, "dest_bytes": 80, "network_bytes": 329, "event_summary": ""} +{"timestamp": "2026-08-27T18:50:16", "event_id": "972705bf-20f1-4583-8020-29be323a2f62", "source_ip": "217.144.190.138", "source_port": 55084, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8999, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8999\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 102000000, "source_bytes": 238, "dest_bytes": 80, "network_bytes": 318, "event_summary": ""} +{"timestamp": "2026-08-27T18:49:23", "event_id": "d22753a5-4f1b-4cc5-a27d-c76fc27ec431", "source_ip": "217.144.190.138", "source_port": 44554, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8999, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8999\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 210, "dest_bytes": 80, "network_bytes": 290, "event_summary": ""} +{"timestamp": "2026-08-27T18:31:31", "event_id": "e7fd6a75-2478-4831-9192-29290da36304", "source_ip": "217.144.190.138", "source_port": 44876, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8999, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0", "url_path": "/favicon.ico", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8999\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 198000000, "source_bytes": 213, "dest_bytes": 80, "network_bytes": 293, "event_summary": ""} +{"timestamp": "2026-08-27T18:31:30", "event_id": "f785b8ca-9844-423d-bde3-4baf90ee0a41", "source_ip": "217.144.190.138", "source_port": 44870, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8999, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8999\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 200000000, "source_bytes": 202, "dest_bytes": 80, "network_bytes": 282, "event_summary": ""} +{"timestamp": "2026-08-27T18:30:43", "event_id": "32cf3709-d55b-4827-81f7-a93e5a995c17", "source_ip": "217.144.190.138", "source_port": 36804, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8999, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8999\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 209, "dest_bytes": 80, "network_bytes": 289, "event_summary": ""} +{"timestamp": "2026-08-27T15:11:50", "event_id": "af7af21b-2175-43f3-b8b1-04e7a5f0e077", "source_ip": "217.144.190.138", "source_port": 38514, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8989, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (CentOS; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0", "url_path": "/favicon.ico", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8989\",\"user-agent\":\"Mozilla/5.0 (CentOS; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 197000000, "source_bytes": 206, "dest_bytes": 80, "network_bytes": 286, "event_summary": ""} +{"timestamp": "2026-08-27T15:11:49", "event_id": "5ffec258-ad81-4e59-8e54-05642a3b9b66", "source_ip": "217.144.190.138", "source_port": 38496, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8989, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (CentOS; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8989\",\"user-agent\":\"Mozilla/5.0 (CentOS; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 202000000, "source_bytes": 195, "dest_bytes": 80, "network_bytes": 275, "event_summary": ""} +{"timestamp": "2026-08-27T15:10:55", "event_id": "d296eb7c-61ce-4814-92fb-b249414a914e", "source_ip": "217.144.190.138", "source_port": 54030, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8989, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8989\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 209, "dest_bytes": 80, "network_bytes": 289, "event_summary": ""} +{"timestamp": "2026-08-28T22:22:51", "event_id": "eaeb173c-27e1-4e77-95b0-a3933928b498", "source_ip": "147.45.71.214", "source_port": 49820, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8080, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36", "url_path": "/favicon.ico", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 202000000, "source_bytes": 233, "dest_bytes": 78, "network_bytes": 311, "event_summary": ""} +{"timestamp": "2026-08-28T22:22:50", "event_id": "dbcfbf12-17b2-4bc3-8410-9c03a475c020", "source_ip": "147.45.71.214", "source_port": 49804, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8080, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 236000000, "source_bytes": 222, "dest_bytes": 78, "network_bytes": 300, "event_summary": ""} +{"timestamp": "2026-08-28T22:20:13", "event_id": "dfb170dd-5387-4201-9c64-292704031b23", "source_ip": "147.45.71.214", "source_port": 57450, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8080, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 209, "dest_bytes": 78, "network_bytes": 287, "event_summary": ""} +{"timestamp": "2026-08-28T20:38:07", "event_id": "eb9f92d3-ef6b-40b2-a719-e7048422ab2b", "source_ip": "147.45.71.214", "source_port": 34778, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8081, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.6.16", "url_path": "/favicon.ico", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8081\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.6.16\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 211000000, "source_bytes": 252, "dest_bytes": 78, "network_bytes": 330, "event_summary": ""} +{"timestamp": "2026-08-28T20:38:06", "event_id": "d458170d-3f2a-4c80-a842-11e61fb9a269", "source_ip": "147.45.71.214", "source_port": 34758, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8081, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.6.16", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8081\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.6.16\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 203000000, "source_bytes": 241, "dest_bytes": 78, "network_bytes": 319, "event_summary": ""} +{"timestamp": "2026-08-28T20:36:52", "event_id": "1ba0ed2b-312f-4af5-adbb-1e5409713984", "source_ip": "147.45.71.214", "source_port": 50546, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8081, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8081\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 209, "dest_bytes": 78, "network_bytes": 287, "event_summary": ""} +{"timestamp": "2026-08-28T20:15:36", "event_id": "9522a6f4-39ac-4d1e-9d04-4cdcdf6d31d3", "source_ip": "147.45.71.214", "source_port": 33712, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8090, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; rv:125.0) Gecko/20100101 Firefox/125.0", "url_path": "/favicon.ico", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8090\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; rv:125.0) Gecko/20100101 Firefox/125.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 206000000, "source_bytes": 201, "dest_bytes": 78, "network_bytes": 279, "event_summary": ""} +{"timestamp": "2026-08-28T20:15:34", "event_id": "68ef2598-2a05-4b89-bcbc-a917834ea939", "source_ip": "147.45.71.214", "source_port": 33694, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8090, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; rv:125.0) Gecko/20100101 Firefox/125.0", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8090\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; rv:125.0) Gecko/20100101 Firefox/125.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 213000000, "source_bytes": 190, "dest_bytes": 78, "network_bytes": 268, "event_summary": ""} +{"timestamp": "2026-08-28T20:14:49", "event_id": "c81d2387-96f2-497d-a1e4-e47901c27cb9", "source_ip": "147.45.71.214", "source_port": 33586, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8090, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8090\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 209, "dest_bytes": 78, "network_bytes": 287, "event_summary": ""} +{"timestamp": "2026-08-28T14:20:32", "event_id": "dab653d9-a1e2-46c2-842f-b6cf6e1f7636", "source_ip": "176.124.203.177", "source_port": 44280, "source_domain": "", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Amsterdam", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 18190, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 3, "event_duration": 404000000, "source_bytes": 31, "dest_bytes": 45, "network_bytes": 76, "event_summary": "\u0000\u0000\u0000\u0001\u0000"} +{"timestamp": "2026-08-29T08:27:41", "event_id": "452ac326-661c-45c8-99e6-d91d3c3e1f54", "source_ip": "147.45.71.214", "source_port": 52038, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8080, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/v1/getinfo", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1909h2_9dc949149365_97f8aa674fd9", "tls_client_ja3": "7c1e207beb00684bbbe144f1b0abe1d5", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 219, "dest_bytes": 78, "network_bytes": 297, "event_summary": ""} +{"timestamp": "2026-08-29T08:24:45", "event_id": "8b6bc71a-24f2-46b7-a361-ed8a19b2d3fe", "source_ip": "147.45.71.214", "source_port": 42660, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8080, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/v1/getinfo", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1909h2_9dc949149365_97f8aa674fd9", "tls_client_ja3": "7c1e207beb00684bbbe144f1b0abe1d5", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 219, "dest_bytes": 78, "network_bytes": 297, "event_summary": ""} +{"timestamp": "2026-08-29T07:39:10", "event_id": "4fccdda3-2b6e-4dca-8818-7081b438ddfc", "source_ip": "147.45.71.214", "source_port": 52300, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8080, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/v1/getinfo", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1909h2_9dc949149365_97f8aa674fd9", "tls_client_ja3": "7c1e207beb00684bbbe144f1b0abe1d5", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 220, "dest_bytes": 78, "network_bytes": 298, "event_summary": ""} +{"timestamp": "2026-08-29T06:04:48", "event_id": "52081089-bf67-40d3-a78f-16e09d7cb014", "source_ip": "147.45.71.214", "source_port": 59232, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8080, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.5.18", "url_path": "/favicon.ico", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.5.18\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 106000000, "source_bytes": 253, "dest_bytes": 78, "network_bytes": 331, "event_summary": ""} +{"timestamp": "2026-08-29T06:04:48", "event_id": "e09ac5a8-7a4f-486d-b3ca-f7d87d3c873e", "source_ip": "147.45.71.214", "source_port": 39386, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8080, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.5.18", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.5.18\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 106000000, "source_bytes": 242, "dest_bytes": 78, "network_bytes": 320, "event_summary": ""} +{"timestamp": "2026-08-29T06:03:27", "event_id": "9047e065-df4f-4b23-9065-a1e703204410", "source_ip": "147.45.71.214", "source_port": 58140, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8080, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 210, "dest_bytes": 78, "network_bytes": 288, "event_summary": ""} +{"timestamp": "2026-08-29T04:07:32", "event_id": "1cace572-a2ff-44c9-acb0-2bf8961c7d17", "source_ip": "147.45.71.214", "source_port": 57844, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8989, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.18", "url_path": "/favicon.ico", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8989\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.18\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 124000000, "source_bytes": 254, "dest_bytes": 78, "network_bytes": 332, "event_summary": ""} +{"timestamp": "2026-08-29T04:07:32", "event_id": "a08bd56e-59af-42a6-a118-3a85964fb3a1", "source_ip": "147.45.71.214", "source_port": 57834, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8989, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.18", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8989\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.18\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 134000000, "source_bytes": 243, "dest_bytes": 78, "network_bytes": 321, "event_summary": ""} +{"timestamp": "2026-08-29T04:07:14", "event_id": "d05badbf-645f-401d-bfcc-8b704e383b14", "source_ip": "147.45.71.214", "source_port": 55904, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8989, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8989\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 211, "dest_bytes": 78, "network_bytes": 289, "event_summary": ""} +{"timestamp": "2026-08-29T03:32:41", "event_id": "fbd5ddec-a5c3-4b3d-afec-758a257d7a3a", "source_ip": "147.45.71.214", "source_port": 49148, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8085, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.27", "url_path": "/favicon.ico", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8085\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.27\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 202000000, "source_bytes": 250, "dest_bytes": 78, "network_bytes": 328, "event_summary": ""} +{"timestamp": "2026-08-29T03:32:40", "event_id": "bd3d5954-de6e-46d3-baae-bd5cfb4feba3", "source_ip": "147.45.71.214", "source_port": 49132, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8085, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.27", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8085\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.27\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 201000000, "source_bytes": 239, "dest_bytes": 78, "network_bytes": 317, "event_summary": ""} +{"timestamp": "2026-08-29T03:32:00", "event_id": "78b4ade9-69f2-46b2-afd5-2722e11a7c05", "source_ip": "147.45.71.214", "source_port": 50252, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8085, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8085\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 209, "dest_bytes": 78, "network_bytes": 287, "event_summary": ""} +{"timestamp": "2026-08-29T03:05:59", "event_id": "413cfb69-f8e4-4fb6-a6c2-45fd078b39e4", "source_ip": "147.45.71.214", "source_port": 46990, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8085, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.45", "url_path": "/favicon.ico", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8085\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.45\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 127000000, "source_bytes": 254, "dest_bytes": 78, "network_bytes": 332, "event_summary": ""} +{"timestamp": "2026-08-29T03:05:58", "event_id": "4828d7f6-e092-4791-a997-419423c95f3f", "source_ip": "147.45.71.214", "source_port": 46980, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8085, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.45", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8085\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.45\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 175000000, "source_bytes": 243, "dest_bytes": 78, "network_bytes": 321, "event_summary": ""} +{"timestamp": "2026-08-29T03:05:40", "event_id": "66c6f6eb-6fb5-458c-8667-281f2236da98", "source_ip": "147.45.71.214", "source_port": 38182, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8085, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8085\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 211, "dest_bytes": 78, "network_bytes": 289, "event_summary": ""} +{"timestamp": "2026-08-29T02:09:01", "event_id": "da17f1bc-fb43-4c5f-b5a4-61aa8635e17d", "source_ip": "147.45.71.214", "source_port": 54992, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8999, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 14) AppleWebKit/616.19.3 (KHTML, like Gecko) Version/17.6.11 Safari/616.19.3", "url_path": "/favicon.ico", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8999\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 14) AppleWebKit/616.19.3 (KHTML, like Gecko) Version/17.6.11 Safari/616.19.3\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 208000000, "source_bytes": 248, "dest_bytes": 78, "network_bytes": 326, "event_summary": ""} +{"timestamp": "2026-08-29T02:09:00", "event_id": "0dcdd1fb-fe01-40bb-b5ba-94cdd53bc572", "source_ip": "147.45.71.214", "source_port": 54968, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8999, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 14) AppleWebKit/616.19.3 (KHTML, like Gecko) Version/17.6.11 Safari/616.19.3", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8999\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 14) AppleWebKit/616.19.3 (KHTML, like Gecko) Version/17.6.11 Safari/616.19.3\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 201000000, "source_bytes": 237, "dest_bytes": 78, "network_bytes": 315, "event_summary": ""} +{"timestamp": "2026-08-29T02:07:54", "event_id": "16138719-1b2c-411b-b647-056774048da5", "source_ip": "147.45.71.214", "source_port": 60240, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8999, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8999\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 209, "dest_bytes": 78, "network_bytes": 287, "event_summary": ""} +{"timestamp": "2026-08-29T01:34:42", "event_id": "3172cd8e-c4e0-4436-868d-a2ec8fab8189", "source_ip": "147.45.71.214", "source_port": 57030, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8090, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36", "url_path": "/favicon.ico", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8090\",\"user-agent\":\"Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 201000000, "source_bytes": 237, "dest_bytes": 78, "network_bytes": 315, "event_summary": ""} +{"timestamp": "2026-08-29T01:34:41", "event_id": "08303f7e-da8d-4c6c-abd5-b98cc25b5fa0", "source_ip": "147.45.71.214", "source_port": 57000, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8090, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8090\",\"user-agent\":\"Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 201000000, "source_bytes": 226, "dest_bytes": 78, "network_bytes": 304, "event_summary": ""} +{"timestamp": "2026-08-30T20:27:15", "event_id": "c7a09daf-794e-4e6c-875f-a23aadbed443", "source_ip": "185.246.217.150", "source_port": 44276, "source_domain": "", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Amsterdam", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 2222, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "19532158b559096b89b1a5f7d17175b2", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 139000000, "source_bytes": 1536, "dest_bytes": 15, "network_bytes": 1551, "event_summary": "SSH-2.0-libssh2_1.11.1\r\n\u0000\u0000\u0005\ufffd\u000b\u0014KI=\ufffd\rO\ufffd\ufffd\ufffdfQWHL\ufffd<\u0000\u0000\u0001hcurve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com\u0000\u0000\u0001fecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa,ssh-rsa-cert-v01@openssh.com\u0000\u0000\u0000\ufffdchacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc\u0000\u0000\u0000\ufffdchacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc\u0000\u0000\u0000\ufffdhmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96\u0000\u0000\u0000\ufffdhmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00001\ufffd\u0011Q~n\ufffd\ufffd\ufffd\u0006\ufffd"} +{"timestamp": "2026-08-30T05:00:51", "event_id": "2c1ba5cf-f75b-440c-a1eb-39192e3de713", "source_ip": "176.124.203.177", "source_port": 60706, "source_domain": "", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Amsterdam", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 17_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 17_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i190900_9dc949149365_e7c285222651", "tls_client_ja3": "d6828e30ab66774a91a96ae93be4ae4c", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 238, "dest_bytes": 80, "network_bytes": 318, "event_summary": ""} diff --git a/kevlar/2026-08-31/honeylabs/events-AS211720.ndjson b/kevlar/2026-08-31/honeylabs/events-AS211720.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS211720.ndjson diff --git a/kevlar/2026-08-31/honeylabs/events-AS213702.ndjson b/kevlar/2026-08-31/honeylabs/events-AS213702.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS213702.ndjson diff --git a/kevlar/2026-08-31/honeylabs/events-AS214351.ndjson b/kevlar/2026-08-31/honeylabs/events-AS214351.ndjson new file mode 100644 index 0000000..e665127 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS214351.ndjson @@ -0,0 +1,6 @@ +{"timestamp": "2026-08-25T12:21:01", "event_id": "b68b7636-392d-4ed4-873d-d7a7ab61c4b0", "source_ip": "192.162.199.180", "source_port": 44144, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 214351, "asn_org": "Femo It Solutions Limited", "dest_port": 11434, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "python-requests/2.22.0", "url_path": "/api/tags", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:11434\",\"user-agent\":\"python-requests/2.22.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0500_2d30dc89d981", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 157, "dest_bytes": 80, "network_bytes": 237, "event_summary": ""} +{"timestamp": "2026-08-25T12:21:00", "event_id": "43b46cf8-d9da-45ef-9696-cc69a9c990fe", "source_ip": "192.162.199.180", "source_port": 44140, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 214351, "asn_org": "Femo It Solutions Limited", "dest_port": 11434, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "python-requests/2.22.0", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:11434\",\"user-agent\":\"python-requests/2.22.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0500_2d30dc89d981", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 149, "dest_bytes": 80, "network_bytes": 229, "event_summary": ""} +{"timestamp": "2026-08-25T10:23:24", "event_id": "41e4cda4-0fa0-4867-9e67-ec18fa138fc1", "source_ip": "62.60.226.150", "source_port": 34400, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 214351, "asn_org": "Femo It Solutions Limited", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 13, "network_bytes": 169, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T12:55:20", "event_id": "82dc696d-827c-42fb-87dd-c6ef5e0a4bfd", "source_ip": "62.60.226.150", "source_port": 58792, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 214351, "asn_org": "Femo It Solutions Limited", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 156, "dest_bytes": 13, "network_bytes": 169, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T02:37:34", "event_id": "276d19a2-b2a6-42c6-9717-04a1ca480235", "source_ip": "62.60.226.150", "source_port": 34272, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 214351, "asn_org": "Femo It Solutions Limited", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 13, "network_bytes": 169, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T22:58:01", "event_id": "689d6c5c-515d-4056-ae47-b93d36c7b6d4", "source_ip": "62.60.226.150", "source_port": 55544, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 214351, "asn_org": "Femo It Solutions Limited", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 13, "network_bytes": 169, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} diff --git a/kevlar/2026-08-31/honeylabs/events-AS214940.ndjson b/kevlar/2026-08-31/honeylabs/events-AS214940.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS214940.ndjson diff --git a/kevlar/2026-08-31/honeylabs/events-AS216139.ndjson b/kevlar/2026-08-31/honeylabs/events-AS216139.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS216139.ndjson diff --git a/kevlar/2026-08-31/honeylabs/events-AS216246.ndjson b/kevlar/2026-08-31/honeylabs/events-AS216246.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS216246.ndjson diff --git a/kevlar/2026-08-31/honeylabs/events-AS216309.ndjson b/kevlar/2026-08-31/honeylabs/events-AS216309.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS216309.ndjson diff --git a/kevlar/2026-08-31/honeylabs/events-AS30823.ndjson b/kevlar/2026-08-31/honeylabs/events-AS30823.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS30823.ndjson diff --git a/kevlar/2026-08-31/honeylabs/events-AS33993.ndjson b/kevlar/2026-08-31/honeylabs/events-AS33993.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS33993.ndjson diff --git a/kevlar/2026-08-31/honeylabs/events-AS394711.ndjson b/kevlar/2026-08-31/honeylabs/events-AS394711.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS394711.ndjson diff --git a/kevlar/2026-08-31/honeylabs/events-AS400992.ndjson b/kevlar/2026-08-31/honeylabs/events-AS400992.ndjson new file mode 100644 index 0000000..6febabe --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS400992.ndjson @@ -0,0 +1 @@ +{"timestamp": "2026-08-30T15:38:28", "event_id": "098ea664-7e47-4ee2-b41a-1f9fb543395f", "source_ip": "194.48.142.134", "source_port": 54390, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 400992, "asn_org": "ZhouyiSat Communications", "dest_port": 25565, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 22, "dest_bytes": 14, "network_bytes": 36, "event_summary": "\u0013\u0000/\r<HONEYPOT>c\ufffd\u0001\u0001\u0000"} diff --git a/kevlar/2026-08-31/honeylabs/events-AS51396.ndjson b/kevlar/2026-08-31/honeylabs/events-AS51396.ndjson new file mode 100644 index 0000000..a737ed8 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS51396.ndjson @@ -0,0 +1,156 @@ +{"timestamp": "2026-08-24T23:49:52", "event_id": "6420f476-f79c-4731-9f9c-496bbec2dc70", "source_ip": "176.65.149.27", "source_port": 58898, "source_domain": "176.65.149.27.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 37756, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 111000000, "source_bytes": 17, "dest_bytes": 13, "network_bytes": 30, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-24T23:49:44", "event_id": "50df1100-4026-4dd0-96a5-b35c54497857", "source_ip": "176.65.149.212", "source_port": 38490, "source_domain": "176.65.149.212.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 7737, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 119000000, "source_bytes": 17, "dest_bytes": 14, "network_bytes": 31, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-24T23:46:41", "event_id": "0708de21-146e-4a00-b481-321983afa4cb", "source_ip": "45.135.194.113", "source_port": 37984, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 7891, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 3, "dest_bytes": 14, "network_bytes": 17, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-24T23:46:41", "event_id": "5282d73d-3be5-42c6-9f5f-9f241130b190", "source_ip": "45.135.194.113", "source_port": 37982, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 7891, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://proxy.flarevpn.digital:8080/judge", "url_domain": "proxy.flarevpn.digital", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 166, "dest_bytes": 79, "network_bytes": 245, "event_summary": ""} +{"timestamp": "2026-08-24T23:46:41", "event_id": "65926a98-a725-407b-937e-6f8252a39699", "source_ip": "45.135.194.113", "source_port": 37962, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 7891, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://proxy.flarevpn.digital:8080/judge", "url_domain": "proxy.flarevpn.digital", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 102000000, "source_bytes": 166, "dest_bytes": 79, "network_bytes": 245, "event_summary": ""} +{"timestamp": "2026-08-24T23:46:41", "event_id": "399f316a-3ef7-4037-bf07-39d4d0fd0329", "source_ip": "45.135.194.113", "source_port": 37968, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 7891, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 3, "dest_bytes": 14, "network_bytes": 17, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-24T23:46:36", "event_id": "a358f110-d86e-452f-888e-423259cf47ea", "source_ip": "94.183.174.77", "source_port": 41094, "source_domain": "vmfrost.net", "country_code": "AE", "country_name": "United Arab Emirates", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 5555, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 258, "dest_bytes": 13, "network_bytes": 271, "event_summary": "CNXN\u0001\u0000\u0000\u0001\u0000\u0000\u0010\u0000\ufffd\u0000\u0000\u0000D[\u0000\u0000\ufffd\ufffd\ufffd\ufffdhost::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_symlink_timestamp,abb_exec,remount_shell,track_app,sendrecv_v2,sendrecv_v2_brotli,sendrecv_v2_lz4,sendrecv_v2_zstd,sendrecv_v2_dry_run_send,openscreen_mdns"} +{"timestamp": "2026-08-24T23:36:24", "event_id": "5d944171-3c07-4849-a760-9fd2da390fe1", "source_ip": "176.65.149.64", "source_port": 56752, "source_domain": "176.65.149.64.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 18079, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 147000000, "source_bytes": 17, "dest_bytes": 13, "network_bytes": 30, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-24T23:29:59", "event_id": "72dd8c43-b778-4fa2-b07b-8bae3de665fb", "source_ip": "176.65.149.30", "source_port": 48992, "source_domain": "176.65.149.30.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 31733, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 113000000, "source_bytes": 17, "dest_bytes": 13, "network_bytes": 30, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-24T23:26:42", "event_id": "ef682699-1266-47f4-82f2-41574d346579", "source_ip": "176.65.148.29", "source_port": 44372, "source_domain": "176.65.148.29.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8332, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1, "dest_bytes": 13, "network_bytes": 14, "event_summary": "\n"} +{"timestamp": "2026-08-24T23:25:41", "event_id": "e56ca2f9-df41-4d12-9790-7dd59cdf4ee2", "source_ip": "176.65.149.236", "source_port": 18827, "source_domain": "176.65.149.236.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 9999, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 zgrab/0.x", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:9999\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 114, "dest_bytes": 79, "network_bytes": 193, "event_summary": ""} +{"timestamp": "2026-08-24T23:19:41", "event_id": "9c655320-8baa-43f9-b35a-ccfc6ad1bb96", "source_ip": "204.76.203.7", "source_port": 44116, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 49210, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-24T23:19:14", "event_id": "a1560adb-3946-4467-91e8-9ffab5b75e69", "source_ip": "204.76.203.7", "source_port": 52866, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 49210, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-24T23:17:50", "event_id": "4390741d-fc62-4c60-a7f0-fd6b0b5734c9", "source_ip": "204.76.203.7", "source_port": 53948, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 49210, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-24T23:17:01", "event_id": "9e1fcf2a-7111-4837-9880-719cdbdc4d71", "source_ip": "204.76.203.7", "source_port": 32784, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 49210, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-24T23:16:36", "event_id": "8ea8db2b-6f6a-4721-91af-b0764e975579", "source_ip": "204.76.203.7", "source_port": 47550, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 49210, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-24T23:15:23", "event_id": "611aaf29-b790-42c6-ae04-a7149885d47a", "source_ip": "204.76.203.7", "source_port": 37770, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 49210, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-24T23:14:49", "event_id": "93db399c-1945-4a4a-8053-aee1bd3776f7", "source_ip": "176.65.149.230", "source_port": 36184, "source_domain": "176.65.149.230.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 55737, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 110000000, "source_bytes": 17, "dest_bytes": 14, "network_bytes": 31, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-24T23:06:17", "event_id": "72e8614d-4eb5-49be-aada-d120ca82c991", "source_ip": "176.65.149.31", "source_port": 33922, "source_domain": "176.65.149.31.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 1642, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 114000000, "source_bytes": 17, "dest_bytes": 13, "network_bytes": 30, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-24T23:01:58", "event_id": "c07a67b4-55b1-4e83-b8d1-ce562626c7a1", "source_ip": "204.76.203.49", "source_port": 47984, "source_domain": "204.76.203.49.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8080, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 3, "dest_bytes": 13, "network_bytes": 16, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-25T23:47:46", "event_id": "a1e89135-1171-49b0-8652-5584bd5b0500", "source_ip": "176.65.148.226", "source_port": 53932, "source_domain": "176.65.148.226.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8265, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36", "url_path": "/api/version", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"application/json\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8265\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i140900_cbb2034c60b8_e7c285222651", "tls_client_ja3": "ea4a9ae049cfc614efbb3c244abb3fc7", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_cac2c496544b", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 186, "dest_bytes": 79, "network_bytes": 265, "event_summary": ""} +{"timestamp": "2026-08-25T23:47:46", "event_id": "cf2c9611-13f3-4e5d-aa65-3bc9dd69cc5c", "source_ip": "176.65.148.226", "source_port": 53926, "source_domain": "176.65.148.226.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8265, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36", "url_path": "/api/version", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"application/json\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8265\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0500_cac2c496544b", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 186, "dest_bytes": 79, "network_bytes": 265, "event_summary": ""} +{"timestamp": "2026-08-25T23:42:14", "event_id": "18efd0b0-50ab-4d20-8a76-78542e79082c", "source_ip": "176.65.149.212", "source_port": 58602, "source_domain": "176.65.149.212.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 7760, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 110000000, "source_bytes": 17, "dest_bytes": 14, "network_bytes": 31, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-25T23:42:01", "event_id": "784bd72e-0ccf-4ad9-b63a-2b86c83980ef", "source_ip": "45.135.194.113", "source_port": 36738, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 7897, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://proxy.flarevpn.digital:8080/judge", "url_domain": "proxy.flarevpn.digital", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 166, "dest_bytes": 79, "network_bytes": 245, "event_summary": ""} +{"timestamp": "2026-08-25T23:42:01", "event_id": "a53d3e74-9cd8-4ed6-a089-d3e70c9b5109", "source_ip": "45.135.194.113", "source_port": 36748, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 7897, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 14, "network_bytes": 17, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-25T23:42:00", "event_id": "4652d82b-13f2-4053-a27e-6ad3a71053ba", "source_ip": "45.135.194.113", "source_port": 36736, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 7897, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 14, "network_bytes": 17, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-25T23:42:00", "event_id": "c3a671d6-205a-424b-8b1d-5f409d9e5815", "source_ip": "45.135.194.113", "source_port": 36726, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 7897, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://proxy.flarevpn.digital:8080/judge", "url_domain": "proxy.flarevpn.digital", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 166, "dest_bytes": 79, "network_bytes": 245, "event_summary": ""} +{"timestamp": "2026-08-25T23:32:33", "event_id": "d3a0077c-c72e-44cf-aaaa-a4cc00f95bdb", "source_ip": "176.65.149.27", "source_port": 55136, "source_domain": "176.65.149.27.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 37778, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 316000000, "source_bytes": 17, "dest_bytes": 13, "network_bytes": 30, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-25T23:30:56", "event_id": "7a521454-64e1-4f10-873f-475d95398e83", "source_ip": "45.135.193.193", "source_port": 43070, "source_domain": "45.135.193.193.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8080, "network_protocol": "", "application_protocol": "http_connect", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 102000000, "source_bytes": 89, "dest_bytes": 14, "network_bytes": 103, "event_summary": "CONNECT httpbin.org:443 HTTP/1.1\r\nHost: httpbin.org:443\r\nProxy-Connection: keep-alive\r\n\r\n"} +{"timestamp": "2026-08-25T23:30:56", "event_id": "e63f28be-2b44-45bb-be31-1f5d748f6cc5", "source_ip": "45.135.193.193", "source_port": 50008, "source_domain": "45.135.193.193.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8000, "network_protocol": "", "application_protocol": "http_connect", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 102000000, "source_bytes": 89, "dest_bytes": 14, "network_bytes": 103, "event_summary": "CONNECT httpbin.org:443 HTTP/1.1\r\nHost: httpbin.org:443\r\nProxy-Connection: keep-alive\r\n\r\n"} +{"timestamp": "2026-08-25T23:30:56", "event_id": "70a36fc8-55c4-40e0-aa5d-63e83bc75528", "source_ip": "45.135.193.193", "source_port": 50618, "source_domain": "45.135.193.193.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 3128, "network_protocol": "", "application_protocol": "http_connect", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 102000000, "source_bytes": 89, "dest_bytes": 14, "network_bytes": 103, "event_summary": "CONNECT httpbin.org:443 HTTP/1.1\r\nHost: httpbin.org:443\r\nProxy-Connection: keep-alive\r\n\r\n"} +{"timestamp": "2026-08-25T23:30:56", "event_id": "985110cd-e6e8-4d4b-bf71-2ce306389592", "source_ip": "45.135.193.193", "source_port": 41958, "source_domain": "45.135.193.193.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 443, "network_protocol": "", "application_protocol": "http_connect", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 89, "dest_bytes": 14, "network_bytes": 103, "event_summary": "CONNECT httpbin.org:443 HTTP/1.1\r\nHost: httpbin.org:443\r\nProxy-Connection: keep-alive\r\n\r\n"} +{"timestamp": "2026-08-25T23:30:56", "event_id": "f513889c-5ad1-4094-8768-dcd14105b73b", "source_ip": "45.135.193.193", "source_port": 40436, "source_domain": "45.135.193.193.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 80, "network_protocol": "", "application_protocol": "http_connect", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 89, "dest_bytes": 14, "network_bytes": 103, "event_summary": "CONNECT httpbin.org:443 HTTP/1.1\r\nHost: httpbin.org:443\r\nProxy-Connection: keep-alive\r\n\r\n"} +{"timestamp": "2026-08-25T23:30:56", "event_id": "f83d6d9d-bb94-4f4f-9a64-f90b00c5df28", "source_ip": "45.135.193.193", "source_port": 47426, "source_domain": "45.135.193.193.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8888, "network_protocol": "", "application_protocol": "http_connect", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 89, "dest_bytes": 14, "network_bytes": 103, "event_summary": "CONNECT httpbin.org:443 HTTP/1.1\r\nHost: httpbin.org:443\r\nProxy-Connection: keep-alive\r\n\r\n"} +{"timestamp": "2026-08-25T23:30:56", "event_id": "4e9fc04f-73ba-47fc-bad4-cb1223fe8e2f", "source_ip": "45.135.193.193", "source_port": 38404, "source_domain": "45.135.193.193.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8081, "network_protocol": "", "application_protocol": "http_connect", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 89, "dest_bytes": 14, "network_bytes": 103, "event_summary": "CONNECT httpbin.org:443 HTTP/1.1\r\nHost: httpbin.org:443\r\nProxy-Connection: keep-alive\r\n\r\n"} +{"timestamp": "2026-08-25T23:30:56", "event_id": "1ed02798-829b-4179-a474-bbad9450bfcc", "source_ip": "45.135.193.193", "source_port": 59682, "source_domain": "45.135.193.193.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 81, "network_protocol": "", "application_protocol": "http_connect", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 89, "dest_bytes": 14, "network_bytes": 103, "event_summary": "CONNECT httpbin.org:443 HTTP/1.1\r\nHost: httpbin.org:443\r\nProxy-Connection: keep-alive\r\n\r\n"} +{"timestamp": "2026-08-25T23:30:54", "event_id": "54fbc312-a3ec-407f-a413-1bd497b23aaf", "source_ip": "204.76.203.7", "source_port": 41968, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 48049, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-25T23:29:53", "event_id": "f5009830-c17e-4b91-9231-e3415d4d7982", "source_ip": "204.76.203.7", "source_port": 40860, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 48049, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-25T23:29:25", "event_id": "1630e1b5-7734-48cc-9950-63fc653ce8a4", "source_ip": "204.76.203.7", "source_port": 41774, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 48049, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-25T23:28:51", "event_id": "9d3c1483-328a-4b9e-95bd-012767641eab", "source_ip": "204.76.203.7", "source_port": 53648, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 48049, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-26T23:58:04", "event_id": "3d2e3701-82bb-42a5-8071-65bf2155adb7", "source_ip": "204.76.203.7", "source_port": 54546, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 41857, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-26T23:57:05", "event_id": "0012d972-8e1e-412f-b1d7-97b1ff81a69b", "source_ip": "204.76.203.7", "source_port": 36498, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 41857, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-26T23:57:04", "event_id": "5ed2cd2a-2d31-47b5-8730-7c4a82f7a9ae", "source_ip": "204.76.203.7", "source_port": 35278, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 41857, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-26T23:55:50", "event_id": "51db39d8-7526-4a9b-916b-d7659e92f298", "source_ip": "204.76.203.7", "source_port": 44764, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 41857, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-26T23:54:44", "event_id": "4eae4685-3b57-4e52-a759-749d82b6174e", "source_ip": "204.76.203.7", "source_port": 59720, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 41857, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-26T23:54:42", "event_id": "481650ec-3fb5-48b9-b084-26722086bfd4", "source_ip": "204.76.203.7", "source_port": 52532, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 41857, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-26T23:45:15", "event_id": "189f58ab-35ba-42fc-9125-68ff224070ed", "source_ip": "176.65.148.226", "source_port": 35452, "source_domain": "176.65.148.226.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8161, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36", "url_path": "/api/jolokia/version", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"application/json\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8161\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0500_cac2c496544b", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 103000000, "source_bytes": 194, "dest_bytes": 79, "network_bytes": 273, "event_summary": ""} +{"timestamp": "2026-08-26T23:44:17", "event_id": "87c3bdc0-414d-4bac-aa08-5ad328ceaf0d", "source_ip": "176.65.149.31", "source_port": 51104, "source_domain": "176.65.149.31.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 1687, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 110000000, "source_bytes": 17, "dest_bytes": 13, "network_bytes": 30, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-26T23:35:50", "event_id": "eff86a98-da82-4eb5-b737-b19bdf11bfbf", "source_ip": "176.65.149.64", "source_port": 53980, "source_domain": "176.65.149.64.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 18128, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 118000000, "source_bytes": 17, "dest_bytes": 13, "network_bytes": 30, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-26T23:30:26", "event_id": "9f1770b8-dabd-45cd-8cc7-d1080e1b08c5", "source_ip": "45.135.194.99", "source_port": 53818, "source_domain": "45.135.194.99.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 3128, "network_protocol": "", "application_protocol": "google", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 89, "dest_bytes": 13, "network_bytes": 102, "event_summary": "CONNECT google.com:443 HTTP/1.1\r\nHost: google.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n"} +{"timestamp": "2026-08-26T23:16:35", "event_id": "fd76b50d-8aa0-45b0-8702-7293bf20699a", "source_ip": "176.65.149.67", "source_port": 43586, "source_domain": "176.65.149.67.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 14334, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 110000000, "source_bytes": 17, "dest_bytes": 13, "network_bytes": 30, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-26T23:00:20", "event_id": "ef8e64c8-7e17-4e5d-9632-019d0e7945fb", "source_ip": "176.65.148.96", "source_port": 58514, "source_domain": "176.65.148.96.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8545, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1, "dest_bytes": 13, "network_bytes": 14, "event_summary": "\n"} +{"timestamp": "2026-08-26T22:59:36", "event_id": "3e5c7b73-7a4a-4124-a5b5-ce5df4fe137b", "source_ip": "204.76.203.7", "source_port": 44414, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 41890, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-26T22:58:54", "event_id": "607fa9e7-c14d-451d-b9cf-aaced1e0b83c", "source_ip": "204.76.203.7", "source_port": 37344, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 41890, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-26T22:58:45", "event_id": "ef37b265-33d5-417d-987c-f55e448e0584", "source_ip": "204.76.203.7", "source_port": 53860, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 41890, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-26T22:57:20", "event_id": "19766504-09c8-4d4b-a9a4-4b2990822bbf", "source_ip": "204.76.203.7", "source_port": 41672, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 41890, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-26T22:57:12", "event_id": "1f9ba221-6498-4eb6-b5f9-a02d5e6ffd57", "source_ip": "176.65.149.224", "source_port": 50750, "source_domain": "176.65.149.224.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 49797, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 781000000, "source_bytes": 17, "dest_bytes": 14, "network_bytes": 31, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-26T22:56:30", "event_id": "c953e0cc-a74a-4230-b261-0add665fe0ba", "source_ip": "204.76.203.7", "source_port": 45882, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 41890, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-26T22:56:22", "event_id": "d0a0d59f-e2f3-4475-a397-8ffde349ff49", "source_ip": "204.76.203.7", "source_port": 57094, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 41890, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-26T22:50:21", "event_id": "78a92f9c-cac2-440d-89ad-8f86f448515d", "source_ip": "176.65.149.27", "source_port": 44838, "source_domain": "176.65.149.27.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 37800, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 110000000, "source_bytes": 17, "dest_bytes": 13, "network_bytes": 30, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-27T23:42:29", "event_id": "e38b5fd1-a70a-44ac-9fcb-9adab6c10a90", "source_ip": "176.65.149.27", "source_port": 51200, "source_domain": "176.65.149.27.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 37823, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 120000000, "source_bytes": 17, "dest_bytes": 13, "network_bytes": 30, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-27T23:37:52", "event_id": "1837fc78-7bd6-440d-83e2-38d28c8a79f8", "source_ip": "176.65.149.236", "source_port": 55025, "source_domain": "176.65.149.236.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 82, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 zgrab/0.x", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:82\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 112, "dest_bytes": 79, "network_bytes": 191, "event_summary": ""} +{"timestamp": "2026-08-27T23:36:30", "event_id": "4720d1e4-01f7-47bf-80ef-fb60e6a749b5", "source_ip": "204.76.203.7", "source_port": 34952, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 39099, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-27T23:36:17", "event_id": "137bc691-670d-4e88-b0b6-5b5bfa1feeb3", "source_ip": "204.76.203.7", "source_port": 49580, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 39099, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-27T23:36:06", "event_id": "64f0a515-8845-409e-bf9d-47d71982912f", "source_ip": "204.76.203.7", "source_port": 50212, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 39099, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-27T23:33:57", "event_id": "e6a73ed9-734f-4612-be3b-9e54bc7f6995", "source_ip": "204.76.203.7", "source_port": 50276, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 39099, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-27T23:33:43", "event_id": "ecac0513-88dc-4614-aec6-a7aca8c9eb06", "source_ip": "204.76.203.7", "source_port": 37640, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 39099, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-27T23:33:32", "event_id": "a39f9b46-0315-4bcb-9127-79464835acc5", "source_ip": "204.76.203.7", "source_port": 54520, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 39099, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-27T23:24:21", "event_id": "f8a09010-e16e-4a7f-a6bd-ced99dbeeda0", "source_ip": "176.65.149.230", "source_port": 48738, "source_domain": "176.65.149.230.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 55812, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 113000000, "source_bytes": 17, "dest_bytes": 14, "network_bytes": 31, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-27T23:06:45", "event_id": "0ff34f7c-bef1-450a-a271-78d0489aec68", "source_ip": "176.65.149.212", "source_port": 33464, "source_domain": "176.65.149.212.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 7806, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 110000000, "source_bytes": 17, "dest_bytes": 14, "network_bytes": 31, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-27T22:55:22", "event_id": "3700a0e1-7297-4ee4-b5f9-ae722fbf1fe6", "source_ip": "45.135.194.113", "source_port": 43528, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 10802, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 14, "network_bytes": 17, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-27T22:55:22", "event_id": "b55ab995-3334-4279-8087-7cdca65c6d54", "source_ip": "45.135.194.113", "source_port": 43518, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 10802, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://proxy.flarevpn.digital:8080/judge", "url_domain": "proxy.flarevpn.digital", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 166, "dest_bytes": 79, "network_bytes": 245, "event_summary": ""} +{"timestamp": "2026-08-27T22:55:22", "event_id": "89ea00bd-eff7-4f01-bbfa-d53d0e94aaf2", "source_ip": "45.135.194.113", "source_port": 43500, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 10802, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 3, "dest_bytes": 14, "network_bytes": 17, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-27T22:55:22", "event_id": "1dd7cb42-0366-46f7-bff9-5e095aa2978e", "source_ip": "45.135.194.113", "source_port": 43510, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 10802, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://proxy.flarevpn.digital:8080/judge", "url_domain": "proxy.flarevpn.digital", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 166, "dest_bytes": 79, "network_bytes": 245, "event_summary": ""} +{"timestamp": "2026-08-27T22:46:23", "event_id": "f63e630a-e995-4459-95f4-bffd878f5764", "source_ip": "176.65.149.201", "source_port": 50822, "source_domain": "176.65.149.201.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 3001, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:109.0) Gecko/20100101 Firefox/113.0", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3001\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:109.0) Gecko/20100101 Firefox/113.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 207, "dest_bytes": 79, "network_bytes": 286, "event_summary": ""} +{"timestamp": "2026-08-27T22:43:26", "event_id": "64717fa4-c4e5-46cd-99d6-b5674f1ebf16", "source_ip": "176.65.149.31", "source_port": 39782, "source_domain": "176.65.149.31.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 1708, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 110000000, "source_bytes": 17, "dest_bytes": 13, "network_bytes": 30, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-27T22:43:15", "event_id": "ce799047-ad0e-49df-b769-8e2f46ceab89", "source_ip": "204.76.203.7", "source_port": 42924, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 39100, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-27T22:42:53", "event_id": "57d14d42-4e59-4f2c-b07b-763f772ea93c", "source_ip": "204.76.203.7", "source_port": 52164, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 39100, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-27T22:42:12", "event_id": "f2013058-4644-4af0-abc3-fafc2fc936d1", "source_ip": "204.76.203.7", "source_port": 54616, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 39100, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-27T22:40:36", "event_id": "2ca76725-261b-451b-bb97-aab1cf405e61", "source_ip": "204.76.203.7", "source_port": 33666, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 39100, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-28T23:59:00", "event_id": "a44a7d8f-9e84-49bb-a241-89990df7ed7a", "source_ip": "45.135.193.198", "source_port": 33390, "source_domain": "45.135.193.198.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 18088, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "0day", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"host\":\"<HONEYPOT>\",\"user-agent\":\"0day\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i190800_9dc949149365_97f8aa674fd9", "tls_client_ja3": "19e29534fd49dd27d09234e639c4057e", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge10nn0200_3ed38b250d3d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 57, "dest_bytes": 79, "network_bytes": 136, "event_summary": ""} +{"timestamp": "2026-08-28T23:57:56", "event_id": "098e94f0-6e7e-453a-8d17-1c9414c14f45", "source_ip": "45.135.194.113", "source_port": 59996, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 11443, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 3, "dest_bytes": 14, "network_bytes": 17, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-28T23:57:56", "event_id": "df086b35-daab-40fc-a1d6-97284b9a571d", "source_ip": "45.135.194.113", "source_port": 59990, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 11443, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://proxy.flarevpn.digital:8080/judge", "url_domain": "proxy.flarevpn.digital", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 166, "dest_bytes": 79, "network_bytes": 245, "event_summary": ""} +{"timestamp": "2026-08-28T23:57:56", "event_id": "68b247a3-91b9-47d7-8c18-caba930eb113", "source_ip": "45.135.194.113", "source_port": 59968, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 11443, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 3, "dest_bytes": 14, "network_bytes": 17, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-28T23:57:56", "event_id": "eb8b6220-8f64-4a2b-8efa-dfce510d780a", "source_ip": "45.135.194.113", "source_port": 59984, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 11443, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://proxy.flarevpn.digital:8080/judge", "url_domain": "proxy.flarevpn.digital", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 166, "dest_bytes": 79, "network_bytes": 245, "event_summary": ""} +{"timestamp": "2026-08-28T23:52:09", "event_id": "ce593fab-0516-4a58-a34c-407f93ff8072", "source_ip": "45.135.193.198", "source_port": 39320, "source_domain": "45.135.193.198.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8181, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "0day", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"host\":\"<HONEYPOT>\",\"user-agent\":\"0day\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i190800_9dc949149365_97f8aa674fd9", "tls_client_ja3": "19e29534fd49dd27d09234e639c4057e", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge10nn0200_3ed38b250d3d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 114000000, "source_bytes": 56, "dest_bytes": 79, "network_bytes": 135, "event_summary": ""} +{"timestamp": "2026-08-28T23:50:27", "event_id": "b89ebbd1-0dba-41b9-a32c-40c483d621e4", "source_ip": "176.65.148.226", "source_port": 52150, "source_domain": "176.65.148.226.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 3000, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36", "url_path": "/api/session/properties", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"application/json\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i140900_cbb2034c60b8_e7c285222651", "tls_client_ja3": "ea4a9ae049cfc614efbb3c244abb3fc7", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0500_cac2c496544b", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 197, "dest_bytes": 79, "network_bytes": 276, "event_summary": ""} +{"timestamp": "2026-08-28T23:50:27", "event_id": "bb9dea80-2f1a-437c-9935-52c396998333", "source_ip": "176.65.148.226", "source_port": 52136, "source_domain": "176.65.148.226.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 3000, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36", "url_path": "/api/session/properties", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"application/json\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0500_cac2c496544b", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 197, "dest_bytes": 79, "network_bytes": 276, "event_summary": ""} +{"timestamp": "2026-08-28T23:50:27", "event_id": "303b6f15-d954-4fc0-9520-f7653b897fad", "source_ip": "45.135.193.198", "source_port": 53042, "source_domain": "45.135.193.198.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8000, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "0day", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"host\":\"<HONEYPOT>\",\"user-agent\":\"0day\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i190800_9dc949149365_97f8aa674fd9", "tls_client_ja3": "19e29534fd49dd27d09234e639c4057e", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge10nn0200_3ed38b250d3d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 56, "dest_bytes": 79, "network_bytes": 135, "event_summary": ""} +{"timestamp": "2026-08-28T23:49:25", "event_id": "bfa69d27-fe9f-4551-b00b-3d616e3f3302", "source_ip": "176.65.149.31", "source_port": 50012, "source_domain": "176.65.149.31.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 1730, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 110000000, "source_bytes": 17, "dest_bytes": 13, "network_bytes": 30, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-28T23:47:20", "event_id": "b0490da3-f732-4f40-895d-a7a85688e756", "source_ip": "45.135.193.198", "source_port": 47650, "source_domain": "45.135.193.198.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 18080, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "0day", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"host\":\"<HONEYPOT>\",\"user-agent\":\"0day\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i190800_9dc949149365_97f8aa674fd9", "tls_client_ja3": "19e29534fd49dd27d09234e639c4057e", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge10nn0200_3ed38b250d3d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 113000000, "source_bytes": 57, "dest_bytes": 79, "network_bytes": 136, "event_summary": ""} +{"timestamp": "2026-08-28T23:43:17", "event_id": "f483c47f-8a6a-412a-9628-a097f42f5d0b", "source_ip": "176.65.149.30", "source_port": 58908, "source_domain": "176.65.149.30.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 31821, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 110000000, "source_bytes": 17, "dest_bytes": 13, "network_bytes": 30, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-28T23:40:07", "event_id": "b3a2674b-bdd9-4912-bdfc-4dd03c4e2ad5", "source_ip": "176.65.149.212", "source_port": 47438, "source_domain": "176.65.149.212.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 7829, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 110000000, "source_bytes": 17, "dest_bytes": 14, "network_bytes": 31, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-28T23:38:31", "event_id": "c9770ee3-9c0c-4d93-bafd-09bcb54495c2", "source_ip": "45.135.193.198", "source_port": 36760, "source_domain": "45.135.193.198.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8888, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "0day", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"host\":\"<HONEYPOT>\",\"user-agent\":\"0day\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i190800_9dc949149365_97f8aa674fd9", "tls_client_ja3": "19e29534fd49dd27d09234e639c4057e", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge10nn0200_3ed38b250d3d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 56, "dest_bytes": 79, "network_bytes": 135, "event_summary": ""} +{"timestamp": "2026-08-28T23:36:31", "event_id": "78d5ebd7-e6be-45ef-aca8-46f332baac98", "source_ip": "45.135.193.198", "source_port": 35320, "source_domain": "45.135.193.198.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 18080, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "0day", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"host\":\"<HONEYPOT>\",\"user-agent\":\"0day\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i190800_9dc949149365_97f8aa674fd9", "tls_client_ja3": "19e29534fd49dd27d09234e639c4057e", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge10nn0200_3ed38b250d3d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 110000000, "source_bytes": 56, "dest_bytes": 79, "network_bytes": 135, "event_summary": ""} +{"timestamp": "2026-08-28T23:30:20", "event_id": "cde3e328-47a9-4c6f-9da5-6615c305a26e", "source_ip": "45.135.193.198", "source_port": 36188, "source_domain": "45.135.193.198.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8181, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "0day", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"host\":\"<HONEYPOT>\",\"user-agent\":\"0day\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i190800_9dc949149365_97f8aa674fd9", "tls_client_ja3": "19e29534fd49dd27d09234e639c4057e", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge10nn0200_3ed38b250d3d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 57, "dest_bytes": 79, "network_bytes": 136, "event_summary": ""} +{"timestamp": "2026-08-28T23:25:43", "event_id": "f736a3b7-c8f3-4478-94ce-bdce0fd2c8c9", "source_ip": "45.135.193.198", "source_port": 36004, "source_domain": "45.135.193.198.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8181, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "0day", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"host\":\"<HONEYPOT>\",\"user-agent\":\"0day\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i190800_9dc949149365_97f8aa674fd9", "tls_client_ja3": "19e29534fd49dd27d09234e639c4057e", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge10nn0200_3ed38b250d3d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 56, "dest_bytes": 79, "network_bytes": 135, "event_summary": ""} +{"timestamp": "2026-08-28T23:20:26", "event_id": "3c2b7b51-54e8-4020-b25c-dbfbd57f8f15", "source_ip": "204.76.203.7", "source_port": 51090, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 32946, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-28T23:20:19", "event_id": "a7c36c3c-da64-423d-a0ca-ee7d688d9150", "source_ip": "45.135.193.198", "source_port": 35512, "source_domain": "45.135.193.198.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8000, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "0day", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"host\":\"<HONEYPOT>\",\"user-agent\":\"0day\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i190800_9dc949149365_97f8aa674fd9", "tls_client_ja3": "19e29534fd49dd27d09234e639c4057e", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge10nn0200_3ed38b250d3d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 57, "dest_bytes": 79, "network_bytes": 136, "event_summary": ""} +{"timestamp": "2026-08-28T23:20:12", "event_id": "780b0da8-8d0e-491e-bc98-65fada0ca8a0", "source_ip": "204.76.203.7", "source_port": 38596, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 32946, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-29T23:57:04", "event_id": "f9ef8784-29a3-44b0-970a-9274182163af", "source_ip": "176.65.149.230", "source_port": 51448, "source_domain": "176.65.149.230.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 55862, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 112000000, "source_bytes": 17, "dest_bytes": 14, "network_bytes": 31, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-29T23:46:59", "event_id": "dbe42850-4f3a-4277-a3b9-11f79a18a467", "source_ip": "204.76.203.4", "source_port": 1001, "source_domain": "204.76.203.4.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 25566, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 22, "dest_bytes": 12, "network_bytes": 34, "event_summary": "\u0013\u0000\ufffd\u0006\fslowstack.tv\u00059\u0001\u0001\u0000"} +{"timestamp": "2026-08-29T23:41:41", "event_id": "5a3e781d-cad0-4f95-9770-7cd692e72332", "source_ip": "204.76.203.4", "source_port": 1001, "source_domain": "204.76.203.4.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 25565, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 22, "dest_bytes": 12, "network_bytes": 34, "event_summary": "\u0013\u0000\ufffd\u0006\fslowstack.tv\u00059\u0001\u0001\u0000"} +{"timestamp": "2026-08-29T23:35:20", "event_id": "85c83f8d-66b3-480a-b7a0-e95ad2998aa4", "source_ip": "204.76.203.7", "source_port": 53070, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 31021, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-29T23:34:03", "event_id": "8a35e88c-c935-4408-8c38-e0c726a210b5", "source_ip": "204.76.203.7", "source_port": 54250, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 31021, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-29T23:33:33", "event_id": "f284dea0-1a6e-4fdd-a536-3fa200906877", "source_ip": "204.76.203.7", "source_port": 58524, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 31021, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-29T23:32:54", "event_id": "a8ed9650-ad75-45f2-a424-17fd481ae2dd", "source_ip": "204.76.203.7", "source_port": 37050, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 31021, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-29T23:32:27", "event_id": "8f16c9bc-e33f-42ce-b091-ae0e811696bb", "source_ip": "204.76.203.4", "source_port": 1001, "source_domain": "204.76.203.4.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 25564, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 22, "dest_bytes": 12, "network_bytes": 34, "event_summary": "\u0013\u0000\ufffd\u0006\fslowstack.tv\u00059\u0001\u0001\u0000"} +{"timestamp": "2026-08-29T23:32:20", "event_id": "96fcf4bf-e223-491d-b278-9bd31c2e073b", "source_ip": "176.65.149.220", "source_port": 52994, "source_domain": "176.65.149.220.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 43884, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 111000000, "source_bytes": 17, "dest_bytes": 14, "network_bytes": 31, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-29T23:32:14", "event_id": "6dd2ad8d-15ed-4fbc-9cf5-a3593e4caffb", "source_ip": "176.65.149.30", "source_port": 45310, "source_domain": "176.65.149.30.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 31843, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 110000000, "source_bytes": 17, "dest_bytes": 13, "network_bytes": 30, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-29T23:31:29", "event_id": "1160b7c4-0514-43b7-ab7c-728399dbeb0a", "source_ip": "204.76.203.7", "source_port": 36890, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 31021, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-29T23:30:57", "event_id": "bda4f5b2-a4d9-49ff-94d4-9e2d5f46716b", "source_ip": "204.76.203.7", "source_port": 37234, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 31021, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-29T23:18:30", "event_id": "b118e02d-a6ef-4e5f-aaf9-e340f8ece787", "source_ip": "204.76.203.4", "source_port": 1001, "source_domain": "204.76.203.4.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 25566, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 22, "dest_bytes": 12, "network_bytes": 34, "event_summary": "\u0013\u0000\ufffd\u0006\fslowstack.tv\u00059\u0001\u0001\u0000"} +{"timestamp": "2026-08-29T23:08:26", "event_id": "e25f6098-25fe-4c26-ad54-46fdc731dfff", "source_ip": "204.76.203.4", "source_port": 1001, "source_domain": "204.76.203.4.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 25565, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 22, "dest_bytes": 12, "network_bytes": 34, "event_summary": "\u0013\u0000\ufffd\u0006\fslowstack.tv\u00059\u0001\u0001\u0000"} +{"timestamp": "2026-08-29T23:00:22", "event_id": "483f3796-6844-4ebf-9f46-272eec87b86f", "source_ip": "176.65.148.29", "source_port": 39468, "source_domain": "176.65.148.29.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8332, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1, "dest_bytes": 13, "network_bytes": 14, "event_summary": "\n"} +{"timestamp": "2026-08-29T22:49:12", "event_id": "264aee5a-31aa-4971-86b6-474c8295f72d", "source_ip": "176.65.149.188", "source_port": 57780, "source_domain": "176.65.149.188.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 zgrab/0.x", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1909h2_9dc949149365_97f8aa674fd9", "tls_client_ja3": "7c1e207beb00684bbbe144f1b0abe1d5", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 177000000, "source_bytes": 110, "dest_bytes": 79, "network_bytes": 189, "event_summary": ""} +{"timestamp": "2026-08-29T22:39:47", "event_id": "627dd179-ed3a-4638-bc9d-b8c0a3a1e8e4", "source_ip": "204.76.203.7", "source_port": 40942, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 31033, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-29T22:39:13", "event_id": "228cfe17-e357-43cc-a06d-599b71df2aae", "source_ip": "204.76.203.7", "source_port": 39788, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 31033, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-29T22:38:30", "event_id": "c9e79f10-3259-4afe-ab14-1f3a201e5d76", "source_ip": "204.76.203.7", "source_port": 35354, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 31033, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-29T22:37:25", "event_id": "0e3b5db8-5273-4818-9ee4-e3ac616f8712", "source_ip": "204.76.203.7", "source_port": 39374, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 31033, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-30T23:58:03", "event_id": "d586dfc9-b588-430b-a135-a182e86e0277", "source_ip": "176.65.148.216", "source_port": 47356, "source_domain": "176.65.148.216.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 25565, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 3, "event_duration": 11622000000, "source_bytes": 63, "dest_bytes": 42, "network_bytes": 105, "event_summary": "\u0012\u0000/\f<HONEYPOT>c\ufffd\u0001\u0001\u0000"} +{"timestamp": "2026-08-30T23:56:23", "event_id": "ef67a074-0437-45e0-928f-f568456dedde", "source_ip": "176.65.134.52", "source_port": 61000, "source_domain": "176.65.134.52.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 25565, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 28, "dest_bytes": 13, "network_bytes": 41, "event_summary": "\u0019\u0000\ufffd\ufffd\ufffd\ufffd\u000f\u000flocalhost\u0000FORGE\u0000\u0000\u0002\u0001\u0000"} +{"timestamp": "2026-08-30T23:50:39", "event_id": "7a92bc60-cf1b-4b47-b13d-cef4fa0a584d", "source_ip": "176.65.149.27", "source_port": 53878, "source_domain": "176.65.149.27.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 37890, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 111000000, "source_bytes": 17, "dest_bytes": 13, "network_bytes": 30, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-30T23:49:37", "event_id": "d1b5c211-bc85-460a-b57b-4f7134e1eab2", "source_ip": "45.135.193.193", "source_port": 50530, "source_domain": "45.135.193.193.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8080, "network_protocol": "", "application_protocol": "http_connect", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 103000000, "source_bytes": 89, "dest_bytes": 14, "network_bytes": 103, "event_summary": "CONNECT httpbin.org:443 HTTP/1.1\r\nHost: httpbin.org:443\r\nProxy-Connection: keep-alive\r\n\r\n"} +{"timestamp": "2026-08-30T23:49:37", "event_id": "6a102f57-0420-48f5-a90a-317acf26b271", "source_ip": "45.135.193.193", "source_port": 53886, "source_domain": "45.135.193.193.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8000, "network_protocol": "", "application_protocol": "http_connect", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 103000000, "source_bytes": 89, "dest_bytes": 14, "network_bytes": 103, "event_summary": "CONNECT httpbin.org:443 HTTP/1.1\r\nHost: httpbin.org:443\r\nProxy-Connection: keep-alive\r\n\r\n"} +{"timestamp": "2026-08-30T23:49:37", "event_id": "611dc868-e77a-4c7f-ba29-681a769aadf4", "source_ip": "45.135.193.193", "source_port": 55976, "source_domain": "45.135.193.193.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 3128, "network_protocol": "", "application_protocol": "http_connect", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 103000000, "source_bytes": 89, "dest_bytes": 14, "network_bytes": 103, "event_summary": "CONNECT httpbin.org:443 HTTP/1.1\r\nHost: httpbin.org:443\r\nProxy-Connection: keep-alive\r\n\r\n"} +{"timestamp": "2026-08-30T23:49:37", "event_id": "39188b49-ed04-44cb-b697-4b2b210165e9", "source_ip": "45.135.193.193", "source_port": 35468, "source_domain": "45.135.193.193.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 81, "network_protocol": "", "application_protocol": "http_connect", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 102000000, "source_bytes": 89, "dest_bytes": 14, "network_bytes": 103, "event_summary": "CONNECT httpbin.org:443 HTTP/1.1\r\nHost: httpbin.org:443\r\nProxy-Connection: keep-alive\r\n\r\n"} +{"timestamp": "2026-08-30T23:49:37", "event_id": "1621605d-4e73-4cdd-b788-5d33a8a0b9d4", "source_ip": "45.135.193.193", "source_port": 40694, "source_domain": "45.135.193.193.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 443, "network_protocol": "", "application_protocol": "http_connect", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 102000000, "source_bytes": 89, "dest_bytes": 14, "network_bytes": 103, "event_summary": "CONNECT httpbin.org:443 HTTP/1.1\r\nHost: httpbin.org:443\r\nProxy-Connection: keep-alive\r\n\r\n"} +{"timestamp": "2026-08-30T23:49:37", "event_id": "519daa90-bf5e-4725-a602-f15364ad8660", "source_ip": "45.135.193.193", "source_port": 48494, "source_domain": "45.135.193.193.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8081, "network_protocol": "", "application_protocol": "http_connect", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 89, "dest_bytes": 14, "network_bytes": 103, "event_summary": "CONNECT httpbin.org:443 HTTP/1.1\r\nHost: httpbin.org:443\r\nProxy-Connection: keep-alive\r\n\r\n"} +{"timestamp": "2026-08-30T23:49:37", "event_id": "ae44e151-dd83-4b41-a72d-36580ab49b05", "source_ip": "45.135.193.193", "source_port": 53046, "source_domain": "45.135.193.193.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 8888, "network_protocol": "", "application_protocol": "http_connect", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 89, "dest_bytes": 14, "network_bytes": 103, "event_summary": "CONNECT httpbin.org:443 HTTP/1.1\r\nHost: httpbin.org:443\r\nProxy-Connection: keep-alive\r\n\r\n"} +{"timestamp": "2026-08-30T23:49:37", "event_id": "fc29ddd5-3014-4157-b14e-75ed4a98bb1f", "source_ip": "45.135.193.193", "source_port": 54912, "source_domain": "45.135.193.193.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "Langen", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 80, "network_protocol": "", "application_protocol": "http_connect", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 89, "dest_bytes": 14, "network_bytes": 103, "event_summary": "CONNECT httpbin.org:443 HTTP/1.1\r\nHost: httpbin.org:443\r\nProxy-Connection: keep-alive\r\n\r\n"} +{"timestamp": "2026-08-30T23:38:41", "event_id": "0f5050ec-8965-42ee-972d-758e8cb3abf6", "source_ip": "204.76.203.4", "source_port": 1001, "source_domain": "204.76.203.4.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 25565, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 22, "dest_bytes": 12, "network_bytes": 34, "event_summary": "\u0013\u0000\ufffd\u0006\fslowstack.tv\u00059\u0001\u0001\u0000"} +{"timestamp": "2026-08-30T23:31:29", "event_id": "29ba20fc-94e3-42b6-a925-ba0859a8c7a9", "source_ip": "204.76.203.4", "source_port": 1001, "source_domain": "204.76.203.4.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 25565, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 22, "dest_bytes": 12, "network_bytes": 34, "event_summary": "\u0013\u0000\ufffd\u0006\fslowstack.tv\u00059\u0001\u0001\u0000"} +{"timestamp": "2026-08-30T23:30:03", "event_id": "3b77ef29-b1b4-4e18-9264-66cb09eca7e3", "source_ip": "176.65.149.30", "source_port": 43164, "source_domain": "176.65.149.30.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 31865, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 111000000, "source_bytes": 17, "dest_bytes": 13, "network_bytes": 30, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-30T23:27:18", "event_id": "b9eaf444-c1cc-4ce6-9248-b6190214e0f3", "source_ip": "176.65.148.216", "source_port": 44976, "source_domain": "176.65.148.216.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 25565, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 3, "event_duration": 11324000000, "source_bytes": 66, "dest_bytes": 42, "network_bytes": 108, "event_summary": "\u0013\u0000/\r<HONEYPOT>c\ufffd\u0001\u0001\u0000"} +{"timestamp": "2026-08-30T23:23:59", "event_id": "b350e5ae-b4ce-4f41-ae0b-bf4fd1ff35b4", "source_ip": "204.76.203.7", "source_port": 60716, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 30001, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-31T10:43:09", "event_id": "261bac8f-b434-4775-9469-033253e16354", "source_ip": "204.76.203.4", "source_port": 1001, "source_domain": "204.76.203.4.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 25566, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 22, "dest_bytes": 12, "network_bytes": 34, "event_summary": "\u0013\u0000\ufffd\u0006\fslowstack.tv\u00059\u0001\u0001\u0000"} +{"timestamp": "2026-08-31T10:25:02", "event_id": "db024493-739c-41cc-8486-d94c721a0ad1", "source_ip": "176.65.149.30", "source_port": 45182, "source_domain": "176.65.149.30.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 31875, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 111000000, "source_bytes": 17, "dest_bytes": 13, "network_bytes": 30, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-31T10:24:35", "event_id": "efd18c3a-03db-4e87-8744-552c8760d15d", "source_ip": "204.76.203.4", "source_port": 1001, "source_domain": "204.76.203.4.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 25564, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 22, "dest_bytes": 12, "network_bytes": 34, "event_summary": "\u0013\u0000\ufffd\u0006\fslowstack.tv\u00059\u0001\u0001\u0000"} +{"timestamp": "2026-08-31T10:10:15", "event_id": "c80e5cf1-eb71-4e33-8e5b-86e370a249a4", "source_ip": "204.76.203.7", "source_port": 47422, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 27202, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-31T10:09:59", "event_id": "e82b395d-18f1-4199-b8ce-9295ef904cc4", "source_ip": "204.76.203.7", "source_port": 52286, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 27202, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-31T10:08:59", "event_id": "a4f278ab-932f-4370-a204-45d4401af673", "source_ip": "204.76.203.7", "source_port": 54960, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 27202, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 3, "dest_bytes": 12, "network_bytes": 15, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-31T10:08:26", "event_id": "1cda1873-7f0e-43c1-a058-94f0bcf1f491", "source_ip": "176.65.148.71", "source_port": 38222, "source_domain": "176.65.148.71.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 80, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36", "url_path": "/.env.json", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0500_d3a2dcb1cd63", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 219, "dest_bytes": 78, "network_bytes": 297, "event_summary": ""} +{"timestamp": "2026-08-31T10:08:26", "event_id": "006190cf-fb35-4959-b671-809b93566e3b", "source_ip": "176.65.148.71", "source_port": 38208, "source_domain": "176.65.148.71.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 80, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36", "url_path": "/.env", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0500_d3a2dcb1cd63", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 214, "dest_bytes": 78, "network_bytes": 292, "event_summary": ""} +{"timestamp": "2026-08-31T10:08:00", "event_id": "5c64e472-ebca-4f8e-a9af-f1c3f2f16343", "source_ip": "204.76.203.7", "source_port": 57002, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 27202, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-31T10:07:44", "event_id": "dc937180-b38e-4b4e-9f6d-8a14fe1cbcf4", "source_ip": "204.76.203.7", "source_port": 36570, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 27202, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-31T10:06:46", "event_id": "75617d6e-f963-40a0-bc37-b11e7ac403c0", "source_ip": "204.76.203.7", "source_port": 59020, "source_domain": "204.76.203.7.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 27202, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://azenv.net/", "url_domain": "azenv.net", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 125, "dest_bytes": 77, "network_bytes": 202, "event_summary": ""} +{"timestamp": "2026-08-31T10:05:05", "event_id": "a63203d8-649d-4653-a038-84c3a0a6f1fc", "source_ip": "204.76.203.4", "source_port": 1001, "source_domain": "204.76.203.4.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 25566, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 22, "dest_bytes": 12, "network_bytes": 34, "event_summary": "\u0013\u0000\ufffd\u0006\fslowstack.tv\u00059\u0001\u0001\u0000"} +{"timestamp": "2026-08-31T09:55:40", "event_id": "03ec16ca-4f97-4335-b3c0-a37c81add734", "source_ip": "204.76.203.4", "source_port": 1001, "source_domain": "204.76.203.4.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 25565, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 22, "dest_bytes": 12, "network_bytes": 34, "event_summary": "\u0013\u0000\ufffd\u0006\fslowstack.tv\u00059\u0001\u0001\u0000"} +{"timestamp": "2026-08-31T09:52:59", "event_id": "e412f84c-4002-44aa-82cb-e7e926f4e5a8", "source_ip": "77.83.39.94", "source_port": 34432, "source_domain": "", "country_code": "UA", "country_name": "Ukraine", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36", "url_path": "/.git/index", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i251000_b78ed14e2fd0_ab7e3b40a677", "tls_client_ja3": "416eca07dcaad72dec6f76d1277b3eff", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 233, "dest_bytes": 76, "network_bytes": 309, "event_summary": ""} +{"timestamp": "2026-08-31T09:52:45", "event_id": "18afd64e-84f7-41ec-a5eb-592973fe041d", "source_ip": "176.65.149.31", "source_port": 44374, "source_domain": "176.65.149.31.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 1783, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 327000000, "source_bytes": 17, "dest_bytes": 13, "network_bytes": 30, "event_summary": "SSH-2.0-OpenSSH\r\n"} +{"timestamp": "2026-08-31T09:49:31", "event_id": "a5f3fd2d-af30-4ffc-9edb-dde23d7634f3", "source_ip": "45.135.194.113", "source_port": 49512, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 90, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 3, "dest_bytes": 14, "network_bytes": 17, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-31T09:49:31", "event_id": "f7f10856-1878-4128-8696-20a68d792250", "source_ip": "45.135.194.113", "source_port": 49510, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 90, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://proxy.flarevpn.digital:8080/judge", "url_domain": "proxy.flarevpn.digital", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 166, "dest_bytes": 79, "network_bytes": 245, "event_summary": ""} +{"timestamp": "2026-08-31T09:49:31", "event_id": "11ce79d5-cff5-41ea-9713-82a0ee8995a5", "source_ip": "45.135.194.113", "source_port": 49490, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 90, "network_protocol": "", "application_protocol": "socks5", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 103000000, "source_bytes": 3, "dest_bytes": 14, "network_bytes": 17, "event_summary": "\u0005\u0001\u0000"} +{"timestamp": "2026-08-31T09:49:31", "event_id": "1662863c-a4bb-4d81-97a8-5e0e4243cffb", "source_ip": "45.135.194.113", "source_port": 49500, "source_domain": "45.135.194.113.ptr.pfcloud.network", "country_code": "DE", "country_name": "Germany", "city_name": "", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 90, "network_protocol": "", "application_protocol": "http_proxy", "http_method": "GET", "user_agent": "Go-http-client/1.1", "url_path": "http://proxy.flarevpn.digital:8080/judge", "url_domain": "proxy.flarevpn.digital", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 166, "dest_bytes": 79, "network_bytes": 245, "event_summary": ""} +{"timestamp": "2026-08-31T09:31:17", "event_id": "e80395a4-0478-4815-8592-f886486dabde", "source_ip": "204.76.203.4", "source_port": 1001, "source_domain": "204.76.203.4.ptr.pfcloud.network", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Eygelshoven", "asn_number": 51396, "asn_org": "Pfcloud UG (haftungsbeschrankt)", "dest_port": 25566, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 22, "dest_bytes": 12, "network_bytes": 34, "event_summary": "\u0013\u0000\ufffd\u0006\fslowstack.tv\u00059\u0001\u0001\u0000"} diff --git a/kevlar/2026-08-31/honeylabs/events-AS51852.ndjson b/kevlar/2026-08-31/honeylabs/events-AS51852.ndjson new file mode 100644 index 0000000..a7bc138 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS51852.ndjson @@ -0,0 +1,102 @@ +{"timestamp": "2026-08-24T22:38:47", "event_id": "371bef04-db65-47b8-a743-bf7b97fb9b76", "source_ip": "81.17.28.131", "source_port": 54774, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 141, "dest_bytes": 77, "network_bytes": 218, "event_summary": ""} +{"timestamp": "2026-08-24T22:38:47", "event_id": "ab8b6e0d-4c0e-41ad-a463-05282febee82", "source_ip": "81.17.28.131", "source_port": 49070, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T20:32:32", "event_id": "ae0ceca9-c273-44ad-b551-d114c3d297ca", "source_ip": "81.17.28.131", "source_port": 34620, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\u0000\"\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T15:31:30", "event_id": "113a91e4-8546-4ae9-8f46-065c9efd5a5d", "source_ip": "81.17.28.131", "source_port": 35958, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-24T15:31:29", "event_id": "70c215a8-a3aa-40b7-9e7a-be0a2880ac83", "source_ip": "81.17.28.131", "source_port": 40214, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T04:10:49", "event_id": "dfea8ef9-5f02-4c9d-afad-ea00f10ea11e", "source_ip": "141.255.165.67", "source_port": 35344, "source_domain": "cryptodocuments.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T04:10:19", "event_id": "824be3d2-25e8-4856-96f3-e09190eaece2", "source_ip": "141.255.165.67", "source_port": 57400, "source_domain": "cryptodocuments.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T04:07:48", "event_id": "a1dcd8de-760d-44ac-add6-377cc5221d51", "source_ip": "141.255.165.68", "source_port": 16960, "source_domain": "eternalpink.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T04:07:17", "event_id": "17872c66-e089-48fa-bb92-ab9ececf177f", "source_ip": "141.255.165.68", "source_port": 39966, "source_domain": "eternalpink.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T03:59:47", "event_id": "98974ba8-a9d7-470f-9675-a51c7b36ee52", "source_ip": "81.17.28.131", "source_port": 43566, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\ufffd\ufffd\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T03:14:20", "event_id": "0587f561-dd87-4a6b-9315-52cefaf64fca", "source_ip": "81.17.28.131", "source_port": 60568, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-24T03:14:20", "event_id": "7e106fb8-2915-4f34-bb6c-4aeff2e12bb1", "source_ip": "81.17.28.131", "source_port": 35932, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T02:23:36", "event_id": "cf72479e-2131-4957-9c59-045cdba5ca17", "source_ip": "81.17.28.131", "source_port": 38260, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000d\u001f\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T01:47:34", "event_id": "671ab189-de08-4d42-89ba-825a550ff4b5", "source_ip": "81.17.28.131", "source_port": 48512, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 141, "dest_bytes": 77, "network_bytes": 218, "event_summary": ""} +{"timestamp": "2026-08-24T01:47:33", "event_id": "6ba33f84-9131-4023-a549-d0eb1cb2421c", "source_ip": "81.17.28.131", "source_port": 57806, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T00:18:35", "event_id": "c8be86a4-f5d4-404e-b18b-beaad81fcbce", "source_ip": "81.17.28.131", "source_port": 48932, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-24T00:18:35", "event_id": "84aedd37-d285-4aa9-877a-219c961e3f71", "source_ip": "81.17.28.131", "source_port": 41092, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-25T17:51:25", "event_id": "429036e0-e82e-4ad5-94ae-2a7ddc7c6db0", "source_ip": "81.17.28.131", "source_port": 37162, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000TN\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-25T15:52:04", "event_id": "68e7553e-a190-4da6-91a2-9baa78447bdf", "source_ip": "81.17.28.131", "source_port": 39048, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 141, "dest_bytes": 77, "network_bytes": 218, "event_summary": ""} +{"timestamp": "2026-08-25T15:52:03", "event_id": "2be6eef2-3189-4be0-aaa1-57f92e700f0e", "source_ip": "81.17.28.131", "source_port": 44962, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-25T11:10:56", "event_id": "8cd3e138-4531-4c84-8be1-7386d9c584f4", "source_ip": "81.17.28.131", "source_port": 53886, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\ufffd\ufffd\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-25T05:37:54", "event_id": "07377bdb-596f-4650-bc29-06ac5fea7171", "source_ip": "81.17.28.131", "source_port": 50356, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-25T05:37:54", "event_id": "554df08b-8f8d-44c7-8ed4-981a468ce4db", "source_ip": "81.17.28.131", "source_port": 46344, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-25T05:23:37", "event_id": "074aa45b-8f78-4bb6-b7f9-3f9f83ba380b", "source_ip": "81.17.28.131", "source_port": 52578, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-25T05:23:36", "event_id": "a487ed40-8666-4827-a383-b4a1f4ad78b1", "source_ip": "81.17.28.131", "source_port": 42546, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-25T02:56:09", "event_id": "00048738-62f0-479d-9f6f-3e9b55e8e73b", "source_ip": "81.17.28.131", "source_port": 39456, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-25T02:56:09", "event_id": "f7c5b723-0c42-4baa-a17d-a73223fce136", "source_ip": "81.17.28.131", "source_port": 55552, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-25T02:20:29", "event_id": "8e8703a6-8990-431c-a59c-74fc198049da", "source_ip": "81.17.28.131", "source_port": 37222, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000:\ufffd\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T17:43:04", "event_id": "2512e47b-8ca7-41f5-b75d-7c9a89f11d95", "source_ip": "81.17.28.131", "source_port": 60562, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 141, "dest_bytes": 77, "network_bytes": 218, "event_summary": ""} +{"timestamp": "2026-08-26T17:43:04", "event_id": "23f126bd-9bf9-4249-aea0-f967f8768bbb", "source_ip": "81.17.28.131", "source_port": 48944, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T15:42:53", "event_id": "be54c583-e9f8-47b7-9540-e62e6a6cfc7a", "source_ip": "81.17.28.131", "source_port": 43156, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-26T15:42:52", "event_id": "137519ba-e41b-4247-8bdf-82fdebc23480", "source_ip": "81.17.28.131", "source_port": 44136, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T14:25:33", "event_id": "073364f4-9d9e-4dd8-abc5-832cf89cc230", "source_ip": "81.17.28.131", "source_port": 48414, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-26T14:25:32", "event_id": "c2188237-fed7-4b54-b159-2d4b1ebdc2df", "source_ip": "81.17.28.131", "source_port": 46214, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T10:15:41", "event_id": "03c191c2-09ff-45dc-ac19-efab2d518b32", "source_ip": "81.17.28.131", "source_port": 58074, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 141, "dest_bytes": 77, "network_bytes": 218, "event_summary": ""} +{"timestamp": "2026-08-26T10:15:41", "event_id": "a98706ce-a7c9-4574-a8ac-e4b443c9bc6e", "source_ip": "81.17.28.131", "source_port": 33198, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T10:15:40", "event_id": "fd6e4107-d00c-4bde-84f3-25ade62bbcf4", "source_ip": "81.17.28.131", "source_port": 42320, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\ufffd\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T07:37:48", "event_id": "cee7a657-555e-4c89-95d6-117296f9b38e", "source_ip": "81.17.28.131", "source_port": 52306, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\ufffdY\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T02:14:22", "event_id": "b93f25e7-d60f-4fc8-8406-94d2f1a0de5f", "source_ip": "81.17.28.131", "source_port": 37002, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-26T02:14:22", "event_id": "ec804f99-7c27-4d4a-a16c-2b47c278ab56", "source_ip": "81.17.28.131", "source_port": 43626, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-27T20:52:20", "event_id": "ba16c52b-0198-4f7d-ab19-8e943e550a74", "source_ip": "81.17.28.131", "source_port": 52122, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-27T20:52:20", "event_id": "4c46aff4-a54d-4fae-be44-f20ec0f8ac5a", "source_ip": "81.17.28.131", "source_port": 34892, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-27T19:19:46", "event_id": "2e80af64-c265-4bc8-b545-6051a9f502df", "source_ip": "81.17.28.131", "source_port": 47292, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 141, "dest_bytes": 77, "network_bytes": 218, "event_summary": ""} +{"timestamp": "2026-08-27T19:19:45", "event_id": "aa4ac488-7c52-472d-8c86-50163a188a4d", "source_ip": "81.17.28.131", "source_port": 46018, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-27T18:14:42", "event_id": "ddc10565-f577-434c-bfc9-b431fe92d429", "source_ip": "185.12.44.133", "source_port": 62599, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 39131, "network_protocol": "", "application_protocol": "bittorrent", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 135, "dest_bytes": 13, "network_bytes": 148, "event_summary": "\ufffd\ufffd_\ufffd\ufffdI]\ufffd\ufffdK\u0001\ufffd@\ufffd\ufffdV/S\ufffdm lgu\ufffd\ufffd\u022b\u060e\r\ufffd\ufffd\ufffdK8pd\ufffd\ufffdU\ufffd\ufffd\ufffd\fw\u0000>Hz\u0234|\u0013iy\thE!\n\ufffdD\u007f\ufffd%'$0\ufffd\ufffd[i\r,\ufffd\ufffd\u001f$\ufffdu\ufffdg\ufffd\ufffd\ufffd\ufffdc\ufffd\ufffd\ufffd\ufffd\ufffd\ufffdo\ufffd\ufffdla'd1\n}\ufffd\ufffd+f\ufffd\ufffd\ufffdh\ufffd\ufffd]\u000f\ufffd\u000f\ufffd\u0011X\ufffdH\ufffdfn\u0001U\u0002*\ufffd\ufffd&;!"} +{"timestamp": "2026-08-27T18:13:10", "event_id": "b9a9db0f-5c56-4a00-9e8f-72ab8c6232a3", "source_ip": "185.12.44.133", "source_port": 60585, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 39131, "network_protocol": "", "application_protocol": "bittorrent", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 68, "dest_bytes": 13, "network_bytes": 81, "event_summary": "\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b\ufffdR\u001f\ufffd\u01b8N\ufffd\u0011\ufffdY\ufffdq\u0017\u007f|O\ufffd<-UW1605-FPwfkjsgA!ei"} +{"timestamp": "2026-08-27T18:12:58", "event_id": "8303f69b-c5c6-48ea-8cab-8bf14f4fc728", "source_ip": "185.12.44.133", "source_port": 49065, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 39131, "network_protocol": "", "application_protocol": "bittorrent", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 583, "dest_bytes": 13, "network_bytes": 596, "event_summary": "i\u00b3\ufffdk\ufffd`\ufffd@G;\ufffd\ufffd6\u001fQ\ufffd\ufffd\u0002\u0014\ufffd\ufffd\ufffd~\ufffd,y\ufffdZ\ufffdO\u0f11\ufffd\ufffd:{l\ufffd\u0423\ufffdf(\ufffd\ufffd\u0013\ufffd\ufffd\ufffd\ufffdq\ufffd\ufffd\u0394\ufffd\u0007uM\ufffd\u0002\u5d6a\ufffd3(\u0005Y\u0010\ufffd\ufffd4\ufffd\ufffd2\ufffd\ufffd^b\ufffdp\ufffdq\ufffd\ufffd\ufffd\u001bX\u000fq\ufffdy\u0004J\ufffd\ufffd1\u0011\ufffdE?F\r.\ufffd\u007fp\u000eF\ufffdFWQC\u0003\ufffd\ufffd\ufffd6\ufffd\u0017\ufffd!\ufffd\u0000\u000f\ufffd\ufffd4\ufffdi\ufffdEL\ufffd1\ufffd\ufffd\ufffd)\u0017\ufffd\ufffd\ufffdC\ufffd\ufffd\u0013\ufffd]7N\ufffd\ufffd\u0003\ufffd\u0153\ufffd\ufffdq\ufffd\u0003)|!\ufffd\u000f\ufffdE\u0013\u0489\ufffd\ufffdp\ufffd{7\ufffd\r(U\u0001\r8\ufffd\ufffdt\t\ufffd\ufffd-\ufffd\u000fI\ufffd\ufffd\ufffd\ufffd\ufffd\"\u0017\u0017\u001b\ufffd\u0014\ufffd\ufffd\ufffd1\ufffd\ufffdv\ufffd\ufffd\ufffd\u0017\u0228\ufffdE\ufffd-g\u107dD`\ufffd\u001agi\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\u05b2@\ufffd\ufffd\ufffd\ufffd\ufffd\"\n\u01f2#P\u00b9\u0005\u03d7W\u0003\u000f\ufffd\ufffd\u00cbi\ufffd\ufffd\ufffd\ufffd\ufffdv\ufffdt\u05a7\\\u025d\u00ef$!\ufffd\ufffd\ufffd\ufffd\ufffd&\f\\\ufffd\ufffd\u0014uE\ufffd\u0005,$+\ufffd\ufffd\ufffd9\ufffdp_U\ufffdx\ufffd\ufffd-\u0019\ufffd:\ufffd\ufffdp\ufffd\ufffd\ufffd=\u0005\ufffdZ\u0012\ufffd.\r\ufffd\ufffdf\u0015\u0018\n\ufffd\ufffd\ufffd\ufffd>y\ufffd\ufffdy\u001c\ufffd\u0014\ufffdG\ufffd\u001dW\ufffdC\ufffdj\fhr\u068e\ufffd\ufffd\ufffd\ufffd\u06af\u0633C\ufffd\ufffd\u05df\ufffdw\ufffd\ufffd\u001fd\ufffdpf'[+U\ufffd=\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd,\ufffd\ufffd\u0011kx\ufffd\ufffdv<\ufffd\ufffd=\ufffd\u00194o!hH\ufffd\ufffd\ufffd$h\ufffd\ufffd\ufffd\ufffd\u0003{\ufffdf\ufffd3\u000f]\ufffd\ufffd\u001e\ufffd\u0016E.q\ufffd2\ufffd9#\ufffd\ufffd\ufffd\ufffd\"kCl\u001dy\ufffd\ufffdy-o\ufffd\ufffd\ufffd\u007f\ufffd\\\ufffd\ufffd\ufffd0I\ufffdu\ufffd\u0014\ufffd\ufffdul\ufffd\ufffd(x\u03d9N\ufffd\ufffd8\ufffd\u0017\ufffd\ufffd\u001c\ufffd\ufffd\ufffdaR:\ufffd\ufffd\u001d\u007f\ufffd# \u0006\u033b\ufffd\ufffd\u0368\ufffd\u0399\ufffd\ufffd\u001bX|\ufffd4GA\ufffd\u06f19\ufffd\u001e\ufffd\ufffdIM[\u001dQ\u0017EONL0#\ufffd\ufffd\r\ufffd%y\ufffd\u033c\ufffd0\ufffd\u0007\ufffdJ\ufffd\ufffd\"1\ufffd^\ufffd \ufffdji\ufffd"} +{"timestamp": "2026-08-27T18:11:27", "event_id": "24b01feb-5247-4983-ac70-fe59f53e540d", "source_ip": "185.12.44.133", "source_port": 59853, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 39131, "network_protocol": "", "application_protocol": "bittorrent", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 68, "dest_bytes": 13, "network_bytes": 81, "event_summary": "\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b\ufffdR\u001f\ufffd\u01b8N\ufffd\u0011\ufffdY\ufffdq\u0017\u007f|O\ufffd<-UW1605-C~o~sOWdmI36"} +{"timestamp": "2026-08-27T15:44:48", "event_id": "24d5a369-2d61-481e-a11b-b06710546cb7", "source_ip": "179.43.150.26", "source_port": 40646, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 9000, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0", "url_path": "/z535", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9000\",\"user-agent\":\"Mozilla/5.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0300_341eb0d8946c", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 759000000, "source_bytes": 344, "dest_bytes": 312, "network_bytes": 656, "event_summary": ""} +{"timestamp": "2026-08-27T15:44:48", "event_id": "9e6c928f-a568-4724-a26d-59a042e7c8ab", "source_ip": "179.43.150.26", "source_port": 63056, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 9000, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0", "url_path": "/z5006", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9000\",\"user-agent\":\"Mozilla/5.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0300_341eb0d8946c", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 767000000, "source_bytes": 345, "dest_bytes": 312, "network_bytes": 657, "event_summary": ""} +{"timestamp": "2026-08-27T15:43:20", "event_id": "8fb96a2a-4400-478c-a460-190345b39eaa", "source_ip": "179.43.150.26", "source_port": 59892, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 9000, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0", "url_path": "/z60", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9000\",\"user-agent\":\"Mozilla/5.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0300_341eb0d8946c", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 502000000, "source_bytes": 347, "dest_bytes": 312, "network_bytes": 659, "event_summary": ""} +{"timestamp": "2026-08-28T17:40:22", "event_id": "c4cab9e6-1a2e-421d-a506-18f377a0c786", "source_ip": "81.17.28.131", "source_port": 42854, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 141, "dest_bytes": 77, "network_bytes": 218, "event_summary": ""} +{"timestamp": "2026-08-28T17:40:22", "event_id": "610ab232-5a49-4834-9019-69c46abc1932", "source_ip": "81.17.28.131", "source_port": 33694, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T17:07:15", "event_id": "beff14a7-b070-4be8-a685-c71fff164315", "source_ip": "141.255.165.68", "source_port": 35628, "source_domain": "eternalpink.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T17:06:45", "event_id": "e1b3c2d0-2698-46d8-89c0-93372a136603", "source_ip": "141.255.165.68", "source_port": 39708, "source_domain": "eternalpink.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T16:59:21", "event_id": "a06b656b-21fc-4955-bb76-0186811323c0", "source_ip": "81.17.28.131", "source_port": 32856, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-28T16:59:21", "event_id": "2b083ca6-c847-4fe7-b459-06206c64e7a4", "source_ip": "81.17.28.131", "source_port": 55462, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T15:51:00", "event_id": "de46d871-8984-4c93-a941-d2a863822a80", "source_ip": "81.17.28.131", "source_port": 41614, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000[\ufffd\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T13:47:51", "event_id": "d53c7745-a420-4f94-9e03-6457a31268b3", "source_ip": "81.17.28.131", "source_port": 51772, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\ufffd&\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T08:54:42", "event_id": "ecf44ee2-6527-4a18-b5f0-cdea01117913", "source_ip": "179.43.150.26", "source_port": 42332, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 9090, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0", "url_path": "/z2565", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9090\",\"user-agent\":\"Mozilla/5.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0300_341eb0d8946c", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 638000000, "source_bytes": 353, "dest_bytes": 312, "network_bytes": 665, "event_summary": ""} +{"timestamp": "2026-08-28T08:34:33", "event_id": "4adbbfb2-8574-43b7-af73-c0108d8f3b4b", "source_ip": "179.43.150.26", "source_port": 64360, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 9090, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0", "url_path": "/z3145", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9090\",\"user-agent\":\"Mozilla/5.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0300_341eb0d8946c", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 764000000, "source_bytes": 345, "dest_bytes": 312, "network_bytes": 657, "event_summary": ""} +{"timestamp": "2026-08-28T08:34:33", "event_id": "09fe775c-dc3a-4597-b5c5-45db1ab76e14", "source_ip": "179.43.150.26", "source_port": 43112, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 9090, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0", "url_path": "/z1271", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9090\",\"user-agent\":\"Mozilla/5.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0300_341eb0d8946c", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 772000000, "source_bytes": 345, "dest_bytes": 312, "network_bytes": 657, "event_summary": ""} +{"timestamp": "2026-08-29T23:53:37", "event_id": "bd6ab41f-7359-4f7e-b0da-c5d227a2a3ba", "source_ip": "179.43.167.2", "source_port": 23174, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1067, "dest_bytes": 12, "network_bytes": 1079, "event_summary": "INVITE sip:0013908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:23174;branch=z9hG4bK-524287-1---05aa8cbb53043f6d\r\nFrom: <sip:%40@<HONEYPOT>>;tag=48c88107\r\nTo: <sip:0013908351673002@<HONEYPOT>:5060>\r\nCall-ID: Jblk9d2dKb1Oz0YDfPliP6..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:23174>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T23:45:34", "event_id": "7ebbb8d0-f437-46c7-9519-c412f2212881", "source_ip": "179.43.167.2", "source_port": 18396, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:0013908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:18396;branch=z9hG4bK-524287-1---b27b2f003ad947fb\r\nFrom: <sip:%40@<HONEYPOT>>;tag=c9c8c4e0\r\nTo: <sip:0013908351673002@<HONEYPOT>:5060>\r\nCall-ID: GXZJPSoc7R5HfZBG2oEQLO..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:18396>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T23:36:28", "event_id": "0d4ea4f2-f1a1-43cb-81c5-361edb94c3e9", "source_ip": "179.43.167.2", "source_port": 30386, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1067, "dest_bytes": 12, "network_bytes": 1079, "event_summary": "INVITE sip:0123908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:30386;branch=z9hG4bK-524287-1---adede0b1011557e0\r\nFrom: <sip:%40@<HONEYPOT>>;tag=227ca909\r\nTo: <sip:0123908351673002@<HONEYPOT>:5060>\r\nCall-ID: grQc3QfxDnjgtze0yDlLGH..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:30386>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T23:28:24", "event_id": "96b90b03-7ee6-456b-8b86-d4dfae1b4811", "source_ip": "179.43.167.2", "source_port": 60854, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:0123908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:60854;branch=z9hG4bK-524287-1---17b5c10b8dc9ddb7\r\nFrom: <sip:%40@<HONEYPOT>>;tag=2512a90f\r\nTo: <sip:0123908351673002@<HONEYPOT>:5060>\r\nCall-ID: ckm5WHhnIg1LTZZezYiji7..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:60854>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T23:19:17", "event_id": "1b406ef5-fec2-4e3f-a84d-1464a0dd5734", "source_ip": "179.43.167.2", "source_port": 46232, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1067, "dest_bytes": 12, "network_bytes": 1079, "event_summary": "INVITE sip:0103908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:46232;branch=z9hG4bK-524287-1---865d971970b8b82d\r\nFrom: <sip:%40@<HONEYPOT>>;tag=c87a580f\r\nTo: <sip:0103908351673002@<HONEYPOT>:5060>\r\nCall-ID: 4U95dNXLCnvjyaMaJ0HGeX..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:46232>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T23:11:13", "event_id": "87927cb6-d040-4853-9812-52c55c2db8f2", "source_ip": "179.43.167.2", "source_port": 57402, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:0103908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:57402;branch=z9hG4bK-524287-1---65e8411eb928e0c3\r\nFrom: <sip:%40@<HONEYPOT>>;tag=da5e08c6\r\nTo: <sip:0103908351673002@<HONEYPOT>:5060>\r\nCall-ID: o7KK745itMGt9PfzIyG00K..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:57402>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T23:02:06", "event_id": "33e829a7-855c-400a-90c3-f156b400b775", "source_ip": "179.43.167.2", "source_port": 64538, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1069, "dest_bytes": 12, "network_bytes": 1081, "event_summary": "INVITE sip:00113908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:64538;branch=z9hG4bK-524287-1---7674b6098e2d941e\r\nFrom: <sip:%40@<HONEYPOT>>;tag=9c9d709a\r\nTo: <sip:00113908351673002@<HONEYPOT>:5060>\r\nCall-ID: 7QFwff1dXnMJDnpHEJn8Mk..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:64538>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T22:54:01", "event_id": "2c004bbb-951d-4f08-8f4c-85e23dc85022", "source_ip": "179.43.167.2", "source_port": 23658, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1073, "dest_bytes": 12, "network_bytes": 1085, "event_summary": "INVITE sip:00113908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:23658;branch=z9hG4bK-524287-1---ce92000b3b41920f\r\nFrom: <sip:%40@<HONEYPOT>>;tag=8cc3f9c9\r\nTo: <sip:00113908351673002@<HONEYPOT>:5060>\r\nCall-ID: pEUTZk4f49isVZaYeUhcG5..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:23658>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T22:44:52", "event_id": "bec003ef-34fd-4b2d-80d5-45496c723223", "source_ip": "179.43.167.2", "source_port": 22292, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1067, "dest_bytes": 12, "network_bytes": 1079, "event_summary": "INVITE sip:8103908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:22292;branch=z9hG4bK-524287-1---f0e4233fc6f83e9b\r\nFrom: <sip:%40@<HONEYPOT>>;tag=d7b7485a\r\nTo: <sip:8103908351673002@<HONEYPOT>:5060>\r\nCall-ID: Zm8jq9H3n9D3wwpfhcEept..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:22292>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T22:36:47", "event_id": "6e248050-8505-4155-866d-0eaf59b1a1cd", "source_ip": "179.43.167.2", "source_port": 28724, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:8103908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:28724;branch=z9hG4bK-524287-1---b03867f4fe1b93a9\r\nFrom: <sip:%40@<HONEYPOT>>;tag=0149221f\r\nTo: <sip:8103908351673002@<HONEYPOT>:5060>\r\nCall-ID: n8EV1zzjyOkWm4Y8Q756zs..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:28724>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T22:27:39", "event_id": "439f7680-cca1-4178-b141-29dcfd5f29d2", "source_ip": "179.43.167.2", "source_port": 1382, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1065, "dest_bytes": 12, "network_bytes": 1077, "event_summary": "INVITE sip:0003908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:1382;branch=z9hG4bK-524287-1---d632a1c303d8a2cb\r\nFrom: <sip:%40@<HONEYPOT>>;tag=72ca8833\r\nTo: <sip:0003908351673002@<HONEYPOT>:5060>\r\nCall-ID: zJenhRsRlbTCLNcuIZNfm2..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:1382>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T22:19:35", "event_id": "d2669f91-15b3-437c-8bb6-5a6e1eeb956b", "source_ip": "179.43.167.2", "source_port": 54284, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:0003908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:54284;branch=z9hG4bK-524287-1---d16e8a8ff1aadf3a\r\nFrom: <sip:%40@<HONEYPOT>>;tag=6259ef10\r\nTo: <sip:0003908351673002@<HONEYPOT>:5060>\r\nCall-ID: nyxeFXxKNs4wtFmXPJlNA6..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:54284>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T22:10:27", "event_id": "6d5747ab-2116-450d-8684-23be9589ec93", "source_ip": "179.43.167.2", "source_port": 50904, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1067, "dest_bytes": 12, "network_bytes": 1079, "event_summary": "INVITE sip:9003908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:50904;branch=z9hG4bK-524287-1---60c6a177e2c8dc41\r\nFrom: <sip:%40@<HONEYPOT>>;tag=a50fa0b2\r\nTo: <sip:9003908351673002@<HONEYPOT>:5060>\r\nCall-ID: 0wghdNSLqkpcUzXY3c6hfw..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:50904>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T22:02:22", "event_id": "c710fc59-5596-4e9e-ad73-651a32479dcf", "source_ip": "179.43.167.2", "source_port": 45274, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:9003908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:45274;branch=z9hG4bK-524287-1---126d73f1f41880e9\r\nFrom: <sip:%40@<HONEYPOT>>;tag=47606ef7\r\nTo: <sip:9003908351673002@<HONEYPOT>:5060>\r\nCall-ID: KizlWgb6P30EjIJyvdmCTc..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:45274>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T21:53:14", "event_id": "68cd5bb0-d96c-4cac-bc2c-f9362186cb03", "source_ip": "179.43.167.2", "source_port": 28150, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1061, "dest_bytes": 12, "network_bytes": 1073, "event_summary": "INVITE sip:3908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:28150;branch=z9hG4bK-524287-1---ea75d15952837629\r\nFrom: <sip:%40@<HONEYPOT>>;tag=bf3bbd59\r\nTo: <sip:3908351673002@<HONEYPOT>:5060>\r\nCall-ID: DfFdtnb0JVsSdhBMNRdc8l..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:28150>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T21:45:10", "event_id": "c5fc307e-7f2a-4c8b-82f5-a663d5942a79", "source_ip": "179.43.167.2", "source_port": 43322, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1065, "dest_bytes": 12, "network_bytes": 1077, "event_summary": "INVITE sip:3908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:43322;branch=z9hG4bK-524287-1---9ae833af75d2df71\r\nFrom: <sip:%40@<HONEYPOT>>;tag=f679962f\r\nTo: <sip:3908351673002@<HONEYPOT>:5060>\r\nCall-ID: CzPH6TWTjDru4mE07p5ILs..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:43322>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T21:36:02", "event_id": "41369f76-c791-4728-b701-66c43133fab5", "source_ip": "179.43.167.2", "source_port": 57630, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1069, "dest_bytes": 12, "network_bytes": 1081, "event_summary": "INVITE sip:90113908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:57630;branch=z9hG4bK-524287-1---ee37fa99ab536b75\r\nFrom: <sip:%40@<HONEYPOT>>;tag=e90729c5\r\nTo: <sip:90113908351673002@<HONEYPOT>:5060>\r\nCall-ID: LGJ9VkxfKz7DybiGpskbnB..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:57630>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T21:27:56", "event_id": "13f8d596-fff7-4a6f-936b-7677b3efea12", "source_ip": "179.43.167.2", "source_port": 53720, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1073, "dest_bytes": 12, "network_bytes": 1085, "event_summary": "INVITE sip:90113908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:53720;branch=z9hG4bK-524287-1---305f8b2325565d62\r\nFrom: <sip:%40@<HONEYPOT>>;tag=a0820238\r\nTo: <sip:90113908351673002@<HONEYPOT>:5060>\r\nCall-ID: C4Do0Z4xVHEosy2f0o2GYL..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:53720>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T21:18:47", "event_id": "e30ed07c-ac99-4a45-bd09-041faf6cb71d", "source_ip": "179.43.167.2", "source_port": 59686, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1065, "dest_bytes": 12, "network_bytes": 1077, "event_summary": "INVITE sip:003908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:59686;branch=z9hG4bK-524287-1---43bb67d9fce197b4\r\nFrom: <sip:%40@<HONEYPOT>>;tag=a9faa500\r\nTo: <sip:003908351673002@<HONEYPOT>:5060>\r\nCall-ID: yvpGomNVmw4l4QMqXBInt0..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:59686>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T21:10:40", "event_id": "c6c3a633-27f1-4f0b-9983-a81038bae6a3", "source_ip": "179.43.167.2", "source_port": 61152, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1069, "dest_bytes": 12, "network_bytes": 1081, "event_summary": "INVITE sip:003908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:61152;branch=z9hG4bK-524287-1---66c6b6b5a364ac4d\r\nFrom: <sip:%40@<HONEYPOT>>;tag=695a5d56\r\nTo: <sip:003908351673002@<HONEYPOT>:5060>\r\nCall-ID: xHPt7iBd2mqRzTzI7EJ8sQ..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:61152>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T22:22:10", "event_id": "09bef26f-4f24-4992-a04e-14e8170bbfd5", "source_ip": "179.43.146.27", "source_port": 45640, "source_domain": "mta2.smartfastjoy3.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 2053, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:2053\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1310h1_f57a46bbacb6_e7c285222651", "tls_client_ja3": "faa162b5a653756fba26803ea81b362f", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 170, "dest_bytes": 78, "network_bytes": 248, "event_summary": ""} +{"timestamp": "2026-08-30T21:36:05", "event_id": "5725fe74-0760-4aad-b21e-ca3b8586e73b", "source_ip": "179.43.146.27", "source_port": 40548, "source_domain": "mta2.smartfastjoy3.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 2052, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:2052\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 170, "dest_bytes": 78, "network_bytes": 248, "event_summary": ""} +{"timestamp": "2026-08-30T20:19:47", "event_id": "f71aa9b6-4df2-4eb4-822a-81fbc6cb0a02", "source_ip": "141.255.165.69", "source_port": 26452, "source_domain": "hooksandheels.net", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-30T20:19:21", "event_id": "c2d18bfb-c167-4f48-b785-9a5f7931dba1", "source_ip": "141.255.165.66", "source_port": 29980, "source_domain": "4soho.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-30T20:19:21", "event_id": "934aec4c-5cc2-4836-bc36-4ab37e960b51", "source_ip": "141.255.165.68", "source_port": 41322, "source_domain": "eternalpink.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-30T20:19:17", "event_id": "7b0eb6ae-0086-411e-9d78-f6b358c81cac", "source_ip": "141.255.165.69", "source_port": 55990, "source_domain": "hooksandheels.net", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-30T12:11:49", "event_id": "45274697-5dfe-4e13-8ddc-f48e5529ba97", "source_ip": "179.43.167.2", "source_port": 45874, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1069, "dest_bytes": 12, "network_bytes": 1081, "event_summary": "INVITE sip:90013908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:45874;branch=z9hG4bK-524287-1---3cc68cf71a83c441\r\nFrom: <sip:%40@<HONEYPOT>>;tag=1ed0fb8c\r\nTo: <sip:90013908351673002@<HONEYPOT>:5060>\r\nCall-ID: aRzv71qETpv1cok0jE8uoz..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:45874>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T11:58:16", "event_id": "02427af3-e60e-4c1a-972d-85cf7bf0e232", "source_ip": "179.43.167.2", "source_port": 21054, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1073, "dest_bytes": 12, "network_bytes": 1085, "event_summary": "INVITE sip:90013908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:21054;branch=z9hG4bK-524287-1---cb8f9ce8a67a1137\r\nFrom: <sip:%40@<HONEYPOT>>;tag=5a7fb685\r\nTo: <sip:90013908351673002@<HONEYPOT>:5060>\r\nCall-ID: mOYlJm7d3drR9bGCUB6Q1v..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:21054>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T11:43:02", "event_id": "7e86aad1-c71a-42b7-9f2f-99192786a568", "source_ip": "179.43.167.2", "source_port": 56274, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1069, "dest_bytes": 12, "network_bytes": 1081, "event_summary": "INVITE sip:90123908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:56274;branch=z9hG4bK-524287-1---995e1c7494baebf9\r\nFrom: <sip:%40@<HONEYPOT>>;tag=048f01c8\r\nTo: <sip:90123908351673002@<HONEYPOT>:5060>\r\nCall-ID: yQtmNdIEq0HTOUfOQXl8nY..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:56274>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T11:29:29", "event_id": "4934a352-4d0a-47a4-ba95-2dc151cc278b", "source_ip": "179.43.167.2", "source_port": 8882, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:90123908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:8882;branch=z9hG4bK-524287-1---75d881d353345487\r\nFrom: <sip:%40@<HONEYPOT>>;tag=71efda1c\r\nTo: <sip:90123908351673002@<HONEYPOT>:5060>\r\nCall-ID: J5MoxNcfR7cyi4LhLK5K2e..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:8882>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T11:14:15", "event_id": "3369f495-92e8-4373-8d40-7acce962258a", "source_ip": "179.43.167.2", "source_port": 24962, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 99000000, "source_bytes": 1069, "dest_bytes": 12, "network_bytes": 1081, "event_summary": "INVITE sip:90103908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:24962;branch=z9hG4bK-524287-1---9bc29b96647e6e80\r\nFrom: <sip:%40@<HONEYPOT>>;tag=5822cee3\r\nTo: <sip:90103908351673002@<HONEYPOT>:5060>\r\nCall-ID: eaFzzNBYE56JEQqKuiwtgH..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:24962>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T11:00:42", "event_id": "132523f4-f6fe-4192-828b-715d8b9f085a", "source_ip": "179.43.167.2", "source_port": 5742, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:90103908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:5742;branch=z9hG4bK-524287-1---832c19cb92f65a74\r\nFrom: <sip:%40@<HONEYPOT>>;tag=41f203ce\r\nTo: <sip:90103908351673002@<HONEYPOT>:5060>\r\nCall-ID: 0nZoOiqIrchJosfUKLiQmx..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:5742>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T10:45:27", "event_id": "0e661c31-87e1-4bf7-91ac-2ac51cfe9300", "source_ip": "179.43.167.2", "source_port": 51574, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:900113908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:51574;branch=z9hG4bK-524287-1---bb852e3f9f5a7173\r\nFrom: <sip:%40@<HONEYPOT>>;tag=ac66b72d\r\nTo: <sip:900113908351673002@<HONEYPOT>:5060>\r\nCall-ID: 3FNwct7jScyfZ5jPB9raP1..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:51574>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T10:31:54", "event_id": "3699b0ee-42a5-4840-a5bd-f4293965c02d", "source_ip": "179.43.167.2", "source_port": 35678, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1075, "dest_bytes": 12, "network_bytes": 1087, "event_summary": "INVITE sip:900113908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:35678;branch=z9hG4bK-524287-1---a1493b2c690027e3\r\nFrom: <sip:%40@<HONEYPOT>>;tag=c5b702db\r\nTo: <sip:900113908351673002@<HONEYPOT>:5060>\r\nCall-ID: RDIOOMTABMcyAKHd9LGw5Z..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:35678>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T10:16:40", "event_id": "d674bd52-0a13-4ed8-bd86-568553c9a1af", "source_ip": "179.43.167.2", "source_port": 30314, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 99000000, "source_bytes": 1069, "dest_bytes": 12, "network_bytes": 1081, "event_summary": "INVITE sip:98103908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:30314;branch=z9hG4bK-524287-1---d2be98a6327d0db1\r\nFrom: <sip:%40@<HONEYPOT>>;tag=9fdd8311\r\nTo: <sip:98103908351673002@<HONEYPOT>:5060>\r\nCall-ID: CUBKGiUfbi3DIigNW7oYrb..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:30314>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T10:03:07", "event_id": "a622c4ab-4a0c-440c-9ba2-22481f0695d5", "source_ip": "179.43.167.2", "source_port": 6420, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 98000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:98103908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:6420;branch=z9hG4bK-524287-1---93b62c4878e98a97\r\nFrom: <sip:%40@<HONEYPOT>>;tag=9d84e9e5\r\nTo: <sip:98103908351673002@<HONEYPOT>:5060>\r\nCall-ID: 7USmlKzCRttc1tVRa3bbSX..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:6420>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T09:47:52", "event_id": "f59fa655-6009-48d1-99c3-ca0ba0e9ea01", "source_ip": "179.43.167.2", "source_port": 4920, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1067, "dest_bytes": 12, "network_bytes": 1079, "event_summary": "INVITE sip:90003908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:4920;branch=z9hG4bK-524287-1---2efc8f84fc557b55\r\nFrom: <sip:%40@<HONEYPOT>>;tag=79a0a0dd\r\nTo: <sip:90003908351673002@<HONEYPOT>:5060>\r\nCall-ID: ro05azL8nMqhZbFmJcVtyd..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:4920>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T09:34:20", "event_id": "1ec7b252-6012-434c-a488-6aa07cf81978", "source_ip": "179.43.167.2", "source_port": 48364, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 99000000, "source_bytes": 1073, "dest_bytes": 12, "network_bytes": 1085, "event_summary": "INVITE sip:90003908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:48364;branch=z9hG4bK-524287-1---177c7eaf6117392b\r\nFrom: <sip:%40@<HONEYPOT>>;tag=3553a58e\r\nTo: <sip:90003908351673002@<HONEYPOT>:5060>\r\nCall-ID: Frr8F6VWPBMItKOotzcW5D..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:48364>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T09:19:05", "event_id": "b6e4caf7-3076-43cf-bb0a-55217d567ac8", "source_ip": "179.43.167.2", "source_port": 14648, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 99000000, "source_bytes": 1067, "dest_bytes": 12, "network_bytes": 1079, "event_summary": "INVITE sip:0013908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:14648;branch=z9hG4bK-524287-1---1075b97d3e957570\r\nFrom: <sip:%40@<HONEYPOT>>;tag=2bfd3183\r\nTo: <sip:0013908351673002@<HONEYPOT>:5060>\r\nCall-ID: dZqR1AALEd4t7Mrsh94VzE..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:14648>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T09:05:33", "event_id": "ceed952a-cdb3-48ed-acb3-fd1e94c98aa3", "source_ip": "179.43.167.2", "source_port": 45800, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:0013908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:45800;branch=z9hG4bK-524287-1---95e80c7428d9795a\r\nFrom: <sip:%40@<HONEYPOT>>;tag=b809dbdf\r\nTo: <sip:0013908351673002@<HONEYPOT>:5060>\r\nCall-ID: HcfxNg5qer7RPKgxzokvcF..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:45800>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} diff --git a/kevlar/2026-08-31/honeylabs/events-AS57043.ndjson b/kevlar/2026-08-31/honeylabs/events-AS57043.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS57043.ndjson diff --git a/kevlar/2026-08-31/honeylabs/events-AS58854.ndjson b/kevlar/2026-08-31/honeylabs/events-AS58854.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS58854.ndjson diff --git a/kevlar/2026-08-31/honeylabs/fingerprints.csv b/kevlar/2026-08-31/honeylabs/fingerprints.csv new file mode 100644 index 0000000..3fb1579 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/fingerprints.csv @@ -0,0 +1,41 @@ +asn,name,type,fingerprint,source_ip
+AS210644,AEZA-AS,JA4,t12i130500_2d7513195f68_e51b7354d87f,217.144.190.138
+AS210644,AEZA-AS,JA4H,ge11nn0500_9af7e0472034,217.144.190.138
+AS210644,AEZA-AS,JA4H,ge11nn0400_88d30a62b7ad,217.144.190.138
+AS210644,AEZA-AS,JA4,t13i1909h2_9dc949149365_97f8aa674fd9,147.45.71.214
+AS210644,AEZA-AS,HASSH,19532158b559096b89b1a5f7d17175b2,185.246.217.150
+AS210644,AEZA-AS,JA4,t13i190900_9dc949149365_e7c285222651,176.124.203.177
+AS138915,KAOPU-HK (Kaopu Cloud HK Limited),JA4,t13i220900_231e334592e8_29829a46703f,154.90.37.55
+AS138915,KAOPU-HK (Kaopu Cloud HK Limited),JA4H,po11nn0400_52fce913cf3b,154.90.37.55
+AS14956,ROUTERHOSTING (RouterHosting LLC),JA4H,ge11nn0500_39072d476f20,107.189.26.103
+AS14956,ROUTERHOSTING (RouterHosting LLC),JA4,t13i100900_61a7ad8aa9b6_88aa062a14c8,144.172.99.12
+AS14956,ROUTERHOSTING (RouterHosting LLC),JA4H,ge11nn0300_7fd797acd99d,144.172.99.12
+AS14956,ROUTERHOSTING (RouterHosting LLC),HASSH,bf7dbf67fa9b26ee9f9deb99c49320ba,45.61.182.81
+AS14956,ROUTERHOSTING (RouterHosting LLC),JA4H,ge11nn0400_9c3956fad5da,167.88.168.121
+AS14956,ROUTERHOSTING (RouterHosting LLC),JA4,t13i311000_e8f1e7e78f70_d41ae481755e,144.172.115.222
+AS51852,PLI-AS,JA4H,ge11nn0400_9c3956fad5da,81.17.28.131
+AS51852,PLI-AS,JA4H,ge11nn0300_341eb0d8946c,179.43.150.26
+AS51852,PLI-AS,JA4,t13i1310h1_f57a46bbacb6_e7c285222651,179.43.146.27
+AS51396,PFCLOUD (Pfcloud UG),JA4H,ge11nn0400_9c3956fad5da,45.135.194.113
+AS51396,PFCLOUD (Pfcloud UG),JA4H,ge11nn0400_88d30a62b7ad,176.65.149.236
+AS51396,PFCLOUD (Pfcloud UG),JA4,t13i140900_cbb2034c60b8_e7c285222651,176.65.148.226
+AS51396,PFCLOUD (Pfcloud UG),JA4H,ge11nn0500_cac2c496544b,176.65.148.226
+AS51396,PFCLOUD (Pfcloud UG),JA4H,ge11nn0500_9af7e0472034,176.65.149.201
+AS51396,PFCLOUD (Pfcloud UG),JA4,t13i190800_9dc949149365_97f8aa674fd9,45.135.193.198
+AS51396,PFCLOUD (Pfcloud UG),JA4H,ge10nn0200_3ed38b250d3d,45.135.193.198
+AS51396,PFCLOUD (Pfcloud UG),JA4,t13i1909h2_9dc949149365_97f8aa674fd9,176.65.149.188
+AS51396,PFCLOUD (Pfcloud UG),JA4H,ge11nn0500_d3a2dcb1cd63,176.65.148.71
+AS51396,PFCLOUD (Pfcloud UG),JA4,t13i251000_b78ed14e2fd0_ab7e3b40a677,77.83.39.94
+AS200651,FLOKINET,HASSH,e54ef3ec27fe1fea7ab64d3fa05359fd,185.100.87.136
+AS200651,FLOKINET,JA4H,po11nn0600_c9506d37ac14,185.100.87.136
+AS200651,FLOKINET,JA4,t13i1909h2_9dc949149365_97f8aa674fd9,185.100.87.136
+AS200651,FLOKINET,JA4H,ge11nn0400_88d30a62b7ad,185.100.87.136
+AS200651,FLOKINET,JA4H,po11nn0500_e4a47a99f1ac,185.100.87.136
+AS214351,FEMOIT,JA4H,ge11nn0500_2d30dc89d981,192.162.199.180
+AS198953,PROTON66,JA4,t13i1010h1_61a7ad8aa9b6_792d2c6655cb,176.120.22.43
+AS198953,PROTON66,JA4H,po11nn18en_9a6afedbb443,176.120.22.43
+AS198953,PROTON66,JA4,t13i1010h1_61a7ad8aa9b6_3a8073edd8ef,176.120.22.43
+AS198953,PROTON66,JA4H,ge11nn0400_8b1ed2202073,176.120.22.43
+AS198953,PROTON66,JA4H,ge11cn06ru_b2fb244bb31f,176.120.22.43
+AS198953,PROTON66,JA4H,po11nn0500_63d29dec8e1d,176.120.22.43
+AS198953,PROTON66,JA4H,ge11nn05en_3bd45b6f184e,176.120.22.43
diff --git a/kevlar/2026-08-31/honeylabs/ioc-107.189.26.103.json b/kevlar/2026-08-31/honeylabs/ioc-107.189.26.103.json new file mode 100644 index 0000000..3be0330 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-107.189.26.103.json @@ -0,0 +1,72 @@ +{ + "total_events": 148, + "first_seen": "2026-08-20T14:44:13", + "last_seen": "2026-08-25T23:21:07", + "asn_number": 14956, + "asn_org": "RouterHosting LLC", + "country_name": "The Netherlands", + "country_code": "NL", + "ports_targeted": [ + 80, + 2375 + ], + "ports_targeted_count": 2, + "tls_event_count": 0, + "top_http_methods": [ + "GET", + "POST" + ], + "top_user_agents": [ + "libredtail-http" + ], + "top_url_paths": [ + "/containers/json", + "/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", + "/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", + "/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", + "/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", + "/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", + "/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", + "/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", + "/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", + "/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" + ], + "top_ja4_fingerprints": [], + "top_ja3_fingerprints": [], + "top_hassh_fingerprints": [], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "103.26.189.107.static.cloudzy.com", + "loader_hits": 6, + "exploit_hits": 135, + "bytes_sent": 1826936, + "unique_source_ips": 1, + "ioc": "107.189.26.103", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "malicious", + "verdict": "Exploit attempts observed", + "verdict_why": [ + "135 request(s) matched a known exploit path.", + "Exploit-path hits present; HTTP verb mix unknown, so read cautiously.", + "5+ hits raise confidence to high.", + "Not in any known-scanner range.", + "Sent 1,826,936 bytes: sustained payload delivery, not a single opportunistic request." + ], + "verdict_confidence": "high", + "cve_probes": [ + { + "cve_id": "CVE-2017-9841", + "title": "PHPUnit - Remote Code Execution", + "severity": "critical", + "actively_exploited": true + }, + { + "cve_id": "CVE-2021-42013", + "title": "Apache 2.4.49/2.4.50 - Path Traversal and Remote Code Execution", + "severity": "critical", + "actively_exploited": true + } + ] +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/ioc-147.45.71.214.json b/kevlar/2026-08-31/honeylabs/ioc-147.45.71.214.json new file mode 100644 index 0000000..917b28b --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-147.45.71.214.json @@ -0,0 +1,64 @@ +{ + "total_events": 36, + "first_seen": "2026-08-28T20:14:49", + "last_seen": "2026-08-29T08:27:41", + "asn_number": 210644, + "asn_org": "Aeza Group LLC", + "country_name": "Austria", + "country_code": "AT", + "ports_targeted": [ + 8080, + 8090, + 8081, + 8085, + 8999, + 8989, + 8282 + ], + "ports_targeted_count": 7, + "tls_event_count": 25, + "top_http_methods": [ + "GET" + ], + "top_user_agents": [ + "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", + "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36", + "Mozilla/5.0 (Macintosh; Intel Mac OS X 14) AppleWebKit/616.19.3 (KHTML, like Gecko) Version/17.6.11 Safari/616.19.3", + "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.18", + "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.5.18" + ], + "top_url_paths": [ + "/", + "/favicon.ico", + "/v1/getinfo" + ], + "top_ja4_fingerprints": [ + "t12i130500_2d7513195f68_e51b7354d87f", + "t13i1909h2_9dc949149365_97f8aa674fd9" + ], + "top_ja3_fingerprints": [ + "cba7f34191ef2379c1325641f6c6c4f4", + "7c1e207beb00684bbbe144f1b0abe1d5" + ], + "top_hassh_fingerprints": [], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "", + "loader_hits": 0, + "exploit_hits": 0, + "bytes_sent": 8107, + "unique_source_ips": 1, + "ioc": "147.45.71.214", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "probing", + "verdict": "Low-level probing", + "verdict_why": [ + "36 event(s), fewer than 10 distinct ports, no exploit payloads.", + "Not in any known-scanner range.", + "Sent 8,107 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look." + ], + "verdict_confidence": "low", + "cve_probes": [] +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/ioc-154.90.37.55.json b/kevlar/2026-08-31/honeylabs/ioc-154.90.37.55.json new file mode 100644 index 0000000..3b57abc --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-154.90.37.55.json @@ -0,0 +1,56 @@ +{ + "total_events": 7, + "first_seen": "2026-07-22T10:02:16", + "last_seen": "2026-08-27T07:59:32", + "asn_number": 138915, + "asn_org": "Kaopu Cloud HK Limited", + "country_name": "Philippines", + "country_code": "PH", + "ports_targeted": [ + 1190, + 5986, + 6666, + 11111, + 9092, + 9030 + ], + "ports_targeted_count": 6, + "tls_event_count": 1, + "top_http_methods": [ + "POST" + ], + "top_user_agents": [ + "Microsoft WinRM Client" + ], + "top_url_paths": [ + "/wsman?PSVersion=5.1.19041.1" + ], + "top_ja4_fingerprints": [ + "t13i220900_231e334592e8_29829a46703f" + ], + "top_ja3_fingerprints": [ + "622a7fd6adbafa3736c1a3468db8a8e0" + ], + "top_hassh_fingerprints": [ + "eb0e0554de9aeb368191c86016a40080" + ], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "", + "loader_hits": 0, + "exploit_hits": 0, + "bytes_sent": 1124, + "unique_source_ips": 1, + "ioc": "154.90.37.55", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "probing", + "verdict": "Low-level probing", + "verdict_why": [ + "7 event(s), fewer than 10 distinct ports, no exploit payloads.", + "Not in any known-scanner range." + ], + "verdict_confidence": "low", + "cve_probes": [] +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/ioc-176.120.22.61.json b/kevlar/2026-08-31/honeylabs/ioc-176.120.22.61.json new file mode 100644 index 0000000..2a9c203 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-176.120.22.61.json @@ -0,0 +1,89 @@ +{ + "total_events": 9934, + "first_seen": "2026-03-10T13:01:04", + "last_seen": "2026-08-31T09:44:38", + "asn_number": 198953, + "asn_org": "Proton66 OOO", + "country_name": "Russia", + "country_code": "RU", + "ports_targeted": [ + 1435, + 1433, + 1434, + 3433, + 11433, + 3005, + 14333, + 1800, + 5005, + 14330, + 8433, + 2433, + 1533, + 8888, + 18433, + 1437, + 23341, + 33000, + 7433, + 1455, + 4171, + 21433, + 6240, + 25366, + 61433, + 9999, + 41433, + 6802, + 2468, + 12433, + 10433, + 42130, + 5000, + 5367, + 43399, + 1444, + 3333, + 6433, + 6366, + 51433, + 1551, + 3341, + 6602, + 17433, + 22020, + 9433, + 14331, + 1002, + 1501, + 45366 + ], + "ports_targeted_count": 289, + "tls_event_count": 0, + "top_http_methods": [], + "top_user_agents": [], + "top_url_paths": [], + "top_ja4_fingerprints": [], + "top_ja3_fingerprints": [], + "top_hassh_fingerprints": [], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "", + "loader_hits": 0, + "exploit_hits": 0, + "bytes_sent": 476678, + "unique_source_ips": 1, + "ioc": "176.120.22.61", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "scanning", + "verdict": "Unrecognized scanner", + "verdict_why": [ + "No exploit payloads observed.", + "Swept 289 distinct ports (threshold for a sweep is 10).", + "Not in any known-scanner range." + ], + "verdict_confidence": "medium", + "cve_probes": [] +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/ioc-179.43.167.2.json b/kevlar/2026-08-31/honeylabs/ioc-179.43.167.2.json new file mode 100644 index 0000000..66d5ab5 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-179.43.167.2.json @@ -0,0 +1,40 @@ +{ + "total_events": 71, + "first_seen": "2026-08-29T20:36:09", + "last_seen": "2026-08-30T12:11:49", + "asn_number": 51852, + "asn_org": "Private Layer INC", + "country_name": "Switzerland", + "country_code": "CH", + "ports_targeted": [ + 5060 + ], + "ports_targeted_count": 1, + "tls_event_count": 0, + "top_http_methods": [], + "top_user_agents": [], + "top_url_paths": [], + "top_ja4_fingerprints": [], + "top_ja3_fingerprints": [], + "top_hassh_fingerprints": [], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "hostedby.privatelayer.com", + "loader_hits": 0, + "exploit_hits": 0, + "bytes_sent": 75899, + "unique_source_ips": 1, + "ioc": "179.43.167.2", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "probing", + "verdict": "Low-level probing", + "verdict_why": [ + "71 event(s), fewer than 10 distinct ports, no exploit payloads.", + "Not in any known-scanner range.", + "Sent 75,899 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look." + ], + "verdict_confidence": "low", + "cve_probes": [] +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/ioc-185.100.87.136.json b/kevlar/2026-08-31/honeylabs/ioc-185.100.87.136.json new file mode 100644 index 0000000..1ebcb34 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-185.100.87.136.json @@ -0,0 +1,69 @@ +{ + "total_events": 365, + "first_seen": "2026-02-16T21:48:36", + "last_seen": "2026-08-31T06:06:56", + "asn_number": 200651, + "asn_org": "FlokiNET ehf", + "country_name": "Romania", + "country_code": "RO", + "ports_targeted": [ + 443, + 80, + 8080, + 444, + 2222, + 22, + 8443 + ], + "ports_targeted_count": 7, + "tls_event_count": 97, + "top_http_methods": [ + "GET", + "POST" + ], + "top_user_agents": [ + "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3 rv:3.0; eu-FR) AppleWebKit/533.4.2 (KHTML, like Gecko) Version/5.0.1 Safari/533.4.2", + "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:104.71.6212.24) Gecko/25.2.4212.671 Firefox/2.0", + "Mozilla/5.0 (Android 12; Mobile; rv:117.0) Gecko/117.0 Focus/117.0", + "SPARK COMMIT: 08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17" + ], + "top_url_paths": [ + "/", + "/images/transparentpix.gif", + "/eventmanager", + "/api/client/update?arch=amd64&commit=08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17&os=windows", + "/ajax", + "/api/checkin", + "/api/v1/update", + "/FD873AC4-CF86-4FED-84EC-4BD59C6F17A7" + ], + "top_ja4_fingerprints": [ + "t13i1909h2_9dc949149365_97f8aa674fd9" + ], + "top_ja3_fingerprints": [ + "7c1e207beb00684bbbe144f1b0abe1d5" + ], + "top_hassh_fingerprints": [ + "e54ef3ec27fe1fea7ab64d3fa05359fd" + ], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "", + "loader_hits": 0, + "exploit_hits": 0, + "bytes_sent": 38825, + "unique_source_ips": 1, + "ioc": "185.100.87.136", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "probing", + "verdict": "Low-level probing", + "verdict_why": [ + "365 event(s), fewer than 10 distinct ports, no exploit payloads.", + "Not in any known-scanner range.", + "Sent 38,825 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look." + ], + "verdict_confidence": "low", + "cve_probes": [] +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/ioc-194.48.142.134.json b/kevlar/2026-08-31/honeylabs/ioc-194.48.142.134.json new file mode 100644 index 0000000..cdbcf83 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-194.48.142.134.json @@ -0,0 +1,39 @@ +{ + "total_events": 1, + "first_seen": "2026-08-30T15:38:28", + "last_seen": "2026-08-30T15:38:28", + "asn_number": 400992, + "asn_org": "ZhouyiSat Communications", + "country_name": "Germany", + "country_code": "DE", + "ports_targeted": [ + 25565 + ], + "ports_targeted_count": 1, + "tls_event_count": 0, + "top_http_methods": [], + "top_user_agents": [], + "top_url_paths": [], + "top_ja4_fingerprints": [], + "top_ja3_fingerprints": [], + "top_hassh_fingerprints": [], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "", + "loader_hits": 0, + "exploit_hits": 0, + "bytes_sent": 22, + "unique_source_ips": 1, + "ioc": "194.48.142.134", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "probing", + "verdict": "Low-level probing", + "verdict_why": [ + "1 event(s), fewer than 10 distinct ports, no exploit payloads.", + "Not in any known-scanner range." + ], + "verdict_confidence": "low", + "cve_probes": [] +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/ioc-204.76.203.7.json b/kevlar/2026-08-31/honeylabs/ioc-204.76.203.7.json new file mode 100644 index 0000000..6789dcf --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-204.76.203.7.json @@ -0,0 +1,95 @@ +{ + "total_events": 3000, + "first_seen": "2026-08-10T12:50:10", + "last_seen": "2026-08-31T11:08:11", + "asn_number": 51396, + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "country_name": "The Netherlands", + "country_code": "NL", + "ports_targeted": [ + 49226, + 10800, + 58989, + 1918, + 69, + 53000, + 2086, + 64, + 1036, + 2067, + 2081, + 60001, + 161, + 1994, + 1008, + 31276, + 38080, + 32926, + 32764, + 32626, + 31457, + 31434, + 31433, + 33142, + 31280, + 32946, + 31223, + 31220, + 31054, + 31046, + 31033, + 31021, + 30979, + 26312, + 30750, + 30501, + 31281, + 30226, + 33333, + 33761, + 34564, + 34599, + 35000, + 35452, + 35554, + 35561, + 37364, + 37647, + 37890, + 32768 + ], + "ports_targeted_count": 524, + "tls_event_count": 0, + "top_http_methods": [ + "GET" + ], + "top_user_agents": [ + "Go-http-client/1.1" + ], + "top_url_paths": [ + "http://azenv.net/" + ], + "top_ja4_fingerprints": [], + "top_ja3_fingerprints": [], + "top_hassh_fingerprints": [], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "204.76.203.7.ptr.pfcloud.network", + "loader_hits": 0, + "exploit_hits": 0, + "bytes_sent": 197734, + "unique_source_ips": 1, + "ioc": "204.76.203.7", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "scanning", + "verdict": "Unrecognized scanner", + "verdict_why": [ + "No exploit payloads observed.", + "Swept 524 distinct ports (threshold for a sweep is 10).", + "Not in any known-scanner range." + ], + "verdict_confidence": "medium", + "cve_probes": [] +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/ioc-62.60.226.150.json b/kevlar/2026-08-31/honeylabs/ioc-62.60.226.150.json new file mode 100644 index 0000000..01a1092 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-62.60.226.150.json @@ -0,0 +1,39 @@ +{ + "total_events": 6, + "first_seen": "2026-08-22T16:21:05", + "last_seen": "2026-08-28T22:58:01", + "asn_number": 214351, + "asn_org": "Femo It Solutions Limited", + "country_name": "Germany", + "country_code": "DE", + "ports_targeted": [ + 1723 + ], + "ports_targeted_count": 1, + "tls_event_count": 0, + "top_http_methods": [], + "top_user_agents": [], + "top_url_paths": [], + "top_ja4_fingerprints": [], + "top_ja3_fingerprints": [], + "top_hassh_fingerprints": [], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "", + "loader_hits": 0, + "exploit_hits": 0, + "bytes_sent": 936, + "unique_source_ips": 1, + "ioc": "62.60.226.150", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "probing", + "verdict": "Low-level probing", + "verdict_why": [ + "6 event(s), fewer than 10 distinct ports, no exploit payloads.", + "Not in any known-scanner range." + ], + "verdict_confidence": "low", + "cve_probes": [] +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/ioc-::ffff:107.189.26.103.json b/kevlar/2026-08-31/honeylabs/ioc-::ffff:107.189.26.103.json new file mode 100644 index 0000000..b60ba3d --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-::ffff:107.189.26.103.json @@ -0,0 +1,72 @@ +{ + "total_events": 148, + "first_seen": "2026-08-20T14:44:13", + "last_seen": "2026-08-25T23:21:07", + "asn_number": 14956, + "asn_org": "RouterHosting LLC", + "country_name": "The Netherlands", + "country_code": "NL", + "ports_targeted": [ + 80, + 2375 + ], + "ports_targeted_count": 2, + "tls_event_count": 0, + "top_http_methods": [ + "GET", + "POST" + ], + "top_user_agents": [ + "libredtail-http" + ], + "top_url_paths": [ + "/containers/json", + "/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", + "/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", + "/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", + "/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", + "/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", + "/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", + "/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", + "/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", + "/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" + ], + "top_ja4_fingerprints": [], + "top_ja3_fingerprints": [], + "top_hassh_fingerprints": [], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "103.26.189.107.static.cloudzy.com", + "loader_hits": 6, + "exploit_hits": 135, + "bytes_sent": 1826936, + "unique_source_ips": 1, + "ioc": "::ffff:107.189.26.103", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "malicious", + "verdict": "Exploit attempts observed", + "verdict_why": [ + "135 request(s) matched a known exploit path.", + "Exploit-path hits present; HTTP verb mix unknown, so read cautiously.", + "5+ hits raise confidence to high.", + "Not in any known-scanner range.", + "Sent 1,826,936 bytes: sustained payload delivery, not a single opportunistic request." + ], + "verdict_confidence": "high", + "cve_probes": [ + { + "cve_id": "CVE-2017-9841", + "title": "PHPUnit - Remote Code Execution", + "severity": "critical", + "actively_exploited": true + }, + { + "cve_id": "CVE-2021-42013", + "title": "Apache 2.4.49/2.4.50 - Path Traversal and Remote Code Execution", + "severity": "critical", + "actively_exploited": true + } + ] +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/ioc-::ffff:147.45.71.214.json b/kevlar/2026-08-31/honeylabs/ioc-::ffff:147.45.71.214.json new file mode 100644 index 0000000..6d977c1 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-::ffff:147.45.71.214.json @@ -0,0 +1,64 @@ +{ + "total_events": 36, + "first_seen": "2026-08-28T20:14:49", + "last_seen": "2026-08-29T08:27:41", + "asn_number": 210644, + "asn_org": "Aeza Group LLC", + "country_name": "Austria", + "country_code": "AT", + "ports_targeted": [ + 8080, + 8090, + 8081, + 8085, + 8999, + 8989, + 8282 + ], + "ports_targeted_count": 7, + "tls_event_count": 25, + "top_http_methods": [ + "GET" + ], + "top_user_agents": [ + "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", + "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36", + "Mozilla/5.0 (Macintosh; Intel Mac OS X 14) AppleWebKit/616.19.3 (KHTML, like Gecko) Version/17.6.11 Safari/616.19.3", + "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.18", + "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.5.18" + ], + "top_url_paths": [ + "/", + "/favicon.ico", + "/v1/getinfo" + ], + "top_ja4_fingerprints": [ + "t12i130500_2d7513195f68_e51b7354d87f", + "t13i1909h2_9dc949149365_97f8aa674fd9" + ], + "top_ja3_fingerprints": [ + "cba7f34191ef2379c1325641f6c6c4f4", + "7c1e207beb00684bbbe144f1b0abe1d5" + ], + "top_hassh_fingerprints": [], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "", + "loader_hits": 0, + "exploit_hits": 0, + "bytes_sent": 8107, + "unique_source_ips": 1, + "ioc": "::ffff:147.45.71.214", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "probing", + "verdict": "Low-level probing", + "verdict_why": [ + "36 event(s), fewer than 10 distinct ports, no exploit payloads.", + "Not in any known-scanner range.", + "Sent 8,107 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look." + ], + "verdict_confidence": "low", + "cve_probes": [] +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/ioc-::ffff:154.90.37.55.json b/kevlar/2026-08-31/honeylabs/ioc-::ffff:154.90.37.55.json new file mode 100644 index 0000000..2fe467f --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-::ffff:154.90.37.55.json @@ -0,0 +1,56 @@ +{ + "total_events": 7, + "first_seen": "2026-07-22T10:02:16", + "last_seen": "2026-08-27T07:59:32", + "asn_number": 138915, + "asn_org": "Kaopu Cloud HK Limited", + "country_name": "Philippines", + "country_code": "PH", + "ports_targeted": [ + 1190, + 5986, + 6666, + 11111, + 9092, + 9030 + ], + "ports_targeted_count": 6, + "tls_event_count": 1, + "top_http_methods": [ + "POST" + ], + "top_user_agents": [ + "Microsoft WinRM Client" + ], + "top_url_paths": [ + "/wsman?PSVersion=5.1.19041.1" + ], + "top_ja4_fingerprints": [ + "t13i220900_231e334592e8_29829a46703f" + ], + "top_ja3_fingerprints": [ + "622a7fd6adbafa3736c1a3468db8a8e0" + ], + "top_hassh_fingerprints": [ + "eb0e0554de9aeb368191c86016a40080" + ], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "", + "loader_hits": 0, + "exploit_hits": 0, + "bytes_sent": 1124, + "unique_source_ips": 1, + "ioc": "::ffff:154.90.37.55", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "probing", + "verdict": "Low-level probing", + "verdict_why": [ + "7 event(s), fewer than 10 distinct ports, no exploit payloads.", + "Not in any known-scanner range." + ], + "verdict_confidence": "low", + "cve_probes": [] +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/ioc-::ffff:176.120.22.61.json b/kevlar/2026-08-31/honeylabs/ioc-::ffff:176.120.22.61.json new file mode 100644 index 0000000..5f1be66 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-::ffff:176.120.22.61.json @@ -0,0 +1,89 @@ +{ + "total_events": 9934, + "first_seen": "2026-03-10T13:01:04", + "last_seen": "2026-08-31T09:44:38", + "asn_number": 198953, + "asn_org": "Proton66 OOO", + "country_name": "Russia", + "country_code": "RU", + "ports_targeted": [ + 1435, + 1433, + 1434, + 3433, + 11433, + 3005, + 14333, + 1800, + 5005, + 14330, + 8433, + 2433, + 1533, + 8888, + 18433, + 1437, + 23341, + 33000, + 7433, + 1455, + 4171, + 21433, + 6240, + 25366, + 61433, + 9999, + 41433, + 6802, + 2468, + 12433, + 10433, + 42130, + 5000, + 5367, + 43399, + 1444, + 3333, + 6433, + 6366, + 51433, + 1551, + 3341, + 6602, + 17433, + 22020, + 9433, + 14331, + 1002, + 1501, + 45366 + ], + "ports_targeted_count": 289, + "tls_event_count": 0, + "top_http_methods": [], + "top_user_agents": [], + "top_url_paths": [], + "top_ja4_fingerprints": [], + "top_ja3_fingerprints": [], + "top_hassh_fingerprints": [], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "", + "loader_hits": 0, + "exploit_hits": 0, + "bytes_sent": 476678, + "unique_source_ips": 1, + "ioc": "::ffff:176.120.22.61", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "scanning", + "verdict": "Unrecognized scanner", + "verdict_why": [ + "No exploit payloads observed.", + "Swept 289 distinct ports (threshold for a sweep is 10).", + "Not in any known-scanner range." + ], + "verdict_confidence": "medium", + "cve_probes": [] +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/ioc-::ffff:179.43.167.2.json b/kevlar/2026-08-31/honeylabs/ioc-::ffff:179.43.167.2.json new file mode 100644 index 0000000..285932a --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-::ffff:179.43.167.2.json @@ -0,0 +1,40 @@ +{ + "total_events": 71, + "first_seen": "2026-08-29T20:36:09", + "last_seen": "2026-08-30T12:11:49", + "asn_number": 51852, + "asn_org": "Private Layer INC", + "country_name": "Switzerland", + "country_code": "CH", + "ports_targeted": [ + 5060 + ], + "ports_targeted_count": 1, + "tls_event_count": 0, + "top_http_methods": [], + "top_user_agents": [], + "top_url_paths": [], + "top_ja4_fingerprints": [], + "top_ja3_fingerprints": [], + "top_hassh_fingerprints": [], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "hostedby.privatelayer.com", + "loader_hits": 0, + "exploit_hits": 0, + "bytes_sent": 75899, + "unique_source_ips": 1, + "ioc": "::ffff:179.43.167.2", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "probing", + "verdict": "Low-level probing", + "verdict_why": [ + "71 event(s), fewer than 10 distinct ports, no exploit payloads.", + "Not in any known-scanner range.", + "Sent 75,899 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look." + ], + "verdict_confidence": "low", + "cve_probes": [] +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/ioc-::ffff:185.100.87.136.json b/kevlar/2026-08-31/honeylabs/ioc-::ffff:185.100.87.136.json new file mode 100644 index 0000000..f59a926 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-::ffff:185.100.87.136.json @@ -0,0 +1,69 @@ +{ + "total_events": 365, + "first_seen": "2026-02-16T21:48:36", + "last_seen": "2026-08-31T06:06:56", + "asn_number": 200651, + "asn_org": "FlokiNET ehf", + "country_name": "Romania", + "country_code": "RO", + "ports_targeted": [ + 443, + 80, + 8080, + 444, + 2222, + 22, + 8443 + ], + "ports_targeted_count": 7, + "tls_event_count": 97, + "top_http_methods": [ + "GET", + "POST" + ], + "top_user_agents": [ + "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3 rv:3.0; eu-FR) AppleWebKit/533.4.2 (KHTML, like Gecko) Version/5.0.1 Safari/533.4.2", + "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:104.71.6212.24) Gecko/25.2.4212.671 Firefox/2.0", + "Mozilla/5.0 (Android 12; Mobile; rv:117.0) Gecko/117.0 Focus/117.0", + "SPARK COMMIT: 08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17" + ], + "top_url_paths": [ + "/", + "/images/transparentpix.gif", + "/eventmanager", + "/api/client/update?arch=amd64&commit=08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17&os=windows", + "/ajax", + "/api/checkin", + "/api/v1/update", + "/FD873AC4-CF86-4FED-84EC-4BD59C6F17A7" + ], + "top_ja4_fingerprints": [ + "t13i1909h2_9dc949149365_97f8aa674fd9" + ], + "top_ja3_fingerprints": [ + "7c1e207beb00684bbbe144f1b0abe1d5" + ], + "top_hassh_fingerprints": [ + "e54ef3ec27fe1fea7ab64d3fa05359fd" + ], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "", + "loader_hits": 0, + "exploit_hits": 0, + "bytes_sent": 38825, + "unique_source_ips": 1, + "ioc": "::ffff:185.100.87.136", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "probing", + "verdict": "Low-level probing", + "verdict_why": [ + "365 event(s), fewer than 10 distinct ports, no exploit payloads.", + "Not in any known-scanner range.", + "Sent 38,825 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look." + ], + "verdict_confidence": "low", + "cve_probes": [] +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/ioc-::ffff:194.48.142.134.json b/kevlar/2026-08-31/honeylabs/ioc-::ffff:194.48.142.134.json new file mode 100644 index 0000000..f57517c --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-::ffff:194.48.142.134.json @@ -0,0 +1,39 @@ +{ + "total_events": 1, + "first_seen": "2026-08-30T15:38:28", + "last_seen": "2026-08-30T15:38:28", + "asn_number": 400992, + "asn_org": "ZhouyiSat Communications", + "country_name": "Germany", + "country_code": "DE", + "ports_targeted": [ + 25565 + ], + "ports_targeted_count": 1, + "tls_event_count": 0, + "top_http_methods": [], + "top_user_agents": [], + "top_url_paths": [], + "top_ja4_fingerprints": [], + "top_ja3_fingerprints": [], + "top_hassh_fingerprints": [], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "", + "loader_hits": 0, + "exploit_hits": 0, + "bytes_sent": 22, + "unique_source_ips": 1, + "ioc": "::ffff:194.48.142.134", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "probing", + "verdict": "Low-level probing", + "verdict_why": [ + "1 event(s), fewer than 10 distinct ports, no exploit payloads.", + "Not in any known-scanner range." + ], + "verdict_confidence": "low", + "cve_probes": [] +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/ioc-::ffff:204.76.203.7.json b/kevlar/2026-08-31/honeylabs/ioc-::ffff:204.76.203.7.json new file mode 100644 index 0000000..7bcab22 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-::ffff:204.76.203.7.json @@ -0,0 +1,95 @@ +{ + "total_events": 3000, + "first_seen": "2026-08-10T12:50:10", + "last_seen": "2026-08-31T11:08:11", + "asn_number": 51396, + "asn_org": "Pfcloud UG (haftungsbeschrankt)", + "country_name": "The Netherlands", + "country_code": "NL", + "ports_targeted": [ + 49226, + 10800, + 58989, + 1918, + 53000, + 2086, + 2081, + 69, + 64, + 1036, + 2067, + 1994, + 60001, + 161, + 1008, + 32768, + 31434, + 38159, + 38157, + 38080, + 37890, + 30051, + 37364, + 38582, + 35561, + 35554, + 35452, + 35000, + 34599, + 34564, + 33761, + 33333, + 33142, + 38777, + 32946, + 32926, + 37647, + 32764, + 30081, + 30115, + 30116, + 30127, + 30129, + 30226, + 30501, + 30750, + 30979, + 31021, + 31033, + 38414 + ], + "ports_targeted_count": 524, + "tls_event_count": 0, + "top_http_methods": [ + "GET" + ], + "top_user_agents": [ + "Go-http-client/1.1" + ], + "top_url_paths": [ + "http://azenv.net/" + ], + "top_ja4_fingerprints": [], + "top_ja3_fingerprints": [], + "top_hassh_fingerprints": [], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "204.76.203.7.ptr.pfcloud.network", + "loader_hits": 0, + "exploit_hits": 0, + "bytes_sent": 197734, + "unique_source_ips": 1, + "ioc": "::ffff:204.76.203.7", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "scanning", + "verdict": "Unrecognized scanner", + "verdict_why": [ + "No exploit payloads observed.", + "Swept 524 distinct ports (threshold for a sweep is 10).", + "Not in any known-scanner range." + ], + "verdict_confidence": "medium", + "cve_probes": [] +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/ioc-::ffff:62.60.226.150.json b/kevlar/2026-08-31/honeylabs/ioc-::ffff:62.60.226.150.json new file mode 100644 index 0000000..9496e4f --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/ioc-::ffff:62.60.226.150.json @@ -0,0 +1,39 @@ +{ + "total_events": 6, + "first_seen": "2026-08-22T16:21:05", + "last_seen": "2026-08-28T22:58:01", + "asn_number": 214351, + "asn_org": "Femo It Solutions Limited", + "country_name": "Germany", + "country_code": "DE", + "ports_targeted": [ + 1723 + ], + "ports_targeted_count": 1, + "tls_event_count": 0, + "top_http_methods": [], + "top_user_agents": [], + "top_url_paths": [], + "top_ja4_fingerprints": [], + "top_ja3_fingerprints": [], + "top_hassh_fingerprints": [], + "client_cert_event_count": 0, + "client_cert_subjects": [], + "rdns": "", + "loader_hits": 0, + "exploit_hits": 0, + "bytes_sent": 936, + "unique_source_ips": 1, + "ioc": "::ffff:62.60.226.150", + "window": "all retained data (no time filter)", + "query_type": "ip", + "scanner": null, + "verdict_key": "probing", + "verdict": "Low-level probing", + "verdict_why": [ + "6 event(s), fewer than 10 distinct ports, no exploit payloads.", + "Not in any known-scanner range." + ], + "verdict_confidence": "low", + "cve_probes": [] +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/observed-ips.json b/kevlar/2026-08-31/honeylabs/observed-ips.json new file mode 100644 index 0000000..5cc8edc --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/observed-ips.json @@ -0,0 +1,179 @@ +{ + "AS57043": { + "name": "HOSTKEY-AS", + "ips": [] + }, + "AS209847": { + "name": "THE", + "ips": [] + }, + "AS210644": { + "name": "AEZA-AS", + "ips": [ + "147.45.71.214", + "176.124.203.177", + "185.246.217.150", + "217.144.190.138" + ] + }, + "AS138915": { + "name": "KAOPU-HK (Kaopu Cloud HK Limited)", + "ips": [ + "154.90.37.55" + ] + }, + "AS14956": { + "name": "ROUTERHOSTING (RouterHosting LLC)", + "ips": [ + "107.189.17.181", + "107.189.26.103", + "144.172.100.235", + "144.172.111.21", + "144.172.115.222", + "144.172.116.49", + "144.172.94.243", + "144.172.99.12", + "153.75.82.185", + "167.88.168.121", + "172.86.114.162", + "172.86.114.254", + "172.86.91.225", + "45.61.129.23", + "45.61.170.85", + "45.61.177.179", + "45.61.177.185", + "45.61.182.81" + ] + }, + "AS216139": { + "name": "IRONHOST", + "ips": [] + }, + "AS51852": { + "name": "PLI-AS", + "ips": [ + "141.255.165.66", + "141.255.165.67", + "141.255.165.68", + "141.255.165.69", + "179.43.146.27", + "179.43.150.26", + "179.43.167.2", + "185.12.44.133", + "81.17.28.131" + ] + }, + "AS400992": { + "name": "ZHOUYISAT-COMMUNICATIONS", + "ips": [ + "194.48.142.134" + ] + }, + "AS33993": { + "name": "UFO-AS", + "ips": [] + }, + "AS51396": { + "name": "PFCLOUD (Pfcloud UG)", + "ips": [ + "176.65.134.52", + "176.65.148.216", + "176.65.148.226", + "176.65.148.29", + "176.65.148.71", + "176.65.148.96", + "176.65.149.188", + "176.65.149.201", + "176.65.149.212", + "176.65.149.220", + "176.65.149.224", + "176.65.149.230", + "176.65.149.236", + "176.65.149.27", + "176.65.149.30", + "176.65.149.31", + "176.65.149.64", + "176.65.149.67", + "204.76.203.14", + "204.76.203.4", + "204.76.203.49", + "204.76.203.7", + "45.135.193.193", + "45.135.193.198", + "45.135.194.113", + "45.135.194.99", + "77.83.39.94", + "94.183.174.77" + ] + }, + "AS213702": { + "name": "QWINS-LTD", + "ips": [] + }, + "AS216246": { + "name": "RU-AEZA-AS", + "ips": [] + }, + "AS200651": { + "name": "FLOKINET", + "ips": [ + "185.100.87.136" + ] + }, + "AS30823": { + "name": "AUROLOGIC (aurologic GmbH)", + "ips": [] + }, + "AS140666": { + "name": "ADPL-AS-AP (ANY DIGITAL PTE. LTD.)", + "ips": [] + }, + "AS214351": { + "name": "FEMOIT", + "ips": [ + "192.162.199.180", + "62.60.226.150" + ] + }, + "AS198953": { + "name": "PROTON66", + "ips": [ + "176.120.22.240", + "176.120.22.43", + "176.120.22.61", + "193.143.1.66" + ] + }, + "AS200593": { + "name": "PROSPERO-AS", + "ips": [] + }, + "AS214940": { + "name": "KPRONET", + "ips": [] + }, + "AS206728": { + "name": "MEDIALAND-AS", + "ips": [] + }, + "AS211720": { + "name": "Datashield, Inc.", + "ips": [] + }, + "AS216309": { + "name": "INVISIONTECH-GROUP-SRL", + "ips": [] + }, + "AS58854": { + "name": "KAOPY (Kaopu Cloud)", + "ips": [] + }, + "AS202685": { + "name": "TR-ARKEL", + "ips": [] + }, + "AS394711": { + "name": "KORGRID (KorGrid LLC)", + "ips": [] + } +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/summary.json b/kevlar/2026-08-31/honeylabs/summary.json new file mode 100644 index 0000000..d7e2850 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/summary.json @@ -0,0 +1,127 @@ +{ + "AS57043": { + "name": "HOSTKEY-AS", + "events": 0, + "uniq_ips": 0 + }, + "AS209847": { + "name": "THE", + "events": 0, + "uniq_ips": 0 + }, + "AS210644": { + "name": "AEZA-AS", + "events": 44, + "uniq_ips": 4 + }, + "AS138915": { + "name": "KAOPU-HK (Kaopu Cloud HK Limited)", + "events": 1, + "uniq_ips": 1 + }, + "AS14956": { + "name": "ROUTERHOSTING (RouterHosting LLC)", + "events": 36, + "uniq_ips": 18 + }, + "AS216139": { + "name": "IRONHOST", + "events": 0, + "uniq_ips": 0 + }, + "AS51852": { + "name": "PLI-AS", + "events": 102, + "uniq_ips": 9 + }, + "AS400992": { + "name": "ZHOUYISAT-COMMUNICATIONS", + "events": 1, + "uniq_ips": 1 + }, + "AS33993": { + "name": "UFO-AS", + "events": 0, + "uniq_ips": 0 + }, + "AS51396": { + "name": "PFCLOUD (Pfcloud UG)", + "events": 156, + "uniq_ips": 28 + }, + "AS213702": { + "name": "QWINS-LTD", + "events": 0, + "uniq_ips": 0 + }, + "AS216246": { + "name": "RU-AEZA-AS", + "events": 0, + "uniq_ips": 0 + }, + "AS200651": { + "name": "FLOKINET", + "events": 12, + "uniq_ips": 1 + }, + "AS30823": { + "name": "AUROLOGIC (aurologic GmbH)", + "events": 0, + "uniq_ips": 0 + }, + "AS140666": { + "name": "ADPL-AS-AP (ANY DIGITAL PTE. LTD.)", + "events": 0, + "uniq_ips": 0 + }, + "AS214351": { + "name": "FEMOIT", + "events": 6, + "uniq_ips": 2 + }, + "AS198953": { + "name": "PROTON66", + "events": 134, + "uniq_ips": 4 + }, + "AS200593": { + "name": "PROSPERO-AS", + "events": 0, + "uniq_ips": 0 + }, + "AS214940": { + "name": "KPRONET", + "events": 0, + "uniq_ips": 0 + }, + "AS206728": { + "name": "MEDIALAND-AS", + "events": 0, + "uniq_ips": 0 + }, + "AS211720": { + "name": "Datashield, Inc.", + "events": 0, + "uniq_ips": 0 + }, + "AS216309": { + "name": "INVISIONTECH-GROUP-SRL", + "events": 0, + "uniq_ips": 0 + }, + "AS58854": { + "name": "KAOPY (Kaopu Cloud)", + "events": 0, + "uniq_ips": 0 + }, + "AS202685": { + "name": "TR-ARKEL", + "events": 0, + "uniq_ips": 0 + }, + "AS394711": { + "name": "KORGRID (KorGrid LLC)", + "events": 0, + "uniq_ips": 0 + } +}
\ No newline at end of file diff --git a/kevlar/2026-08-31/honeylabs/top-attackers.csv b/kevlar/2026-08-31/honeylabs/top-attackers.csv new file mode 100644 index 0000000..00a064b --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/top-attackers.csv @@ -0,0 +1,78 @@ +asn,name,kind,value,count
+AS210644,AEZA-AS,ip,147.45.71.214,36
+AS210644,AEZA-AS,ip,217.144.190.138,12
+AS210644,AEZA-AS,ip,176.124.203.177,4
+AS210644,AEZA-AS,ip,185.246.217.150,1
+AS210644,AEZA-AS,user_agent,"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15",18
+AS210644,AEZA-AS,user_agent,Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0,2
+AS210644,AEZA-AS,user_agent,Mozilla/5.0 (CentOS; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0,2
+AS210644,AEZA-AS,user_agent,"Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36",2
+AS210644,AEZA-AS,user_agent,Mozilla/5.0 (Windows NT 10.0; rv:125.0) Gecko/20100101 Firefox/125.0,2
+AS210644,AEZA-AS,user_agent,"Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36",2
+AS210644,AEZA-AS,user_agent,"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.6.16",2
+AS210644,AEZA-AS,user_agent,"Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36",2
+AS210644,AEZA-AS,user_agent,Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0) Gecko/20100101 Firefox/102.0,2
+AS210644,AEZA-AS,user_agent,"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.5.18",2
+AS138915,KAOPU-HK (Kaopu Cloud HK Limited),ip,154.90.37.55,1
+AS138915,KAOPU-HK (Kaopu Cloud HK Limited),user_agent,Microsoft WinRM Client,1
+AS14956,ROUTERHOSTING (RouterHosting LLC),ip,107.189.26.103,49
+AS14956,ROUTERHOSTING (RouterHosting LLC),ip,172.86.114.162,32
+AS14956,ROUTERHOSTING (RouterHosting LLC),ip,172.86.91.225,16
+AS14956,ROUTERHOSTING (RouterHosting LLC),ip,172.86.114.254,8
+AS14956,ROUTERHOSTING (RouterHosting LLC),ip,144.172.116.49,8
+AS14956,ROUTERHOSTING (RouterHosting LLC),ip,144.172.99.12,4
+AS14956,ROUTERHOSTING (RouterHosting LLC),ip,107.189.17.181,3
+AS14956,ROUTERHOSTING (RouterHosting LLC),ip,45.61.177.185,2
+AS14956,ROUTERHOSTING (RouterHosting LLC),ip,45.61.177.179,2
+AS14956,ROUTERHOSTING (RouterHosting LLC),ip,144.172.100.235,2
+AS14956,ROUTERHOSTING (RouterHosting LLC),user_agent,libredtail-http,49
+AS14956,ROUTERHOSTING (RouterHosting LLC),user_agent,"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36",4
+AS14956,ROUTERHOSTING (RouterHosting LLC),user_agent,zern-scanner (+https://zern.io),2
+AS14956,ROUTERHOSTING (RouterHosting LLC),user_agent,Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0,2
+AS51852,PLI-AS,ip,179.43.167.2,71
+AS51852,PLI-AS,ip,81.17.28.131,56
+AS51852,PLI-AS,ip,179.43.150.26,28
+AS51852,PLI-AS,ip,141.255.165.68,5
+AS51852,PLI-AS,ip,185.12.44.133,4
+AS51852,PLI-AS,ip,141.255.165.69,2
+AS51852,PLI-AS,ip,179.43.146.27,2
+AS51852,PLI-AS,ip,141.255.165.67,2
+AS51852,PLI-AS,ip,141.255.165.66,1
+AS51852,PLI-AS,user_agent,Mozilla/5.0,28
+AS51852,PLI-AS,user_agent,Mozilla/5.0 (Windows NT 10.0; Win64; x64),21
+AS51852,PLI-AS,user_agent,Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0,2
+AS400992,ZHOUYISAT-COMMUNICATIONS,ip,194.48.142.134,1
+AS51396,PFCLOUD (Pfcloud UG),ip,204.76.203.7,1095
+AS51396,PFCLOUD (Pfcloud UG),ip,204.76.203.14,424
+AS51396,PFCLOUD (Pfcloud UG),ip,45.135.193.193,416
+AS51396,PFCLOUD (Pfcloud UG),ip,204.76.203.49,338
+AS51396,PFCLOUD (Pfcloud UG),ip,45.135.194.113,264
+AS51396,PFCLOUD (Pfcloud UG),ip,45.135.193.198,192
+AS51396,PFCLOUD (Pfcloud UG),ip,204.76.203.4,171
+AS51396,PFCLOUD (Pfcloud UG),ip,176.65.148.226,111
+AS51396,PFCLOUD (Pfcloud UG),ip,176.65.149.30,103
+AS51396,PFCLOUD (Pfcloud UG),ip,176.65.149.27,103
+AS51396,PFCLOUD (Pfcloud UG),user_agent,Go-http-client/1.1,703
+AS51396,PFCLOUD (Pfcloud UG),user_agent,Mozilla/5.0 (compatible; research-scan/1.0),424
+AS51396,PFCLOUD (Pfcloud UG),user_agent,0day,192
+AS51396,PFCLOUD (Pfcloud UG),user_agent,Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36,111
+AS51396,PFCLOUD (Pfcloud UG),user_agent,Mozilla/5.0 zgrab/0.x,65
+AS51396,PFCLOUD (Pfcloud UG),user_agent,"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36",10
+AS51396,PFCLOUD (Pfcloud UG),user_agent,"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",3
+AS51396,PFCLOUD (Pfcloud UG),user_agent,Mozilla/5.0,3
+AS51396,PFCLOUD (Pfcloud UG),user_agent,Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.14,2
+AS51396,PFCLOUD (Pfcloud UG),user_agent,Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:135.0) Gecko/20100101 Firefox/135.0,1
+AS200651,FLOKINET,ip,185.100.87.136,12
+AS200651,FLOKINET,user_agent,Mozilla/5.0 (Android 12; Mobile; rv:117.0) Gecko/117.0 Focus/117.0,3
+AS200651,FLOKINET,user_agent,"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3 rv:3.0; eu-FR) AppleWebKit/533.4.2 (KHTML, like Gecko) Version/5.0.1 Safar",3
+AS200651,FLOKINET,user_agent,Mozilla/5.0 (Windows NT 10.0; Win64; x64),2
+AS200651,FLOKINET,user_agent,SPARK COMMIT: 08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17,1
+AS200651,FLOKINET,user_agent,Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:104.71.6212.24) Gecko/25.2.4212.671 Firefox/2.0,1
+AS214351,FEMOIT,ip,62.60.226.150,4
+AS214351,FEMOIT,ip,192.162.199.180,2
+AS214351,FEMOIT,user_agent,python-requests/2.22.0,2
+AS198953,PROTON66,ip,176.120.22.61,1141
+AS198953,PROTON66,ip,176.120.22.43,134
+AS198953,PROTON66,ip,193.143.1.66,31
+AS198953,PROTON66,ip,176.120.22.240,2
+AS198953,PROTON66,user_agent,"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.",134
diff --git a/kevlar/2026-08-31/iocs/README.md b/kevlar/2026-08-31/iocs/README.md new file mode 100644 index 0000000..1be87b8 --- /dev/null +++ b/kevlar/2026-08-31/iocs/README.md @@ -0,0 +1,13 @@ +# Weekly BP Report -- 2026-08-31 + +Generated: 2026-08-31T12:30:00Z +ASNs covered: 25 +Sponge top-talker sessions: 2,651,854 +Honeylabs sampled events: 492 +Censys IPs enriched: 10 +Anomalies flagged: 50 + +## Notes +- Sponge sensor fleet reconfigured 2026-08-28. Week-over-week deltas vs 2026-08-23 are NOT comparable; this run is the new baseline (see changes/diff-vs-prior-week.csv for recorded raw deltas). +- Honeypot fleet campaign data (2026-08-28 to 2026-08-31) contributed attack observations and attacker IoCs. Deception internals are excluded by policy. +- Blog post: /Users/hrbrmstr/projects/ai.rud.is/src/data/blog/2026-08-31-weekly-bulletproof-report.md diff --git a/kevlar/2026-08-31/iocs/all-observed-ips.txt b/kevlar/2026-08-31/iocs/all-observed-ips.txt new file mode 100644 index 0000000..2a2239c --- /dev/null +++ b/kevlar/2026-08-31/iocs/all-observed-ips.txt @@ -0,0 +1,495 @@ +# Sources observed by Sponge (Arkime) and Honeylabs, 2026-08-24 to 2026-08-31 + +# AS57043 - HOSTKEY-AS +103.27.156.128 +151.241.155.245 +151.241.234.73 +151.245.140.36 +151.247.219.40 +167.17.182.242 +185.23.18.151 +193.17.95.129 +193.84.2.233 +212.237.219.206 +38.124.152.45 +38.143.19.97 +46.17.99.102 +66.248.205.4 +80.91.65.247 +82.22.175.192 +82.24.19.158 +89.125.61.139 +89.125.61.90 +91.239.211.68 + +# AS209847 - THE +103.231.75.163 +185.231.206.117 +185.231.207.149 +31.222.238.6 +45.12.129.166 +45.12.132.198 +45.12.136.73 +45.12.146.245 +45.144.28.70 +45.82.252.106 +45.83.141.120 +45.83.143.9 +45.83.20.230 +45.83.22.14 +45.89.55.225 +5.181.20.206 +77.91.122.2 +91.225.219.200 +92.118.233.6 +94.131.106.51 + +# AS210644 - AEZA-AS +109.107.190.8 +109.120.184.14 +109.172.95.248 +138.124.54.172 +138.124.91.58 +138.124.99.219 +147.45.71.214 +176.124.203.177 +185.103.101.180 +185.103.101.74 +185.246.217.150 +194.76.217.92 +212.113.102.0 +213.165.46.78 +213.165.46.83 +217.144.190.138 +62.60.158.60 +77.221.153.3 +77.221.158.41 +79.137.197.24 +81.19.137.20 +85.192.31.14 +89.208.97.111 +89.22.224.187 + +# AS138915 - KAOPU-HK (Kaopu Cloud HK Limited) +154.90.37.55 +38.54.2.107 +38.54.2.112 +38.54.2.120 +38.54.2.13 +38.54.2.135 +38.54.2.148 +38.54.2.152 +38.54.2.168 +38.54.2.170 +38.54.2.195 +38.54.2.203 +38.54.2.204 +38.54.2.209 +38.54.2.221 +38.54.2.232 +38.54.2.61 +38.54.2.75 +38.54.2.82 +38.60.191.241 +38.60.230.109 + +# AS14956 - ROUTERHOSTING (RouterHosting LLC) +107.189.17.181 +107.189.26.103 +107.189.27.179 +144.172.100.235 +144.172.109.224 +144.172.110.38 +144.172.111.21 +144.172.115.222 +144.172.116.49 +144.172.94.186 +144.172.94.243 +144.172.99.12 +153.75.82.185 +167.88.165.227 +167.88.165.33 +167.88.165.44 +167.88.166.32 +167.88.168.121 +172.86.113.15 +172.86.113.36 +172.86.114.162 +172.86.114.254 +172.86.116.32 +172.86.116.74 +172.86.117.95 +172.86.123.8 +172.86.90.159 +172.86.90.76 +172.86.91.225 +216.126.225.6 +216.126.227.184 +216.126.239.17 +45.59.117.74 +45.61.129.23 +45.61.170.85 +45.61.177.179 +45.61.177.185 +45.61.182.81 + +# AS216139 - IRONHOST +109.120.141.207 +176.98.185.152 +178.208.78.17 +178.208.88.6 +185.72.10.233 +46.30.46.124 +46.30.46.130 + +# AS51852 - PLI-AS +141.255.165.66 +141.255.165.67 +141.255.165.68 +141.255.165.69 +179.43.133.154 +179.43.134.114 +179.43.139.58 +179.43.143.170 +179.43.146.226 +179.43.146.227 +179.43.146.27 +179.43.150.26 +179.43.163.26 +179.43.167.2 +179.43.168.58 +179.43.175.234 +179.43.175.236 +179.43.182.200 +179.43.186.223 +179.43.186.241 +185.12.44.133 +190.211.255.210 +46.19.137.194 +46.19.138.10 +81.17.28.130 +81.17.28.131 + +# AS400992 - ZHOUYISAT-COMMUNICATIONS +130.12.44.88 +130.12.47.8 +147.45.124.196 +147.45.125.234 +147.45.125.75 +185.121.15.149 +185.121.15.184 +185.219.7.27 +185.236.25.175 +185.236.25.178 +185.250.180.21 +193.46.218.239 +193.46.218.82 +194.48.142.134 +23.172.217.46 +23.172.217.58 +23.172.217.77 +23.172.217.87 +23.177.184.46 +23.177.185.239 +45.150.195.235 + +# AS33993 - UFO-AS +141.98.189.206 +185.235.242.122 +193.201.126.15 +45.144.31.247 +45.150.64.125 +45.67.230.246 + +# AS51396 - PFCLOUD (Pfcloud UG) +176.65.132.129 +176.65.132.149 +176.65.134.52 +176.65.139.11 +176.65.148.147 +176.65.148.216 +176.65.148.226 +176.65.148.29 +176.65.148.71 +176.65.148.84 +176.65.148.96 +176.65.149.188 +176.65.149.201 +176.65.149.212 +176.65.149.220 +176.65.149.224 +176.65.149.230 +176.65.149.236 +176.65.149.27 +176.65.149.30 +176.65.149.31 +176.65.149.64 +176.65.149.67 +176.65.151.74 +204.76.203.14 +204.76.203.18 +204.76.203.206 +204.76.203.212 +204.76.203.226 +204.76.203.231 +204.76.203.4 +204.76.203.49 +204.76.203.7 +204.76.203.73 +45.135.193.193 +45.135.193.198 +45.135.194.113 +45.135.194.99 +45.153.34.112 +45.153.34.114 +45.153.34.149 +45.153.34.235 +45.156.87.204 +45.156.87.216 +45.156.87.253 +45.156.87.254 +77.83.39.94 +94.183.174.77 + +# AS213702 - QWINS-LTD +185.238.191.130 +78.40.209.57 +80.253.249.170 +84.21.189.148 +89.125.48.168 +89.125.48.64 +95.164.123.100 +95.164.53.44 + +# AS216246 - RU-AEZA-AS +138.124.14.150 +176.124.222.35 +176.124.222.50 +176.124.222.72 +178.159.94.237 +178.159.94.48 +178.20.208.185 +178.20.208.195 +185.103.100.48 +185.221.199.82 +185.96.80.121 +194.26.229.20 +77.110.105.96 +77.221.151.241 +79.137.192.106 +82.117.87.156 +82.117.87.221 +85.192.30.189 +85.192.30.81 +85.192.56.190 + +# AS200651 - FLOKINET +185.10.68.109 +185.10.68.96 +185.100.84.164 +185.100.84.174 +185.100.85.79 +185.100.87.136 +185.146.232.118 +185.146.232.125 +185.146.232.142 +185.146.232.145 +185.146.232.146 +185.146.233.211 +185.165.169.121 +185.165.169.248 +185.165.171.158 +185.246.188.74 +185.246.190.66 +185.246.191.8 +185.247.225.201 +37.228.129.67 + +# AS30823 - AUROLOGIC (aurologic GmbH) +152.89.244.135 +152.89.246.217 +160.20.144.83 +172.86.92.75 +172.86.93.168 +172.86.93.173 +172.86.93.75 +172.86.94.229 +172.86.94.48 +172.86.94.49 +172.86.94.82 +172.86.95.26 +172.86.95.45 +216.126.229.131 +41.216.188.21 +45.11.16.143 +45.11.18.33 +45.138.173.7 +45.153.243.249 + +# AS140666 - ADPL-AS-AP (ANY DIGITAL PTE. LTD.) +154.94.68.6 +204.3.179.2 +204.3.179.3 +204.3.250.24 + +# AS214351 - FEMOIT +192.162.199.180 +62.60.226.150 +62.60.226.176 +62.60.226.186 +62.60.226.79 + +# AS198953 - PROTON66 +176.120.22.113 +176.120.22.122 +176.120.22.123 +176.120.22.135 +176.120.22.147 +176.120.22.16 +176.120.22.179 +176.120.22.240 +176.120.22.42 +176.120.22.43 +176.120.22.52 +176.120.22.6 +176.120.22.61 +176.120.22.66 +176.120.22.73 +193.143.1.66 +37.77.150.10 +37.77.150.119 +37.77.150.241 +37.77.150.67 +37.77.150.83 + +# AS200593 - PROSPERO-AS +193.24.123.118 +193.24.123.148 +193.24.123.16 +193.24.123.23 +193.24.123.55 +193.24.123.58 +193.24.123.63 +91.202.233.121 +91.202.233.29 +91.202.233.33 +91.202.233.46 +91.202.233.79 +91.202.233.8 +91.202.233.82 +91.215.85.104 +91.215.85.106 +91.215.85.142 +91.215.85.193 +91.215.85.34 +91.215.85.40 + +# AS214940 - KPRONET +45.144.212.221 +45.144.212.40 +45.144.212.53 +77.83.39.104 +77.83.39.117 +77.83.39.119 +77.83.39.14 +77.83.39.159 +77.83.39.197 +77.83.39.24 +77.83.39.27 +77.83.39.36 +77.83.39.42 +77.83.39.54 +77.83.39.6 +77.83.39.72 +77.83.39.82 +77.83.39.84 +77.83.39.86 +77.83.39.94 + +# AS211720 - Datashield, Inc. +185.231.32.24 +185.231.32.25 +185.231.33.22 +185.231.33.30 +185.231.33.38 +185.231.33.46 + +# AS58854 - KAOPY (Kaopu Cloud) +103.236.255.202 + +# Honeypot fleet - attacker hosts (3-day campaigns, 2026-08-28 to 2026-08-31) +# Feo Prest SRL (DE) - credential sweeps +213.209.159.175 + +# SS-Net (RO) - credential sweeps, cross-node +80.94.95.211 + +# Pfcloud UG (NL) - continuous low-and-slow recon +204.76.203.18 + +# Techoff Srv Ltd (NL/BG) - industrial template sweeps +45.148.10.183 +45.148.10.238 +93.123.109.163 + +# RMP Protection Ltd (BG) - CI/SSH config crawler +93.152.223.194 + +# Bulgarian-linked - control-node credential sweep +87.120.104.29 + +# State Cyber Protection (UA) - scanner +193.29.204.107 + +# Datacamp/CDN (DE) - malware dropper dictionary blast +169.150.201.29 + +# Google Cloud - template sweeps / xmlrpc brute / metadata hunt +35.245.230.215 +136.110.80.233 +34.166.182.179 +34.50.64.250 +34.92.76.191 +35.247.178.64 +34.28.244.5 +34.63.40.186 + +# DigitalOcean - registry-hunt rotation (3 IP sets, 3 days) +206.189.19.19 +159.89.127.165 +64.225.75.246 +178.128.207.138 +142.93.129.190 +165.22.34.189 +157.245.113.227 +167.71.175.236 +143.110.213.72 +207.154.212.47 +143.244.168.161 +143.110.217.244 +159.223.132.86 +157.230.19.140 +64.227.32.66 + +# DELTA Fiber Nederland (residential) - NightAgent multi-stage intrusion +81.172.241.94 + +# WorldStream B.V. (NL) - WHM/cPanel + wp-batch probes +185.165.242.182 + +# HostRoyale Technologies (US) - WHM/cPanel + wp-batch probes +43.225.189.141 + +# Miteflux Technologies (AE) - POST-heavy prober +31.59.160.30 + +# Alibaba (SG) - scanner +47.84.110.109 + +# Akamai Connected Cloud (ID) - scanner +172.232.253.221 + +# Office National des Postes (MA) - POST-bearing phpunit/wp-batch +41.251.202.89 +105.138.220.253 + diff --git a/kevlar/2026-08-31/iocs/c2-paths.txt b/kevlar/2026-08-31/iocs/c2-paths.txt new file mode 100644 index 0000000..8503a7b --- /dev/null +++ b/kevlar/2026-08-31/iocs/c2-paths.txt @@ -0,0 +1,24 @@ +# Notable paths, 2026-08-24 to 2026-08-31 + +/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- PHPUnit RCE swarm, 3 days, fleet-wide; NightAgent POST variant carries <?php echo "NightAgent";?> +/v2/_catalog -- Docker Registry catalog enumeration (registry-hunt campaign) +/v2/internal/api-gateway/tags/list -- internal registry enumeration (registry-hunt) +/v2/internal/api-gateway/manifests/latest -- internal registry enumeration (registry-hunt) +/v2/internal/auth-service/tags/list -- internal registry enumeration (registry-hunt) +/console/ -- WebLogic console login probe (registry-hunt journey step) +/login.action -- Confluence login probe (registry-hunt journey step) +/___proxy_subdomain_whm/login, /___proxy_subdomain_cpanel -- WHM/cPanel proxy-subdomain probes +/xmlrpc.php -- 8,146 POST brute in 31 minutes (34.63.40.186, GCP) +/wp-json/batch/v1 -- WordPress batch abuse; forged X-Forwarded-For: 127.0.0.1 on all requests; SQLi multiplex variant carries UNION SELECT with CONCAT(0x7c7c, HEX(...), 0x7c7c) +/fetch, /proxy -- SSRF proxy discovery (metadata-hunt campaign) +/.mcp.json -- MCP endpoint discovery probe +/@fs/etc/passwd, /@fs/proc/self/environ -- Vite dev-server traversal probes +/global-protect/login.esp -- Palo Alto GlobalProtect login brute (176.120.22.43) +/+CSCOE+/logon.html -- Cisco ASA clientless VPN login probe (176.120.22.43) +/api/checkin -- beacon checkin (FLOKINET 185.100.87.136) +/eventmanager -- beacon poll (FLOKINET 185.100.87.136) +/api/client/update?arch=amd64&commit=08059e95dacaf -- beacon update pull (FLOKINET 185.100.87.136) +/v1/getinfo -- high-port agent info request (AEZA 147.45.71.214) +http://azenv.net/ -- proxy validation target (PFCLOUD 204.76.203.7) +/1.bat, /0x83911d24Fx.sh, /.tygahhh/ENCRYPTED.ps1 -- malware dropper dictionary samples (169.150.201.29) +/.env, /.aws/credentials, /.azure/credentials, /tfstate, /firebase.json -- credential harvest sweep paths (CREDSWEEP) diff --git a/kevlar/2026-08-31/iocs/fingerprints.txt b/kevlar/2026-08-31/iocs/fingerprints.txt new file mode 100644 index 0000000..344497d --- /dev/null +++ b/kevlar/2026-08-31/iocs/fingerprints.txt @@ -0,0 +1,46 @@ +# Fingerprints observed via Honeylabs, 2026-08-24 to 2026-08-31 + +t12i130500_2d7513195f68_e51b7354d87f -- JA4, AS210644 (AEZA-AS), source 217.144.190.138 +ge11nn0500_9af7e0472034 -- JA4H, AS210644 (AEZA-AS), source 217.144.190.138 +ge11nn0400_88d30a62b7ad -- JA4H, AS210644 (AEZA-AS), source 217.144.190.138 +t13i1909h2_9dc949149365_97f8aa674fd9 -- JA4, AS210644 (AEZA-AS), source 147.45.71.214 +19532158b559096b89b1a5f7d17175b2 -- HASSH, AS210644 (AEZA-AS), source 185.246.217.150 +t13i190900_9dc949149365_e7c285222651 -- JA4, AS210644 (AEZA-AS), source 176.124.203.177 +t13i220900_231e334592e8_29829a46703f -- JA4, AS138915 (KAOPU-HK (Kaopu Cloud HK Limited)), source 154.90.37.55 +po11nn0400_52fce913cf3b -- JA4H, AS138915 (KAOPU-HK (Kaopu Cloud HK Limited)), source 154.90.37.55 +ge11nn0500_39072d476f20 -- JA4H, AS14956 (ROUTERHOSTING (RouterHosting LLC)), source 107.189.26.103 +t13i100900_61a7ad8aa9b6_88aa062a14c8 -- JA4, AS14956 (ROUTERHOSTING (RouterHosting LLC)), source 144.172.99.12 +ge11nn0300_7fd797acd99d -- JA4H, AS14956 (ROUTERHOSTING (RouterHosting LLC)), source 144.172.99.12 +bf7dbf67fa9b26ee9f9deb99c49320ba -- HASSH, AS14956 (ROUTERHOSTING (RouterHosting LLC)), source 45.61.182.81 +ge11nn0400_9c3956fad5da -- JA4H, AS14956 (ROUTERHOSTING (RouterHosting LLC)), source 167.88.168.121 +t13i311000_e8f1e7e78f70_d41ae481755e -- JA4, AS14956 (ROUTERHOSTING (RouterHosting LLC)), source 144.172.115.222 +ge11nn0400_9c3956fad5da -- JA4H, AS51852 (PLI-AS), source 81.17.28.131 +ge11nn0300_341eb0d8946c -- JA4H, AS51852 (PLI-AS), source 179.43.150.26 +t13i1310h1_f57a46bbacb6_e7c285222651 -- JA4, AS51852 (PLI-AS), source 179.43.146.27 +ge11nn0400_9c3956fad5da -- JA4H, AS51396 (PFCLOUD (Pfcloud UG)), source 45.135.194.113 +ge11nn0400_88d30a62b7ad -- JA4H, AS51396 (PFCLOUD (Pfcloud UG)), source 176.65.149.236 +t13i140900_cbb2034c60b8_e7c285222651 -- JA4, AS51396 (PFCLOUD (Pfcloud UG)), source 176.65.148.226 +ge11nn0500_cac2c496544b -- JA4H, AS51396 (PFCLOUD (Pfcloud UG)), source 176.65.148.226 +ge11nn0500_9af7e0472034 -- JA4H, AS51396 (PFCLOUD (Pfcloud UG)), source 176.65.149.201 +t13i190800_9dc949149365_97f8aa674fd9 -- JA4, AS51396 (PFCLOUD (Pfcloud UG)), source 45.135.193.198 +ge10nn0200_3ed38b250d3d -- JA4H, AS51396 (PFCLOUD (Pfcloud UG)), source 45.135.193.198 +t13i1909h2_9dc949149365_97f8aa674fd9 -- JA4, AS51396 (PFCLOUD (Pfcloud UG)), source 176.65.149.188 +ge11nn0500_d3a2dcb1cd63 -- JA4H, AS51396 (PFCLOUD (Pfcloud UG)), source 176.65.148.71 +t13i251000_b78ed14e2fd0_ab7e3b40a677 -- JA4, AS51396 (PFCLOUD (Pfcloud UG)), source 77.83.39.94 +e54ef3ec27fe1fea7ab64d3fa05359fd -- HASSH, AS200651 (FLOKINET), source 185.100.87.136 +po11nn0600_c9506d37ac14 -- JA4H, AS200651 (FLOKINET), source 185.100.87.136 +t13i1909h2_9dc949149365_97f8aa674fd9 -- JA4, AS200651 (FLOKINET), source 185.100.87.136 +ge11nn0400_88d30a62b7ad -- JA4H, AS200651 (FLOKINET), source 185.100.87.136 +po11nn0500_e4a47a99f1ac -- JA4H, AS200651 (FLOKINET), source 185.100.87.136 +ge11nn0500_2d30dc89d981 -- JA4H, AS214351 (FEMOIT), source 192.162.199.180 +t13i1010h1_61a7ad8aa9b6_792d2c6655cb -- JA4, AS198953 (PROTON66), source 176.120.22.43 +po11nn18en_9a6afedbb443 -- JA4H, AS198953 (PROTON66), source 176.120.22.43 +t13i1010h1_61a7ad8aa9b6_3a8073edd8ef -- JA4, AS198953 (PROTON66), source 176.120.22.43 +ge11nn0400_8b1ed2202073 -- JA4H, AS198953 (PROTON66), source 176.120.22.43 +ge11cn06ru_b2fb244bb31f -- JA4H, AS198953 (PROTON66), source 176.120.22.43 +po11nn0500_63d29dec8e1d -- JA4H, AS198953 (PROTON66), source 176.120.22.43 +ge11nn05en_3bd45b6f184e -- JA4H, AS198953 (PROTON66), source 176.120.22.43 + +# Cross-run correlations +t13i1909h2_9dc949149365_97f8aa674fd9 -- beacon family: FLOKINET 185.100.87.136 (prior weeks) AND AEZA 147.45.71.214 (this week) + diff --git a/kevlar/2026-08-31/sponge/bp-ip-sessions.csv b/kevlar/2026-08-31/sponge/bp-ip-sessions.csv new file mode 100644 index 0000000..ad27881 --- /dev/null +++ b/kevlar/2026-08-31/sponge/bp-ip-sessions.csv @@ -0,0 +1,10 @@ +ip,arkime_sessions,cache_file
+107.189.26.103,4,/Users/hrbrmstr/.cache/arkime-mcp/session_search_20260831T113638_60e10d8d.ndjson
+147.45.71.214,53,/Users/hrbrmstr/.cache/arkime-mcp/session_search_20260831T113639_29b53eaa.ndjson
+154.90.37.55,52,/Users/hrbrmstr/.cache/arkime-mcp/session_search_20260831T113639_67644f88.ndjson
+176.120.22.61,100,/Users/hrbrmstr/.cache/arkime-mcp/session_search_20260831T113640_9d421320.ndjson
+179.43.167.2,100,/Users/hrbrmstr/.cache/arkime-mcp/session_search_20260831T113640_b7c6793a.ndjson
+185.100.87.136,100,/Users/hrbrmstr/.cache/arkime-mcp/session_search_20260831T113641_4a246a7f.ndjson
+194.48.142.134,0,/Users/hrbrmstr/.cache/arkime-mcp/session_search_20260831T113642_d85fd0f2.ndjson
+204.76.203.7,100,/Users/hrbrmstr/.cache/arkime-mcp/session_search_20260831T113642_412bf26b.ndjson
+62.60.226.150,6,/Users/hrbrmstr/.cache/arkime-mcp/session_search_20260831T113643_ccfc4339.ndjson
diff --git a/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113638_60e10d8d.ndjson b/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113638_60e10d8d.ndjson new file mode 100644 index 0000000..e352f01 --- /dev/null +++ b/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113638_60e10d8d.ndjson @@ -0,0 +1,4 @@ +{"@timestamp":1788165167720,"_id":"260831-2UWEhbn4ipBNDIp0rokxW5kW","_index":"arkime_sessions3-260831","client":{"bytes":1470},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["RouterHosting LLC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FranTech Solutions"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":345,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":5,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"15030300020250","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82376],"firstPacket":1788164739362,"initRTT":8,"ipProtocol":6,"lastPacket":1788164739790,"length":428,"network":{"bytes":2219,"community_id":"1:MLH0NrhNlP4HF8fdMvPCn6gEhTI=","packets":11},"node":"spark-afae","packetPos":[-82376,246570,90,0,82,1552,82,89,82,0,0,0],"packetRange":{"gte":1788164739362,"lte":1788164739790},"protocol":["tls","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":7},"source":{"as":{"full":"AS14956 RouterHosting LLC","number":14956,"organization":{"name":"RouterHosting LLC"}},"bytes":1874,"geo":{"country_iso_code":"NL"},"ip":"107.189.26.103","mac":["00:c0:1d:c0:ff:ee","c0:69:11:cd:1f:19"],"mac-cnt":2,"packets":6,"port":33844},"srcOui":["Grand Junction Networks, Inc.","Arista Networks"],"srcOuiCnt":2,"srcPayload8":"16030105b9010005","srcRIR":"ARIN","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["993561155603323"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["proxy","sensor:contabo-sponge-02-ts","contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4ls":"118_64_521","ja4t":["29200_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":5,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1728756003},"tls":{"ja3":["052a5e65c3a64e860e1706b1de3c46a9"],"ja3Cnt":1,"ja3string":["771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49161-49171-49162-49172-156-157-47-53,23-65281-10-11-35-13-51-45-43,4588-29-23-24,0"],"ja3stringCnt":1,"ja4":["t13i170900_5b57614c22b0_78e6aca7449b"],"ja4Cnt":1,"ja4_r":["t13i170900_002f,0035,009c,009d,1301,1302,1303,c009,c00a,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_000a,000b,000d,0017,0023,002b,002d,0033,ff01_0403,0804,0401,0503,0805,0501,0806,0601,0201"],"ja4_rCnt":1,"srcSessionId":["1347b6b9644d0f463618be6f76729167fd318995bbdd6ff4c6f292c6cf92a3a8"]},"totDataBytes":1477} +{"@timestamp":1788165167720,"_id":"260831-2UXxDDh1j1VIFokYf7LV4RlC","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["RouterHosting LLC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FranTech Solutions"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":58,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82376],"firstPacket":1788164738834,"ipProtocol":6,"lastPacket":1788164738848,"length":14,"network":{"bytes":238,"community_id":"1:3dlKYEQbkXcmFg7bP98cJXO9+iY=","packets":4},"node":"spark-afae","packetPos":[-82376,245872,76,224,76],"packetRange":{"gte":1788164738834,"lte":1788164738848},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS14956 RouterHosting LLC","number":14956,"organization":{"name":"RouterHosting LLC"}},"bytes":180,"geo":{"country_iso_code":"NL"},"ip":"107.189.26.103","mac":["00:c0:1d:c0:ff:ee","c0:69:11:cd:1f:19"],"mac-cnt":2,"packets":3,"port":52068},"srcOui":["Grand Junction Networks, Inc.","Arista Networks"],"srcOuiCnt":2,"srcRIR":"ARIN","srcTTL":[55],"srcTTLCnt":1,"tags":["proxy","sensor:contabo-sponge-02-ts","contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1,"ja4ts":["64240_2_1460_00"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":2,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1836893100},"totDataBytes":0} +{"@timestamp":1787207209953,"_id":"260820-bL-X-ZPifu1Lt5UBQ07QMww0","_index":"arkime_sessions3-260820","client":{"bytes":1720},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["RouterHosting LLC"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FranTech Solutions"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":2102,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":12,"port":22},"dstPayload8":"5353482d322e302d","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[76731],"firstPacket":1787206691213,"initRTT":95,"ipProtocol":6,"lastPacket":1787206697080,"length":5867,"network":{"bytes":4820,"community_id":"1:uunVFxOJKG+Gf67JzmfpfijL7Dg=","packets":27},"node":"spark-afae","packetPos":[-76731,1746072,90,600,16601,106,2398,124,1406,82,2578,1642,82,274,98,1292,82,0,2984,142,1010,1438,820,21125,870,1270,82,514],"packetRange":{"gte":1787206691213,"lte":1787206697080},"protocol":["ssh","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":1302},"source":{"as":{"full":"AS14956 RouterHosting LLC","number":14956,"organization":{"name":"RouterHosting LLC"}},"bytes":2718,"geo":{"country_iso_code":"NL"},"ip":"107.189.26.103","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":15,"port":42346},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"5353482d322e302d","srcRIR":"ARIN","srcTTL":[52],"srcTTLCnt":1,"ssh":{"hassh":["19532158b559096b89b1a5f7d17175b2"],"hasshCnt":1,"hasshServer":["41a85c886a9e9b845f0e69d68994492a"],"hasshServerCnt":1,"ja4ssh":["c24s16_c4s7_c9s3"],"ja4sshCnt":1,"version":["ssh-2.0-libssh2_1.11.1","ssh-2.0-openssh_9.6p1 ubuntu-3ubuntu13.5"],"versionCnt":2},"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["917695486512582"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["GPL ATTACK SSH Connection Attempt","537cee16-c4a9-45cd-baf1-75963ab7bdd2"],"signatureCnt":2,"signatureId":[1080086,1000010],"signatureIdCnt":2},"tag":{"block":["true"],"blockCnt":1,"category":["activity"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to negotiate an ssh session."],"intention":["suspicious"],"intentionCnt":1,"name":["ssh connection attempt"],"nameCnt":1},"tags":["sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4l":"95121_52_435900","ja4ls":"35_64_166662","ja4t":["29200_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":12,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":11,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1961525166},"totDataBytes":3022} +{"@timestamp":1787207209941,"_id":"260820-bL8X2PKBT6hCmoaS3guIm_W9","_index":"arkime_sessions3-260820","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["RouterHosting LLC"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FranTech Solutions"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":58,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":1,"port":22},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[76731],"firstPacket":1787206690084,"ipProtocol":6,"lastPacket":1787206690276,"length":192,"network":{"bytes":220,"community_id":"1:1C5BaSTrFYodU8odrR+6zMIS2Qw=","packets":4},"node":"spark-afae","packetPos":[-76731,1740152,70,1282,70],"packetRange":{"gte":1787206690084,"lte":1787206690276},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS14956 RouterHosting LLC","number":14956,"organization":{"name":"RouterHosting LLC"}},"bytes":162,"geo":{"country_iso_code":"NL"},"ip":"107.189.26.103","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":50849},"srcDscp":[40],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["645682251986147"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["GPL ATTACK SSH Connection Attempt"],"signatureCnt":1,"signatureId":[1000010],"signatureIdCnt":1},"tags":["sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1,"ja4ts":["64240_2_1460_00"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":2,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":641124744},"totDataBytes":0} diff --git a/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113639_29b53eaa.ndjson b/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113639_29b53eaa.ndjson new file mode 100644 index 0000000..801ba6c --- /dev/null +++ b/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113639_29b53eaa.ndjson @@ -0,0 +1,53 @@ +{"@timestamp":1787991936200,"_id":"260829-N7vgw7p2CSVAZo3Eac-9AVUP","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":8080},"dstRIR":"RIPE","ethertype":2048,"fileId":[81221],"firstPacket":1787991651170,"ipProtocol":6,"lastPacket":1787991652186,"length":1016,"network":{"bytes":148,"community_id":"1:eL4ZHV77N4HFQc9mFEV3MHTbUrI=","packets":2},"node":"spark-afae","packetPos":[-81221,179108,172],"packetRange":{"gte":1787991651170,"lte":1787991652186},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":2,"port":35120},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["sensor:sponge-01-ts","honeypot","sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2053509478},"totDataBytes":0} +{"@timestamp":1787990732940,"_id":"260829-JyZPRBEzvntIvqGZ5he1oAVW","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":8080},"dstRIR":"ARIN","ethertype":2048,"fileId":[81214],"firstPacket":1787990351245,"ipProtocol":6,"lastPacket":1787990352272,"length":1027,"network":{"bytes":148,"community_id":"1:GGalzCq2CCJidVQDewuE/nlZWLg=","packets":2},"node":"spark-afae","packetPos":[-81214,524172,90],"packetRange":{"gte":1787990351245,"lte":1787990352272},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":36370},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[52],"srcTTLCnt":1,"tags":["sensor:netcup-ts","honeypot","netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":4001417055},"totDataBytes":0} +{"@timestamp":1787991333465,"_id":"260829-PSaP-yxzqhlH8pIUi5668ScD","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":8080},"dstRIR":"ARIN","ethertype":2048,"fileId":[81218],"firstPacket":1787990348840,"ipProtocol":6,"lastPacket":1787990349842,"length":1002,"network":{"bytes":148,"community_id":"1:kVHDHgOVwUb4k0RfLwjESx8q5Iw=","packets":2},"node":"spark-afae","packetPos":[-81218,114070,90],"packetRange":{"gte":1787990348840,"lte":1787990349842},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":2,"port":38912},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2067320260},"totDataBytes":0} +{"@timestamp":1787989232002,"_id":"260829-8iU7Srj9pjhO977qYKN1i74I","_index":"arkime_sessions3-260829","client":{"bytes":135},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":429,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8090},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81204],"firstPacket":1787988675072,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":74,"ipProtocol":6,"lastPacket":1787988675404,"length":332,"network":{"bytes":902,"community_id":"1:uxawoEdIi9OVrKDoJgGgM+GHw5k=","packets":10},"node":"spark-afae","packetPos":[-81204,6282457,90,160,82,210,82,185,82,278,89],"packetRange":{"gte":1787988675072,"lte":1787988675404},"protocol":["tcp","tls","http"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":473,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":39668},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"160301007b010000","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["873895570045471"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4l":"74037_51_tcp","ja4ls":"31_64_136","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":3,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":1,"psh":3,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":371097084},"tls":{"ja3":["cba7f34191ef2379c1325641f6c6c4f4"],"ja3Cnt":1,"ja3string":["771,49199-49195-49169-49159-49171-49161-49172-49162-5-47-53-49170-10,5-10-11-13-65281,23-24-25,0"],"ja3stringCnt":1,"ja4":["t12i130500_2d7513195f68_e51b7354d87f"],"ja4Cnt":1,"ja4_r":["t12i130500_0005,000a,002f,0035,c007,c009,c00a,c011,c012,c013,c014,c02b,c02f_0005,000a,000b,000d,ff01_0401,0403,0201,0203,0401,0501,0601"],"ja4_rCnt":1},"totDataBytes":238} +{"@timestamp":1787989231405,"_id":"260829-8iWGhDIZrlxK6b9XePYZmxyh","_index":"arkime_sessions3-260829","client":{"bytes":252},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8090},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81204],"firstPacket":1787988674763,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["209.141.62.110:8090","209.141.62.110"],"hostCnt":2,"ja4h":["ge11nn050000_57c5e92682a8_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn050000_Host,User-Agent,Accept-Charset,Accept-Encoding,Connection__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["/favicon.ico"],"pathCnt":1,"requestHeader":["host","user-agent","accept-charset","accept-encoding","connection"],"requestHeaderCnt":5,"requestHeaderField":["accept-charset","accept-encoding","connection"],"requestHeaderValue":["utf-8","gzip","close"],"requestHeaderValueCnt":3,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["content-type","content-length","server","x-powered-by","connection","date"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","sat, 29 aug 2026 07:31:14 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["209.141.62.110:8090/favicon.ico"],"uriCnt":1,"useragent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.2.22"],"useragentCnt":1},"initRTT":74,"ipProtocol":6,"lastPacket":1787988675072,"length":309,"network":{"bytes":1215,"community_id":"1:Zt3Sxso44M5VUUvuKEss42Nl7/4=","packets":10},"node":"spark-afae","packetPos":[-81204,6280512,90,0,82,334,82,369,652,82,0],"packetRange":{"gte":1787988674763,"lte":1787988675072},"protocol":["tcp","http"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":590,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":39666},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"474554202f666176","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["746957014419118"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","ce8622a8-6d2f-4fe3-ab81-0cc86e19363e","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7","f63d9281-086b-4182-9002-663ffb13d931"],"signatureCnt":4,"signatureId":[2000166,2000009,1031486,2000008],"signatureIdCnt":4},"tag":{"block":["false","true"],"blockCnt":2,"category":["recon","attack","protocol"],"categoryCnt":3,"cves":[""],"cvesCnt":1,"description":["generic favicon request detection. requests for /favicon.ico are commonly issued by web crawlers and browsers during normal browsing, but can also indicate automated scanning activity.","ip addresses with this tag have been seen crawling http(s) servers around the internet.","generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning.","cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys."],"intention":["suspicious","unknown"],"intentionCnt":2,"name":["favicon crawler","web crawler","root path scanner"],"nameCnt":3},"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"52_64_tcp","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1302908324},"totDataBytes":539} +{"@timestamp":1787989232002,"_id":"260829-8iWRE2jdvJRMOLk5YVC7Bdse","_index":"arkime_sessions3-260829","client":{"bytes":135},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":429,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8090},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81204],"firstPacket":1787988674319,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":73,"ipProtocol":6,"lastPacket":1787988674669,"length":350,"network":{"bytes":968,"community_id":"1:htAHriicJaClpAZni31hChsAJ2U=","packets":11},"node":"spark-afae","packetPos":[-81204,6279098,90,360,82,210,82,185,82,0,0,89],"packetRange":{"gte":1787988674319,"lte":1787988674669},"protocol":["tcp","tls","http"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":539,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":6,"port":39652},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"160301007b010000","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["807980301493381"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4l":"73584_51_tcp","ja4ls":"25_64_61","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":1,"psh":3,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2461629858},"tls":{"ja3":["cba7f34191ef2379c1325641f6c6c4f4"],"ja3Cnt":1,"ja3string":["771,49199-49195-49169-49159-49171-49161-49172-49162-5-47-53-49170-10,5-10-11-13-65281,23-24-25,0"],"ja3stringCnt":1,"ja4":["t12i130500_2d7513195f68_e51b7354d87f"],"ja4Cnt":1,"ja4_r":["t12i130500_0005,000a,002f,0035,c007,c009,c00a,c011,c012,c013,c014,c02b,c02f_0005,000a,000b,000d,ff01_0401,0403,0201,0203,0401,0501,0601"],"ja4_rCnt":1},"totDataBytes":238} +{"@timestamp":1787989231405,"_id":"260829-8iUMBJkeH1tMt79ppkR65LUG","_index":"arkime_sessions3-260829","client":{"bytes":241},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8090},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81204],"firstPacket":1787988674009,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["209.141.62.110:8090","209.141.62.110"],"hostCnt":2,"ja4h":["ge11nn050000_57c5e92682a8_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn050000_Host,User-Agent,Accept-Charset,Accept-Encoding,Connection__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["/"],"pathCnt":1,"requestHeader":["host","user-agent","accept-charset","accept-encoding","connection"],"requestHeaderCnt":5,"requestHeaderField":["accept-charset","accept-encoding","connection"],"requestHeaderValue":["utf-8","gzip","close"],"requestHeaderValueCnt":3,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["content-type","content-length","server","x-powered-by","connection","date"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","sat, 29 aug 2026 07:31:14 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["209.141.62.110:8090/"],"uriCnt":1,"useragent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.2.22"],"useragentCnt":1},"initRTT":73,"ipProtocol":6,"lastPacket":1787988674317,"length":308,"network":{"bytes":1204,"community_id":"1:xHF483LzNV4C2HWHwKUc89PDlik=","packets":10},"node":"spark-afae","packetPos":[-81204,6277575,90,249,82,323,82,369,82,0,0],"packetRange":{"gte":1787988674009,"lte":1787988674317},"protocol":["tcp","http"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":579,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":39648},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"474554202f204854","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["601795474186862"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","ce8622a8-6d2f-4fe3-ab81-0cc86e19363e","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7"],"signatureCnt":3,"signatureId":[2000166,1031486,2000008],"signatureIdCnt":3},"tag":{"block":["false","true"],"blockCnt":2,"category":["recon","attack","protocol"],"categoryCnt":3,"cves":[""],"cvesCnt":1,"description":["ip addresses with this tag have been seen crawling http(s) servers around the internet.","generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning.","cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys."],"intention":["suspicious","unknown"],"intentionCnt":2,"name":["web crawler","root path scanner"],"nameCnt":2},"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"28_64_tcp","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":37769695},"totDataBytes":528} +{"@timestamp":1787989232002,"_id":"260829-8iX_KKREQIJDy7u4046l507c","_index":"arkime_sessions3-260829","client":{"bytes":135},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":429,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8090},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81204],"firstPacket":1787988673689,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":74,"ipProtocol":6,"lastPacket":1787988674009,"length":320,"network":{"bytes":902,"community_id":"1:70uOdbeDOG8Fdk+1kXqdkEjHIUc=","packets":10},"node":"spark-afae","packetPos":[-81204,6276402,90,0,82,210,82,185,352,262,89],"packetRange":{"gte":1787988673689,"lte":1787988674009},"protocol":["tcp","tls","http"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":473,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":39646},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"160301007b010000","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["426365615991645"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4l":"74415_51_tcp","ja4ls":"45_64_86","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":3,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":1,"psh":3,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2484838809},"tls":{"ja3":["cba7f34191ef2379c1325641f6c6c4f4"],"ja3Cnt":1,"ja3string":["771,49199-49195-49169-49159-49171-49161-49172-49162-5-47-53-49170-10,5-10-11-13-65281,23-24-25,0"],"ja3stringCnt":1,"ja4":["t12i130500_2d7513195f68_e51b7354d87f"],"ja4Cnt":1,"ja4_r":["t12i130500_0005,000a,002f,0035,c007,c009,c00a,c011,c012,c013,c014,c02b,c02f_0005,000a,000b,000d,ff01_0401,0403,0201,0203,0401,0501,0601"],"ja4_rCnt":1},"totDataBytes":238} +{"@timestamp":1787989231403,"_id":"260829-8iVhAQC8pDZDrbMbKut2M2FB","_index":"arkime_sessions3-260829","client":{"bytes":211},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8090},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81204],"firstPacket":1787988626241,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["209.141.62.110:8090","209.141.62.110"],"hostCnt":2,"ja4h":["ge11nn040000_e1d2031bdfea_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn040000_Host,User-Agent,Accept,Accept-Encoding__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["/"],"pathCnt":1,"requestHeader":["host","accept","user-agent","accept-encoding"],"requestHeaderCnt":4,"requestHeaderField":["accept","accept-encoding"],"requestHeaderValue":["*/*","gzip"],"requestHeaderValueCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["content-type","content-length","server","x-powered-by","connection","date"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","sat, 29 aug 2026 07:30:26 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["209.141.62.110:8090/"],"uriCnt":1,"useragent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15"],"useragentCnt":1},"initRTT":71,"ipProtocol":6,"lastPacket":1787988626527,"length":286,"network":{"bytes":1240,"community_id":"1:nCfEpictZ2fhOZY+buZGsWc6qdg=","packets":11},"node":"spark-afae","packetPos":[-81204,6162398,90,410,82,293,82,369,172,82,0,0],"packetRange":{"gte":1787988626241,"lte":1787988626527},"protocol":["tcp","http"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":615,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":6,"port":49334},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"474554202f204854","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["757261300706659"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","ce8622a8-6d2f-4fe3-ab81-0cc86e19363e","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7"],"signatureCnt":3,"signatureId":[2000166,1031486,2000008],"signatureIdCnt":3},"tag":{"block":["false","true"],"blockCnt":2,"category":["recon","attack","protocol"],"categoryCnt":3,"cves":[""],"cvesCnt":1,"description":["ip addresses with this tag have been seen crawling http(s) servers around the internet.","generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning.","cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys."],"intention":["suspicious","unknown"],"intentionCnt":2,"name":["web crawler","root path scanner"],"nameCnt":2},"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"45_64_tcp","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":5,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2928161800},"totDataBytes":498} +{"@timestamp":1787982872397,"_id":"260829-9SR0arAIZFBBVZV2_O7esHrf","_index":"arkime_sessions3-260829","client":{"bytes":135},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":429,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":3000},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81154],"firstPacket":1787982250385,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":70,"ipProtocol":6,"lastPacket":1787982250855,"length":470,"network":{"bytes":968,"community_id":"1:jieErXBJP8GVwDk7RvSzQufK12s=","packets":11},"node":"spark-afae","packetPos":[-81154,2217961,90,712,402,210,82,185,1744,292,82,89],"packetRange":{"gte":1787982250385,"lte":1787982250855},"protocol":["tls","http","tcp"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":539,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":6,"port":60300},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"160301007b010000","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["811069510869961"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4l":"70791_51_tcp","ja4ls":"40_64_135","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":1,"psh":3,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3059006402},"tls":{"ja3":["cba7f34191ef2379c1325641f6c6c4f4"],"ja3Cnt":1,"ja3string":["771,49199-49195-49169-49159-49171-49161-49172-49162-5-47-53-49170-10,5-10-11-13-65281,23-24-25,0"],"ja3stringCnt":1,"ja4":["t12i130500_2d7513195f68_e51b7354d87f"],"ja4Cnt":1,"ja4_r":["t12i130500_0005,000a,002f,0035,c007,c009,c00a,c011,c012,c013,c014,c02b,c02f_0005,000a,000b,000d,ff01_0401,0403,0201,0203,0401,0501,0601"],"ja4_rCnt":1},"totDataBytes":238} +{"@timestamp":1787982872337,"_id":"260829-9SSKfQx4eXNERafqSZR9ptWS","_index":"arkime_sessions3-260829","client":{"bytes":239},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":3000},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81154],"firstPacket":1787982249668,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["209.141.62.110:3000","209.141.62.110"],"hostCnt":2,"ja4h":["ge11nn050000_57c5e92682a8_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn050000_Host,User-Agent,Accept-Charset,Accept-Encoding,Connection__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["/favicon.ico"],"pathCnt":1,"requestHeader":["user-agent","accept-encoding","host","accept-charset","connection"],"requestHeaderCnt":5,"requestHeaderField":["accept-charset","accept-encoding","connection"],"requestHeaderValue":["utf-8","gzip","close"],"requestHeaderValueCnt":3,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["x-powered-by","content-type","content-length","server","date","connection"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","sat, 29 aug 2026 05:44:10 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["209.141.62.110:3000/favicon.ico"],"uriCnt":1,"useragent":["Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"],"useragentCnt":1},"initRTT":71,"ipProtocol":6,"lastPacket":1787982250299,"length":631,"network":{"bytes":1268,"community_id":"1:xjEbXBdsE108KaWVL1BgoVQex1c=","packets":11},"node":"spark-afae","packetPos":[-81154,2215053,90,442,460,321,82,369,242,82,336,82],"packetRange":{"gte":1787982249668,"lte":1787982250299},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":643,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":6,"port":60294},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"474554202f666176","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["335914626835621"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ce8622a8-6d2f-4fe3-ab81-0cc86e19363e","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7","f63d9281-086b-4182-9002-663ffb13d931","869feaa1-dc77-4037-aee2-247b7a39cf7d"],"signatureCnt":4,"signatureId":[2000166,2000009,1031486,2000008],"signatureIdCnt":4},"tag":{"block":["false","true"],"blockCnt":2,"category":["attack","recon","protocol"],"categoryCnt":3,"cves":[""],"cvesCnt":1,"description":["ip addresses with this tag have been seen crawling http(s) servers around the internet.","cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys.","generic favicon request detection. requests for /favicon.ico are commonly issued by web crawlers and browsers during normal browsing, but can also indicate automated scanning activity.","generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning."],"intention":["unknown","suspicious"],"intentionCnt":2,"name":["favicon crawler","web crawler","root path scanner"],"nameCnt":3},"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"27_64_tcp","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":5,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":519290863},"totDataBytes":526} +{"@timestamp":1787982872397,"_id":"260829-9SQTe90O9HFFm66XpmNaOkz8","_index":"arkime_sessions3-260829","client":{"bytes":135},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":429,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":3000},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81154],"firstPacket":1787982249048,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":71,"ipProtocol":6,"lastPacket":1787982249667,"length":619,"network":{"bytes":968,"community_id":"1:NLqrWBN3Yw4J5U/v7M8mYGl8fDg=","packets":11},"node":"spark-afae","packetPos":[-81154,2212869,90,0,872,210,82,185,262,152,82,89],"packetRange":{"gte":1787982249048,"lte":1787982249667},"protocol":["tls","http","tcp"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":539,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":6,"port":60282},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"160301007b010000","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["490828286713626"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4l":"71109_51_tcp","ja4ls":"44_64_108","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":1,"psh":3,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":4206213335},"tls":{"ja3":["cba7f34191ef2379c1325641f6c6c4f4"],"ja3Cnt":1,"ja3string":["771,49199-49195-49169-49159-49171-49161-49172-49162-5-47-53-49170-10,5-10-11-13-65281,23-24-25,0"],"ja3stringCnt":1,"ja4":["t12i130500_2d7513195f68_e51b7354d87f"],"ja4Cnt":1,"ja4_r":["t12i130500_0005,000a,002f,0035,c007,c009,c00a,c011,c012,c013,c014,c02b,c02f_0005,000a,000b,000d,ff01_0401,0403,0201,0203,0401,0501,0601"],"ja4_rCnt":1},"totDataBytes":238} +{"@timestamp":1787982872319,"_id":"260829-9SRsdUpEgeROv68Sju7Kc_L2","_index":"arkime_sessions3-260829","client":{"bytes":228},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":3000},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81154],"firstPacket":1787982248396,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["209.141.62.110:3000","209.141.62.110"],"hostCnt":2,"ja4h":["ge11nn050000_57c5e92682a8_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn050000_Host,User-Agent,Accept-Charset,Accept-Encoding,Connection__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["/"],"pathCnt":1,"requestHeader":["user-agent","accept-encoding","host","accept-charset","connection"],"requestHeaderCnt":5,"requestHeaderField":["accept-charset","accept-encoding","connection"],"requestHeaderValue":["utf-8","gzip","close"],"requestHeaderValueCnt":3,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["x-powered-by","content-type","content-length","server","date","connection"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","sat, 29 aug 2026 05:44:08 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["209.141.62.110:3000/"],"uriCnt":1,"useragent":["Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"],"useragentCnt":1},"initRTT":70,"ipProtocol":6,"lastPacket":1787982248972,"length":576,"network":{"bytes":1257,"community_id":"1:phJMcBwdabHDf7N+vCJFGJA2VLo=","packets":11},"node":"spark-afae","packetPos":[-81154,2209554,90,610,172,310,82,369,1016,172,240,82],"packetRange":{"gte":1787982248396,"lte":1787982248972},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":632,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":6,"port":49738},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"474554202f204854","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["12429962218702"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ce8622a8-6d2f-4fe3-ab81-0cc86e19363e","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7","869feaa1-dc77-4037-aee2-247b7a39cf7d"],"signatureCnt":3,"signatureId":[2000166,1031486,2000008],"signatureIdCnt":3},"tag":{"block":["false","true"],"blockCnt":2,"category":["attack","recon","protocol"],"categoryCnt":3,"cves":[""],"cvesCnt":1,"description":["ip addresses with this tag have been seen crawling http(s) servers around the internet.","cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys.","generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning."],"intention":["unknown","suspicious"],"intentionCnt":2,"name":["web crawler","root path scanner"],"nameCnt":2},"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"44_64_tcp","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":5,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":909814970},"totDataBytes":515} +{"@timestamp":1787982872991,"_id":"260829-9SRn8gEZGfxGhZAEgX8CmNhb","_index":"arkime_sessions3-260829","client":{"bytes":135},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":429,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":3000},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81154],"firstPacket":1787982247782,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":70,"ipProtocol":6,"lastPacket":1787982248266,"length":484,"network":{"bytes":968,"community_id":"1:US8DKec5ekaa0LFcjWKqGv4nn4Q=","packets":11},"node":"spark-afae","packetPos":[-81154,2206072,90,918,352,210,82,185,622,82,0,89],"packetRange":{"gte":1787982247782,"lte":1787982248266},"protocol":["tls","http","tcp"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":539,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":6,"port":49734},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"160301007b010000","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["2234941089644812"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4l":"70758_51_tcp","ja4ls":"45_64_117","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":1,"psh":3,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":97261827},"tls":{"ja3":["cba7f34191ef2379c1325641f6c6c4f4"],"ja3Cnt":1,"ja3string":["771,49199-49195-49169-49159-49171-49161-49172-49162-5-47-53-49170-10,5-10-11-13-65281,23-24-25,0"],"ja3stringCnt":1,"ja4":["t12i130500_2d7513195f68_e51b7354d87f"],"ja4Cnt":1,"ja4_r":["t12i130500_0005,000a,002f,0035,c007,c009,c00a,c011,c012,c013,c014,c02b,c02f_0005,000a,000b,000d,ff01_0401,0403,0201,0203,0401,0501,0601"],"ja4_rCnt":1},"totDataBytes":238} +{"@timestamp":1787982872317,"_id":"260829-9SQmeo0nCFFN07nC6NCZp3vy","_index":"arkime_sessions3-260829","client":{"bytes":211},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":3000},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81154],"firstPacket":1787982160277,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["209.141.62.110:3000","209.141.62.110"],"hostCnt":2,"ja4h":["ge11nn040000_e1d2031bdfea_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn040000_Host,User-Agent,Accept,Accept-Encoding__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["/"],"pathCnt":1,"requestHeader":["user-agent","accept-encoding","host","accept"],"requestHeaderCnt":4,"requestHeaderField":["accept","accept-encoding"],"requestHeaderValue":["*/*","gzip"],"requestHeaderValueCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["x-powered-by","content-type","content-length","server","date","connection"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","sat, 29 aug 2026 05:42:40 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["209.141.62.110:3000/"],"uriCnt":1,"useragent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15"],"useragentCnt":1},"initRTT":70,"ipProtocol":6,"lastPacket":1787982160562,"length":285,"network":{"bytes":1174,"community_id":"1:NxyOgXM0U7i8ZqDbbscexhe/f2s=","packets":10},"node":"spark-afae","packetPos":[-81154,1987912,90,434,82,293,82,369,572,82,0],"packetRange":{"gte":1787982160277,"lte":1787982160562},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":549,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":41740},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"474554202f204854","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["66972320729093"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ce8622a8-6d2f-4fe3-ab81-0cc86e19363e","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7","869feaa1-dc77-4037-aee2-247b7a39cf7d"],"signatureCnt":3,"signatureId":[2000166,1031486,2000008],"signatureIdCnt":3},"tag":{"block":["false","true"],"blockCnt":2,"category":["attack","recon","protocol"],"categoryCnt":3,"cves":[""],"cvesCnt":1,"description":["ip addresses with this tag have been seen crawling http(s) servers around the internet.","cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys.","generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning."],"intention":["unknown","suspicious"],"intentionCnt":2,"name":["web crawler","root path scanner"],"nameCnt":2},"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"43_64_tcp","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1913934558},"totDataBytes":498} +{"@timestamp":1787981067587,"_id":"260829-4Lnb130YY9BJUpJUeLXTTN_3","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":3000},"dstRIR":"RIPE","ethertype":2048,"fileId":[81141],"firstPacket":1787980511624,"ipProtocol":6,"lastPacket":1787980512629,"length":1005,"network":{"bytes":148,"community_id":"1:dq81+I36DuIv06HqeSBJsvbEsIU=","packets":2},"node":"spark-afae","packetPos":[-81141,1068016,384],"packetRange":{"gte":1787980511624,"lte":1787980512629},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":2,"port":46216},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["sponge-01-ts","honeypot","sensor:sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1413806104},"totDataBytes":0} +{"@timestamp":1787981067587,"_id":"260829-4LkwHJ7YFAVIbY8G_Xa3P1vm","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":3000},"dstRIR":"RIPE","ethertype":2048,"fileId":[81141],"firstPacket":1787980509623,"ipProtocol":6,"lastPacket":1787980510648,"length":1025,"network":{"bytes":148,"community_id":"1:kn9CMIoAZUZG60OFgsnSpGVWAjs=","packets":2},"node":"spark-afae","packetPos":[-81141,1065642,1814],"packetRange":{"gte":1787980509623,"lte":1787980510648},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":2,"port":46200},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["sponge-01-ts","honeypot","sensor:sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1935626081},"totDataBytes":0} +{"@timestamp":1787979565462,"_id":"260829-qrmF7eSRPHlD46E8nsILVruK","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8080},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[81131],"firstPacket":1787979241033,"ipProtocol":6,"lastPacket":1787979242037,"length":1004,"network":{"bytes":148,"community_id":"1:2zl1aTzDtuEgFScLLAoWR6fKS2Q=","packets":2},"node":"spark-afae","packetPos":[-81131,1230132,1682],"packetRange":{"gte":1787979241033,"lte":1787979242037},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":41610},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[55],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2089066181},"totDataBytes":0} +{"@timestamp":1787979565462,"_id":"260829-qrn6pCTV4_FGdKRUcC1L78Dy","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8080},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[81131],"firstPacket":1787979239033,"ipProtocol":6,"lastPacket":1787979240053,"length":1020,"network":{"bytes":148,"community_id":"1:VfxB6ddklOV8D2Q0YPDi1teh/4U=","packets":2},"node":"spark-afae","packetPos":[-81131,1228284,962],"packetRange":{"gte":1787979239033,"lte":1787979240053},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":41604},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[55],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":252850851},"totDataBytes":0} +{"@timestamp":1787979263595,"_id":"260829-cSTXOXZMYr9NZaglnUx3-VC9","_index":"arkime_sessions3-260829","client":{"bytes":135},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":429,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8282},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81130],"firstPacket":1787978336859,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["connection","content-type"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":71,"ipProtocol":6,"lastPacket":1787978337152,"length":293,"network":{"bytes":902,"community_id":"1:kiCxLaX9V90cvC8maASZKoCunFo=","packets":10},"node":"spark-afae","packetPos":[-81130,8272224,90,6546,82,210,82,185,1536,246,89],"packetRange":{"gte":1787978336859,"lte":1787978337152},"protocol":["tls","http","tcp"],"protocolCnt":3,"rootId":"260829-cSTXOXZMYr9NZaglnUx3-VC9","segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":473,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":39138},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"160301007b010000","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["32088612477998"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4l":"71172_51_tcp","ja4ls":"25_64_127","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":3,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":1,"psh":3,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":136089276},"tls":{"ja3":["cba7f34191ef2379c1325641f6c6c4f4"],"ja3Cnt":1,"ja3string":["771,49199-49195-49169-49159-49171-49161-49172-49162-5-47-53-49170-10,5-10-11-13-65281,23-24-25,0"],"ja3stringCnt":1,"ja4":["t12i130500_2d7513195f68_e51b7354d87f"],"ja4Cnt":1,"ja4_r":["t12i130500_0005,000a,002f,0035,c007,c009,c00a,c011,c012,c013,c014,c02b,c02f_0005,000a,000b,000d,ff01_0401,0403,0201,0203,0401,0501,0601"],"ja4_rCnt":1},"totDataBytes":238} +{"@timestamp":1787979263580,"_id":"260829-cSS3bb26z3pB65XnWlNXx_SS","_index":"arkime_sessions3-260829","client":{"bytes":239},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8282},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81130],"firstPacket":1787978336545,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["209.141.62.110:8282","209.141.62.110"],"hostCnt":2,"ja4h":["ge11nn050000_57c5e92682a8_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn050000_Host,User-Agent,Accept-Charset,Accept-Encoding,Connection__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["/favicon.ico"],"pathCnt":1,"requestHeader":["accept-encoding","connection","accept-charset","user-agent","host"],"requestHeaderCnt":5,"requestHeaderField":["accept-charset","accept-encoding","connection"],"requestHeaderValue":["utf-8","gzip","close"],"requestHeaderValueCnt":3,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["content-length","connection","content-type","date","server","x-powered-by"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","sat, 29 aug 2026 04:38:56 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["209.141.62.110:8282/favicon.ico"],"uriCnt":1,"useragent":["Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"],"useragentCnt":1},"initRTT":72,"ipProtocol":6,"lastPacket":1787978336860,"length":315,"network":{"bytes":1202,"community_id":"1:p+QuUE3w5BGyy2ds/1LbZlGPpEw=","packets":10},"node":"spark-afae","packetPos":[-81130,8268610,90,600,152,321,82,369,1848,332,82],"packetRange":{"gte":1787978336545,"lte":1787978336860},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":577,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":39136},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"474554202f666176","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["89710223611259"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["f63d9281-086b-4182-9002-663ffb13d931","869feaa1-dc77-4037-aee2-247b7a39cf7d","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7","ce8622a8-6d2f-4fe3-ab81-0cc86e19363e"],"signatureCnt":4,"signatureId":[2000166,2000009,1031486,2000008],"signatureIdCnt":4},"tag":{"block":["false","true"],"blockCnt":2,"category":["recon","attack","protocol"],"categoryCnt":3,"cves":[""],"cvesCnt":1,"description":["cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys.","generic favicon request detection. requests for /favicon.ico are commonly issued by web crawlers and browsers during normal browsing, but can also indicate automated scanning activity.","generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning.","ip addresses with this tag have been seen crawling http(s) servers around the internet."],"intention":["unknown","suspicious"],"intentionCnt":2,"name":["root path scanner","web crawler","favicon crawler"],"nameCnt":3},"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4ls":"22_64_tcp","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2848402240},"totDataBytes":526} +{"@timestamp":1787979263610,"_id":"260829-cSRLtJtqGP5CFLhUcuMX7YIn","_index":"arkime_sessions3-260829","client":{"bytes":135},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":429,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8282},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81130],"firstPacket":1787978336258,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["connection","content-type"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":71,"ipProtocol":6,"lastPacket":1787978336543,"length":285,"network":{"bytes":902,"community_id":"1:3ercAXinTJU2jFoq/lLhLcaDh1o=","packets":10},"node":"spark-afae","packetPos":[-81130,8266852,90,786,82,210,82,185,82,0,89],"packetRange":{"gte":1787978336258,"lte":1787978336543},"protocol":["tls","http","tcp"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":473,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":39130},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"160301007b010000","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["264036190766110"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4l":"71260_51_tcp","ja4ls":"24_64_170","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":3,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":1,"psh":3,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":785169277},"tls":{"ja3":["cba7f34191ef2379c1325641f6c6c4f4"],"ja3Cnt":1,"ja3string":["771,49199-49195-49169-49159-49171-49161-49172-49162-5-47-53-49170-10,5-10-11-13-65281,23-24-25,0"],"ja3stringCnt":1,"ja4":["t12i130500_2d7513195f68_e51b7354d87f"],"ja4Cnt":1,"ja4_r":["t12i130500_0005,000a,002f,0035,c007,c009,c00a,c011,c012,c013,c014,c02b,c02f_0005,000a,000b,000d,ff01_0401,0403,0201,0203,0401,0501,0601"],"ja4_rCnt":1},"totDataBytes":238} +{"@timestamp":1787979263565,"_id":"260829-cST1sGDzoRtESYhfvobYC4yJ","_index":"arkime_sessions3-260829","client":{"bytes":228},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8282},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81130],"firstPacket":1787978335937,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["209.141.62.110:8282","209.141.62.110"],"hostCnt":2,"ja4h":["ge11nn050000_57c5e92682a8_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn050000_Host,User-Agent,Accept-Charset,Accept-Encoding,Connection__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["/"],"pathCnt":1,"requestHeader":["accept-encoding","connection","accept-charset","user-agent","host"],"requestHeaderCnt":5,"requestHeaderField":["accept-charset","accept-encoding","connection"],"requestHeaderValue":["utf-8","gzip","close"],"requestHeaderValueCnt":3,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["content-length","connection","content-type","date","server","x-powered-by"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","sat, 29 aug 2026 04:38:56 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["209.141.62.110:8282/"],"uriCnt":1,"useragent":["Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"],"useragentCnt":1},"initRTT":72,"ipProtocol":6,"lastPacket":1787978336256,"length":319,"network":{"bytes":1191,"community_id":"1:HOgJU+xj1PprHMwLAXTy8hy57ZI=","packets":10},"node":"spark-afae","packetPos":[-81130,8260269,90,1794,940,310,82,369,2752,82,0],"packetRange":{"gte":1787978335937,"lte":1787978336256},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":566,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":39116},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"474554202f204854","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["2057751460676937"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7","ce8622a8-6d2f-4fe3-ab81-0cc86e19363e"],"signatureCnt":3,"signatureId":[2000166,1031486,2000008],"signatureIdCnt":3},"tag":{"block":["false","true"],"blockCnt":2,"category":["recon","attack","protocol"],"categoryCnt":3,"cves":[""],"cvesCnt":1,"description":["cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys.","generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning.","ip addresses with this tag have been seen crawling http(s) servers around the internet."],"intention":["unknown","suspicious"],"intentionCnt":2,"name":["root path scanner","web crawler"],"nameCnt":2},"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4ls":"15_64_tcp","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2095950953},"totDataBytes":515} +{"@timestamp":1787979263610,"_id":"260829-cSRzOPJrcGRPIKTib8CUGKWQ","_index":"arkime_sessions3-260829","client":{"bytes":135},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":429,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8282},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81130],"firstPacket":1787978335531,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["connection","content-type"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":71,"ipProtocol":6,"lastPacket":1787978335937,"length":406,"network":{"bytes":902,"community_id":"1:iB5F0Xx2/DQjkQtKo//OXu1tpG4=","packets":10},"node":"spark-afae","packetPos":[-81130,8241742,90,11231,4140,210,82,185,2348,82,89],"packetRange":{"gte":1787978335531,"lte":1787978335937},"protocol":["tls","http","tcp"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":473,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":39114},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"160301007b010000","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["2001076178067247"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4l":"71247_51_tcp","ja4ls":"20_64_106","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":3,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":1,"psh":3,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2194083733},"tls":{"ja3":["cba7f34191ef2379c1325641f6c6c4f4"],"ja3Cnt":1,"ja3string":["771,49199-49195-49169-49159-49171-49161-49172-49162-5-47-53-49170-10,5-10-11-13-65281,23-24-25,0"],"ja3stringCnt":1,"ja4":["t12i130500_2d7513195f68_e51b7354d87f"],"ja4Cnt":1,"ja4_r":["t12i130500_0005,000a,002f,0035,c007,c009,c00a,c011,c012,c013,c014,c02b,c02f_0005,000a,000b,000d,ff01_0401,0403,0201,0203,0401,0501,0601"],"ja4_rCnt":1},"totDataBytes":238} +{"@timestamp":1787979263565,"_id":"260829-cSSRVpmXazFNEbFiq9dCvWmv","_index":"arkime_sessions3-260829","client":{"bytes":211},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8282},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81130],"firstPacket":1787978267096,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["209.141.62.110:8282","209.141.62.110"],"hostCnt":2,"ja4h":["ge11nn040000_e1d2031bdfea_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn040000_Host,User-Agent,Accept,Accept-Encoding__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["/"],"pathCnt":1,"requestHeader":["accept-encoding","user-agent","host","accept"],"requestHeaderCnt":4,"requestHeaderField":["accept","accept-encoding"],"requestHeaderValue":["*/*","gzip"],"requestHeaderValueCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["content-length","connection","content-type","date","server","x-powered-by"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","sat, 29 aug 2026 04:37:47 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["209.141.62.110:8282/"],"uriCnt":1,"useragent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15"],"useragentCnt":1},"initRTT":70,"ipProtocol":6,"lastPacket":1787978267379,"length":283,"network":{"bytes":1174,"community_id":"1:umwYdyigufck9PteMGkwHYAxN9Q=","packets":10},"node":"spark-afae","packetPos":[-81130,6262678,90,172,82,293,82,369,82,0,0],"packetRange":{"gte":1787978267096,"lte":1787978267379},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":549,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":53906},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"474554202f204854","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["976400909590354"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7","ce8622a8-6d2f-4fe3-ab81-0cc86e19363e"],"signatureCnt":3,"signatureId":[2000166,1031486,2000008],"signatureIdCnt":3},"tag":{"block":["false","true"],"blockCnt":2,"category":["recon","attack","protocol"],"categoryCnt":3,"cves":[""],"cvesCnt":1,"description":["cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys.","generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning.","ip addresses with this tag have been seen crawling http(s) servers around the internet."],"intention":["unknown","suspicious"],"intentionCnt":2,"name":["root path scanner","web crawler"],"nameCnt":2},"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4ls":"41_64_tcp","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1758606928},"totDataBytes":498} +{"@timestamp":1787966894479,"_id":"260829-riL3cDy3_VVHhZYSw0P685qB","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":8989},"dstRIR":"ARIN","ethertype":2048,"fileId":[81046],"firstPacket":1787965850894,"ipProtocol":6,"lastPacket":1787965851897,"length":1003,"network":{"bytes":148,"community_id":"1:H0XRM9TJDWUto9NvZ8EaQzn5aDY=","packets":2},"node":"spark-afae","packetPos":[-81046,20920,90],"packetRange":{"gte":1787965850894,"lte":1787965851897},"protocol":["tcp"],"protocolCnt":1,"rootId":"260829-riL3cDy3_VVHhZYSw0P685qB","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":2,"port":50520},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3225210541},"totDataBytes":0} +{"@timestamp":1787966894479,"_id":"260829-riKeCPlR7nlOQLpdXG9QMRnA","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":8989},"dstRIR":"ARIN","ethertype":2048,"fileId":[81046],"firstPacket":1787965848916,"ipProtocol":6,"lastPacket":1787965849936,"length":1020,"network":{"bytes":148,"community_id":"1:Jjf+7vJoVNjqbLMeJ0wM7Nz5AYw=","packets":2},"node":"spark-afae","packetPos":[-81046,20740,90],"packetRange":{"gte":1787965848916,"lte":1787965849936},"protocol":["tcp"],"protocolCnt":1,"rootId":"260829-riKeCPlR7nlOQLpdXG9QMRnA","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":2,"port":50504},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1877473896},"totDataBytes":0} +{"@timestamp":1787966894586,"_id":"260829-QbjP1ZYevENBUK5fGA_0k2DH","_index":"arkime_sessions3-260829","client":{"bytes":135},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":429,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8085},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81047],"firstPacket":1787965699853,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":71,"ipProtocol":6,"lastPacket":1787965700142,"length":289,"network":{"bytes":902,"community_id":"1:kovvRQfA8YucB1USaikfEDyAYZI=","packets":10},"node":"spark-afae","packetPos":[-81047,390445,90,1044,82,210,82,185,82,0,89],"packetRange":{"gte":1787965699853,"lte":1787965700142},"protocol":["http","tls","tcp"],"protocolCnt":3,"rootId":"260829-QbjP1ZYevENBUK5fGA_0k2DH","segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":473,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":53714},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"160301007b010000","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["851342421051377"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4l":"71649_51_tcp","ja4ls":"24_64_63","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":3,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":1,"psh":3,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3302045940},"tls":{"ja3":["cba7f34191ef2379c1325641f6c6c4f4"],"ja3Cnt":1,"ja3string":["771,49199-49195-49169-49159-49171-49161-49172-49162-5-47-53-49170-10,5-10-11-13-65281,23-24-25,0"],"ja3stringCnt":1,"ja4":["t12i130500_2d7513195f68_e51b7354d87f"],"ja4Cnt":1,"ja4_r":["t12i130500_0005,000a,002f,0035,c007,c009,c00a,c011,c012,c013,c014,c02b,c02f_0005,000a,000b,000d,ff01_0401,0403,0201,0203,0401,0501,0601"],"ja4_rCnt":1},"totDataBytes":238} +{"@timestamp":1787966894557,"_id":"260829-QbibHO8PwjVCfrSQGvGaQMJn","_index":"arkime_sessions3-260829","client":{"bytes":254},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8085},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81047],"firstPacket":1787965699559,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["209.141.62.110","209.141.62.110:8085"],"hostCnt":2,"ja4h":["ge11nn050000_57c5e92682a8_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn050000_Host,User-Agent,Accept-Charset,Accept-Encoding,Connection__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["/favicon.ico"],"pathCnt":1,"requestHeader":["accept-encoding","host","connection","accept-charset","user-agent"],"requestHeaderCnt":5,"requestHeaderField":["accept-charset","accept-encoding","connection"],"requestHeaderValue":["utf-8","gzip","close"],"requestHeaderValueCnt":3,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["content-type","date","x-powered-by","connection","content-length","server"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","sat, 29 aug 2026 01:08:19 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["209.141.62.110:8085/favicon.ico"],"uriCnt":1,"useragent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.7.24"],"useragentCnt":1},"initRTT":70,"ipProtocol":6,"lastPacket":1787965699852,"length":293,"network":{"bytes":1217,"community_id":"1:kbWvO5pfB6I8/oR+arC5XLmYMPk=","packets":10},"node":"spark-afae","packetPos":[-81047,386986,90,1236,82,336,82,369,1018,82,0],"packetRange":{"gte":1787965699559,"lte":1787965699852},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":592,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":53708},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"474554202f666176","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["995815163088959"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["f63d9281-086b-4182-9002-663ffb13d931","869feaa1-dc77-4037-aee2-247b7a39cf7d","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7","ce8622a8-6d2f-4fe3-ab81-0cc86e19363e"],"signatureCnt":4,"signatureId":[2000166,2000009,1031486,2000008],"signatureIdCnt":4},"tag":{"block":["true","false"],"blockCnt":2,"category":["attack","protocol","recon"],"categoryCnt":3,"cves":[""],"cvesCnt":1,"description":["generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning.","cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys.","generic favicon request detection. requests for /favicon.ico are commonly issued by web crawlers and browsers during normal browsing, but can also indicate automated scanning activity.","ip addresses with this tag have been seen crawling http(s) servers around the internet."],"intention":["suspicious","unknown"],"intentionCnt":2,"name":["root path scanner","favicon crawler","web crawler"],"nameCnt":3},"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"24_64_tcp","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":4176389842},"totDataBytes":541} +{"@timestamp":1787966894608,"_id":"260829-QbhfgMdYWbJOgIngeTyVzbAb","_index":"arkime_sessions3-260829","client":{"bytes":135},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":429,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8085},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81047],"firstPacket":1787965699266,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":71,"ipProtocol":6,"lastPacket":1787965699557,"length":291,"network":{"bytes":902,"community_id":"1:h9U5qPsj3fzajrsd48I2Lnctxdo=","packets":10},"node":"spark-afae","packetPos":[-81047,385714,90,300,82,210,82,185,82,0,89],"packetRange":{"gte":1787965699266,"lte":1787965699557},"protocol":["http","tls","tcp"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":473,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":53694},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"160301007b010000","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["861940700523628"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4l":"71149_51_tcp","ja4ls":"22_64_87","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":3,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":1,"psh":3,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3993212616},"tls":{"ja3":["cba7f34191ef2379c1325641f6c6c4f4"],"ja3Cnt":1,"ja3string":["771,49199-49195-49169-49159-49171-49161-49172-49162-5-47-53-49170-10,5-10-11-13-65281,23-24-25,0"],"ja3stringCnt":1,"ja4":["t12i130500_2d7513195f68_e51b7354d87f"],"ja4Cnt":1,"ja4_r":["t12i130500_0005,000a,002f,0035,c007,c009,c00a,c011,c012,c013,c014,c02b,c02f_0005,000a,000b,000d,ff01_0401,0403,0201,0203,0401,0501,0601"],"ja4_rCnt":1},"totDataBytes":238} +{"@timestamp":1787966894551,"_id":"260829-Qbi41rBdfCpIo4_i3zekgvvq","_index":"arkime_sessions3-260829","client":{"bytes":243},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8085},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81047],"firstPacket":1787965698940,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["209.141.62.110","209.141.62.110:8085"],"hostCnt":2,"ja4h":["ge11nn050000_57c5e92682a8_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn050000_Host,User-Agent,Accept-Charset,Accept-Encoding,Connection__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["/"],"pathCnt":1,"requestHeader":["accept-encoding","host","connection","accept-charset","user-agent"],"requestHeaderCnt":5,"requestHeaderField":["accept-charset","accept-encoding","connection"],"requestHeaderValue":["utf-8","gzip","close"],"requestHeaderValueCnt":3,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["content-type","date","x-powered-by","connection","content-length","server"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","sat, 29 aug 2026 01:08:19 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["209.141.62.110:8085/"],"uriCnt":1,"useragent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.7.24"],"useragentCnt":1},"initRTT":71,"ipProtocol":6,"lastPacket":1787965699266,"length":326,"network":{"bytes":1206,"community_id":"1:Hlpx+/Vc3GYaoWkeoRhKtLBoRUk=","packets":10},"node":"spark-afae","packetPos":[-81047,377832,90,2122,164,325,82,369,2722,1844,82],"packetRange":{"gte":1787965698940,"lte":1787965699266},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":581,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":53684},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"474554202f204854","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["659922695354663"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7","ce8622a8-6d2f-4fe3-ab81-0cc86e19363e"],"signatureCnt":3,"signatureId":[2000166,1031486,2000008],"signatureIdCnt":3},"tag":{"block":["true","false"],"blockCnt":2,"category":["attack","protocol","recon"],"categoryCnt":3,"cves":[""],"cvesCnt":1,"description":["generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning.","cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys.","ip addresses with this tag have been seen crawling http(s) servers around the internet."],"intention":["suspicious","unknown"],"intentionCnt":2,"name":["root path scanner","web crawler"],"nameCnt":2},"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"13_64_tcp","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":234219942},"totDataBytes":530} +{"@timestamp":1787966894608,"_id":"260829-QbiWNs4W8eNJEY69Q8gf0eXp","_index":"arkime_sessions3-260829","client":{"bytes":135},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":429,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8085},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81047],"firstPacket":1787965698614,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":71,"ipProtocol":6,"lastPacket":1787965698939,"length":325,"network":{"bytes":902,"community_id":"1:EVerslJWtuc+1rZsgviG/fFN/nk=","packets":10},"node":"spark-afae","packetPos":[-81047,371924,90,3048,152,210,82,185,1002,980,89],"packetRange":{"gte":1787965698614,"lte":1787965698939},"protocol":["http","tls","tcp"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":473,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":53680},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"160301007b010000","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["667303906405465"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4l":"71658_51_tcp","ja4ls":"19_64_106","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":3,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":1,"psh":3,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3802924506},"tls":{"ja3":["cba7f34191ef2379c1325641f6c6c4f4"],"ja3Cnt":1,"ja3string":["771,49199-49195-49169-49159-49171-49161-49172-49162-5-47-53-49170-10,5-10-11-13-65281,23-24-25,0"],"ja3stringCnt":1,"ja4":["t12i130500_2d7513195f68_e51b7354d87f"],"ja4Cnt":1,"ja4_r":["t12i130500_0005,000a,002f,0035,c007,c009,c00a,c011,c012,c013,c014,c02b,c02f_0005,000a,000b,000d,ff01_0401,0403,0201,0203,0401,0501,0601"],"ja4_rCnt":1},"totDataBytes":238} +{"@timestamp":1787966894550,"_id":"260829-QbiV7v4mMA5PCpiewFSyNMIF","_index":"arkime_sessions3-260829","client":{"bytes":211},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8085},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81047],"firstPacket":1787965656581,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["209.141.62.110","209.141.62.110:8085"],"hostCnt":2,"ja4h":["ge11nn040000_e1d2031bdfea_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn040000_Host,User-Agent,Accept,Accept-Encoding__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["/"],"pathCnt":1,"requestHeader":["accept-encoding","host","user-agent","accept"],"requestHeaderCnt":4,"requestHeaderField":["accept","accept-encoding"],"requestHeaderValue":["*/*","gzip"],"requestHeaderValueCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["content-type","date","x-powered-by","connection","content-length","server"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","sat, 29 aug 2026 01:07:36 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["209.141.62.110:8085/"],"uriCnt":1,"useragent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15"],"useragentCnt":1},"initRTT":71,"ipProtocol":6,"lastPacket":1787965656866,"length":285,"network":{"bytes":1174,"community_id":"1:D0qdPSnv/60hRCQcm63VWRRIiWg=","packets":10},"node":"spark-afae","packetPos":[-81047,235232,90,158,82,293,82,369,82,0,0],"packetRange":{"gte":1787965656581,"lte":1787965656866},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":549,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":35332},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"474554202f204854","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["243706120450829"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7","ce8622a8-6d2f-4fe3-ab81-0cc86e19363e"],"signatureCnt":3,"signatureId":[2000166,1031486,2000008],"signatureIdCnt":3},"tag":{"block":["true","false"],"blockCnt":2,"category":["attack","protocol","recon"],"categoryCnt":3,"cves":[""],"cvesCnt":1,"description":["generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning.","cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys.","ip addresses with this tag have been seen crawling http(s) servers around the internet."],"intention":["suspicious","unknown"],"intentionCnt":2,"name":["root path scanner","web crawler"],"nameCnt":2},"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"49_64_tcp","ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1226285677},"totDataBytes":498} +{"@timestamp":1787963872674,"_id":"260829-jgnbzS8yv7ZK865VgrRIv6p8","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":8999},"dstRIR":"RIPE","ethertype":2048,"fileId":[81025],"firstPacket":1787963083997,"ipProtocol":6,"lastPacket":1787963085020,"length":1023,"network":{"bytes":148,"community_id":"1:zMrmpyxmpDCeXMGmXHhR8ieCzAM=","packets":2},"node":"spark-afae","packetPos":[-81025,156751,90],"packetRange":{"gte":1787963083997,"lte":1787963085020},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":2,"port":56798},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["sponge-01-ts","honeypot","sensor:sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2014963968},"totDataBytes":0} +{"@timestamp":1787963872674,"_id":"260829-jgnYGDL30ulI-YlPa4xqgYJZ","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":8999},"dstRIR":"RIPE","ethertype":2048,"fileId":[81025],"firstPacket":1787963081996,"ipProtocol":6,"lastPacket":1787963083004,"length":1008,"network":{"bytes":148,"community_id":"1:B6O1kw/1xZjvGFNgs4D2nW8WTGw=","packets":2},"node":"spark-afae","packetPos":[-81025,156497,164],"packetRange":{"gte":1787963081996,"lte":1787963083004},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":2,"port":56788},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["sponge-01-ts","honeypot","sensor:sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":312170498},"totDataBytes":0} +{"@timestamp":1787960243637,"_id":"260828-m7c1NVLy_jxBIbyGJK9KiEwM","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":8090},"dstRIR":"RIPE","ethertype":2048,"fileId":[81002],"firstPacket":1787959291351,"ipProtocol":6,"lastPacket":1787959292379,"length":1028,"network":{"bytes":148,"community_id":"1:bg9TsW31ap9Q/H8UmtHnax4ZMEY=","packets":2},"node":"spark-afae","packetPos":[-81002,107968,90],"packetRange":{"gte":1787959291351,"lte":1787959292379},"protocol":["tcp"],"protocolCnt":1,"rootId":"260828-m7c1NVLy_jxBIbyGJK9KiEwM","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":2,"port":35284},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["sensor:sponge-01-ts","sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1677705326},"totDataBytes":0} +{"@timestamp":1787960243637,"_id":"260828-m7ebyUyA7dFNf4RMaGFxZ2y2","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":8090},"dstRIR":"RIPE","ethertype":2048,"fileId":[81002],"firstPacket":1787959289351,"ipProtocol":6,"lastPacket":1787959290363,"length":1012,"network":{"bytes":148,"community_id":"1:7GjogiBPbXLsc14Rp3PTEoY3jlY=","packets":2},"node":"spark-afae","packetPos":[-81002,107788,90],"packetRange":{"gte":1787959289351,"lte":1787959290363},"protocol":["tcp"],"protocolCnt":1,"rootId":"260828-m7ebyUyA7dFNf4RMaGFxZ2y2","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":2,"port":35276},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["sensor:sponge-01-ts","sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2250061751},"totDataBytes":0} +{"@timestamp":1787954795399,"_id":"260828-DyGql_S6gsFNM5J2Z5u1DgOC","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":8085},"dstRIR":"ARIN","ethertype":2048,"fileId":[80966],"firstPacket":1787953739088,"ipProtocol":6,"lastPacket":1787953740113,"length":1025,"network":{"bytes":148,"community_id":"1:IApMBbj77BVmjxxWQKCACsjEteI=","packets":2},"node":"spark-afae","packetPos":[-80966,61790,551633],"packetRange":{"gte":1787953739088,"lte":1787953740113},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":49486},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[53],"srcTTLCnt":1,"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1720701256},"totDataBytes":0} +{"@timestamp":1787954795399,"_id":"260828-DyGMHmi4aEhFWr_sLvdyj4zO","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":8085},"dstRIR":"ARIN","ethertype":2048,"fileId":[80966],"firstPacket":1787953737090,"ipProtocol":6,"lastPacket":1787953738100,"length":1010,"network":{"bytes":148,"community_id":"1:FOO5MVZ3hdnbECPW/e0yDoj6WuE=","packets":2},"node":"spark-afae","packetPos":[-80966,45064,13644],"packetRange":{"gte":1787953737090,"lte":1787953738100},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":34222},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[53],"srcTTLCnt":1,"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2301782099},"totDataBytes":0} +{"@timestamp":1787949946101,"_id":"260828-bCA2opEpYMtMTaxC7v76ly10","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":6363},"dstRIR":"ARIN","ethertype":2048,"fileId":[80935],"firstPacket":1787949166513,"ipProtocol":6,"lastPacket":1787949167545,"length":1032,"network":{"bytes":148,"community_id":"1:iIZ+SrFhlpiX6cfAuJa7zjHr7tI=","packets":2},"node":"spark-afae","packetPos":[-80935,283930,532],"packetRange":{"gte":1787949166513,"lte":1787949167545},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":2,"port":37246},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3234508539},"totDataBytes":0} +{"@timestamp":1787949946101,"_id":"260828-bCAAXGmaOl1FtIIwwkFjrSs_","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":6363},"dstRIR":"ARIN","ethertype":2048,"fileId":[80935],"firstPacket":1787949164510,"ipProtocol":6,"lastPacket":1787949165522,"length":1012,"network":{"bytes":148,"community_id":"1:1ad7kkimJ3JlNN22OOueGEG1pIg=","packets":2},"node":"spark-afae","packetPos":[-80935,283090,516],"packetRange":{"gte":1787949164510,"lte":1787949165522},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":2,"port":37236},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":529347749},"totDataBytes":0} +{"@timestamp":1787948442930,"_id":"260828-NSBVjoocT9pAV5ClIo1lw62P","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":8086},"dstRIR":"ARIN","ethertype":2048,"fileId":[80924],"firstPacket":1787947724664,"ipProtocol":6,"lastPacket":1787947725683,"length":1019,"network":{"bytes":148,"community_id":"1:OpTFkaN8aqCo79OGhDbicCA1PV8=","packets":2},"node":"spark-afae","packetPos":[-80924,1519462,90],"packetRange":{"gte":1787947724664,"lte":1787947725683},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":45816},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[53],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":200817858},"totDataBytes":0} +{"@timestamp":1787948442930,"_id":"260828-NSDoAIHlJVRHtJnFywUyomme","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":8086},"dstRIR":"ARIN","ethertype":2048,"fileId":[80924],"firstPacket":1787947722661,"ipProtocol":6,"lastPacket":1787947723692,"length":1031,"network":{"bytes":148,"community_id":"1:5JIkWvI5zP+buQUs9pF0Rc58Jqc=","packets":2},"node":"spark-afae","packetPos":[-80924,1519192,90],"packetRange":{"gte":1787947722661,"lte":1787947723692},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":45806},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[53],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1553906581},"totDataBytes":0} +{"@timestamp":1787948441525,"_id":"260828-UrZLo-s2jqhMn6Glpi8aXQKt","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":8989},"dstRIR":"RIPE","ethertype":2048,"fileId":[80925],"firstPacket":1787947460763,"ipProtocol":6,"lastPacket":1787947461781,"length":1018,"network":{"bytes":148,"community_id":"1:tHJBDOpX1kBHjGAKOBA2wulRF84=","packets":2},"node":"spark-afae","packetPos":[-80925,276770,356],"packetRange":{"gte":1787947460763,"lte":1787947461781},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":2,"port":45966},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["sensor:sponge-01-ts","honeypot","sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3284106598},"totDataBytes":0} +{"@timestamp":1787948441525,"_id":"260828-UrY17Q2_0UtO5bmmirRrom2r","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":8989},"dstRIR":"RIPE","ethertype":2048,"fileId":[80925],"firstPacket":1787947458763,"ipProtocol":6,"lastPacket":1787947459769,"length":1006,"network":{"bytes":148,"community_id":"1:2AlHKj7p7fZ9qo4UMglst2bxFbU=","packets":2},"node":"spark-afae","packetPos":[-80925,275904,686],"packetRange":{"gte":1787947458763,"lte":1787947459769},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":2,"port":45952},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["sensor:sponge-01-ts","honeypot","sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":834825272},"totDataBytes":0} +{"@timestamp":1787945129248,"_id":"260828-vB9iT-wRkcNHNbaOqjEC1Rdh","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":8080},"dstRIR":"ARIN","ethertype":2048,"fileId":[80902],"firstPacket":1787944735848,"ipProtocol":6,"lastPacket":1787944736849,"length":1001,"network":{"bytes":148,"community_id":"1:bnL8R3wLacU1gWW6HlXHG7rvtK0=","packets":2},"node":"spark-afae","packetPos":[-80902,306941,508],"packetRange":{"gte":1787944735848,"lte":1787944736849},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":2,"port":39866},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1471477435},"totDataBytes":0} +{"@timestamp":1787945129248,"_id":"260828-vB_Cc_BKwI5AhrVHb55VCeW1","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":8080},"dstRIR":"ARIN","ethertype":2048,"fileId":[80902],"firstPacket":1787944733846,"ipProtocol":6,"lastPacket":1787944734866,"length":1020,"network":{"bytes":148,"community_id":"1:X0vCabPb+wGIY395W5urZWLtS4g=","packets":2},"node":"spark-afae","packetPos":[-80902,305913,172],"packetRange":{"gte":1787944733846,"lte":1787944734866},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":2,"port":39852},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2112627},"totDataBytes":0} +{"@timestamp":1787930283302,"_id":"260828-DTy4RQeNAUtK34vgIV40wF-t","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":8081},"dstRIR":"ARIN","ethertype":2048,"fileId":[80803],"firstPacket":1787929585890,"ipProtocol":6,"lastPacket":1787929586892,"length":1002,"network":{"bytes":148,"community_id":"1:1fMUUxQhoDQZ0aQJhZJ7UM2rZio=","packets":2},"node":"spark-afae","packetPos":[-80803,607185,90],"packetRange":{"gte":1787929585890,"lte":1787929586892},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":37084},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[53],"srcTTLCnt":1,"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":442352958},"totDataBytes":0} +{"@timestamp":1787930283302,"_id":"260828-DTx9uXB-AtNG-rccUeH-VIOI","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":8081},"dstRIR":"ARIN","ethertype":2048,"fileId":[80803],"firstPacket":1787929583891,"ipProtocol":6,"lastPacket":1787929584915,"length":1024,"network":{"bytes":148,"community_id":"1:EeFG4OYZM7f/Bs+ojnU9JU+n8cI=","packets":2},"node":"spark-afae","packetPos":[-80803,607005,90],"packetRange":{"gte":1787929583891,"lte":1787929584915},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":37080},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[53],"srcTTLCnt":1,"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3767350429},"totDataBytes":0} +{"@timestamp":1787920601771,"_id":"260828-vrMy0N8K4tZH_79MmgcM6qVm","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":8085},"dstRIR":"RIPE","ethertype":2048,"fileId":[80728],"firstPacket":1787919625061,"ipProtocol":6,"lastPacket":1787919626069,"length":1008,"network":{"bytes":148,"community_id":"1:mB6kobGqIe5ikPHGnkONs7HsL7Y=","packets":2},"node":"spark-afae","packetPos":[-80728,63510,270],"packetRange":{"gte":1787919625061,"lte":1787919626069},"protocol":["tcp"],"protocolCnt":1,"rootId":"260828-vrMy0N8K4tZH_79MmgcM6qVm","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":2,"port":40096},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["sensor:sponge-01-ts","honeypot","sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2876621414},"totDataBytes":0} +{"@timestamp":1787920601771,"_id":"260828-vrOd-rQA3JxEmrObdbWhGnOP","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":8085},"dstRIR":"RIPE","ethertype":2048,"fileId":[80728],"firstPacket":1787919623061,"ipProtocol":6,"lastPacket":1787919624088,"length":1027,"network":{"bytes":148,"community_id":"1:VTPJhpZ12a9gTuSSb2Lsj8V8vys=","packets":2},"node":"spark-afae","packetPos":[-80728,63170,180],"packetRange":{"gte":1787919623061,"lte":1787919624088},"protocol":["tcp"],"protocolCnt":1,"rootId":"260828-vrOd-rQA3JxEmrObdbWhGnOP","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":2,"port":40082},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["sensor:sponge-01-ts","honeypot","sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1565545882},"totDataBytes":0} +{"@timestamp":1787920296641,"_id":"260828-JByY6hH-BTFEf5MEyEEkoygO","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":8081},"dstRIR":"ARIN","ethertype":2048,"fileId":[80727],"firstPacket":1787918913560,"ipProtocol":6,"lastPacket":1787918914564,"length":1004,"network":{"bytes":148,"community_id":"1:O6DsdFeEWAP1jDUi/7qoQpYJpaE=","packets":2},"node":"spark-afae","packetPos":[-80727,1371,348],"packetRange":{"gte":1787918913560,"lte":1787918914564},"protocol":["tcp"],"protocolCnt":1,"rootId":"260828-JByY6hH-BTFEf5MEyEEkoygO","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":2,"port":54862},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3612283096},"totDataBytes":0} +{"@timestamp":1787920296641,"_id":"260828-JBzkVxKU3YVD-LPEnWqB30zv","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Aeza International LTD"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Aeza International LTD"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":8081},"dstRIR":"ARIN","ethertype":2048,"fileId":[80727],"firstPacket":1787918911559,"ipProtocol":6,"lastPacket":1787918912576,"length":1017,"network":{"bytes":148,"community_id":"1:W/AVvCAKv4aytveq7tYS1i97GzM=","packets":2},"node":"spark-afae","packetPos":[-80727,1109,172],"packetRange":{"gte":1787918911559,"lte":1787918912576},"protocol":["tcp"],"protocolCnt":1,"rootId":"260828-JBzkVxKU3YVD-LPEnWqB30zv","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS210644 Aeza Group LLC","number":210644,"organization":{"name":"Aeza Group LLC"}},"bytes":148,"geo":{"country_iso_code":"AT"},"ip":"147.45.71.214","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":2,"port":54860},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[54],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["42340_2-4-8-1-3_1320_13"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2035744445},"totDataBytes":0} diff --git a/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113639_67644f88.ndjson b/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113639_67644f88.ndjson new file mode 100644 index 0000000..07c1abb --- /dev/null +++ b/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113639_67644f88.ndjson @@ -0,0 +1,52 @@ +{"@timestamp":1787398665343,"_id":"260822-X4nLaVzv3zJNOLl3p7BHZl0P","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24031},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977573,"ipProtocol":6,"lastPacket":1787397977573,"length":0,"network":{"bytes":66,"community_id":"1:uyfQUu9gAq+Y6XLcT0DheS6CQJo=","packets":1},"node":"spark-afae","packetPos":[-77797,2097061],"packetRange":{"gte":1787397977573,"lte":1787397977573},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":54546},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1706944210},"totDataBytes":0} +{"@timestamp":1787398665159,"_id":"260822-X4nd8srWqnROCLx7W8lIU1z_","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24030},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977555,"ipProtocol":6,"lastPacket":1787397978563,"length":1008,"network":{"bytes":132,"community_id":"1:O6sIB1EGECphqiUfIK51qQTzgUA=","packets":2},"node":"spark-afae","packetPos":[-77797,2094607,116105],"packetRange":{"gte":1787397977555,"lte":1787397978563},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":54285},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1238186765},"totDataBytes":0} +{"@timestamp":1787398665194,"_id":"260822-X4mw8mYbdt1BmKXNaz68E6mR","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24029},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977533,"ipProtocol":6,"lastPacket":1787397978536,"length":1003,"network":{"bytes":132,"community_id":"1:7h3So8ldJYoA6n9nNIJtodk2XMg=","packets":2},"node":"spark-afae","packetPos":[-77797,2091375,118605],"packetRange":{"gte":1787397977533,"lte":1787397978536},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":54022},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2290323738},"totDataBytes":0} +{"@timestamp":1787398665148,"_id":"260822-X4kN0a2_eFZM46SonrPlWXA2","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24028},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977516,"ipProtocol":6,"lastPacket":1787397977516,"length":0,"network":{"bytes":66,"community_id":"1:zZRVm8nnH3TOOtXjyoMBikQzLuE=","packets":1},"node":"spark-afae","packetPos":[-77797,2088605],"packetRange":{"gte":1787397977516,"lte":1787397977516},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":53763},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1083093204},"totDataBytes":0} +{"@timestamp":1787398665208,"_id":"260822-X4n2AVKwFiJObaXqpXnC_61m","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24027},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977494,"ipProtocol":6,"lastPacket":1787397977494,"length":0,"network":{"bytes":66,"community_id":"1:990h68cQiGTChN7KirRm+wed8U8=","packets":1},"node":"spark-afae","packetPos":[-77797,2085355],"packetRange":{"gte":1787397977494,"lte":1787397977494},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":53501},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2642266677},"totDataBytes":0} +{"@timestamp":1787398665183,"_id":"260822-X4n4xbKmUyRGMIOsPR8vENs_","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24026},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977477,"ipProtocol":6,"lastPacket":1787397978486,"length":1009,"network":{"bytes":132,"community_id":"1:AizbHLUae4tyDGxUJ70CM2PsOWY=","packets":2},"node":"spark-afae","packetPos":[-77797,2082001,127007],"packetRange":{"gte":1787397977477,"lte":1787397978486},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":53241},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3641959366},"totDataBytes":0} +{"@timestamp":1787398665184,"_id":"260822-X4mYIIgvZStKpY6WE_YSe4zw","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24025},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977459,"ipProtocol":6,"lastPacket":1787397977459,"length":0,"network":{"bytes":66,"community_id":"1:e/5tDr2xLWC29K5tT+8ni7mG+IQ=","packets":1},"node":"spark-afae","packetPos":[-77797,2077587],"packetRange":{"gte":1787397977459,"lte":1787397977459},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":52977},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":974859599},"totDataBytes":0} +{"@timestamp":1787398665543,"_id":"260822-X4kY8d_dt-lPdLHA2Si55NMW","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24024},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977440,"ipProtocol":6,"lastPacket":1787397978454,"length":1014,"network":{"bytes":132,"community_id":"1:TeRseNppQOdihGzDZmB8sIsDCPU=","packets":2},"node":"spark-afae","packetPos":[-77797,2072859,134575],"packetRange":{"gte":1787397977440,"lte":1787397978454},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":52714},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2055315097},"totDataBytes":0} +{"@timestamp":1787398665185,"_id":"260822-X4kxD66oMQdNt4P30FFQH9H2","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24023},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977422,"ipProtocol":6,"lastPacket":1787397978424,"length":1002,"network":{"bytes":132,"community_id":"1:Q49sb7fg0f7P2EM0fvfcnnOP1JA=","packets":2},"node":"spark-afae","packetPos":[-77797,2068391,137169],"packetRange":{"gte":1787397977422,"lte":1787397978424},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":52443},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2750823716},"totDataBytes":0} +{"@timestamp":1787398665206,"_id":"260822-X4lEjQ7FyNlMyq22l8aijtGL","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24022},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977408,"ipProtocol":6,"lastPacket":1787397978410,"length":1002,"network":{"bytes":132,"community_id":"1:fpijL4tokWqauLEQrd1iXwEjt8Y=","packets":2},"node":"spark-afae","packetPos":[-77797,2063543,140711],"packetRange":{"gte":1787397977408,"lte":1787397978410},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":52165},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3512260208},"totDataBytes":0} +{"@timestamp":1787398665543,"_id":"260822-X4n7e3TRO6ZAMLWBQ83sr8qb","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24021},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977386,"ipProtocol":6,"lastPacket":1787397977386,"length":0,"network":{"bytes":66,"community_id":"1:l644tk0x7iSkVzm4AAtOPMzfKIM=","packets":1},"node":"spark-afae","packetPos":[-77797,2056677],"packetRange":{"gte":1787397977386,"lte":1787397977386},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":51893},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2227258719},"totDataBytes":0} +{"@timestamp":1787398665343,"_id":"260822-X4l7TKSifGxGlKu2SQfvQLAb","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24020},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977363,"ipProtocol":6,"lastPacket":1787397978363,"length":1000,"network":{"bytes":132,"community_id":"1:sqX9RGNrfoi4rSiM39dGO5EKIW0=","packets":2},"node":"spark-afae","packetPos":[-77797,2048005,151529],"packetRange":{"gte":1787397977363,"lte":1787397978363},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":51621},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1691784847},"totDataBytes":0} +{"@timestamp":1787398665543,"_id":"260822-X4n6zDVBk3tIsalRNUY-bGYr","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24019},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977345,"ipProtocol":6,"lastPacket":1787397977345,"length":0,"network":{"bytes":66,"community_id":"1:c54CRPHu4j/0IWK1+VlAen0N1hs=","packets":1},"node":"spark-afae","packetPos":[-77797,2038635],"packetRange":{"gte":1787397977345,"lte":1787397977345},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":51353},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3882773355},"totDataBytes":0} +{"@timestamp":1787398665160,"_id":"260822-X4ntziOxl99E8rAf3EWD8NcB","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24018},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977329,"ipProtocol":6,"lastPacket":1787397977329,"length":0,"network":{"bytes":66,"community_id":"1:jV6u8pn6syr3DniiADwUcoO6KAg=","packets":1},"node":"spark-afae","packetPos":[-77797,2029919],"packetRange":{"gte":1787397977329,"lte":1787397977329},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":51077},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":950370297},"totDataBytes":0} +{"@timestamp":1787398665186,"_id":"260822-X4kYzpNxB1dNnZV-tpvWifwN","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24017},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977316,"ipProtocol":6,"lastPacket":1787397978316,"length":1000,"network":{"bytes":132,"community_id":"1:kPVwW+VbK06/azywZvJ/Q5TAL6s=","packets":2},"node":"spark-afae","packetPos":[-77797,2023619,170199],"packetRange":{"gte":1787397977316,"lte":1787397978316},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":50803},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3502804748},"totDataBytes":0} +{"@timestamp":1787398665183,"_id":"260822-X4lnWOYXaqhDCK15IS_n8OcG","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24016},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977295,"ipProtocol":6,"lastPacket":1787397978299,"length":1004,"network":{"bytes":132,"community_id":"1:8Mdj3olbcc0yxCwIJq99M6QTti4=","packets":2},"node":"spark-afae","packetPos":[-77797,2011089,180117],"packetRange":{"gte":1787397977295,"lte":1787397978299},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":50533},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":78548080},"totDataBytes":0} +{"@timestamp":1787398665169,"_id":"260822-X4lReoiKeblIv5nUCVC8UVJF","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24015},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977276,"ipProtocol":6,"lastPacket":1787397977276,"length":0,"network":{"bytes":66,"community_id":"1:UteZMS6bFtBhJUObRucNuP4nqxQ=","packets":1},"node":"spark-afae","packetPos":[-77797,1998311],"packetRange":{"gte":1787397977276,"lte":1787397977276},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":50260},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2683492483},"totDataBytes":0} +{"@timestamp":1787398665155,"_id":"260822-X4ktteaKUx1O4Ju3O81nGHiC","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24014},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977261,"ipProtocol":6,"lastPacket":1787397977261,"length":0,"network":{"bytes":66,"community_id":"1:QBzjmguGzyUgbiVXzwgaJrXkufM=","packets":1},"node":"spark-afae","packetPos":[-77797,1987353],"packetRange":{"gte":1787397977261,"lte":1787397977261},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":49977},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":4209373780},"totDataBytes":0} +{"@timestamp":1787398665171,"_id":"260822-X4kYBumUEJNMxJT1XYMBVlZv","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24013},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977237,"ipProtocol":6,"lastPacket":1787397978251,"length":1014,"network":{"bytes":132,"community_id":"1:ZCUODL8E0HtDJHG6N0o82rnv2ok=","packets":2},"node":"spark-afae","packetPos":[-77797,1969579,213591],"packetRange":{"gte":1787397977237,"lte":1787397978251},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":49701},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1700359251},"totDataBytes":0} +{"@timestamp":1787398665169,"_id":"260822-X4kESF-pxkhE_KTlfI0U1p_p","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24012},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977191,"ipProtocol":6,"lastPacket":1787397977191,"length":0,"network":{"bytes":66,"community_id":"1:uxZC/MZMI6gXSSAp+MfawbzKskc=","packets":1},"node":"spark-afae","packetPos":[-77797,1932007],"packetRange":{"gte":1787397977191,"lte":1787397977191},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":49422},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":4166961922},"totDataBytes":0} +{"@timestamp":1787398665343,"_id":"260822-X4lAnsiXnS5L_YEGUQOWQe2R","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24011},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977177,"ipProtocol":6,"lastPacket":1787397978193,"length":1016,"network":{"bytes":132,"community_id":"1:57rsRhbsd8MgSCo4/zLOQNBRCCY=","packets":2},"node":"spark-afae","packetPos":[-77797,1919085,252049],"packetRange":{"gte":1787397977177,"lte":1787397978193},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":65528},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":918305215},"totDataBytes":0} +{"@timestamp":1787398665207,"_id":"260822-X4knW85YgYRGTYH5ARv4bU0j","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24010},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977158,"ipProtocol":6,"lastPacket":1787397977158,"length":0,"network":{"bytes":66,"community_id":"1:ljifRjMBa42O7jmqBjftrMfcRvA=","packets":1},"node":"spark-afae","packetPos":[-77797,1897079],"packetRange":{"gte":1787397977158,"lte":1787397977158},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":65253},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":519800436},"totDataBytes":0} +{"@timestamp":1787398665206,"_id":"260822-X4nQZIx5ahlJG6c9rSFDlxY_","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":24009},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77797],"firstPacket":1787397977146,"ipProtocol":6,"lastPacket":1787397977146,"length":0,"network":{"bytes":66,"community_id":"1:Uww6L25Vvf0iIGiJhb3II0qbxoE=","packets":1},"node":"spark-afae","packetPos":[-77797,1882411],"packetRange":{"gte":1787397977146,"lte":1787397977146},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":64987},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2646449100},"totDataBytes":0} +{"@timestamp":1787299489035,"_id":"260821-6cvE9BYbzShI3I93qIx6Z3sH","_index":"arkime_sessions3-260821","client":{"bytes":4},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":331,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":4,"port":9025},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[77245],"firstPacket":1787298703705,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":18,"ipProtocol":6,"lastPacket":1787298708729,"length":5024,"network":{"bytes":697,"community_id":"1:Ie2LUZdJsfzMqjOMqksg6UdOMI8=","packets":10},"node":"spark-afae","packetPos":[-77245,1552857,82,0,76,0,14314,76,173,70,76],"packetRange":{"gte":1787298703705,"lte":1787298708729},"protocol":["http","tcp"],"protocolCnt":2,"rootId":"260821-6cvE9BYbzShI3I93qIx6Z3sH","segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":366,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["00:c0:1d:c0:ff:ee","fc:bd:67:9d:2b:2b"],"mac-cnt":2,"packets":6,"port":49439},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcPayload8":"05020002","srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":["Attempted Information Leak"],"categoryCnt":1,"flowId":["2185538806691242"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[2],"severityCnt":1,"signature":["5a66c944-faed-4791-9d94-b44b7bd48352"],"signatureCnt":1,"signatureId":[2000181],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["recon"],"categoryCnt":1,"cves":[""],"cvesCnt":1,"description":["socks proxy protocol negotiation"],"intention":["suspicious"],"intentionCnt":1,"name":["socks proxy protocol negotiation"],"nameCnt":1},"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4ls":"67_64_2475171","ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":1,"dstZero":0,"ece":2,"fin":2,"psh":2,"rst":2,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2362182561},"totDataBytes":107} +{"@timestamp":1787299489000,"_id":"260821-6cv6JD4vXF9LiIoSpKOoVAua","_index":"arkime_sessions3-260821","client":{"bytes":4},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":331,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":4,"port":2135},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[77245],"firstPacket":1787298371502,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":16,"ipProtocol":6,"lastPacket":1787298376529,"length":5027,"network":{"bytes":697,"community_id":"1:bqcna2qyFaPEEndWic7vSIdekYM=","packets":10},"node":"spark-afae","packetPos":[-77245,55475,82,337,76,0,16131,76,173,70,76],"packetRange":{"gte":1787298371502,"lte":1787298376529},"protocol":["http","tcp"],"protocolCnt":2,"rootId":"260821-6cv6JD4vXF9LiIoSpKOoVAua","segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":366,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["00:c0:1d:c0:ff:ee","fc:bd:67:9d:2b:2b"],"mac-cnt":2,"packets":6,"port":50649},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcPayload8":"05020002","srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":["Attempted Information Leak"],"categoryCnt":1,"flowId":["1031945960960602"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[2],"severityCnt":1,"signature":["5a66c944-faed-4791-9d94-b44b7bd48352"],"signatureCnt":1,"signatureId":[2000181],"signatureIdCnt":1},"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4ls":"94_64_2479472","ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":1,"dstZero":0,"ece":2,"fin":2,"psh":2,"rst":2,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":177164305},"totDataBytes":107} +{"@timestamp":1787295282368,"_id":"260821-W8tFHV_19yxORrQJlkPfP1Dz","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8868},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294686198,"ipProtocol":6,"lastPacket":1787294687188,"length":990,"network":{"bytes":132,"community_id":"1:IA7BHmZO+VVOCtjN2Xnk6H1MCwE=","packets":2},"node":"spark-afae","packetPos":[-77221,3186883,208514],"packetRange":{"gte":1787294686198,"lte":1787294687188},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":50672},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1945144188},"totDataBytes":0} +{"@timestamp":1787295282350,"_id":"260821-W8vUeTKqR3FMTLbvxHOEmx0P","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8867},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294686174,"ipProtocol":6,"lastPacket":1787294686174,"length":0,"network":{"bytes":66,"community_id":"1:P+mZnm96l90ULzRD8X5izUsffRg=","packets":1},"node":"spark-afae","packetPos":[-77221,3180907],"packetRange":{"gte":1787294686174,"lte":1787294686174},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":50410},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":710168394},"totDataBytes":0} +{"@timestamp":1787295282314,"_id":"260821-W8uVsS0ldmxEq6vYepNhIqey","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":120,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":2,"port":8866},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[77221],"firstPacket":1787294686168,"initRTT":16,"ipProtocol":6,"lastPacket":1787294686236,"length":68,"network":{"bytes":366,"community_id":"1:jeVFkz3ykCaFeUe0+GHp1v2Jq1Q=","packets":6},"node":"spark-afae","packetPos":[-77221,3172913,480,19674,316,228,13406],"packetRange":{"gte":1787294686168,"lte":1787294686236},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":246,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":4,"port":50144},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":1,"dstZero":0,"ece":2,"fin":2,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3125454625},"totDataBytes":0} +{"@timestamp":1787295282329,"_id":"260821-W8sSPyO4QuZC1IuUUmwSS0jq","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8865},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294686145,"ipProtocol":6,"lastPacket":1787294687157,"length":1012,"network":{"bytes":132,"community_id":"1:5yWbtuhunbIhjz5+erasnVvumQE=","packets":2},"node":"spark-afae","packetPos":[-77221,3166129,226891],"packetRange":{"gte":1787294686145,"lte":1787294687157},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":49881},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3819536499},"totDataBytes":0} +{"@timestamp":1787295282333,"_id":"260821-W8udM2PdVztCiZT5T1ifZYdV","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8864},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294686131,"ipProtocol":6,"lastPacket":1787294687149,"length":1018,"network":{"bytes":132,"community_id":"1:zi6Pte/EDSBL3rym13tO+lFjxFc=","packets":2},"node":"spark-afae","packetPos":[-77221,3158299,233093],"packetRange":{"gte":1787294686131,"lte":1787294687149},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":49602},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":707614983},"totDataBytes":0} +{"@timestamp":1787295282400,"_id":"260821-W8tsQjQGVclFrZ8dUDXyMmbo","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8863},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294686111,"ipProtocol":6,"lastPacket":1787294686111,"length":0,"network":{"bytes":66,"community_id":"1:ucL0hJ+lM/fnjuaRQCKddo3AN+M=","packets":1},"node":"spark-afae","packetPos":[-77221,3144649],"packetRange":{"gte":1787294686111,"lte":1787294686111},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":49335},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":83758623},"totDataBytes":0} +{"@timestamp":1787295282391,"_id":"260821-W8uXpUpbF4FEn6Z2-BRBDN9T","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8862},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294686088,"ipProtocol":6,"lastPacket":1787294686088,"length":0,"network":{"bytes":66,"community_id":"1:wldU4BO25vKRSXe8V7CH2ggTiZU=","packets":1},"node":"spark-afae","packetPos":[-77221,3131463],"packetRange":{"gte":1787294686088,"lte":1787294686088},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":65454},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2326875972},"totDataBytes":0} +{"@timestamp":1787295282342,"_id":"260821-W8tNXuTfZIBAJ5LGeLskt4ms","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8861},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294686078,"ipProtocol":6,"lastPacket":1787294686078,"length":0,"network":{"bytes":66,"community_id":"1:px3mT4LvJV35xQysImb4FwuKB3s=","packets":1},"node":"spark-afae","packetPos":[-77221,3125967],"packetRange":{"gte":1787294686078,"lte":1787294686078},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":65194},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3479844389},"totDataBytes":0} +{"@timestamp":1787295282351,"_id":"260821-W8vwZYZSKxZNK7F35cLBm2-O","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8860},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294686066,"ipProtocol":6,"lastPacket":1787294687074,"length":1008,"network":{"bytes":132,"community_id":"1:TkM92ZmWl9JP/rLrBYaeqdalauQ=","packets":2},"node":"spark-afae","packetPos":[-77221,3112747,270465],"packetRange":{"gte":1787294686066,"lte":1787294687074},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":64933},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3894118945},"totDataBytes":0} +{"@timestamp":1787295282356,"_id":"260821-W8vzhVbrZn1Gia36Ar-iS1m9","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8859},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294686053,"ipProtocol":6,"lastPacket":1787294686053,"length":0,"network":{"bytes":66,"community_id":"1:oiwlxAjPyIWZhAlTFZNNTGEIV9s=","packets":1},"node":"spark-afae","packetPos":[-77221,3102425],"packetRange":{"gte":1787294686053,"lte":1787294686053},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":64669},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1532565211},"totDataBytes":0} +{"@timestamp":1787295282365,"_id":"260821-W8uPwTa2z25FR6A3L7Tfa7lP","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8858},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294686039,"ipProtocol":6,"lastPacket":1787294687048,"length":1009,"network":{"bytes":132,"community_id":"1:CSKRqG5c/+KM25J7zkuGephZFzM=","packets":2},"node":"spark-afae","packetPos":[-77221,3093161,284010],"packetRange":{"gte":1787294686039,"lte":1787294687048},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":64406},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3504527314},"totDataBytes":0} +{"@timestamp":1787295282317,"_id":"260821-W8vTDr3R_h9EkqmIh5fMBWyu","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8857},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294686023,"ipProtocol":6,"lastPacket":1787294686023,"length":0,"network":{"bytes":66,"community_id":"1:jf+L6uus9e240DsOR4JY6DQ1NHM=","packets":1},"node":"spark-afae","packetPos":[-77221,3077953],"packetRange":{"gte":1787294686023,"lte":1787294686023},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":64143},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3736444422},"totDataBytes":0} +{"@timestamp":1787295282393,"_id":"260821-W8u98abx81xIWoVcChQR2N5v","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8856},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294686015,"ipProtocol":6,"lastPacket":1787294687015,"length":1000,"network":{"bytes":132,"community_id":"1:obOc3V7pcOuhShBPYFKaJ4TOgbQ=","packets":2},"node":"spark-afae","packetPos":[-77221,3069767,304488],"packetRange":{"gte":1787294686015,"lte":1787294687015},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":63873},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3472757763},"totDataBytes":0} +{"@timestamp":1787295282332,"_id":"260821-W8t_wXLpQQxNy7_ZoNnQNu3y","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8855},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294685997,"ipProtocol":6,"lastPacket":1787294687005,"length":1008,"network":{"bytes":132,"community_id":"1:fa8+MxZUu6YaRY+NvDY/HBLEgrA=","packets":2},"node":"spark-afae","packetPos":[-77221,3056525,314390],"packetRange":{"gte":1787294685997,"lte":1787294687005},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":63606},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1290248661},"totDataBytes":0} +{"@timestamp":1787295282382,"_id":"260821-W8s1Ir25kIVBKKM0nNKz8JDf","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8854},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294685988,"ipProtocol":6,"lastPacket":1787294686996,"length":1008,"network":{"bytes":132,"community_id":"1:rfW5CCxW+gW4d1XgX0Q5BXxIAzE=","packets":2},"node":"spark-afae","packetPos":[-77221,3042493,326712],"packetRange":{"gte":1787294685988,"lte":1787294686996},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":63333},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3577240244},"totDataBytes":0} +{"@timestamp":1787295282342,"_id":"260821-W8tlKAjZi1ZOMK9_R5sZ46-Z","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8853},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294685977,"ipProtocol":6,"lastPacket":1787294685977,"length":0,"network":{"bytes":66,"community_id":"1:sGO6AOSy+AR2qPMUh38BM7cqtKk=","packets":1},"node":"spark-afae","packetPos":[-77221,3027665],"packetRange":{"gte":1787294685977,"lte":1787294685977},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":63076},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1716716909},"totDataBytes":0} +{"@timestamp":1787295282319,"_id":"260821-W8vaOlFYuDRAMLGFXWZvr2Lf","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8852},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294685957,"ipProtocol":6,"lastPacket":1787294685957,"length":0,"network":{"bytes":66,"community_id":"1:MXy/dbcibLbyUeI5vzg7GVQPBSw=","packets":1},"node":"spark-afae","packetPos":[-77221,2997723],"packetRange":{"gte":1787294685957,"lte":1787294685957},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":62811},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1130549068},"totDataBytes":0} +{"@timestamp":1787295282380,"_id":"260821-W8vWj0OWvAdCKodim-xIDEs-","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8851},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294685932,"ipProtocol":6,"lastPacket":1787294685932,"length":0,"network":{"bytes":66,"community_id":"1:4gwZivz/LHzmbk9VCGAUNJbVidI=","packets":1},"node":"spark-afae","packetPos":[-77221,2957463],"packetRange":{"gte":1787294685932,"lte":1787294685932},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":62548},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1856043160},"totDataBytes":0} +{"@timestamp":1787295282388,"_id":"260821-W8vJQRYUtDdNZ50cUcIktMaV","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8850},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294685919,"ipProtocol":6,"lastPacket":1787294686925,"length":1006,"network":{"bytes":132,"community_id":"1:iE95t1gYhLvBo7cBrCUoLv2959o=","packets":2},"node":"spark-afae","packetPos":[-77221,2940327,415984],"packetRange":{"gte":1787294685919,"lte":1787294686925},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":62284},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2266514894},"totDataBytes":0} +{"@timestamp":1787295282329,"_id":"260821-W8uWRH0RRaZFW7V38Hsowg-Z","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8849},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294685897,"ipProtocol":6,"lastPacket":1787294685897,"length":0,"network":{"bytes":66,"community_id":"1:u9Qm1TRQrdHzwzFA//dZOWKtY30=","packets":1},"node":"spark-afae","packetPos":[-77221,2914653],"packetRange":{"gte":1787294685897,"lte":1787294685897},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":62017},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2003973733},"totDataBytes":0} +{"@timestamp":1787295282354,"_id":"260821-W8vTga9--79Ch5HXWEuf5N6M","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8848},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294685887,"ipProtocol":6,"lastPacket":1787294686890,"length":1003,"network":{"bytes":132,"community_id":"1:H10iVoOJuAsVrH7lb2y0LVi9JWc=","packets":2},"node":"spark-afae","packetPos":[-77221,2890021,458354],"packetRange":{"gte":1787294685887,"lte":1787294686890},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":61751},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3367511455},"totDataBytes":0} +{"@timestamp":1787295282356,"_id":"260821-W8toz655PGpCZ7RnlTw6_Fh8","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8847},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294685883,"ipProtocol":6,"lastPacket":1787294686872,"length":989,"network":{"bytes":132,"community_id":"1:zbpHudVmiEBqwvWE+PCw7XOPJvs=","packets":2},"node":"spark-afae","packetPos":[-77221,2864049,479956],"packetRange":{"gte":1787294685883,"lte":1787294686872},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":132,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":2,"port":61484},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1245753742},"totDataBytes":0} +{"@timestamp":1787295282331,"_id":"260821-W8sziO3rAHZBwoZd2MAMwoAK","_index":"arkime_sessions3-260821","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":8846},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77221],"firstPacket":1787294685855,"ipProtocol":6,"lastPacket":1787294685855,"length":0,"network":{"bytes":66,"community_id":"1:xoBVpByDwDE/zOxZGZ1Y9utCcRk=","packets":1},"node":"spark-afae","packetPos":[-77221,2838141],"packetRange":{"gte":1787294685855,"lte":1787294685855},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":61219},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":1,"dstZero":0,"ece":1,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":176276568},"totDataBytes":0} +{"@timestamp":1785185629328,"_id":"260727-kjipZuEuiL9Bk5E9TrMcQCe9","_index":"arkime_sessions3-260727","client":{"bytes":9},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":331,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":4,"port":123},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[65530],"firstPacket":1785184326416,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["connection","content-type"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":21,"ipProtocol":6,"lastPacket":1785184331448,"length":5032,"network":{"bytes":700,"community_id":"1:GVbm0WqZD2jXczgeTDk1k/AjKUI=","packets":10},"node":"spark-afae","packetPos":[-65530,399560,82,246,76,79,19039,76,173,866,76],"packetRange":{"gte":1785184326416,"lte":1785184331448},"protocol":["http","tcp"],"protocolCnt":2,"rootId":"260727-kjipZuEuiL9Bk5E9TrMcQCe9","segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":369,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":6,"port":51533},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcPayload8":"0401005001010101","srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","sensor:contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4ls":"77_64_2478366","ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":1,"dstZero":0,"ece":2,"fin":2,"psh":2,"rst":2,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":639078340},"totDataBytes":112} +{"@timestamp":1784793925673,"_id":"260723-6Qerye6InqFDeoYEQ1ySwMp3","_index":"arkime_sessions3-260723","client":{"bytes":159},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":515,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":4,"port":591},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[63354],"firstPacket":1784793550837,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["www.google.com:443","www.google.com"],"hostCnt":2,"ja4h":["co11nn020000_818f42cc3fd7_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["co11nn020000_Host,User-Agent__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["CONNECT"],"method-CONNECT":1,"methodCnt":1,"path":["www.google.com:443"],"pathCnt":1,"requestHeader":["host","user-agent"],"requestHeaderCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["connection","server","x-powered-by","content-type","content-length","date"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","thu, 23 jul 2026 07:59:10 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["www.google.com:443"],"uriCnt":1,"useragent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0"],"useragentCnt":1},"initRTT":16,"ipProtocol":6,"lastPacket":1784793550906,"length":69,"network":{"bytes":974,"community_id":"1:nHmcKWVAuQsy+nJd0pRP4OKoVzY=","packets":9},"node":"spark-afae","packetPos":[-63354,10427900,82,0,76,229,70,357,70,76],"packetRange":{"gte":1784793550837,"lte":1784793550906},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":459,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":5,"port":50402},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcPayload8":"434f4e4e45435420","srcRIR":"AFRINIC","srcTTL":[121],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1908087464943045"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","23e6932c-e2bd-48cf-80b8-aa98ae9276c4"],"signatureCnt":2,"signatureId":[1031486,1030991],"signatureIdCnt":2},"tag":{"block":["false","true"],"blockCnt":2,"category":["activity","protocol"],"categoryCnt":2,"description":["ip addresses with this tag have been seen crawling http(s) servers around the internet.","ip addresses with this tag have been observed crawling the internet for unauthenticated web proxies and testing if they are functional."],"intention":["malicious","unknown"],"intentionCnt":2,"name":["open proxy scanner","web crawler"],"nameCnt":2},"tags":["sensor:contabo-sponge-01-ts","contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4ls":"47_64_tcp","ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":3,"ae":0,"cwr":1,"dstZero":0,"ece":2,"fin":1,"psh":2,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2097132136},"totDataBytes":446} +{"@timestamp":1784793925634,"_id":"260723-6QdimMeQvpJKcLpaH7RV9lYm","_index":"arkime_sessions3-260723","client":{"bytes":159},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":515,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":4,"port":222},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[63354],"firstPacket":1784792818465,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["www.google.com:443","www.google.com"],"hostCnt":2,"ja4h":["co11nn020000_818f42cc3fd7_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["co11nn020000_Host,User-Agent__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["CONNECT"],"method-CONNECT":1,"methodCnt":1,"path":["www.google.com:443"],"pathCnt":1,"requestHeader":["host","user-agent"],"requestHeaderCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["connection","server","x-powered-by","content-type","content-length","date"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","thu, 23 jul 2026 07:46:58 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["www.google.com:443"],"uriCnt":1,"useragent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0"],"useragentCnt":1},"initRTT":16,"ipProtocol":6,"lastPacket":1784792818534,"length":69,"network":{"bytes":974,"community_id":"1:XrRrGn/otH7cYhvl7YCeljQSHG0=","packets":9},"node":"spark-afae","packetPos":[-63354,746921,164,714,76,229,70,357,70,76],"packetRange":{"gte":1784792818465,"lte":1784792818534},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":459,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":5,"port":50364},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcPayload8":"434f4e4e45435420","srcRIR":"AFRINIC","srcTTL":[120],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["591728373511023"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","23e6932c-e2bd-48cf-80b8-aa98ae9276c4"],"signatureCnt":2,"signatureId":[1031486,1030991],"signatureIdCnt":2},"tag":{"block":["false","true"],"blockCnt":2,"category":["activity","protocol"],"categoryCnt":2,"description":["ip addresses with this tag have been seen crawling http(s) servers around the internet.","ip addresses with this tag have been observed crawling the internet for unauthenticated web proxies and testing if they are functional."],"intention":["malicious","unknown"],"intentionCnt":2,"name":["open proxy scanner","web crawler"],"nameCnt":2},"tags":["sensor:contabo-sponge-01-ts","contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4ls":"154_64_tcp","ja4t":["64240_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":3,"ae":0,"cwr":1,"dstZero":0,"ece":2,"fin":1,"psh":2,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":4217937109},"totDataBytes":446} +{"@timestamp":1784714152127,"_id":"260722-ePxaU5a5gldDDIwhk-50R1KN","_index":"arkime_sessions3-260722","client":{"bytes":4},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Kaopu Cloud HK Limited"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Lightnode Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":331,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":4,"port":10087},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[62909],"firstPacket":1784712875300,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":92,"ipProtocol":6,"lastPacket":1784712880489,"length":5189,"network":{"bytes":671,"community_id":"1:RNDO+y8BaZzkQEX1D9bsBXLg2dw=","packets":10},"node":"spark-afae","packetPos":[-62909,112654,82,1082,70,74,7077,70,173,362,70],"packetRange":{"gte":1784712875300,"lte":1784712880489},"protocol":["http","tcp"],"protocolCnt":2,"rootId":"260722-ePxaU5a5gldDDIwhk-50R1KN","segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":340,"geo":{"country_iso_code":"PH"},"ip":"154.90.37.55","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":6,"port":53425},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"05020002","srcRIR":"AFRINIC","srcTTL":[113],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":["Attempted Information Leak"],"categoryCnt":1,"flowId":["1007713187855869"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[2],"severityCnt":1,"signature":["5a66c944-faed-4791-9d94-b44b7bd48352"],"signatureCnt":1,"signatureId":[2000181],"signatureIdCnt":1},"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4ls":"51_64_2409223","ja4t":["64240_2-1-3-1-1-4_1400_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":1,"dstZero":0,"ece":2,"fin":2,"psh":2,"rst":2,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1352326926},"totDataBytes":107} diff --git a/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113640_9d421320.ndjson b/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113640_9d421320.ndjson new file mode 100644 index 0000000..4db24f1 --- /dev/null +++ b/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113640_9d421320.ndjson @@ -0,0 +1,100 @@ +{"@timestamp":1788170577237,"_id":"260831--z4qAe9iP1pMm6s0Ig8pvBDr","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":6001},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089640,"ipProtocol":6,"lastPacket":1788170098639,"length":8999,"network":{"bytes":194,"community_id":"1:xlsf6/xULuWzNCf0d4duBXlJTYI=","packets":3},"node":"spark-afae","packetPos":[-82412,199891,2476,3592],"packetRange":{"gte":1788170089640,"lte":1788170098639},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":63311},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":1032924479},"totDataBytes":0} +{"@timestamp":1788170577038,"_id":"260831--z5OdSSjJJ9M6795oxM3M-NC","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":8989},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089640,"ipProtocol":6,"lastPacket":1788170098639,"length":8999,"network":{"bytes":194,"community_id":"1:fxUipZZhHUCAeEe5NBVFlGVi5Q4=","packets":3},"node":"spark-afae","packetPos":[-82412,199973,2476,3432],"packetRange":{"gte":1788170089640,"lte":1788170098639},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":65383},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":682712236},"totDataBytes":0} +{"@timestamp":1788170577237,"_id":"260831--z7wZg8N_UNCxbl726_eyyHw","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":4443},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089636,"ipProtocol":6,"lastPacket":1788170098653,"length":9017,"network":{"bytes":194,"community_id":"1:+m1XEWtF1ginaffVGNM27q7XvDA=","packets":3},"node":"spark-afae","packetPos":[-82412,199809,2722,3506],"packetRange":{"gte":1788170089636,"lte":1788170098653},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":64696},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":918658525},"totDataBytes":0} +{"@timestamp":1788170577037,"_id":"260831--z5wCHCoLftJML5g58nVVbAy","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":443},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089634,"ipProtocol":6,"lastPacket":1788170098619,"length":8985,"network":{"bytes":194,"community_id":"1:hj30LPlPi1NUBMWDNVjQXI6IRGE=","packets":3},"node":"spark-afae","packetPos":[-82412,199727,2394,3526],"packetRange":{"gte":1788170089634,"lte":1788170098619},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":62804},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":3243181880},"totDataBytes":0} +{"@timestamp":1788170577037,"_id":"260831--z7p8pu1LshIZalShh9v5JOp","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":1501},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089632,"ipProtocol":6,"lastPacket":1788170098621,"length":8989,"network":{"bytes":194,"community_id":"1:OnrKR0kfRQxEenL7tVHBJ+Rd3gY=","packets":3},"node":"spark-afae","packetPos":[-82412,199645,2558,3522],"packetRange":{"gte":1788170089632,"lte":1788170098621},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":62783},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":2514283198},"totDataBytes":0} +{"@timestamp":1788170577038,"_id":"260831--z6PPili84VGSpjbZ4DMtwKg","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":11443},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089628,"ipProtocol":6,"lastPacket":1788170098619,"length":8991,"network":{"bytes":194,"community_id":"1:deJPN7QOBrl2ZuR4Zee7GE7C4j8=","packets":3},"node":"spark-afae","packetPos":[-82412,199563,2476,3530],"packetRange":{"gte":1788170089628,"lte":1788170098619},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":64685},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":4154981265},"totDataBytes":0} +{"@timestamp":1788170577038,"_id":"260831--z5bsMc0OiNFeYb31gZ4_jLC","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":3005},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089618,"ipProtocol":6,"lastPacket":1788170098606,"length":8988,"network":{"bytes":194,"community_id":"1:Dyswvx4WQGwf1a4iXH7proPBmK8=","packets":3},"node":"spark-afae","packetPos":[-82412,199481,1574,3344],"packetRange":{"gte":1788170089618,"lte":1788170098606},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":64838},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":309108923},"totDataBytes":0} +{"@timestamp":1788170577038,"_id":"260831--z7VIIzbIEhIzafFjZObNr_9","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":43},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089616,"ipProtocol":6,"lastPacket":1788170098602,"length":8986,"network":{"bytes":194,"community_id":"1:G8fPeSe6dVcX/R/yWUtvnpivu4M=","packets":3},"node":"spark-afae","packetPos":[-82412,199399,1328,3594],"packetRange":{"gte":1788170089616,"lte":1788170098602},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":63861},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":1110524428},"totDataBytes":0} +{"@timestamp":1788170577037,"_id":"260831--z7Dsbns-_BDq4dVHtlqbBu7","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":9999},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089611,"ipProtocol":6,"lastPacket":1788170098609,"length":8998,"network":{"bytes":194,"community_id":"1:iMUxbWNUc5lsyL5FjH/FaBVbF3g=","packets":3},"node":"spark-afae","packetPos":[-82412,199317,2558,3538],"packetRange":{"gte":1788170089611,"lte":1788170098609},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":62935},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":425714856},"totDataBytes":0} +{"@timestamp":1788170577037,"_id":"260831--z5Witos6q1Gg5JWHg8YrkHB","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":7788},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089609,"ipProtocol":6,"lastPacket":1788170098624,"length":9015,"network":{"bytes":194,"community_id":"1:v69ckg2S08BZNPNtVndt0Ll9ljY=","packets":3},"node":"spark-afae","packetPos":[-82412,199071,3214,3518],"packetRange":{"gte":1788170089609,"lte":1788170098624},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":63098},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":2686436917},"totDataBytes":0} +{"@timestamp":1788170577037,"_id":"260831--z4oHs8krl1LeLC_3AFy0GSh","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":8001},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089609,"ipProtocol":6,"lastPacket":1788170098608,"length":8999,"network":{"bytes":194,"community_id":"1:2WARFtef0Y1RjUXXIiEdPegjZ5c=","packets":3},"node":"spark-afae","packetPos":[-82412,199235,2394,3550],"packetRange":{"gte":1788170089609,"lte":1788170098608},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":64503},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":1374599238},"totDataBytes":0} +{"@timestamp":1788170577038,"_id":"260831--z4M7ktS86dF96fT-Og3SGOG","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":9001},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089609,"ipProtocol":6,"lastPacket":1788170098607,"length":8998,"network":{"bytes":194,"community_id":"1:X/NhmTgFvyp14o6badjLyRgIJOI=","packets":3},"node":"spark-afae","packetPos":[-82412,198989,2476,3480],"packetRange":{"gte":1788170089609,"lte":1788170098607},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":63762},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":962591335},"totDataBytes":0} +{"@timestamp":1788170577038,"_id":"260831--z7rLx2fRYxKPrBcCQeH5_5y","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":44443},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089609,"ipProtocol":6,"lastPacket":1788170098608,"length":8999,"network":{"bytes":194,"community_id":"1:BvTPqwMVPKNzHVWI49H9dGGZnYY=","packets":3},"node":"spark-afae","packetPos":[-82412,199153,2558,3546],"packetRange":{"gte":1788170089609,"lte":1788170098608},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":63442},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":132441986},"totDataBytes":0} +{"@timestamp":1788170577237,"_id":"260831--z6OaEN6qsxKBonft8qDBmyJ","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":10443},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089608,"ipProtocol":6,"lastPacket":1788170098615,"length":9007,"network":{"bytes":194,"community_id":"1:MrfegbmZeItQ2kft5BL3Fbjr2WE=","packets":3},"node":"spark-afae","packetPos":[-82412,198661,3296,3534],"packetRange":{"gte":1788170089608,"lte":1788170098615},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":65187},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":961637960},"totDataBytes":0} +{"@timestamp":1788170577037,"_id":"260831--z534Ydc-6ZEVIJBS_vJhyzO","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5005},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089608,"ipProtocol":6,"lastPacket":1788170098606,"length":8998,"network":{"bytes":194,"community_id":"1:CH556LYmmJWZab+MSnVppmEUTKo=","packets":3},"node":"spark-afae","packetPos":[-82412,198825,2476,3410],"packetRange":{"gte":1788170089608,"lte":1788170098606},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":62906},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":1563772734},"totDataBytes":0} +{"@timestamp":1788170577037,"_id":"260831--z4EHD391UhJManSV6KAtQAS","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":8899},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089608,"ipProtocol":6,"lastPacket":1788170098606,"length":8998,"network":{"bytes":194,"community_id":"1:ubNMFI0xmekvViGtFmSZIWsL1ZE=","packets":3},"node":"spark-afae","packetPos":[-82412,198907,2312,3570],"packetRange":{"gte":1788170089608,"lte":1788170098606},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":65351},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":515725400},"totDataBytes":0} +{"@timestamp":1788170577037,"_id":"260831--z7mVBJ5CMJPlac-Ku1bPs9o","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5678},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089608,"ipProtocol":6,"lastPacket":1788170098606,"length":8998,"network":{"bytes":194,"community_id":"1:VnXZ4Pr5TMykBtZ344YLCMVsN0o=","packets":3},"node":"spark-afae","packetPos":[-82412,198743,2394,3730],"packetRange":{"gte":1788170089608,"lte":1788170098606},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":62722},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":1937039927},"totDataBytes":0} +{"@timestamp":1788170577037,"_id":"260831--z7oFkzLAvZBvLPM-7Y8v5RG","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5000},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089607,"ipProtocol":6,"lastPacket":1788170098606,"length":8999,"network":{"bytes":194,"community_id":"1:0vYnzS0UAu4YWtat+Fbsl8fgN14=","packets":3},"node":"spark-afae","packetPos":[-82412,198251,2558,3824],"packetRange":{"gte":1788170089607,"lte":1788170098606},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":62818},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":3612898615},"totDataBytes":0} +{"@timestamp":1788170577037,"_id":"260831--z6CoZLSfXdI2JDFpJi-M186","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":8888},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089607,"ipProtocol":6,"lastPacket":1788170098606,"length":8999,"network":{"bytes":194,"community_id":"1:BoKZGJagXcKFIXEp4PnVDALqC3c=","packets":3},"node":"spark-afae","packetPos":[-82412,198497,2394,3664],"packetRange":{"gte":1788170089607,"lte":1788170098606},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":62346},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":4137148438},"totDataBytes":0} +{"@timestamp":1788170577037,"_id":"260831--z54eOBrdRJO_4YXy-z8Uzu0","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":6000},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089607,"ipProtocol":6,"lastPacket":1788170098606,"length":8999,"network":{"bytes":194,"community_id":"1:wKZ0ryt7JtLMIi9rlHCV0x7s5PU=","packets":3},"node":"spark-afae","packetPos":[-82412,198415,2558,3504],"packetRange":{"gte":1788170089607,"lte":1788170098606},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":62631},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":860346444},"totDataBytes":0} +{"@timestamp":1788170577038,"_id":"260831--z4aMiI9qwlJLLjc-YPxmdxM","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":4433},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089607,"ipProtocol":6,"lastPacket":1788170098608,"length":9001,"network":{"bytes":194,"community_id":"1:UcR6xUgA1aQs5iJv+5FqDeR9flY=","packets":3},"node":"spark-afae","packetPos":[-82412,198333,3214,3554],"packetRange":{"gte":1788170089607,"lte":1788170098608},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":65350},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":2643619161},"totDataBytes":0} +{"@timestamp":1788170577038,"_id":"260831--z7o_SmOOhtJxoa48CtN8TlB","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":3333},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089607,"ipProtocol":6,"lastPacket":1788170098609,"length":9002,"network":{"bytes":194,"community_id":"1:H+2NtDhzKo0hRZzqLu2x2Jw+qgw=","packets":3},"node":"spark-afae","packetPos":[-82412,198579,3214,3542],"packetRange":{"gte":1788170089607,"lte":1788170098609},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":63497},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":320596176},"totDataBytes":0} +{"@timestamp":1788170577237,"_id":"260831--z4JX_PG_PlNwYcwmiOqHr9y","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":2008},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089605,"ipProtocol":6,"lastPacket":1788170098592,"length":8987,"network":{"bytes":194,"community_id":"1:bJnyYJ9JizJJT/icth5lxFqLn7k=","packets":3},"node":"spark-afae","packetPos":[-82412,198169,2312,3684],"packetRange":{"gte":1788170089605,"lte":1788170098592},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":65361},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":2120225160},"totDataBytes":0} +{"@timestamp":1788170577037,"_id":"260831--z7e909iD1RLLavH39j28ucw","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":1500},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089604,"ipProtocol":6,"lastPacket":1788170098592,"length":8988,"network":{"bytes":194,"community_id":"1:AocsVOaJMMwAtAT5/jIMsMydW/Y=","packets":3},"node":"spark-afae","packetPos":[-82412,198087,2558,3598],"packetRange":{"gte":1788170089604,"lte":1788170098592},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":65135},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":2003931571},"totDataBytes":0} +{"@timestamp":1788170577238,"_id":"260831--z748Klk3IxNUYacmdDBIw-y","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":1800},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089603,"ipProtocol":6,"lastPacket":1788170098592,"length":8989,"network":{"bytes":194,"community_id":"1:AxfxM1wZzjWoufJ6HKj5FLkCZrQ=","packets":3},"node":"spark-afae","packetPos":[-82412,198005,2394,3610],"packetRange":{"gte":1788170089603,"lte":1788170098592},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":64398},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":2809760729},"totDataBytes":0} +{"@timestamp":1788170577038,"_id":"260831--z58UrOcvnNHj5VwHAAVCV3s","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":12443},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089602,"ipProtocol":6,"lastPacket":1788170098607,"length":9005,"network":{"bytes":194,"community_id":"1:BS36BzDeN0+0xjYg/smICtS51XI=","packets":3},"node":"spark-afae","packetPos":[-82412,197923,3460,3640],"packetRange":{"gte":1788170089602,"lte":1788170098607},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":64091},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":1640109991},"totDataBytes":0} +{"@timestamp":1788170577037,"_id":"260831--z6egMOKe-NMx7SjB6PXWD_Z","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":12345},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089602,"ipProtocol":6,"lastPacket":1788170098592,"length":8990,"network":{"bytes":194,"community_id":"1:WXFpBTeEO8V3qzQnOEl1TFP5D+M=","packets":3},"node":"spark-afae","packetPos":[-82412,197841,2722,3524],"packetRange":{"gte":1788170089602,"lte":1788170098592},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":64989},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":3903503155},"totDataBytes":0} +{"@timestamp":1788170577037,"_id":"260831--z5r8YTZ8l9KV4bhwXA9My7n","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":1434},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089601,"ipProtocol":6,"lastPacket":1788170098591,"length":8990,"network":{"bytes":194,"community_id":"1:KvLeXQ65vriWSSMqujoU3o4KS+k=","packets":3},"node":"spark-afae","packetPos":[-82412,197759,2476,3618],"packetRange":{"gte":1788170089601,"lte":1788170098591},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":64198},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":765870725},"totDataBytes":0} +{"@timestamp":1788170577038,"_id":"260831--z4lQ-Hmd-NB0bQenChs3P2l","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":1433},"dstRIR":"ARIN","ethertype":2048,"fileId":[82412],"firstPacket":1788170089601,"ipProtocol":6,"lastPacket":1788170098591,"length":8990,"network":{"bytes":194,"community_id":"1:ZeUiRdy2otqvy2cK0FTbLB3QlA4=","packets":3},"node":"spark-afae","packetPos":[-82412,197677,2640,3614],"packetRange":{"gte":1788170089601,"lte":1788170098591},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":62692},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["200_2-1-1-4_1460_00","200_2-1-3-1-1-4_1460_0"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":1151301433},"totDataBytes":0} +{"@timestamp":1788112934719,"_id":"260830-MDdZjJRoI_9O27ASNuRDEjzK","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":9999},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159371,"ipProtocol":6,"lastPacket":1788112168367,"length":8996,"network":{"bytes":194,"community_id":"1:QFwP6fvpDFd3q5UX8GaJ+qVfjl8=","packets":3},"node":"spark-afae","packetPos":[-82029,105480,1921,2576],"packetRange":{"gte":1788112159371,"lte":1788112168367},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDdZjJRoI_9O27ASNuRDEjzK","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52689},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","8192_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":3131433924},"totDataBytes":0} +{"@timestamp":1788112934719,"_id":"260830-MDeHogoU3uxDZYLWSEw-bu9S","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":9001},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159370,"ipProtocol":6,"lastPacket":1788112168364,"length":8994,"network":{"bytes":194,"community_id":"1:N/8IHGS2ayhVPQZcB/5CRFNMqos=","packets":3},"node":"spark-afae","packetPos":[-82029,105398,1921,2580],"packetRange":{"gte":1788112159370,"lte":1788112168364},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDeHogoU3uxDZYLWSEw-bu9S","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52688},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","8192_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":3514635461},"totDataBytes":0} +{"@timestamp":1788112934719,"_id":"260830-MDegpMyQ36lPyr8TH_QB6b2h","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":8888},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159369,"ipProtocol":6,"lastPacket":1788112168372,"length":9003,"network":{"bytes":194,"community_id":"1:UG9nFCNisFxskm1n6hfw9WmUoQY=","packets":3},"node":"spark-afae","packetPos":[-82029,105316,2249,2568],"packetRange":{"gte":1788112159369,"lte":1788112168372},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDegpMyQ36lPyr8TH_QB6b2h","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52664},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","8192_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":195272261},"totDataBytes":0} +{"@timestamp":1788112934719,"_id":"260830-MDfLsrbcK-1IA4O3C1ls-4s_","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":6001},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159364,"ipProtocol":6,"lastPacket":1788112168368,"length":9004,"network":{"bytes":194,"community_id":"1:qy9gtdIs+w0hB/U0d4ulPOx2o6Q=","packets":3},"node":"spark-afae","packetPos":[-82029,105234,2249,2572],"packetRange":{"gte":1788112159364,"lte":1788112168368},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDfLsrbcK-1IA4O3C1ls-4s_","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52660},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","65535_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":2606542954},"totDataBytes":0} +{"@timestamp":1788112934722,"_id":"260830-MDdZfu3VK9ZBMoI0afa0sG4k","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":7788},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159363,"ipProtocol":6,"lastPacket":1788112168361,"length":8998,"network":{"bytes":194,"community_id":"1:GFojdFqqRXa3ut2a8tnViq6JuEo=","packets":3},"node":"spark-afae","packetPos":[-82029,105152,2085,2584],"packetRange":{"gte":1788112159363,"lte":1788112168361},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDdZfu3VK9ZBMoI0afa0sG4k","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52662},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","65535_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":2758541865},"totDataBytes":0} +{"@timestamp":1788112934719,"_id":"260830-MDcVMz_0iFhLV5zT_iQUhPoq","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5000},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159356,"ipProtocol":6,"lastPacket":1788112168353,"length":8997,"network":{"bytes":194,"community_id":"1:AzWv8VbqvfrRfQ/DhH51Tu4z4sc=","packets":3},"node":"spark-afae","packetPos":[-82029,105070,2085,2588],"packetRange":{"gte":1788112159356,"lte":1788112168353},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDcVMz_0iFhLV5zT_iQUhPoq","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52637},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","8192_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":2941125720},"totDataBytes":0} +{"@timestamp":1788112934719,"_id":"260830-MDdwE_XUV9NFopVEB9kcqIq3","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":3005},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159355,"ipProtocol":6,"lastPacket":1788112168351,"length":8996,"network":{"bytes":194,"community_id":"1:xGQSUL3f2V6oWYg208rVyVjmBHc=","packets":3},"node":"spark-afae","packetPos":[-82029,104988,2003,2596],"packetRange":{"gte":1788112159355,"lte":1788112168351},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDdwE_XUV9NFopVEB9kcqIq3","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52633},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","8192_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":1423425643},"totDataBytes":0} +{"@timestamp":1788112934722,"_id":"260830-MDddxJB6wRhP5K86nLazUAhL","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":8899},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159351,"ipProtocol":6,"lastPacket":1788112168351,"length":9000,"network":{"bytes":194,"community_id":"1:WjeHPFEjd1JCQGBoESIUqG0JJvM=","packets":3},"node":"spark-afae","packetPos":[-82029,104906,2167,2592],"packetRange":{"gte":1788112159351,"lte":1788112168351},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDddxJB6wRhP5K86nLazUAhL","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52676},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","8192_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":3701044199},"totDataBytes":0} +{"@timestamp":1788112934722,"_id":"260830-MDd5iXpOI7FCH5eah8B7LO4V","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":8989},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159345,"ipProtocol":6,"lastPacket":1788112168347,"length":9002,"network":{"bytes":194,"community_id":"1:ShSphBD1AfWweewRqkTMVpwDNd4=","packets":3},"node":"spark-afae","packetPos":[-82029,104824,2085,2600],"packetRange":{"gte":1788112159345,"lte":1788112168347},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDd5iXpOI7FCH5eah8B7LO4V","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52677},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","8192_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":4146533757},"totDataBytes":0} +{"@timestamp":1788112934722,"_id":"260830-MDcpN9Kp6X5JqLvHl2Kd-3El","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":8001},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159344,"ipProtocol":6,"lastPacket":1788112168342,"length":8998,"network":{"bytes":194,"community_id":"1:iiICHJEKmnyf7JaT3SVPr23Vp5A=","packets":3},"node":"spark-afae","packetPos":[-82029,104742,2085,2604],"packetRange":{"gte":1788112159344,"lte":1788112168342},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDcpN9Kp6X5JqLvHl2Kd-3El","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52663},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","65535_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":2324561050},"totDataBytes":0} +{"@timestamp":1788112934719,"_id":"260830-MDcYfX0nYrlOEbRB7_Bld459","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":2008},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159342,"ipProtocol":6,"lastPacket":1788112168338,"length":8996,"network":{"bytes":194,"community_id":"1:QXv5vX3+Y2xqJSnc0xVQC1bsG/0=","packets":3},"node":"spark-afae","packetPos":[-82029,104660,2085,2608],"packetRange":{"gte":1788112159342,"lte":1788112168338},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDcYfX0nYrlOEbRB7_Bld459","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52632},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","8192_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":3310846614},"totDataBytes":0} +{"@timestamp":1788112934722,"_id":"260830-MDciouvsFd5FpabRfT-fCPnt","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":1800},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159340,"ipProtocol":6,"lastPacket":1788112168337,"length":8997,"network":{"bytes":194,"community_id":"1:Ai/p0Ku6+ng7ouleypvV2n2w0SY=","packets":3},"node":"spark-afae","packetPos":[-82029,104578,2085,2612],"packetRange":{"gte":1788112159340,"lte":1788112168337},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDciouvsFd5FpabRfT-fCPnt","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52630},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","8192_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":1537337139},"totDataBytes":0} +{"@timestamp":1788112934722,"_id":"260830-MDeo7sWw7PVKN681GITQiHKS","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":6000},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159338,"ipProtocol":6,"lastPacket":1788112168332,"length":8994,"network":{"bytes":194,"community_id":"1:UxUlq/QSeEcZSb1FGTl27P/NlPk=","packets":3},"node":"spark-afae","packetPos":[-82029,104496,1757,2632],"packetRange":{"gte":1788112159338,"lte":1788112168332},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDeo7sWw7PVKN681GITQiHKS","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52644},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","8192_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":2079742221},"totDataBytes":0} +{"@timestamp":1788112934719,"_id":"260830-MDf_gXazIBJAcYeycEmG9C2y","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":1500},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159335,"ipProtocol":6,"lastPacket":1788112168336,"length":9001,"network":{"bytes":194,"community_id":"1:f/+/r0SXYpX7dy6jrOdJru5oQl0=","packets":3},"node":"spark-afae","packetPos":[-82029,104168,2331,2620],"packetRange":{"gte":1788112159335,"lte":1788112168336},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDf_gXazIBJAcYeycEmG9C2y","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52628},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","8192_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":3109523257},"totDataBytes":0} +{"@timestamp":1788112934719,"_id":"260830-MDeJvnWVZJhOdoXlVrBWZeT0","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":1501},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159335,"ipProtocol":6,"lastPacket":1788112168336,"length":9001,"network":{"bytes":194,"community_id":"1:gqdL273BIzaUrKxcbbAjOsrZGRo=","packets":3},"node":"spark-afae","packetPos":[-82029,104250,2331,2616],"packetRange":{"gte":1788112159335,"lte":1788112168336},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDeJvnWVZJhOdoXlVrBWZeT0","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52629},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","8192_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":1012425512},"totDataBytes":0} +{"@timestamp":1788112934719,"_id":"260830-MDern2on-4dFFZPJOOb9utM8","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5005},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159335,"ipProtocol":6,"lastPacket":1788112168335,"length":9000,"network":{"bytes":194,"community_id":"1:UM5k6VpBGSXfRFzp8XDvAD/rvg4=","packets":3},"node":"spark-afae","packetPos":[-82029,104414,2003,2624],"packetRange":{"gte":1788112159335,"lte":1788112168335},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDern2on-4dFFZPJOOb9utM8","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52638},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","8192_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":3796912439},"totDataBytes":0} +{"@timestamp":1788112934722,"_id":"260830-MDeqrUQ-EEpM35Ixy2OER7NU","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":3333},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159335,"ipProtocol":6,"lastPacket":1788112168332,"length":8997,"network":{"bytes":194,"community_id":"1:meR6nJxUBETtfoby7B5aiLfl0Ow=","packets":3},"node":"spark-afae","packetPos":[-82029,104332,1839,2636],"packetRange":{"gte":1788112159335,"lte":1788112168332},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDeqrUQ-EEpM35Ixy2OER7NU","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52634},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[117],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","65535_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":1132740616},"totDataBytes":0} +{"@timestamp":1788112934722,"_id":"260830-MDdAg7Nc4BRPSKGfLBFQSGlC","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":1433},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159333,"ipProtocol":6,"lastPacket":1788112168329,"length":8996,"network":{"bytes":194,"community_id":"1:KVjSxgSYjXPjJeRT6xXTHrX5qQA=","packets":3},"node":"spark-afae","packetPos":[-82029,104086,1839,2648],"packetRange":{"gte":1788112159333,"lte":1788112168329},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDdAg7Nc4BRPSKGfLBFQSGlC","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52625},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","65535_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":2580259990},"totDataBytes":0} +{"@timestamp":1788112934722,"_id":"260830-MDduVNtM0qpEa64UxnLCc-K7","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":4433},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159332,"ipProtocol":6,"lastPacket":1788112168333,"length":9001,"network":{"bytes":194,"community_id":"1:dX5UCGqjDowHlkSm2cwgg0y15hg=","packets":3},"node":"spark-afae","packetPos":[-82029,104004,2331,2628],"packetRange":{"gte":1788112159332,"lte":1788112168333},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDduVNtM0qpEa64UxnLCc-K7","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52635},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","8192_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":1101358277},"totDataBytes":0} +{"@timestamp":1788112934722,"_id":"260830-MDdf-UA2rWxN0b9PMNA40fM4","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5678},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159331,"ipProtocol":6,"lastPacket":1788112168330,"length":8999,"network":{"bytes":194,"community_id":"1:aCR1SBHf6WcVbsUx/dlXBQJJ2gg=","packets":3},"node":"spark-afae","packetPos":[-82029,103922,2085,2644],"packetRange":{"gte":1788112159331,"lte":1788112168330},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDdf-UA2rWxN0b9PMNA40fM4","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52643},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","8192_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":3671712436},"totDataBytes":0} +{"@timestamp":1788112934722,"_id":"260830-MDeR55WiXW5DgJu907NpucyU","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":1434},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159330,"ipProtocol":6,"lastPacket":1788112168327,"length":8997,"network":{"bytes":194,"community_id":"1:WDbjdCgYLceFVP+1s4m0DcJkSnA=","packets":3},"node":"spark-afae","packetPos":[-82029,103840,2003,2652],"packetRange":{"gte":1788112159330,"lte":1788112168327},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDeR55WiXW5DgJu907NpucyU","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52626},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","8192_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":2210081724},"totDataBytes":0} +{"@timestamp":1788112934722,"_id":"260830-MDd8uqH9cn1C66WZriNLrxCy","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":12345},"dstRIR":"ARIN","ethertype":2048,"fileId":[82029],"firstPacket":1788112159329,"ipProtocol":6,"lastPacket":1788112168331,"length":9002,"network":{"bytes":194,"community_id":"1:d1Ra6KYymuRQV8eXRY8++EBPsKE=","packets":3},"node":"spark-afae","packetPos":[-82029,103758,2331,2640],"packetRange":{"gte":1788112159329,"lte":1788112168331},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-MDd8uqH9cn1C66WZriNLrxCy","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":194,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":3,"port":52624},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8","8192_2-1-1-4_1460_00"],"ja4tCnt":2},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":0,"urg":0},"tcpseq":{"src":949184783},"totDataBytes":0} +{"@timestamp":1788006152283,"_id":"260829-wby7O_-D0LlMAbmYVg3OQOUq","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005478284,"ipProtocol":6,"lastPacket":1788005481284,"length":3000,"network":{"bytes":132,"community_id":"1:xYM8wpoXdQTsLZZZ8b1Q8yRpYik=","packets":2},"node":"spark-afae","packetPos":[-81316,325659,448],"packetRange":{"gte":1788005478284,"lte":1788005481284},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":19645},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2264969605},"totDataBytes":0} +{"@timestamp":1788006152281,"_id":"260829-wbxArDzDDR5F3a_APpy4Z3kq","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005471291,"ipProtocol":6,"lastPacket":1788005474291,"length":3000,"network":{"bytes":132,"community_id":"1:qLKhKpVWvNheeDoNzRGucLBBaE8=","packets":2},"node":"spark-afae","packetPos":[-81316,325045,442],"packetRange":{"gte":1788005471291,"lte":1788005474291},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":25807},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1543411983},"totDataBytes":0} +{"@timestamp":1788006152279,"_id":"260829-wbyeR6h8f3VAwJH4fJQjFL1C","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005464283,"ipProtocol":6,"lastPacket":1788005467280,"length":2997,"network":{"bytes":132,"community_id":"1:qsciZ8YXgCc+Ii5veF5AAr/dBWk=","packets":2},"node":"spark-afae","packetPos":[-81316,323673,334],"packetRange":{"gte":1788005464283,"lte":1788005467280},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":2931},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":902270654},"totDataBytes":0} +{"@timestamp":1788006152283,"_id":"260829-wbzCBq-pIHtAfpDp3hYdWTFn","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005457282,"ipProtocol":6,"lastPacket":1788005460288,"length":3006,"network":{"bytes":132,"community_id":"1:X81R841BVxDo3dacXeCks3B61rc=","packets":2},"node":"spark-afae","packetPos":[-81316,322389,532],"packetRange":{"gte":1788005457282,"lte":1788005460288},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":54748},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":980989782},"totDataBytes":0} +{"@timestamp":1788006152284,"_id":"260829-wbwzT_tkAQBLWZbjPWY7Nfg8","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005450287,"ipProtocol":6,"lastPacket":1788005453292,"length":3005,"network":{"bytes":132,"community_id":"1:aaOdqjqLaZETuZ/O382V4yTjA2U=","packets":2},"node":"spark-afae","packetPos":[-81316,320956,1017],"packetRange":{"gte":1788005450287,"lte":1788005453292},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":44875},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":208868613},"totDataBytes":0} +{"@timestamp":1788006152280,"_id":"260829-wbxEJprjw71HgbR4EOftZwEe","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005448720,"ipProtocol":6,"lastPacket":1788005451720,"length":3000,"network":{"bytes":132,"community_id":"1:BiSgMwpl93RJjkE+EfUrNJNMRkk=","packets":2},"node":"spark-afae","packetPos":[-81316,320514,982],"packetRange":{"gte":1788005448720,"lte":1788005451720},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":31207},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":414791664},"totDataBytes":0} +{"@timestamp":1788006152281,"_id":"260829-wbzWeg0OC5FMu78_USf7o1ly","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005443282,"ipProtocol":6,"lastPacket":1788005446282,"length":3000,"network":{"bytes":132,"community_id":"1:QhTVytbHkUimH3NheqP6YYtapSo=","packets":2},"node":"spark-afae","packetPos":[-81316,311761,600],"packetRange":{"gte":1788005443282,"lte":1788005446282},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":54692},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2574055230},"totDataBytes":0} +{"@timestamp":1788006152280,"_id":"260829-wbwjMoBMwBtB8b3E-JBF92vv","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005441718,"ipProtocol":6,"lastPacket":1788005444718,"length":3000,"network":{"bytes":132,"community_id":"1:aUditjwwmUIWqF8Tf3oaHIhaT0g=","packets":2},"node":"spark-afae","packetPos":[-81316,311679,326],"packetRange":{"gte":1788005441718,"lte":1788005444718},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":28205},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2101126976},"totDataBytes":0} +{"@timestamp":1788006152280,"_id":"260829-wbwrEL3KE2FPOLUND_oyOJqV","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005436291,"ipProtocol":6,"lastPacket":1788005439288,"length":2997,"network":{"bytes":132,"community_id":"1:6Pi+9wmX7sNvVYjcVaDB5YB9E5o=","packets":2},"node":"spark-afae","packetPos":[-81316,305089,896],"packetRange":{"gte":1788005436291,"lte":1788005439288},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":29091},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3202895285},"totDataBytes":0} +{"@timestamp":1788006152280,"_id":"260829-wbzMY6A--9tMMrsRG3K9K9rc","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005434713,"ipProtocol":6,"lastPacket":1788005437717,"length":3004,"network":{"bytes":132,"community_id":"1:86meJU8fo2BpfvPHJyKNO55m3Io=","packets":2},"node":"spark-afae","packetPos":[-81316,300048,5557],"packetRange":{"gte":1788005434713,"lte":1788005437717},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":9647},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3260619754},"totDataBytes":0} +{"@timestamp":1788006152283,"_id":"260829-wbxJPPYP2OdIMqCfuDnpygE0","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005429291,"ipProtocol":6,"lastPacket":1788005432297,"length":3006,"network":{"bytes":132,"community_id":"1:gQreJljiy4fGn4cYrMMP68GWKok=","packets":2},"node":"spark-afae","packetPos":[-81316,298362,990],"packetRange":{"gte":1788005429291,"lte":1788005432297},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":45244},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2130577374},"totDataBytes":0} +{"@timestamp":1788006152280,"_id":"260829-wbzZGeLVxMJFTr0ee1b-JJq9","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005427708,"ipProtocol":6,"lastPacket":1788005430708,"length":3000,"network":{"bytes":132,"community_id":"1:oHolpRs3wYvXKKrbYAOWfk4kXEE=","packets":2},"node":"spark-afae","packetPos":[-81316,297679,1125],"packetRange":{"gte":1788005427708,"lte":1788005430708},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":27052},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1370512258},"totDataBytes":0} +{"@timestamp":1788006152283,"_id":"260829-wbyhBOmiGIZAL4MWruRQrqPL","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005422281,"ipProtocol":6,"lastPacket":1788005425288,"length":3007,"network":{"bytes":132,"community_id":"1:j/Yyh8wol16INHj8VBrbbmLKrYk=","packets":2},"node":"spark-afae","packetPos":[-81316,296367,690],"packetRange":{"gte":1788005422281,"lte":1788005425288},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":52933},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":238384640},"totDataBytes":0} +{"@timestamp":1788006152279,"_id":"260829-wbziY4pTF-JMA4LfPwzOiY3v","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005420708,"ipProtocol":6,"lastPacket":1788005423708,"length":3000,"network":{"bytes":132,"community_id":"1:rUVSfXWU4un9lLvPXUDMJM9VZzQ=","packets":2},"node":"spark-afae","packetPos":[-81316,295885,834],"packetRange":{"gte":1788005420708,"lte":1788005423708},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":30991},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1085192892},"totDataBytes":0} +{"@timestamp":1788006152279,"_id":"260829-wbyOPs1JeqZJGY4O9AFI3gHl","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005415285,"ipProtocol":6,"lastPacket":1788005418285,"length":3000,"network":{"bytes":132,"community_id":"1:kwMjbHrvedXq4qhmRMN82P48KBs=","packets":2},"node":"spark-afae","packetPos":[-81316,295239,368],"packetRange":{"gte":1788005415285,"lte":1788005418285},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":35805},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":686292296},"totDataBytes":0} +{"@timestamp":1788006152279,"_id":"260829-wbyhwWtxF8JBO5WiYsfvLdCx","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005413719,"ipProtocol":6,"lastPacket":1788005416715,"length":2996,"network":{"bytes":132,"community_id":"1:AWH501FGQyrhVLT1PkzHEfC7T78=","packets":2},"node":"spark-afae","packetPos":[-81316,294961,564],"packetRange":{"gte":1788005413719,"lte":1788005416715},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":21603},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1257081650},"totDataBytes":0} +{"@timestamp":1788006152280,"_id":"260829-wbyQe2W-ZgVKd6baqXt61_fR","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005408286,"ipProtocol":6,"lastPacket":1788005411289,"length":3003,"network":{"bytes":132,"community_id":"1:Emo+eq2bsPuEe+jpHMvcXKRmB/0=","packets":2},"node":"spark-afae","packetPos":[-81316,294643,164],"packetRange":{"gte":1788005408286,"lte":1788005411289},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":5230},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2774556211},"totDataBytes":0} +{"@timestamp":1788006152279,"_id":"260829-wbw7gVzKhHpPSL0YsKgAzzp2","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005406707,"ipProtocol":6,"lastPacket":1788005409712,"length":3005,"network":{"bytes":132,"community_id":"1:ve75C77cbsZ2fBVHTvoJa0ZMWbM=","packets":2},"node":"spark-afae","packetPos":[-81316,294357,368],"packetRange":{"gte":1788005406707,"lte":1788005409712},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":39808},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2282683438},"totDataBytes":0} +{"@timestamp":1788006152284,"_id":"260829-wbxDxunRAAFF0YXiAbBL7oAY","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005401285,"ipProtocol":6,"lastPacket":1788005404285,"length":3000,"network":{"bytes":132,"community_id":"1:dFUk9wgRD9GeMYnBIrzUfxpIL7E=","packets":2},"node":"spark-afae","packetPos":[-81316,293327,516],"packetRange":{"gte":1788005401285,"lte":1788005404285},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":37929},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1542265539},"totDataBytes":0} +{"@timestamp":1788006152280,"_id":"260829-wbzBgoLFaDJJK5_rRJe12pDK","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005399708,"ipProtocol":6,"lastPacket":1788005402706,"length":2998,"network":{"bytes":132,"community_id":"1:d2C5lW01dTiR0d4SrXkHeIQSmrI=","packets":2},"node":"spark-afae","packetPos":[-81316,292903,596],"packetRange":{"gte":1788005399708,"lte":1788005402706},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":20171},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2046569135},"totDataBytes":0} +{"@timestamp":1788006152283,"_id":"260829-wbyfensCmPdKVpssyZxlQB62","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005394288,"ipProtocol":6,"lastPacket":1788005397287,"length":2999,"network":{"bytes":132,"community_id":"1:1kP6AigdxSr2cMYkOYezcbOuhw0=","packets":2},"node":"spark-afae","packetPos":[-81316,292314,164],"packetRange":{"gte":1788005394288,"lte":1788005397287},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":49200},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":784407058},"totDataBytes":0} +{"@timestamp":1788006152280,"_id":"260829-wbxAZJIZhCRBIr47bPw01l5s","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005392725,"ipProtocol":6,"lastPacket":1788005395726,"length":3001,"network":{"bytes":132,"community_id":"1:DipOp0S7VuZ+GuueGhsdGfCIjcw=","packets":2},"node":"spark-afae","packetPos":[-81316,291898,498],"packetRange":{"gte":1788005392725,"lte":1788005395726},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":29396},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2713014452},"totDataBytes":0} +{"@timestamp":1788006152281,"_id":"260829-wbzn3oXGICtNpr-QJeSB31oZ","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005387279,"ipProtocol":6,"lastPacket":1788005390282,"length":3003,"network":{"bytes":132,"community_id":"1:AOQs4fhHJi2A688rQH1tKPgyYHY=","packets":2},"node":"spark-afae","packetPos":[-81316,290095,852],"packetRange":{"gte":1788005387279,"lte":1788005390282},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":46878},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3464068200},"totDataBytes":0} +{"@timestamp":1788006152281,"_id":"260829-wbzr994XHiBBn5hsynUu1KIS","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005385725,"ipProtocol":6,"lastPacket":1788005388732,"length":3007,"network":{"bytes":132,"community_id":"1:7+5Se+d70XiGws7F61lKo4gErew=","packets":2},"node":"spark-afae","packetPos":[-81316,282834,7589],"packetRange":{"gte":1788005385725,"lte":1788005388732},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":40710},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2138971756},"totDataBytes":0} +{"@timestamp":1788006152283,"_id":"260829-wbyfU1uAKa5ANaFCNyARxlM-","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005380285,"ipProtocol":6,"lastPacket":1788005383288,"length":3003,"network":{"bytes":132,"community_id":"1:1yi9CXWDlLhUQjP/1zIxeL3lbMQ=","packets":2},"node":"spark-afae","packetPos":[-81316,281263,696],"packetRange":{"gte":1788005380285,"lte":1788005383288},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":27051},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":786083214},"totDataBytes":0} +{"@timestamp":1788006152281,"_id":"260829-wbyN-_iDa_pNDoAVQ36yHAR7","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005378705,"ipProtocol":6,"lastPacket":1788005381706,"length":3001,"network":{"bytes":132,"community_id":"1:YsXNNXEHpdqy070HmNLU2b7qWFA=","packets":2},"node":"spark-afae","packetPos":[-81316,280719,806],"packetRange":{"gte":1788005378705,"lte":1788005381706},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":19838},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":913908123},"totDataBytes":0} +{"@timestamp":1788006152279,"_id":"260829-wbzYRBg7khZP-7SyWsAeksDB","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005373282,"ipProtocol":6,"lastPacket":1788005376282,"length":3000,"network":{"bytes":132,"community_id":"1:x48LuDEl6NI5pfx/AhJ7y7ikZt0=","packets":2},"node":"spark-afae","packetPos":[-81316,273698,6595],"packetRange":{"gte":1788005373282,"lte":1788005376282},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":44203},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":850263268},"totDataBytes":0} +{"@timestamp":1788006152280,"_id":"260829-wbzj1aC501NB35um1UTfyyHB","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005371708,"ipProtocol":6,"lastPacket":1788005374708,"length":3000,"network":{"bytes":132,"community_id":"1:trTzA+UHfNsGTtx3Vq2WZ5UztNY=","packets":2},"node":"spark-afae","packetPos":[-81316,273142,1170],"packetRange":{"gte":1788005371708,"lte":1788005374708},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":38839},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2877244906},"totDataBytes":0} +{"@timestamp":1788006152284,"_id":"260829-wbzyUHx5OlJMsJp-emkgXOwr","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005366291,"ipProtocol":6,"lastPacket":1788005369291,"length":3000,"network":{"bytes":132,"community_id":"1:M9ygShYo9VkK1VMdS4AJ+8ydzF0=","packets":2},"node":"spark-afae","packetPos":[-81316,271580,596],"packetRange":{"gte":1788005366291,"lte":1788005369291},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":35504},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3932485593},"totDataBytes":0} +{"@timestamp":1788006152282,"_id":"260829-wbzm5pfZWXpBDoV_GnG0WLE4","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005364717,"ipProtocol":6,"lastPacket":1788005367719,"length":3002,"network":{"bytes":132,"community_id":"1:MlAxOq4RYljMDoSkWocXN+yanBU=","packets":2},"node":"spark-afae","packetPos":[-81316,271228,506],"packetRange":{"gte":1788005364717,"lte":1788005367719},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":29152},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":235223978},"totDataBytes":0} +{"@timestamp":1788006152284,"_id":"260829-wbwVzI5DWN1MtLJYvAOOlTAP","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005359273,"ipProtocol":6,"lastPacket":1788005362269,"length":2996,"network":{"bytes":132,"community_id":"1:DlGkrGWHU6Conh3/iJTcslIPvPY=","packets":2},"node":"spark-afae","packetPos":[-81316,269358,1080],"packetRange":{"gte":1788005359273,"lte":1788005362269},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":59563},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3418561348},"totDataBytes":0} +{"@timestamp":1788006152283,"_id":"260829-wby7GanQ1gtD77Bj6zR-vkMf","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005357719,"ipProtocol":6,"lastPacket":1788005360719,"length":3000,"network":{"bytes":132,"community_id":"1:93pDAD+qdGmCU/cmdWd983g7kTo=","packets":2},"node":"spark-afae","packetPos":[-81316,269198,806],"packetRange":{"gte":1788005357719,"lte":1788005360719},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":53462},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2233077227},"totDataBytes":0} +{"@timestamp":1788006152279,"_id":"260829-wbzttJ-udtpJCqPdF0wADB4M","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005352286,"ipProtocol":6,"lastPacket":1788005355278,"length":2992,"network":{"bytes":132,"community_id":"1:s9uw9/+rpUWspTXsgKmVEhhUPYE=","packets":2},"node":"spark-afae","packetPos":[-81316,267962,884],"packetRange":{"gte":1788005352286,"lte":1788005355278},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":16737},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":902121588},"totDataBytes":0} +{"@timestamp":1788006152284,"_id":"260829-wbwm2OfepCxBbLlnLvdYcFNx","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005350719,"ipProtocol":6,"lastPacket":1788005353718,"length":2999,"network":{"bytes":132,"community_id":"1:+3G8NiiSE8oO6qWF34Hl1fRlexY=","packets":2},"node":"spark-afae","packetPos":[-81316,267538,1136],"packetRange":{"gte":1788005350719,"lte":1788005353718},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":53076},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2130920672},"totDataBytes":0} +{"@timestamp":1788006152279,"_id":"260829-wbzYYYAlE_VKJKldn96pzSU_","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005345285,"ipProtocol":6,"lastPacket":1788005348280,"length":2995,"network":{"bytes":132,"community_id":"1:ArZy7gU1KcAvuGN8D/YQmeSfBvw=","packets":2},"node":"spark-afae","packetPos":[-81316,265604,794],"packetRange":{"gte":1788005345285,"lte":1788005348280},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":49405},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2571752732},"totDataBytes":0} +{"@timestamp":1788006152281,"_id":"260829-wbwIBMX_St5EeIBs15inSBr4","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005343718,"ipProtocol":6,"lastPacket":1788005346712,"length":2994,"network":{"bytes":132,"community_id":"1:85tHpu3IFQGC7gENENhmBbwwDMA=","packets":2},"node":"spark-afae","packetPos":[-81316,264828,1038],"packetRange":{"gte":1788005343718,"lte":1788005346712},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":35843},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":2858951524},"totDataBytes":0} +{"@timestamp":1788006152280,"_id":"260829-wbxg9YxIR1lOY6fGwBg2oEsk","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005338288,"ipProtocol":6,"lastPacket":1788005341283,"length":2995,"network":{"bytes":132,"community_id":"1:3+H51WHtzcydFe1cNb6yKqrpNGg=","packets":2},"node":"spark-afae","packetPos":[-81316,263868,512],"packetRange":{"gte":1788005338288,"lte":1788005341283},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":37019},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[118],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3473581366},"totDataBytes":0} +{"@timestamp":1788006152280,"_id":"260829-wbzREKwCxxBLOraTCFrcewHg","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005336717,"ipProtocol":6,"lastPacket":1788005339713,"length":2996,"network":{"bytes":132,"community_id":"1:fWiDNK0EWtq0Kpt4t9IYW5Vq3Bo=","packets":2},"node":"spark-afae","packetPos":[-81316,263614,516],"packetRange":{"gte":1788005336717,"lte":1788005339713},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":12718},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":4092884829},"totDataBytes":0} +{"@timestamp":1788006152280,"_id":"260829-wbyn35A4YIVFbLlxcs-rIVZ0","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005331275,"ipProtocol":6,"lastPacket":1788005334268,"length":2993,"network":{"bytes":132,"community_id":"1:aCgA74/Y15S15VCtbmyrdIrWyc8=","packets":2},"node":"spark-afae","packetPos":[-81316,261948,872],"packetRange":{"gte":1788005331275,"lte":1788005334268},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":13665},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":155144595},"totDataBytes":0} +{"@timestamp":1788006152281,"_id":"260829-wbzWWE0zFUBKs5CeK3AM1pHO","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005329706,"ipProtocol":6,"lastPacket":1788005332698,"length":2992,"network":{"bytes":132,"community_id":"1:uu6wWiNP3bhPCsA557pLxCg44/U=","packets":2},"node":"spark-afae","packetPos":[-81316,260387,2093],"packetRange":{"gte":1788005329706,"lte":1788005332698},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":51015},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1977522491},"totDataBytes":0} +{"@timestamp":1788006152279,"_id":"260829-wbwy19SWeLRLQY3glNd_40pt","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005324283,"ipProtocol":6,"lastPacket":1788005327281,"length":2998,"network":{"bytes":132,"community_id":"1:bEkU5cLeVSg9pA2VdxW91Qe4kDQ=","packets":2},"node":"spark-afae","packetPos":[-81316,247328,8081],"packetRange":{"gte":1788005324283,"lte":1788005327281},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":42706},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3273353994},"totDataBytes":0} +{"@timestamp":1788006152279,"_id":"260829-wby3U9n_VDhDFIpbynIlSVMR","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005322712,"ipProtocol":6,"lastPacket":1788005325705,"length":2993,"network":{"bytes":132,"community_id":"1:T4Aw3+tzcFncJ1RPQvBvp2CIXgI=","packets":2},"node":"spark-afae","packetPos":[-81316,247164,426],"packetRange":{"gte":1788005322712,"lte":1788005325705},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":26485},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":1399368929},"totDataBytes":0} +{"@timestamp":1788006152281,"_id":"260829-wbw_mib9KdFGWJHd0MVJhlFN","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005317280,"ipProtocol":6,"lastPacket":1788005320278,"length":2998,"network":{"bytes":132,"community_id":"1:ukNnhyNRI7Y+qdEeklmX3EryT84=","packets":2},"node":"spark-afae","packetPos":[-81316,246198,704],"packetRange":{"gte":1788005317280,"lte":1788005320278},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":41989},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3740669437},"totDataBytes":0} +{"@timestamp":1788006152279,"_id":"260829-wbzlkthsrchGKa5c6zL1e2HP","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005315701,"ipProtocol":6,"lastPacket":1788005318698,"length":2997,"network":{"bytes":132,"community_id":"1:mBZMMpYwfMwZx1Pzgs94Ui8LRWw=","packets":2},"node":"spark-afae","packetPos":[-81316,245846,794],"packetRange":{"gte":1788005315701,"lte":1788005318698},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":23777},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":555141042},"totDataBytes":0} +{"@timestamp":1788006152282,"_id":"260829-wbwMFwSi6SxGFpRNl1aKYMPm","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005310285,"ipProtocol":6,"lastPacket":1788005313283,"length":2998,"network":{"bytes":132,"community_id":"1:9x8cOXWWaVBXiC8Se6GD9VWKw3o=","packets":2},"node":"spark-afae","packetPos":[-81316,240223,5459],"packetRange":{"gte":1788005310285,"lte":1788005313283},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":2,"port":15345},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[119],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3204280097},"totDataBytes":0} +{"@timestamp":1788006152279,"_id":"260829-wbxmklEhVidPwrBFLpSSALZs","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005308700,"ipProtocol":6,"lastPacket":1788005311699,"length":2999,"network":{"bytes":132,"community_id":"1:LCaFeqTDNN0N9Llu43i2bRhHcDs=","packets":2},"node":"spark-afae","packetPos":[-81316,240051,5165],"packetRange":{"gte":1788005308700,"lte":1788005311699},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":1422},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3728919024},"totDataBytes":0} +{"@timestamp":1788006152280,"_id":"260829-wbzriv9iTWhEdKUIy2R5T5oP","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005303271,"ipProtocol":6,"lastPacket":1788005306273,"length":3002,"network":{"bytes":132,"community_id":"1:ZWtCjmUIOcgtZNA9vnKCuiptJ/c=","packets":2},"node":"spark-afae","packetPos":[-81316,239601,164],"packetRange":{"gte":1788005303271,"lte":1788005306273},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":6783},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3421019936},"totDataBytes":0} +{"@timestamp":1788006152279,"_id":"260829-wbzW9n0n4TRPnpW38f5ZVPXq","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":2222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005301699,"ipProtocol":6,"lastPacket":1788005304698,"length":2999,"network":{"bytes":132,"community_id":"1:vt2b2QvnbZjUJUZKYatsCfbyh6Y=","packets":2},"node":"spark-afae","packetPos":[-81316,239519,164],"packetRange":{"gte":1788005301699,"lte":1788005304698},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":36994},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":4210692492},"totDataBytes":0} +{"@timestamp":1788006152279,"_id":"260829-wbzq6GH_8UJO4aeh4Ci46Xem","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Proton66 OOO"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Proton66 OOO"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":22222},"dstRIR":"ARIN","ethertype":2048,"fileId":[81316],"firstPacket":1788005296269,"ipProtocol":6,"lastPacket":1788005299273,"length":3004,"network":{"bytes":132,"community_id":"1:d7wN8ziClHFkCL0PZxsFW7WSbTY=","packets":2},"node":"spark-afae","packetPos":[-81316,239069,368],"packetRange":{"gte":1788005296269,"lte":1788005299273},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS198953 Proton66 OOO","number":198953,"organization":{"name":"Proton66 OOO"}},"bytes":132,"geo":{"country_iso_code":"RU"},"ip":"176.120.22.61","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":2,"port":38097},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[121],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["8192_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":2,"dstZero":0,"ece":2,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":2,"syn-ack":0,"urg":0},"tcpseq":{"src":3364488069},"totDataBytes":0} diff --git a/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113640_b7c6793a.ndjson b/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113640_b7c6793a.ndjson new file mode 100644 index 0000000..b0510e2 --- /dev/null +++ b/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113640_b7c6793a.ndjson @@ -0,0 +1,100 @@ +{"@timestamp":1788092079945,"_id":"260830-rEL6jP3j04NAjKOk2QvKznha","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81891],"firstPacket":1788090988281,"ipProtocol":6,"lastPacket":1788090988434,"length":153,"network":{"bytes":202,"community_id":"1:C25nZuxndBoj2eGvperlrFJFu5o=","packets":3},"node":"spark-afae","packetPos":[-81891,2025237,90,1624],"packetRange":{"gte":1788090988281,"lte":1788090988434},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":26528},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2217684389},"totDataBytes":0} +{"@timestamp":1788089969724,"_id":"260830--jO-xycDotdLLIm-FCiqZtbJ","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81876],"firstPacket":1788089260983,"ipProtocol":6,"lastPacket":1788089261137,"length":154,"network":{"bytes":202,"community_id":"1:BsPKwV2uy2oaC9Z5yFvGA3c5Tz0=","packets":3},"node":"spark-afae","packetPos":[-81876,2521932,90,460],"packetRange":{"gte":1788089260983,"lte":1788089261137},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":60876},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["frantech-ts","honeypot","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1986661145},"totDataBytes":0} +{"@timestamp":1788088464484,"_id":"260830-88RhpNJqctBAtY8RDR8_0_sz","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81866],"firstPacket":1788087533755,"ipProtocol":6,"lastPacket":1788087533906,"length":151,"network":{"bytes":202,"community_id":"1:JhCvk3bc1XTjzCKAfsEwYmbYVeU=","packets":3},"node":"spark-afae","packetPos":[-81866,13605763,90,5490],"packetRange":{"gte":1788087533755,"lte":1788087533906},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":60292},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":825899392},"totDataBytes":0} +{"@timestamp":1788086367135,"_id":"260830-djPulWmcrjZNM55gBgz5i637","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81852],"firstPacket":1788085806096,"ipProtocol":6,"lastPacket":1788085806248,"length":152,"network":{"bytes":202,"community_id":"1:BnJYWEAbEJMh57PREx8sHZBdCO0=","packets":3},"node":"spark-afae","packetPos":[-81852,8030353,90,1334],"packetRange":{"gte":1788085806096,"lte":1788085806248},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":52140},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["sensor:frantech-ts","frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":334869575},"totDataBytes":0} +{"@timestamp":1788084534164,"_id":"260830-NDP5zPmQh2lBSJHUUUZ9EMoM","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81840],"firstPacket":1788084078688,"ipProtocol":6,"lastPacket":1788084078841,"length":153,"network":{"bytes":202,"community_id":"1:x4offKgYu6zj5KCZbPsOMLw+pBk=","packets":3},"node":"spark-afae","packetPos":[-81840,3784244,90,1202],"packetRange":{"gte":1788084078688,"lte":1788084078841},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":2456},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["honeypot","sensor:frantech-ts","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2051460165},"totDataBytes":0} +{"@timestamp":1788083040841,"_id":"260830-_TJPLsm2RzVDeLTSpQO9Rp0n","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81829],"firstPacket":1788082351436,"ipProtocol":6,"lastPacket":1788082351588,"length":152,"network":{"bytes":202,"community_id":"1:h6TGd75CCI9GXZM6DJFXUi4Rj00=","packets":3},"node":"spark-afae","packetPos":[-81829,6470321,90,376],"packetRange":{"gte":1788082351436,"lte":1788082351588},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":1194},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["sensor:frantech-ts","frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":690467344},"totDataBytes":0} +{"@timestamp":1788081232011,"_id":"260830-RcToI5dEiLpJ15r1-dC75X0g","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81818],"firstPacket":1788080624370,"ipProtocol":6,"lastPacket":1788080624524,"length":154,"network":{"bytes":202,"community_id":"1:qBTgwmO8HyeSUHw4eN0JdVIx86k=","packets":3},"node":"spark-afae","packetPos":[-81818,14870285,90,753],"packetRange":{"gte":1788080624370,"lte":1788080624524},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":48516},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["frantech-ts","honeypot","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1184018540},"totDataBytes":0} +{"@timestamp":1788079121203,"_id":"260830-eTISM0bs5j9PubJ6IsXIwzz1","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81804],"firstPacket":1788078896878,"ipProtocol":6,"lastPacket":1788078897030,"length":152,"network":{"bytes":202,"community_id":"1:2+XbnlJr2rAPyaAs3LLgj2CSGE4=","packets":3},"node":"spark-afae","packetPos":[-81804,10615861,90,4253],"packetRange":{"gte":1788078896878,"lte":1788078897030},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":26126},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["sensor:frantech-ts","frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":4174125225},"totDataBytes":0} +{"@timestamp":1788078520434,"_id":"260830-7cMSk7qhTz9AGJyyzpWRWFO4","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81800],"firstPacket":1788077169245,"ipProtocol":6,"lastPacket":1788077169398,"length":153,"network":{"bytes":202,"community_id":"1:UtyPgwBFEBi98QABQsGQ1H5rs9Y=","packets":3},"node":"spark-afae","packetPos":[-81800,85387,90,0],"packetRange":{"gte":1788077169245,"lte":1788077169398},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":22020},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["frantech-ts","honeypot","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":215530772},"totDataBytes":0} +{"@timestamp":1788076418406,"_id":"260830-wcO31Aw7AmdLtasIr1OZwNT-","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81786],"firstPacket":1788075441533,"ipProtocol":6,"lastPacket":1788075441686,"length":153,"network":{"bytes":202,"community_id":"1:byKkU7BMHgTUnfHnOtH9YlL4Nvc=","packets":3},"node":"spark-afae","packetPos":[-81786,4180348,90,338],"packetRange":{"gte":1788075441533,"lte":1788075441686},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":28440},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1404748692},"totDataBytes":0} +{"@timestamp":1788074605196,"_id":"260830-1zGLPWJXGChDx4L9sUtRS3Q6","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81774],"firstPacket":1788073713681,"ipProtocol":6,"lastPacket":1788073713834,"length":153,"network":{"bytes":202,"community_id":"1:hDvYV0H1En43MlIuemew2lkFPlw=","packets":3},"node":"spark-afae","packetPos":[-81774,260525,90,0],"packetRange":{"gte":1788073713681,"lte":1788073713834},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":1766},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["honeypot","sensor:frantech-ts","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2638384215},"totDataBytes":0} +{"@timestamp":1788073102098,"_id":"260830-oTF0Wi0M4XpIaatfZR1KtBpd","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81763],"firstPacket":1788071986047,"ipProtocol":6,"lastPacket":1788071986200,"length":153,"network":{"bytes":202,"community_id":"1:+iadrOyg3KLetxMhm/Nm43QqOVY=","packets":3},"node":"spark-afae","packetPos":[-81763,6970472,90,0],"packetRange":{"gte":1788071986047,"lte":1788071986200},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":18042},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["sensor:frantech-ts","frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3916329058},"totDataBytes":0} +{"@timestamp":1788071292046,"_id":"260830-ScMm7ScUfCRHqY8z1i0lbjfY","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81752],"firstPacket":1788070258663,"ipProtocol":6,"lastPacket":1788070258816,"length":153,"network":{"bytes":202,"community_id":"1:vxxrgw0yMD8/JJRb/cz2mBUEomk=","packets":3},"node":"spark-afae","packetPos":[-81752,11757955,90,534],"packetRange":{"gte":1788070258663,"lte":1788070258816},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":42748},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":4033903414},"totDataBytes":0} +{"@timestamp":1788069178277,"_id":"260830-EsNKLXV_Hh9NfZQQ7-7bVEbQ","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81738],"firstPacket":1788068531028,"ipProtocol":6,"lastPacket":1788068531180,"length":152,"network":{"bytes":202,"community_id":"1:ZIcBsRz/JxCeTdNZ787K8G1z5HI=","packets":3},"node":"spark-afae","packetPos":[-81738,9775885,90,0],"packetRange":{"gte":1788068531028,"lte":1788068531180},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":50744},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":777090955},"totDataBytes":0} +{"@timestamp":1788067680128,"_id":"260830-8cKTfAppNqlF54Dy-DyL0kXe","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81727],"firstPacket":1788066803032,"ipProtocol":6,"lastPacket":1788066803184,"length":152,"network":{"bytes":202,"community_id":"1:W/HABediltgy0/OKXcol1kMLA1g=","packets":3},"node":"spark-afae","packetPos":[-81727,6084153,90,590],"packetRange":{"gte":1788066803032,"lte":1788066803184},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":19264},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["sensor:frantech-ts","frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3925690388},"totDataBytes":0} +{"@timestamp":1788065575448,"_id":"260830-xcIcqeD_drxMU4xAnLggQSP3","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81714],"firstPacket":1788065074416,"ipProtocol":6,"lastPacket":1788065074569,"length":153,"network":{"bytes":202,"community_id":"1:VfIvtq8tS4rhIZNYlPAPHg8Js1I=","packets":3},"node":"spark-afae","packetPos":[-81714,12121362,90,1378],"packetRange":{"gte":1788065074416,"lte":1788065074569},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":54488},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["sensor:frantech-ts","frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2142164314},"totDataBytes":0} +{"@timestamp":1788064052076,"_id":"260830-bzBc0jkpKZJIApiO1SOATGDy","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81703],"firstPacket":1788063346192,"ipProtocol":6,"lastPacket":1788063346344,"length":152,"network":{"bytes":202,"community_id":"1:WvionPxT0G+Yd+TmDq42TAaWrxo=","packets":3},"node":"spark-afae","packetPos":[-81703,12191005,90,0],"packetRange":{"gte":1788063346192,"lte":1788063346344},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":8642},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["sensor:frantech-ts","frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":599019000},"totDataBytes":0} +{"@timestamp":1788061940754,"_id":"260830-YsJ70LECCfFNyLZVJsyA99_v","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81690],"firstPacket":1788061617608,"ipProtocol":6,"lastPacket":1788061617760,"length":152,"network":{"bytes":202,"community_id":"1:GBdF3wWdfiBdC33lOqLSbcokJrw=","packets":3},"node":"spark-afae","packetPos":[-81690,10249286,90,1278],"packetRange":{"gte":1788061617608,"lte":1788061617760},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":19098},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["sensor:frantech-ts","frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2663502667},"totDataBytes":0} +{"@timestamp":1788053802757,"_id":"260830-m8FqOBtHcKlGJ6FlKfcq7SRz","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81636],"firstPacket":1788053213577,"ipProtocol":6,"lastPacket":1788053213729,"length":152,"network":{"bytes":202,"community_id":"1:Fs6h5KOYMsjQGdKNId/9sXeLKsM=","packets":3},"node":"spark-afae","packetPos":[-81636,6065419,90,242],"packetRange":{"gte":1788053213577,"lte":1788053213729},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":44020},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["honeypot","sensor:frantech-ts","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1059631486},"totDataBytes":0} +{"@timestamp":1788053203073,"_id":"260830-5S7rCS_0UhlD171o9VeCO-jv","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81631],"firstPacket":1788052195147,"ipProtocol":6,"lastPacket":1788052195298,"length":151,"network":{"bytes":202,"community_id":"1:V4mftgeEDQllbvas2Cr73Dx5NW4=","packets":3},"node":"spark-afae","packetPos":[-81631,4261197,90,160],"packetRange":{"gte":1788052195147,"lte":1788052195298},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":11474},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["sensor:frantech-ts","frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1069536578},"totDataBytes":0} +{"@timestamp":1788052289018,"_id":"260830-xC6ifYcWVjxFxYnU9ReP99w4","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81625],"firstPacket":1788051174385,"ipProtocol":6,"lastPacket":1788051174537,"length":152,"network":{"bytes":202,"community_id":"1:KLhJFMyJ55gr+Yo5kqp9LEjoduA=","packets":3},"node":"spark-afae","packetPos":[-81625,1113442,90,978],"packetRange":{"gte":1788051174385,"lte":1788051174537},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":12294},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3759827990},"totDataBytes":0} +{"@timestamp":1788051080546,"_id":"260830-0UCETV8aQCJLIZe1h7iUM23x","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81618],"firstPacket":1788050150599,"ipProtocol":6,"lastPacket":1788050150752,"length":153,"network":{"bytes":202,"community_id":"1:JL3Z5rVcvl99IDk6eXICGraibx4=","packets":3},"node":"spark-afae","packetPos":[-81618,402066,90,3103],"packetRange":{"gte":1788050150599,"lte":1788050150752},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":40186},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1045210964},"totDataBytes":0} +{"@timestamp":1788049563201,"_id":"260830-Yi6xhGWSC0JACpU3NRtix8HU","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81606],"firstPacket":1788049125164,"ipProtocol":6,"lastPacket":1788049125317,"length":153,"network":{"bytes":202,"community_id":"1:w6lDqFPN0xY66N1Yfqx3wzKFS7c=","packets":3},"node":"spark-afae","packetPos":[-81606,3628798,90,648],"packetRange":{"gte":1788049125164,"lte":1788049125317},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":5056},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":52786298},"totDataBytes":0} +{"@timestamp":1788048678211,"_id":"260830-F8HHkGg4l91GKY27hGrT_dJ5","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81601],"firstPacket":1788048098920,"ipProtocol":6,"lastPacket":1788048099072,"length":152,"network":{"bytes":202,"community_id":"1:JdAr8RoWeHpM/QK+I7v/Vetaa54=","packets":3},"node":"spark-afae","packetPos":[-81601,2972395,90,0],"packetRange":{"gte":1788048098920,"lte":1788048099072},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":1360},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1841884800},"totDataBytes":0} +{"@timestamp":1788047769116,"_id":"260829-IC4dNx37N5lKPZ3LeIadnh8-","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81595],"firstPacket":1788047070783,"ipProtocol":6,"lastPacket":1788047070936,"length":153,"network":{"bytes":202,"community_id":"1:vlVbCPWaRUPUwBxObSpySFEKCBU=","packets":3},"node":"spark-afae","packetPos":[-81595,13555544,90,340],"packetRange":{"gte":1788047070783,"lte":1788047070936},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":24854},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3441531624},"totDataBytes":0} +{"@timestamp":1788046560355,"_id":"260829-m0BdL_jtJANLoplQ64_ylyqR","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81588],"firstPacket":1788046040277,"ipProtocol":6,"lastPacket":1788046040430,"length":153,"network":{"bytes":202,"community_id":"1:d6lXf4aQK3i/MXTEyN0bnOi/MnQ=","packets":3},"node":"spark-afae","packetPos":[-81588,9530243,90,270],"packetRange":{"gte":1788046040277,"lte":1788046040430},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":8288},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["honeypot","sensor:frantech-ts","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1399286988},"totDataBytes":0} +{"@timestamp":1788045944300,"_id":"260829-6S2ioIGrVsRAzYTv-sV-eJaf","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81582],"firstPacket":1788045009772,"ipProtocol":6,"lastPacket":1788045009924,"length":152,"network":{"bytes":202,"community_id":"1:uT0PaCYWfy9fuvBGBA6MVoO8UKU=","packets":3},"node":"spark-afae","packetPos":[-81582,17263285,90,398],"packetRange":{"gte":1788045009772,"lte":1788045009924},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":42182},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3761630476},"totDataBytes":0} +{"@timestamp":1788045044402,"_id":"260829-hUDGzLBkoStPc6i0o8-E0UU6","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81577],"firstPacket":1788043977596,"ipProtocol":6,"lastPacket":1788043977748,"length":152,"network":{"bytes":202,"community_id":"1:8hMjqReKp50R/KXLAYSqb2OfAkM=","packets":3},"node":"spark-afae","packetPos":[-81577,13958254,90,0],"packetRange":{"gte":1788043977596,"lte":1788043977748},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":15344},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1446188082},"totDataBytes":0} +{"@timestamp":1788044141302,"_id":"260829-py1mdXleXztIFIkHlSfbDi-H","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81571],"firstPacket":1788042943349,"ipProtocol":6,"lastPacket":1788042943501,"length":152,"network":{"bytes":202,"community_id":"1:gs/MCXA5cMvOjJ+cNSMtF6X4q5o=","packets":3},"node":"spark-afae","packetPos":[-81571,289665,90,1296],"packetRange":{"gte":1788042943349,"lte":1788042943501},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":22132},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":739345912},"totDataBytes":0} +{"@timestamp":1788042334054,"_id":"260829-ZS176jD1Ku9NfK5APi8zz4gb","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81559],"firstPacket":1788041911147,"ipProtocol":6,"lastPacket":1788041911300,"length":153,"network":{"bytes":202,"community_id":"1:FxGVKTPFxciBDKA2beZPAISOqSY=","packets":3},"node":"spark-afae","packetPos":[-81559,15121354,90,300],"packetRange":{"gte":1788041911147,"lte":1788041911300},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":29248},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2128892515},"totDataBytes":0} +{"@timestamp":1788041432970,"_id":"260829-RC3bnf__DkRL3aYXx1zs4ccV","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81553],"firstPacket":1788040878730,"ipProtocol":6,"lastPacket":1788040878882,"length":152,"network":{"bytes":202,"community_id":"1:W8lD4VXwVMK9z9F0HRqJW98nTEk=","packets":3},"node":"spark-afae","packetPos":[-81553,12616576,90,1938],"packetRange":{"gte":1788040878730,"lte":1788040878882},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":34554},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2250673041},"totDataBytes":0} +{"@timestamp":1788040532223,"_id":"260829-RcDozSabHF1Kf6dPMcTd2ibp","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81546],"firstPacket":1788039846333,"ipProtocol":6,"lastPacket":1788039846485,"length":152,"network":{"bytes":202,"community_id":"1:SmQ6ZrseVzfEpp0lI/RNoO55S00=","packets":3},"node":"spark-afae","packetPos":[-81546,8465058,90,1016],"packetRange":{"gte":1788039846333,"lte":1788039846485},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":49128},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3392562308},"totDataBytes":0} +{"@timestamp":1788039621870,"_id":"260829-Ay0qnyNBULNO8K7zUO2hLmf2","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81540],"firstPacket":1788038812570,"ipProtocol":6,"lastPacket":1788038812722,"length":152,"network":{"bytes":202,"community_id":"1:wnc9mAOFnslnLRB3RM5SlHTfTos=","packets":3},"node":"spark-afae","packetPos":[-81540,5784489,90,0],"packetRange":{"gte":1788038812570,"lte":1788038812722},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":21290},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["honeypot","sensor:frantech-ts","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2509515529},"totDataBytes":0} +{"@timestamp":1788038696048,"_id":"260829-4izuicNqyBlPlpaOxvb0I8vV","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81534],"firstPacket":1788037777085,"ipProtocol":6,"lastPacket":1788037777237,"length":152,"network":{"bytes":202,"community_id":"1:n9QWhK6cTj+fjhk7/2BzCaqywaA=","packets":3},"node":"spark-afae","packetPos":[-81534,4945928,90,1470],"packetRange":{"gte":1788037777085,"lte":1788037777237},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":19026},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["frantech-ts","honeypot","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1833271266},"totDataBytes":0} +{"@timestamp":1788037794908,"_id":"260829-wSxPxFwZVmJNhqfWoElRFypQ","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81528],"firstPacket":1788036742213,"ipProtocol":6,"lastPacket":1788036742366,"length":153,"network":{"bytes":202,"community_id":"1:bzSBTMIhcr/rtYi4uZpkB5JaRS8=","packets":3},"node":"spark-afae","packetPos":[-81528,2505609,90,160],"packetRange":{"gte":1788036742213,"lte":1788036742366},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":31552},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3382166870},"totDataBytes":0} +{"@timestamp":1788035996083,"_id":"260829-zL8axxyl_ntJMK0VarkJsznD","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":74,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81515],"firstPacket":1788035705356,"ipProtocol":6,"lastPacket":1788035705508,"length":152,"network":{"bytes":202,"community_id":"1:oLlDsV301I+fMLnRSpULFukxP5I=","packets":3},"node":"spark-afae","packetPos":[-81515,4555417,90,940],"packetRange":{"gte":1788035705356,"lte":1788035705508},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":128,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":45666},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_13"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1502402126},"totDataBytes":0} +{"@timestamp":1788032086822,"_id":"260829-8Std4LVu-ApMBK9zmM0yp2k3","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[81491],"firstPacket":1788031039926,"ipProtocol":6,"lastPacket":1788031039926,"length":0,"network":{"bytes":58,"community_id":"1:HFsTF6b8XWkjn6Vdv8SnJyEI9YM=","packets":1},"node":"spark-afae","packetPos":[-81491,427064],"packetRange":{"gte":1788031039926,"lte":1788031039926},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":58,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":42529},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[240],"srcTTLCnt":1,"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["1025_2_1460_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3658342513},"totDataBytes":0} +{"@timestamp":1788032086730,"_id":"260829-9z9bA7qUvhdO9LogqR6zmzPt","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[81489],"firstPacket":1788030982173,"ipProtocol":6,"lastPacket":1788030982173,"length":0,"network":{"bytes":58,"community_id":"1:F7sRfecPRlV9kMYWHbIe0Gk4gq4=","packets":1},"node":"spark-afae","packetPos":[-81489,43467],"packetRange":{"gte":1788030982173,"lte":1788030982173},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":58,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":42545},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[245],"srcTTLCnt":1,"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["1025_2_1460_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3619368882},"totDataBytes":0} +{"@timestamp":1788031784389,"_id":"260829-ar-KnS_4uk5GZKeZyhNSVaDE","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"RIPE","ethertype":2048,"fileId":[81487],"firstPacket":1788030726110,"ipProtocol":6,"lastPacket":1788030726110,"length":0,"network":{"bytes":58,"community_id":"1:HIR58sl/8FJAa8XuMBeNw/c3++M=","packets":1},"node":"spark-afae","packetPos":[-81487,244875],"packetRange":{"gte":1788030726110,"lte":1788030726110},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":58,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":1,"port":42529},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"LACNIC","srcTTL":[242],"srcTTLCnt":1,"tags":["sensor:sponge-01-ts","sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["1025_2_1460_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3731721594},"totDataBytes":0} +{"@timestamp":1788027269466,"_id":"260829-Qis8Ig-gMCVMDIv0WKnnQKMa","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[81458],"firstPacket":1788026610307,"ipProtocol":6,"lastPacket":1788026610307,"length":0,"network":{"bytes":60,"community_id":"1:dkrF4B7furyXw1jMjAz/jhrYgak=","packets":1},"node":"spark-afae","packetPos":[-81458,1193271],"packetRange":{"gte":1788026610307,"lte":1788026610307},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":60,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":42529},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[243],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["1025_2_1460_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2914157596},"totDataBytes":0} +{"@timestamp":1788024246581,"_id":"260829-1CqvypkrMbJDypjjaEzjiTnE","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":58,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":5060},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[81438],"firstPacket":1788023175653,"ipProtocol":6,"lastPacket":1788023175811,"length":158,"network":{"bytes":228,"community_id":"1:N1tNIAlTU0cnEXhiIao1RDYQ8g0=","packets":4},"node":"spark-afae","packetPos":[-81438,201512,74,658,70],"packetRange":{"gte":1788023175653,"lte":1788023175811},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":170,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":3,"port":42545},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[50,241],"srcTTLCnt":2,"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["1025_2_1400_00"],"ja4tCnt":1,"ja4ts":["64240_2_1460_00"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":2,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":804529315},"totDataBytes":0} +{"@timestamp":1788023946002,"_id":"260829-mr5jPuIo22pMC4A1HVljILJI","_index":"arkime_sessions3-260829","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[81435],"firstPacket":1788022912114,"ipProtocol":6,"lastPacket":1788022912114,"length":0,"network":{"bytes":60,"community_id":"1:4kMZE6pGewJJ4HoInJUFY5j2cY0=","packets":1},"node":"spark-afae","packetPos":[-81435,739308],"packetRange":{"gte":1788022912114,"lte":1788022912114},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":60,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":42545},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"LACNIC","srcTTL":[246],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-02-ts","proxy","contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["1025_2_1460_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":4205690105},"totDataBytes":0} +{"@timestamp":1787686412368,"_id":"260825-f6CEUHmJTmdJlqBriAESBogb","_index":"arkime_sessions3-260825","client":{"bytes":1016},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[79395],"firstPacket":1787686017959,"ipProtocol":17,"lastPacket":1787686017959,"length":0,"network":{"bytes":1058,"community_id":"1:7AnH0XAaTyE661Wc1yEaM/9JHbk=","packets":1},"node":"spark-afae","packetPos":[-79395,1480971],"packetRange":{"gte":1787686017959,"lte":1787686017959},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["Un6Y04y67FIR4bMMXJtfJc.."],"callidCnt":1,"contact":["\u003csip:17168465496@179.43.167.2:26631\u003e"],"contactCnt":1,"from":["\u003csip:17168465496@179.43.167.2\u003e;tag=4920fd1d"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:8103908351673002@159.195.21.150:5060\u003e"],"toCnt":1,"user":["8103908351673002","17168465496"],"userCnt":2,"useragent":["OpenVox"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:26631;branch=z9hG4bK-524287-1---bfa9515ffed485b6"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1058,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":26631},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[54],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["461308078748594"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["netcup-ts","honeypot","sensor:netcup-ts"],"tagsCnt":3,"totDataBytes":1016} +{"@timestamp":1787683061865,"_id":"260825-MqCCGejTU3xNrbDLJEgw1Gif","_index":"arkime_sessions3-260825","client":{"bytes":1019},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[79376],"firstPacket":1787682213182,"ipProtocol":17,"lastPacket":1787682213182,"length":0,"network":{"bytes":1061,"community_id":"1:XLxiiDmLvds/E3gfRZpspuILYvg=","packets":1},"node":"spark-afae","packetPos":[-79376,2762257],"packetRange":{"gte":1787682213182,"lte":1787682213182},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["l4bDAGQK8PFQTqL9Rh5TJe.."],"callidCnt":1,"contact":["\u003csip:16724692132@179.43.167.2:26631\u003e"],"contactCnt":1,"from":["\u003csip:16724692132@179.43.167.2\u003e;tag=b79c5cb3"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:8103908351673002@217.15.163.226:5060\u003e"],"toCnt":1,"user":["8103908351673002","16724692132"],"userCnt":2,"useragent":["Yate/6.0.0"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:26631;branch=z9hG4bK-524287-1---58ed9910de873b15"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1061,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":26631},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1626403712497842"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1019} +{"@timestamp":1787681534713,"_id":"260825-pP30EittxndMfKD9QPQqaJ_W","_index":"arkime_sessions3-260825","client":{"bytes":1019},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[79368],"firstPacket":1787680831708,"ipProtocol":17,"lastPacket":1787680831708,"length":0,"network":{"bytes":1061,"community_id":"1:oNeQPu1kcxGQVW2VNpGuaftbOSU=","packets":1},"node":"spark-afae","packetPos":[-79368,1042653],"packetRange":{"gte":1787680831708,"lte":1787680831708},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["Anv0jvM3Aop8bQYEF4E5mL.."],"callidCnt":1,"contact":["\u003csip:16563628947@179.43.167.2:26631\u003e"],"contactCnt":1,"from":["\u003csip:16563628947@179.43.167.2\u003e;tag=cfc9d284"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:8103908351673002@38.54.2.209:5060\u003e"],"toCnt":1,"user":["16563628947","8103908351673002"],"userCnt":2,"useragent":["Yealink SIP-T46S"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:26631;branch=z9hG4bK-524287-1---ee81ac434e4f1950"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1061,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":26631},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["2197338749859177"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1019} +{"@timestamp":1787679126204,"_id":"260825-Tf1mSKKefE1KJLLO7phjF-js","_index":"arkime_sessions3-260825","client":{"bytes":1024},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[79354],"firstPacket":1787678581809,"ipProtocol":17,"lastPacket":1787678581809,"length":0,"network":{"bytes":1066,"community_id":"1:kIUR+WIfgssGLHaTY30dt1EUHYg=","packets":1},"node":"spark-afae","packetPos":[-79354,839113],"packetRange":{"gte":1787678581809,"lte":1787678581809},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["dGcKTlc1xzFVXpqmUS6gTf.."],"callidCnt":1,"contact":["\u003csip:16299777872@179.43.167.2:26631\u003e"],"contactCnt":1,"from":["\u003csip:16299777872@179.43.167.2\u003e;tag=b5ac4942"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:8103908351673002@109.123.246.142:5060\u003e"],"toCnt":1,"user":["16299777872","8103908351673002"],"userCnt":2,"useragent":["Cisco CP-8851"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:26631;branch=z9hG4bK-524287-1---092ff1a5456d4623"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1066,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":26631},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1504380979877684"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["proxy","sensor:contabo-sponge-02-ts","contabo-sponge-02-ts"],"tagsCnt":3,"totDataBytes":1024} +{"@timestamp":1787668582818,"_id":"260825-2PsXyilkaZRE5Z8-Ue7o7R0i","_index":"arkime_sessions3-260825","client":{"bytes":1022},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[79296],"firstPacket":1787667676755,"ipProtocol":17,"lastPacket":1787667676755,"length":0,"network":{"bytes":1064,"community_id":"1:VA2NQG8IWuJpg/T5ANqGaR2x4hc=","packets":1},"node":"spark-afae","packetPos":[-79296,1078746],"packetRange":{"gte":1787667676755,"lte":1787667676755},"protocol":["sip","udp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["NZsVxF9hT68IVliffpKmyZ.."],"callidCnt":1,"contact":["\u003csip:16724692132@179.43.167.2:22342\u003e"],"contactCnt":1,"from":["\u003csip:16724692132@179.43.167.2\u003e;tag=28d48438"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:0003908351673002@217.15.163.226:5060\u003e"],"toCnt":1,"user":["16724692132","0003908351673002"],"userCnt":2,"useragent":["Cisco-CUCM6.1"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:22342;branch=z9hG4bK-524287-1---2327a6c48bb49559"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1064,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":22342},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1273157764429593"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["honeypot","contabo-sponge-01-ts","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1022} +{"@timestamp":1787664645730,"_id":"260825-Vft5npeBZjxN-L4Q7bt1DSI7","_index":"arkime_sessions3-260825","client":{"bytes":1018},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[79274],"firstPacket":1787664055527,"ipProtocol":17,"lastPacket":1787664055527,"length":0,"network":{"bytes":1060,"community_id":"1:5XFrow/68Qf0a1HBsLWoaE1iNZQ=","packets":1},"node":"spark-afae","packetPos":[-79274,175784],"packetRange":{"gte":1787664055527,"lte":1787664055527},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["MdRNnng9MVgSNsEYSLKsbo.."],"callidCnt":1,"contact":["\u003csip:16299777872@179.43.167.2:22342\u003e"],"contactCnt":1,"from":["\u003csip:16299777872@179.43.167.2\u003e;tag=e032d4da"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:0003908351673002@109.123.246.142:5060\u003e"],"toCnt":1,"user":["16299777872","0003908351673002"],"userCnt":2,"useragent":["Dinstar"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:22342;branch=z9hG4bK-524287-1---9f49d53a9e72d640"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1060,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":22342},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1985221277801659"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["contabo-sponge-02-ts","sensor:contabo-sponge-02-ts","proxy"],"tagsCnt":3,"totDataBytes":1018} +{"@timestamp":1787654074113,"_id":"260825-7PkcUwl7o0lAjqrnCGAQcLWF","_index":"arkime_sessions3-260825","client":{"bytes":1024},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[79216],"firstPacket":1787653173403,"ipProtocol":17,"lastPacket":1787653173403,"length":0,"network":{"bytes":1066,"community_id":"1:T1lPzT/6FLkaIY+89LYsRMkOaEU=","packets":1},"node":"spark-afae","packetPos":[-79216,520213],"packetRange":{"gte":1787653173403,"lte":1787653173403},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["VRwlIzi9tOCLMtZzRYj9LN.."],"callidCnt":1,"contact":["\u003csip:16724692132@179.43.167.2:27009\u003e"],"contactCnt":1,"from":["\u003csip:16724692132@179.43.167.2\u003e;tag=5f0012e8"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:98103908351673002@217.15.163.226:5060\u003e"],"toCnt":1,"user":["98103908351673002","16724692132"],"userCnt":2,"useragent":["baresip/2.9.0"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:27009;branch=z9hG4bK-524287-1---7f649933386f4508"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1066,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":27009},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1450429409333683"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["contabo-sponge-01-ts","sensor:contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"totDataBytes":1024} +{"@timestamp":1787652576260,"_id":"260825-wPljv3iTVYdFJY9u-1L7RHiY","_index":"arkime_sessions3-260825","client":{"bytes":1021},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[79206],"firstPacket":1787651800338,"ipProtocol":17,"lastPacket":1787651800338,"length":0,"network":{"bytes":1063,"community_id":"1:Y54d1/cN/aHvKm1Mavi130Yp0AI=","packets":1},"node":"spark-afae","packetPos":[-79206,323760],"packetRange":{"gte":1787651800338,"lte":1787651800338},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["RH0Op2lcBynMEHHCd3Hrfr.."],"callidCnt":1,"contact":["\u003csip:16563628947@179.43.167.2:27009\u003e"],"contactCnt":1,"from":["\u003csip:16563628947@179.43.167.2\u003e;tag=4ee4d0d2"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:98103908351673002@38.54.2.209:5060\u003e"],"toCnt":1,"user":["16563628947","98103908351673002"],"userCnt":2,"useragent":["snom320/8.7.5.32"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:27009;branch=z9hG4bK-524287-1---18c7c75da3aa4e9b"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1063,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":27009},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["45429645017569"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts","honeypot"],"tagsCnt":3,"totDataBytes":1021} +{"@timestamp":1787643208093,"_id":"260825-w5w68F5IFyhKB7Ez96g6x6n9","_index":"arkime_sessions3-260825","client":{"bytes":1019},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[79155],"firstPacket":1787642434634,"ipProtocol":17,"lastPacket":1787642434634,"length":0,"network":{"bytes":1061,"community_id":"1:WtKyizZHZ4zpLVtGDkyBazRc/K4=","packets":1},"node":"spark-afae","packetPos":[-79155,5131404],"packetRange":{"gte":1787642434634,"lte":1787642434634},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["wC6WgAl35T2xuvXd2tLffM.."],"callidCnt":1,"contact":["\u003csip:17168465496@179.43.167.2:29703\u003e"],"contactCnt":1,"from":["\u003csip:17168465496@179.43.167.2\u003e;tag=1ac78660"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:9003908351673002@159.195.21.150:5060\u003e"],"toCnt":1,"user":["9003908351673002","17168465496"],"userCnt":2,"useragent":["SIPp/3.6.2"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:29703;branch=z9hG4bK-524287-1---af8e82e7be30803b"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1061,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":29703},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[54],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["756163361513940"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"totDataBytes":1019} +{"@timestamp":1787639865684,"_id":"260825-IPilGpQ-7rlFdpavEsgVFOoz","_index":"arkime_sessions3-260825","client":{"bytes":1026},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[79136],"firstPacket":1787638651882,"ipProtocol":17,"lastPacket":1787638651882,"length":0,"network":{"bytes":1068,"community_id":"1:naWCNG1wdY5ChytDQ+Bdl4077dM=","packets":1},"node":"spark-afae","packetPos":[-79136,147290],"packetRange":{"gte":1787638651882,"lte":1787638651882},"protocol":["sip","udp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["I7MpDlDgZEQ0m0DOMBotBH.."],"callidCnt":1,"contact":["\u003csip:16724692132@179.43.167.2:29703\u003e"],"contactCnt":1,"from":["\u003csip:16724692132@179.43.167.2\u003e;tag=8925d99b"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:9003908351673002@217.15.163.226:5060\u003e"],"toCnt":1,"user":["9003908351673002","16724692132"],"userCnt":2,"useragent":["Grandstream HT812"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:29703;branch=z9hG4bK-524287-1---10c86719d2a50de6"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1068,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":29703},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["977102229462202"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:contabo-sponge-01-ts","contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"totDataBytes":1026} +{"@timestamp":1787638354594,"_id":"260825-6ff2vgY7L_NNaLW1OZ85Cy9K","_index":"arkime_sessions3-260825","client":{"bytes":1013},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[79127],"firstPacket":1787637275120,"ipProtocol":17,"lastPacket":1787637275120,"length":0,"network":{"bytes":1055,"community_id":"1:EgTQnlL86zSDKubpSij7KJwnsg4=","packets":1},"node":"spark-afae","packetPos":[-79127,99705],"packetRange":{"gte":1787637275120,"lte":1787637275120},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["9Cuv7ALOkCTb40SCT4EmvL.."],"callidCnt":1,"contact":["\u003csip:16563628947@179.43.167.2:29703\u003e"],"contactCnt":1,"from":["\u003csip:16563628947@179.43.167.2\u003e;tag=bd351b98"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:9003908351673002@38.54.2.209:5060\u003e"],"toCnt":1,"user":["16563628947","9003908351673002"],"userCnt":2,"useragent":["Mitel 6863"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:29703;branch=z9hG4bK-524287-1---1e597a12dfc945a1"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1055,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":29703},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1082509063213718"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1013} +{"@timestamp":1787635951734,"_id":"260825-nvf-MxIv26VFIoEdeK9UrnuA","_index":"arkime_sessions3-260825","client":{"bytes":1039},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[79114],"firstPacket":1787635029332,"ipProtocol":17,"lastPacket":1787635029332,"length":0,"network":{"bytes":1081,"community_id":"1:4a2i9SItj7P3JcAOaD70px365Pc=","packets":1},"node":"spark-afae","packetPos":[-79114,144473],"packetRange":{"gte":1787635029332,"lte":1787635029332},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["3PlnREfpHce1iqOssmqDBh.."],"callidCnt":1,"contact":["\u003csip:16299777872@179.43.167.2:29703\u003e"],"contactCnt":1,"from":["\u003csip:16299777872@179.43.167.2\u003e;tag=a7b50e59"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:9003908351673002@109.123.246.142:5060\u003e"],"toCnt":1,"user":["16299777872","9003908351673002"],"userCnt":2,"useragent":["Yealink SIP-CP960 73.86.0.15"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:29703;branch=z9hG4bK-524287-1---de4c716ae43168eb"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1081,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":29703},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1429248137461094"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["proxy","sensor:contabo-sponge-02-ts","contabo-sponge-02-ts"],"tagsCnt":3,"totDataBytes":1039} +{"@timestamp":1787628731838,"_id":"260825-mpsdnYcRXLBO_JvVvGNS_NRq","_index":"arkime_sessions3-260825","client":{"bytes":1018},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[79075],"firstPacket":1787627923703,"ipProtocol":17,"lastPacket":1787627923703,"length":0,"network":{"bytes":1060,"community_id":"1:+EsuGOwWNzyeImNpBBNZb+ME/Co=","packets":1},"node":"spark-afae","packetPos":[-79075,927411],"packetRange":{"gte":1787627923703,"lte":1787627923703},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["ft5G1r0rEk67NNY0Xrx37h.."],"callidCnt":1,"contact":["\u003csip:17168465496@179.43.167.2:25698\u003e"],"contactCnt":1,"from":["\u003csip:17168465496@179.43.167.2\u003e;tag=a4f73cd2"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:3908351673002@159.195.21.150:5060\u003e"],"toCnt":1,"user":["3908351673002","17168465496"],"userCnt":2,"useragent":["MicroSIP/3.20.2"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:25698;branch=z9hG4bK-524287-1---877fa2d26de392ae"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1060,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":25698},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[54],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1049533492814731"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["honeypot","sensor:netcup-ts","netcup-ts"],"tagsCnt":3,"totDataBytes":1018} +{"@timestamp":1787624803903,"_id":"260825-Qpv8pX2-tO5ERImBZZBgNZZ6","_index":"arkime_sessions3-260825","client":{"bytes":1010},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[79051],"firstPacket":1787624147114,"ipProtocol":17,"lastPacket":1787624147114,"length":0,"network":{"bytes":1052,"community_id":"1:ZgNPhBdNR00QVU6SA9mqrUMb2g0=","packets":1},"node":"spark-afae","packetPos":[-79051,4477420],"packetRange":{"gte":1787624147114,"lte":1787624147114},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["MmZXFcj69uGTXUCnMxwVoH.."],"callidCnt":1,"contact":["\u003csip:16724692132@179.43.167.2:25698\u003e"],"contactCnt":1,"from":["\u003csip:16724692132@179.43.167.2\u003e;tag=57c035a6"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:3908351673002@217.15.163.226:5060\u003e"],"toCnt":1,"user":["3908351673002","16724692132"],"userCnt":2,"useragent":["snom710"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:25698;branch=z9hG4bK-524287-1---b33237f274f4d9bb"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1052,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":25698},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1053568210456383"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["honeypot","contabo-sponge-01-ts","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1010} +{"@timestamp":1787621452764,"_id":"260825-AJtez9UrHAtESKYjEFfM2Ti9","_index":"arkime_sessions3-260825","client":{"bytes":1014},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[79033],"firstPacket":1787620534349,"ipProtocol":17,"lastPacket":1787620534349,"length":0,"network":{"bytes":1056,"community_id":"1:f4UxVR2L7HuXmiO0Sbuo/R0bIRM=","packets":1},"node":"spark-afae","packetPos":[-79033,29651],"packetRange":{"gte":1787620534349,"lte":1787620534349},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["LNrLj45nNZoYd2TjoEQ29j.."],"callidCnt":1,"contact":["\u003csip:16299777872@179.43.167.2:25698\u003e"],"contactCnt":1,"from":["\u003csip:16299777872@179.43.167.2\u003e;tag=a5821cd3"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:3908351673002@109.123.246.142:5060\u003e"],"toCnt":1,"user":["16299777872","3908351673002"],"userCnt":2,"useragent":["Fanvil X6"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:25698;branch=z9hG4bK-524287-1---c932ca6439fadb76"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1056,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":25698},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1783967469148490"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:contabo-sponge-02-ts","contabo-sponge-02-ts","proxy"],"tagsCnt":3,"totDataBytes":1014} +{"@timestamp":1787614493546,"_id":"260824-IjPfaUZGbGtAMbGVhFjCpmlM","_index":"arkime_sessions3-260824","client":{"bytes":1011},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78995],"firstPacket":1787613415133,"ipProtocol":17,"lastPacket":1787613415133,"length":0,"network":{"bytes":1053,"community_id":"1:BaAA7HbtIgwO7B8Rme8eTatx0dQ=","packets":1},"node":"spark-afae","packetPos":[-78995,384875],"packetRange":{"gte":1787613415133,"lte":1787613415133},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["9Un0Tkw4QoONykTbvfnZ9x.."],"callidCnt":1,"contact":["\u003csip:17168465496@179.43.167.2:32992\u003e"],"contactCnt":1,"from":["\u003csip:17168465496@179.43.167.2\u003e;tag=59692108"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:003908351673002@159.195.21.150:5060\u003e"],"toCnt":1,"user":["17168465496","003908351673002"],"userCnt":2,"useragent":["Algo"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:32992;branch=z9hG4bK-524287-1---3b1319fbd5e9895e"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1053,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":32992},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[54],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1980870534876109"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"totDataBytes":1011} +{"@timestamp":1787609985494,"_id":"260824-EPSnxNUsEaBKeK_3-naCpHRv","_index":"arkime_sessions3-260824","client":{"bytes":1017},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78970],"firstPacket":1787609626007,"ipProtocol":17,"lastPacket":1787609626007,"length":0,"network":{"bytes":1059,"community_id":"1:9D4PwpViJdHOhBPrB8Q9xb/dj/Q=","packets":1},"node":"spark-afae","packetPos":[-78970,3433325],"packetRange":{"gte":1787609626007,"lte":1787609626007},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["OBr7JwPdlak7g70liqWkRv.."],"callidCnt":1,"contact":["\u003csip:16724692132@179.43.167.2:32992\u003e"],"contactCnt":1,"from":["\u003csip:16724692132@179.43.167.2\u003e;tag=3ad70497"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:003908351673002@217.15.163.226:5060\u003e"],"toCnt":1,"user":["16724692132","003908351673002"],"userCnt":2,"useragent":["FreeSWITCH"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:32992;branch=z9hG4bK-524287-1---09a45d0ab49150ad"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1059,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":32992},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["597098679017244"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["contabo-sponge-01-ts","sensor:contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"totDataBytes":1017} +{"@timestamp":1787608481975,"_id":"260824-5PMMOBqwuAJMprFKxGV1ydHY","_index":"arkime_sessions3-260824","client":{"bytes":1018},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78962],"firstPacket":1787608248172,"ipProtocol":17,"lastPacket":1787608248172,"length":0,"network":{"bytes":1060,"community_id":"1:F8izqP1Yp3/1xikXHMM/YU3kWMo=","packets":1},"node":"spark-afae","packetPos":[-78962,1528616],"packetRange":{"gte":1787608248172,"lte":1787608248172},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["m7SJYZ7E0DsnI7BRVHbrgM.."],"callidCnt":1,"contact":["\u003csip:16563628947@179.43.167.2:32992\u003e"],"contactCnt":1,"from":["\u003csip:16563628947@179.43.167.2\u003e;tag=a3c06f32"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:003908351673002@38.54.2.209:5060\u003e"],"toCnt":1,"user":["16563628947","003908351673002"],"userCnt":2,"useragent":["Cisco-CP7940G/8.0"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:32992;branch=z9hG4bK-524287-1---2b6b7902bdd970fa"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1060,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":32992},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["178052737022826"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts","honeypot"],"tagsCnt":3,"totDataBytes":1018} +{"@timestamp":1787607279733,"_id":"260824-45kdHNq1EVtDQr4qN-bulDyl","_index":"arkime_sessions3-260824","client":{"bytes":1040},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78954],"firstPacket":1787605998407,"ipProtocol":17,"lastPacket":1787605998407,"length":0,"network":{"bytes":1082,"community_id":"1:v+cGN5qLos/fmwh/HXJhptZpF6E=","packets":1},"node":"spark-afae","packetPos":[-78954,12206],"packetRange":{"gte":1787605998407,"lte":1787605998407},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["IivvkRIjNb7PVlVTAxNuf5.."],"callidCnt":1,"contact":["\u003csip:16299777872@179.43.167.2:32992\u003e"],"contactCnt":1,"from":["\u003csip:16299777872@179.43.167.2\u003e;tag=8ee36063"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:003908351673002@109.123.246.142:5060\u003e"],"toCnt":1,"user":["16299777872","003908351673002"],"userCnt":2,"useragent":["Kamailio (5.6.3 (x86_64/linux))"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:32992;branch=z9hG4bK-524287-1---901ea7b2e4b2c81d"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1082,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":32992},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1750202066730461"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["contabo-sponge-02-ts","sensor:contabo-sponge-02-ts","proxy"],"tagsCnt":3,"totDataBytes":1040} +{"@timestamp":1787600341693,"_id":"260824-SZmRp2wg3wpBKYCtJfCDW2MV","_index":"arkime_sessions3-260824","client":{"bytes":1021},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78916],"firstPacket":1787598882087,"ipProtocol":17,"lastPacket":1787598882087,"length":0,"network":{"bytes":1063,"community_id":"1:54Vjmhh0oFrffPddPiZgxhg8/b0=","packets":1},"node":"spark-afae","packetPos":[-78916,39658],"packetRange":{"gte":1787598882087,"lte":1787598882087},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["MkKT2YwQwTZ4RLjdF6Fbfy.."],"callidCnt":1,"contact":["\u003csip:17168465496@179.43.167.2:31423\u003e"],"contactCnt":1,"from":["\u003csip:17168465496@179.43.167.2\u003e;tag=c8626475"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:90113908351673002@159.195.21.150:5060\u003e"],"toCnt":1,"user":["90113908351673002","17168465496"],"userCnt":2,"useragent":["SIPp/3.6.2"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:31423;branch=z9hG4bK-524287-1---26c1a6997450c1b8"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1063,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":31423},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[54],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["659034900133398"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:netcup-ts","honeypot","netcup-ts"],"tagsCnt":3,"totDataBytes":1021} +{"@timestamp":1787595833108,"_id":"260824-NvLbMWZvr6FHl7ymBnYt0SQX","_index":"arkime_sessions3-260824","client":{"bytes":1020},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78891],"firstPacket":1787595114001,"ipProtocol":17,"lastPacket":1787595114001,"length":0,"network":{"bytes":1062,"community_id":"1:gKWQMzlo31InDewapnZKYrLPDEU=","packets":1},"node":"spark-afae","packetPos":[-78891,3067669],"packetRange":{"gte":1787595114001,"lte":1787595114001},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["YQGXjVWCp2Rs3CS70LaiJ1.."],"callidCnt":1,"contact":["\u003csip:16724692132@179.43.167.2:31423\u003e"],"contactCnt":1,"from":["\u003csip:16724692132@179.43.167.2\u003e;tag=db81321a"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:90113908351673002@217.15.163.226:5060\u003e"],"toCnt":1,"user":["90113908351673002","16724692132"],"userCnt":2,"useragent":["Sonus SBC"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:31423;branch=z9hG4bK-524287-1---c13b5ec35615ebba"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1062,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":31423},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["567976400945703"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["honeypot","contabo-sponge-01-ts","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1020} +{"@timestamp":1787594323574,"_id":"260824-API6FCGjFtxD2LCz_WHF6N8y","_index":"arkime_sessions3-260824","client":{"bytes":1015},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78884],"firstPacket":1787593746869,"ipProtocol":17,"lastPacket":1787593746869,"length":0,"network":{"bytes":1057,"community_id":"1:YQMf+R6ejuJNYoYYO9sO8HSVjBo=","packets":1},"node":"spark-afae","packetPos":[-78884,1718479],"packetRange":{"gte":1787593746869,"lte":1787593746869},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["1XxPItsuni3DaR3Xo52sEl.."],"callidCnt":1,"contact":["\u003csip:16563628947@179.43.167.2:31423\u003e"],"contactCnt":1,"from":["\u003csip:16563628947@179.43.167.2\u003e;tag=3fbc0cbc"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:90113908351673002@38.54.2.209:5060\u003e"],"toCnt":1,"user":["16563628947","90113908351673002"],"userCnt":2,"useragent":["Yate/6.0.0"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:31423;branch=z9hG4bK-524287-1---7571e2d19587e16b"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1057,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":31423},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["638541589972429"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:bahrain-sponge-01-ts","honeypot","bahrain-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1015} +{"@timestamp":1787592822735,"_id":"260824-pZg1YPaZmlRBTIa1Puf8i-Gs","_index":"arkime_sessions3-260824","client":{"bytes":1034},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78873],"firstPacket":1787591505949,"ipProtocol":17,"lastPacket":1787591505949,"length":0,"network":{"bytes":1076,"community_id":"1:xEwN2TNWVeajG8sbYQpmPxZdL4M=","packets":1},"node":"spark-afae","packetPos":[-78873,1817],"packetRange":{"gte":1787591505949,"lte":1787591505949},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["uyskoFzcUHFw3JP5qk8UaW.."],"callidCnt":1,"contact":["\u003csip:16299777872@179.43.167.2:31423\u003e"],"contactCnt":1,"from":["\u003csip:16299777872@179.43.167.2\u003e;tag=b279b7cb"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:90113908351673002@109.123.246.142:5060\u003e"],"toCnt":1,"user":["16299777872","90113908351673002"],"userCnt":2,"useragent":["Linksys/SPA942-5.1.10"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:31423;branch=z9hG4bK-524287-1---a790ee7a03233448"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1076,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":31423},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["420974140947385"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:contabo-sponge-02-ts","proxy","contabo-sponge-02-ts"],"tagsCnt":3,"totDataBytes":1034} +{"@timestamp":1787581352933,"_id":"260824-VfAI0F6soG1CyaDDQLsMdUh4","_index":"arkime_sessions3-260824","client":{"bytes":1028},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78811],"firstPacket":1787580606417,"ipProtocol":17,"lastPacket":1787580606417,"length":0,"network":{"bytes":1070,"community_id":"1:z0qEHwg7IpvFU4z++gMKaVw9NAw=","packets":1},"node":"spark-afae","packetPos":[-78811,2558094],"packetRange":{"gte":1787580606417,"lte":1787580606417},"protocol":["sip","udp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["Fm9EuQlwYKQCN6zN9yyscm.."],"callidCnt":1,"contact":["\u003csip:16724692132@179.43.167.2:23377\u003e"],"contactCnt":1,"from":["\u003csip:16724692132@179.43.167.2\u003e;tag=602313d0"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:0113908351673002@217.15.163.226:5060\u003e"],"toCnt":1,"user":["0113908351673002","16724692132"],"userCnt":2,"useragent":["Asterisk PBX 18.9.0"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:23377;branch=z9hG4bK-524287-1---59dfaba515e48073"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1070,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":23377},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1791547634671365"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["honeypot","sensor:contabo-sponge-01-ts","contabo-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1028} +{"@timestamp":1787577438610,"_id":"260824-UZfHEX0D9KJID5BQ7LFWGdFy","_index":"arkime_sessions3-260824","client":{"bytes":1020},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78788],"firstPacket":1787576983511,"ipProtocol":17,"lastPacket":1787576983511,"length":0,"network":{"bytes":1062,"community_id":"1:sI0CwOu5F2CEkyx/BgPqpuPEr8g=","packets":1},"node":"spark-afae","packetPos":[-78788,826508],"packetRange":{"gte":1787576983511,"lte":1787576983511},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["ing7dDodSB62gQyCZttknW.."],"callidCnt":1,"contact":["\u003csip:16299777872@179.43.167.2:23377\u003e"],"contactCnt":1,"from":["\u003csip:16299777872@179.43.167.2\u003e;tag=069b055f"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:0113908351673002@109.123.246.142:5060\u003e"],"toCnt":1,"user":["0113908351673002","16299777872"],"userCnt":2,"useragent":["NEC DT800"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:23377;branch=z9hG4bK-524287-1---b6d50b7828f7bd98"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1062,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":23377},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["2197865105138760"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["proxy","sensor:contabo-sponge-02-ts","contabo-sponge-02-ts"],"tagsCnt":3,"totDataBytes":1020} +{"@timestamp":1787570184147,"_id":"260824-rZZc-GNX69hKF65RsJicqE1L","_index":"arkime_sessions3-260824","client":{"bytes":1021},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78748],"firstPacket":1787569886282,"ipProtocol":17,"lastPacket":1787569886282,"length":0,"network":{"bytes":1063,"community_id":"1:VKffe4oH3kXJxTUfVQvAkERN6Mc=","packets":1},"node":"spark-afae","packetPos":[-78748,4077008],"packetRange":{"gte":1787569886282,"lte":1787569886282},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["afjZDEbfnuGShnk7btWjjv.."],"callidCnt":1,"contact":["\u003csip:17168465496@179.43.167.2:32545\u003e"],"contactCnt":1,"from":["\u003csip:17168465496@179.43.167.2\u003e;tag=8551011e"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:+3908351673002@159.195.21.150:5060\u003e"],"toCnt":1,"user":["+3908351673002","17168465496"],"userCnt":2,"useragent":["Yealink SIP-T40P"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:32545;branch=z9hG4bK-524287-1---cc82fc1ef8693600"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1063,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":32545},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[54],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1775198638540024"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["netcup-ts","honeypot","sensor:netcup-ts"],"tagsCnt":3,"totDataBytes":1021} +{"@timestamp":1787566863956,"_id":"260824-k-6YwaqYfd9PKIy9gKJTeCQp","_index":"arkime_sessions3-260824","client":{"bytes":1033},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78731],"firstPacket":1787566112776,"ipProtocol":17,"lastPacket":1787566112776,"length":0,"network":{"bytes":1075,"community_id":"1:zxFaY3a7Vnl6muc7sT98zqv03+s=","packets":1},"node":"spark-afae","packetPos":[-78731,1687627],"packetRange":{"gte":1787566112776,"lte":1787566112776},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["gk3N68Y28J1IRpqIqHl6y1.."],"callidCnt":1,"contact":["\u003csip:16724692132@179.43.167.2:32545\u003e"],"contactCnt":1,"from":["\u003csip:16724692132@179.43.167.2\u003e;tag=56270a1c"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:+3908351673002@217.15.163.226:5060\u003e"],"toCnt":1,"user":["16724692132","+3908351673002"],"userCnt":2,"useragent":["Grandstream GRP2615 1.0.5.93"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:32545;branch=z9hG4bK-524287-1---087d436f774deef2"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1075,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":32545},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["237549536327387"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["honeypot","contabo-sponge-01-ts","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1033} +{"@timestamp":1787562933248,"_id":"260824-Hpb7psvtn3lJX4HhoBU6Ude2","_index":"arkime_sessions3-260824","client":{"bytes":1036},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78708],"firstPacket":1787562501224,"ipProtocol":17,"lastPacket":1787562501224,"length":0,"network":{"bytes":1078,"community_id":"1:usbZBmotc9CtAmMX+AcHilAODgI=","packets":1},"node":"spark-afae","packetPos":[-78708,4235899],"packetRange":{"gte":1787562501224,"lte":1787562501224},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["WtJPzMqLNS80oTKunaslH4.."],"callidCnt":1,"contact":["\u003csip:16299777872@179.43.167.2:32545\u003e"],"contactCnt":1,"from":["\u003csip:16299777872@179.43.167.2\u003e;tag=1c60feb7"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:+3908351673002@109.123.246.142:5060\u003e"],"toCnt":1,"user":["16299777872","+3908351673002"],"userCnt":2,"useragent":["Grandstream GXP2170 1.0.11.57"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:32545;branch=z9hG4bK-524287-1---65cb7343dd00a383"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1078,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":32545},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1526226263178284"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:contabo-sponge-02-ts","proxy","contabo-sponge-02-ts"],"tagsCnt":3,"totDataBytes":1036} +{"@timestamp":1787561093203,"_id":"260824-1-3AroIx2yRE_5G1TUoiG4y-","_index":"arkime_sessions3-260824","client":{"bytes":1009},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78699],"firstPacket":1787560164467,"ipProtocol":17,"lastPacket":1787560164467,"length":0,"network":{"bytes":1051,"community_id":"1:6Rq3Vq4S6IscFgrflxiYV1/sPVc=","packets":1},"node":"spark-afae","packetPos":[-78699,2073631],"packetRange":{"gte":1787560164467,"lte":1787560164467},"protocol":["sip","udp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["BmT3GxOWzOoB8CqHXqvtKT.."],"callidCnt":1,"contact":["\u003csip:16563628947@179.43.167.2:22456\u003e"],"contactCnt":1,"from":["\u003csip:16563628947@179.43.167.2\u003e;tag=24993a77"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:0013908351673002@38.54.2.209:5060\u003e"],"toCnt":1,"user":["16563628947","0013908351673002"],"userCnt":2,"useragent":["X-Lite"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:22456;branch=z9hG4bK-524287-1---e518bcb681f32451"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1051,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":22456},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1164876226023445"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:bahrain-sponge-01-ts","honeypot","bahrain-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1009} +{"@timestamp":1787558678493,"_id":"260824-xpXNj0-ZRk1IbrYhrCn3J2yF","_index":"arkime_sessions3-260824","client":{"bytes":1027},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78684],"firstPacket":1787557923115,"ipProtocol":17,"lastPacket":1787557923115,"length":0,"network":{"bytes":1069,"community_id":"1:LBaJ4lMIifNevEkMaa9TEo5dwJg=","packets":1},"node":"spark-afae","packetPos":[-78684,975913],"packetRange":{"gte":1787557923115,"lte":1787557923115},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["dY4D2aidAtkHaLcsjynYyD.."],"callidCnt":1,"contact":["\u003csip:16299777872@179.43.167.2:22456\u003e"],"contactCnt":1,"from":["\u003csip:16299777872@179.43.167.2\u003e;tag=d78aa1bd"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:0013908351673002@109.123.246.142:5060\u003e"],"toCnt":1,"user":["16299777872","0013908351673002"],"userCnt":2,"useragent":["Yealink SIP-T48G"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:22456;branch=z9hG4bK-524287-1---71fe388e6fd0a273"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1069,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":22456},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1057153776352758"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["proxy","sensor:contabo-sponge-02-ts","contabo-sponge-02-ts"],"tagsCnt":3,"totDataBytes":1027} +{"@timestamp":1787551404736,"_id":"260824-jDGnQBUAJYpDAKoP-N9EruFT","_index":"arkime_sessions3-260824","client":{"bytes":1028},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78646],"firstPacket":1787550835395,"ipProtocol":17,"lastPacket":1787550835395,"length":0,"network":{"bytes":1070,"community_id":"1:hsOrhKAKPYnJULQ7rnk+2UzPcN8=","packets":1},"node":"spark-afae","packetPos":[-78646,11594494],"packetRange":{"gte":1787550835395,"lte":1787550835395},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["uFxHOxZy76t3UXd3pcZrsV.."],"callidCnt":1,"contact":["\u003csip:17168465496@179.43.167.2:32781\u003e"],"contactCnt":1,"from":["\u003csip:17168465496@179.43.167.2\u003e;tag=7109eb40"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:0123908351673002@159.195.21.150:5060\u003e"],"toCnt":1,"user":["0123908351673002","17168465496"],"userCnt":2,"useragent":["Panasonic KX-HDV230"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:32781;branch=z9hG4bK-524287-1---23f478c736af478c"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1070,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":32781},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[54],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["854299085445119"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"totDataBytes":1028} +{"@timestamp":1787547789200,"_id":"260824-GezaKUeRDdBO8Z8jXCckY5dg","_index":"arkime_sessions3-260824","client":{"bytes":1035},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78625],"firstPacket":1787547059257,"ipProtocol":17,"lastPacket":1787547059257,"length":0,"network":{"bytes":1077,"community_id":"1:VpYdLBt8znNEMiavM0YqfXxsgxs=","packets":1},"node":"spark-afae","packetPos":[-78625,1173708],"packetRange":{"gte":1787547059257,"lte":1787547059257},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["289u45Lm1u7ajNPgUgafKX.."],"callidCnt":1,"contact":["\u003csip:16724692132@179.43.167.2:32781\u003e"],"contactCnt":1,"from":["\u003csip:16724692132@179.43.167.2\u003e;tag=8012ca01"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:0123908351673002@217.15.163.226:5060\u003e"],"toCnt":1,"user":["0123908351673002","16724692132"],"userCnt":2,"useragent":["Yealink SIP-T46S 66.86.0.5"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:32781;branch=z9hG4bK-524287-1---17877d0905eef029"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1077,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":32781},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1106193010171113"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["honeypot","contabo-sponge-01-ts","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1035} +{"@timestamp":1787544184808,"_id":"260824-q-vP144cR4dPEaCuIY6dNVht","_index":"arkime_sessions3-260824","client":{"bytes":1037},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78604],"firstPacket":1787543451666,"ipProtocol":17,"lastPacket":1787543451666,"length":0,"network":{"bytes":1079,"community_id":"1:+YrUICl5cySasOFohh9jHN14r1Q=","packets":1},"node":"spark-afae","packetPos":[-78604,88673],"packetRange":{"gte":1787543451666,"lte":1787543451666},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["yNLLiNXVcPIv9k3TCqI0vJ.."],"callidCnt":1,"contact":["\u003csip:16299777872@179.43.167.2:32781\u003e"],"contactCnt":1,"from":["\u003csip:16299777872@179.43.167.2\u003e;tag=0b57dc04"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:0123908351673002@109.123.246.142:5060\u003e"],"toCnt":1,"user":["0123908351673002","16299777872"],"userCnt":2,"useragent":["Avaya-IP-Phone-9608 S6.6.4"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:32781;branch=z9hG4bK-524287-1---e4a234c1cd766836"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1079,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":32781},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["890235784963217"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["contabo-sponge-02-ts","sensor:contabo-sponge-02-ts","proxy"],"tagsCnt":3,"totDataBytes":1037} +{"@timestamp":1787537234099,"_id":"260824-HTHKObzT-gJPtrBjF6fZ09LB","_index":"arkime_sessions3-260824","client":{"bytes":1026},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78565],"firstPacket":1787536351309,"ipProtocol":17,"lastPacket":1787536351309,"length":0,"network":{"bytes":1068,"community_id":"1:/Rg8sNfnZ5dP+RhHguWIzguM05Q=","packets":1},"node":"spark-afae","packetPos":[-78565,2097753],"packetRange":{"gte":1787536351309,"lte":1787536351309},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["PdvG9KpY5QBYbUAg36aiUj.."],"callidCnt":1,"contact":["\u003csip:17168465496@179.43.167.2:29343\u003e"],"contactCnt":1,"from":["\u003csip:17168465496@179.43.167.2\u003e;tag=52ecfd6f"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:0103908351673002@159.195.21.150:5060\u003e"],"toCnt":1,"user":["0103908351673002","17168465496"],"userCnt":2,"useragent":["Grandstream HT802"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:29343;branch=z9hG4bK-524287-1---0c8c2c6f8085a997"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1068,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":29343},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[54],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["2174047328236938"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:netcup-ts","honeypot","netcup-ts"],"tagsCnt":3,"totDataBytes":1026} +{"@timestamp":1787533624118,"_id":"260824-VOpYd5JWpjBEnpQO2dtdJKpW","_index":"arkime_sessions3-260824","client":{"bytes":1041},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78547],"firstPacket":1787532583908,"ipProtocol":17,"lastPacket":1787532583908,"length":0,"network":{"bytes":1083,"community_id":"1:vjITv3q1bLBYJ3V2Qbw9zNjcD70=","packets":1},"node":"spark-afae","packetPos":[-78547,7631992],"packetRange":{"gte":1787532583908,"lte":1787532583908},"protocol":["sip","udp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["0Kx6bf1mNHFYs1JiYHTf2E.."],"callidCnt":1,"contact":["\u003csip:16724692132@179.43.167.2:29343\u003e"],"contactCnt":1,"from":["\u003csip:16724692132@179.43.167.2\u003e;tag=1a05cfdb"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:0103908351673002@217.15.163.226:5060\u003e"],"toCnt":1,"user":["16724692132","0103908351673002"],"userCnt":2,"useragent":["Avaya Aura Communication Manager"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:29343;branch=z9hG4bK-524287-1---847787544c5aaa25"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1083,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":29343},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["2213163786049354"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:contabo-sponge-01-ts","contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"totDataBytes":1041} +{"@timestamp":1787532422263,"_id":"260824-KOrqz35_CClPca5Bvd8Pg_eV","_index":"arkime_sessions3-260824","client":{"bytes":1017},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78540],"firstPacket":1787531214646,"ipProtocol":17,"lastPacket":1787531214646,"length":0,"network":{"bytes":1059,"community_id":"1:reK2V4uAx79R0cYn0CgYf2UzkGc=","packets":1},"node":"spark-afae","packetPos":[-78540,1824664],"packetRange":{"gte":1787531214646,"lte":1787531214646},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["keLd4wk6oH5jupP0vFG9un.."],"callidCnt":1,"contact":["\u003csip:16563628947@179.43.167.2:29343\u003e"],"contactCnt":1,"from":["\u003csip:16563628947@179.43.167.2\u003e;tag=b7c0ae1f"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:0103908351673002@38.54.2.209:5060\u003e"],"toCnt":1,"user":["16563628947","0103908351673002"],"userCnt":2,"useragent":["Vodia PBX 65.0"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:29343;branch=z9hG4bK-524287-1---c89bc8c8ed8699d7"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1059,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":29343},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1932763830375370"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1017} +{"@timestamp":1787529702287,"_id":"260823-x-kDF6vDrA9Fn5ehMTsj9whI","_index":"arkime_sessions3-260823","client":{"bytes":1025},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78524],"firstPacket":1787528976763,"ipProtocol":17,"lastPacket":1787528976763,"length":0,"network":{"bytes":1067,"community_id":"1:RmkKf+oNgDNLSi3kOMHCbjmEmr4=","packets":1},"node":"spark-afae","packetPos":[-78524,503509],"packetRange":{"gte":1787528976763,"lte":1787528976763},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["wjNDbMIlm0aHoe3vZSVXBk.."],"callidCnt":1,"contact":["\u003csip:16299777872@179.43.167.2:29343\u003e"],"contactCnt":1,"from":["\u003csip:16299777872@179.43.167.2\u003e;tag=f1d4165c"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:0103908351673002@109.123.246.142:5060\u003e"],"toCnt":1,"user":["16299777872","0103908351673002"],"userCnt":2,"useragent":["Avaya IP Phone"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:29343;branch=z9hG4bK-524287-1---b11fa0fbeb104e4f"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1067,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":29343},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["184371763504474"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["contabo-sponge-02-ts","sensor:contabo-sponge-02-ts","proxy"],"tagsCnt":3,"totDataBytes":1025} +{"@timestamp":1787522752404,"_id":"260823--5KD-Ib_Gp9AK5dNrmV_ieXM","_index":"arkime_sessions3-260823","client":{"bytes":1024},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78485],"firstPacket":1787521858614,"ipProtocol":17,"lastPacket":1787521858614,"length":0,"network":{"bytes":1066,"community_id":"1:fTaOVpmKNGrUAM7ypCaYKI4OpKE=","packets":1},"node":"spark-afae","packetPos":[-78485,4252587],"packetRange":{"gte":1787521858614,"lte":1787521858614},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["eFvy9PfYaL8rPv8uPbDBvB.."],"callidCnt":1,"contact":["\u003csip:17168465496@179.43.167.2:25405\u003e"],"contactCnt":1,"from":["\u003csip:17168465496@179.43.167.2\u003e;tag=124eff89"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:00113908351673002@159.195.21.150:5060\u003e"],"toCnt":1,"user":["00113908351673002","17168465496"],"userCnt":2,"useragent":["Linksys PAP2T"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:25405;branch=z9hG4bK-524287-1---6c4dfdc751063d6b"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1066,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":25405},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[54],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["668011170023988"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:netcup-ts","honeypot","netcup-ts"],"tagsCnt":3,"totDataBytes":1024} +{"@timestamp":1787519441082,"_id":"260823-cuiYJlmHIXBOkrSFOE3YvIU3","_index":"arkime_sessions3-260823","client":{"bytes":1026},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78467],"firstPacket":1787518080720,"ipProtocol":17,"lastPacket":1787518080720,"length":0,"network":{"bytes":1068,"community_id":"1:dONUx83apcheOFKzG5cAqcTvUrQ=","packets":1},"node":"spark-afae","packetPos":[-78467,543210],"packetRange":{"gte":1787518080720,"lte":1787518080720},"protocol":["sip","udp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["0NpsSqYgPP51E8gmqXT2Rv.."],"callidCnt":1,"contact":["\u003csip:16724692132@179.43.167.2:25405\u003e"],"contactCnt":1,"from":["\u003csip:16724692132@179.43.167.2\u003e;tag=bfedd890"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:00113908351673002@217.15.163.226:5060\u003e"],"toCnt":1,"user":["16724692132","00113908351673002"],"userCnt":2,"useragent":["MicroSIP/3.20.2"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:25405;branch=z9hG4bK-524287-1---404b5ad4fb9d2d7c"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1068,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":25405},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["278214572270679"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["honeypot","sensor:contabo-sponge-01-ts","contabo-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1026} +{"@timestamp":1787517938799,"_id":"260823-R-jAmSPVf6RJqKjWOUNU00EC","_index":"arkime_sessions3-260823","client":{"bytes":1016},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78459],"firstPacket":1787516710246,"ipProtocol":17,"lastPacket":1787516710246,"length":0,"network":{"bytes":1058,"community_id":"1:aNSby1NisA6fdtsHjeBTqQDWKhs=","packets":1},"node":"spark-afae","packetPos":[-78459,503563],"packetRange":{"gte":1787516710246,"lte":1787516710246},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["xCgWKu0P5ZymnRD2UnDDfa.."],"callidCnt":1,"contact":["\u003csip:16563628947@179.43.167.2:25405\u003e"],"contactCnt":1,"from":["\u003csip:16563628947@179.43.167.2\u003e;tag=e96bff4c"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:00113908351673002@38.54.2.209:5060\u003e"],"toCnt":1,"user":["16563628947","00113908351673002"],"userCnt":2,"useragent":["KPhone/3.13"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:25405;branch=z9hG4bK-524287-1---d7d002cf449d0162"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1058,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":25405},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1901997835078302"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1016} +{"@timestamp":1787515228017,"_id":"260823-VpKXNdz1k_NGDIa9gi_7suB0","_index":"arkime_sessions3-260823","client":{"bytes":1039},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78443],"firstPacket":1787514472162,"ipProtocol":17,"lastPacket":1787514472162,"length":0,"network":{"bytes":1081,"community_id":"1:3AyKjFCGQcDj41e4STiPjt5Qo7s=","packets":1},"node":"spark-afae","packetPos":[-78443,237519],"packetRange":{"gte":1787514472162,"lte":1787514472162},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["TAO6a8Tlq0dtK2NoomuvzK.."],"callidCnt":1,"contact":["\u003csip:16299777872@179.43.167.2:25405\u003e"],"contactCnt":1,"from":["\u003csip:16299777872@179.43.167.2\u003e;tag=6d0f6446"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:00113908351673002@109.123.246.142:5060\u003e"],"toCnt":1,"user":["16299777872","00113908351673002"],"userCnt":2,"useragent":["Grandstream HT813 1.0.17.5"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:25405;branch=z9hG4bK-524287-1---c7f68184d7acacd0"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1081,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":25405},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["134470214295364"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["proxy","contabo-sponge-02-ts","sensor:contabo-sponge-02-ts"],"tagsCnt":3,"totDataBytes":1039} +{"@timestamp":1787508246281,"_id":"260823-nQchAOrn4aVN67DFVxNePyKe","_index":"arkime_sessions3-260823","client":{"bytes":1025},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78404],"firstPacket":1787507358595,"ipProtocol":17,"lastPacket":1787507358595,"length":0,"network":{"bytes":1067,"community_id":"1:yqyIFnqsQM5ifzJ8zHqealfk0rg=","packets":1},"node":"spark-afae","packetPos":[-78404,4697579],"packetRange":{"gte":1787507358595,"lte":1787507358595},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["eqEKestYhleciUySKcjhIc.."],"callidCnt":1,"contact":["\u003csip:17168465496@179.43.167.2:28637\u003e"],"contactCnt":1,"from":["\u003csip:17168465496@179.43.167.2\u003e;tag=d108fb1b"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:8103908351673002@159.195.21.150:5060\u003e"],"toCnt":1,"user":["8103908351673002","17168465496"],"userCnt":2,"useragent":["Yealink SIP-T54W"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:28637;branch=z9hG4bK-524287-1---b508379401809c95"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1067,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":28637},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[54],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1711267206632658"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"totDataBytes":1025} +{"@timestamp":1787504936135,"_id":"260823-kZGrdCjf4ktAZY4L48D6RqwY","_index":"arkime_sessions3-260823","client":{"bytes":1015},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78386],"firstPacket":1787503581027,"ipProtocol":17,"lastPacket":1787503581027,"length":0,"network":{"bytes":1057,"community_id":"1:/WOpgMppCn5LZCZKSIK2SIP1i3U=","packets":1},"node":"spark-afae","packetPos":[-78386,24],"packetRange":{"gte":1787503581027,"lte":1787503581027},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["taxpAUKcV9HX8qt84E3CcS.."],"callidCnt":1,"contact":["\u003csip:16724692132@179.43.167.2:28637\u003e"],"contactCnt":1,"from":["\u003csip:16724692132@179.43.167.2\u003e;tag=3147bcc2"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:8103908351673002@217.15.163.226:5060\u003e"],"toCnt":1,"user":["8103908351673002","16724692132"],"userCnt":2,"useragent":["Vonage"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:28637;branch=z9hG4bK-524287-1---f8c6f3436fd76b5c"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1057,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":28637},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1525534115980502"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1015} +{"@timestamp":1787502822843,"_id":"260823-WObC-m7A6olB1Ziy4YUk4IOs","_index":"arkime_sessions3-260823","client":{"bytes":1015},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78375],"firstPacket":1787502209014,"ipProtocol":17,"lastPacket":1787502209014,"length":0,"network":{"bytes":1057,"community_id":"1:3cDlAY2HSa+E3wnze1iR/5DiPtc=","packets":1},"node":"spark-afae","packetPos":[-78375,2077209],"packetRange":{"gte":1787502209014,"lte":1787502209014},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["PpPXQcCdyopR0Jd34OlSst.."],"callidCnt":1,"contact":["\u003csip:16563628947@179.43.167.2:28637\u003e"],"contactCnt":1,"from":["\u003csip:16563628947@179.43.167.2\u003e;tag=6ca8e228"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:8103908351673002@38.54.2.209:5060\u003e"],"toCnt":1,"user":["16563628947","8103908351673002"],"userCnt":2,"useragent":["Yealink W52P"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:28637;branch=z9hG4bK-524287-1---aeed3cb4733f9d58"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1057,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":28637},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["343201292703974"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts","honeypot"],"tagsCnt":3,"totDataBytes":1015} +{"@timestamp":1787500710733,"_id":"260823-FuYKRxSmHCVIFYahc1KEDHZG","_index":"arkime_sessions3-260823","client":{"bytes":1018},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78363],"firstPacket":1787499965279,"ipProtocol":17,"lastPacket":1787499965279,"length":0,"network":{"bytes":1060,"community_id":"1:MTPEHW+wiEs6r4hlqmkXQljuJkc=","packets":1},"node":"spark-afae","packetPos":[-78363,831596],"packetRange":{"gte":1787499965279,"lte":1787499965279},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["boP4dhKKS9jLmaPgskvPF3.."],"callidCnt":1,"contact":["\u003csip:16299777872@179.43.167.2:28637\u003e"],"contactCnt":1,"from":["\u003csip:16299777872@179.43.167.2\u003e;tag=2e06e824"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:8103908351673002@109.123.246.142:5060\u003e"],"toCnt":1,"user":["16299777872","8103908351673002"],"userCnt":2,"useragent":["FreePBX"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:28637;branch=z9hG4bK-524287-1---09807af7ab6cf441"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1060,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":28637},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1483025503420473"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:contabo-sponge-02-ts","proxy","contabo-sponge-02-ts"],"tagsCnt":3,"totDataBytes":1018} +{"@timestamp":1787493788928,"_id":"260823-hwdxexUrZbJH9bhwRrvwVC6z","_index":"arkime_sessions3-260823","client":{"bytes":1017},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78326],"firstPacket":1787492864625,"ipProtocol":17,"lastPacket":1787492864625,"length":0,"network":{"bytes":1059,"community_id":"1:jrUsKTKgSil/KMENbtyZEHhMXBQ=","packets":1},"node":"spark-afae","packetPos":[-78326,2994486],"packetRange":{"gte":1787492864625,"lte":1787492864625},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["alKf9MXenRhv0rofBcj6ux.."],"callidCnt":1,"contact":["\u003csip:17168465496@179.43.167.2:27272\u003e"],"contactCnt":1,"from":["\u003csip:17168465496@179.43.167.2\u003e;tag=1bb09932"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:0003908351673002@159.195.21.150:5060\u003e"],"toCnt":1,"user":["17168465496","0003908351673002"],"userCnt":2,"useragent":["snomD765"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:27272;branch=z9hG4bK-524287-1---d6f59ed437fdd003"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1059,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":27272},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[54],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["153592705797692"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"totDataBytes":1017} +{"@timestamp":1787488371717,"_id":"260823-n-R7dSXjpH1C_6AvvLZ9HqVl","_index":"arkime_sessions3-260823","client":{"bytes":1021},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78294],"firstPacket":1787487718645,"ipProtocol":17,"lastPacket":1787487718645,"length":0,"network":{"bytes":1063,"community_id":"1:fkJdTHj2U975DaBf1Um0R7B4dCU=","packets":1},"node":"spark-afae","packetPos":[-78294,1103135],"packetRange":{"gte":1787487718645,"lte":1787487718645},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["4UqGAZJF2I2o8Y0DxzKLI0.."],"callidCnt":1,"contact":["\u003csip:16563628947@179.43.167.2:27272\u003e"],"contactCnt":1,"from":["\u003csip:16563628947@179.43.167.2\u003e;tag=5d6340ee"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:0003908351673002@38.54.2.209:5060\u003e"],"toCnt":1,"user":["16563628947","0003908351673002"],"userCnt":2,"useragent":["Cisco/SPA303-7.6.2"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:27272;branch=z9hG4bK-524287-1---76fd40570ba2c61f"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1063,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":27272},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1926574189609429"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1021} +{"@timestamp":1787486568760,"_id":"260823--4984p4xGnNNtr-vLC1wBKwd","_index":"arkime_sessions3-260823","client":{"bytes":1025},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78283],"firstPacket":1787485479786,"ipProtocol":17,"lastPacket":1787485479786,"length":0,"network":{"bytes":1067,"community_id":"1:cFPme/WCtCgQXbE5bKPznTcQ1GE=","packets":1},"node":"spark-afae","packetPos":[-78283,225288],"packetRange":{"gte":1787485479786,"lte":1787485479786},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["gYIEI1qOqZWRVKAtkuwLYs.."],"callidCnt":1,"contact":["\u003csip:16299777872@179.43.167.2:27272\u003e"],"contactCnt":1,"from":["\u003csip:16299777872@179.43.167.2\u003e;tag=058f579f"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:0003908351673002@109.123.246.142:5060\u003e"],"toCnt":1,"user":["16299777872","0003908351673002"],"userCnt":2,"useragent":["Linksys SPA942"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:27272;branch=z9hG4bK-524287-1---65776144ca88d929"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1067,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":27272},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["2251761002148449"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["proxy","sensor:contabo-sponge-02-ts","contabo-sponge-02-ts"],"tagsCnt":3,"totDataBytes":1025} +{"@timestamp":1787479602023,"_id":"260823-fAcbDRRh9hpJUbHF8fukNzj8","_index":"arkime_sessions3-260823","client":{"bytes":1024},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78246],"firstPacket":1787478371147,"ipProtocol":17,"lastPacket":1787478371147,"length":0,"network":{"bytes":1066,"community_id":"1:sG63/uE5yP7ylYgBE4ze382KAyA=","packets":1},"node":"spark-afae","packetPos":[-78246,378001],"packetRange":{"gte":1787478371147,"lte":1787478371147},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["sW5djJIfZKufWvtpWA0AeQ.."],"callidCnt":1,"contact":["\u003csip:17168465496@179.43.167.2:20344\u003e"],"contactCnt":1,"from":["\u003csip:17168465496@179.43.167.2\u003e;tag=fc030f58"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:98103908351673002@159.195.21.150:5060\u003e"],"toCnt":1,"user":["98103908351673002","17168465496"],"userCnt":2,"useragent":["Cisco CP-8841"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:20344;branch=z9hG4bK-524287-1---d14cb21ea4b45081"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1066,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":20344},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[54],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["916483871438286"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["netcup-ts","honeypot","sensor:netcup-ts"],"tagsCnt":3,"totDataBytes":1024} +{"@timestamp":1787475362805,"_id":"260823-_uK-ih-YJBpNBaLkJ9YuYPOr","_index":"arkime_sessions3-260823","client":{"bytes":1020},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78222],"firstPacket":1787474598635,"ipProtocol":17,"lastPacket":1787474598635,"length":0,"network":{"bytes":1062,"community_id":"1:hX9PDah5LpycplLjbBWZZ0i9dFE=","packets":1},"node":"spark-afae","packetPos":[-78222,18756504],"packetRange":{"gte":1787474598635,"lte":1787474598635},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["QgdpxkURuefV0hMWu9vDBw.."],"callidCnt":1,"contact":["\u003csip:16724692132@179.43.167.2:20344\u003e"],"contactCnt":1,"from":["\u003csip:16724692132@179.43.167.2\u003e;tag=af350d5d"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:98103908351673002@217.15.163.226:5060\u003e"],"toCnt":1,"user":["98103908351673002","16724692132"],"userCnt":2,"useragent":["Fanvil X6"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:20344;branch=z9hG4bK-524287-1---90bde41471b7cd2f"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1062,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":20344},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1883145559022551"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:contabo-sponge-01-ts","contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"totDataBytes":1020} +{"@timestamp":1787472045263,"_id":"260823-544I6izZB7BOa4rETLTuRPvK","_index":"arkime_sessions3-260823","client":{"bytes":1019},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78203],"firstPacket":1787470975441,"ipProtocol":17,"lastPacket":1787470975441,"length":0,"network":{"bytes":1061,"community_id":"1:4Of7+8tStB24jI+NnJJCPmm6qEk=","packets":1},"node":"spark-afae","packetPos":[-78203,14223],"packetRange":{"gte":1787470975441,"lte":1787470975441},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["avvga2l9AINvlRZLTt2Bt4.."],"callidCnt":1,"contact":["\u003csip:16299777872@179.43.167.2:20344\u003e"],"contactCnt":1,"from":["\u003csip:16299777872@179.43.167.2\u003e;tag=f825e816"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:98103908351673002@109.123.246.142:5060\u003e"],"toCnt":1,"user":["16299777872","98103908351673002"],"userCnt":2,"useragent":["Twilio"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:20344;branch=z9hG4bK-524287-1---186b6fc4f11b6b20"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1061,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":20344},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["2176268649652169"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:contabo-sponge-02-ts","proxy","contabo-sponge-02-ts"],"tagsCnt":3,"totDataBytes":1019} +{"@timestamp":1787465095947,"_id":"260823-b45VpzKtKr5A8pIsgBACR7cZ","_index":"arkime_sessions3-260823","client":{"bytes":1021},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78166],"firstPacket":1787463863429,"ipProtocol":17,"lastPacket":1787463863429,"length":0,"network":{"bytes":1063,"community_id":"1:bkMThsF4Csn959SRyhArO4dnjCA=","packets":1},"node":"spark-afae","packetPos":[-78166,78693],"packetRange":{"gte":1787463863429,"lte":1787463863429},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["vyYAiMFKBeFX6gbq8oUY5G.."],"callidCnt":1,"contact":["\u003csip:17168465496@179.43.167.2:23387\u003e"],"contactCnt":1,"from":["\u003csip:17168465496@179.43.167.2\u003e;tag=b07d775c"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:9003908351673002@159.195.21.150:5060\u003e"],"toCnt":1,"user":["9003908351673002","17168465496"],"userCnt":2,"useragent":["Yealink W52P"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:23387;branch=z9hG4bK-524287-1---534b11b03a4c28b2"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1063,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":23387},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[54],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["2125787743185204"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"totDataBytes":1021} +{"@timestamp":1787460885374,"_id":"260823-JeGYMbNLqSJAyJ0eh127NPtX","_index":"arkime_sessions3-260823","client":{"bytes":1034},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78142],"firstPacket":1787460093004,"ipProtocol":17,"lastPacket":1787460093004,"length":0,"network":{"bytes":1076,"community_id":"1:gxtf09a+SSVghf7JwD7qZBu7deQ=","packets":1},"node":"spark-afae","packetPos":[-78142,3458590],"packetRange":{"gte":1787460093004,"lte":1787460093004},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["jGFtrr9ueIjIrUfoX98OEq.."],"callidCnt":1,"contact":["\u003csip:16724692132@179.43.167.2:23387\u003e"],"contactCnt":1,"from":["\u003csip:16724692132@179.43.167.2\u003e;tag=fe868f86"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:9003908351673002@217.15.163.226:5060\u003e"],"toCnt":1,"user":["9003908351673002","16724692132"],"userCnt":2,"useragent":["Groundwire/4.1.1 (iPhone)"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:23387;branch=z9hG4bK-524287-1---202f5d24e7cf3904"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1076,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":23387},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1427364544492463"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["honeypot","sensor:contabo-sponge-01-ts","contabo-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1034} +{"@timestamp":1787459381801,"_id":"260823-7-BmVSdErC9B7aGPzPLMTFSp","_index":"arkime_sessions3-260823","client":{"bytes":1013},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78134],"firstPacket":1787458716094,"ipProtocol":17,"lastPacket":1787458716094,"length":0,"network":{"bytes":1055,"community_id":"1:BPPB6He510dg1MD0v8fJXCdeePA=","packets":1},"node":"spark-afae","packetPos":[-78134,630370],"packetRange":{"gte":1787458716094,"lte":1787458716094},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["a1Ck3xrk1jz0S4ai5ycgii.."],"callidCnt":1,"contact":["\u003csip:16563628947@179.43.167.2:23387\u003e"],"contactCnt":1,"from":["\u003csip:16563628947@179.43.167.2\u003e;tag=af25a6b2"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:9003908351673002@38.54.2.209:5060\u003e"],"toCnt":1,"user":["16563628947","9003908351673002"],"userCnt":2,"useragent":["Avaya J169"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:23387;branch=z9hG4bK-524287-1---bd1de1904466e8d6"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1055,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":23387},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1251584431864523"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1013} +{"@timestamp":1787457569346,"_id":"260823-7I076Rl65YVGa5A3gckBNSU5","_index":"arkime_sessions3-260823","client":{"bytes":1021},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78123],"firstPacket":1787456473372,"ipProtocol":17,"lastPacket":1787456473372,"length":0,"network":{"bytes":1063,"community_id":"1:8URTeV8ZORkSKhIqHgpBLT41ky8=","packets":1},"node":"spark-afae","packetPos":[-78123,28429],"packetRange":{"gte":1787456473372,"lte":1787456473372},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["DjfrVZjmxZsBKGmF3XO1lZ.."],"callidCnt":1,"contact":["\u003csip:16299777872@179.43.167.2:23387\u003e"],"contactCnt":1,"from":["\u003csip:16299777872@179.43.167.2\u003e;tag=4defa540"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:9003908351673002@109.123.246.142:5060\u003e"],"toCnt":1,"user":["16299777872","9003908351673002"],"userCnt":2,"useragent":["Telnyx SIP"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:23387;branch=z9hG4bK-524287-1---7b73ac2585004751"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1063,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":23387},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["474541173497043"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["proxy","sensor:contabo-sponge-02-ts","contabo-sponge-02-ts"],"tagsCnt":3,"totDataBytes":1021} +{"@timestamp":1787449717113,"_id":"260823-qS7tg89oMetGY4fiWqt7Mz74","_index":"arkime_sessions3-260823","client":{"bytes":1018},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78080],"firstPacket":1787449373649,"ipProtocol":17,"lastPacket":1787449373649,"length":0,"network":{"bytes":1060,"community_id":"1:COm1GLENSoaTSgjSSPOx7ZT4Zss=","packets":1},"node":"spark-afae","packetPos":[-78080,3519315],"packetRange":{"gte":1787449373649,"lte":1787449373649},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["5MG3Q6fL113agGy6U7voJL.."],"callidCnt":1,"contact":["\u003csip:17168465496@179.43.167.2:27778\u003e"],"contactCnt":1,"from":["\u003csip:17168465496@179.43.167.2\u003e;tag=9ff7c0c8"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:3908351673002@159.195.21.150:5060\u003e"],"toCnt":1,"user":["3908351673002","17168465496"],"userCnt":2,"useragent":["Polycom VVX 301"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:27778;branch=z9hG4bK-524287-1---2714313eaf3ae0f9"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1060,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":27778},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[54],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1663626691475017"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"totDataBytes":1018} +{"@timestamp":1787446403040,"_id":"260823-S9-UOFHc-EZE15kDpF_y2zV4","_index":"arkime_sessions3-260823","client":{"bytes":1009},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":5060},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78061],"firstPacket":1787445613723,"ipProtocol":17,"lastPacket":1787445613723,"length":0,"network":{"bytes":1051,"community_id":"1:K2V2Jy3ubrKxxI/vMhRVO0Okqps=","packets":1},"node":"spark-afae","packetPos":[-78061,1614970],"packetRange":{"gte":1787445613723,"lte":1787445613723},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["7WFsOkjzytkWnzYcD2qNRJ.."],"callidCnt":1,"contact":["\u003csip:16724692132@179.43.167.2:27778\u003e"],"contactCnt":1,"from":["\u003csip:16724692132@179.43.167.2\u003e;tag=28461ecf"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:3908351673002@217.15.163.226:5060\u003e"],"toCnt":1,"user":["3908351673002","16724692132"],"userCnt":2,"useragent":["Fanvil"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:27778;branch=z9hG4bK-524287-1---891c1154cad95c36"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1051,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":27778},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1417368209197506"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["honeypot","sensor:contabo-sponge-01-ts","contabo-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1009} +{"@timestamp":1787445192746,"_id":"260823-H99YhR3T6KFHyLZGoHqty9_O","_index":"arkime_sessions3-260823","client":{"bytes":1004},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Private Layer INC"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Private Layer Inc"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":5060},"dstRIR":"ARIN","ethertype":2048,"fileId":[78054],"firstPacket":1787444245506,"ipProtocol":17,"lastPacket":1787444245506,"length":0,"network":{"bytes":1046,"community_id":"1:QcnPP3ffY75E7/ViClnFAo4CExw=","packets":1},"node":"spark-afae","packetPos":[-78054,702547],"packetRange":{"gte":1787444245506,"lte":1787444245506},"protocol":["udp","sip"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"sip":{"callid":["l5PRcCaAOpe2UsnKW7osbW.."],"callidCnt":1,"contact":["\u003csip:16563628947@179.43.167.2:27778\u003e"],"contactCnt":1,"from":["\u003csip:16563628947@179.43.167.2\u003e;tag=e2da7078"],"fromCnt":1,"method":["INVITE"],"methodCnt":1,"to":["\u003csip:3908351673002@38.54.2.209:5060\u003e"],"toCnt":1,"user":["16563628947","3908351673002"],"userCnt":2,"useragent":["snom360"],"useragentCnt":1,"via":["SIP/2.0/UDP 179.43.167.2:27778;branch=z9hG4bK-524287-1---8fd27433178a685c"],"viaCnt":1},"source":{"as":{"full":"AS51852 Private Layer INC","number":51852,"organization":{"name":"Private Layer INC"}},"bytes":1046,"geo":{"country_iso_code":"CH"},"ip":"179.43.167.2","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":27778},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"494e564954452073","srcRIR":"LACNIC","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1613407203178507"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["b05640bd-eb2a-4d9d-8d73-d14d7cbeb44a"],"signatureCnt":1,"signatureId":[1071802],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending sip traffic."],"intention":["unknown"],"intentionCnt":1,"name":["sip protocol"],"nameCnt":1},"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"totDataBytes":1004} diff --git a/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113641_4a246a7f.ndjson b/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113641_4a246a7f.ndjson new file mode 100644 index 0000000..5ae0c98 --- /dev/null +++ b/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113641_4a246a7f.ndjson @@ -0,0 +1,100 @@ +{"@timestamp":1788151895083,"_id":"260831-b8sos4_6_XJMjo9le_g3pm3q","_index":"arkime_sessions3-260831","client":{"bytes":261},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":345,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":5,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"15030300020250","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82288],"firstPacket":1788150641138,"initRTT":517,"ipProtocol":6,"lastPacket":1788150642298,"length":1160,"network":{"bytes":1010,"community_id":"1:/8pF2jwPkFPZBe1/ZMhuqU+QIB4=","packets":11},"node":"spark-afae","packetPos":[-82288,90774,90,180,82,343,82,89,82,0,0,0],"packetRange":{"gte":1788150641138,"lte":1788150642298},"protocol":["tcp","tls"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":7},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":665,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":6,"port":59462},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcPayload8":"1603010100010000","srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["311926472371616"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["contabo-sponge-02-ts","sensor:contabo-sponge-02-ts","proxy"],"tagsCnt":3,"tcp":{"ja4ls":"70_64_451","ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":5,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":669497660},"tls":{"ja3":["7c1e207beb00684bbbe144f1b0abe1d5"],"ja3Cnt":1,"ja3string":["771,52392-52393-49199-49200-49195-49196-49171-49161-49172-49162-156-157-47-53-49170-10-4867-4865-4866,5-10-11-13-65281-16-18-43-51,29-23-24-25,0"],"ja3stringCnt":1,"ja4":["t13i1909h2_9dc949149365_97f8aa674fd9"],"ja4Cnt":1,"ja4_r":["t13i1909h2_000a,002f,0035,009c,009d,1301,1302,1303,c009,c00a,c012,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,002b,0033,ff01_0804,0403,0807,0805,0806,0401,0501,0601,0503,0603,0201,0203"],"ja4_rCnt":1,"srcSessionId":["5d8f6e3e84ecb3102756cc8e260f76ba5268fc5df692da9e548a2e3c0ec46765"]},"totDataBytes":268} +{"@timestamp":1788147983883,"_id":"260831-8juBStNpGqdDiK1XQCOzdUNp","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":443},"dstRIR":"ARIN","ethertype":2048,"fileId":[82263],"firstPacket":1788147741756,"ipProtocol":6,"lastPacket":1788147741756,"length":0,"network":{"bytes":66,"community_id":"1:r0RGyh+rNI0g5vZSkAY7j6uxPDA=","packets":1},"node":"spark-afae","packetPos":[-82263,513221],"packetRange":{"gte":1788147741756,"lte":1788147741756},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":55362},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"tags":["bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3438602577},"totDataBytes":0} +{"@timestamp":1788147976304,"_id":"260831-GMvU6zBkWOpJaaC0LrlLYIwH","_index":"arkime_sessions3-260831","client":{"bytes":261},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":345,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":5,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"15030300020250","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82264],"firstPacket":1788146893336,"initRTT":589,"ipProtocol":6,"lastPacket":1788146894852,"length":1516,"network":{"bytes":1084,"community_id":"1:S7cYxStXzLMVEZWmLXqg3+wNs9o=","packets":12},"node":"spark-afae","packetPos":[-82264,289955,90,2554,1772,82,343,82,89,82,0,0,0],"packetRange":{"gte":1788146893336,"lte":1788146894852},"protocol":["tls","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":7},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":739,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":7,"port":48942},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcPayload8":"1603010100010000","srcRIR":"RIPE","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1443912164571305"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["contabo-sponge-01-ts","sensor:contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":5,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":2,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2999751579},"tls":{"ja3":["7c1e207beb00684bbbe144f1b0abe1d5"],"ja3Cnt":1,"ja3string":["771,52392-52393-49199-49200-49195-49196-49171-49161-49172-49162-156-157-47-53-49170-10-4867-4865-4866,5-10-11-13-65281-16-18-43-51,29-23-24-25,0"],"ja3stringCnt":1,"ja4":["t13i1909h2_9dc949149365_97f8aa674fd9"],"ja4Cnt":1,"ja4_r":["t13i1909h2_000a,002f,0035,009c,009d,1301,1302,1303,c009,c00a,c012,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,002b,0033,ff01_0804,0403,0807,0805,0806,0401,0501,0601,0503,0603,0201,0203"],"ja4_rCnt":1,"srcSessionId":["116fdd23cdc2eabe26270380a5ca59a24f9fc8aac1decdff8c569c0970418f83"]},"totDataBytes":268} +{"@timestamp":1788145253446,"_id":"260831-wMqgNi8v_5dAvYtvcBQ64bbK","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":443},"dstRIR":"RIPE","ethertype":2048,"fileId":[82243],"firstPacket":1788144557944,"ipProtocol":6,"lastPacket":1788144557944,"length":0,"network":{"bytes":66,"community_id":"1:WstRldGNl/Tses71qOYJq/i5Msc=","packets":1},"node":"spark-afae","packetPos":[-82243,221487],"packetRange":{"gte":1788144557944,"lte":1788144557944},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":1,"port":57465},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"RIPE","srcTTL":[56],"srcTTLCnt":1,"tags":["sensor:sponge-01-ts","sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":645996698},"totDataBytes":0} +{"@timestamp":1788143740278,"_id":"260831-n8odzpCyrqxDYIE5KuKGUsmn","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":66,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82233],"firstPacket":1788143085566,"ipProtocol":6,"lastPacket":1788143086653,"length":1087,"network":{"bytes":192,"community_id":"1:EfS2EPHz57ioflRkIRbQeONlP9w=","packets":3},"node":"spark-afae","packetPos":[-82233,173103,82,164],"packetRange":{"gte":1788143085566,"lte":1788143086653},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":126,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":2,"port":34967},"srcOui":["Grand Junction Networks, Inc.","Arista Networks"],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"tags":["proxy","sensor:contabo-sponge-02-ts","contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":672423617},"totDataBytes":0} +{"@timestamp":1788142532846,"_id":"260831-LDtVIBO8Jr1Bmo8tRUqqfmhE","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":66,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82226],"firstPacket":1788141346664,"ipProtocol":6,"lastPacket":1788141347842,"length":1178,"network":{"bytes":192,"community_id":"1:X05Jfot6WybiZGSlXeYgetYpniM=","packets":3},"node":"spark-afae","packetPos":[-82226,133709,82,1798],"packetRange":{"gte":1788141346664,"lte":1788141347842},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":126,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":2,"port":33464},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[56],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1698696913},"totDataBytes":0} +{"@timestamp":1788140393682,"_id":"260831-Usp8AoYm2ZdHqaPNhcCdp8rI","_index":"arkime_sessions3-260831","client":{"bytes":261},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":441,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":443},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82212],"firstPacket":1788139583711,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"md5":["6196dba52703776af2e6593f772ed7ce"],"md5Cnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["19b843cc92cb12aa314bb3c3913b2feeb852e85969bf06cb9d096931bfda34ba"],"sha256Cnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":607,"ipProtocol":6,"lastPacket":1788139585206,"length":1495,"network":{"bytes":1180,"community_id":"1:iUpkP9W5aHLyOWKLKP18rExpW7c=","packets":12},"node":"spark-afae","packetPos":[-82212,3740410,90,860,320,82,343,82,185,82,0,0,0],"packetRange":{"gte":1788139583711,"lte":1788139585206},"protocol":["tcp","tls","http"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":739,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":7,"port":50320},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"1603010100010000","srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["2211464182965309"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":5,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":2,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3120997093},"tls":{"ja3":["7c1e207beb00684bbbe144f1b0abe1d5"],"ja3Cnt":1,"ja3string":["771,52392-52393-49199-49200-49195-49196-49171-49161-49172-49162-156-157-47-53-49170-10-4867-4865-4866,5-10-11-13-65281-16-18-43-51,29-23-24-25,0"],"ja3stringCnt":1,"ja4":["t13i1909h2_9dc949149365_97f8aa674fd9"],"ja4Cnt":1,"ja4_r":["t13i1909h2_000a,002f,0035,009c,009d,1301,1302,1303,c009,c00a,c012,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,002b,0033,ff01_0804,0403,0807,0805,0806,0401,0501,0601,0503,0603,0201,0203"],"ja4_rCnt":1,"srcSessionId":["72da08838773043261ad10b1b9ef56a58a81a174dc7d4f3e6019feda8d545d90"]},"totDataBytes":364} +{"@timestamp":1788138586359,"_id":"260831-qDrPUkEGsN5C4pu3PHdifEV_","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":66,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82200],"firstPacket":1788137940617,"ipProtocol":6,"lastPacket":1788137941790,"length":1173,"network":{"bytes":186,"community_id":"1:lT8//AtXQuciWqv23BUfR+/3tsY=","packets":3},"node":"spark-afae","packetPos":[-82200,2311967,82,584],"packetRange":{"gte":1788137940617,"lte":1788137941790},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":120,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":37392},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["honeypot","sensor:frantech-ts","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1400_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2216535769},"totDataBytes":0} +{"@timestamp":1788137386515,"_id":"260831-j0RdJyVQQ9NI7pD-QNYEnlOo","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":443},"dstRIR":"ARIN","ethertype":2048,"fileId":[82192],"firstPacket":1788137014257,"ipProtocol":6,"lastPacket":1788137014257,"length":0,"network":{"bytes":66,"community_id":"1:6JXV7nO2M8+Xr+nbGq9jCmhtSIw=","packets":1},"node":"spark-afae","packetPos":[-82192,415772],"packetRange":{"gte":1788137014257,"lte":1788137014257},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":1,"port":46854},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["sensor:netcup-ts","honeypot","netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1824310592},"totDataBytes":0} +{"@timestamp":1787932705566,"_id":"260828-LjxoBwhXIYpBBa00Umu--72T","_index":"arkime_sessions3-260828","client":{"bytes":261},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":441,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":443},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[80820],"firstPacket":1787931973293,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"md5":["6196dba52703776af2e6593f772ed7ce"],"md5Cnt":1,"responseHeader":["connection","content-type"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["19b843cc92cb12aa314bb3c3913b2feeb852e85969bf06cb9d096931bfda34ba"],"sha256Cnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":599,"ipProtocol":6,"lastPacket":1787931974771,"length":1478,"network":{"bytes":1192,"community_id":"1:XjgJKmaQcyj1xcPNijj+MO1byg8=","packets":12},"node":"spark-afae","packetPos":[-80820,5574804,90,13691,3737,82,343,82,185,4680,94,418,82],"packetRange":{"gte":1787931973293,"lte":1787931974771},"protocol":["http","tls","tcp"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":751,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":7,"port":53378},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"1603010100010000","srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1541417280453656"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":5,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":2,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3878915599},"tls":{"ja3":["7c1e207beb00684bbbe144f1b0abe1d5"],"ja3Cnt":1,"ja3string":["771,52392-52393-49199-49200-49195-49196-49171-49161-49172-49162-156-157-47-53-49170-10-4867-4865-4866,5-10-11-13-65281-16-18-43-51,29-23-24-25,0"],"ja3stringCnt":1,"ja4":["t13i1909h2_9dc949149365_97f8aa674fd9"],"ja4Cnt":1,"ja4_r":["t13i1909h2_000a,002f,0035,009c,009d,1301,1302,1303,c009,c00a,c012,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,002b,0033,ff01_0804,0403,0807,0805,0806,0401,0501,0601,0503,0603,0201,0203"],"ja4_rCnt":1,"srcSessionId":["fd8bd6da22de1932d574a7f59752bc8fbe5090533f8b1faf31e8eb24693bc13f"]},"totDataBytes":364} +{"@timestamp":1787928466724,"_id":"260828-ebTw46KTDMxKmqhFb39CaBmA","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[80790],"firstPacket":1787927815005,"ipProtocol":6,"lastPacket":1787927815005,"length":0,"network":{"bytes":66,"community_id":"1:MBWf9lyNxx5pOf7DPvj475cedEI=","packets":1},"node":"spark-afae","packetPos":[-80790,1441017],"packetRange":{"gte":1787927815005,"lte":1787927815005},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":46158},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"tags":["proxy","sensor:contabo-sponge-02-ts","contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":85030270},"totDataBytes":0} +{"@timestamp":1787926033629,"_id":"260828-9Bzylnv8AkNIJqDxfoRaXhZ6","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":66,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[80763],"firstPacket":1787925657873,"ipProtocol":6,"lastPacket":1787925659100,"length":1227,"network":{"bytes":186,"community_id":"1:78ahmVAFioDCNMVhKEHZpmuLRoE=","packets":3},"node":"spark-afae","packetPos":[-80763,3652799,82,16489],"packetRange":{"gte":1787925657873,"lte":1787925659100},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":120,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":46668},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1400_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3068274095},"totDataBytes":0} +{"@timestamp":1787926033920,"_id":"260828-IbQR78oQM1hNtrd-Ee7glrt7","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":443},"dstRIR":"RIPE","ethertype":2048,"fileId":[80762],"firstPacket":1787925567945,"ipProtocol":6,"lastPacket":1787925567945,"length":0,"network":{"bytes":66,"community_id":"1:tcN43CdySNJ3w7+i20tfhzxBacY=","packets":1},"node":"spark-afae","packetPos":[-80762,480296],"packetRange":{"gte":1787925567945,"lte":1787925567945},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":1,"port":59742},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"RIPE","srcTTL":[56],"srcTTLCnt":1,"tags":["sensor:sponge-01-ts","honeypot","sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1136315664},"totDataBytes":0} +{"@timestamp":1787927609778,"_id":"260828-4Tui9Oom8yxGAKkyV_HYT-od","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":443},"dstRIR":"ARIN","ethertype":2048,"fileId":[80781],"firstPacket":1787922391017,"ipProtocol":6,"lastPacket":1787922391017,"length":0,"network":{"bytes":66,"community_id":"1:++nXVRJLE1LovamCNcL3lVuwGWY=","packets":1},"node":"spark-afae","packetPos":[-80781,1350518634],"packetRange":{"gte":1787922391017,"lte":1787922391017},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":1,"port":37179},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3906101889},"totDataBytes":0} +{"@timestamp":1787920296924,"_id":"260828-JBxxZpaJUgRLF4v9yvNca1Mu","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":443},"dstRIR":"ARIN","ethertype":2048,"fileId":[80727],"firstPacket":1787919343199,"ipProtocol":6,"lastPacket":1787919343199,"length":0,"network":{"bytes":66,"community_id":"1:YZVrI3J3fu0kNTHAiXdHvCLibTw=","packets":1},"node":"spark-afae","packetPos":[-80727,510024],"packetRange":{"gte":1787919343199,"lte":1787919343199},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":54462},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":843146114},"totDataBytes":0} +{"@timestamp":1787920296653,"_id":"260828-s7PDi8Gr0vlOEpnzfHF9GwIr","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[80726],"firstPacket":1787919154493,"ipProtocol":6,"lastPacket":1787919154493,"length":0,"network":{"bytes":66,"community_id":"1:okc/hQIMZRKfQ21H9d2676u5QAU=","packets":1},"node":"spark-afae","packetPos":[-80726,489660],"packetRange":{"gte":1787919154493,"lte":1787919154493},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":60420},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[55],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":4119850335},"totDataBytes":0} +{"@timestamp":1787696078629,"_id":"260825-OaGLMUoFZd5AubrWZr0lyyxy","_index":"arkime_sessions3-260825","client":{"bytes":1046},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":1440,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":10,"port":22},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"5353482d312e3939","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79448],"firstPacket":1787695597495,"initRTT":15,"ipProtocol":6,"lastPacket":1787695597744,"length":249,"network":{"bytes":3088,"community_id":"1:1YQK630+aS5olPbDHRwUIT9Lcq8=","packets":19},"node":"spark-afae","packetPos":[-79448,948569,90,0,82,104,82,102,370,82,946,82,226,82,530,98,0,82,0,0],"packetRange":{"gte":1787695597495,"lte":1787695597744},"protocol":["tcp","ssh"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":772},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":1648,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":9,"port":41202},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcPayload8":"5353482d322e302d","srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"ssh":{"hassh":["e54ef3ec27fe1fea7ab64d3fa05359fd"],"hasshCnt":1,"hasshServer":["e24f4545013804fcb86089ffc93a0539"],"hasshServerCnt":1,"ja4ssh":["c16s16_c4s4_c3s4"],"ja4sshCnt":1,"version":["ssh-2.0-openssh_10.1","ssh-1.99-cisco-1.25"],"versionCnt":2},"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1565936703231496"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["537cee16-c4a9-45cd-baf1-75963ab7bdd2","GPL ATTACK SSH Connection Attempt"],"signatureCnt":2,"signatureId":[1080086,1000010],"signatureIdCnt":2},"tag":{"block":["true"],"blockCnt":1,"category":["activity"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to negotiate an ssh session."],"intention":["suspicious"],"intentionCnt":1,"name":["ssh connection attempt"],"nameCnt":1},"tags":["sensor:contabo-sponge-02-ts","proxy","contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4l":"15749_49_15616","ja4ls":"186_64_36168","ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":7,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":8,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":421439747},"totDataBytes":1818} +{"@timestamp":1787677323195,"_id":"260825-C_1RLXUyipRPx45cpb-d-Pae","_index":"arkime_sessions3-260825","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":66,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":1,"port":22},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79344],"firstPacket":1787676981065,"ipProtocol":6,"lastPacket":1787676981100,"length":35,"network":{"bytes":192,"community_id":"1:aJHm3UA7W0Q1ztigOK682r0wVek=","packets":3},"node":"spark-afae","packetPos":[-79344,994931,82,0],"packetRange":{"gte":1787676981065,"lte":1787676981100},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":126,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":2,"port":53802},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1407704947676888"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["GPL ATTACK SSH Connection Attempt"],"signatureCnt":1,"signatureId":[1000010],"signatureIdCnt":1},"tags":["proxy","sensor:contabo-sponge-02-ts","contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":4107802518},"totDataBytes":0} +{"@timestamp":1787675214885,"_id":"260825-yfysvTQ2XI5Lz4UnAM7eEvgx","_index":"arkime_sessions3-260825","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":74,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":1,"port":22},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79333],"firstPacket":1787674706967,"ipProtocol":6,"lastPacket":1787674714059,"length":7092,"network":{"bytes":370,"community_id":"1:m0AGzx10e/qkD6BPsgMOohYc8WE=","packets":5},"node":"spark-afae","packetPos":[-79333,3430013,90,983,2779,2092],"packetRange":{"gte":1787674706967,"lte":1787674714059},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":296,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":4,"port":39992},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["778178320338725"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["GPL ATTACK SSH Connection Attempt"],"signatureCnt":1,"signatureId":[1000010],"signatureIdCnt":1},"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":4,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3779311209},"totDataBytes":0} +{"@timestamp":1787674915836,"_id":"260825-gp9ppIRphh9FWZpA3YeFw3gu","_index":"arkime_sessions3-260825","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":66,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":22},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79331],"firstPacket":1787674195889,"ipProtocol":6,"lastPacket":1787674195889,"length":0,"network":{"bytes":132,"community_id":"1:LXa6hGgP/DV4+wbrSZdqk5lVDWE=","packets":2},"node":"spark-afae","packetPos":[-79331,977508,82],"packetRange":{"gte":1787674195889,"lte":1787674195889},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":1,"port":53684},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1007192092678105"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["GPL ATTACK SSH Connection Attempt"],"signatureCnt":1,"signatureId":[1000010],"signatureIdCnt":1},"tags":["frantech-ts","honeypot","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1400_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2718085108},"totDataBytes":0} +{"@timestamp":1787673111262,"_id":"260825-Vp-bg_K2pLNPJ4oX0ObmlcTt","_index":"arkime_sessions3-260825","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":74,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":1,"port":22},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79320],"firstPacket":1787671987786,"ipProtocol":6,"lastPacket":1787671994901,"length":7115,"network":{"bytes":370,"community_id":"1:JwyCkQPYEPRFlzIkhH3mj6KmjHY=","packets":5},"node":"spark-afae","packetPos":[-79320,5703487,90,1732,2144,3832],"packetRange":{"gte":1787671987786,"lte":1787671994901},"protocol":["tcp"],"protocolCnt":1,"rootId":"260825-Vp-bg_K2pLNPJ4oX0ObmlcTt","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":296,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7","00:00:5e:00:01:96"],"mac-cnt":2,"packets":4,"port":46918},"srcOui":["ICANN, IANA Department","Juniper Networks"],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["846235979792841"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["GPL ATTACK SSH Connection Attempt"],"signatureCnt":1,"signatureId":[1000010],"signatureIdCnt":1},"tags":["honeypot","sensor:netcup-ts","netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["43440_2-4-8-1-3_1460_11"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":4,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3800702334},"totDataBytes":0} +{"@timestamp":1787672211441,"_id":"260825-W_xnHMJGGodNGqbUIcQJGwUf","_index":"arkime_sessions3-260825","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":66,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":1,"port":22},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79316],"firstPacket":1787671517658,"ipProtocol":6,"lastPacket":1787671517658,"length":0,"network":{"bytes":132,"community_id":"1:CfMj85SspCJY0ZSxoAVZMUsRyGM=","packets":2},"node":"spark-afae","packetPos":[-79316,1519613,82],"packetRange":{"gte":1787671517658,"lte":1787671517658},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":1,"port":42788},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1422430686929253"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["GPL ATTACK SSH Connection Attempt"],"signatureCnt":1,"signatureId":[1000010],"signatureIdCnt":1},"tags":["sensor:contabo-sponge-01-ts","contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3122990401},"totDataBytes":0} +{"@timestamp":1787671002118,"_id":"260825-L_wsU-Zk8jxAJYaQC0no8kVn","_index":"arkime_sessions3-260825","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":1,"port":22},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79310],"firstPacket":1787669811788,"ipProtocol":6,"lastPacket":1787669812908,"length":1120,"network":{"bytes":186,"community_id":"1:8NEncjtqmEcJv0e6zSFz2swKiJg=","packets":3},"node":"spark-afae","packetPos":[-79310,312785,82,1908],"packetRange":{"gte":1787669811788,"lte":1787669812908},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":120,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":2,"port":33232},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["853099268669534"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["GPL ATTACK SSH Connection Attempt"],"signatureCnt":1,"signatureId":[1000010],"signatureIdCnt":1},"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3072372477},"totDataBytes":0} +{"@timestamp":1787669483647,"_id":"260825-CZ-pI-vAQeRAxoCRrAYqykg0","_index":"arkime_sessions3-260825","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":66,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":1,"port":22},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79300],"firstPacket":1787668814565,"ipProtocol":6,"lastPacket":1787668815626,"length":1061,"network":{"bytes":188,"community_id":"1:7sKsVqykPA/Vp8FW/p0bQzKZseQ=","packets":3},"node":"spark-afae","packetPos":[-79300,2673103,82,672],"packetRange":{"gte":1787668814565,"lte":1787668815626},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":122,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["00:00:5e:00:01:96","bc:0f:fe:3d:a3:a7"],"mac-cnt":2,"packets":2,"port":58431},"srcOui":["ICANN, IANA Department","Juniper Networks"],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1865678559926482"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["GPL ATTACK SSH Connection Attempt"],"signatureCnt":1,"signatureId":[1000010],"signatureIdCnt":1},"tags":["netcup-ts","honeypot","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["42340_2-1-1-4-1-3_1460_11"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3184888463},"totDataBytes":0} +{"@timestamp":1787657089993,"_id":"260825-Wvpnx4-_HehF77NR8p5n5s2q","_index":"arkime_sessions3-260825","client":{"bytes":215},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":8443},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79232],"firstPacket":1787655967394,"http":{"bodyMagic":["application/json","text/html"],"bodyMagicCnt":2,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["209.141.62.110","209.141.62.110:8443"],"hostCnt":2,"ja4h":["po11nn050000_928c23def140_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["po11nn050000_Host,User-Agent,Content-Length,Cache-Control,Content-Type__"],"ja4h_rCnt":1,"md5":["7defa9fa40b1688dbb6420272b7aed25","0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":2,"method":["POST"],"method-POST":1,"methodCnt":1,"path":["/api/checkin"],"pathCnt":1,"request-cache-control":["no-cache"],"request-cache-controlCnt":1,"requestBody":["{\"hostname\":\"WIN-DESKTOP\"}"],"requestHeader":["cache-control","content-type","user-agent","content-length","host"],"requestHeaderCnt":5,"requestHeaderField":["content-length","content-type"],"requestHeaderValue":["26","application/json"],"requestHeaderValueCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["server","connection","content-type","x-powered-by","date","content-length"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","tue, 25 aug 2026 11:06:09 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb","f95e5c5b12e743a1aa81c56d21d0886d82cec995621db3d71070a63f3d1c19bf"],"sha256Cnt":2,"statuscode":[200],"statuscodeCnt":1,"uri":["209.141.62.110:8443/api/checkin"],"uriCnt":1,"useragent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64)"],"useragentCnt":1},"initRTT":1115,"ipProtocol":6,"lastPacket":1787655969789,"length":2395,"network":{"bytes":1252,"community_id":"1:qMcEl09YqoMbj4cByv8j4vCRj9A=","packets":11},"node":"spark-afae","packetPos":[-79232,238632,90,446,884,82,297,82,369,82,0,0],"packetRange":{"gte":1787655967394,"lte":1787655969789},"protocol":["tcp","http"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":627,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":6,"port":55424},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"504f5354202f6170","srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1973814252816668"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","f00e21c3-4bf0-42eb-947f-491086bc0093"],"signatureCnt":2,"signatureId":[1031486,1083150],"signatureIdCnt":2},"tag":{"block":["false","true"],"blockCnt":2,"category":["protocol","activity"],"categoryCnt":2,"description":["ip addresses with this tag have been seen crawling http(s) servers around the internet.","ip addresses with this tag have been observed attempting to send linux commands commonly seen in exploits and proofs of concept (such as whoami, nohup, netcat, etc.)."],"intention":["unknown","suspicious"],"intentionCnt":2,"name":["web crawler","generic suspicious linux command in request"],"nameCnt":2},"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":2,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1653504548},"totDataBytes":502} +{"@timestamp":1787657089992,"_id":"260825-Wvqo54YLiMpH4ZRTZCy378BB","_index":"arkime_sessions3-260825","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":66,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":8443},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79232],"firstPacket":1787655966201,"ipProtocol":6,"lastPacket":1787655967384,"length":1183,"network":{"bytes":186,"community_id":"1:ULbRXanUY+yZxWb9g1oZjFe/kSA=","packets":3},"node":"spark-afae","packetPos":[-79232,237236,82,1244],"packetRange":{"gte":1787655966201,"lte":1787655967384},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":120,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":55350},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1400_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":986111929},"totDataBytes":0} +{"@timestamp":1787655580434,"_id":"260825-4Z2JzXnStttDMKX7OcJ3aVqD","_index":"arkime_sessions3-260825","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":8443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[79223],"firstPacket":1787655108643,"ipProtocol":6,"lastPacket":1787655108643,"length":0,"network":{"bytes":66,"community_id":"1:ZD6mqkIKN6Dtt9QMHBZ1pnwu4qE=","packets":1},"node":"spark-afae","packetPos":[-79223,1035056],"packetRange":{"gte":1787655108643,"lte":1787655108643},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":57690},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"tags":["proxy","contabo-sponge-02-ts","sensor:contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":707054047},"totDataBytes":0} +{"@timestamp":1787654974653,"_id":"260825-Dfq5Qn_emjpO7aMnZ_yhmLPn","_index":"arkime_sessions3-260825","client":{"bytes":215},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":625,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":5,"port":8443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79221],"firstPacket":1787653904451,"http":{"bodyMagic":["application/json","text/html"],"bodyMagicCnt":2,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["217.15.163.226","217.15.163.226:8443"],"hostCnt":2,"ja4h":["po11nn050000_928c23def140_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["po11nn050000_Host,User-Agent,Content-Length,Cache-Control,Content-Type__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc","7defa9fa40b1688dbb6420272b7aed25"],"md5Cnt":2,"method":["POST"],"method-POST":1,"methodCnt":1,"path":["/api/checkin"],"pathCnt":1,"request-cache-control":["no-cache"],"request-cache-controlCnt":1,"requestBody":["{\"hostname\":\"WIN-DESKTOP\"}"],"requestHeader":["content-type","user-agent","content-length","cache-control","host"],"requestHeaderCnt":5,"requestHeaderField":["content-length","content-type"],"requestHeaderValue":["26","application/json"],"requestHeaderValueCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["content-type","server","x-powered-by","content-length","connection","date"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","tue, 25 aug 2026 10:31:45 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["f95e5c5b12e743a1aa81c56d21d0886d82cec995621db3d71070a63f3d1c19bf","1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":2,"statuscode":[200],"statuscodeCnt":1,"uri":["217.15.163.226:8443/api/checkin"],"uriCnt":1,"useragent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64)"],"useragentCnt":1},"initRTT":610,"ipProtocol":6,"lastPacket":1787653905849,"length":1398,"network":{"bytes":1252,"community_id":"1:KrXzKo4RSRliTXYv91Ms2FQgOfE=","packets":11},"node":"spark-afae","packetPos":[-79221,2753,90,4000,416,82,297,82,369,434,82,0],"packetRange":{"gte":1787653904451,"lte":1787653905849},"protocol":["tcp","http"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":627,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":6,"port":45726},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcPayload8":"504f5354202f6170","srcRIR":"RIPE","srcTTL":[56],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["250698275706549"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","f00e21c3-4bf0-42eb-947f-491086bc0093"],"signatureCnt":2,"signatureId":[1031486,1083150],"signatureIdCnt":2},"tag":{"block":["false","true"],"blockCnt":2,"category":["protocol","activity"],"categoryCnt":2,"description":["ip addresses with this tag have been observed attempting to send linux commands commonly seen in exploits and proofs of concept (such as whoami, nohup, netcat, etc.).","ip addresses with this tag have been seen crawling http(s) servers around the internet."],"intention":["suspicious","unknown"],"intentionCnt":2,"name":["web crawler","generic suspicious linux command in request"],"nameCnt":2},"tags":["contabo-sponge-01-ts","sensor:contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":2,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":4226106946},"totDataBytes":502} +{"@timestamp":1787654974652,"_id":"260825-Dfpv6iyWZp5O8qi0Ed3No75H","_index":"arkime_sessions3-260825","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":66,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":1,"port":8443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79221],"firstPacket":1787653904224,"ipProtocol":6,"lastPacket":1787653904400,"length":176,"network":{"bytes":126,"community_id":"1:84Kmpwyq1t0Y3JvA9SDE79AjIII=","packets":2},"node":"spark-afae","packetPos":[-79221,2263,324],"packetRange":{"gte":1787653904224,"lte":1787653904400},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":60,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":1,"port":55239},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[55],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","sensor:contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":0,"syn-ack":1,"urg":0},"tcpseq":{"dst":2218113135},"totDataBytes":0} +{"@timestamp":1787654075733,"_id":"260825-7Pl597OpLr9JNpRJ60a7-fBV","_index":"arkime_sessions3-260825","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":66,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":1,"port":8443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79216],"firstPacket":1787653901149,"ipProtocol":6,"lastPacket":1787653901149,"length":0,"network":{"bytes":132,"community_id":"1:84Kmpwyq1t0Y3JvA9SDE79AjIII=","packets":2},"node":"spark-afae","packetPos":[-79216,3621344,82],"packetRange":{"gte":1787653901149,"lte":1787653901149},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":1,"port":55239},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[55],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","sensor:contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2317390842},"totDataBytes":0} +{"@timestamp":1787652271589,"_id":"260825-iZ3i7uoRtLBIObngSRYAxrOs","_index":"arkime_sessions3-260825","client":{"bytes":215},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":384,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":4,"port":8443},"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79205],"firstPacket":1787651164917,"http":{"bodyMagic":["application/json"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["159.195.21.150:8443","159.195.21.150"],"hostCnt":2,"ja4h":["po11nn050000_928c23def140_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["po11nn050000_Host,User-Agent,Content-Length,Cache-Control,Content-Type__"],"ja4h_rCnt":1,"md5":["7defa9fa40b1688dbb6420272b7aed25"],"md5Cnt":1,"method":["POST"],"method-POST":1,"methodCnt":1,"path":["/api/checkin"],"pathCnt":1,"request-cache-control":["no-cache"],"request-cache-controlCnt":1,"requestBody":["{\"hostname\":\"WIN-DESKTOP\"}"],"requestHeader":["host","content-type","content-length","cache-control","user-agent"],"requestHeaderCnt":5,"requestHeaderField":["content-length","content-type"],"requestHeaderValue":["26","application/json"],"requestHeaderValueCnt":2,"response-server":["SonicWall SMA 10.2.0.9-12sv"],"response-serverCnt":1,"responseHeader":["content-length","server","date"],"responseHeaderCnt":3,"responseHeaderField":["date","content-length"],"responseHeaderValue":["tue, 25 aug 2026 09:46:05 gmt","0"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["f95e5c5b12e743a1aa81c56d21d0886d82cec995621db3d71070a63f3d1c19bf"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["159.195.21.150:8443/api/checkin"],"uriCnt":1,"useragent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64)"],"useragentCnt":1},"initRTT":522,"ipProtocol":6,"lastPacket":1787651166025,"length":1108,"network":{"bytes":1003,"community_id":"1:8JuKPUzI1CbcY8av2qWyzx2RU74=","packets":10},"node":"spark-afae","packetPos":[-79205,154307,90,736,82,297,82,194,82,0,0],"packetRange":{"gte":1787651164917,"lte":1787651166025},"protocol":["tcp","http"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":112},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":619,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7","00:00:5e:00:01:96"],"mac-cnt":2,"packets":6,"port":53554},"srcOui":["Juniper Networks","ICANN, IANA Department"],"srcOuiCnt":2,"srcPayload8":"504f5354202f6170","srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1127900911151644"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","f00e21c3-4bf0-42eb-947f-491086bc0093"],"signatureCnt":2,"signatureId":[1031486,1083150],"signatureIdCnt":2},"tag":{"block":["false","true"],"blockCnt":2,"category":["activity","protocol"],"categoryCnt":2,"description":["ip addresses with this tag have been seen crawling http(s) servers around the internet.","ip addresses with this tag have been observed attempting to send linux commands commonly seen in exploits and proofs of concept (such as whoami, nohup, netcat, etc.)."],"intention":["suspicious","unknown"],"intentionCnt":2,"name":["web crawler","generic suspicious linux command in request"],"nameCnt":2},"tags":["sensor:netcup-ts","honeypot","netcup-ts"],"tagsCnt":3,"tcp":{"ja4ls":"42_64_tcp","ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["43440_2-4-8-1-3_1460_11"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1617113931},"totDataBytes":327} +{"@timestamp":1787652271589,"_id":"260825-iZ1UIlff3U1DpJCXr4pPgU6y","_index":"arkime_sessions3-260825","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":66,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":1,"port":8443},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79205],"firstPacket":1787651163819,"ipProtocol":6,"lastPacket":1787651164874,"length":1055,"network":{"bytes":188,"community_id":"1:f0XidMZ4pfa6EI6sN0hPIIurCzI=","packets":3},"node":"spark-afae","packetPos":[-79205,152771,82,1204],"packetRange":{"gte":1787651163819,"lte":1787651164874},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":122,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7","00:00:5e:00:01:96"],"mac-cnt":2,"packets":2,"port":50411},"srcOui":["Juniper Networks","ICANN, IANA Department"],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["sensor:netcup-ts","honeypot","netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["42340_2-1-1-4-1-3_1460_11"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3804982830},"totDataBytes":0} +{"@timestamp":1787648932644,"_id":"260825-PflS7Ya9GrNLAYf34-H3E-31","_index":"arkime_sessions3-260825","client":{"bytes":212},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":625,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":5,"port":8443},"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79185],"firstPacket":1787648581924,"http":{"bodyMagic":["text/html","application/json"],"bodyMagicCnt":2,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["38.54.2.209:8443","38.54.2.209"],"hostCnt":2,"ja4h":["po11nn050000_928c23def140_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["po11nn050000_Host,User-Agent,Content-Length,Cache-Control,Content-Type__"],"ja4h_rCnt":1,"md5":["7defa9fa40b1688dbb6420272b7aed25","0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":2,"method":["POST"],"method-POST":1,"methodCnt":1,"path":["/api/checkin"],"pathCnt":1,"request-cache-control":["no-cache"],"request-cache-controlCnt":1,"requestBody":["{\"hostname\":\"WIN-DESKTOP\"}"],"requestHeader":["content-type","content-length","user-agent","cache-control","host"],"requestHeaderCnt":5,"requestHeaderField":["content-length","content-type"],"requestHeaderValue":["26","application/json"],"requestHeaderValueCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["content-type","server","content-length","x-powered-by","connection","date"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","tue, 25 aug 2026 09:03:03 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["f95e5c5b12e743a1aa81c56d21d0886d82cec995621db3d71070a63f3d1c19bf","1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":2,"statuscode":[200],"statuscodeCnt":1,"uri":["38.54.2.209:8443/api/checkin"],"uriCnt":1,"useragent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64)"],"useragentCnt":1},"initRTT":564,"ipProtocol":6,"lastPacket":1787648583170,"length":1246,"network":{"bytes":1249,"community_id":"1:AAPagcaEkWSpEIcNwsQTHJTPMCc=","packets":11},"node":"spark-afae","packetPos":[-79185,1258356,90,1518,262,82,294,82,369,262,82,0],"packetRange":{"gte":1787648581924,"lte":1787648583170},"protocol":["tcp","http"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":624,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":6,"port":52780},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"504f5354202f6170","srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1438186099111504"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","f00e21c3-4bf0-42eb-947f-491086bc0093"],"signatureCnt":2,"signatureId":[1031486,1083150],"signatureIdCnt":2},"tag":{"block":["false","true"],"blockCnt":2,"category":["activity","protocol"],"categoryCnt":2,"description":["ip addresses with this tag have been seen crawling http(s) servers around the internet.","ip addresses with this tag have been observed attempting to send linux commands commonly seen in exploits and proofs of concept (such as whoami, nohup, netcat, etc.)."],"intention":["suspicious","unknown"],"intentionCnt":2,"name":["web crawler","generic suspicious linux command in request"],"nameCnt":2},"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":2,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":998693233},"totDataBytes":499} +{"@timestamp":1787648932590,"_id":"260825-Pfnt89xsnAtN4Lk6wvqTBowg","_index":"arkime_sessions3-260825","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":1,"port":8443},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79185],"firstPacket":1787648580759,"ipProtocol":6,"lastPacket":1787648581900,"length":1141,"network":{"bytes":186,"community_id":"1:Iuk2j2LQGB+8WOMCGDNO/F9LVlw=","packets":3},"node":"spark-afae","packetPos":[-79185,1253709,82,4495],"packetRange":{"gte":1787648580759,"lte":1787648581900},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":120,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":2,"port":39434},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":843891774},"totDataBytes":0} +{"@timestamp":1787601549150,"_id":"260824-8_ITWyVj_7JLyY2eumAsL3Ks","_index":"arkime_sessions3-260824","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":2222},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78923],"firstPacket":1787600976915,"ipProtocol":6,"lastPacket":1787600976915,"length":0,"network":{"bytes":66,"community_id":"1:mjuIGJO2TZ41pCmY7obUFWHPxjs=","packets":1},"node":"spark-afae","packetPos":[-78923,445441],"packetRange":{"gte":1787600976915,"lte":1787600976915},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":33685},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-02-ts","proxy","contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1808621043},"totDataBytes":0} +{"@timestamp":1787595532994,"_id":"260824-3JhxSPusil1JcrsweK91cMZr","_index":"arkime_sessions3-260824","client":{"bytes":952},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":1572,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":9,"port":2222},"dstPayload8":"5353482d322e302d","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78889],"firstPacket":1787595237087,"initRTT":517,"ipProtocol":6,"lastPacket":1787595238450,"length":1363,"network":{"bytes":3200,"community_id":"1:wBZv3rx47s98sY1TSNvcL4TBu6M=","packets":19},"node":"spark-afae","packetPos":[-78889,4021067,90,2648,764,82,106,2925,296,82,802,946,82,130,82,274,278,98,82,164],"packetRange":{"gte":1787595237087,"lte":1787595238450},"protocol":["ssh","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":970},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":1628,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7","00:00:5e:00:01:96"],"mac-cnt":2,"packets":10,"port":51608},"srcOui":["ICANN, IANA Department","Juniper Networks"],"srcOuiCnt":2,"srcPayload8":"5353482d322e302d","srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"ssh":{"hassh":["e54ef3ec27fe1fea7ab64d3fa05359fd"],"hasshCnt":1,"hasshServer":["41a85c886a9e9b845f0e69d68994492a"],"hasshServerCnt":1,"ja4ssh":["c16s16_c4s4_c3s3"],"ja4sshCnt":1,"version":["ssh-2.0-openssh_9.6p1 ubuntu-3ubuntu13.5","ssh-2.0-openssh_10.2p1"],"versionCnt":2},"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1501560102561150"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["537cee16-c4a9-45cd-baf1-75963ab7bdd2","b1859b91-92d5-48d2-b43d-bbfd09db964d"],"signatureCnt":2,"signatureId":[1080086,1031283],"signatureIdCnt":2},"tag":{"block":["true"],"blockCnt":1,"category":["activity"],"categoryCnt":1,"description":["ip addresses with this tag have been observed crawling the internet for ssh servers running on ports other than 22/tcp.","ip addresses with this tag have been observed attempting to negotiate an ssh session."],"intention":["suspicious"],"intentionCnt":1,"name":["ssh alternative port crawler","ssh connection attempt"],"nameCnt":2},"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4l":"517770_53_15742","ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["43440_2-4-8-1-3_1460_11"],"ja4tsCnt":1},"tcpflags":{"ack":6,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":8,"rst":0,"srcZero":0,"syn":2,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1930145605},"totDataBytes":1922} +{"@timestamp":1787595532965,"_id":"260824-3JhHdXkRRdVDIpKGYPHCDzEY","_index":"arkime_sessions3-260824","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":66,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":1,"port":2222},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78889],"firstPacket":1787595235949,"ipProtocol":6,"lastPacket":1787595237002,"length":1053,"network":{"bytes":188,"community_id":"1:Av/gcha36ZmwdMvAaWrTXqEKwoY=","packets":3},"node":"spark-afae","packetPos":[-78889,4017659,82,3164],"packetRange":{"gte":1787595235949,"lte":1787595237002},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":122,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7","00:00:5e:00:01:96"],"mac-cnt":2,"packets":2,"port":43624},"srcOui":["ICANN, IANA Department","Juniper Networks"],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["42340_2-1-1-4-1-3_1460_11"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3975408297},"totDataBytes":0} +{"@timestamp":1787595833040,"_id":"260824-NvJVJzxbvsNAELyYXDmreZkk","_index":"arkime_sessions3-260824","client":{"bytes":952},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":1572,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":9,"port":2222},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"5353482d322e302d","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78891],"firstPacket":1787594536933,"initRTT":599,"ipProtocol":6,"lastPacket":1787594538843,"length":1910,"network":{"bytes":3200,"community_id":"1:lCiOeVpAWHktteIxk6FlopYyyo8=","packets":19},"node":"spark-afae","packetPos":[-78891,316720,90,2262,1418,82,106,1665,206,82,802,946,172,130,82,274,506,98,82,164],"packetRange":{"gte":1787594536933,"lte":1787594538843},"protocol":["ssh","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":970},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":1628,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":10,"port":40412},"srcOui":["Grand Junction Networks, Inc.","Arista Networks"],"srcOuiCnt":2,"srcPayload8":"5353482d322e302d","srcRIR":"RIPE","srcTTL":[55],"srcTTLCnt":1,"ssh":{"hassh":["e54ef3ec27fe1fea7ab64d3fa05359fd"],"hasshCnt":1,"hasshServer":["41a85c886a9e9b845f0e69d68994492a"],"hasshServerCnt":1,"ja4ssh":["c16s16_c4s4_c3s3"],"ja4sshCnt":1,"version":["ssh-2.0-openssh_9.6p1 ubuntu-3ubuntu13.5","ssh-2.0-openssh_10.2p1"],"versionCnt":2},"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["67425741031979"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["537cee16-c4a9-45cd-baf1-75963ab7bdd2","b1859b91-92d5-48d2-b43d-bbfd09db964d"],"signatureCnt":2,"signatureId":[1080086,1031283],"signatureIdCnt":2},"tag":{"block":["true"],"blockCnt":1,"category":["activity"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to negotiate an ssh session.","ip addresses with this tag have been observed crawling the internet for ssh servers running on ports other than 22/tcp."],"intention":["suspicious"],"intentionCnt":1,"name":["ssh alternative port crawler","ssh connection attempt"],"nameCnt":2},"tags":["honeypot","contabo-sponge-01-ts","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4l":"598637_55_87399","ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":6,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":8,"rst":0,"srcZero":0,"syn":2,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":491842575},"totDataBytes":1922} +{"@timestamp":1787595833040,"_id":"260824-NvLF1fabgXxJb4EDvEqIxawJ","_index":"arkime_sessions3-260824","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":66,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":1,"port":2222},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78891],"firstPacket":1787594535735,"ipProtocol":6,"lastPacket":1787594536910,"length":1175,"network":{"bytes":192,"community_id":"1:7+qrkEfJeMXtxN1xQUOkKdSO3HE=","packets":3},"node":"spark-afae","packetPos":[-78891,310692,82,5870],"packetRange":{"gte":1787594535735,"lte":1787594536910},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":126,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":2,"port":60298},"srcOui":["Grand Junction Networks, Inc.","Arista Networks"],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[55],"srcTTLCnt":1,"tags":["honeypot","contabo-sponge-01-ts","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2340123840},"totDataBytes":0} +{"@timestamp":1787594933256,"_id":"260824-0ZiSW7oXgNlEcLAbPy9Xn4AA","_index":"arkime_sessions3-260824","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":66,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":2222},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78886],"firstPacket":1787594447960,"ipProtocol":6,"lastPacket":1787594447960,"length":0,"network":{"bytes":132,"community_id":"1:wnyOwbqyEnmnrJojTtO7nEXeUV0=","packets":2},"node":"spark-afae","packetPos":[-78886,6727312,82],"packetRange":{"gte":1787594447960,"lte":1787594447960},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":1,"port":52900},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"tags":["frantech-ts","honeypot","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1400_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2086775818},"totDataBytes":0} +{"@timestamp":1787584972718,"_id":"260824-zvDgn2cLAkdP148xysBnOrhn","_index":"arkime_sessions3-260824","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":74,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78831],"firstPacket":1787584079567,"ipProtocol":6,"lastPacket":1787584082661,"length":3094,"network":{"bytes":296,"community_id":"1:K30lE/P6p7sAcHktouxYQIRctfo=","packets":4},"node":"spark-afae","packetPos":[-78831,1500815,90,5042,6539],"packetRange":{"gte":1787584079567,"lte":1787584082661},"protocol":["tcp"],"protocolCnt":1,"rootId":"260824-zvDgn2cLAkdP148xysBnOrhn","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":222,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":3,"port":53472},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[55],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3613994254},"totDataBytes":0} +{"@timestamp":1787584972718,"_id":"260824-zvCXnfYm6fJF0aWgRuAfAtQ2","_index":"arkime_sessions3-260824","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":74,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78831],"firstPacket":1787584074567,"ipProtocol":6,"lastPacket":1787584077668,"length":3101,"network":{"bytes":296,"community_id":"1:+d/m0Wv+Aiq5ZO3MeMO+by6nEDY=","packets":4},"node":"spark-afae","packetPos":[-78831,1482765,90,6474,3918],"packetRange":{"gte":1787584074567,"lte":1787584077668},"protocol":["tcp"],"protocolCnt":1,"rootId":"260824-zvCXnfYm6fJF0aWgRuAfAtQ2","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":222,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":3,"port":53458},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[55],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":3,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2884413915},"totDataBytes":0} +{"@timestamp":1787582557952,"_id":"260824-gfCoKsBqXkNP1qN6Vl-pOYWE","_index":"arkime_sessions3-260824","client":{"bytes":743},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":206,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":3,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78818],"firstPacket":1787582227016,"http":{"bodyMagic":["application/octet-stream"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["109.123.246.142","109.123.246.142:443"],"hostCnt":2,"ja4h":["po11nn060000_f70d2564bd2a_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["po11nn060000_Host,User-Agent,Content-Length,Accept-Encoding,Content-Type,Secret__"],"ja4h_rCnt":1,"key":["os","commit","arch"],"keyCnt":3,"md5":["7b9b6ff541e18bccaa9f5b44d2d1cd9b"],"md5Cnt":1,"method":["POST"],"method-POST":1,"methodCnt":1,"path":["/api/client/update"],"pathCnt":1,"requestBody":[""],"requestHeader":["user-agent","accept-encoding","host","content-type","content-length","secret"],"requestHeaderCnt":6,"requestHeaderField":["content-length","accept-encoding","content-type","secret"],"requestHeaderValue":["384","gzip","application/octet-stream","3de172c65c5204dbce4c985d6616ca6fbbf337be4ddd40746307af802fa510a2"],"requestHeaderValueCnt":4,"sha256":["d475150d580c13632457dd7b3ccc53cf2aaa612e50629ba31d15b0a825bd1c36"],"sha256Cnt":1,"uri":["109.123.246.142:443/api/client/update?arch=amd64\u0026commit=08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17\u0026os=windows"],"uriCnt":1,"useragent":["SPARK COMMIT: 08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17"],"useragentCnt":1,"value":["windows","amd64","08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17"],"valueCnt":3},"initRTT":538,"ipProtocol":6,"lastPacket":1787582228201,"length":1185,"network":{"bytes":1229,"community_id":"1:uVUi5q0QdWVBQmVkerDBe/l2IuQ=","packets":7},"node":"spark-afae","packetPos":[-78818,882998,90,500,180,82,825,246],"packetRange":{"gte":1787582227016,"lte":1787582228201},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":1023,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":4,"port":56926},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcPayload8":"504f5354202f6170","srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"tags":["contabo-sponge-02-ts","proxy","sensor:contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":1,"rst":1,"srcZero":0,"syn":2,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3686187698},"totDataBytes":743} +{"@timestamp":1787582557952,"_id":"260824-gfAbRSNTJ55GnYdB7VkW0IUD","_index":"arkime_sessions3-260824","cert":[{"curve":"prime256v1","hash":"09:70:ea:39:86:69:5a:f1:83:45:93:40:ee:12:e7:1c:53:c7:21:a5","issuerCN":["asa temporary self signed certificate"],"ja4x":"7022c563de38_7022c563de38_000000000000","ja4x_r":"550403_550403_","notAfter":2092893639000,"notBefore":1777533639000,"publicAlgorithm":"id-ecPublicKey","remainingDays":3533,"remainingSeconds":305311414,"serial":"c802f369","subjectCN":["asa temporary self signed certificate"],"validDays":3650,"validSeconds":315360000}],"certCnt":1,"client":{"bytes":599},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":2598,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":8,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"1603030059020000","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78818],"firstPacket":1787582225716,"initRTT":516,"ipProtocol":6,"lastPacket":1787582227049,"length":1333,"network":{"bytes":3873,"community_id":"1:1hM2w+iwtbRt6tZS3EEqWOpXI7w=","packets":18},"node":"spark-afae","packetPos":[-78818,878544,90,457,180,82,343,82,692,82,208,82,133,294,1097,468,82,262,82],"packetRange":{"gte":1787582225716,"lte":1787582227049},"protocol":["tls","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":2062},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":1275,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":10,"port":56912},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcPayload8":"1603010100010000","srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["542047982741268"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["contabo-sponge-02-ts","proxy","cert:self-signed","sensor:contabo-sponge-02-ts"],"tagsCnt":4,"tcp":{"ja4l":"516564_49_23932","ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":6,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":7,"rst":0,"srcZero":0,"syn":2,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2723882605},"tls":{"cipher":["TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"],"cipherCnt":1,"dstSessionId":["7b44f07292e1c3bb838645415c2fae69c9678a886eb3ecefd7a232257c0c8b9f"],"ja3":["7c1e207beb00684bbbe144f1b0abe1d5"],"ja3Cnt":1,"ja3s":["e58f0b3c1e9eefb8ee4f92aeceee5858"],"ja3sCnt":1,"ja3sstring":["771,49196,65281-11"],"ja3sstringCnt":1,"ja3string":["771,52392-52393-49199-49200-49195-49196-49171-49161-49172-49162-156-157-47-53-49170-10-4867-4865-4866,5-10-11-13-65281-16-18-43-51,29-23-24-25,0"],"ja3stringCnt":1,"ja4":["t13i1909h2_9dc949149365_97f8aa674fd9"],"ja4Cnt":1,"ja4_r":["t13i1909h2_000a,002f,0035,009c,009d,1301,1302,1303,c009,c00a,c012,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,002b,0033,ff01_0804,0403,0807,0805,0806,0401,0501,0601,0503,0603,0201,0203"],"ja4_rCnt":1,"ja4s":["t120200_c02c_344b4dce5a52"],"ja4sCnt":1,"ja4s_r":["t120200_c02c_ff01,000b"],"ja4s_rCnt":1,"srcSessionId":["d23f5dd80722a36bd7b468a3c211de10c7a7d1a940fd2519fe08caa4eba33945"],"version":["TLSv1.2"],"versionCnt":1},"totDataBytes":2661} +{"@timestamp":1787572321169,"_id":"260824-Q--WG83eM2dF5YT4XDO57RwQ","_index":"arkime_sessions3-260824","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":66,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78762],"firstPacket":1787571566606,"ipProtocol":6,"lastPacket":1787571567820,"length":1214,"network":{"bytes":192,"community_id":"1:g27gIaBCwBQj25axLWWA9SZwRrY=","packets":3},"node":"spark-afae","packetPos":[-78762,2141934,82,3788],"packetRange":{"gte":1787571566606,"lte":1787571567820},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":126,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":2,"port":40380},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[55],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","sensor:contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3242376466},"totDataBytes":0} +{"@timestamp":1787572012162,"_id":"260824-2Zbsz6f3-oJIbZXCQXLLUn-1","_index":"arkime_sessions3-260824","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":66,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78758],"firstPacket":1787570824981,"ipProtocol":6,"lastPacket":1787570828093,"length":3112,"network":{"bytes":192,"community_id":"1:6UXKWbT65zmAfPkGjXn0SbEzIA0=","packets":3},"node":"spark-afae","packetPos":[-78758,344277,82,3203],"packetRange":{"gte":1787570824981,"lte":1787570828093},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":126,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":2,"port":53894},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"tags":["contabo-sponge-02-ts","sensor:contabo-sponge-02-ts","proxy"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1903896232},"totDataBytes":0} +{"@timestamp":1787570802851,"_id":"260824-w5Z0fXIB2WtOYrDP6GnfOQIu","_index":"arkime_sessions3-260824","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":66,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78753],"firstPacket":1787570250250,"ipProtocol":6,"lastPacket":1787570250250,"length":0,"network":{"bytes":132,"community_id":"1:b2GLHaF4Uht48EcOXF4KS9j550k=","packets":2},"node":"spark-afae","packetPos":[-78753,2614640,82],"packetRange":{"gte":1787570250250,"lte":1787570250250},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":1,"port":58730},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"tags":["sensor:frantech-ts","frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1400_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3452192720},"totDataBytes":0} +{"@timestamp":1787565663731,"_id":"260824-Z-4d-bsiRDZMXITAPQMX6_bi","_index":"arkime_sessions3-260824","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":1,"port":443},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78725],"firstPacket":1787564906001,"ipProtocol":6,"lastPacket":1787564906001,"length":0,"network":{"bytes":132,"community_id":"1:U0C5rhqQxhmlrFKb441HIr3iuTY=","packets":2},"node":"spark-afae","packetPos":[-78725,3562752,82],"packetRange":{"gte":1787564906001,"lte":1787564906001},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":38342},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3366229933},"totDataBytes":0} +{"@timestamp":1787564152808,"_id":"260824-7zHLXxZz44RJ8apZHv7pMk1y","_index":"arkime_sessions3-260824","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":66,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":1,"port":443},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78715],"firstPacket":1787562978248,"ipProtocol":6,"lastPacket":1787562978248,"length":0,"network":{"bytes":132,"community_id":"1:qfi2cephLFfpf6XSDFeRRbeYXHQ=","packets":2},"node":"spark-afae","packetPos":[-78715,555465,82],"packetRange":{"gte":1787562978248,"lte":1787562978248},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7","00:00:5e:00:01:96"],"mac-cnt":2,"packets":1,"port":51302},"srcOui":["ICANN, IANA Department","Juniper Networks"],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["honeypot","sensor:netcup-ts","netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["42340_2-1-1-4-1-3_1460_11"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3253473039},"totDataBytes":0} +{"@timestamp":1787555351979,"_id":"260824-hZUsN_losp9O_qky2cTn1_Ip","_index":"arkime_sessions3-260824","client":{"bytes":52},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":443},"dstRIR":"ARIN","ethertype":2048,"fileId":[78667],"firstPacket":1787554313284,"ipProtocol":17,"lastPacket":1787554313284,"length":0,"network":{"bytes":94,"community_id":"1:DOLo1ipOS55A++96wB3zZ4VB2yM=","packets":1},"node":"spark-afae","packetPos":[-78667,4835560],"packetRange":{"gte":1787554313284,"lte":1787554313284},"protocol":["udp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":94,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":1,"port":55266},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"08ef002600000000","srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["379633829626034"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["f30d8a4b-8331-4517-8035-34b2a818e4fe"],"signatureCnt":1,"signatureId":[1071783],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending quic traffic."],"intention":["unknown"],"intentionCnt":1,"name":["quic protocol"],"nameCnt":1},"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"totDataBytes":52} +{"@timestamp":1787554149835,"_id":"260824-6Oxo-6rO2hdDZbTVIfPcmkU6","_index":"arkime_sessions3-260824","client":{"bytes":52},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":443},"dstRIR":"ARIN","ethertype":2048,"fileId":[78661],"firstPacket":1787552731747,"ipProtocol":17,"lastPacket":1787552731747,"length":0,"network":{"bytes":94,"community_id":"1:67oLdK72MDbmv+/bllrx++kdmEU=","packets":1},"node":"spark-afae","packetPos":[-78661,429420],"packetRange":{"gte":1787552731747,"lte":1787552731747},"protocol":["udp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":94,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":43211},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"08ef002600000000","srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["959525489704739"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["f30d8a4b-8331-4517-8035-34b2a818e4fe"],"signatureCnt":1,"signatureId":[1071783],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending quic traffic."],"intention":["unknown"],"intentionCnt":1,"name":["quic protocol"],"nameCnt":1},"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"totDataBytes":52} +{"@timestamp":1787547789176,"_id":"260824-AJWClDJVzCdIAqAHHpbTIQDc","_index":"arkime_sessions3-260824","client":{"bytes":52},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78624],"firstPacket":1787546523231,"ipProtocol":17,"lastPacket":1787546523231,"length":0,"network":{"bytes":94,"community_id":"1:4fw0CFB8eUO8cLrcG2vC2Ufc0nk=","packets":1},"node":"spark-afae","packetPos":[-78624,4984],"packetRange":{"gte":1787546523231,"lte":1787546523231},"protocol":["udp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":94,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":60820},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"08ef002600000000","srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["993005445591417"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["f30d8a4b-8331-4517-8035-34b2a818e4fe"],"signatureCnt":1,"signatureId":[1071783],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending quic traffic."],"intention":["unknown"],"intentionCnt":1,"name":["quic protocol"],"nameCnt":1},"tags":["contabo-sponge-02-ts","sensor:contabo-sponge-02-ts","proxy"],"tagsCnt":3,"totDataBytes":52} +{"@timestamp":1787540572385,"_id":"260824-PjGzJYA1pCpPupsjQ5HpZiIX","_index":"arkime_sessions3-260824","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":66,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":1,"port":443},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78585],"firstPacket":1787540324159,"ipProtocol":6,"lastPacket":1787540325194,"length":1035,"network":{"bytes":188,"community_id":"1:VWKKpnG45wVvZzeZTmrHU5G9Fkg=","packets":3},"node":"spark-afae","packetPos":[-78585,4670986,82,2532],"packetRange":{"gte":1787540324159,"lte":1787540325194},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":122,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7","00:00:5e:00:01:96"],"mac-cnt":2,"packets":2,"port":42068},"srcOui":["Juniper Networks","ICANN, IANA Department"],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["42340_2-1-1-4-1-3_1460_11"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":792133220},"totDataBytes":0} +{"@timestamp":1787540572492,"_id":"260824-MeuMCmcQLF1EeKxZXaqVLABW","_index":"arkime_sessions3-260824","client":{"bytes":52},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[78586],"firstPacket":1787539937612,"ipProtocol":17,"lastPacket":1787539937612,"length":0,"network":{"bytes":94,"community_id":"1:dD1V1mIX+64NLnlVBgBZ6z56LA0=","packets":1},"node":"spark-afae","packetPos":[-78586,29003843],"packetRange":{"gte":1787539937612,"lte":1787539937612},"protocol":["udp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":94,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":55851},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"08ef002600000000","srcRIR":"RIPE","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["378720375845194"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["f30d8a4b-8331-4517-8035-34b2a818e4fe"],"signatureCnt":1,"signatureId":[1071783],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending quic traffic."],"intention":["unknown"],"intentionCnt":1,"name":["quic protocol"],"nameCnt":1},"tags":["sensor:contabo-sponge-01-ts","contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"totDataBytes":52} +{"@timestamp":1787540252035,"_id":"260824-Juv7TugryQVJe6XGq1BWrpRl","_index":"arkime_sessions3-260824","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":1,"port":443},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78583],"firstPacket":1787539721366,"ipProtocol":6,"lastPacket":1787539722510,"length":1144,"network":{"bytes":186,"community_id":"1:IlFOs/Aj3u0I4VIa8EqHz/PEwbU=","packets":3},"node":"spark-afae","packetPos":[-78583,1619664,82,2072],"packetRange":{"gte":1787539721366,"lte":1787539722510},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":120,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":2,"port":48670},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[51],"srcTTLCnt":1,"tags":["bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1311290946},"totDataBytes":0} +{"@timestamp":1787537835283,"_id":"260824-OpRj1q0zqKtM5IrIGj1GEHNp","_index":"arkime_sessions3-260824","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":66,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78568],"firstPacket":1787537350021,"ipProtocol":6,"lastPacket":1787537350052,"length":31,"network":{"bytes":192,"community_id":"1:jgyjUkMNVqLRW0reWrLM+aCE+EY=","packets":3},"node":"spark-afae","packetPos":[-78568,218071,82,0],"packetRange":{"gte":1787537350021,"lte":1787537350052},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":126,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":2,"port":50831},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"tags":["proxy","contabo-sponge-02-ts","sensor:contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2864800397},"totDataBytes":0} +{"@timestamp":1787535425575,"_id":"260824-iuppUb6c6gNG-rQzLrWgnhI7","_index":"arkime_sessions3-260824","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":66,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78556],"firstPacket":1787534854123,"ipProtocol":6,"lastPacket":1787534857363,"length":3240,"network":{"bytes":192,"community_id":"1:y9yNBRczI/FwrDX1h3mIKARusaY=","packets":3},"node":"spark-afae","packetPos":[-78556,12252757,82,8328],"packetRange":{"gte":1787534854123,"lte":1787534857363},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":126,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":2,"port":59915},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[56],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1441215478},"totDataBytes":0} +{"@timestamp":1787534825215,"_id":"260824-A5Tbu3LBCOFBD6UQgxCHBR91","_index":"arkime_sessions3-260824","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":66,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78552],"firstPacket":1787533652698,"ipProtocol":6,"lastPacket":1787533652698,"length":0,"network":{"bytes":132,"community_id":"1:Aou8xxuhI2jEuQcFKrqUdCZqEo0=","packets":2},"node":"spark-afae","packetPos":[-78552,646933,82],"packetRange":{"gte":1787533652698,"lte":1787533652698},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":1,"port":41747},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1400_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":4231691570},"totDataBytes":0} +{"@timestamp":1787525783347,"_id":"260823-PZNknT6kW7lAmKqrIL9IPA7W","_index":"arkime_sessions3-260823","client":{"bytes":261},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":441,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":443},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78503],"firstPacket":1787524457028,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"md5":["6196dba52703776af2e6593f772ed7ce"],"md5Cnt":1,"responseHeader":["connection","content-type"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["19b843cc92cb12aa314bb3c3913b2feeb852e85969bf06cb9d096931bfda34ba"],"sha256Cnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":586,"ipProtocol":6,"lastPacket":1787524458433,"length":1405,"network":{"bytes":1180,"community_id":"1:FiSLSMiOWCySQh9UGlv1gQe9Csg=","packets":12},"node":"spark-afae","packetPos":[-78503,13555,90,4014,360,82,343,82,185,2332,164,200,82],"packetRange":{"gte":1787524457028,"lte":1787524458433},"protocol":["tcp","http","tls"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":739,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":7,"port":49234},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"1603010100010000","srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["403596705154025"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":5,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":2,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2502411850},"tls":{"ja3":["7c1e207beb00684bbbe144f1b0abe1d5"],"ja3Cnt":1,"ja3string":["771,52392-52393-49199-49200-49195-49196-49171-49161-49172-49162-156-157-47-53-49170-10-4867-4865-4866,5-10-11-13-65281-16-18-43-51,29-23-24-25,0"],"ja3stringCnt":1,"ja4":["t13i1909h2_9dc949149365_97f8aa674fd9"],"ja4Cnt":1,"ja4_r":["t13i1909h2_000a,002f,0035,009c,009d,1301,1302,1303,c009,c00a,c012,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,002b,0033,ff01_0804,0403,0807,0805,0806,0401,0501,0601,0503,0603,0201,0203"],"ja4_rCnt":1,"srcSessionId":["1ecea5d953a4cbdf6e688233bc484bce91b64b72a0b1ffa03770ec14b044a1e8"]},"totDataBytes":364} +{"@timestamp":1787522451504,"_id":"260823-1uiltFKYh_lGH5aKRTLFBNHl","_index":"arkime_sessions3-260823","client":{"bytes":261},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":441,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":5,"port":443},"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78484],"firstPacket":1787521447632,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"md5":["6196dba52703776af2e6593f772ed7ce"],"md5Cnt":1,"responseHeader":["connection","content-type"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["19b843cc92cb12aa314bb3c3913b2feeb852e85969bf06cb9d096931bfda34ba"],"sha256Cnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":1071,"ipProtocol":6,"lastPacket":1787521449984,"length":2352,"network":{"bytes":1180,"community_id":"1:hm9S1Qkv1kxBIQrNrjoNUTtYo6E=","packets":12},"node":"spark-afae","packetPos":[-78484,3546420,90,16803,13554,82,343,82,185,1984,82,164,82],"packetRange":{"gte":1787521447632,"lte":1787521449984},"protocol":["tls","tcp","http"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":739,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":7,"port":45046},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"1603010100010000","srcRIR":"RIPE","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["2151550337763443"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":5,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":2,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1566349163},"tls":{"ja3":["7c1e207beb00684bbbe144f1b0abe1d5"],"ja3Cnt":1,"ja3string":["771,52392-52393-49199-49200-49195-49196-49171-49161-49172-49162-156-157-47-53-49170-10-4867-4865-4866,5-10-11-13-65281-16-18-43-51,29-23-24-25,0"],"ja3stringCnt":1,"ja4":["t13i1909h2_9dc949149365_97f8aa674fd9"],"ja4Cnt":1,"ja4_r":["t13i1909h2_000a,002f,0035,009c,009d,1301,1302,1303,c009,c00a,c012,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,002b,0033,ff01_0804,0403,0807,0805,0806,0401,0501,0601,0503,0603,0201,0203"],"ja4_rCnt":1,"srcSessionId":["85c5abba8071e58e8c69b4050d3eb9a5a89c41b4e004c9c8de1f4dac55f0105b"]},"totDataBytes":364} +{"@timestamp":1787520650297,"_id":"260823-uTDOBqM8NrJMK6oW1wJrj1mz","_index":"arkime_sessions3-260823","client":{"bytes":261},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":441,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":5,"port":443},"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78474],"firstPacket":1787520229835,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"md5":["6196dba52703776af2e6593f772ed7ce"],"md5Cnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["19b843cc92cb12aa314bb3c3913b2feeb852e85969bf06cb9d096931bfda34ba"],"sha256Cnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":527,"ipProtocol":6,"lastPacket":1787520231065,"length":1230,"network":{"bytes":1180,"community_id":"1:E4NnOq9IIqsN4hW7xxKBCljk+lY=","packets":12},"node":"spark-afae","packetPos":[-78474,3289030,90,11867,180,82,343,82,357,82,468,246,82],"packetRange":{"gte":1787520229835,"lte":1787520231065},"protocol":["http","tcp","tls"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":739,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7","00:00:5e:00:01:96"],"mac-cnt":2,"packets":7,"port":55990},"srcOui":["Juniper Networks","ICANN, IANA Department"],"srcOuiCnt":2,"srcPayload8":"1603010100010000","srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1618301817732171"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["43440_2-4-8-1-3_1460_11"],"ja4tsCnt":1},"tcpflags":{"ack":5,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":2,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2180145472},"tls":{"ja3":["7c1e207beb00684bbbe144f1b0abe1d5"],"ja3Cnt":1,"ja3string":["771,52392-52393-49199-49200-49195-49196-49171-49161-49172-49162-156-157-47-53-49170-10-4867-4865-4866,5-10-11-13-65281-16-18-43-51,29-23-24-25,0"],"ja3stringCnt":1,"ja4":["t13i1909h2_9dc949149365_97f8aa674fd9"],"ja4Cnt":1,"ja4_r":["t13i1909h2_000a,002f,0035,009c,009d,1301,1302,1303,c009,c00a,c012,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,002b,0033,ff01_0804,0403,0807,0805,0806,0401,0501,0601,0503,0603,0201,0203"],"ja4_rCnt":1,"srcSessionId":["9e2c016464ce9b84a13303cb92cae7642dba864074f9a10f9f3f3c2a1f23c8ec"]},"totDataBytes":364} +{"@timestamp":1787519743590,"_id":"260823-uZLbGewjbZxJk7i4JMxmDKzL","_index":"arkime_sessions3-260823","cert":[{"curve":"prime256v1","hash":"09:70:ea:39:86:69:5a:f1:83:45:93:40:ee:12:e7:1c:53:c7:21:a5","issuerCN":["asa temporary self signed certificate"],"ja4x":"7022c563de38_7022c563de38_000000000000","ja4x_r":"550403_550403_","notAfter":2092893639000,"notBefore":1777533639000,"publicAlgorithm":"id-ecPublicKey","remainingDays":3534,"remainingSeconds":305374215,"serial":"c802f369","subjectCN":["asa temporary self signed certificate"],"validDays":3650,"validSeconds":315360000}],"certCnt":1,"client":{"bytes":661},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":1382,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":8,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"1603030059020000","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78468],"firstPacket":1787519424609,"initRTT":21,"ipProtocol":6,"lastPacket":1787519424918,"length":309,"network":{"bytes":2579,"community_id":"1:6QzR2kIfTDkZmDhyDdXTY5EEy04=","packets":16},"node":"spark-afae","packetPos":[-78468,93117,90,0,82,343,82,693,82,208,82,133,356,266,82,0,0],"packetRange":{"gte":1787519424609,"lte":1787519424918},"protocol":["tls","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":846},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":1197,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":8,"port":36482},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcPayload8":"1603010100010000","srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["82781552280416"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["contabo-sponge-02-ts","sensor:contabo-sponge-02-ts","proxy","cert:self-signed"],"tagsCnt":4,"tcp":{"ja4l":"20677_49_20941","ja4ls":"620_64_34416","ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":6,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":6,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3871778238},"tls":{"cipher":["TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"],"cipherCnt":1,"dstSessionId":["754de26acd480e7c71e7cb064014faa41f1cd798331a8c9dcc8a2a678abcbee0"],"ja3":["7c1e207beb00684bbbe144f1b0abe1d5"],"ja3Cnt":1,"ja3s":["e58f0b3c1e9eefb8ee4f92aeceee5858"],"ja3sCnt":1,"ja3sstring":["771,49196,65281-11"],"ja3sstringCnt":1,"ja3string":["771,52392-52393-49199-49200-49195-49196-49171-49161-49172-49162-156-157-47-53-49170-10-4867-4865-4866,5-10-11-13-65281-16-18-43-51,29-23-24-25,0"],"ja3stringCnt":1,"ja4":["t13i1909h2_9dc949149365_97f8aa674fd9"],"ja4Cnt":1,"ja4_r":["t13i1909h2_000a,002f,0035,009c,009d,1301,1302,1303,c009,c00a,c012,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,002b,0033,ff01_0804,0403,0807,0805,0806,0401,0501,0601,0503,0603,0201,0203"],"ja4_rCnt":1,"ja4s":["t120200_c02c_344b4dce5a52"],"ja4sCnt":1,"ja4s_r":["t120200_c02c_ff01,000b"],"ja4s_rCnt":1,"srcSessionId":["c267cae1a2815c1ec843229e55ae9bef0f47306b2d2f0b292273b96b26633ea7"],"version":["TLSv1.2"],"versionCnt":1},"totDataBytes":1507} +{"@timestamp":1787519441003,"_id":"260823-rpJdrXLME-pFx6T0SY97YlTc","_index":"arkime_sessions3-260823","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":66,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78466],"firstPacket":1787518226531,"ipProtocol":6,"lastPacket":1787518229784,"length":3253,"network":{"bytes":186,"community_id":"1:blgIs05Da5uuX4rEypXrciWyC7w=","packets":3},"node":"spark-afae","packetPos":[-78466,275746,82,12279],"packetRange":{"gte":1787518226531,"lte":1787518229784},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":120,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":43370},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1400_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":22429966},"totDataBytes":0} +{"@timestamp":1787517938796,"_id":"260823-R-hV5JOuJCJAJ7AETHrHzOjw","_index":"arkime_sessions3-260823","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":1,"port":443},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78459],"firstPacket":1787516590902,"ipProtocol":6,"lastPacket":1787516594061,"length":3159,"network":{"bytes":186,"community_id":"1:lmPHVZIdxizAso+20SH4ieHmA8Q=","packets":3},"node":"spark-afae","packetPos":[-78459,39414,82,5933],"packetRange":{"gte":1787516590902,"lte":1787516594061},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":120,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":2,"port":48216},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1652704063},"totDataBytes":0} +{"@timestamp":1787516437529,"_id":"260823-d5LTIzt5C_lCwo57TVwJ9pFl","_index":"arkime_sessions3-260823","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":66,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":1,"port":443},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78450],"firstPacket":1787515931085,"ipProtocol":6,"lastPacket":1787515932138,"length":1053,"network":{"bytes":188,"community_id":"1:eZCAb0QsK/Okal8wKTbX7HXyB2k=","packets":3},"node":"spark-afae","packetPos":[-78450,4114750,82,3489],"packetRange":{"gte":1787515931085,"lte":1787515932138},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":122,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7","00:00:5e:00:01:96"],"mac-cnt":2,"packets":2,"port":41368},"srcOui":["ICANN, IANA Department","Juniper Networks"],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["42340_2-1-1-4-1-3_1460_11"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3147991667},"totDataBytes":0} +{"@timestamp":1787516437782,"_id":"260823-G-hgQ04SsDlEYq8OMs2L2E1T","_index":"arkime_sessions3-260823","client":{"bytes":261},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":441,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":5,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78451],"firstPacket":1787515571202,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"md5":["6196dba52703776af2e6593f772ed7ce"],"md5Cnt":1,"responseHeader":["connection","content-type"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["19b843cc92cb12aa314bb3c3913b2feeb852e85969bf06cb9d096931bfda34ba"],"sha256Cnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":613,"ipProtocol":6,"lastPacket":1787515572681,"length":1479,"network":{"bytes":1180,"community_id":"1:jtxKR2NXqiNXOxeKn75K2DPh8jc=","packets":12},"node":"spark-afae","packetPos":[-78451,5771659,90,19060,2449,82,343,82,185,2564,216,82,0],"packetRange":{"gte":1787515571202,"lte":1787515572681},"protocol":["tls","tcp","http"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":739,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":7,"port":52228},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcPayload8":"1603010100010000","srcRIR":"RIPE","srcTTL":[56],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["869139772845556"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["sensor:contabo-sponge-01-ts","contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":5,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":2,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1435215093},"tls":{"ja3":["7c1e207beb00684bbbe144f1b0abe1d5"],"ja3Cnt":1,"ja3string":["771,52392-52393-49199-49200-49195-49196-49171-49161-49172-49162-156-157-47-53-49170-10-4867-4865-4866,5-10-11-13-65281-16-18-43-51,29-23-24-25,0"],"ja3stringCnt":1,"ja4":["t13i1909h2_9dc949149365_97f8aa674fd9"],"ja4Cnt":1,"ja4_r":["t13i1909h2_000a,002f,0035,009c,009d,1301,1302,1303,c009,c00a,c012,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,002b,0033,ff01_0804,0403,0807,0805,0806,0401,0501,0601,0503,0603,0201,0203"],"ja4_rCnt":1,"srcSessionId":["b37cc194dff05aee07ca27f61d8668cc9917d3bccd81954e21dbba433985135e"]},"totDataBytes":364} +{"@timestamp":1787516134237,"_id":"260823-bJJ8RBOiM6dOgaS2At7YKeQV","_index":"arkime_sessions3-260823","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":66,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78448],"firstPacket":1787515498615,"ipProtocol":6,"lastPacket":1787515499709,"length":1094,"network":{"bytes":192,"community_id":"1:5U1pMkNXiEHluw0RK+q21rYw6Es=","packets":3},"node":"spark-afae","packetPos":[-78448,108316,82,410],"packetRange":{"gte":1787515498615,"lte":1787515499709},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":126,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":2,"port":55463},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"tags":["contabo-sponge-02-ts","sensor:contabo-sponge-02-ts","proxy"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2798259832},"totDataBytes":0} +{"@timestamp":1787513686657,"_id":"260823-uOfw0Fmtr7NIaLzBT4oxK6Mx","_index":"arkime_sessions3-260823","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":66,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78436],"firstPacket":1787513413587,"ipProtocol":6,"lastPacket":1787513414798,"length":1211,"network":{"bytes":192,"community_id":"1:MxQoED+dG9wA8UkrhFqz2pPUcoc=","packets":3},"node":"spark-afae","packetPos":[-78436,17810709,82,26088],"packetRange":{"gte":1787513413587,"lte":1787513414798},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":126,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["00:c0:1d:c0:ff:ee","fc:bd:67:9d:2b:2b"],"mac-cnt":2,"packets":2,"port":60827},"srcOui":["Grand Junction Networks, Inc.","Arista Networks"],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[56],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":4004336566},"totDataBytes":0} +{"@timestamp":1787413782641,"_id":"260822-DtuwglYLkVhOeZ3kwmq67OIW","_index":"arkime_sessions3-260822","client":{"bytes":174},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":384,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":4,"port":444},"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[77879],"firstPacket":1787412678665,"http":{"clientVersion":["1.1"],"clientVersionCnt":1,"host":["159.195.21.150:444","159.195.21.150"],"hostCnt":2,"ja4h":["ge11nn040000_e1d2031bdfea_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn040000_Host,User-Agent,Accept,Accept-Encoding__"],"ja4h_rCnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["/"],"pathCnt":1,"requestHeader":["host","user-agent","accept-encoding","accept"],"requestHeaderCnt":4,"requestHeaderField":["accept","accept-encoding"],"requestHeaderValue":["*/*","gzip"],"requestHeaderValueCnt":2,"response-server":["SonicWall SMA 10.2.0.9-12sv"],"response-serverCnt":1,"responseHeader":["content-length","date","server"],"responseHeaderCnt":3,"responseHeaderField":["date","content-length"],"responseHeaderValue":["sat, 22 aug 2026 15:31:18 gmt","0"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["159.195.21.150:444/"],"uriCnt":1,"useragent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Firefox/144.0"],"useragentCnt":1},"initRTT":15,"ipProtocol":6,"lastPacket":1787412678809,"length":144,"network":{"bytes":962,"community_id":"1:cXksXWWqv96qzSSFPVrKC7eoGZ0=","packets":10},"node":"spark-afae","packetPos":[-77879,609216,90,0,82,256,288,449,82,0,1060],"packetRange":{"gte":1787412678665,"lte":1787412678809},"protocol":["tcp","http"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":112},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":578,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7","00:00:5e:00:01:96"],"mac-cnt":2,"packets":6,"port":50324},"srcOui":["ICANN, IANA Department","Juniper Networks"],"srcOuiCnt":2,"srcPayload8":"474554202f204854","srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1730525701401659"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7","ce8622a8-6d2f-4fe3-ab81-0cc86e19363e"],"signatureCnt":3,"signatureId":[2000166,1031486,2000008],"signatureIdCnt":3},"tag":{"block":["true","false"],"blockCnt":2,"category":["attack","protocol","recon"],"categoryCnt":3,"cves":[""],"cvesCnt":1,"description":["ip addresses with this tag have been seen crawling http(s) servers around the internet.","cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys.","generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning."],"intention":["unknown","suspicious"],"intentionCnt":2,"name":["root path scanner","web crawler"],"nameCnt":2},"tags":["honeypot","sensor:netcup-ts","netcup-ts"],"tagsCnt":3,"tcp":{"ja4ls":"36_64_tcp","ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["43440_2-4-8-1-3_1460_11"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2386129455},"totDataBytes":286} +{"@timestamp":1787413782641,"_id":"260822-DtvpEWCixvlLA6EsFmD3-pXn","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":66,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":1,"port":444},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[77879],"firstPacket":1787412678601,"ipProtocol":6,"lastPacket":1787412678632,"length":31,"network":{"bytes":188,"community_id":"1:eFu3f0LcW40Qx6vUZWhEiKpcwTA=","packets":3},"node":"spark-afae","packetPos":[-77879,608816,82,246],"packetRange":{"gte":1787412678601,"lte":1787412678632},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":122,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7","00:00:5e:00:01:96"],"mac-cnt":2,"packets":2,"port":59076},"srcOui":["ICANN, IANA Department","Juniper Networks"],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["honeypot","sensor:netcup-ts","netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["42340_2-1-1-4-1-3_1460_11"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2558387445},"totDataBytes":0} +{"@timestamp":1787411962847,"_id":"260822-19o7fyKihstGxJVgmZENXHbD","_index":"arkime_sessions3-260822","client":{"bytes":174},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":625,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":5,"port":444},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[77869],"firstPacket":1787411695522,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["217.15.163.226:444","217.15.163.226"],"hostCnt":2,"ja4h":["ge11nn040000_e1d2031bdfea_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn040000_Host,User-Agent,Accept,Accept-Encoding__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["/"],"pathCnt":1,"requestHeader":["accept","accept-encoding","host","user-agent"],"requestHeaderCnt":4,"requestHeaderField":["accept","accept-encoding"],"requestHeaderValue":["*/*","gzip"],"requestHeaderValueCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["date","connection","content-type","server","content-length","x-powered-by"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","sat, 22 aug 2026 15:14:55 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["217.15.163.226:444/"],"uriCnt":1,"useragent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Firefox/144.0"],"useragentCnt":1},"initRTT":87,"ipProtocol":6,"lastPacket":1787411695873,"length":351,"network":{"bytes":1137,"community_id":"1:hL/pjg8l0bTVp1C8y7osuCN9tnM=","packets":10},"node":"spark-afae","packetPos":[-77869,3756016,90,180,82,256,82,369,338,82,0],"packetRange":{"gte":1787411695522,"lte":1787411695873},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":512,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":5,"port":48774},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcPayload8":"474554202f204854","srcRIR":"RIPE","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["2246034578528399"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7","ce8622a8-6d2f-4fe3-ab81-0cc86e19363e"],"signatureCnt":3,"signatureId":[2000166,1031486,2000008],"signatureIdCnt":3},"tag":{"block":["false","true"],"blockCnt":2,"category":["protocol","attack","recon"],"categoryCnt":3,"cves":[""],"cvesCnt":1,"description":["cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys.","ip addresses with this tag have been seen crawling http(s) servers around the internet.","generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning."],"intention":["unknown","suspicious"],"intentionCnt":2,"name":["web crawler","root path scanner"],"nameCnt":2},"tags":["contabo-sponge-01-ts","sensor:contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4ls":"64_64_tcp","ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3038142346},"totDataBytes":461} +{"@timestamp":1787411962847,"_id":"260822-19ohbc4Xrz5H3qYZ52pXa3Br","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":66,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":1,"port":444},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[77869],"firstPacket":1787411695276,"ipProtocol":6,"lastPacket":1787411695452,"length":176,"network":{"bytes":192,"community_id":"1:Xc604tgQQ4ofZ1woYq2ggEmJI38=","packets":3},"node":"spark-afae","packetPos":[-77869,3754094,82,172],"packetRange":{"gte":1787411695276,"lte":1787411695452},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":126,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":2,"port":52826},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[55],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","sensor:contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":4233806052},"totDataBytes":0} +{"@timestamp":1787411355732,"_id":"260822-wdo6PONiQ9lAJ6IYfYpTmkeD","_index":"arkime_sessions3-260822","client":{"bytes":174},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":444},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[77866],"firstPacket":1787411022842,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["209.141.62.110","209.141.62.110:444"],"hostCnt":2,"ja4h":["ge11nn040000_e1d2031bdfea_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn040000_Host,User-Agent,Accept,Accept-Encoding__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["/"],"pathCnt":1,"requestHeader":["user-agent","accept-encoding","accept","host"],"requestHeaderCnt":4,"requestHeaderField":["accept","accept-encoding"],"requestHeaderValue":["*/*","gzip"],"requestHeaderValueCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["content-type","content-length","x-powered-by","date","connection","server"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","sat, 22 aug 2026 15:03:43 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["209.141.62.110:444/"],"uriCnt":1,"useragent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Firefox/144.0"],"useragentCnt":1},"initRTT":84,"ipProtocol":6,"lastPacket":1787411023180,"length":338,"network":{"bytes":1137,"community_id":"1:ucHFu2fjlmijd6xZ+7PhVrSTgnI=","packets":10},"node":"spark-afae","packetPos":[-77866,5353630,90,207,82,256,82,369,82,0,0],"packetRange":{"gte":1787411022842,"lte":1787411023180},"protocol":["tcp","http"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":512,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":44924},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"474554202f204854","srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1928987515723688"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ce8622a8-6d2f-4fe3-ab81-0cc86e19363e","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7","869feaa1-dc77-4037-aee2-247b7a39cf7d"],"signatureCnt":3,"signatureId":[2000166,1031486,2000008],"signatureIdCnt":3},"tag":{"block":["false","true"],"blockCnt":2,"category":["recon","attack","protocol"],"categoryCnt":3,"cves":[""],"cvesCnt":1,"description":["ip addresses with this tag have been seen crawling http(s) servers around the internet.","generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning.","cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys."],"intention":["suspicious","unknown"],"intentionCnt":2,"name":["web crawler","root path scanner"],"nameCnt":2},"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"43_64_tcp","ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":4015740977},"totDataBytes":461} +{"@timestamp":1787411355732,"_id":"260822-wdo3tZsdc8VIL4BJzI9SaStc","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":66,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":444},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[77866],"firstPacket":1787411022626,"ipProtocol":6,"lastPacket":1787411022795,"length":169,"network":{"bytes":186,"community_id":"1:JMALIMKMZDG11QAp4+HG4Gpiiuo=","packets":3},"node":"spark-afae","packetPos":[-77866,5352868,82,542],"packetRange":{"gte":1787411022626,"lte":1787411022795},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":120,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":35447},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1400_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":358145103},"totDataBytes":0} +{"@timestamp":1787410453242,"_id":"260822-oNp7TWiV281CF51K9Wm6dXsb","_index":"arkime_sessions3-260822","client":{"bytes":171},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":625,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":5,"port":444},"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[77862],"firstPacket":1787409789905,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["38.54.2.209:444","38.54.2.209"],"hostCnt":2,"ja4h":["ge11nn040000_e1d2031bdfea_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn040000_Host,User-Agent,Accept,Accept-Encoding__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["/"],"pathCnt":1,"requestHeader":["accept","accept-encoding","host","user-agent"],"requestHeaderCnt":4,"requestHeaderField":["accept","accept-encoding"],"requestHeaderValue":["*/*","gzip"],"requestHeaderValueCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["content-type","connection","date","x-powered-by","content-length","server"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","sat, 22 aug 2026 14:43:10 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["38.54.2.209:444/"],"uriCnt":1,"useragent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Firefox/144.0"],"useragentCnt":1},"initRTT":61,"ipProtocol":6,"lastPacket":1787409790148,"length":243,"network":{"bytes":1134,"community_id":"1:oeWSjJO2sgU9gOF15P7INXoPx7Y=","packets":10},"node":"spark-afae","packetPos":[-77862,1117488,90,160,82,253,82,369,234,82,0],"packetRange":{"gte":1787409789905,"lte":1787409790148},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":509,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":5,"port":42186},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"474554202f204854","srcRIR":"RIPE","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1638464076028204"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ce8622a8-6d2f-4fe3-ab81-0cc86e19363e","869feaa1-dc77-4037-aee2-247b7a39cf7d","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7"],"signatureCnt":3,"signatureId":[2000166,1031486,2000008],"signatureIdCnt":3},"tag":{"block":["false","true"],"blockCnt":2,"category":["protocol","recon","attack"],"categoryCnt":3,"cves":[""],"cvesCnt":1,"description":["generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning.","cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys.","ip addresses with this tag have been seen crawling http(s) servers around the internet."],"intention":["unknown","suspicious"],"intentionCnt":2,"name":["web crawler","root path scanner"],"nameCnt":2},"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4ls":"55_64_tcp","ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1132809182},"totDataBytes":458} +{"@timestamp":1787410453217,"_id":"260822-oNrh_JmTFKxFB6Qee74jILUJ","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":1,"port":444},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[77862],"firstPacket":1787409789691,"ipProtocol":6,"lastPacket":1787409789811,"length":120,"network":{"bytes":186,"community_id":"1:sXRWEdVCTSBMp+3qj07FZn5ijA0=","packets":3},"node":"spark-afae","packetPos":[-77862,1117184,82,152],"packetRange":{"gte":1787409789691,"lte":1787409789811},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":120,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":2,"port":55809},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":511279777},"totDataBytes":0} +{"@timestamp":1787408945075,"_id":"260822-adpykUxRSUZKAq0RFaZRD2TM","_index":"arkime_sessions3-260822","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":444},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77853],"firstPacket":1787407935304,"ipProtocol":6,"lastPacket":1787407935304,"length":0,"network":{"bytes":66,"community_id":"1:rZRjVzbqc1bE4RK7yu+Lootkkcs=","packets":1},"node":"spark-afae","packetPos":[-77853,7591],"packetRange":{"gte":1787407935304,"lte":1787407935304},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":66,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":48333},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"tags":["contabo-sponge-02-ts","sensor:contabo-sponge-02-ts","proxy"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2274244197},"totDataBytes":0} +{"@timestamp":1787282291741,"_id":"260821-rX8VP1oGUylBX7thi2ekOjwK","_index":"arkime_sessions3-260821","client":{"bytes":30},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":53},"dns":[{"host":["version.bind"],"hostCnt":1,"opcode":"QUERY","qc":"CH","qt":"TXT","queryHost":"version.bind"}],"dnsCnt":1,"dstRIR":"ARIN","ethertype":2048,"fileId":[77149],"firstPacket":1787281486958,"ipProtocol":17,"lastPacket":1787281486958,"length":0,"network":{"bytes":72,"community_id":"1:rS+rUnaBdcn6viYerADFmMYTfqc=","packets":1},"node":"spark-afae","packetPos":[-77149,894788],"packetRange":{"gte":1787281486958,"lte":1787281486958},"protocol":["dns","udp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":72,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":1,"port":33004},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"34ef010000010000","srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1863383062483447"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["bfd5c1ca-a1b3-418c-8643-5e916ad156e4"],"signatureCnt":1,"signatureId":[1071781],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending dns traffic."],"intention":["unknown"],"intentionCnt":1,"name":["dns protocol"],"nameCnt":1},"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"totDataBytes":30} +{"@timestamp":1787278676513,"_id":"260821-IcnZ6ZuxsJBES4VTNA0SwVSN","_index":"arkime_sessions3-260821","client":{"bytes":30},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":53},"dns":[{"host":["version.bind"],"hostCnt":1,"opcode":"QUERY","qc":"CH","qt":"TXT","queryHost":"version.bind"}],"dnsCnt":1,"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77130],"firstPacket":1787278287291,"ipProtocol":17,"lastPacket":1787278287291,"length":0,"network":{"bytes":72,"community_id":"1:LeWvFXAKYxjUt+Hy1PId1fEZVVk=","packets":1},"node":"spark-afae","packetPos":[-77130,2438946],"packetRange":{"gte":1787278287291,"lte":1787278287291},"protocol":["udp","dns"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":72,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":49281},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"34ef010000010000","srcRIR":"RIPE","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["2095101400722955"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["bfd5c1ca-a1b3-418c-8643-5e916ad156e4"],"signatureCnt":1,"signatureId":[1071781],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending dns traffic."],"intention":["unknown"],"intentionCnt":1,"name":["dns protocol"],"nameCnt":1},"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"totDataBytes":30} +{"@timestamp":1787278976591,"_id":"260821-LMkYKnGzJEtGSIw2c5kT_pFe","_index":"arkime_sessions3-260821","client":{"bytes":30},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":0,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":0,"port":53},"dns":[{"host":["version.bind"],"hostCnt":1,"opcode":"QUERY","qc":"CH","qt":"TXT","queryHost":"version.bind"}],"dnsCnt":1,"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","ethertype":2048,"fileId":[77131],"firstPacket":1787278250285,"ipProtocol":17,"lastPacket":1787278250285,"length":0,"network":{"bytes":72,"community_id":"1:JzAMfn7ioIhQA7mMSH0/8FdhnWI=","packets":1},"node":"spark-afae","packetPos":[-77131,5518684],"packetRange":{"gte":1787278250285,"lte":1787278250285},"protocol":["dns","udp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":72,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":1,"port":57933},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"34ef010000010000","srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["662156494680445"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["bfd5c1ca-a1b3-418c-8643-5e916ad156e4"],"signatureCnt":1,"signatureId":[1071781],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending dns traffic."],"intention":["unknown"],"intentionCnt":1,"name":["dns protocol"],"nameCnt":1},"tags":["honeypot","sensor:frantech-ts","frantech-ts"],"tagsCnt":3,"totDataBytes":30} +{"@timestamp":1787278385899,"_id":"260821-YH-veAzdeANH4LMXR1Ui4hiO","_index":"arkime_sessions3-260821","client":{"bytes":30},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":53},"dns":[{"host":["version.bind"],"hostCnt":1,"opcode":"QUERY","qc":"CH","qt":"TXT","queryHost":"version.bind"}],"dnsCnt":1,"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[77128],"firstPacket":1787277934755,"ipProtocol":17,"lastPacket":1787277934755,"length":0,"network":{"bytes":72,"community_id":"1:VOOaT5cW8GCZOc/oAZslxVRiIhw=","packets":1},"node":"spark-afae","packetPos":[-77128,19420043],"packetRange":{"gte":1787277934755,"lte":1787277934755},"protocol":["dns","udp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":72,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":34160},"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcPayload8":"34ef010000010000","srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1836329107529297"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["bfd5c1ca-a1b3-418c-8643-5e916ad156e4"],"signatureCnt":1,"signatureId":[1071781],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending dns traffic."],"intention":["unknown"],"intentionCnt":1,"name":["dns protocol"],"nameCnt":1},"tags":["sensor:contabo-sponge-02-ts","contabo-sponge-02-ts","proxy"],"tagsCnt":3,"totDataBytes":30} +{"@timestamp":1787276573924,"_id":"260821-1Mi-SYKM8E9EVaKoW1BDnxIj","_index":"arkime_sessions3-260821","client":{"bytes":30},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":53},"dns":[{"host":["version.bind"],"hostCnt":1,"opcode":"QUERY","qc":"CH","qt":"TXT","queryHost":"version.bind"}],"dnsCnt":1,"dstRIR":"ARIN","ethertype":2048,"fileId":[77117],"firstPacket":1787275566698,"ipProtocol":17,"lastPacket":1787275566698,"length":0,"network":{"bytes":72,"community_id":"1:7ysETYXyRDZx3rFbIlMUt6Zyehg=","packets":1},"node":"spark-afae","packetPos":[-77117,851305],"packetRange":{"gte":1787275566698,"lte":1787275566698},"protocol":["udp","dns"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":72,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":37721},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"34ef010000010000","srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1873085448933687"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["bfd5c1ca-a1b3-418c-8643-5e916ad156e4"],"signatureCnt":1,"signatureId":[1071781],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed sending dns traffic."],"intention":["unknown"],"intentionCnt":1,"name":["dns protocol"],"nameCnt":1},"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"totDataBytes":30} +{"@timestamp":1787235184868,"_id":"260820-P8OnJDJJXi9HwZ4VrjeAB1ei","_index":"arkime_sessions3-260820","client":{"bytes":13},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":375,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":4,"port":443},"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[76886],"firstPacket":1787234689247,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"md5":["6196dba52703776af2e6593f772ed7ce"],"md5Cnt":1,"responseHeader":["connection","content-type"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["19b843cc92cb12aa314bb3c3913b2feeb852e85969bf06cb9d096931bfda34ba"],"sha256Cnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":60,"ipProtocol":6,"lastPacket":1787234699369,"length":10122,"network":{"bytes":714,"community_id":"1:vsgU/eXwN+hTyyBLDT68cgxudyU=","packets":9},"node":"spark-afae","packetPos":[-76886,1350181,90,357,82,95,2348,82,185,82],"packetRange":{"gte":1787234689247,"lte":1787234699369},"protocol":["tcp","http","tls"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":339,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":5,"port":49380},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"1603000008010101","srcRIR":"RIPE","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["499311212942682"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4ls":"49_64_4939768","ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3479985102},"tls":{"ja3":["65e083060901bd26e31a66556ae6396b"],"ja3Cnt":1,"ja3string":["257,,,"],"ja3stringCnt":1,"ja4":["t00i000000_000000000000_000000000000"],"ja4Cnt":1,"ja4_r":["t00i000000__"],"ja4_rCnt":1},"totDataBytes":116} +{"@timestamp":1787235184868,"_id":"260820-P8N89ka3ZyNO7YjM1I7gaVfA","_index":"arkime_sessions3-260820","client":{"bytes":16},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":375,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":4,"port":443},"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[76886],"firstPacket":1787234680246,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"md5":["6196dba52703776af2e6593f772ed7ce"],"md5Cnt":1,"responseHeader":["connection","content-type"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["19b843cc92cb12aa314bb3c3913b2feeb852e85969bf06cb9d096931bfda34ba"],"sha256Cnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":60,"ipProtocol":6,"lastPacket":1787234689368,"length":9122,"network":{"bytes":717,"community_id":"1:zwPXy8sQSlIDWhOW+WGMfCgNjAk=","packets":9},"node":"spark-afae","packetPos":[-76886,1348709,90,0,82,98,1030,262,185,341],"packetRange":{"gte":1787234680246,"lte":1787234689368},"protocol":["tcp","http"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":342,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":5,"port":47096},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"1020000042424242","srcRIR":"RIPE","srcTTL":[51],"srcTTLCnt":1,"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4ls":"43_64_4439963","ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1160713571},"totDataBytes":119} +{"@timestamp":1787229473063,"_id":"260820-WXt1p9OJYIlDk79-NF33whS-","_index":"arkime_sessions3-260820","client":{"bytes":13},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":375,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":4,"port":443},"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[76855],"firstPacket":1787228550688,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"md5":["6196dba52703776af2e6593f772ed7ce"],"md5Cnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["19b843cc92cb12aa314bb3c3913b2feeb852e85969bf06cb9d096931bfda34ba"],"sha256Cnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":15,"ipProtocol":6,"lastPacket":1787228560719,"length":10031,"network":{"bytes":716,"community_id":"1:m5RRUje544bSCNhfzXF8WNahz6M=","packets":9},"node":"spark-afae","packetPos":[-76855,3229378,90,357,226,95,22883,82,185,82],"packetRange":{"gte":1787228550688,"lte":1787228560719},"protocol":["tls","tcp","http"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":341,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7","00:00:5e:00:01:96"],"mac-cnt":2,"packets":5,"port":32882},"srcOui":["Juniper Networks","ICANN, IANA Department"],"srcOuiCnt":2,"srcPayload8":"1603000008010101","srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1830589063226795"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4ls":"66_64_4984466","ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["43440_2-4-8-1-3_1460_11"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2788429998},"tls":{"ja3":["65e083060901bd26e31a66556ae6396b"],"ja3Cnt":1,"ja3string":["257,,,"],"ja3stringCnt":1,"ja4":["t00i000000_000000000000_000000000000"],"ja4Cnt":1,"ja4_r":["t00i000000__"],"ja4_rCnt":1},"totDataBytes":116} +{"@timestamp":1787229472732,"_id":"260820-WXvQ7Bl9g-BKfrJA_QaFlNX2","_index":"arkime_sessions3-260820","client":{"bytes":16},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":375,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":4,"port":443},"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[76855],"firstPacket":1787228541688,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"md5":["6196dba52703776af2e6593f772ed7ce"],"md5Cnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["19b843cc92cb12aa314bb3c3913b2feeb852e85969bf06cb9d096931bfda34ba"],"sha256Cnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":15,"ipProtocol":6,"lastPacket":1787228550719,"length":9031,"network":{"bytes":719,"community_id":"1:jVmlSLv1TyRvS16BwTH47suDmQQ=","packets":9},"node":"spark-afae","packetPos":[-76855,3218517,90,0,82,98,10419,262,185,164],"packetRange":{"gte":1787228541688,"lte":1787228550719},"protocol":["tcp","http"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":344,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7","00:00:5e:00:01:96"],"mac-cnt":2,"packets":5,"port":32880},"srcOui":["Juniper Networks","ICANN, IANA Department"],"srcOuiCnt":2,"srcPayload8":"1020000042424242","srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4ls":"51_64_4484639","ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["43440_2-4-8-1-3_1460_11"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2867468320},"totDataBytes":119} +{"@timestamp":1787224362608,"_id":"260820-4Ho6deXLPG1NIa0k5E4AQsQw","_index":"arkime_sessions3-260820","client":{"bytes":13},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":375,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":4,"port":443},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[76825],"firstPacket":1787223314504,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["connection","content-type"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":84,"ipProtocol":6,"lastPacket":1787223324669,"length":10165,"network":{"bytes":714,"community_id":"1:Amn+jqdWrpgCfhpE45EezIjYwco=","packets":9},"node":"spark-afae","packetPos":[-76825,1280066,172,357,82,95,12323,82,185,254],"packetRange":{"gte":1787223314504,"lte":1787223324669},"protocol":["tls","http","tcp"],"protocolCnt":3,"rootId":"260820-4Ho6deXLPG1NIa0k5E4AQsQw","segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":339,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":46316},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"1603000008010101","srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["758511907217017"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"101_64_4914686","ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1448835148},"tls":{"ja3":["65e083060901bd26e31a66556ae6396b"],"ja3Cnt":1,"ja3string":["257,,,"],"ja3stringCnt":1,"ja4":["t00i000000_000000000000_000000000000"],"ja4Cnt":1,"ja4_r":["t00i000000__"],"ja4_rCnt":1},"totDataBytes":116} +{"@timestamp":1787224362620,"_id":"260820-4HpCODEYsX9Ex6xVaHEh4Qb7","_index":"arkime_sessions3-260820","client":{"bytes":16},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":375,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":4,"port":443},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[76825],"firstPacket":1787223305501,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["connection","content-type"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":84,"ipProtocol":6,"lastPacket":1787223314674,"length":9173,"network":{"bytes":717,"community_id":"1:vueUa5dLFAb30HGdAALnHvon00A=","packets":9},"node":"spark-afae","packetPos":[-76825,1269606,90,160,82,98,10120,172,185,341],"packetRange":{"gte":1787223305501,"lte":1787223314674},"protocol":["http","tcp"],"protocolCnt":2,"rootId":"260820-4HpCODEYsX9Ex6xVaHEh4Qb7","segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":342,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":49576},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"1020000042424242","srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"43_64_4417939","ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3702674257},"totDataBytes":119} +{"@timestamp":1787208433883,"_id":"260820-dHluWOUbrN9L0IKz_91Vvp1N","_index":"arkime_sessions3-260820","client":{"bytes":13},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":272,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":4,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[76739],"firstPacket":1787207885164,"initRTT":15,"ipProtocol":6,"lastPacket":1787207885331,"length":167,"network":{"bytes":557,"community_id":"1:tg4z6gXSaz5bcefo1vgoKr+k3LY=","packets":8},"node":"spark-afae","packetPos":[-76739,70206357,90,1197,82,95,12771,328,82],"packetRange":{"gte":1787207885164,"lte":1787207885331},"protocol":["tcp","tls"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":285,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":4,"port":44000},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcPayload8":"1603000008010101","srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1549605034496052"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["contabo-sponge-02-ts","proxy","sensor:contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":3,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":1,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3700629673},"tls":{"ja3":["65e083060901bd26e31a66556ae6396b"],"ja3Cnt":1,"ja3string":["257,,,"],"ja3stringCnt":1,"ja4":["t00i000000_000000000000_000000000000"],"ja4Cnt":1,"ja4_r":["t00i000000__"],"ja4_rCnt":1},"totDataBytes":13} +{"@timestamp":1787208433883,"_id":"260820-dHkJbbm6UtVJsI1sN5P2RS5b","_index":"arkime_sessions3-260820","client":{"bytes":16},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":206,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":3,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[76739],"firstPacket":1787207884992,"initRTT":17,"ipProtocol":6,"lastPacket":1787207885133,"length":141,"network":{"bytes":428,"community_id":"1:BC1yARCPP1xfuZGWDu2zm1d+OzU=","packets":6},"node":"spark-afae","packetPos":[-76739,70201429,90,776,82,98,3108],"packetRange":{"gte":1787207884992,"lte":1787207885133},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":222,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":3,"port":43986},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcPayload8":"1020000042424242","srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"tags":["contabo-sponge-02-ts","proxy","sensor:contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":1,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3426482614},"totDataBytes":16} +{"@timestamp":1787200872326,"_id":"260820-hr4zpoSeoCNJ5bKrLZFEdxO2","_index":"arkime_sessions3-260820","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":66,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":1,"port":443},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[76696],"firstPacket":1787199717787,"ipProtocol":6,"lastPacket":1787199717906,"length":119,"network":{"bytes":186,"community_id":"1:dyxTFvk1ACU1Aq+KugSi8nmw+OY=","packets":3},"node":"spark-afae","packetPos":[-76696,258836,82,0],"packetRange":{"gte":1787199717787,"lte":1787199717906},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":120,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":2,"port":52446},"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":770117761},"totDataBytes":0} +{"@timestamp":1787198753843,"_id":"260820-rngmiGaAZo9Oy7Ma6-uKNL4P","_index":"arkime_sessions3-260820","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":66,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":1,"port":443},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[76684],"firstPacket":1787198179101,"ipProtocol":6,"lastPacket":1787198179132,"length":31,"network":{"bytes":188,"community_id":"1:wvHOdDwqIsJsLdd1Ev/gmVdSR2s=","packets":3},"node":"spark-afae","packetPos":[-76684,18268576,82,1070],"packetRange":{"gte":1787198179101,"lte":1787198179132},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":122,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["00:00:5e:00:01:96","bc:0f:fe:3d:a3:a7"],"mac-cnt":2,"packets":2,"port":45427},"srcOui":["Juniper Networks","ICANN, IANA Department"],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["netcup-ts","honeypot","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["42340_2-1-1-4-1-3_1460_11"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2024229875},"totDataBytes":0} +{"@timestamp":1787197850933,"_id":"260820-mHjQ7WpKMoJCbZ6QswKD6li5","_index":"arkime_sessions3-260820","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":66,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[76679],"firstPacket":1787196865955,"ipProtocol":6,"lastPacket":1787196866123,"length":168,"network":{"bytes":186,"community_id":"1:vyWZ+1w/4Lgb7w/tZPmtpkVMgxk=","packets":3},"node":"spark-afae","packetPos":[-76679,8940748,82,0],"packetRange":{"gte":1787196865955,"lte":1787196866123},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":120,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":52278},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1400_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":317170716},"totDataBytes":0} +{"@timestamp":1787196035455,"_id":"260820-4b0MLWlqdO5J9LxJr9TTZS6l","_index":"arkime_sessions3-260820","client":{"bytes":13},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":375,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":4,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[76669],"firstPacket":1787195490437,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"md5":["6196dba52703776af2e6593f772ed7ce"],"md5Cnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["19b843cc92cb12aa314bb3c3913b2feeb852e85969bf06cb9d096931bfda34ba"],"sha256Cnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":92,"ipProtocol":6,"lastPacket":1787195500612,"length":10175,"network":{"bytes":720,"community_id":"1:zvEA6D08XCA68OC65Ip0Sj9wJ0o=","packets":9},"node":"spark-afae","packetPos":[-76669,3400860,172,717,82,95,29155,82,185,164],"packetRange":{"gte":1787195490437,"lte":1787195500612},"protocol":["tls","tcp","http"],"protocolCnt":3,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":345,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":5,"port":58842},"srcOui":["Grand Junction Networks, Inc.","Arista Networks"],"srcOuiCnt":2,"srcPayload8":"1603000008010101","srcRIR":"RIPE","srcTTL":[55],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["754031476976321"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ac32bdeb-b49d-4079-9e6b-8fbca5e0addf"],"signatureCnt":1,"signatureId":[1031336],"signatureIdCnt":1},"tag":{"block":["false"],"blockCnt":1,"category":["protocol"],"categoryCnt":1,"description":["ip addresses with this tag have been observed attempting to opportunistically crawl the internet and establish tls/ssl connections."],"intention":["unknown"],"intentionCnt":1,"name":["tls/ssl crawler"],"nameCnt":1},"tags":["honeypot","contabo-sponge-01-ts","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4ls":"73_64_4907451","ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3415927730},"tls":{"ja3":["65e083060901bd26e31a66556ae6396b"],"ja3Cnt":1,"ja3string":["257,,,"],"ja3stringCnt":1,"ja4":["t00i000000_000000000000_000000000000"],"ja4Cnt":1,"ja4_r":["t00i000000__"],"ja4_rCnt":1},"totDataBytes":116} +{"@timestamp":1787196035455,"_id":"260820-4b2WWQbM_11JU4kYRO1Rsjkf","_index":"arkime_sessions3-260820","client":{"bytes":16},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":375,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":4,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[76669],"firstPacket":1787195481436,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"md5":["6196dba52703776af2e6593f772ed7ce"],"md5Cnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["19b843cc92cb12aa314bb3c3913b2feeb852e85969bf06cb9d096931bfda34ba"],"sha256Cnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":87,"ipProtocol":6,"lastPacket":1787195490651,"length":9215,"network":{"bytes":723,"community_id":"1:glLSYxaGBdYSK+cQEkPMCGCeP3M=","packets":9},"node":"spark-afae","packetPos":[-76669,3365041,90,0,82,98,35549,172,185,881],"packetRange":{"gte":1787195481436,"lte":1787195490651},"protocol":["tcp","http"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":348,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":5,"port":46994},"srcOui":["Grand Junction Networks, Inc.","Arista Networks"],"srcOuiCnt":2,"srcPayload8":"1020000042424242","srcRIR":"RIPE","srcTTL":[56],"srcTTLCnt":1,"tags":["honeypot","contabo-sponge-01-ts","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4ls":"68_64_4421773","ja4t":["64240_2-4-8-1-3_1460_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1587130527},"totDataBytes":119} +{"@timestamp":1787193933093,"_id":"260820-lL3XuyTeu7JDf5vNlcRoXdE1","_index":"arkime_sessions3-260820","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":66,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[76657],"firstPacket":1787192998057,"ipProtocol":6,"lastPacket":1787192998088,"length":31,"network":{"bytes":192,"community_id":"1:aRdppeL+uo36ElQETqoOljQ6lZc=","packets":3},"node":"spark-afae","packetPos":[-76657,3547768,82,0],"packetRange":{"gte":1787192998057,"lte":1787192998088},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":126,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["c0:69:11:cd:1f:19","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":2,"port":35203},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"tags":["contabo-sponge-02-ts","proxy","sensor:contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":400216613},"totDataBytes":0} +{"@timestamp":1787190626876,"_id":"260820-G72icNFw1RtHoKRdVFhUZOQd","_index":"arkime_sessions3-260820","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":66,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":1,"port":443},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[76639],"firstPacket":1787189890941,"ipProtocol":6,"lastPacket":1787189891107,"length":166,"network":{"bytes":192,"community_id":"1:bEpUHtaprJnpBB6WmlqqOpgMVlI=","packets":3},"node":"spark-afae","packetPos":[-76639,1203845,82,442],"packetRange":{"gte":1787189890941,"lte":1787189891107},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":126,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":2,"port":45752},"srcOui":["Grand Junction Networks, Inc.","Arista Networks"],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[56],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["64240_2-1-1-4-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3613841877},"totDataBytes":0} +{"@timestamp":1787138181763,"_id":"260819-ynMokQOBTfdEkINoz657vgO7","_index":"arkime_sessions3-260819","client":{"bytes":52},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":8080},"dstRIR":"ARIN","ethertype":2048,"fileId":[76348],"firstPacket":1787137675911,"ipProtocol":17,"lastPacket":1787137675911,"length":0,"network":{"bytes":94,"community_id":"1:/kl5CkMJrhi5F8pPpv/uMGonez8=","packets":1},"node":"spark-afae","packetPos":[-76348,1032228],"packetRange":{"gte":1787137675911,"lte":1787137675911},"protocol":["udp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":94,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7"],"mac-cnt":1,"packets":1,"port":46687},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"08ef002600000000","srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["netcup-ts","honeypot","sensor:netcup-ts"],"tagsCnt":3,"totDataBytes":52} +{"@timestamp":1787138181719,"_id":"260819-ynMZxGQwMyJIqY10TIt_i8Jz","_index":"arkime_sessions3-260819","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":66,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":1,"port":8080},"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[76348],"firstPacket":1787137674763,"ipProtocol":6,"lastPacket":1787137675818,"length":1055,"network":{"bytes":188,"community_id":"1:vd0/xSh7dx91WLHiy74y0xi/+rw=","packets":3},"node":"spark-afae","packetPos":[-76348,1031910,82,164],"packetRange":{"gte":1787137674763,"lte":1787137675818},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":122,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["bc:0f:fe:3d:a3:a7","00:00:5e:00:01:96"],"mac-cnt":2,"packets":2,"port":51404},"srcOui":["Juniper Networks","ICANN, IANA Department"],"srcOuiCnt":2,"srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["netcup-ts","honeypot","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2-1-3-1-1-4_1460_8"],"ja4tCnt":1,"ja4ts":["42340_2-1-1-4-1-3_1460_11"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2137311022},"totDataBytes":0} +{"@timestamp":1787137572282,"_id":"260819-v3ODATQBU9FDGLBAIHQ00sFl","_index":"arkime_sessions3-260819","client":{"bytes":52},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["FlokiNET Ltd"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["FlokiNET Ltd"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":0,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":0,"port":8080},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","ethertype":2048,"fileId":[76345],"firstPacket":1787136728849,"ipProtocol":17,"lastPacket":1787136728849,"length":0,"network":{"bytes":94,"community_id":"1:sSwdWHSwH/nd4hzYxNGGEXq3jJ8=","packets":1},"node":"spark-afae","packetPos":[-76345,5887851],"packetRange":{"gte":1787136728849,"lte":1787136728849},"protocol":["udp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS200651 FlokiNET ehf","number":200651,"organization":{"name":"FlokiNET ehf"}},"bytes":94,"geo":{"country_iso_code":"RO"},"ip":"185.100.87.136","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":1,"port":58502},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"08ef002600000000","srcRIR":"RIPE","srcTTL":[53],"srcTTLCnt":1,"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"totDataBytes":52} diff --git a/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113642_412bf26b.ndjson b/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113642_412bf26b.ndjson new file mode 100644 index 0000000..e0db603 --- /dev/null +++ b/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113642_412bf26b.ndjson @@ -0,0 +1,100 @@ +{"@timestamp":1788176013243,"_id":"260831-U0YGeVTNYg9ECof_mSgynVjt","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":25565},"dstRIR":"ARIN","ethertype":2048,"fileId":[82449],"firstPacket":1788175456838,"ipProtocol":6,"lastPacket":1788175456838,"length":0,"network":{"bytes":56,"community_id":"1:K1eKO0mfdJz4H9oell2FXbkapKg=","packets":1},"node":"spark-afae","packetPos":[-82449,171223],"packetRange":{"gte":1788175456838,"lte":1788175456838},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":56,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":38756},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[248],"srcTTLCnt":1,"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3801039780},"totDataBytes":0} +{"@timestamp":1788175716280,"_id":"260831-tD8KTUMJguJCDbrcwxiAEtrx","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":25565},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82447],"firstPacket":1788174723786,"ipProtocol":6,"lastPacket":1788174723786,"length":0,"network":{"bytes":60,"community_id":"1:2s/FTWbhM9ZuMvy0YR39w15+T1o=","packets":1},"node":"spark-afae","packetPos":[-82447,312313],"packetRange":{"gte":1788174723786,"lte":1788174723786},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":48594},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2292216167},"totDataBytes":0} +{"@timestamp":1788174195736,"_id":"260831-t83gB6y2lRFE8LWSIy-YzjPa","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":26312},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82438],"firstPacket":1788173699463,"ipProtocol":6,"lastPacket":1788173699463,"length":0,"network":{"bytes":60,"community_id":"1:ptBAoz4goaP6fn2yUQUIOZtB3Po=","packets":1},"node":"spark-afae","packetPos":[-82438,7045857],"packetRange":{"gte":1788173699463,"lte":1788173699463},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":44956},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["proxy","sensor:contabo-sponge-02-ts","contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3555019893},"totDataBytes":0} +{"@timestamp":1788173895701,"_id":"260831-MkZ9pZjZK8VCHbX3_E8SvPm3","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":26312},"dstRIR":"RIPE","ethertype":2048,"fileId":[82434],"firstPacket":1788173141762,"ipProtocol":6,"lastPacket":1788173141762,"length":0,"network":{"bytes":54,"community_id":"1:Aga4NvKaIX11W37vehv+w5uKmo8=","packets":1},"node":"spark-afae","packetPos":[-82434,173372],"packetRange":{"gte":1788173141762,"lte":1788173141762},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":1,"port":48440},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[245],"srcTTLCnt":1,"tags":["sponge-01-ts","sensor:sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2579894765},"totDataBytes":0} +{"@timestamp":1788173594044,"_id":"260831-aT_gTIWe9ApCFqRAfJrcxe1y","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":26312},"dstRIR":"ARIN","ethertype":2048,"fileId":[82433],"firstPacket":1788173088664,"ipProtocol":6,"lastPacket":1788173088664,"length":0,"network":{"bytes":56,"community_id":"1:9qCh6hPNFLLzM6P6vCUvQnJiauM=","packets":1},"node":"spark-afae","packetPos":[-82433,321486],"packetRange":{"gte":1788173088664,"lte":1788173088664},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":56,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":45337},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[248],"srcTTLCnt":1,"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":870090501},"totDataBytes":0} +{"@timestamp":1788173292912,"_id":"260831-Xj9c45ckoGtBkZzjcQI_DXsk","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":26312},"dstRIR":"ARIN","ethertype":2048,"fileId":[82431],"firstPacket":1788172631586,"ipProtocol":6,"lastPacket":1788172631586,"length":0,"network":{"bytes":54,"community_id":"1:i3r5vYvBOR4hL7NkUUVimsWQWyM=","packets":1},"node":"spark-afae","packetPos":[-82431,168111],"packetRange":{"gte":1788172631586,"lte":1788172631586},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":36096},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[18],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[240],"srcTTLCnt":1,"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3844232795},"totDataBytes":0} +{"@timestamp":1788172995850,"_id":"260831-ls0zWfU3fVpBuoQhm6PbxU0U","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":0,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":0,"port":26312},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","ethertype":2048,"fileId":[82430],"firstPacket":1788172136296,"ipProtocol":6,"lastPacket":1788172136296,"length":0,"network":{"bytes":58,"community_id":"1:86YmlKbh2Ifd7hclPkSmKy7stUA=","packets":1},"node":"spark-afae","packetPos":[-82430,217681332],"packetRange":{"gte":1788172136296,"lte":1788172136296},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":58,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":1,"port":39513},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[240],"srcTTLCnt":1,"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2_536_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":164081633},"totDataBytes":0} +{"@timestamp":1788172384134,"_id":"260831-Pj9_iWxrIPFGKrDQnIlJonaC","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":26312},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82425],"firstPacket":1788171477878,"ipProtocol":6,"lastPacket":1788171477878,"length":0,"network":{"bytes":60,"community_id":"1:xwCH3uQhvvcHnmjY5J1BoFFI9vk=","packets":1},"node":"spark-afae","packetPos":[-82425,754614],"packetRange":{"gte":1788171477878,"lte":1788171477878},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":45191},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","sensor:contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3807853290},"totDataBytes":0} +{"@timestamp":1788171180976,"_id":"260831-ET-AushPQadGKLA7_Q03wfLa","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":0,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":0,"port":27202},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","ethertype":2048,"fileId":[82417],"firstPacket":1788170646784,"ipProtocol":6,"lastPacket":1788170646784,"length":0,"network":{"bytes":58,"community_id":"1:xMMrbPohMuZGAXcfGSbeuY92Oj8=","packets":1},"node":"spark-afae","packetPos":[-82417,171858841],"packetRange":{"gte":1788170646784,"lte":1788170646784},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":58,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":1,"port":41926},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[241],"srcTTLCnt":1,"tags":["sensor:frantech-ts","frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_2_536_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2364798792},"totDataBytes":0} +{"@timestamp":1788170877036,"_id":"260831-Bj_9N3_KnsNFhINFVIrI6wGd","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":27202},"dstRIR":"ARIN","ethertype":2048,"fileId":[82415],"firstPacket":1788170369824,"ipProtocol":6,"lastPacket":1788170369824,"length":0,"network":{"bytes":56,"community_id":"1:0Bg/mcxKSl+PfBqpF2R0GUWQNQE=","packets":1},"node":"spark-afae","packetPos":[-82415,1163553],"packetRange":{"gte":1788170369824,"lte":1788170369824},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":56,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":45839},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[248],"srcTTLCnt":1,"tags":["sensor:netcup-ts","netcup-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3233530105},"totDataBytes":0} +{"@timestamp":1788170577652,"_id":"260831-EUYjw1U5LS5GiYlcgMcz6K2w","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":27202},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82413],"firstPacket":1788169974816,"ipProtocol":6,"lastPacket":1788169974816,"length":0,"network":{"bytes":60,"community_id":"1:9J6HJM+PaaV4oM4V40oCfs0i+Po=","packets":1},"node":"spark-afae","packetPos":[-82413,2731520],"packetRange":{"gte":1788169974816,"lte":1788169974816},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":37388},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[243],"srcTTLCnt":1,"tags":["contabo-sponge-02-ts","proxy","sensor:contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1546808543},"totDataBytes":0} +{"@timestamp":1788170576706,"_id":"260831-U83I7JSWuEBFrJqyimfgB3jt","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":27202},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82414],"firstPacket":1788169505171,"ipProtocol":6,"lastPacket":1788169505171,"length":0,"network":{"bytes":60,"community_id":"1:ZC8sv3ZxoTaSFjsxkKZ9idA8NM0=","packets":1},"node":"spark-afae","packetPos":[-82414,417228],"packetRange":{"gte":1788169505171,"lte":1788169505171},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":59593},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[245],"srcTTLCnt":1,"tags":["honeypot","sensor:contabo-sponge-01-ts","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3514063929},"totDataBytes":0} +{"@timestamp":1788169676732,"_id":"260831-2j4z35Eo_N9AyqXGzxFeE0uN","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":27202},"dstRIR":"ARIN","ethertype":2048,"fileId":[82408],"firstPacket":1788169095728,"ipProtocol":6,"lastPacket":1788169095728,"length":0,"network":{"bytes":54,"community_id":"1:BHvl/9lHu3a5/N4aRsmUxEiPagQ=","packets":1},"node":"spark-afae","packetPos":[-82408,128686],"packetRange":{"gte":1788169095728,"lte":1788169095728},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":40762},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[18],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[240],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":927917281},"totDataBytes":0} +{"@timestamp":1788169377269,"_id":"260831-BUYqOCLNl0RP_ZY7QGJgsLEp","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":27202},"dstRIR":"RIPE","ethertype":2048,"fileId":[82404],"firstPacket":1788168909574,"ipProtocol":6,"lastPacket":1788168909574,"length":0,"network":{"bytes":54,"community_id":"1:9dwf4tFSTUYC0o+ezs30KjqjSDs=","packets":1},"node":"spark-afae","packetPos":[-82404,301186],"packetRange":{"gte":1788168909574,"lte":1788168909574},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":1,"port":45884},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["honeypot","sponge-01-ts","sensor:sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":180168500},"totDataBytes":0} +{"@timestamp":1788168169443,"_id":"260831-rj4cgF2r3WFD160TXYTyN85a","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":27391},"dstRIR":"ARIN","ethertype":2048,"fileId":[82397],"firstPacket":1788166955989,"ipProtocol":6,"lastPacket":1788166955989,"length":0,"network":{"bytes":54,"community_id":"1:Zu4GNJQarsRbNcp9eproLilrLWg=","packets":1},"node":"spark-afae","packetPos":[-82397,37416],"packetRange":{"gte":1788166955989,"lte":1788166955989},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":57407},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[18],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[241],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":186435688},"totDataBytes":0} +{"@timestamp":1788167868115,"_id":"260831-oz4Qh38QxnFGmJJIYT_Mbljp","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":27391},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82396],"firstPacket":1788166727760,"ipProtocol":6,"lastPacket":1788166727760,"length":0,"network":{"bytes":60,"community_id":"1:IT6nXnOCvS+Ny2fDj6WrB41HHjU=","packets":1},"node":"spark-afae","packetPos":[-82396,71286],"packetRange":{"gte":1788166727760,"lte":1788166727760},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":59996},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["proxy","sensor:contabo-sponge-02-ts","contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2596432280},"totDataBytes":0} +{"@timestamp":1788167268554,"_id":"260831-Bs3_yR31eOhG8JZ7gKhyAK7q","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":27391},"dstRIR":"ARIN","ethertype":2048,"fileId":[82390],"firstPacket":1788166386297,"ipProtocol":6,"lastPacket":1788166386297,"length":0,"network":{"bytes":56,"community_id":"1:WcBuHJ6gJQj4OIoSDmq8g2M6gsk=","packets":1},"node":"spark-afae","packetPos":[-82390,112841],"packetRange":{"gte":1788166386297,"lte":1788166386297},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":56,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":49302},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[248],"srcTTLCnt":1,"tags":["netcup-ts","sensor:netcup-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":451799016},"totDataBytes":0} +{"@timestamp":1788166368883,"_id":"260831-bD6XT76qm1ZPkKwMtPDfEu2A","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":0,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":0,"port":27391},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","ethertype":2048,"fileId":[82386],"firstPacket":1788165706610,"ipProtocol":6,"lastPacket":1788165706610,"length":0,"network":{"bytes":58,"community_id":"1:EaUZYzQ5XP/tS1dln4j94kh2f3E=","packets":1},"node":"spark-afae","packetPos":[-82386,88514679],"packetRange":{"gte":1788165706610,"lte":1788165706610},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":58,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":1,"port":45487},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[242],"srcTTLCnt":1,"tags":["honeypot","sensor:frantech-ts","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2_536_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3038448671},"totDataBytes":0} +{"@timestamp":1788164866506,"_id":"260831-usyiyY9MZTRE_Kq6TsHsutNA","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":27391},"dstRIR":"RIPE","ethertype":2048,"fileId":[82374],"firstPacket":1788164423100,"ipProtocol":6,"lastPacket":1788164423100,"length":0,"network":{"bytes":54,"community_id":"1:PwRB9K75Q4LjPN+jvIjhktZtBqY=","packets":1},"node":"spark-afae","packetPos":[-82374,190210],"packetRange":{"gte":1788164423100,"lte":1788164423100},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":1,"port":60698},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[245],"srcTTLCnt":1,"tags":["sponge-01-ts","honeypot","sensor:sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1453692158},"totDataBytes":0} +{"@timestamp":1788165167059,"_id":"260831-xcxe8_mUcDRA-b4kOXmWEmBc","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":27391},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82378],"firstPacket":1788164376529,"ipProtocol":6,"lastPacket":1788164376529,"length":0,"network":{"bytes":60,"community_id":"1:/ptVIc75xFEMMTvIBJK7FvspEto=","packets":1},"node":"spark-afae","packetPos":[-82378,1144340],"packetRange":{"gte":1788164376529,"lte":1788164376529},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":57987},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["honeypot","sensor:contabo-sponge-01-ts","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":246221713},"totDataBytes":0} +{"@timestamp":1788164565266,"_id":"260831-LD4g2b7XLHBOuIKz-69lZL_n","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":27866},"dstRIR":"ARIN","ethertype":2048,"fileId":[82373],"firstPacket":1788163810736,"ipProtocol":6,"lastPacket":1788163810736,"length":0,"network":{"bytes":54,"community_id":"1:F/gVjJe3B98pxBuSzs+xJovbK+g=","packets":1},"node":"spark-afae","packetPos":[-82373,152659],"packetRange":{"gte":1788163810736,"lte":1788163810736},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":49242},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[18],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[240],"srcTTLCnt":1,"tags":["sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":834825411},"totDataBytes":0} +{"@timestamp":1788164564732,"_id":"260831-r8yi-03aTcVK6Z8w-HYDoj1E","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":27866},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82371],"firstPacket":1788163741124,"ipProtocol":6,"lastPacket":1788163741124,"length":0,"network":{"bytes":60,"community_id":"1:Qhzd0wDYw2LIOcfmbYe368E+Fy4=","packets":1},"node":"spark-afae","packetPos":[-82371,657754],"packetRange":{"gte":1788163741124,"lte":1788163741124},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":55883},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-02-ts","contabo-sponge-02-ts","proxy"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":585156629},"totDataBytes":0} +{"@timestamp":1788163664236,"_id":"260831-w0UoaFkXT6FHBJUz4UcAoL2Y","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":27866},"dstRIR":"ARIN","ethertype":2048,"fileId":[82366],"firstPacket":1788163009871,"ipProtocol":6,"lastPacket":1788163009871,"length":0,"network":{"bytes":56,"community_id":"1:kh9znHAO2BYaS58FDCxaMSaiYcs=","packets":1},"node":"spark-afae","packetPos":[-82366,288795],"packetRange":{"gte":1788163009871,"lte":1788163009871},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":56,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":34087},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[248],"srcTTLCnt":1,"tags":["netcup-ts","honeypot","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":84688865},"totDataBytes":0} +{"@timestamp":1788162762634,"_id":"260831-9j0UO9ebeV5NGZDy8K-S_jEl","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":0,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":0,"port":27866},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","ethertype":2048,"fileId":[82362],"firstPacket":1788161789816,"ipProtocol":6,"lastPacket":1788161789816,"length":0,"network":{"bytes":58,"community_id":"1:wAOI0/brZlBzBpSBbRPM5d/Oo8A=","packets":1},"node":"spark-afae","packetPos":[-82362,143257],"packetRange":{"gte":1788161789816,"lte":1788161789816},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":58,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":1,"port":36998},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[241],"srcTTLCnt":1,"tags":["honeypot","sensor:frantech-ts","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2_536_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":4156764267},"totDataBytes":0} +{"@timestamp":1788162159659,"_id":"260831-bcwvBHxsvX9LE5-CD0tiFV4W","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":27866},"dstRIR":"RIPE","ethertype":2048,"fileId":[82356],"firstPacket":1788161605202,"ipProtocol":6,"lastPacket":1788161605202,"length":0,"network":{"bytes":54,"community_id":"1:cBL6rQkolGJtENKqWCmeZXwzSDU=","packets":1},"node":"spark-afae","packetPos":[-82356,241950],"packetRange":{"gte":1788161605202,"lte":1788161605202},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":1,"port":40273},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["honeypot","sponge-01-ts","sensor:sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3621212588},"totDataBytes":0} +{"@timestamp":1788162458010,"_id":"260831-eMzcwE7CuERPC5JBvmPf90Cp","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":27866},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82360],"firstPacket":1788161199150,"ipProtocol":6,"lastPacket":1788161199150,"length":0,"network":{"bytes":60,"community_id":"1:SVwBPK20EKT1rqdfQyh+CU6YYbM=","packets":1},"node":"spark-afae","packetPos":[-82360,171757],"packetRange":{"gte":1788161199150,"lte":1788161199150},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":40535},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[245],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":332935837},"totDataBytes":0} +{"@timestamp":1788162157974,"_id":"260831-4D2-6vIhFApJAYYV-QxOD9CO","_index":"arkime_sessions3-260831","client":{"bytes":3},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":639,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":8,"port":28015},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82357],"firstPacket":1788160960343,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":65,"ipProtocol":6,"lastPacket":1788161002949,"length":42606,"network":{"bytes":1232,"community_id":"1:U3fw5/G6XgBVrlF88oNETfTpJuM=","packets":17},"node":"spark-afae","packetPos":[-82357,641726,90,160,82,85,34509,82,0,152,38247,82,152,82,49096,82,185,222],"packetRange":{"gte":1788160960343,"lte":1788161002949},"protocol":["http","tcp"],"protocolCnt":2,"rootId":"260831-4D2-6vIhFApJAYYV-QxOD9CO","segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":593,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":9,"port":41424},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"050100","srcRIR":"ARIN","srcTTL":[49],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":["","Attempted Information Leak"],"categoryCnt":2,"flowId":["65970072085693"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[2,3],"severityCnt":2,"signature":["553b5765-6241-4e9a-9982-0ca113796134","5a66c944-faed-4791-9d94-b44b7bd48352"],"signatureCnt":2,"signatureId":[1031235,2000181],"signatureIdCnt":2},"tags":["honeypot","sensor:frantech-ts","frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"41_64_21172091","ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":10,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2420588357},"totDataBytes":106} +{"@timestamp":1788161236341,"_id":"260831-yj2qvKFi40RFUJ6u0SFtPUc8","_index":"arkime_sessions3-260831","client":{"bytes":125},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":28015},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82351],"firstPacket":1788160821896,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["azenv.net"],"hostCnt":1,"ja4h":["ge11nn040000_8391bea91fb6_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn040000_Host,User-Agent,Accept-Encoding,Connection__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["http://azenv.net/"],"pathCnt":1,"requestHeader":["user-agent","accept-encoding","connection","host"],"requestHeaderCnt":4,"requestHeaderField":["accept-encoding","connection"],"requestHeaderValue":["gzip","close"],"requestHeaderValueCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["content-length","x-powered-by","date","connection","content-type","server"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","mon, 31 aug 2026 07:20:22 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["http://azenv.net/"],"uriCnt":1,"useragent":["Go-http-client/1.1"],"useragentCnt":1},"initRTT":65,"ipProtocol":6,"lastPacket":1788160822286,"length":390,"network":{"bytes":1208,"community_id":"1:z1SpC0UDIJ8PVBYhuQWpSZe3PQ4=","packets":12},"node":"spark-afae","packetPos":[-82351,39532737,90,402,82,207,82,369,1014,82,0,0,520],"packetRange":{"gte":1788160821896,"lte":1788160822286},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":583,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":7,"port":38116},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"4745542068747470","srcRIR":"ARIN","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1599239500691698"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ce8622a8-6d2f-4fe3-ab81-0cc86e19363e","3d144850-efcc-436a-9008-c5d28ac581ae","869feaa1-dc77-4037-aee2-247b7a39cf7d","23e6932c-e2bd-48cf-80b8-aa98ae9276c4","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7"],"signatureCnt":5,"signatureId":[2000166,1070034,1030619,1031486,2000008],"signatureIdCnt":5},"tag":{"block":["true","false"],"blockCnt":2,"category":["protocol","activity","attack","recon","tool"],"categoryCnt":5,"cves":[""],"cvesCnt":1,"description":["ip addresses with this tag have been seen crawling http(s) servers around the internet.","generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning.","ip addresses with this tag have been observed crawling the internet for unauthenticated web proxies and testing if they are functional.","ip addresses with this tag have been observed scanning the internet using the golang http client.","cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys."],"intention":["unknown","suspicious","malicious"],"intentionCnt":3,"name":["root path scanner","open proxy scanner","go http client","web crawler"],"nameCnt":4},"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4ls":"42_64_tcp","ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":2,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":913703813},"totDataBytes":412} +{"@timestamp":1788160622526,"_id":"260831-tD0Iyg5tsS1IqrC6rq3bgTmc","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":28015},"dstRIR":"ARIN","ethertype":2048,"fileId":[82348],"firstPacket":1788159914622,"ipProtocol":6,"lastPacket":1788159914622,"length":0,"network":{"bytes":54,"community_id":"1:t/94xYFngDg172dS+qYZuNEzrMY=","packets":1},"node":"spark-afae","packetPos":[-82348,326256],"packetRange":{"gte":1788159914622,"lte":1788159914622},"protocol":["tcp"],"protocolCnt":1,"rootId":"260831-tD0Iyg5tsS1IqrC6rq3bgTmc","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":48842},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[18],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[240],"srcTTLCnt":1,"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1094539491},"totDataBytes":0} +{"@timestamp":1788160320732,"_id":"260831-qT1tSdLTMrhGJ5pjYP6A_XId","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":58,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":28015},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82345],"firstPacket":1788159812625,"ipProtocol":6,"lastPacket":1788159812757,"length":132,"network":{"bytes":170,"community_id":"1:reARVY05wSYil94Q4GfsVMBml5w=","packets":3},"node":"spark-afae","packetPos":[-82345,37860552,74,544],"packetRange":{"gte":1788159812625,"lte":1788159812757},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":112,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":46143},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[50,241],"srcTTLCnt":2,"tags":["sensor:frantech-ts","frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_2_536_00"],"ja4tCnt":1,"ja4ts":["64240_2_1460_00"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1181953047},"totDataBytes":0} +{"@timestamp":1788160019308,"_id":"260831-NsxvQAN6pLJCZrqJuVvW-Mla","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":28015},"dstRIR":"ARIN","ethertype":2048,"fileId":[82342],"firstPacket":1788158942663,"ipProtocol":6,"lastPacket":1788158942663,"length":0,"network":{"bytes":56,"community_id":"1:WiJLWwhTDHlxnLyJtc2EeYw3ge4=","packets":1},"node":"spark-afae","packetPos":[-82342,247587],"packetRange":{"gte":1788158942663,"lte":1788158942663},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":56,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":36460},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[248],"srcTTLCnt":1,"tags":["sensor:netcup-ts","honeypot","netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2396114459},"totDataBytes":0} +{"@timestamp":1788159419967,"_id":"260831-iD1byUANLWFMpIJ8KBKx7FyZ","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":28015},"dstRIR":"RIPE","ethertype":2048,"fileId":[82339],"firstPacket":1788158624621,"ipProtocol":6,"lastPacket":1788158624621,"length":0,"network":{"bytes":54,"community_id":"1:POCOqOtk6P4trg6THxEQ2uUkyks=","packets":1},"node":"spark-afae","packetPos":[-82339,472175],"packetRange":{"gte":1788158624621,"lte":1788158624621},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":1,"port":37556},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["sensor:sponge-01-ts","honeypot","sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1944178273},"totDataBytes":0} +{"@timestamp":1788158814684,"_id":"260831-cj16RYBZhZNP-5fLPSHd45ON","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":28015},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82335],"firstPacket":1788158388584,"ipProtocol":6,"lastPacket":1788158388584,"length":0,"network":{"bytes":60,"community_id":"1:epXaZhpZTbif2w1Y2cTUGQm/dpw=","packets":1},"node":"spark-afae","packetPos":[-82335,2358569],"packetRange":{"gte":1788158388584,"lte":1788158388584},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":48562},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[243],"srcTTLCnt":1,"tags":["proxy","sensor:contabo-sponge-02-ts","contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":4078511119},"totDataBytes":0} +{"@timestamp":1788158515452,"_id":"260831-Zz2-hi3DiTRMALC8dPuGYGwR","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":28015},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82333],"firstPacket":1788157760619,"ipProtocol":6,"lastPacket":1788157760619,"length":0,"network":{"bytes":60,"community_id":"1:k2tPeFGA2c3ReLm9GQ7q0zp7r6I=","packets":1},"node":"spark-afae","packetPos":[-82333,385941],"packetRange":{"gte":1788157760619,"lte":1788157760619},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":58872},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1885830942},"totDataBytes":0} +{"@timestamp":1788157604274,"_id":"260831-_svXXFgMrvNAO4-IW8UPh9iM","_index":"arkime_sessions3-260831","client":{"bytes":3},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":1064,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":16,"port":28017},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82328],"firstPacket":1788156753987,"initRTT":66,"ipProtocol":6,"lastPacket":1788156876586,"length":122599,"network":{"bytes":2329,"community_id":"1:cpVmdRlBNMRt4+gzPwOeyEftsFA=","packets":35},"node":"spark-afae","packetPos":[-82328,19212267,90,160,82,85,25970,500,234,82,19621,222,316,82,19314,432,332,82,61539,1360,1799,82,16299,362,82,0,15029,222,82,0,27367,1350,164,82,21254,82],"packetRange":{"gte":1788156753987,"lte":1788156876586},"protocol":["tcp"],"protocolCnt":1,"rootId":"260831-_svXXFgMrvNAO4-IW8UPh9iM","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":1265,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":19,"port":34700},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"050100","srcRIR":"ARIN","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":["Attempted Information Leak",""],"categoryCnt":2,"flowId":["302656256062005"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[2,3],"severityCnt":2,"signature":["553b5765-6241-4e9a-9982-0ca113796134","5a66c944-faed-4791-9d94-b44b7bd48352"],"signatureCnt":2,"signatureId":[1031235,2000181],"signatureIdCnt":2},"tag":{"block":["false","true"],"blockCnt":2,"category":["recon","activity"],"categoryCnt":2,"cves":[""],"cvesCnt":1,"description":["ip addresses with this tag have been observed attempting to discover socks5 proxies that do not require authentication.","socks proxy protocol negotiation"],"intention":["suspicious"],"intentionCnt":1,"name":["socks proxy protocol negotiation","socks5 proxy scanner"],"nameCnt":2},"tags":["honeypot","sensor:frantech-ts","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":30,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":1,"psh":1,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2091935025},"totDataBytes":3} +{"@timestamp":1788157604260,"_id":"260831-_sueR_V46XxCfIiYaX82uD0C","_index":"arkime_sessions3-260831","client":{"bytes":125},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":28017},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82328],"firstPacket":1788156618619,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["azenv.net"],"hostCnt":1,"ja4h":["ge11nn040000_8391bea91fb6_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn040000_Host,User-Agent,Accept-Encoding,Connection__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["http://azenv.net/"],"pathCnt":1,"requestHeader":["accept-encoding","connection","user-agent","host"],"requestHeaderCnt":4,"requestHeaderField":["accept-encoding","connection"],"requestHeaderValue":["gzip","close"],"requestHeaderValueCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["server","connection","content-type","date","x-powered-by","content-length"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","mon, 31 aug 2026 06:10:18 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["http://azenv.net/"],"uriCnt":1,"useragent":["Go-http-client/1.1"],"useragentCnt":1},"initRTT":64,"ipProtocol":6,"lastPacket":1788156618876,"length":257,"network":{"bytes":1088,"community_id":"1:W1MyX6bhAsiAidvgV52u8DFga1c=","packets":10},"node":"spark-afae","packetPos":[-82328,18623350,90,3247,82,207,82,369,82,0,0],"packetRange":{"gte":1788156618619,"lte":1788156618876},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":463,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":38856},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"4745542068747470","srcRIR":"ARIN","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["690282550530438"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ce8622a8-6d2f-4fe3-ab81-0cc86e19363e","3d144850-efcc-436a-9008-c5d28ac581ae","869feaa1-dc77-4037-aee2-247b7a39cf7d","23e6932c-e2bd-48cf-80b8-aa98ae9276c4","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7"],"signatureCnt":5,"signatureId":[2000166,1070034,1030619,1031486,2000008],"signatureIdCnt":5},"tag":{"block":["false","true"],"blockCnt":2,"category":["protocol","tool","recon","activity","attack"],"categoryCnt":5,"cves":[""],"cvesCnt":1,"description":["generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning.","ip addresses with this tag have been observed crawling the internet for unauthenticated web proxies and testing if they are functional.","ip addresses with this tag have been observed scanning the internet using the golang http client.","cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys.","ip addresses with this tag have been seen crawling http(s) servers around the internet."],"intention":["unknown","suspicious","malicious"],"intentionCnt":3,"name":["root path scanner","web crawler","open proxy scanner","go http client"],"nameCnt":4},"tags":["honeypot","sensor:frantech-ts","frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"42_64_tcp","ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2487249366},"totDataBytes":412} +{"@timestamp":1788157305970,"_id":"260831-Rj1NfZJKdtRAHp6rBy4wM895","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":28017},"dstRIR":"ARIN","ethertype":2048,"fileId":[82325],"firstPacket":1788156195863,"ipProtocol":6,"lastPacket":1788156195863,"length":0,"network":{"bytes":56,"community_id":"1:blLGs8ikJ4kMnziz3Vo4pWSxhig=","packets":1},"node":"spark-afae","packetPos":[-82325,77319],"packetRange":{"gte":1788156195863,"lte":1788156195863},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":56,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":60300},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[248],"srcTTLCnt":1,"tags":["sensor:netcup-ts","honeypot","netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2836442277},"totDataBytes":0} +{"@timestamp":1788156403472,"_id":"260831-JT2aMXZx9lRH1KmG2oAg_9g-","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":28017},"dstRIR":"ARIN","ethertype":2048,"fileId":[82318],"firstPacket":1788155333816,"ipProtocol":6,"lastPacket":1788155333816,"length":0,"network":{"bytes":54,"community_id":"1:dsRN+M1c8Y/0iZhm3m4Ay1Wiwd4=","packets":1},"node":"spark-afae","packetPos":[-82318,89098],"packetRange":{"gte":1788155333816,"lte":1788155333816},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":53928},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[18],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[241],"srcTTLCnt":1,"tags":["bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3958585134},"totDataBytes":0} +{"@timestamp":1788155804434,"_id":"260831-Dj25Ws3qOrJCKKvnkvX8jOw_","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":28017},"dstRIR":"RIPE","ethertype":2048,"fileId":[82315],"firstPacket":1788155067610,"ipProtocol":6,"lastPacket":1788155067610,"length":0,"network":{"bytes":54,"community_id":"1:Nd07AzIenaZOsB0E/XVRBsIgk4M=","packets":1},"node":"spark-afae","packetPos":[-82315,47087],"packetRange":{"gte":1788155067610,"lte":1788155067610},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":1,"port":49926},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[245],"srcTTLCnt":1,"tags":["honeypot","sensor:sponge-01-ts","sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":316079462},"totDataBytes":0} +{"@timestamp":1788156104253,"_id":"260831-Gj0KM6dboupPrZTBsVo6-Z-k","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":28017},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82317],"firstPacket":1788155008308,"ipProtocol":6,"lastPacket":1788155008308,"length":0,"network":{"bytes":60,"community_id":"1:xnIFp9qqyPBK8RtylDWIZLXj89Y=","packets":1},"node":"spark-afae","packetPos":[-82317,304083],"packetRange":{"gte":1788155008308,"lte":1788155008308},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":57806},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[245],"srcTTLCnt":1,"tags":["honeypot","sensor:contabo-sponge-01-ts","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":4280062025},"totDataBytes":0} +{"@timestamp":1788155205108,"_id":"260831-vMu-pL5TUb5AToACpZc_fz3L","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":28017},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82309],"firstPacket":1788154890057,"ipProtocol":6,"lastPacket":1788154890057,"length":0,"network":{"bytes":60,"community_id":"1:4FzACNXR5zKSPzhly7itfeJYWQQ=","packets":1},"node":"spark-afae","packetPos":[-82309,947127],"packetRange":{"gte":1788154890057,"lte":1788154890057},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":48157},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[243],"srcTTLCnt":1,"tags":["proxy","contabo-sponge-02-ts","sensor:contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3518917786},"totDataBytes":0} +{"@timestamp":1788154899774,"_id":"260831-7jyvldIS-7VAF7M644IBaH1h","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":58,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":28017},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82308],"firstPacket":1788153761366,"ipProtocol":6,"lastPacket":1788153761508,"length":142,"network":{"bytes":170,"community_id":"1:OIN4BzKnsfvFWPpiTUetm6+XkAQ=","packets":3},"node":"spark-afae","packetPos":[-82308,331611,74,2105],"packetRange":{"gte":1788153761366,"lte":1788153761508},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":112,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":40253},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[51,242],"srcTTLCnt":2,"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2_536_00"],"ja4tCnt":1,"ja4ts":["64240_2_1460_00"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3283011293},"totDataBytes":0} +{"@timestamp":1788153999147,"_id":"260831-zTxhOGiC-p5FN4dqxGvtE4Jw","_index":"arkime_sessions3-260831","client":{"bytes":3},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":1328,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":20,"port":28080},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82303],"firstPacket":1788152945202,"initRTT":64,"ipProtocol":6,"lastPacket":1788153084499,"length":139297,"network":{"bytes":2857,"community_id":"1:/YtsECNoke0nsi4pXc3MnToQsyg=","packets":43},"node":"spark-afae","packetPos":[-82303,8793555,90,1098,82,85,123867,502,1468,82,96890,82,755,82,38896,222,0,82,26813,246,222,82,29821,564,552,82,54123,328,1598,82,25158,222,471,82,26041,82,394,82,60381,222,0,82,646,82],"packetRange":{"gte":1788152945202,"lte":1788153084499},"protocol":["tcp"],"protocolCnt":1,"rootId":"260831-zTxhOGiC-p5FN4dqxGvtE4Jw","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":1529,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":23,"port":53318},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"050100","srcRIR":"ARIN","srcTTL":[49],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":["","Attempted Information Leak"],"categoryCnt":2,"flowId":["308113840161104"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[2,3],"severityCnt":2,"signature":["553b5765-6241-4e9a-9982-0ca113796134","5a66c944-faed-4791-9d94-b44b7bd48352"],"signatureCnt":2,"signatureId":[1031235,2000181],"signatureIdCnt":2},"tags":["honeypot","sensor:frantech-ts","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":38,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":1,"psh":1,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":928563089},"totDataBytes":3} +{"@timestamp":1788153999117,"_id":"260831-zTwkHAsqx1dGsp5uz79uGGSj","_index":"arkime_sessions3-260831","client":{"bytes":125},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":28080},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82303],"firstPacket":1788152809960,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["azenv.net"],"hostCnt":1,"ja4h":["ge11nn040000_8391bea91fb6_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn040000_Host,User-Agent,Accept-Encoding,Connection__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["http://azenv.net/"],"pathCnt":1,"requestHeader":["user-agent","host","accept-encoding","connection"],"requestHeaderCnt":4,"requestHeaderField":["accept-encoding","connection"],"requestHeaderValue":["gzip","close"],"requestHeaderValueCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["server","date","content-type","content-length","connection","x-powered-by"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","mon, 31 aug 2026 05:06:50 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["http://azenv.net/"],"uriCnt":1,"useragent":["Go-http-client/1.1"],"useragentCnt":1},"initRTT":65,"ipProtocol":6,"lastPacket":1788152810220,"length":260,"network":{"bytes":1088,"community_id":"1:7CP9qA9ANxp0lcF2OuhjaI3x7tk=","packets":10},"node":"spark-afae","packetPos":[-82303,117154,90,0,82,207,82,369,82,0,0],"packetRange":{"gte":1788152809960,"lte":1788152810220},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":463,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":34658},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"4745542068747470","srcRIR":"ARIN","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["467245330024162"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","3d144850-efcc-436a-9008-c5d28ac581ae","23e6932c-e2bd-48cf-80b8-aa98ae9276c4","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7","ce8622a8-6d2f-4fe3-ab81-0cc86e19363e"],"signatureCnt":5,"signatureId":[2000166,1070034,1030619,1031486,2000008],"signatureIdCnt":5},"tag":{"block":["false","true"],"blockCnt":2,"category":["attack","recon","protocol","tool","activity"],"categoryCnt":5,"cves":[""],"cvesCnt":1,"description":["ip addresses with this tag have been seen crawling http(s) servers around the internet.","cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys.","generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning.","ip addresses with this tag have been observed crawling the internet for unauthenticated web proxies and testing if they are functional.","ip addresses with this tag have been observed scanning the internet using the golang http client."],"intention":["suspicious","malicious","unknown"],"intentionCnt":3,"name":["go http client","web crawler","open proxy scanner","root path scanner"],"nameCnt":4},"tags":["honeypot","sensor:frantech-ts","frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"48_64_tcp","ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2297734709},"totDataBytes":412} +{"@timestamp":1788153397489,"_id":"260831-tzyawe7AS5lP44eGUfrC9VXe","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":28080},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82298],"firstPacket":1788152724456,"ipProtocol":6,"lastPacket":1788152724456,"length":0,"network":{"bytes":60,"community_id":"1:lS75XMRMx5IqGiNLB37LzAqfKw4=","packets":1},"node":"spark-afae","packetPos":[-82298,819003],"packetRange":{"gte":1788152724456,"lte":1788152724456},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":33330},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","sensor:contabo-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":853389461},"totDataBytes":0} +{"@timestamp":1788153097282,"_id":"260831-kMtkKoEGN7hCOp7XSEc4bCk6","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":28080},"dstRIR":"RIPE","ethertype":2048,"fileId":[82296],"firstPacket":1788152418370,"ipProtocol":6,"lastPacket":1788152418370,"length":0,"network":{"bytes":54,"community_id":"1:prCSpfDJW59smPLKwU3rJDA9j5U=","packets":1},"node":"spark-afae","packetPos":[-82296,45854],"packetRange":{"gte":1788152418370,"lte":1788152418370},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":1,"port":51401},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[245],"srcTTLCnt":1,"tags":["sponge-01-ts","honeypot","sensor:sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1822439004},"totDataBytes":0} +{"@timestamp":1788152797506,"_id":"260831-oTz7c9pF7m9ApoMZvCxFpyMC","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":28080},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82294],"firstPacket":1788151465725,"ipProtocol":6,"lastPacket":1788151465725,"length":0,"network":{"bytes":60,"community_id":"1:59700E9qutjBVMWDrkR/miIv1bg=","packets":1},"node":"spark-afae","packetPos":[-82294,15818],"packetRange":{"gte":1788151465725,"lte":1788151465725},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":33210},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[243],"srcTTLCnt":1,"tags":["proxy","sensor:contabo-sponge-02-ts","contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2387440218},"totDataBytes":0} +{"@timestamp":1788151894732,"_id":"260831-gDwf7sRcRQBNnKcrs2Ob038j","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":28080},"dstRIR":"ARIN","ethertype":2048,"fileId":[82289],"firstPacket":1788151174815,"ipProtocol":6,"lastPacket":1788151174815,"length":0,"network":{"bytes":54,"community_id":"1:Rh4dpCzAQfqH1zlIDBSeN/V2PQw=","packets":1},"node":"spark-afae","packetPos":[-82289,158764],"packetRange":{"gte":1788151174815,"lte":1788151174815},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":39113},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[18],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[240],"srcTTLCnt":1,"tags":["honeypot","bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1823935315},"totDataBytes":0} +{"@timestamp":1788150384299,"_id":"260831-STwkcTWFkstDjLb2bntHkaGF","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":58,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":28080},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82278],"firstPacket":1788149844724,"ipProtocol":6,"lastPacket":1788149844854,"length":130,"network":{"bytes":170,"community_id":"1:lh0uqsfPJRDgfHD/Q8yCROG5tzU=","packets":3},"node":"spark-afae","packetPos":[-82278,5186663,74,0],"packetRange":{"gte":1788149844724,"lte":1788149844854},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":112,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":37745},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[49,240],"srcTTLCnt":2,"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2_536_00"],"ja4tCnt":1,"ja4ts":["64240_2_1460_00"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2306315447},"totDataBytes":0} +{"@timestamp":1788150388869,"_id":"260831-Q8sOfN8uvAdBAqOxeqWuxjhP","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":28080},"dstRIR":"ARIN","ethertype":2048,"fileId":[82277],"firstPacket":1788149668008,"ipProtocol":6,"lastPacket":1788149668008,"length":0,"network":{"bytes":56,"community_id":"1:vO5aS/SzhcFKrBe3a6CIJ4ReQkI=","packets":1},"node":"spark-afae","packetPos":[-82277,2100788],"packetRange":{"gte":1788149668008,"lte":1788149668008},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":56,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":38641},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[248],"srcTTLCnt":1,"tags":["netcup-ts","sensor:netcup-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2929491905},"totDataBytes":0} +{"@timestamp":1788148884280,"_id":"260831-HkWiNPsXqj9PnYcRKuNxNnCP","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":28081},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82267],"firstPacket":1788148325826,"ipProtocol":6,"lastPacket":1788148325826,"length":0,"network":{"bytes":60,"community_id":"1:mwYPoJjYFuHyRODvng5gvp8GTvE=","packets":1},"node":"spark-afae","packetPos":[-82267,917359],"packetRange":{"gte":1788148325826,"lte":1788148325826},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":44225},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-02-ts","contabo-sponge-02-ts","proxy"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2644219308},"totDataBytes":0} +{"@timestamp":1788148883894,"_id":"260831-NArZm4l_BSpBfoSxb024BLsj","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":0,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":0,"port":28081},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","ethertype":2048,"fileId":[82270],"firstPacket":1788148171366,"ipProtocol":6,"lastPacket":1788148171366,"length":0,"network":{"bytes":58,"community_id":"1:E82dzCknwDVTkx84Sfrmk99Nyas=","packets":1},"node":"spark-afae","packetPos":[-82270,2486455],"packetRange":{"gte":1788148171366,"lte":1788148171366},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":58,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":1,"port":48840},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[241],"srcTTLCnt":1,"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_2_536_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3587117729},"totDataBytes":0} +{"@timestamp":1788148276257,"_id":"260831-_DvL80UGvDNFvJlt-IljaGNO","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":28081},"dstRIR":"ARIN","ethertype":2048,"fileId":[82265],"firstPacket":1788147606642,"ipProtocol":6,"lastPacket":1788147606642,"length":0,"network":{"bytes":56,"community_id":"1:dbRSX2QqNsNP8rVPZFCe9EHwW98=","packets":1},"node":"spark-afae","packetPos":[-82265,1035301],"packetRange":{"gte":1788147606642,"lte":1788147606642},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":56,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":48125},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[248],"srcTTLCnt":1,"tags":["sensor:netcup-ts","honeypot","netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3811087836},"totDataBytes":0} +{"@timestamp":1788148883937,"_id":"260831-I8sgWvskEvlO7oJiFu-t9c5r","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":28081},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82269],"firstPacket":1788147577359,"ipProtocol":6,"lastPacket":1788147577359,"length":0,"network":{"bytes":60,"community_id":"1:B0yrxm8bDXu6ToGSSt1iInp/Vz4=","packets":1},"node":"spark-afae","packetPos":[-82269,13856],"packetRange":{"gte":1788147577359,"lte":1788147577359},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":36954},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2670894509},"totDataBytes":0} +{"@timestamp":1788147676391,"_id":"260831-Dcs5zKPV2XRG97YLmKK_7Uce","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":28081},"dstRIR":"RIPE","ethertype":2048,"fileId":[82260],"firstPacket":1788147460044,"ipProtocol":6,"lastPacket":1788147460044,"length":0,"network":{"bytes":54,"community_id":"1:8OzU4mEUJetGAdBY5Rr/O9PiV3k=","packets":1},"node":"spark-afae","packetPos":[-82260,117011],"packetRange":{"gte":1788147460044,"lte":1788147460044},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":1,"port":54038},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["honeypot","sensor:sponge-01-ts","sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2401517767},"totDataBytes":0} +{"@timestamp":1788147083529,"_id":"260831-0TsJp3sQkDhDpbcOlWVTa-YT","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":28081},"dstRIR":"ARIN","ethertype":2048,"fileId":[82257],"firstPacket":1788146846245,"ipProtocol":6,"lastPacket":1788146846245,"length":0,"network":{"bytes":54,"community_id":"1:MSgLJCXG1I2ewz18NJ9m65JI5Bg=","packets":1},"node":"spark-afae","packetPos":[-82257,560596],"packetRange":{"gte":1788146846245,"lte":1788146846245},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":35781},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[18],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[241],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1044021387},"totDataBytes":0} +{"@timestamp":1788147374914,"_id":"260831-AsunotNlsyNCAojI1Az-mJNn","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":28737},"dstRIR":"ARIN","ethertype":2048,"fileId":[82258],"firstPacket":1788146230620,"ipProtocol":6,"lastPacket":1788146230620,"length":0,"network":{"bytes":56,"community_id":"1:CkjeLKr8x3GF1nYMSiLLUoJNEsk=","packets":1},"node":"spark-afae","packetPos":[-82258,36123],"packetRange":{"gte":1788146230620,"lte":1788146230620},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":56,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":46344},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[248],"srcTTLCnt":1,"tags":["sensor:netcup-ts","honeypot","netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2074613938},"totDataBytes":0} +{"@timestamp":1788147074909,"_id":"260831-CEX_ANKS7ilPO5HokAv1udc6","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":28737},"dstRIR":"RIPE","ethertype":2048,"fileId":[82255],"firstPacket":1788145746196,"ipProtocol":6,"lastPacket":1788145746196,"length":0,"network":{"bytes":54,"community_id":"1:fgL2nSmHUtdJi/BfWQb9KJT8tQE=","packets":1},"node":"spark-afae","packetPos":[-82255,14642],"packetRange":{"gte":1788145746196,"lte":1788145746196},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":1,"port":39967},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["honeypot","sponge-01-ts","sensor:sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1982015715},"totDataBytes":0} +{"@timestamp":1788146494854,"_id":"260831-uzvs6uAfekpNy7DK5-h80W9J","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":28737},"dstRIR":"ARIN","ethertype":2048,"fileId":[82252],"firstPacket":1788145716945,"ipProtocol":6,"lastPacket":1788145716945,"length":0,"network":{"bytes":54,"community_id":"1:wrg3sI3SRFoviQNeC8spveR/WH8=","packets":1},"node":"spark-afae","packetPos":[-82252,884308],"packetRange":{"gte":1788145716945,"lte":1788145716945},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":36430},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[18],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[240],"srcTTLCnt":1,"tags":["sensor:bahrain-sponge-01-ts","honeypot","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3520137893},"totDataBytes":0} +{"@timestamp":1788146174260,"_id":"260831-sDtvkzMUcgVCEqrX1gnb-1_n","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":28737},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82250],"firstPacket":1788145222326,"ipProtocol":6,"lastPacket":1788145222326,"length":0,"network":{"bytes":60,"community_id":"1:4Uu49h5N8ckBmkBIWAhiutHG4mw=","packets":1},"node":"spark-afae","packetPos":[-82250,831221],"packetRange":{"gte":1788145222326,"lte":1788145222326},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":51006},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[245],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":633549532},"totDataBytes":0} +{"@timestamp":1788144952910,"_id":"260831-hDvRgsA5U_NF7ZNZjHIun7wL","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":0,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":0,"port":28737},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","ethertype":2048,"fileId":[82242],"firstPacket":1788144137339,"ipProtocol":6,"lastPacket":1788144137339,"length":0,"network":{"bytes":58,"community_id":"1:186GAncU/3vHGppCQQHejNgFoF8=","packets":1},"node":"spark-afae","packetPos":[-82242,1944185],"packetRange":{"gte":1788144137339,"lte":1788144137339},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":58,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":1,"port":41855},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[240],"srcTTLCnt":1,"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_2_536_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1994800064},"totDataBytes":0} +{"@timestamp":1788144649090,"_id":"260831-tcopAwZ2Eb1HRr9NUNuMIAVJ","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":28737},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82240],"firstPacket":1788143407617,"ipProtocol":6,"lastPacket":1788143407617,"length":0,"network":{"bytes":60,"community_id":"1:NNS8pRAu8ATPKTm0FaKX/whrB+E=","packets":1},"node":"spark-afae","packetPos":[-82240,40841],"packetRange":{"gte":1788143407617,"lte":1788143407617},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":34948},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-02-ts","proxy","contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2733053383},"totDataBytes":0} +{"@timestamp":1788143141039,"_id":"260831-QjtCWYAeLaBCj6uyfg52qblO","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":0,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":0,"port":28888},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","ethertype":2048,"fileId":[82231],"firstPacket":1788142670917,"ipProtocol":6,"lastPacket":1788142670917,"length":0,"network":{"bytes":58,"community_id":"1:iyM6UTyYMdH+UTYck38wEKjLnhk=","packets":1},"node":"spark-afae","packetPos":[-82231,5164303],"packetRange":{"gte":1788142670917,"lte":1788142670917},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":58,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":1,"port":53908},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[242],"srcTTLCnt":1,"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2_536_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3354806349},"totDataBytes":0} +{"@timestamp":1788142533651,"_id":"260831-LDtfntzHvZhKppWC8VjqhVUn","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":28888},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82226],"firstPacket":1788142053701,"ipProtocol":6,"lastPacket":1788142053701,"length":0,"network":{"bytes":60,"community_id":"1:PmtImmjEFPLV3SFggwZFgSv+EPY=","packets":1},"node":"spark-afae","packetPos":[-82226,1314864],"packetRange":{"gte":1788142053701,"lte":1788142053701},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":36469},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-01-ts","honeypot","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3132311412},"totDataBytes":0} +{"@timestamp":1788143140287,"_id":"260831-lMqU-6gz5ZlHT5Xcuy6t3mAE","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":28888},"dstRIR":"ARIN","ethertype":2048,"fileId":[82229],"firstPacket":1788141859533,"ipProtocol":6,"lastPacket":1788141859533,"length":0,"network":{"bytes":56,"community_id":"1:ZV6Q+/8xGe4CeJmJG7oE5MusTos=","packets":1},"node":"spark-afae","packetPos":[-82229,54484],"packetRange":{"gte":1788141859533,"lte":1788141859533},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":56,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":42629},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[248],"srcTTLCnt":1,"tags":["netcup-ts","sensor:netcup-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":4024736387},"totDataBytes":0} +{"@timestamp":1788142856402,"_id":"260831-NzuqVaSzt-NLc6cyQkVIj2-I","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":28888},"dstRIR":"ARIN","ethertype":2048,"fileId":[82228],"firstPacket":1788141786888,"ipProtocol":6,"lastPacket":1788141786888,"length":0,"network":{"bytes":54,"community_id":"1:wcmpDWImB3TPBI0FQW3De5JQw7U=","packets":1},"node":"spark-afae","packetPos":[-82228,388989],"packetRange":{"gte":1788141786888,"lte":1788141786888},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":53194},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[18],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[241],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1898245424},"totDataBytes":0} +{"@timestamp":1788142233089,"_id":"260831-fsotzh_aFgBCZ7akNQmHyKhM","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":28888},"dstRIR":"RIPE","ethertype":2048,"fileId":[82224],"firstPacket":1788141676153,"ipProtocol":6,"lastPacket":1788141676153,"length":0,"network":{"bytes":54,"community_id":"1:mnlGOofWoOo3WP2Q8bEKgfiUAYQ=","packets":1},"node":"spark-afae","packetPos":[-82224,92246],"packetRange":{"gte":1788141676153,"lte":1788141676153},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":1,"port":38480},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[245],"srcTTLCnt":1,"tags":["sponge-01-ts","honeypot","sensor:sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":814544853},"totDataBytes":0} +{"@timestamp":1788141628493,"_id":"260831-KQr6tJ9lrA9JP5ZLYpvfSyke","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":28888},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82217],"firstPacket":1788141042802,"ipProtocol":6,"lastPacket":1788141042802,"length":0,"network":{"bytes":60,"community_id":"1:h/TRCwKYBlgAYM5lPena7X6L80g=","packets":1},"node":"spark-afae","packetPos":[-82217,202016],"packetRange":{"gte":1788141042802,"lte":1788141042802},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":51559},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[243],"srcTTLCnt":1,"tags":["contabo-sponge-02-ts","sensor:contabo-sponge-02-ts","proxy"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2005429026},"totDataBytes":0} +{"@timestamp":1788141014144,"_id":"260831-9TqJvboli1lLGZ8u2m_abld0","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":29290},"dstRIR":"ARIN","ethertype":2048,"fileId":[82216],"firstPacket":1788139838296,"ipProtocol":6,"lastPacket":1788139838296,"length":0,"network":{"bytes":56,"community_id":"1:nPknmfT9Uzdo90wn4vCb93XGhEA=","packets":1},"node":"spark-afae","packetPos":[-82216,2315],"packetRange":{"gte":1788139838296,"lte":1788139838296},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":56,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":37436},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[248],"srcTTLCnt":1,"tags":["netcup-ts","honeypot","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2318213173},"totDataBytes":0} +{"@timestamp":1788139190881,"_id":"260831-MMroVL7mzCNDX5a3aii20JJi","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":29290},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82204],"firstPacket":1788137901044,"ipProtocol":6,"lastPacket":1788137901044,"length":0,"network":{"bytes":60,"community_id":"1:atU3tFQqdFkeJafji1nGACr6nh0=","packets":1},"node":"spark-afae","packetPos":[-82204,289362],"packetRange":{"gte":1788137901044,"lte":1788137901044},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":56181},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[245],"srcTTLCnt":1,"tags":["honeypot","sensor:contabo-sponge-01-ts","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3210504997},"totDataBytes":0} +{"@timestamp":1788138287861,"_id":"260831-GcpiyAiyi-RL_6o4jS9FHuCz","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":29290},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82199],"firstPacket":1788137304413,"ipProtocol":6,"lastPacket":1788137304413,"length":0,"network":{"bytes":60,"community_id":"1:RtJV4cZ9vDYiEK3j8VaHxlgenh0=","packets":1},"node":"spark-afae","packetPos":[-82199,131994],"packetRange":{"gte":1788137304413,"lte":1788137304413},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":50256},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-02-ts","proxy","contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":971956736},"totDataBytes":0} +{"@timestamp":1788138286732,"_id":"260831-nToxLYpLoFpGqJvjVu9mOVQ3","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":29290},"dstRIR":"ARIN","ethertype":2048,"fileId":[82198],"firstPacket":1788137187576,"ipProtocol":6,"lastPacket":1788137187576,"length":0,"network":{"bytes":54,"community_id":"1:OtZs9E6l/uBhIOK9/c0ej6VmAH8=","packets":1},"node":"spark-afae","packetPos":[-82198,6758],"packetRange":{"gte":1788137187576,"lte":1788137187576},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":42959},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[18],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[241],"srcTTLCnt":1,"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1015653785},"totDataBytes":0} +{"@timestamp":1788137986733,"_id":"260831-Dspvptefz-5K36vNbDaZ4_Wp","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":0,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":0,"port":29290},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","ethertype":2048,"fileId":[82196],"firstPacket":1788137182080,"ipProtocol":6,"lastPacket":1788137182080,"length":0,"network":{"bytes":58,"community_id":"1:a5HrDeKV+ApRgP/AQKXp0p5VX6Y=","packets":1},"node":"spark-afae","packetPos":[-82196,1549327],"packetRange":{"gte":1788137182080,"lte":1788137182080},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":58,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":1,"port":37856},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[242],"srcTTLCnt":1,"tags":["sensor:frantech-ts","frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_2_536_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3762767177},"totDataBytes":0} +{"@timestamp":1788137987098,"_id":"260831-mkQYYLJsuKtPo6-Q3DMKtvu-","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":29290},"dstRIR":"RIPE","ethertype":2048,"fileId":[82194],"firstPacket":1788137045828,"ipProtocol":6,"lastPacket":1788137045828,"length":0,"network":{"bytes":54,"community_id":"1:8ZzqLH2LgTFzGL9qqtCoyG8qEJc=","packets":1},"node":"spark-afae","packetPos":[-82194,43996],"packetRange":{"gte":1788137045828,"lte":1788137045828},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":1,"port":43711},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["sensor:sponge-01-ts","honeypot","sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":763123731},"totDataBytes":0} +{"@timestamp":1788137985762,"_id":"260831-DsopHMe1xMJIU7Q-9sDMcX72","_index":"arkime_sessions3-260831","client":{"bytes":3},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":800,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":12,"port":30000},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82196],"firstPacket":1788136681801,"initRTT":65,"ipProtocol":6,"lastPacket":1788136771666,"length":89865,"network":{"bytes":1801,"community_id":"1:dnZ/SB1Uy7k3VqZW6IcyNPcloSw=","packets":27},"node":"spark-afae","packetPos":[-82196,212045,90,230,82,85,13576,82,0,614,14483,82,152,0,16223,82,484,222,28027,82,152,0,18369,82,0,402,11294,82],"packetRange":{"gte":1788136681801,"lte":1788136771666},"protocol":["tcp"],"protocolCnt":1,"rootId":"260831-DsopHMe1xMJIU7Q-9sDMcX72","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":1001,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":15,"port":34526},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"050100","srcRIR":"ARIN","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":["Attempted Information Leak",""],"categoryCnt":2,"flowId":["344489378686822"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[2,3],"severityCnt":2,"signature":["553b5765-6241-4e9a-9982-0ca113796134","5a66c944-faed-4791-9d94-b44b7bd48352"],"signatureCnt":2,"signatureId":[1031235,2000181],"signatureIdCnt":2},"tags":["sensor:frantech-ts","frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":22,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":1,"psh":1,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":4240499847},"totDataBytes":3} +{"@timestamp":1788136786557,"_id":"260831-cTru6y_bsQFHpIRRi3GcsNB2","_index":"arkime_sessions3-260831","client":{"bytes":125},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":30000},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82189],"firstPacket":1788136533803,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["azenv.net"],"hostCnt":1,"ja4h":["ge11nn040000_8391bea91fb6_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn040000_Host,User-Agent,Accept-Encoding,Connection__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["http://azenv.net/"],"pathCnt":1,"requestHeader":["accept-encoding","host","connection","user-agent"],"requestHeaderCnt":4,"requestHeaderField":["accept-encoding","connection"],"requestHeaderValue":["gzip","close"],"requestHeaderValueCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["date","server","connection","content-type","x-powered-by","content-length"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","mon, 31 aug 2026 00:35:33 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["http://azenv.net/"],"uriCnt":1,"useragent":["Go-http-client/1.1"],"useragentCnt":1},"initRTT":64,"ipProtocol":6,"lastPacket":1788136534060,"length":257,"network":{"bytes":1088,"community_id":"1:xqd7qCbRjQjmFP9xG2+V9vAEono=","packets":10},"node":"spark-afae","packetPos":[-82189,15376489,90,230,82,207,82,369,82,0,0],"packetRange":{"gte":1788136533803,"lte":1788136534060},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":463,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":44396},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"4745542068747470","srcRIR":"ARIN","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1479308480467253"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7","ce8622a8-6d2f-4fe3-ab81-0cc86e19363e","3d144850-efcc-436a-9008-c5d28ac581ae","23e6932c-e2bd-48cf-80b8-aa98ae9276c4","869feaa1-dc77-4037-aee2-247b7a39cf7d"],"signatureCnt":5,"signatureId":[2000166,1070034,1030619,1031486,2000008],"signatureIdCnt":5},"tag":{"block":["true","false"],"blockCnt":2,"category":["activity","protocol","tool","attack","recon"],"categoryCnt":5,"cves":[""],"cvesCnt":1,"description":["cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys.","generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning.","ip addresses with this tag have been seen crawling http(s) servers around the internet.","ip addresses with this tag have been observed crawling the internet for unauthenticated web proxies and testing if they are functional.","ip addresses with this tag have been observed scanning the internet using the golang http client."],"intention":["suspicious","unknown","malicious"],"intentionCnt":3,"name":["go http client","open proxy scanner","web crawler","root path scanner"],"nameCnt":4},"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"79_64_tcp","ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":799213434},"totDataBytes":412} +{"@timestamp":1788136482173,"_id":"260831-hETy3lZp1Q9K2YJUafKnpV4V","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":30000},"dstRIR":"ARIN","ethertype":2048,"fileId":[82185],"firstPacket":1788136099667,"ipProtocol":6,"lastPacket":1788136099667,"length":0,"network":{"bytes":56,"community_id":"1:HTzAAZF1Pjr/t8fiUd8uKjOINR4=","packets":1},"node":"spark-afae","packetPos":[-82185,823320],"packetRange":{"gte":1788136099667,"lte":1788136099667},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":56,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":54356},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[248],"srcTTLCnt":1,"tags":["honeypot","netcup-ts","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1993494910},"totDataBytes":0} +{"@timestamp":1788135280511,"_id":"260831-OjrDOSAvVXNOoa7pxf-6bw4K","_index":"arkime_sessions3-260831","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":30000},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82178],"firstPacket":1788134851910,"ipProtocol":6,"lastPacket":1788134851910,"length":0,"network":{"bytes":60,"community_id":"1:8eHc8D7H++r4EPcFE85cyVid7gM=","packets":1},"node":"spark-afae","packetPos":[-82178,1687187],"packetRange":{"gte":1788134851910,"lte":1788134851910},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":51057},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[245],"srcTTLCnt":1,"tags":["honeypot","contabo-sponge-01-ts","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3848156381},"totDataBytes":0} +{"@timestamp":1788135579890,"_id":"260830-zMlZllLV5gpEQoZXHWAsNt-u","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":30000},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82180],"firstPacket":1788134339309,"ipProtocol":6,"lastPacket":1788134339309,"length":0,"network":{"bytes":60,"community_id":"1:gPXH77EEO9Pt4fCIYYnm6/ql6Kc=","packets":1},"node":"spark-afae","packetPos":[-82180,7466],"packetRange":{"gte":1788134339309,"lte":1788134339309},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":46615},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-02-ts","proxy","contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":481489574},"totDataBytes":0} +{"@timestamp":1788134978273,"_id":"260830-tsk4cYKkE4pDk4vQF97qthC4","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":58,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":30000},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82176],"firstPacket":1788134267818,"ipProtocol":6,"lastPacket":1788134267953,"length":135,"network":{"bytes":170,"community_id":"1:X3c6I/PPRmgeqkII4n/EIppGQFA=","packets":3},"node":"spark-afae","packetPos":[-82176,939475,74,2138],"packetRange":{"gte":1788134267818,"lte":1788134267953},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":112,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":58875},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[51,242],"srcTTLCnt":2,"tags":["frantech-ts","honeypot","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2_536_00"],"ja4tCnt":1,"ja4ts":["64240_2_1460_00"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":812891657},"totDataBytes":0} +{"@timestamp":1788134978785,"_id":"260830-Lzp7xs7DO-NGLqV9AZh8Vdmo","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":30000},"dstRIR":"ARIN","ethertype":2048,"fileId":[82175],"firstPacket":1788133561287,"ipProtocol":6,"lastPacket":1788133561287,"length":0,"network":{"bytes":54,"community_id":"1:+HhfJ6Rt00pWASG5jOUpli2HHL0=","packets":1},"node":"spark-afae","packetPos":[-82175,4430],"packetRange":{"gte":1788133561287,"lte":1788133561287},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":59914},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[18],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[241],"srcTTLCnt":1,"tags":["bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1620709661},"totDataBytes":0} +{"@timestamp":1788133477337,"_id":"260830-iskt59XOMzFITpZZM2yS_4rV","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":30000},"dstRIR":"RIPE","ethertype":2048,"fileId":[82165],"firstPacket":1788132679104,"ipProtocol":6,"lastPacket":1788132679104,"length":0,"network":{"bytes":54,"community_id":"1:7RHyzkE7qnPVX0DFCUmj6K/h7ig=","packets":1},"node":"spark-afae","packetPos":[-82165,80346],"packetRange":{"gte":1788132679104,"lte":1788132679104},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":1,"port":48434},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["sensor:sponge-01-ts","sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":479118179},"totDataBytes":0} +{"@timestamp":1788133175638,"_id":"260830-7zkOf__-DqBC-bJLuSonnlnK","_index":"arkime_sessions3-260830","client":{"bytes":3},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":932,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":14,"port":30001},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82164],"firstPacket":1788132161217,"initRTT":64,"ipProtocol":6,"lastPacket":1788132265007,"length":103790,"network":{"bytes":2065,"community_id":"1:5Df6HM6ZxUZJ/Vf6DJhc8cMQ9ko=","packets":31},"node":"spark-afae","packetPos":[-82164,170194,90,0,82,85,26191,82,246,344,18960,82,150,572,15364,82,246,164,15624,82,0,246,14673,82,1162,164,17415,82,0,246,15428,82],"packetRange":{"gte":1788132161217,"lte":1788132265007},"protocol":["tcp"],"protocolCnt":1,"rootId":"260830-7zkOf__-DqBC-bJLuSonnlnK","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":1133,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":17,"port":53250},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"050100","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":["Attempted Information Leak",""],"categoryCnt":2,"flowId":["370731583544697"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[2,3],"severityCnt":2,"signature":["5a66c944-faed-4791-9d94-b44b7bd48352","553b5765-6241-4e9a-9982-0ca113796134"],"signatureCnt":2,"signatureId":[1031235,2000181],"signatureIdCnt":2},"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":26,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":1,"psh":1,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3233187118},"totDataBytes":3} +{"@timestamp":1788132273674,"_id":"260830-zjlxXgOvDYpKia068YY7cus4","_index":"arkime_sessions3-260830","client":{"bytes":125},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":30001},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82158],"firstPacket":1788132017026,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["azenv.net"],"hostCnt":1,"ja4h":["ge11nn040000_8391bea91fb6_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn040000_Host,User-Agent,Accept-Encoding,Connection__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["http://azenv.net/"],"pathCnt":1,"requestHeader":["connection","user-agent","host","accept-encoding"],"requestHeaderCnt":4,"requestHeaderField":["accept-encoding","connection"],"requestHeaderValue":["gzip","close"],"requestHeaderValueCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["server","connection","x-powered-by","date","content-type","content-length"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","sun, 30 aug 2026 23:20:17 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["http://azenv.net/"],"uriCnt":1,"useragent":["Go-http-client/1.1"],"useragentCnt":1},"initRTT":64,"ipProtocol":6,"lastPacket":1788132017287,"length":261,"network":{"bytes":1088,"community_id":"1:dsvRwluyT/b6KXxhFZ+Px+lHOLc=","packets":10},"node":"spark-afae","packetPos":[-82158,6715130,90,172,82,207,82,369,82,0,0],"packetRange":{"gte":1788132017026,"lte":1788132017287},"protocol":["tcp","http"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":463,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":53012},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"4745542068747470","srcRIR":"ARIN","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["396948687801212"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","3d144850-efcc-436a-9008-c5d28ac581ae","23e6932c-e2bd-48cf-80b8-aa98ae9276c4","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7","ce8622a8-6d2f-4fe3-ab81-0cc86e19363e"],"signatureCnt":5,"signatureId":[2000166,1070034,1030619,1031486,2000008],"signatureIdCnt":5},"tag":{"block":["false","true"],"blockCnt":2,"category":["attack","tool","activity","recon","protocol"],"categoryCnt":5,"cves":[""],"cvesCnt":1,"description":["ip addresses with this tag have been seen crawling http(s) servers around the internet.","ip addresses with this tag have been observed scanning the internet using the golang http client.","ip addresses with this tag have been observed crawling the internet for unauthenticated web proxies and testing if they are functional.","cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys.","generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning."],"intention":["malicious","unknown","suspicious"],"intentionCnt":3,"name":["go http client","open proxy scanner","web crawler","root path scanner"],"nameCnt":4},"tags":["frantech-ts","sensor:frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4ls":"46_64_tcp","ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":815154421},"totDataBytes":412} +{"@timestamp":1788131072756,"_id":"260830-WES186TBN9BBD4Z5-yZkgrW1","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":30001},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82148],"firstPacket":1788130372311,"ipProtocol":6,"lastPacket":1788130372311,"length":0,"network":{"bytes":60,"community_id":"1:WYUGWalE5n6sE/BZ9EmHPWWE7nU=","packets":1},"node":"spark-afae","packetPos":[-82148,247942],"packetRange":{"gte":1788130372311,"lte":1788130372311},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":59550},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["sensor:contabo-sponge-02-ts","proxy","contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3402996338},"totDataBytes":0} +{"@timestamp":1788131370941,"_id":"260830-rTkYf13UYT9A_43IM8iioMlK","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":58,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":30001},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82152],"firstPacket":1788130235614,"ipProtocol":6,"lastPacket":1788130235749,"length":135,"network":{"bytes":170,"community_id":"1:F6HbFlVKuCQj/eaoM3c7ByD2GMQ=","packets":3},"node":"spark-afae","packetPos":[-82152,3306,74,1190],"packetRange":{"gte":1788130235614,"lte":1788130235749},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":112,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":44961},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[51,242],"srcTTLCnt":2,"tags":["sensor:frantech-ts","frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_2_536_00"],"ja4tCnt":1,"ja4ts":["64240_2_1460_00"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":766774919},"totDataBytes":0} +{"@timestamp":1788131072279,"_id":"260830-HgoF556RO65KjL-wl3OGIs6v","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":30001},"dstRIR":"ARIN","ethertype":2048,"fileId":[82149],"firstPacket":1788130189819,"ipProtocol":6,"lastPacket":1788130189819,"length":0,"network":{"bytes":56,"community_id":"1:ve4e1re66Cnkd034Q3CwCGlBJOQ=","packets":1},"node":"spark-afae","packetPos":[-82149,430413],"packetRange":{"gte":1788130189819,"lte":1788130189819},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":56,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":51718},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[248],"srcTTLCnt":1,"tags":["honeypot","sensor:netcup-ts","netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3904939883},"totDataBytes":0} +{"@timestamp":1788130772467,"_id":"260830-SMlM3rXpW4dMV5PhG2h6JbT6","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":30001},"dstRIR":"RIPE","ethertype":2048,"fileId":[82146],"firstPacket":1788129904283,"ipProtocol":6,"lastPacket":1788129904283,"length":0,"network":{"bytes":54,"community_id":"1:1vnTe2XqOlK+ftaiEAnf4M3NNE0=","packets":1},"node":"spark-afae","packetPos":[-82146,193548],"packetRange":{"gte":1788129904283,"lte":1788129904283},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":1,"port":39493},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["sponge-01-ts","honeypot","sensor:sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":509711478},"totDataBytes":0} +{"@timestamp":1788130473500,"_id":"260830-jDmZkEZBnxNOBZUlVEGsSrwJ","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":30001},"dstRIR":"ARIN","ethertype":2048,"fileId":[82145],"firstPacket":1788129829778,"ipProtocol":6,"lastPacket":1788129829778,"length":0,"network":{"bytes":54,"community_id":"1:vVUFcZk6YcGIDfa9eweCBbC/jbc=","packets":1},"node":"spark-afae","packetPos":[-82145,136812],"packetRange":{"gte":1788129829778,"lte":1788129829778},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":46860},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[18],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[241],"srcTTLCnt":1,"tags":["honeypot","sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":4071662634},"totDataBytes":0} +{"@timestamp":1788129871579,"_id":"260830-djmzor9L9yJPPYt2P00BBHgU","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":30001},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82143],"firstPacket":1788129167110,"ipProtocol":6,"lastPacket":1788129167110,"length":0,"network":{"bytes":60,"community_id":"1:YxM8O5ZZI4PDrtD/IRmWW4c9L5k=","packets":1},"node":"spark-afae","packetPos":[-82143,797634],"packetRange":{"gte":1788129167110,"lte":1788129167110},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":32789},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["honeypot","contabo-sponge-01-ts","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1505260832},"totDataBytes":0} +{"@timestamp":1788129563551,"_id":"260830-azl00varU3BIwYZvas7GZ8PX","_index":"arkime_sessions3-260830","client":{"bytes":3},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":800,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":12,"port":30002},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82140],"firstPacket":1788128963630,"initRTT":65,"ipProtocol":6,"lastPacket":1788129051142,"length":87512,"network":{"bytes":1801,"community_id":"1:kxUonW4mzIXuvrGnib6ZL3JbFcQ=","packets":27},"node":"spark-afae","packetPos":[-82140,11682896,90,370,82,85,122408,152,220,82,38397,82,332,82,18677,152,462,82,46072,82,474,82,726121,1108,496,82,20118,82],"packetRange":{"gte":1788128963630,"lte":1788129051142},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":1001,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":15,"port":45270},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"050100","srcRIR":"ARIN","srcTTL":[51],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":["Attempted Information Leak",""],"categoryCnt":2,"flowId":["1019610670446578"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[2,3],"severityCnt":2,"signature":["553b5765-6241-4e9a-9982-0ca113796134","5a66c944-faed-4791-9d94-b44b7bd48352"],"signatureCnt":2,"signatureId":[1031235,2000181],"signatureIdCnt":2},"tag":{"block":["false","true"],"blockCnt":2,"category":["recon","activity"],"categoryCnt":2,"cves":[""],"cvesCnt":1,"description":["ip addresses with this tag have been observed attempting to discover socks5 proxies that do not require authentication.","socks proxy protocol negotiation"],"intention":["suspicious"],"intentionCnt":1,"name":["socks5 proxy scanner","socks proxy protocol negotiation"],"nameCnt":2},"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":22,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":1,"psh":1,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1607578471},"totDataBytes":3} +{"@timestamp":1788129562105,"_id":"260830-aznazsdqN0dKZKQviAyyLzV1","_index":"arkime_sessions3-260830","client":{"bytes":125},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":30002},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82140],"firstPacket":1788128824667,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["azenv.net"],"hostCnt":1,"ja4h":["ge11nn040000_8391bea91fb6_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn040000_Host,User-Agent,Accept-Encoding,Connection__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["http://azenv.net/"],"pathCnt":1,"requestHeader":["host","accept-encoding","user-agent","connection"],"requestHeaderCnt":4,"requestHeaderField":["accept-encoding","connection"],"requestHeaderValue":["gzip","close"],"requestHeaderValueCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["x-powered-by","content-type","server","content-length","connection","date"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","sun, 30 aug 2026 22:27:04 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["http://azenv.net/"],"uriCnt":1,"useragent":["Go-http-client/1.1"],"useragentCnt":1},"initRTT":65,"ipProtocol":6,"lastPacket":1788128824929,"length":262,"network":{"bytes":1088,"community_id":"1:F2Dw9AS5/Nd8jxj6qt17SNFyU9g=","packets":10},"node":"spark-afae","packetPos":[-82140,10962346,90,706,82,207,82,369,232,82,0],"packetRange":{"gte":1788128824667,"lte":1788128824929},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":463,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":44944},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"4745542068747470","srcRIR":"ARIN","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["51164267721549"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","23e6932c-e2bd-48cf-80b8-aa98ae9276c4","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7","ce8622a8-6d2f-4fe3-ab81-0cc86e19363e","3d144850-efcc-436a-9008-c5d28ac581ae"],"signatureCnt":5,"signatureId":[2000166,1070034,1030619,1031486,2000008],"signatureIdCnt":5},"tag":{"block":["false","true"],"blockCnt":2,"category":["tool","attack","recon","activity","protocol"],"categoryCnt":5,"cves":[""],"cvesCnt":1,"description":["ip addresses with this tag have been observed crawling the internet for unauthenticated web proxies and testing if they are functional.","cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys.","generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning.","ip addresses with this tag have been observed scanning the internet using the golang http client.","ip addresses with this tag have been seen crawling http(s) servers around the internet."],"intention":["suspicious","unknown","malicious"],"intentionCnt":3,"name":["go http client","web crawler","root path scanner","open proxy scanner"],"nameCnt":4},"tags":["sensor:frantech-ts","honeypot","frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"40_64_tcp","ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":741358885},"totDataBytes":412} +{"@timestamp":1788128953711,"_id":"260830-VTmLGMFIo1BLk5846kLWrIa7","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":0,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":0,"port":30002},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82137],"firstPacket":1788128361978,"ipProtocol":6,"lastPacket":1788128361978,"length":0,"network":{"bytes":60,"community_id":"1:McL1TL4HT/ohJE/ECKDmvElgPWE=","packets":1},"node":"spark-afae","packetPos":[-82137,798064],"packetRange":{"gte":1788128361978,"lte":1788128361978},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["fc:bd:67:9d:2b:2b"],"mac-cnt":1,"packets":1,"port":43849},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2405335583},"totDataBytes":0} +{"@timestamp":1788128339872,"_id":"260830-Pzl_uoMyC7VH8ojtPNot3Gvs","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":30002},"dstRIR":"ARIN","ethertype":2048,"fileId":[82132],"firstPacket":1788127919977,"ipProtocol":6,"lastPacket":1788127919977,"length":0,"network":{"bytes":54,"community_id":"1:FpKkhc+toqWFtB2xi7UCUxUtyLs=","packets":1},"node":"spark-afae","packetPos":[-82132,124352],"packetRange":{"gte":1788127919977,"lte":1788127919977},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":1,"port":46894},"spoofable":["true"],"spoofableCnt":1,"srcDscp":[18],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[240],"srcTTLCnt":1,"tags":["sensor:bahrain-sponge-01-ts","bahrain-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":2547715482},"totDataBytes":0} +{"@timestamp":1788127733013,"_id":"260830-KTm1JMAjwfVPjoHs0YzsyjPw","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":58,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":1,"port":30002},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82128],"firstPacket":1788127171595,"ipProtocol":6,"lastPacket":1788127171727,"length":132,"network":{"bytes":170,"community_id":"1:6nByggNjrD05Llq8XQoqNY6DRFw=","packets":3},"node":"spark-afae","packetPos":[-82128,7330765,74,3842],"packetRange":{"gte":1788127171595,"lte":1788127171727},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":112,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":2,"port":51308},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[50,241],"srcTTLCnt":2,"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_2_536_00"],"ja4tCnt":1,"ja4ts":["64240_2_1460_00"],"ja4tsCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1341238343},"totDataBytes":0} +{"@timestamp":1788127433611,"_id":"260830-N0REeoRX5htKDKBz5Vm_v_k1","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["netcup GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Netcup KVM"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["business"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS197540 netcup GmbH","number":197540,"organization":{"name":"netcup GmbH"}},"bytes":0,"geo":{"country_iso_code":"DE"},"ip":"159.195.21.150","mac":["8a:41:d3:b8:0d:d3"],"mac-cnt":1,"packets":0,"port":30002},"dstRIR":"ARIN","ethertype":2048,"fileId":[82126],"firstPacket":1788127081041,"ipProtocol":6,"lastPacket":1788127081041,"length":0,"network":{"bytes":56,"community_id":"1:hR3M1hNGuqVRc/pcUdOskI3H7LU=","packets":1},"node":"spark-afae","packetPos":[-82126,367364],"packetRange":{"gte":1788127081041,"lte":1788127081041},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":56,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["bc:0f:fe:38:0b:a3"],"mac-cnt":1,"packets":1,"port":34707},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[248],"srcTTLCnt":1,"tags":["netcup-ts","honeypot","sensor:netcup-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":4037021180},"totDataBytes":0} +{"@timestamp":1788127433087,"_id":"260830--shVSS0N_MBHa5VX1nceMofv","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS51167 Contabo GmbH","number":51167,"organization":{"name":"Contabo GmbH"}},"bytes":0,"geo":{"country_iso_code":"FR"},"ip":"109.123.246.142","mac":["00:50:56:63:46:a6"],"mac-cnt":1,"packets":0,"port":30002},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstRIR":"RIPE","ethertype":2048,"fileId":[82125],"firstPacket":1788126270098,"ipProtocol":6,"lastPacket":1788126270098,"length":0,"network":{"bytes":60,"community_id":"1:6CVoWDE3B41D+9UykWHks1nFBbA=","packets":1},"node":"spark-afae","packetPos":[-82125,22409],"packetRange":{"gte":1788126270098,"lte":1788126270098},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":60,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["c0:69:11:cd:1f:19"],"mac-cnt":1,"packets":1,"port":47899},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Arista Networks"],"srcOuiCnt":1,"srcRIR":"ARIN","srcTTL":[243],"srcTTLCnt":1,"tags":["contabo-sponge-02-ts","proxy","sensor:contabo-sponge-02-ts"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":1936657872},"totDataBytes":0} +{"@timestamp":1788127119134,"_id":"260830-LEQSdJVbOn5Dz7Dlg_vQ4QeQ","_index":"arkime_sessions3-260830","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Hetzner Online GmbH"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["HETZNER-DC"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS24940 Hetzner Online GmbH","number":24940,"organization":{"name":"Hetzner Online GmbH"}},"bytes":0,"geo":{"country_iso_code":"FI"},"ip":"89.167.72.144","mac":["92:00:07:4c:82:70"],"mac-cnt":1,"packets":0,"port":30002},"dstRIR":"RIPE","ethertype":2048,"fileId":[82122],"firstPacket":1788126068063,"ipProtocol":6,"lastPacket":1788126068063,"length":0,"network":{"bytes":54,"community_id":"1:i6MGe4wWYk7arsamwar86Vek46U=","packets":1},"node":"spark-afae","packetPos":[-82122,25534],"packetRange":{"gte":1788126068063,"lte":1788126068063},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":54,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["d2:74:7f:6e:37:e3"],"mac-cnt":1,"packets":1,"port":41671},"spoofable":["true"],"spoofableCnt":1,"srcRIR":"ARIN","srcTTL":[244],"srcTTLCnt":1,"tags":["sensor:sponge-01-ts","sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["65535_00_00_00"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":1,"syn-ack":0,"urg":0},"tcpseq":{"src":3897506870},"totDataBytes":0} +{"@timestamp":1788126216732,"_id":"260830-2shE7Nf9SfZH376ZLdorZJj9","_index":"arkime_sessions3-260830","client":{"bytes":3},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":404,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":6,"port":30003},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82118],"firstPacket":1788125595034,"initRTT":65,"ipProtocol":6,"lastPacket":1788125640725,"length":45691,"network":{"bytes":1009,"community_id":"1:divrrLgkFc+WaNv3RzQxWYUL83s=","packets":15},"node":"spark-afae","packetPos":[-82118,7358648,90,0,82,85,20731,82,0,288,27651,82,818,246,31671,82],"packetRange":{"gte":1788125595034,"lte":1788125640725},"protocol":["tcp"],"protocolCnt":1,"segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":605,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":9,"port":56940},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"050100","srcRIR":"ARIN","srcTTL":[50],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":["","Attempted Information Leak"],"categoryCnt":2,"flowId":["991618623057523"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[2,3],"severityCnt":2,"signature":["553b5765-6241-4e9a-9982-0ca113796134","5a66c944-faed-4791-9d94-b44b7bd48352"],"signatureCnt":2,"signatureId":[1031235,2000181],"signatureIdCnt":2},"tag":{"block":["false","true"],"blockCnt":2,"category":["recon","activity"],"categoryCnt":2,"cves":[""],"cvesCnt":1,"description":["socks proxy protocol negotiation","ip addresses with this tag have been observed attempting to discover socks5 proxies that do not require authentication."],"intention":["suspicious"],"intentionCnt":1,"name":["socks proxy protocol negotiation","socks5 proxy scanner"],"nameCnt":2},"tags":["frantech-ts","honeypot","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":10,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":1,"psh":1,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1321906750},"totDataBytes":3} +{"@timestamp":1788126215895,"_id":"260830-2sjO1WA_Yt9PtZ_Ak00634D4","_index":"arkime_sessions3-260830","client":{"bytes":125},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Pfcloud UG"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Intelligence Hosting LLC"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["hosting"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":625,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":5,"port":30003},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[82118],"firstPacket":1788125444348,"http":{"bodyMagic":["text/html"],"bodyMagicCnt":1,"clientVersion":["1.1"],"clientVersionCnt":1,"host":["azenv.net"],"hostCnt":1,"ja4h":["ge11nn040000_8391bea91fb6_000000000000_000000000000"],"ja4hCnt":1,"ja4h_r":["ge11nn040000_Host,User-Agent,Accept-Encoding,Connection__"],"ja4h_rCnt":1,"md5":["0f87454a3ea15f0db55ae928dbcd82fc"],"md5Cnt":1,"method":["GET"],"method-GET":1,"methodCnt":1,"path":["http://azenv.net/"],"pathCnt":1,"requestHeader":["connection","accept-encoding","host","user-agent"],"requestHeaderCnt":4,"requestHeaderField":["accept-encoding","connection"],"requestHeaderValue":["gzip","close"],"requestHeaderValueCnt":2,"response-server":["Apache/2.4.41 (Ubuntu)"],"response-serverCnt":1,"response-x-powered-by":["PHP/7.4.3"],"response-x-powered-byCnt":1,"responseHeader":["x-powered-by","content-length","date","connection","content-type","server"],"responseHeaderCnt":6,"responseHeaderField":["connection","content-type","date","content-length"],"responseHeaderValue":["close","text/plain; charset=utf-8","sun, 30 aug 2026 21:30:44 gmt","94"],"responseHeaderValueCnt":4,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["1ca624415b2889dbeb3f969890b848b7bc5eaf96ca5e8fdd7461f943b45d10cb"],"sha256Cnt":1,"statuscode":[200],"statuscodeCnt":1,"uri":["http://azenv.net/"],"uriCnt":1,"useragent":["Go-http-client/1.1"],"useragentCnt":1},"initRTT":65,"ipProtocol":6,"lastPacket":1788125444610,"length":262,"network":{"bytes":1088,"community_id":"1:G30sMzWDVLKnoLwDQRBDMy4dMA0=","packets":10},"node":"spark-afae","packetPos":[-82118,6955717,90,978,82,207,82,369,472,82,0],"packetRange":{"gte":1788125444348,"lte":1788125444610},"protocol":["http","tcp"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":287},"source":{"as":{"full":"AS51396 Pfcloud UG (haftungsbeschrankt)","number":51396,"organization":{"name":"Pfcloud UG (haftungsbeschrankt)"}},"bytes":463,"geo":{"country_iso_code":"NL"},"ip":"204.76.203.7","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":48016},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"4745542068747470","srcRIR":"ARIN","srcTTL":[49],"srcTTLCnt":1,"suricata":{"action":["allowed"],"actionCnt":1,"category":[""],"categoryCnt":1,"flowId":["1216331664851689"],"flowIdCnt":1,"gid":[1],"gidCnt":1,"severity":[3],"severityCnt":1,"signature":["869feaa1-dc77-4037-aee2-247b7a39cf7d","23e6932c-e2bd-48cf-80b8-aa98ae9276c4","ee583a2e-d308-4c53-b8e2-a1cd45cd1bb7","ce8622a8-6d2f-4fe3-ab81-0cc86e19363e","3d144850-efcc-436a-9008-c5d28ac581ae"],"signatureCnt":5,"signatureId":[2000166,1070034,1030619,1031486,2000008],"signatureIdCnt":5},"tag":{"block":["false","true"],"blockCnt":2,"category":["recon","protocol","attack","activity","tool"],"categoryCnt":5,"cves":[""],"cvesCnt":1,"description":["generic web crawler traffic detected. the simple pattern of get requests without specific exploitation indicators suggests automated crawling activity, possibly for search indexing or vulnerability scanning.","ip addresses with this tag have been observed scanning the internet using the golang http client.","cloud credential scanning probe detected. requests for sensitive configuration files and credentials indicate automated scanning for exposed secrets and api keys.","ip addresses with this tag have been observed crawling the internet for unauthenticated web proxies and testing if they are functional.","ip addresses with this tag have been seen crawling http(s) servers around the internet."],"intention":["malicious","unknown","suspicious"],"intentionCnt":3,"name":["root path scanner","open proxy scanner","web crawler","go http client"],"nameCnt":4},"tags":["frantech-ts","honeypot","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"44_64_tcp","ja4t":["64240_2-4-8-1-3_1400_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":4,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":0,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":2516290599},"totDataBytes":412} diff --git a/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113642_d85fd0f2.ndjson b/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113642_d85fd0f2.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113642_d85fd0f2.ndjson diff --git a/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113643_ccfc4339.ndjson b/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113643_ccfc4339.ndjson new file mode 100644 index 0000000..0f45ff3 --- /dev/null +++ b/kevlar/2026-08-31/sponge/ip-sessions/session_search_20260831T113643_ccfc4339.ndjson @@ -0,0 +1,6 @@ +{"@timestamp":1787898583931,"_id":"260828-MBlXqVmj1VlHw7CkyI6x7um0","_index":"arkime_sessions3-260828","client":{"bytes":0},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Femo IT Solutions Limited"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Femo IT Solutions Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":0,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":0,"port":1723},"dstRIR":"ARIN","ethertype":2048,"fileId":[80584],"firstPacket":1787897596892,"ipProtocol":6,"lastPacket":1787897604118,"length":7226,"network":{"bytes":296,"community_id":"1:F2EvHiQirlc6ShhfoIhtFYMQNsU=","packets":4},"node":"spark-afae","packetPos":[-80584,197629,306,90,262],"packetRange":{"gte":1787897596892,"lte":1787897604118},"protocol":["tcp"],"protocolCnt":1,"rootId":"260828-MBlXqVmj1VlHw7CkyI6x7um0","segmentCnt":1,"server":{"bytes":0},"source":{"as":{"full":"AS214351 Femo It Solutions Limited","number":214351,"organization":{"name":"Femo It Solutions Limited"}},"bytes":296,"geo":{"country_iso_code":"DE"},"ip":"62.60.226.150","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":4,"port":43984},"spoofable":["true"],"spoofableCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcRIR":"RIPE","srcTTL":[49],"srcTTLCnt":1,"tags":["bahrain-sponge-01-ts","sensor:bahrain-sponge-01-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4t":["64240_2-4-8-1-3_1394_7"],"ja4tCnt":1},"tcpflags":{"ack":0,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":0,"psh":0,"rst":0,"srcZero":0,"syn":4,"syn-ack":0,"urg":0},"tcpseq":{"src":233533529},"totDataBytes":0} +{"@timestamp":1787699384732,"_id":"260825-hqF32jJtNnJDx46pDgxM6Nqb","_index":"arkime_sessions3-260825","client":{"bytes":156},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Femo IT Solutions Limited"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Femo IT Solutions Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":375,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":4,"port":1723},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79467],"firstPacket":1787698922647,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"md5":["6196dba52703776af2e6593f772ed7ce"],"md5Cnt":1,"responseHeader":["connection","content-type"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["19b843cc92cb12aa314bb3c3913b2feeb852e85969bf06cb9d096931bfda34ba"],"sha256Cnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":73,"ipProtocol":6,"lastPacket":1787698930785,"length":8138,"network":{"bytes":857,"community_id":"1:GGzGR7YfREyMzCSy0+9D/rKTYSg=","packets":9},"node":"spark-afae","packetPos":[-79467,3160913,90,0,82,238,21364,82,185,292],"packetRange":{"gte":1787698922647,"lte":1787698930785},"protocol":["tcp","http"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS214351 Femo It Solutions Limited","number":214351,"organization":{"name":"Femo It Solutions Limited"}},"bytes":482,"geo":{"country_iso_code":"DE"},"ip":"62.60.226.150","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":58938},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"009c00011a2b3c4d","srcRIR":"RIPE","srcTTL":[47],"srcTTLCnt":1,"tags":["honeypot","frantech-ts","sensor:frantech-ts"],"tagsCnt":3,"tcp":{"ja4ls":"47_64_3922961","ja4t":["64240_2-4-8-1-3_1394_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":3767985395},"totDataBytes":259} +{"@timestamp":1787677019495,"_id":"260825-rp83mjU0fCJOzo6wEdQK-iQ0","_index":"arkime_sessions3-260825","client":{"bytes":156},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Femo IT Solutions Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Femo IT Solutions Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":375,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":4,"port":1723},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[79342],"firstPacket":1787676267895,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"md5":["6196dba52703776af2e6593f772ed7ce"],"md5Cnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"sha256":["19b843cc92cb12aa314bb3c3913b2feeb852e85969bf06cb9d096931bfda34ba"],"sha256Cnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":80,"ipProtocol":6,"lastPacket":1787676276046,"length":8151,"network":{"bytes":863,"community_id":"1:qFmqrPUOGfSt2K7xp4O+GXDw0hk=","packets":9},"node":"spark-afae","packetPos":[-79342,2275107,90,254,82,238,17640,82,185,82],"packetRange":{"gte":1787676267895,"lte":1787676276046},"protocol":["tcp","http"],"protocolCnt":2,"segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS214351 Femo It Solutions Limited","number":214351,"organization":{"name":"Femo It Solutions Limited"}},"bytes":488,"geo":{"country_iso_code":"DE"},"ip":"62.60.226.150","mac":["00:c0:1d:c0:ff:ee","fc:bd:67:9d:2b:2b"],"mac-cnt":2,"packets":5,"port":60586},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcPayload8":"009c00011a2b3c4d","srcRIR":"RIPE","srcTTL":[51],"srcTTLCnt":1,"tags":["honeypot","sensor:contabo-sponge-01-ts","contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4ls":"60_64_3916546","ja4t":["64240_2-4-8-1-3_1394_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":828789835},"totDataBytes":259} +{"@timestamp":1787595533070,"_id":"260824-K_JAJkut32dLU6cUeR3Eo26S","_index":"arkime_sessions3-260824","client":{"bytes":156},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Kaopu Cloud HK Limited"],"isp.dstCnt":1,"isp.src":["Femo IT Solutions Limited"],"isp.srcCnt":1,"org.dst":["LightNode-BH"],"org.dstCnt":1,"org.src":["Femo IT Solutions Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS138915 Kaopu Cloud HK Limited","number":138915,"organization":{"name":"Kaopu Cloud HK Limited"}},"bytes":375,"geo":{"country_iso_code":"BH"},"ip":"38.54.2.209","mac":["52:54:8f:9d:76:48"],"mac-cnt":1,"packets":4,"port":1723},"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[78890],"firstPacket":1787594284327,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":50,"ipProtocol":6,"lastPacket":1787594292420,"length":8093,"network":{"bytes":857,"community_id":"1:9+pgazzoxnMWanb+kIFrioedXWE=","packets":9},"node":"spark-afae","packetPos":[-78890,1009930,90,180,82,238,10986,82,185,344],"packetRange":{"gte":1787594284327,"lte":1787594292420},"protocol":["http","tcp"],"protocolCnt":2,"rootId":"260824-K_JAJkut32dLU6cUeR3Eo26S","segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS214351 Femo It Solutions Limited","number":214351,"organization":{"name":"Femo It Solutions Limited"}},"bytes":482,"geo":{"country_iso_code":"DE"},"ip":"62.60.226.150","mac":["98:44:ce:60:15:19"],"mac-cnt":1,"packets":5,"port":41582},"srcDscp":[8],"srcDscpCnt":1,"srcOui":["Huawei Technologies Co.,Ltd"],"srcOuiCnt":1,"srcPayload8":"009c00011a2b3c4d","srcRIR":"RIPE","srcTTL":[50],"srcTTLCnt":1,"tags":["bahrain-sponge-01-ts","honeypot","sensor:bahrain-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4ls":"34_64_3946084","ja4t":["64240_2-4-8-1-3_1394_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":936974917},"totDataBytes":259} +{"@timestamp":1787404409987,"_id":"260822-ay0-hY0NOYdGbLZMm_PnK46C","_index":"arkime_sessions3-260822","client":{"bytes":156},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["FranTech Solutions"],"isp.dstCnt":1,"isp.src":["Femo IT Solutions Limited"],"isp.srcCnt":1,"org.dst":["Thinkpenguin Inc"],"org.dstCnt":1,"org.src":["Femo IT Solutions Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS53667 FranTech Solutions","number":53667,"organization":{"name":"FranTech Solutions"}},"bytes":375,"geo":{"country_iso_code":"US"},"ip":"209.141.62.110","mac":["00:16:0d:1e:79:31"],"mac-cnt":1,"packets":4,"port":1723},"dstOui":["Be Here Corporation"],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"ARIN","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[77828],"firstPacket":1787403129363,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["content-type","connection"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":72,"ipProtocol":6,"lastPacket":1787403137500,"length":8137,"network":{"bytes":857,"community_id":"1:bspKSR+dyoR8GvtZhQtEWhYbRlQ=","packets":9},"node":"spark-afae","packetPos":[-77828,1700042,90,164,82,238,14174,82,185,382],"packetRange":{"gte":1787403129363,"lte":1787403137500},"protocol":["tcp","http"],"protocolCnt":2,"rootId":"260822-ay0-hY0NOYdGbLZMm_PnK46C","segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS214351 Femo It Solutions Limited","number":214351,"organization":{"name":"Femo It Solutions Limited"}},"bytes":482,"geo":{"country_iso_code":"DE"},"ip":"62.60.226.150","mac":["b8:c2:53:de:48:37"],"mac-cnt":1,"packets":5,"port":51330},"srcOui":["Juniper Networks"],"srcOuiCnt":1,"srcPayload8":"009c00011a2b3c4d","srcRIR":"RIPE","srcTTL":[46],"srcTTLCnt":1,"tags":["sensor:frantech-ts","frantech-ts","honeypot"],"tagsCnt":3,"tcp":{"ja4ls":"66_64_3923492","ja4t":["64240_2-4-8-1-3_1394_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":1605903274},"totDataBytes":259} +{"@timestamp":1787381511765,"_id":"260822-udYXXGTrx8tLc7zZlxu7XLuH","_index":"arkime_sessions3-260822","client":{"bytes":156},"dbip":{"conntype.dst":["Corporate"],"conntype.dstCnt":1,"conntype.src":["Corporate"],"conntype.srcCnt":1,"isp.dst":["Contabo Asia Private Limited"],"isp.dstCnt":1,"isp.src":["Femo IT Solutions Limited"],"isp.srcCnt":1,"org.dst":["Contabo GmbH"],"org.dstCnt":1,"org.src":["Femo IT Solutions Limited"],"org.srcCnt":1,"usertype.dst":["hosting"],"usertype.dstCnt":1,"usertype.src":["business"],"usertype.srcCnt":1},"destination":{"as":{"full":"AS141995 Contabo Asia Private Limited","number":141995,"organization":{"name":"Contabo Asia Private Limited"}},"bytes":375,"geo":{"country_iso_code":"SG"},"ip":"217.15.163.226","mac":["00:50:56:62:7a:fd"],"mac-cnt":1,"packets":4,"port":1723},"dstOui":["VMware, Inc."],"dstOuiCnt":1,"dstPayload8":"485454502f312e31","dstRIR":"RIPE","dstTTL":[64],"dstTTLCnt":1,"ethertype":2048,"fileId":[77700],"firstPacket":1787380468805,"http":{"bodyMagic":["text/plain"],"bodyMagicCnt":1,"responseHeader":["connection","content-type"],"responseHeaderCnt":2,"responseHeaderField":["content-type","connection"],"responseHeaderValue":["text/plain; charset=utf-8","close"],"responseHeaderValueCnt":2,"serverVersion":["1.1"],"serverVersionCnt":1,"statuscode":[400],"statuscodeCnt":1},"initRTT":80,"ipProtocol":6,"lastPacket":1787380476958,"length":8153,"network":{"bytes":863,"community_id":"1:cyHT0yF/pVfHqh0HDbUUCVouB4g=","packets":9},"node":"spark-afae","packetPos":[-77700,489847,90,1338,82,238,15079,82,185,1243],"packetRange":{"gte":1787380468805,"lte":1787380476958},"protocol":["http","tcp"],"protocolCnt":2,"rootId":"260822-udYXXGTrx8tLc7zZlxu7XLuH","segmentCnt":1,"server":{"bytes":103},"source":{"as":{"full":"AS214351 Femo It Solutions Limited","number":214351,"organization":{"name":"Femo It Solutions Limited"}},"bytes":488,"geo":{"country_iso_code":"DE"},"ip":"62.60.226.150","mac":["fc:bd:67:9d:2b:2b","00:c0:1d:c0:ff:ee"],"mac-cnt":2,"packets":5,"port":41240},"srcOui":["Arista Networks","Grand Junction Networks, Inc."],"srcOuiCnt":2,"srcPayload8":"009c00011a2b3c4d","srcRIR":"RIPE","srcTTL":[52],"srcTTLCnt":1,"tags":["contabo-sponge-01-ts","honeypot","sensor:contabo-sponge-01-ts"],"tagsCnt":3,"tcp":{"ja4ls":"68_64_3911989","ja4t":["64240_2-4-8-1-3_1394_7"],"ja4tCnt":1,"ja4ts":["65160_2-4-8-1-3_1460_7"],"ja4tsCnt":1},"tcpflags":{"ack":2,"ae":0,"cwr":0,"dstZero":0,"ece":0,"fin":2,"psh":2,"rst":1,"srcZero":0,"syn":1,"syn-ack":1,"urg":0},"tcpseq":{"dst":0,"src":338230336},"totDataBytes":259} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS138915.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS138915.ndjson new file mode 100644 index 0000000..e742a25 --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS138915.ndjson @@ -0,0 +1,20 @@ +{"doc_count":254054,"key":123} +{"doc_count":241899,"key":80} +{"doc_count":192161,"key":443} +{"doc_count":103222,"key":1900} +{"doc_count":88367,"key":5355} +{"doc_count":86472,"key":137} +{"doc_count":66157,"key":5353} +{"doc_count":51501,"key":5678} +{"doc_count":27057,"key":138} +{"doc_count":10151,"key":23} +{"doc_count":5486,"key":0} +{"doc_count":5325,"key":47604} +{"doc_count":2641,"key":34569} +{"doc_count":2543,"key":49960} +{"doc_count":2100,"key":67} +{"doc_count":2024,"key":4242} +{"doc_count":1869,"key":54378} +{"doc_count":1766,"key":46030} +{"doc_count":1556,"key":28591} +{"doc_count":1297,"key":35372} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS140666.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS140666.ndjson new file mode 100644 index 0000000..62d2bb1 --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS140666.ndjson @@ -0,0 +1 @@ +{"doc_count":7,"key":0} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS14956.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS14956.ndjson new file mode 100644 index 0000000..f07d9ad --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS14956.ndjson @@ -0,0 +1,20 @@ +{"doc_count":2215,"key":22} +{"doc_count":451,"key":5060} +{"doc_count":398,"key":1723} +{"doc_count":387,"key":22222} +{"doc_count":385,"key":23} +{"doc_count":371,"key":80} +{"doc_count":345,"key":443} +{"doc_count":334,"key":8022} +{"doc_count":305,"key":21} +{"doc_count":257,"key":13} +{"doc_count":228,"key":19} +{"doc_count":210,"key":445} +{"doc_count":208,"key":5901} +{"doc_count":207,"key":2222} +{"doc_count":198,"key":81} +{"doc_count":191,"key":26} +{"doc_count":187,"key":53} +{"doc_count":184,"key":111} +{"doc_count":176,"key":82} +{"doc_count":174,"key":37} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS198953.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS198953.ndjson new file mode 100644 index 0000000..f3fc8bd --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS198953.ndjson @@ -0,0 +1,20 @@ +{"doc_count":2314,"key":22} +{"doc_count":1133,"key":443} +{"doc_count":1092,"key":5405} +{"doc_count":936,"key":22222} +{"doc_count":832,"key":2222} +{"doc_count":294,"key":1433} +{"doc_count":217,"key":4433} +{"doc_count":211,"key":6001} +{"doc_count":208,"key":10443} +{"doc_count":207,"key":3005} +{"doc_count":201,"key":5678} +{"doc_count":194,"key":1434} +{"doc_count":191,"key":3389} +{"doc_count":191,"key":5000} +{"doc_count":181,"key":1800} +{"doc_count":179,"key":5005} +{"doc_count":178,"key":4443} +{"doc_count":173,"key":8888} +{"doc_count":172,"key":6000} +{"doc_count":164,"key":3333} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS200593.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS200593.ndjson new file mode 100644 index 0000000..7f44f89 --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS200593.ndjson @@ -0,0 +1,20 @@ +{"doc_count":104,"key":443} +{"doc_count":73,"key":80} +{"doc_count":65,"key":9443} +{"doc_count":57,"key":4433} +{"doc_count":50,"key":4443} +{"doc_count":50,"key":8443} +{"doc_count":47,"key":444} +{"doc_count":46,"key":3389} +{"doc_count":35,"key":5443} +{"doc_count":34,"key":10443} +{"doc_count":29,"key":6443} +{"doc_count":26,"key":9000} +{"doc_count":25,"key":22} +{"doc_count":25,"key":4444} +{"doc_count":24,"key":7443} +{"doc_count":24,"key":20443} +{"doc_count":23,"key":8888} +{"doc_count":22,"key":30443} +{"doc_count":22,"key":40443} +{"doc_count":21,"key":3390} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS200651.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS200651.ndjson new file mode 100644 index 0000000..11f9d51 --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS200651.ndjson @@ -0,0 +1,20 @@ +{"doc_count":752,"key":443} +{"doc_count":183,"key":80} +{"doc_count":151,"key":8080} +{"doc_count":112,"key":6882} +{"doc_count":102,"key":23} +{"doc_count":91,"key":22} +{"doc_count":74,"key":1080} +{"doc_count":71,"key":444} +{"doc_count":66,"key":18190} +{"doc_count":38,"key":53} +{"doc_count":36,"key":19009} +{"doc_count":35,"key":2222} +{"doc_count":28,"key":3128} +{"doc_count":26,"key":9006} +{"doc_count":26,"key":20001} +{"doc_count":25,"key":18264} +{"doc_count":23,"key":8888} +{"doc_count":20,"key":8443} +{"doc_count":20,"key":20201} +{"doc_count":17,"key":5555} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS202685.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS202685.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS202685.ndjson diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS206728.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS206728.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS206728.ndjson diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS209847.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS209847.ndjson new file mode 100644 index 0000000..90b494d --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS209847.ndjson @@ -0,0 +1,20 @@ +{"doc_count":455,"key":0} +{"doc_count":379,"key":22} +{"doc_count":159,"key":443} +{"doc_count":157,"key":3389} +{"doc_count":104,"key":2222} +{"doc_count":102,"key":2096} +{"doc_count":101,"key":8080} +{"doc_count":97,"key":8443} +{"doc_count":94,"key":2053} +{"doc_count":93,"key":54321} +{"doc_count":92,"key":80} +{"doc_count":86,"key":2083} +{"doc_count":86,"key":8022} +{"doc_count":82,"key":2087} +{"doc_count":80,"key":8880} +{"doc_count":75,"key":9000} +{"doc_count":75,"key":10000} +{"doc_count":59,"key":5000} +{"doc_count":58,"key":3000} +{"doc_count":58,"key":8000} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS210644.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS210644.ndjson new file mode 100644 index 0000000..039cf7d --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS210644.ndjson @@ -0,0 +1,20 @@ +{"doc_count":564,"key":22} +{"doc_count":456,"key":8022} +{"doc_count":384,"key":2222} +{"doc_count":289,"key":22222} +{"doc_count":250,"key":80} +{"doc_count":239,"key":82} +{"doc_count":238,"key":88} +{"doc_count":237,"key":1723} +{"doc_count":233,"key":25565} +{"doc_count":231,"key":1883} +{"doc_count":231,"key":50000} +{"doc_count":226,"key":53} +{"doc_count":223,"key":20002} +{"doc_count":221,"key":2376} +{"doc_count":220,"key":21} +{"doc_count":220,"key":444} +{"doc_count":219,"key":85} +{"doc_count":219,"key":110} +{"doc_count":219,"key":111} +{"doc_count":219,"key":143} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS211720.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS211720.ndjson new file mode 100644 index 0000000..cf495f6 --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS211720.ndjson @@ -0,0 +1,20 @@ +{"doc_count":91,"key":5405} +{"doc_count":32,"key":5900} +{"doc_count":31,"key":443} +{"doc_count":21,"key":3389} +{"doc_count":14,"key":8013} +{"doc_count":10,"key":0} +{"doc_count":7,"key":445} +{"doc_count":6,"key":21} +{"doc_count":6,"key":1434} +{"doc_count":6,"key":30443} +{"doc_count":6,"key":40443} +{"doc_count":5,"key":1433} +{"doc_count":5,"key":4430} +{"doc_count":5,"key":8443} +{"doc_count":5,"key":9443} +{"doc_count":5,"key":50443} +{"doc_count":4,"key":444} +{"doc_count":4,"key":4433} +{"doc_count":4,"key":4443} +{"doc_count":4,"key":7443} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS213702.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS213702.ndjson new file mode 100644 index 0000000..0de63c9 --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS213702.ndjson @@ -0,0 +1,20 @@ +{"doc_count":140,"key":443} +{"doc_count":75,"key":22} +{"doc_count":71,"key":6060} +{"doc_count":68,"key":80} +{"doc_count":68,"key":1317} +{"doc_count":68,"key":2375} +{"doc_count":68,"key":3000} +{"doc_count":68,"key":3030} +{"doc_count":68,"key":8000} +{"doc_count":68,"key":8080} +{"doc_count":68,"key":8332} +{"doc_count":68,"key":8443} +{"doc_count":68,"key":8501} +{"doc_count":68,"key":8545} +{"doc_count":68,"key":8546} +{"doc_count":68,"key":8551} +{"doc_count":68,"key":8888} +{"doc_count":68,"key":8899} +{"doc_count":68,"key":8900} +{"doc_count":68,"key":9000} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS214351.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS214351.ndjson new file mode 100644 index 0000000..2e00122 --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS214351.ndjson @@ -0,0 +1,3 @@ +{"doc_count":11,"key":1723} +{"doc_count":5,"key":42021} +{"doc_count":2,"key":11434} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS214940.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS214940.ndjson new file mode 100644 index 0000000..ff5dab0 --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS214940.ndjson @@ -0,0 +1,20 @@ +{"doc_count":3178,"key":443} +{"doc_count":3000,"key":80} +{"doc_count":2696,"key":25} +{"doc_count":608,"key":587} +{"doc_count":254,"key":465} +{"doc_count":247,"key":2525} +{"doc_count":88,"key":8022} +{"doc_count":80,"key":2222} +{"doc_count":36,"key":22222} +{"doc_count":20,"key":26} +{"doc_count":7,"key":8080} +{"doc_count":6,"key":3128} +{"doc_count":6,"key":8888} +{"doc_count":5,"key":48388} +{"doc_count":1,"key":22} +{"doc_count":1,"key":110} +{"doc_count":1,"key":143} +{"doc_count":1,"key":1433} +{"doc_count":1,"key":3000} +{"doc_count":1,"key":3306} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS216139.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS216139.ndjson new file mode 100644 index 0000000..8c45a3b --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS216139.ndjson @@ -0,0 +1,4 @@ +{"doc_count":70,"key":22222} +{"doc_count":52,"key":2222} +{"doc_count":27,"key":22} +{"doc_count":1,"key":19898} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS216246.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS216246.ndjson new file mode 100644 index 0000000..9491dee --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS216246.ndjson @@ -0,0 +1,20 @@ +{"doc_count":497,"key":8888} +{"doc_count":398,"key":8080} +{"doc_count":300,"key":80} +{"doc_count":264,"key":81} +{"doc_count":264,"key":82} +{"doc_count":264,"key":2082} +{"doc_count":264,"key":3000} +{"doc_count":264,"key":5000} +{"doc_count":214,"key":1194} +{"doc_count":213,"key":21} +{"doc_count":213,"key":53} +{"doc_count":213,"key":85} +{"doc_count":213,"key":110} +{"doc_count":213,"key":111} +{"doc_count":213,"key":143} +{"doc_count":213,"key":444} +{"doc_count":213,"key":554} +{"doc_count":213,"key":888} +{"doc_count":213,"key":993} +{"doc_count":213,"key":1024} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS216309.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS216309.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS216309.ndjson diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS30823.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS30823.ndjson new file mode 100644 index 0000000..3f601f3 --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS30823.ndjson @@ -0,0 +1,20 @@ +{"doc_count":347,"key":80} +{"doc_count":279,"key":443} +{"doc_count":215,"key":3389} +{"doc_count":28,"key":5060} +{"doc_count":16,"key":22} +{"doc_count":4,"key":445} +{"doc_count":2,"key":23} +{"doc_count":2,"key":27017} +{"doc_count":1,"key":21} +{"doc_count":1,"key":53} +{"doc_count":1,"key":1194} +{"doc_count":1,"key":1433} +{"doc_count":1,"key":1434} +{"doc_count":1,"key":1521} +{"doc_count":1,"key":1883} +{"doc_count":1,"key":2022} +{"doc_count":1,"key":2222} +{"doc_count":1,"key":3306} +{"doc_count":1,"key":5432} +{"doc_count":1,"key":6000} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS33993.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS33993.ndjson new file mode 100644 index 0000000..212acfa --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS33993.ndjson @@ -0,0 +1,7 @@ +{"doc_count":33,"key":22} +{"doc_count":4,"key":80} +{"doc_count":4,"key":443} +{"doc_count":3,"key":0} +{"doc_count":2,"key":7860} +{"doc_count":1,"key":6379} +{"doc_count":1,"key":51820} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS394711.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS394711.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS394711.ndjson diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS400992.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS400992.ndjson new file mode 100644 index 0000000..a855e9c --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS400992.ndjson @@ -0,0 +1,20 @@ +{"doc_count":1166,"key":80} +{"doc_count":1152,"key":443} +{"doc_count":159,"key":8080} +{"doc_count":155,"key":22} +{"doc_count":140,"key":2222} +{"doc_count":120,"key":22222} +{"doc_count":18,"key":1080} +{"doc_count":18,"key":3128} +{"doc_count":6,"key":4022} +{"doc_count":6,"key":39222} +{"doc_count":3,"key":7235} +{"doc_count":3,"key":25565} +{"doc_count":2,"key":23} +{"doc_count":2,"key":222} +{"doc_count":2,"key":389} +{"doc_count":2,"key":3389} +{"doc_count":1,"key":81} +{"doc_count":1,"key":82} +{"doc_count":1,"key":83} +{"doc_count":1,"key":2525} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS51396.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS51396.ndjson new file mode 100644 index 0000000..8c0e889 --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS51396.ndjson @@ -0,0 +1,20 @@ +{"doc_count":488579,"key":22} +{"doc_count":227582,"key":80} +{"doc_count":42702,"key":8088} +{"doc_count":34044,"key":8080} +{"doc_count":24280,"key":5900} +{"doc_count":21617,"key":23} +{"doc_count":11490,"key":27017} +{"doc_count":9970,"key":81} +{"doc_count":9768,"key":5555} +{"doc_count":9678,"key":25565} +{"doc_count":9532,"key":8081} +{"doc_count":9205,"key":1080} +{"doc_count":9046,"key":0} +{"doc_count":8507,"key":3306} +{"doc_count":7412,"key":82} +{"doc_count":6938,"key":3000} +{"doc_count":6670,"key":88} +{"doc_count":6635,"key":83} +{"doc_count":6455,"key":4000} +{"doc_count":6404,"key":8545} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS51852.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS51852.ndjson new file mode 100644 index 0000000..30f4619 --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS51852.ndjson @@ -0,0 +1,20 @@ +{"doc_count":35129,"key":23} +{"doc_count":27440,"key":22} +{"doc_count":4996,"key":443} +{"doc_count":4374,"key":5432} +{"doc_count":2276,"key":135} +{"doc_count":2010,"key":8080} +{"doc_count":1599,"key":8443} +{"doc_count":1595,"key":3306} +{"doc_count":1594,"key":80} +{"doc_count":955,"key":5060} +{"doc_count":277,"key":8089} +{"doc_count":175,"key":8090} +{"doc_count":168,"key":3000} +{"doc_count":163,"key":27017} +{"doc_count":158,"key":5061} +{"doc_count":126,"key":5433} +{"doc_count":110,"key":5001} +{"doc_count":96,"key":8291} +{"doc_count":94,"key":8000} +{"doc_count":92,"key":9000} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS57043.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS57043.ndjson new file mode 100644 index 0000000..c6c8bdb --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS57043.ndjson @@ -0,0 +1,20 @@ +{"doc_count":677,"key":23} +{"doc_count":288,"key":22} +{"doc_count":212,"key":2222} +{"doc_count":100,"key":443} +{"doc_count":84,"key":80} +{"doc_count":84,"key":2000} +{"doc_count":84,"key":8081} +{"doc_count":83,"key":8000} +{"doc_count":80,"key":22222} +{"doc_count":72,"key":8080} +{"doc_count":28,"key":19} +{"doc_count":28,"key":502} +{"doc_count":28,"key":548} +{"doc_count":28,"key":1741} +{"doc_count":28,"key":2150} +{"doc_count":28,"key":2762} +{"doc_count":28,"key":3306} +{"doc_count":28,"key":4242} +{"doc_count":28,"key":6002} +{"doc_count":28,"key":7001} diff --git a/kevlar/2026-08-31/sponge/port-targeting-AS58854.ndjson b/kevlar/2026-08-31/sponge/port-targeting-AS58854.ndjson new file mode 100644 index 0000000..0c00657 --- /dev/null +++ b/kevlar/2026-08-31/sponge/port-targeting-AS58854.ndjson @@ -0,0 +1 @@ +{"doc_count":5,"key":3389} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS138915.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS138915.ndjson new file mode 100644 index 0000000..51891a6 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS138915.ndjson @@ -0,0 +1,20 @@ +{"doc_count":992209,"key":"38.54.2.209"} +{"doc_count":233202,"key":"38.54.2.232"} +{"doc_count":28533,"key":"38.54.2.13"} +{"doc_count":24262,"key":"38.54.2.61"} +{"doc_count":16024,"key":"38.54.2.221"} +{"doc_count":15929,"key":"38.54.2.170"} +{"doc_count":15233,"key":"38.54.2.148"} +{"doc_count":13836,"key":"38.54.2.75"} +{"doc_count":8290,"key":"38.60.191.241"} +{"doc_count":6935,"key":"38.54.2.82"} +{"doc_count":5924,"key":"38.54.2.107"} +{"doc_count":4797,"key":"38.54.2.152"} +{"doc_count":4736,"key":"38.54.2.112"} +{"doc_count":4009,"key":"38.54.2.168"} +{"doc_count":1465,"key":"38.54.2.203"} +{"doc_count":1268,"key":"38.54.2.204"} +{"doc_count":1151,"key":"38.54.2.195"} +{"doc_count":991,"key":"38.60.230.109"} +{"doc_count":835,"key":"38.54.2.120"} +{"doc_count":626,"key":"38.54.2.135"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS140666.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS140666.ndjson new file mode 100644 index 0000000..07321f7 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS140666.ndjson @@ -0,0 +1,4 @@ +{"doc_count":3,"key":"154.94.68.6"} +{"doc_count":2,"key":"204.3.179.3"} +{"doc_count":1,"key":"204.3.179.2"} +{"doc_count":1,"key":"204.3.250.24"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS14956.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS14956.ndjson new file mode 100644 index 0000000..1c3afb4 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS14956.ndjson @@ -0,0 +1,20 @@ +{"doc_count":1123,"key":"107.189.27.179"} +{"doc_count":967,"key":"216.126.227.184"} +{"doc_count":587,"key":"167.88.166.32"} +{"doc_count":563,"key":"167.88.165.33"} +{"doc_count":547,"key":"167.88.165.44"} +{"doc_count":537,"key":"172.86.123.8"} +{"doc_count":525,"key":"167.88.165.227"} +{"doc_count":496,"key":"172.86.117.95"} +{"doc_count":415,"key":"172.86.116.74"} +{"doc_count":387,"key":"216.126.225.6"} +{"doc_count":383,"key":"144.172.109.224"} +{"doc_count":372,"key":"172.86.113.36"} +{"doc_count":303,"key":"172.86.90.76"} +{"doc_count":277,"key":"216.126.239.17"} +{"doc_count":265,"key":"144.172.94.186"} +{"doc_count":221,"key":"45.59.117.74"} +{"doc_count":185,"key":"172.86.113.15"} +{"doc_count":177,"key":"172.86.116.32"} +{"doc_count":163,"key":"172.86.90.159"} +{"doc_count":156,"key":"144.172.110.38"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS198953.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS198953.ndjson new file mode 100644 index 0000000..317d853 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS198953.ndjson @@ -0,0 +1,20 @@ +{"doc_count":102331,"key":"37.77.150.67"} +{"doc_count":6262,"key":"176.120.22.61"} +{"doc_count":2379,"key":"176.120.22.16"} +{"doc_count":1797,"key":"37.77.150.119"} +{"doc_count":1598,"key":"176.120.22.147"} +{"doc_count":1202,"key":"176.120.22.42"} +{"doc_count":1189,"key":"176.120.22.6"} +{"doc_count":1168,"key":"176.120.22.73"} +{"doc_count":1092,"key":"176.120.22.135"} +{"doc_count":993,"key":"176.120.22.113"} +{"doc_count":600,"key":"176.120.22.240"} +{"doc_count":599,"key":"37.77.150.241"} +{"doc_count":512,"key":"176.120.22.52"} +{"doc_count":464,"key":"176.120.22.123"} +{"doc_count":415,"key":"37.77.150.83"} +{"doc_count":409,"key":"193.143.1.66"} +{"doc_count":403,"key":"37.77.150.10"} +{"doc_count":392,"key":"176.120.22.66"} +{"doc_count":238,"key":"176.120.22.122"} +{"doc_count":166,"key":"176.120.22.179"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS200593.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS200593.ndjson new file mode 100644 index 0000000..0bac4a2 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS200593.ndjson @@ -0,0 +1,20 @@ +{"doc_count":775,"key":"91.215.85.104"} +{"doc_count":356,"key":"91.202.233.79"} +{"doc_count":333,"key":"91.202.233.82"} +{"doc_count":305,"key":"91.215.85.193"} +{"doc_count":297,"key":"91.215.85.106"} +{"doc_count":195,"key":"91.202.233.8"} +{"doc_count":181,"key":"193.24.123.16"} +{"doc_count":109,"key":"91.202.233.121"} +{"doc_count":99,"key":"193.24.123.55"} +{"doc_count":86,"key":"91.202.233.46"} +{"doc_count":43,"key":"91.202.233.29"} +{"doc_count":41,"key":"91.215.85.40"} +{"doc_count":41,"key":"193.24.123.118"} +{"doc_count":24,"key":"193.24.123.23"} +{"doc_count":18,"key":"91.215.85.34"} +{"doc_count":16,"key":"91.202.233.33"} +{"doc_count":16,"key":"193.24.123.148"} +{"doc_count":12,"key":"193.24.123.58"} +{"doc_count":8,"key":"91.215.85.142"} +{"doc_count":4,"key":"193.24.123.63"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS200651.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS200651.ndjson new file mode 100644 index 0000000..3dd0bf4 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS200651.ndjson @@ -0,0 +1,20 @@ +{"doc_count":1271,"key":"185.100.87.136"} +{"doc_count":1238,"key":"185.100.84.164"} +{"doc_count":112,"key":"185.247.225.201"} +{"doc_count":110,"key":"185.10.68.96"} +{"doc_count":88,"key":"185.246.190.66"} +{"doc_count":75,"key":"185.100.85.79"} +{"doc_count":75,"key":"185.146.232.146"} +{"doc_count":36,"key":"185.146.232.145"} +{"doc_count":35,"key":"185.100.84.174"} +{"doc_count":34,"key":"185.246.191.8"} +{"doc_count":33,"key":"185.165.171.158"} +{"doc_count":32,"key":"185.146.232.125"} +{"doc_count":31,"key":"185.165.169.121"} +{"doc_count":20,"key":"185.10.68.109"} +{"doc_count":19,"key":"185.146.232.118"} +{"doc_count":12,"key":"185.146.232.142"} +{"doc_count":11,"key":"37.228.129.67"} +{"doc_count":11,"key":"185.146.233.211"} +{"doc_count":8,"key":"185.165.169.248"} +{"doc_count":4,"key":"185.246.188.74"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS202685.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS202685.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS202685.ndjson diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS206728.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS206728.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS206728.ndjson diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS209847.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS209847.ndjson new file mode 100644 index 0000000..d8a1b13 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS209847.ndjson @@ -0,0 +1,20 @@ +{"doc_count":1646,"key":"45.144.28.70"} +{"doc_count":267,"key":"45.82.252.106"} +{"doc_count":157,"key":"77.91.122.2"} +{"doc_count":91,"key":"92.118.233.6"} +{"doc_count":70,"key":"5.181.20.206"} +{"doc_count":65,"key":"45.12.129.166"} +{"doc_count":62,"key":"45.83.141.120"} +{"doc_count":60,"key":"94.131.106.51"} +{"doc_count":59,"key":"45.83.22.14"} +{"doc_count":56,"key":"45.12.146.245"} +{"doc_count":51,"key":"45.12.136.73"} +{"doc_count":48,"key":"45.89.55.225"} +{"doc_count":47,"key":"31.222.238.6"} +{"doc_count":36,"key":"185.231.206.117"} +{"doc_count":29,"key":"103.231.75.163"} +{"doc_count":26,"key":"45.83.20.230"} +{"doc_count":25,"key":"45.83.143.9"} +{"doc_count":24,"key":"45.12.132.198"} +{"doc_count":18,"key":"91.225.219.200"} +{"doc_count":13,"key":"185.231.207.149"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS210644.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS210644.ndjson new file mode 100644 index 0000000..e218eff --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS210644.ndjson @@ -0,0 +1,20 @@ +{"doc_count":26958,"key":"81.19.137.20"} +{"doc_count":26454,"key":"138.124.91.58"} +{"doc_count":25907,"key":"213.165.46.78"} +{"doc_count":876,"key":"213.165.46.83"} +{"doc_count":588,"key":"77.221.153.3"} +{"doc_count":523,"key":"85.192.31.14"} +{"doc_count":399,"key":"138.124.99.219"} +{"doc_count":312,"key":"77.221.158.41"} +{"doc_count":218,"key":"212.113.102.0"} +{"doc_count":108,"key":"109.120.184.14"} +{"doc_count":105,"key":"109.107.190.8"} +{"doc_count":100,"key":"89.22.224.187"} +{"doc_count":92,"key":"62.60.158.60"} +{"doc_count":76,"key":"194.76.217.92"} +{"doc_count":73,"key":"185.103.101.180"} +{"doc_count":67,"key":"79.137.197.24"} +{"doc_count":66,"key":"89.208.97.111"} +{"doc_count":64,"key":"138.124.54.172"} +{"doc_count":62,"key":"109.172.95.248"} +{"doc_count":56,"key":"185.103.101.74"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS211720.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS211720.ndjson new file mode 100644 index 0000000..2a1a6a4 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS211720.ndjson @@ -0,0 +1,6 @@ +{"doc_count":143,"key":"185.231.33.46"} +{"doc_count":119,"key":"185.231.33.30"} +{"doc_count":32,"key":"185.231.33.22"} +{"doc_count":2,"key":"185.231.32.24"} +{"doc_count":2,"key":"185.231.32.25"} +{"doc_count":1,"key":"185.231.33.38"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS213702.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS213702.ndjson new file mode 100644 index 0000000..5757977 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS213702.ndjson @@ -0,0 +1,8 @@ +{"doc_count":2247,"key":"89.125.48.168"} +{"doc_count":72,"key":"78.40.209.57"} +{"doc_count":11,"key":"80.253.249.170"} +{"doc_count":3,"key":"95.164.53.44"} +{"doc_count":2,"key":"84.21.189.148"} +{"doc_count":2,"key":"89.125.48.64"} +{"doc_count":2,"key":"95.164.123.100"} +{"doc_count":2,"key":"185.238.191.130"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS214351.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS214351.ndjson new file mode 100644 index 0000000..296fa74 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS214351.ndjson @@ -0,0 +1,5 @@ +{"doc_count":6,"key":"62.60.226.150"} +{"doc_count":5,"key":"62.60.226.186"} +{"doc_count":4,"key":"62.60.226.79"} +{"doc_count":2,"key":"192.162.199.180"} +{"doc_count":1,"key":"62.60.226.176"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS214940.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS214940.ndjson new file mode 100644 index 0000000..469aa61 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS214940.ndjson @@ -0,0 +1,20 @@ +{"doc_count":2350,"key":"77.83.39.197"} +{"doc_count":1038,"key":"77.83.39.94"} +{"doc_count":683,"key":"45.144.212.53"} +{"doc_count":649,"key":"77.83.39.36"} +{"doc_count":610,"key":"77.83.39.42"} +{"doc_count":374,"key":"77.83.39.104"} +{"doc_count":373,"key":"77.83.39.86"} +{"doc_count":362,"key":"77.83.39.14"} +{"doc_count":341,"key":"77.83.39.119"} +{"doc_count":240,"key":"77.83.39.54"} +{"doc_count":214,"key":"77.83.39.117"} +{"doc_count":173,"key":"77.83.39.84"} +{"doc_count":172,"key":"77.83.39.6"} +{"doc_count":171,"key":"77.83.39.159"} +{"doc_count":165,"key":"77.83.39.24"} +{"doc_count":159,"key":"77.83.39.82"} +{"doc_count":157,"key":"77.83.39.72"} +{"doc_count":142,"key":"77.83.39.27"} +{"doc_count":123,"key":"45.144.212.221"} +{"doc_count":113,"key":"45.144.212.40"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS216139.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS216139.ndjson new file mode 100644 index 0000000..b6f9e7f --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS216139.ndjson @@ -0,0 +1,7 @@ +{"doc_count":119,"key":"109.120.141.207"} +{"doc_count":18,"key":"185.72.10.233"} +{"doc_count":4,"key":"178.208.88.6"} +{"doc_count":3,"key":"46.30.46.130"} +{"doc_count":3,"key":"178.208.78.17"} +{"doc_count":2,"key":"176.98.185.152"} +{"doc_count":1,"key":"46.30.46.124"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS216246.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS216246.ndjson new file mode 100644 index 0000000..a252ce9 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS216246.ndjson @@ -0,0 +1,20 @@ +{"doc_count":46721,"key":"82.117.87.156"} +{"doc_count":11530,"key":"138.124.14.150"} +{"doc_count":5974,"key":"77.110.105.96"} +{"doc_count":1489,"key":"185.103.100.48"} +{"doc_count":235,"key":"79.137.192.106"} +{"doc_count":184,"key":"178.159.94.237"} +{"doc_count":150,"key":"85.192.30.81"} +{"doc_count":137,"key":"176.124.222.50"} +{"doc_count":92,"key":"77.221.151.241"} +{"doc_count":52,"key":"85.192.56.190"} +{"doc_count":51,"key":"185.96.80.121"} +{"doc_count":43,"key":"176.124.222.35"} +{"doc_count":39,"key":"178.159.94.48"} +{"doc_count":33,"key":"178.20.208.185"} +{"doc_count":25,"key":"82.117.87.221"} +{"doc_count":9,"key":"85.192.30.189"} +{"doc_count":5,"key":"176.124.222.72"} +{"doc_count":3,"key":"178.20.208.195"} +{"doc_count":2,"key":"185.221.199.82"} +{"doc_count":2,"key":"194.26.229.20"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS216309.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS216309.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS216309.ndjson diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS30823.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS30823.ndjson new file mode 100644 index 0000000..1029b38 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS30823.ndjson @@ -0,0 +1,19 @@ +{"doc_count":521,"key":"172.86.94.49"} +{"doc_count":214,"key":"45.11.18.33"} +{"doc_count":107,"key":"45.153.243.249"} +{"doc_count":39,"key":"172.86.93.75"} +{"doc_count":8,"key":"41.216.188.21"} +{"doc_count":8,"key":"45.138.173.7"} +{"doc_count":8,"key":"216.126.229.131"} +{"doc_count":6,"key":"172.86.95.45"} +{"doc_count":5,"key":"172.86.93.168"} +{"doc_count":5,"key":"172.86.94.82"} +{"doc_count":3,"key":"172.86.94.48"} +{"doc_count":3,"key":"172.86.94.229"} +{"doc_count":2,"key":"45.11.16.143"} +{"doc_count":1,"key":"152.89.244.135"} +{"doc_count":1,"key":"152.89.246.217"} +{"doc_count":1,"key":"160.20.144.83"} +{"doc_count":1,"key":"172.86.92.75"} +{"doc_count":1,"key":"172.86.93.173"} +{"doc_count":1,"key":"172.86.95.26"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS33993.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS33993.ndjson new file mode 100644 index 0000000..e909eca --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS33993.ndjson @@ -0,0 +1,6 @@ +{"doc_count":33,"key":"45.144.31.247"} +{"doc_count":6,"key":"185.235.242.122"} +{"doc_count":4,"key":"141.98.189.206"} +{"doc_count":3,"key":"45.150.64.125"} +{"doc_count":1,"key":"45.67.230.246"} +{"doc_count":1,"key":"193.201.126.15"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS394711.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS394711.ndjson new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS394711.ndjson diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS400992.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS400992.ndjson new file mode 100644 index 0000000..12924a4 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS400992.ndjson @@ -0,0 +1,20 @@ +{"doc_count":1205,"key":"23.172.217.77"} +{"doc_count":870,"key":"23.172.217.87"} +{"doc_count":256,"key":"185.121.15.184"} +{"doc_count":158,"key":"185.219.7.27"} +{"doc_count":143,"key":"23.177.185.239"} +{"doc_count":75,"key":"185.121.15.149"} +{"doc_count":73,"key":"193.46.218.239"} +{"doc_count":63,"key":"130.12.44.88"} +{"doc_count":24,"key":"130.12.47.8"} +{"doc_count":21,"key":"193.46.218.82"} +{"doc_count":20,"key":"23.172.217.58"} +{"doc_count":20,"key":"185.236.25.175"} +{"doc_count":14,"key":"45.150.195.235"} +{"doc_count":7,"key":"185.236.25.178"} +{"doc_count":6,"key":"147.45.124.196"} +{"doc_count":4,"key":"23.172.217.46"} +{"doc_count":3,"key":"147.45.125.75"} +{"doc_count":3,"key":"147.45.125.234"} +{"doc_count":3,"key":"185.250.180.21"} +{"doc_count":2,"key":"23.177.184.46"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS51396.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS51396.ndjson new file mode 100644 index 0000000..e0f6cb2 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS51396.ndjson @@ -0,0 +1,20 @@ +{"doc_count":199345,"key":"204.76.203.18"} +{"doc_count":190651,"key":"204.76.203.231"} +{"doc_count":83990,"key":"176.65.148.147"} +{"doc_count":33860,"key":"176.65.148.84"} +{"doc_count":33484,"key":"45.153.34.235"} +{"doc_count":29488,"key":"45.156.87.204"} +{"doc_count":29344,"key":"204.76.203.226"} +{"doc_count":28739,"key":"45.156.87.253"} +{"doc_count":24086,"key":"176.65.139.11"} +{"doc_count":23895,"key":"45.156.87.254"} +{"doc_count":22576,"key":"204.76.203.73"} +{"doc_count":21564,"key":"176.65.151.74"} +{"doc_count":21147,"key":"204.76.203.206"} +{"doc_count":20484,"key":"176.65.132.149"} +{"doc_count":20287,"key":"45.156.87.216"} +{"doc_count":18698,"key":"204.76.203.212"} +{"doc_count":18489,"key":"45.153.34.112"} +{"doc_count":17961,"key":"45.153.34.149"} +{"doc_count":17864,"key":"176.65.132.129"} +{"doc_count":17265,"key":"45.153.34.114"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS51852.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS51852.ndjson new file mode 100644 index 0000000..aee6765 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS51852.ndjson @@ -0,0 +1,20 @@ +{"doc_count":34911,"key":"190.211.255.210"} +{"doc_count":19618,"key":"179.43.133.154"} +{"doc_count":7775,"key":"179.43.139.58"} +{"doc_count":6314,"key":"179.43.163.26"} +{"doc_count":5577,"key":"179.43.186.223"} +{"doc_count":4219,"key":"179.43.134.114"} +{"doc_count":1790,"key":"81.17.28.130"} +{"doc_count":1465,"key":"179.43.143.170"} +{"doc_count":1217,"key":"179.43.150.26"} +{"doc_count":1045,"key":"46.19.137.194"} +{"doc_count":970,"key":"81.17.28.131"} +{"doc_count":962,"key":"179.43.175.234"} +{"doc_count":646,"key":"179.43.146.226"} +{"doc_count":643,"key":"179.43.175.236"} +{"doc_count":577,"key":"179.43.146.227"} +{"doc_count":512,"key":"179.43.168.58"} +{"doc_count":337,"key":"179.43.186.241"} +{"doc_count":226,"key":"46.19.138.10"} +{"doc_count":210,"key":"179.43.182.200"} +{"doc_count":194,"key":"179.43.167.2"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS57043.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS57043.ndjson new file mode 100644 index 0000000..345d5bc --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS57043.ndjson @@ -0,0 +1,20 @@ +{"doc_count":636,"key":"193.17.95.129"} +{"doc_count":619,"key":"66.248.205.4"} +{"doc_count":141,"key":"82.22.175.192"} +{"doc_count":98,"key":"82.24.19.158"} +{"doc_count":97,"key":"91.239.211.68"} +{"doc_count":60,"key":"151.245.140.36"} +{"doc_count":56,"key":"193.84.2.233"} +{"doc_count":47,"key":"38.124.152.45"} +{"doc_count":39,"key":"46.17.99.102"} +{"doc_count":33,"key":"89.125.61.90"} +{"doc_count":28,"key":"89.125.61.139"} +{"doc_count":24,"key":"151.241.155.245"} +{"doc_count":22,"key":"151.241.234.73"} +{"doc_count":20,"key":"38.143.19.97"} +{"doc_count":16,"key":"167.17.182.242"} +{"doc_count":12,"key":"212.237.219.206"} +{"doc_count":11,"key":"80.91.65.247"} +{"doc_count":11,"key":"103.27.156.128"} +{"doc_count":10,"key":"151.247.219.40"} +{"doc_count":10,"key":"185.23.18.151"} diff --git a/kevlar/2026-08-31/sponge/session-stats-by-ip-AS58854.ndjson b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS58854.ndjson new file mode 100644 index 0000000..ff29482 --- /dev/null +++ b/kevlar/2026-08-31/sponge/session-stats-by-ip-AS58854.ndjson @@ -0,0 +1 @@ +{"doc_count":5,"key":"103.236.255.202"} diff --git a/kevlar/2026-08-31/sponge/timeline-all-asns.ndjson b/kevlar/2026-08-31/sponge/timeline-all-asns.ndjson new file mode 100644 index 0000000..095bcbe --- /dev/null +++ b/kevlar/2026-08-31/sponge/timeline-all-asns.ndjson @@ -0,0 +1,173 @@ +{"doc_count":28273,"timestamp":"2026-03-12T00:00:00.000Z"} +{"doc_count":40892,"timestamp":"2026-03-13T00:00:00.000Z"} +{"doc_count":133074,"timestamp":"2026-03-14T00:00:00.000Z"} +{"doc_count":407893,"timestamp":"2026-03-15T00:00:00.000Z"} +{"doc_count":725521,"timestamp":"2026-03-16T00:00:00.000Z"} +{"doc_count":477862,"timestamp":"2026-03-17T00:00:00.000Z"} +{"doc_count":390808,"timestamp":"2026-03-18T00:00:00.000Z"} +{"doc_count":389978,"timestamp":"2026-03-19T00:00:00.000Z"} +{"doc_count":226969,"timestamp":"2026-03-20T00:00:00.000Z"} +{"doc_count":652871,"timestamp":"2026-03-21T00:00:00.000Z"} +{"doc_count":446755,"timestamp":"2026-03-22T00:00:00.000Z"} +{"doc_count":385368,"timestamp":"2026-03-23T00:00:00.000Z"} +{"doc_count":443941,"timestamp":"2026-03-24T00:00:00.000Z"} +{"doc_count":316830,"timestamp":"2026-03-25T00:00:00.000Z"} +{"doc_count":479054,"timestamp":"2026-03-26T00:00:00.000Z"} +{"doc_count":427638,"timestamp":"2026-03-27T00:00:00.000Z"} +{"doc_count":359836,"timestamp":"2026-03-28T00:00:00.000Z"} +{"doc_count":649248,"timestamp":"2026-03-29T00:00:00.000Z"} +{"doc_count":824444,"timestamp":"2026-03-30T00:00:00.000Z"} +{"doc_count":1264114,"timestamp":"2026-03-31T00:00:00.000Z"} +{"doc_count":515410,"timestamp":"2026-04-01T00:00:00.000Z"} +{"doc_count":1331047,"timestamp":"2026-04-02T00:00:00.000Z"} +{"doc_count":424412,"timestamp":"2026-04-03T00:00:00.000Z"} +{"doc_count":665490,"timestamp":"2026-04-04T00:00:00.000Z"} +{"doc_count":768919,"timestamp":"2026-04-05T00:00:00.000Z"} +{"doc_count":532794,"timestamp":"2026-04-06T00:00:00.000Z"} +{"doc_count":792419,"timestamp":"2026-04-07T00:00:00.000Z"} +{"doc_count":613418,"timestamp":"2026-04-08T00:00:00.000Z"} +{"doc_count":818144,"timestamp":"2026-04-09T00:00:00.000Z"} +{"doc_count":825845,"timestamp":"2026-04-10T00:00:00.000Z"} +{"doc_count":655960,"timestamp":"2026-04-11T00:00:00.000Z"} +{"doc_count":820512,"timestamp":"2026-04-12T00:00:00.000Z"} +{"doc_count":885189,"timestamp":"2026-04-13T00:00:00.000Z"} +{"doc_count":445782,"timestamp":"2026-04-14T00:00:00.000Z"} +{"doc_count":573071,"timestamp":"2026-04-15T00:00:00.000Z"} +{"doc_count":712526,"timestamp":"2026-04-16T00:00:00.000Z"} +{"doc_count":501397,"timestamp":"2026-04-17T00:00:00.000Z"} +{"doc_count":614470,"timestamp":"2026-04-18T00:00:00.000Z"} +{"doc_count":615655,"timestamp":"2026-04-19T00:00:00.000Z"} +{"doc_count":746778,"timestamp":"2026-04-20T00:00:00.000Z"} +{"doc_count":582810,"timestamp":"2026-04-21T00:00:00.000Z"} +{"doc_count":564665,"timestamp":"2026-04-22T00:00:00.000Z"} +{"doc_count":539228,"timestamp":"2026-04-23T00:00:00.000Z"} +{"doc_count":620765,"timestamp":"2026-04-24T00:00:00.000Z"} +{"doc_count":516569,"timestamp":"2026-04-25T00:00:00.000Z"} +{"doc_count":563556,"timestamp":"2026-04-26T00:00:00.000Z"} +{"doc_count":511842,"timestamp":"2026-04-27T00:00:00.000Z"} +{"doc_count":533989,"timestamp":"2026-04-28T00:00:00.000Z"} +{"doc_count":753556,"timestamp":"2026-04-29T00:00:00.000Z"} +{"doc_count":1114600,"timestamp":"2026-04-30T00:00:00.000Z"} +{"doc_count":1888857,"timestamp":"2026-05-01T00:00:00.000Z"} +{"doc_count":1421851,"timestamp":"2026-05-02T00:00:00.000Z"} +{"doc_count":1980586,"timestamp":"2026-05-03T00:00:00.000Z"} +{"doc_count":1647458,"timestamp":"2026-05-04T00:00:00.000Z"} +{"doc_count":1965381,"timestamp":"2026-05-05T00:00:00.000Z"} +{"doc_count":3071933,"timestamp":"2026-05-06T00:00:00.000Z"} +{"doc_count":2159620,"timestamp":"2026-05-07T00:00:00.000Z"} +{"doc_count":949027,"timestamp":"2026-05-08T00:00:00.000Z"} +{"doc_count":1633048,"timestamp":"2026-05-09T00:00:00.000Z"} +{"doc_count":528243,"timestamp":"2026-05-10T00:00:00.000Z"} +{"doc_count":642031,"timestamp":"2026-05-11T00:00:00.000Z"} +{"doc_count":771894,"timestamp":"2026-05-12T00:00:00.000Z"} +{"doc_count":737631,"timestamp":"2026-05-13T00:00:00.000Z"} +{"doc_count":864780,"timestamp":"2026-05-14T00:00:00.000Z"} +{"doc_count":1363547,"timestamp":"2026-05-15T00:00:00.000Z"} +{"doc_count":1513136,"timestamp":"2026-05-16T00:00:00.000Z"} +{"doc_count":1646432,"timestamp":"2026-05-17T00:00:00.000Z"} +{"doc_count":1830906,"timestamp":"2026-05-18T00:00:00.000Z"} +{"doc_count":726796,"timestamp":"2026-05-19T00:00:00.000Z"} +{"doc_count":1492175,"timestamp":"2026-05-20T00:00:00.000Z"} +{"doc_count":1531922,"timestamp":"2026-05-21T00:00:00.000Z"} +{"doc_count":649388,"timestamp":"2026-05-22T00:00:00.000Z"} +{"doc_count":679049,"timestamp":"2026-05-23T00:00:00.000Z"} +{"doc_count":847052,"timestamp":"2026-05-24T00:00:00.000Z"} +{"doc_count":631185,"timestamp":"2026-05-25T00:00:00.000Z"} +{"doc_count":725664,"timestamp":"2026-05-26T00:00:00.000Z"} +{"doc_count":544449,"timestamp":"2026-05-27T00:00:00.000Z"} +{"doc_count":650432,"timestamp":"2026-05-28T00:00:00.000Z"} +{"doc_count":475667,"timestamp":"2026-05-29T00:00:00.000Z"} +{"doc_count":444926,"timestamp":"2026-05-30T00:00:00.000Z"} +{"doc_count":721274,"timestamp":"2026-05-31T00:00:00.000Z"} +{"doc_count":829278,"timestamp":"2026-06-01T00:00:00.000Z"} +{"doc_count":989749,"timestamp":"2026-06-02T00:00:00.000Z"} +{"doc_count":526930,"timestamp":"2026-06-03T00:00:00.000Z"} +{"doc_count":889291,"timestamp":"2026-06-04T00:00:00.000Z"} +{"doc_count":920511,"timestamp":"2026-06-05T00:00:00.000Z"} +{"doc_count":730025,"timestamp":"2026-06-06T00:00:00.000Z"} +{"doc_count":818865,"timestamp":"2026-06-07T00:00:00.000Z"} +{"doc_count":806738,"timestamp":"2026-06-08T00:00:00.000Z"} +{"doc_count":744136,"timestamp":"2026-06-09T00:00:00.000Z"} +{"doc_count":618610,"timestamp":"2026-06-10T00:00:00.000Z"} +{"doc_count":690426,"timestamp":"2026-06-11T00:00:00.000Z"} +{"doc_count":884615,"timestamp":"2026-06-12T00:00:00.000Z"} +{"doc_count":778984,"timestamp":"2026-06-13T00:00:00.000Z"} +{"doc_count":1504116,"timestamp":"2026-06-14T00:00:00.000Z"} +{"doc_count":1077223,"timestamp":"2026-06-15T00:00:00.000Z"} +{"doc_count":833047,"timestamp":"2026-06-16T00:00:00.000Z"} +{"doc_count":740688,"timestamp":"2026-06-17T00:00:00.000Z"} +{"doc_count":649752,"timestamp":"2026-06-18T00:00:00.000Z"} +{"doc_count":590548,"timestamp":"2026-06-19T00:00:00.000Z"} +{"doc_count":687409,"timestamp":"2026-06-20T00:00:00.000Z"} +{"doc_count":628622,"timestamp":"2026-06-21T00:00:00.000Z"} +{"doc_count":767654,"timestamp":"2026-06-22T00:00:00.000Z"} +{"doc_count":757377,"timestamp":"2026-06-23T00:00:00.000Z"} +{"doc_count":824613,"timestamp":"2026-06-24T00:00:00.000Z"} +{"doc_count":1240071,"timestamp":"2026-06-25T00:00:00.000Z"} +{"doc_count":759172,"timestamp":"2026-06-26T00:00:00.000Z"} +{"doc_count":662908,"timestamp":"2026-06-27T00:00:00.000Z"} +{"doc_count":728841,"timestamp":"2026-06-28T00:00:00.000Z"} +{"doc_count":853084,"timestamp":"2026-06-29T00:00:00.000Z"} +{"doc_count":1041038,"timestamp":"2026-06-30T00:00:00.000Z"} +{"doc_count":652717,"timestamp":"2026-07-01T00:00:00.000Z"} +{"doc_count":672883,"timestamp":"2026-07-02T00:00:00.000Z"} +{"doc_count":616853,"timestamp":"2026-07-03T00:00:00.000Z"} +{"doc_count":584509,"timestamp":"2026-07-04T00:00:00.000Z"} +{"doc_count":776678,"timestamp":"2026-07-05T00:00:00.000Z"} +{"doc_count":611925,"timestamp":"2026-07-06T00:00:00.000Z"} +{"doc_count":772239,"timestamp":"2026-07-07T00:00:00.000Z"} +{"doc_count":638426,"timestamp":"2026-07-08T00:00:00.000Z"} +{"doc_count":520175,"timestamp":"2026-07-09T00:00:00.000Z"} +{"doc_count":619359,"timestamp":"2026-07-10T00:00:00.000Z"} +{"doc_count":792185,"timestamp":"2026-07-11T00:00:00.000Z"} +{"doc_count":821407,"timestamp":"2026-07-12T00:00:00.000Z"} +{"doc_count":910993,"timestamp":"2026-07-13T00:00:00.000Z"} +{"doc_count":1030534,"timestamp":"2026-07-14T00:00:00.000Z"} +{"doc_count":924665,"timestamp":"2026-07-15T00:00:00.000Z"} +{"doc_count":722675,"timestamp":"2026-07-16T00:00:00.000Z"} +{"doc_count":1070772,"timestamp":"2026-07-17T00:00:00.000Z"} +{"doc_count":977847,"timestamp":"2026-07-18T00:00:00.000Z"} +{"doc_count":1328861,"timestamp":"2026-07-19T00:00:00.000Z"} +{"doc_count":984357,"timestamp":"2026-07-20T00:00:00.000Z"} +{"doc_count":625462,"timestamp":"2026-07-21T00:00:00.000Z"} +{"doc_count":1577311,"timestamp":"2026-07-22T00:00:00.000Z"} +{"doc_count":1544592,"timestamp":"2026-07-23T00:00:00.000Z"} +{"doc_count":1491010,"timestamp":"2026-07-24T00:00:00.000Z"} +{"doc_count":1382342,"timestamp":"2026-07-25T00:00:00.000Z"} +{"doc_count":1562661,"timestamp":"2026-07-26T00:00:00.000Z"} +{"doc_count":1065732,"timestamp":"2026-07-27T00:00:00.000Z"} +{"doc_count":1135296,"timestamp":"2026-07-28T00:00:00.000Z"} +{"doc_count":1010276,"timestamp":"2026-07-29T00:00:00.000Z"} +{"doc_count":847589,"timestamp":"2026-07-30T00:00:00.000Z"} +{"doc_count":1049542,"timestamp":"2026-07-31T00:00:00.000Z"} +{"doc_count":1291676,"timestamp":"2026-08-01T00:00:00.000Z"} +{"doc_count":1378875,"timestamp":"2026-08-02T00:00:00.000Z"} +{"doc_count":1044766,"timestamp":"2026-08-03T00:00:00.000Z"} +{"doc_count":4128756,"timestamp":"2026-08-04T00:00:00.000Z"} +{"doc_count":731675,"timestamp":"2026-08-05T00:00:00.000Z"} +{"doc_count":634611,"timestamp":"2026-08-06T00:00:00.000Z"} +{"doc_count":946631,"timestamp":"2026-08-07T00:00:00.000Z"} +{"doc_count":1010954,"timestamp":"2026-08-08T00:00:00.000Z"} +{"doc_count":1160580,"timestamp":"2026-08-09T00:00:00.000Z"} +{"doc_count":1064341,"timestamp":"2026-08-10T00:00:00.000Z"} +{"doc_count":739995,"timestamp":"2026-08-11T00:00:00.000Z"} +{"doc_count":742067,"timestamp":"2026-08-12T00:00:00.000Z"} +{"doc_count":791067,"timestamp":"2026-08-13T00:00:00.000Z"} +{"doc_count":928074,"timestamp":"2026-08-14T00:00:00.000Z"} +{"doc_count":958381,"timestamp":"2026-08-15T00:00:00.000Z"} +{"doc_count":1010572,"timestamp":"2026-08-16T00:00:00.000Z"} +{"doc_count":1143359,"timestamp":"2026-08-17T00:00:00.000Z"} +{"doc_count":1314109,"timestamp":"2026-08-18T00:00:00.000Z"} +{"doc_count":856073,"timestamp":"2026-08-19T00:00:00.000Z"} +{"doc_count":1096178,"timestamp":"2026-08-20T00:00:00.000Z"} +{"doc_count":831694,"timestamp":"2026-08-21T00:00:00.000Z"} +{"doc_count":1323332,"timestamp":"2026-08-22T00:00:00.000Z"} +{"doc_count":1447112,"timestamp":"2026-08-23T00:00:00.000Z"} +{"doc_count":1499746,"timestamp":"2026-08-24T00:00:00.000Z"} +{"doc_count":928712,"timestamp":"2026-08-25T00:00:00.000Z"} +{"doc_count":1188691,"timestamp":"2026-08-26T00:00:00.000Z"} +{"doc_count":1231680,"timestamp":"2026-08-27T00:00:00.000Z"} +{"doc_count":1153062,"timestamp":"2026-08-28T00:00:00.000Z"} +{"doc_count":1583964,"timestamp":"2026-08-29T00:00:00.000Z"} +{"doc_count":880105,"timestamp":"2026-08-30T00:00:00.000Z"} +{"doc_count":317163,"timestamp":"2026-08-31T00:00:00.000Z"} diff --git a/kevlar/2026-08-31/sponge/timeline-split-top5.ndjson b/kevlar/2026-08-31/sponge/timeline-split-top5.ndjson new file mode 100644 index 0000000..7c36bda --- /dev/null +++ b/kevlar/2026-08-31/sponge/timeline-split-top5.ndjson @@ -0,0 +1,20590 @@ +{"doc_count":255,"split_key":209334,"timestamp":"2026-03-12T11:00:00.000Z"} +{"doc_count":222,"split_key":197540,"timestamp":"2026-03-12T11:00:00.000Z"} +{"doc_count":182,"split_key":16509,"timestamp":"2026-03-12T11:00:00.000Z"} +{"doc_count":156,"split_key":20473,"timestamp":"2026-03-12T11:00:00.000Z"} +{"doc_count":104,"split_key":14061,"timestamp":"2026-03-12T11:00:00.000Z"} +{"doc_count":324,"split_key":16509,"timestamp":"2026-03-12T12:00:00.000Z"} +{"doc_count":315,"split_key":37963,"timestamp":"2026-03-12T12:00:00.000Z"} +{"doc_count":153,"split_key":398324,"timestamp":"2026-03-12T12:00:00.000Z"} +{"doc_count":123,"split_key":14061,"timestamp":"2026-03-12T12:00:00.000Z"} +{"doc_count":119,"split_key":7713,"timestamp":"2026-03-12T12:00:00.000Z"} +{"doc_count":1072,"split_key":209334,"timestamp":"2026-03-12T13:00:00.000Z"} +{"doc_count":193,"split_key":197540,"timestamp":"2026-03-12T13:00:00.000Z"} +{"doc_count":161,"split_key":201401,"timestamp":"2026-03-12T13:00:00.000Z"} +{"doc_count":131,"split_key":37963,"timestamp":"2026-03-12T13:00:00.000Z"} +{"doc_count":127,"split_key":16509,"timestamp":"2026-03-12T13:00:00.000Z"} +{"doc_count":671,"split_key":209334,"timestamp":"2026-03-12T14:00:00.000Z"} +{"doc_count":252,"split_key":16509,"timestamp":"2026-03-12T14:00:00.000Z"} +{"doc_count":142,"split_key":396982,"timestamp":"2026-03-12T14:00:00.000Z"} +{"doc_count":95,"split_key":14061,"timestamp":"2026-03-12T14:00:00.000Z"} +{"doc_count":85,"split_key":398324,"timestamp":"2026-03-12T14:00:00.000Z"} +{"doc_count":516,"split_key":209334,"timestamp":"2026-03-12T15:00:00.000Z"} +{"doc_count":463,"split_key":16509,"timestamp":"2026-03-12T15:00:00.000Z"} +{"doc_count":254,"split_key":396982,"timestamp":"2026-03-12T15:00:00.000Z"} +{"doc_count":154,"split_key":398324,"timestamp":"2026-03-12T15:00:00.000Z"} +{"doc_count":115,"split_key":20473,"timestamp":"2026-03-12T15:00:00.000Z"} +{"doc_count":1054,"split_key":209334,"timestamp":"2026-03-12T16:00:00.000Z"} +{"doc_count":377,"split_key":16509,"timestamp":"2026-03-12T16:00:00.000Z"} +{"doc_count":310,"split_key":37963,"timestamp":"2026-03-12T16:00:00.000Z"} +{"doc_count":287,"split_key":396982,"timestamp":"2026-03-12T16:00:00.000Z"} +{"doc_count":150,"split_key":20473,"timestamp":"2026-03-12T16:00:00.000Z"} +{"doc_count":174,"split_key":16509,"timestamp":"2026-03-12T17:00:00.000Z"} +{"doc_count":173,"split_key":398324,"timestamp":"2026-03-12T17:00:00.000Z"} +{"doc_count":139,"split_key":197540,"timestamp":"2026-03-12T17:00:00.000Z"} +{"doc_count":102,"split_key":20473,"timestamp":"2026-03-12T17:00:00.000Z"} +{"doc_count":100,"split_key":14061,"timestamp":"2026-03-12T17:00:00.000Z"} +{"doc_count":241,"split_key":16509,"timestamp":"2026-03-12T18:00:00.000Z"} +{"doc_count":164,"split_key":396982,"timestamp":"2026-03-12T18:00:00.000Z"} +{"doc_count":128,"split_key":14061,"timestamp":"2026-03-12T18:00:00.000Z"} +{"doc_count":120,"split_key":1267,"timestamp":"2026-03-12T18:00:00.000Z"} +{"doc_count":117,"split_key":398324,"timestamp":"2026-03-12T18:00:00.000Z"} +{"doc_count":1269,"split_key":209334,"timestamp":"2026-03-12T19:00:00.000Z"} +{"doc_count":476,"split_key":16509,"timestamp":"2026-03-12T19:00:00.000Z"} +{"doc_count":368,"split_key":396982,"timestamp":"2026-03-12T19:00:00.000Z"} +{"doc_count":141,"split_key":14061,"timestamp":"2026-03-12T19:00:00.000Z"} +{"doc_count":121,"split_key":1267,"timestamp":"2026-03-12T19:00:00.000Z"} +{"doc_count":523,"split_key":16509,"timestamp":"2026-03-12T20:00:00.000Z"} +{"doc_count":138,"split_key":14061,"timestamp":"2026-03-12T20:00:00.000Z"} +{"doc_count":131,"split_key":1267,"timestamp":"2026-03-12T20:00:00.000Z"} +{"doc_count":125,"split_key":398324,"timestamp":"2026-03-12T20:00:00.000Z"} +{"doc_count":123,"split_key":209334,"timestamp":"2026-03-12T20:00:00.000Z"} +{"doc_count":480,"split_key":16509,"timestamp":"2026-03-12T21:00:00.000Z"} +{"doc_count":451,"split_key":8452,"timestamp":"2026-03-12T21:00:00.000Z"} +{"doc_count":300,"split_key":14061,"timestamp":"2026-03-12T21:00:00.000Z"} +{"doc_count":183,"split_key":20473,"timestamp":"2026-03-12T21:00:00.000Z"} +{"doc_count":181,"split_key":1267,"timestamp":"2026-03-12T21:00:00.000Z"} +{"doc_count":230,"split_key":16509,"timestamp":"2026-03-12T22:00:00.000Z"} +{"doc_count":116,"split_key":20473,"timestamp":"2026-03-12T22:00:00.000Z"} +{"doc_count":109,"split_key":1267,"timestamp":"2026-03-12T22:00:00.000Z"} +{"doc_count":96,"split_key":14061,"timestamp":"2026-03-12T22:00:00.000Z"} +{"doc_count":71,"split_key":398324,"timestamp":"2026-03-12T22:00:00.000Z"} +{"doc_count":389,"split_key":16509,"timestamp":"2026-03-12T23:00:00.000Z"} +{"doc_count":154,"split_key":209334,"timestamp":"2026-03-12T23:00:00.000Z"} +{"doc_count":145,"split_key":20473,"timestamp":"2026-03-12T23:00:00.000Z"} +{"doc_count":97,"split_key":197540,"timestamp":"2026-03-12T23:00:00.000Z"} +{"doc_count":86,"split_key":396982,"timestamp":"2026-03-12T23:00:00.000Z"} +{"doc_count":431,"split_key":16509,"timestamp":"2026-03-13T00:00:00.000Z"} +{"doc_count":137,"split_key":14061,"timestamp":"2026-03-13T00:00:00.000Z"} +{"doc_count":107,"split_key":20473,"timestamp":"2026-03-13T00:00:00.000Z"} +{"doc_count":106,"split_key":398324,"timestamp":"2026-03-13T00:00:00.000Z"} +{"doc_count":100,"split_key":396982,"timestamp":"2026-03-13T00:00:00.000Z"} +{"doc_count":128,"split_key":37963,"timestamp":"2026-03-13T01:00:00.000Z"} +{"doc_count":120,"split_key":20473,"timestamp":"2026-03-13T01:00:00.000Z"} +{"doc_count":118,"split_key":16509,"timestamp":"2026-03-13T01:00:00.000Z"} +{"doc_count":71,"split_key":14061,"timestamp":"2026-03-13T01:00:00.000Z"} +{"doc_count":55,"split_key":396982,"timestamp":"2026-03-13T01:00:00.000Z"} +{"doc_count":775,"split_key":37963,"timestamp":"2026-03-13T02:00:00.000Z"} +{"doc_count":192,"split_key":14061,"timestamp":"2026-03-13T02:00:00.000Z"} +{"doc_count":156,"split_key":20473,"timestamp":"2026-03-13T02:00:00.000Z"} +{"doc_count":126,"split_key":396982,"timestamp":"2026-03-13T02:00:00.000Z"} +{"doc_count":123,"split_key":398324,"timestamp":"2026-03-13T02:00:00.000Z"} +{"doc_count":209,"split_key":20473,"timestamp":"2026-03-13T03:00:00.000Z"} +{"doc_count":133,"split_key":209334,"timestamp":"2026-03-13T03:00:00.000Z"} +{"doc_count":99,"split_key":16509,"timestamp":"2026-03-13T03:00:00.000Z"} +{"doc_count":99,"split_key":396982,"timestamp":"2026-03-13T03:00:00.000Z"} +{"doc_count":97,"split_key":213412,"timestamp":"2026-03-13T03:00:00.000Z"} +{"doc_count":185,"split_key":20473,"timestamp":"2026-03-13T04:00:00.000Z"} +{"doc_count":139,"split_key":14061,"timestamp":"2026-03-13T04:00:00.000Z"} +{"doc_count":134,"split_key":396982,"timestamp":"2026-03-13T04:00:00.000Z"} +{"doc_count":111,"split_key":197540,"timestamp":"2026-03-13T04:00:00.000Z"} +{"doc_count":105,"split_key":398324,"timestamp":"2026-03-13T04:00:00.000Z"} +{"doc_count":257,"split_key":209334,"timestamp":"2026-03-13T05:00:00.000Z"} +{"doc_count":153,"split_key":197540,"timestamp":"2026-03-13T05:00:00.000Z"} +{"doc_count":128,"split_key":20473,"timestamp":"2026-03-13T05:00:00.000Z"} +{"doc_count":125,"split_key":16509,"timestamp":"2026-03-13T05:00:00.000Z"} +{"doc_count":105,"split_key":398324,"timestamp":"2026-03-13T05:00:00.000Z"} +{"doc_count":214,"split_key":398324,"timestamp":"2026-03-13T06:00:00.000Z"} +{"doc_count":183,"split_key":16509,"timestamp":"2026-03-13T06:00:00.000Z"} +{"doc_count":139,"split_key":398722,"timestamp":"2026-03-13T06:00:00.000Z"} +{"doc_count":133,"split_key":20473,"timestamp":"2026-03-13T06:00:00.000Z"} +{"doc_count":123,"split_key":396982,"timestamp":"2026-03-13T06:00:00.000Z"} +{"doc_count":178,"split_key":16509,"timestamp":"2026-03-13T07:00:00.000Z"} +{"doc_count":147,"split_key":398324,"timestamp":"2026-03-13T07:00:00.000Z"} +{"doc_count":111,"split_key":20473,"timestamp":"2026-03-13T07:00:00.000Z"} +{"doc_count":84,"split_key":396982,"timestamp":"2026-03-13T07:00:00.000Z"} +{"doc_count":80,"split_key":14061,"timestamp":"2026-03-13T07:00:00.000Z"} +{"doc_count":923,"split_key":37963,"timestamp":"2026-03-13T08:00:00.000Z"} +{"doc_count":156,"split_key":396982,"timestamp":"2026-03-13T08:00:00.000Z"} +{"doc_count":146,"split_key":20473,"timestamp":"2026-03-13T08:00:00.000Z"} +{"doc_count":125,"split_key":197540,"timestamp":"2026-03-13T08:00:00.000Z"} +{"doc_count":99,"split_key":14061,"timestamp":"2026-03-13T08:00:00.000Z"} +{"doc_count":829,"split_key":37963,"timestamp":"2026-03-13T09:00:00.000Z"} +{"doc_count":234,"split_key":20473,"timestamp":"2026-03-13T09:00:00.000Z"} +{"doc_count":215,"split_key":14061,"timestamp":"2026-03-13T09:00:00.000Z"} +{"doc_count":163,"split_key":396982,"timestamp":"2026-03-13T09:00:00.000Z"} +{"doc_count":149,"split_key":16509,"timestamp":"2026-03-13T09:00:00.000Z"} +{"doc_count":930,"split_key":37963,"timestamp":"2026-03-13T10:00:00.000Z"} +{"doc_count":223,"split_key":14061,"timestamp":"2026-03-13T10:00:00.000Z"} +{"doc_count":151,"split_key":20473,"timestamp":"2026-03-13T10:00:00.000Z"} +{"doc_count":143,"split_key":396982,"timestamp":"2026-03-13T10:00:00.000Z"} +{"doc_count":115,"split_key":398324,"timestamp":"2026-03-13T10:00:00.000Z"} +{"doc_count":217,"split_key":20473,"timestamp":"2026-03-13T11:00:00.000Z"} +{"doc_count":165,"split_key":48090,"timestamp":"2026-03-13T11:00:00.000Z"} +{"doc_count":145,"split_key":14061,"timestamp":"2026-03-13T11:00:00.000Z"} +{"doc_count":98,"split_key":396982,"timestamp":"2026-03-13T11:00:00.000Z"} +{"doc_count":93,"split_key":398324,"timestamp":"2026-03-13T11:00:00.000Z"} +{"doc_count":354,"split_key":37963,"timestamp":"2026-03-13T12:00:00.000Z"} +{"doc_count":103,"split_key":48090,"timestamp":"2026-03-13T12:00:00.000Z"} +{"doc_count":102,"split_key":14061,"timestamp":"2026-03-13T12:00:00.000Z"} +{"doc_count":77,"split_key":20473,"timestamp":"2026-03-13T12:00:00.000Z"} +{"doc_count":71,"split_key":16509,"timestamp":"2026-03-13T12:00:00.000Z"} +{"doc_count":139,"split_key":48090,"timestamp":"2026-03-13T13:00:00.000Z"} +{"doc_count":130,"split_key":14061,"timestamp":"2026-03-13T13:00:00.000Z"} +{"doc_count":129,"split_key":16509,"timestamp":"2026-03-13T13:00:00.000Z"} +{"doc_count":94,"split_key":20473,"timestamp":"2026-03-13T13:00:00.000Z"} +{"doc_count":87,"split_key":396982,"timestamp":"2026-03-13T13:00:00.000Z"} +{"doc_count":172,"split_key":20473,"timestamp":"2026-03-13T14:00:00.000Z"} +{"doc_count":135,"split_key":48090,"timestamp":"2026-03-13T14:00:00.000Z"} +{"doc_count":119,"split_key":398324,"timestamp":"2026-03-13T14:00:00.000Z"} +{"doc_count":103,"split_key":396982,"timestamp":"2026-03-13T14:00:00.000Z"} +{"doc_count":91,"split_key":213412,"timestamp":"2026-03-13T14:00:00.000Z"} +{"doc_count":163,"split_key":48090,"timestamp":"2026-03-13T15:00:00.000Z"} +{"doc_count":127,"split_key":398324,"timestamp":"2026-03-13T15:00:00.000Z"} +{"doc_count":113,"split_key":213412,"timestamp":"2026-03-13T15:00:00.000Z"} +{"doc_count":112,"split_key":14061,"timestamp":"2026-03-13T15:00:00.000Z"} +{"doc_count":107,"split_key":20473,"timestamp":"2026-03-13T15:00:00.000Z"} +{"doc_count":299,"split_key":209334,"timestamp":"2026-03-13T16:00:00.000Z"} +{"doc_count":155,"split_key":20473,"timestamp":"2026-03-13T16:00:00.000Z"} +{"doc_count":108,"split_key":48090,"timestamp":"2026-03-13T16:00:00.000Z"} +{"doc_count":89,"split_key":16509,"timestamp":"2026-03-13T16:00:00.000Z"} +{"doc_count":76,"split_key":213412,"timestamp":"2026-03-13T16:00:00.000Z"} +{"doc_count":577,"split_key":209334,"timestamp":"2026-03-13T17:00:00.000Z"} +{"doc_count":92,"split_key":398324,"timestamp":"2026-03-13T17:00:00.000Z"} +{"doc_count":87,"split_key":14061,"timestamp":"2026-03-13T17:00:00.000Z"} +{"doc_count":86,"split_key":213412,"timestamp":"2026-03-13T17:00:00.000Z"} +{"doc_count":76,"split_key":20473,"timestamp":"2026-03-13T17:00:00.000Z"} +{"doc_count":233,"split_key":209334,"timestamp":"2026-03-13T18:00:00.000Z"} +{"doc_count":167,"split_key":197540,"timestamp":"2026-03-13T18:00:00.000Z"} +{"doc_count":86,"split_key":14061,"timestamp":"2026-03-13T18:00:00.000Z"} +{"doc_count":72,"split_key":398324,"timestamp":"2026-03-13T18:00:00.000Z"} +{"doc_count":70,"split_key":37963,"timestamp":"2026-03-13T18:00:00.000Z"} +{"doc_count":594,"split_key":209334,"timestamp":"2026-03-13T19:00:00.000Z"} +{"doc_count":162,"split_key":398324,"timestamp":"2026-03-13T19:00:00.000Z"} +{"doc_count":101,"split_key":396982,"timestamp":"2026-03-13T19:00:00.000Z"} +{"doc_count":88,"split_key":16509,"timestamp":"2026-03-13T19:00:00.000Z"} +{"doc_count":84,"split_key":14061,"timestamp":"2026-03-13T19:00:00.000Z"} +{"doc_count":255,"split_key":209334,"timestamp":"2026-03-13T20:00:00.000Z"} +{"doc_count":236,"split_key":37963,"timestamp":"2026-03-13T20:00:00.000Z"} +{"doc_count":137,"split_key":396982,"timestamp":"2026-03-13T20:00:00.000Z"} +{"doc_count":91,"split_key":16509,"timestamp":"2026-03-13T20:00:00.000Z"} +{"doc_count":89,"split_key":398324,"timestamp":"2026-03-13T20:00:00.000Z"} +{"doc_count":291,"split_key":209334,"timestamp":"2026-03-13T21:00:00.000Z"} +{"doc_count":138,"split_key":396982,"timestamp":"2026-03-13T21:00:00.000Z"} +{"doc_count":79,"split_key":213412,"timestamp":"2026-03-13T21:00:00.000Z"} +{"doc_count":79,"split_key":398324,"timestamp":"2026-03-13T21:00:00.000Z"} +{"doc_count":77,"split_key":197540,"timestamp":"2026-03-13T21:00:00.000Z"} +{"doc_count":244,"split_key":396982,"timestamp":"2026-03-13T22:00:00.000Z"} +{"doc_count":155,"split_key":398324,"timestamp":"2026-03-13T22:00:00.000Z"} +{"doc_count":99,"split_key":213412,"timestamp":"2026-03-13T22:00:00.000Z"} +{"doc_count":77,"split_key":56044,"timestamp":"2026-03-13T22:00:00.000Z"} +{"doc_count":75,"split_key":9829,"timestamp":"2026-03-13T22:00:00.000Z"} +{"doc_count":209,"split_key":209334,"timestamp":"2026-03-13T23:00:00.000Z"} +{"doc_count":124,"split_key":398324,"timestamp":"2026-03-13T23:00:00.000Z"} +{"doc_count":95,"split_key":396982,"timestamp":"2026-03-13T23:00:00.000Z"} +{"doc_count":67,"split_key":9829,"timestamp":"2026-03-13T23:00:00.000Z"} +{"doc_count":67,"split_key":56044,"timestamp":"2026-03-13T23:00:00.000Z"} +{"doc_count":43,"split_key":398324,"timestamp":"2026-03-14T00:00:00.000Z"} +{"doc_count":42,"split_key":396982,"timestamp":"2026-03-14T00:00:00.000Z"} +{"doc_count":29,"split_key":398705,"timestamp":"2026-03-14T00:00:00.000Z"} +{"doc_count":20,"split_key":9829,"timestamp":"2026-03-14T00:00:00.000Z"} +{"doc_count":20,"split_key":135377,"timestamp":"2026-03-14T00:00:00.000Z"} +{"doc_count":80,"split_key":398324,"timestamp":"2026-03-14T01:00:00.000Z"} +{"doc_count":76,"split_key":396982,"timestamp":"2026-03-14T01:00:00.000Z"} +{"doc_count":54,"split_key":197540,"timestamp":"2026-03-14T01:00:00.000Z"} +{"doc_count":41,"split_key":9829,"timestamp":"2026-03-14T01:00:00.000Z"} +{"doc_count":41,"split_key":213412,"timestamp":"2026-03-14T01:00:00.000Z"} +{"doc_count":213,"split_key":209334,"timestamp":"2026-03-14T02:00:00.000Z"} +{"doc_count":133,"split_key":16509,"timestamp":"2026-03-14T02:00:00.000Z"} +{"doc_count":109,"split_key":396982,"timestamp":"2026-03-14T02:00:00.000Z"} +{"doc_count":107,"split_key":47890,"timestamp":"2026-03-14T02:00:00.000Z"} +{"doc_count":102,"split_key":398705,"timestamp":"2026-03-14T02:00:00.000Z"} +{"doc_count":248,"split_key":209334,"timestamp":"2026-03-14T03:00:00.000Z"} +{"doc_count":128,"split_key":37963,"timestamp":"2026-03-14T03:00:00.000Z"} +{"doc_count":115,"split_key":396982,"timestamp":"2026-03-14T03:00:00.000Z"} +{"doc_count":100,"split_key":47890,"timestamp":"2026-03-14T03:00:00.000Z"} +{"doc_count":93,"split_key":213412,"timestamp":"2026-03-14T03:00:00.000Z"} +{"doc_count":754,"split_key":37963,"timestamp":"2026-03-14T04:00:00.000Z"} +{"doc_count":255,"split_key":209334,"timestamp":"2026-03-14T04:00:00.000Z"} +{"doc_count":85,"split_key":396982,"timestamp":"2026-03-14T04:00:00.000Z"} +{"doc_count":75,"split_key":213412,"timestamp":"2026-03-14T04:00:00.000Z"} +{"doc_count":70,"split_key":16509,"timestamp":"2026-03-14T04:00:00.000Z"} +{"doc_count":967,"split_key":37963,"timestamp":"2026-03-14T05:00:00.000Z"} +{"doc_count":473,"split_key":209334,"timestamp":"2026-03-14T05:00:00.000Z"} +{"doc_count":107,"split_key":16509,"timestamp":"2026-03-14T05:00:00.000Z"} +{"doc_count":81,"split_key":47890,"timestamp":"2026-03-14T05:00:00.000Z"} +{"doc_count":71,"split_key":398324,"timestamp":"2026-03-14T05:00:00.000Z"} +{"doc_count":1123,"split_key":37963,"timestamp":"2026-03-14T06:00:00.000Z"} +{"doc_count":242,"split_key":209334,"timestamp":"2026-03-14T06:00:00.000Z"} +{"doc_count":141,"split_key":398324,"timestamp":"2026-03-14T06:00:00.000Z"} +{"doc_count":127,"split_key":398722,"timestamp":"2026-03-14T06:00:00.000Z"} +{"doc_count":113,"split_key":47890,"timestamp":"2026-03-14T06:00:00.000Z"} +{"doc_count":898,"split_key":37963,"timestamp":"2026-03-14T07:00:00.000Z"} +{"doc_count":263,"split_key":209334,"timestamp":"2026-03-14T07:00:00.000Z"} +{"doc_count":113,"split_key":396982,"timestamp":"2026-03-14T07:00:00.000Z"} +{"doc_count":106,"split_key":47890,"timestamp":"2026-03-14T07:00:00.000Z"} +{"doc_count":105,"split_key":398324,"timestamp":"2026-03-14T07:00:00.000Z"} +{"doc_count":442,"split_key":209334,"timestamp":"2026-03-14T08:00:00.000Z"} +{"doc_count":185,"split_key":16509,"timestamp":"2026-03-14T08:00:00.000Z"} +{"doc_count":133,"split_key":396982,"timestamp":"2026-03-14T08:00:00.000Z"} +{"doc_count":111,"split_key":398324,"timestamp":"2026-03-14T08:00:00.000Z"} +{"doc_count":98,"split_key":197540,"timestamp":"2026-03-14T08:00:00.000Z"} +{"doc_count":241,"split_key":209334,"timestamp":"2026-03-14T09:00:00.000Z"} +{"doc_count":178,"split_key":16509,"timestamp":"2026-03-14T09:00:00.000Z"} +{"doc_count":161,"split_key":398324,"timestamp":"2026-03-14T09:00:00.000Z"} +{"doc_count":117,"split_key":396982,"timestamp":"2026-03-14T09:00:00.000Z"} +{"doc_count":95,"split_key":47890,"timestamp":"2026-03-14T09:00:00.000Z"} +{"doc_count":286,"split_key":209334,"timestamp":"2026-03-14T10:00:00.000Z"} +{"doc_count":142,"split_key":396982,"timestamp":"2026-03-14T10:00:00.000Z"} +{"doc_count":115,"split_key":398324,"timestamp":"2026-03-14T10:00:00.000Z"} +{"doc_count":94,"split_key":16509,"timestamp":"2026-03-14T10:00:00.000Z"} +{"doc_count":70,"split_key":47890,"timestamp":"2026-03-14T10:00:00.000Z"} +{"doc_count":98,"split_key":16509,"timestamp":"2026-03-14T11:00:00.000Z"} +{"doc_count":70,"split_key":209334,"timestamp":"2026-03-14T11:00:00.000Z"} +{"doc_count":66,"split_key":398324,"timestamp":"2026-03-14T11:00:00.000Z"} +{"doc_count":62,"split_key":197540,"timestamp":"2026-03-14T11:00:00.000Z"} +{"doc_count":56,"split_key":47890,"timestamp":"2026-03-14T11:00:00.000Z"} +{"doc_count":134,"split_key":197540,"timestamp":"2026-03-14T12:00:00.000Z"} +{"doc_count":82,"split_key":209334,"timestamp":"2026-03-14T12:00:00.000Z"} +{"doc_count":62,"split_key":16509,"timestamp":"2026-03-14T12:00:00.000Z"} +{"doc_count":50,"split_key":37963,"timestamp":"2026-03-14T12:00:00.000Z"} +{"doc_count":47,"split_key":398324,"timestamp":"2026-03-14T12:00:00.000Z"} +{"doc_count":1295,"split_key":37963,"timestamp":"2026-03-14T13:00:00.000Z"} +{"doc_count":236,"split_key":209334,"timestamp":"2026-03-14T13:00:00.000Z"} +{"doc_count":202,"split_key":49870,"timestamp":"2026-03-14T13:00:00.000Z"} +{"doc_count":164,"split_key":16509,"timestamp":"2026-03-14T13:00:00.000Z"} +{"doc_count":146,"split_key":396982,"timestamp":"2026-03-14T13:00:00.000Z"} +{"doc_count":588,"split_key":262909,"timestamp":"2026-03-14T14:00:00.000Z"} +{"doc_count":225,"split_key":24940,"timestamp":"2026-03-14T14:00:00.000Z"} +{"doc_count":219,"split_key":209334,"timestamp":"2026-03-14T14:00:00.000Z"} +{"doc_count":212,"split_key":398324,"timestamp":"2026-03-14T14:00:00.000Z"} +{"doc_count":125,"split_key":50360,"timestamp":"2026-03-14T14:00:00.000Z"} +{"doc_count":2670,"split_key":262909,"timestamp":"2026-03-14T15:00:00.000Z"} +{"doc_count":681,"split_key":24940,"timestamp":"2026-03-14T15:00:00.000Z"} +{"doc_count":428,"split_key":50360,"timestamp":"2026-03-14T15:00:00.000Z"} +{"doc_count":366,"split_key":398324,"timestamp":"2026-03-14T15:00:00.000Z"} +{"doc_count":266,"split_key":44486,"timestamp":"2026-03-14T15:00:00.000Z"} +{"doc_count":1863,"split_key":262909,"timestamp":"2026-03-14T16:00:00.000Z"} +{"doc_count":377,"split_key":24940,"timestamp":"2026-03-14T16:00:00.000Z"} +{"doc_count":299,"split_key":50360,"timestamp":"2026-03-14T16:00:00.000Z"} +{"doc_count":269,"split_key":209334,"timestamp":"2026-03-14T16:00:00.000Z"} +{"doc_count":263,"split_key":398324,"timestamp":"2026-03-14T16:00:00.000Z"} +{"doc_count":2983,"split_key":262909,"timestamp":"2026-03-14T17:00:00.000Z"} +{"doc_count":663,"split_key":24940,"timestamp":"2026-03-14T17:00:00.000Z"} +{"doc_count":463,"split_key":398324,"timestamp":"2026-03-14T17:00:00.000Z"} +{"doc_count":345,"split_key":50360,"timestamp":"2026-03-14T17:00:00.000Z"} +{"doc_count":252,"split_key":44486,"timestamp":"2026-03-14T17:00:00.000Z"} +{"doc_count":3104,"split_key":262909,"timestamp":"2026-03-14T18:00:00.000Z"} +{"doc_count":691,"split_key":24940,"timestamp":"2026-03-14T18:00:00.000Z"} +{"doc_count":313,"split_key":396982,"timestamp":"2026-03-14T18:00:00.000Z"} +{"doc_count":246,"split_key":209334,"timestamp":"2026-03-14T18:00:00.000Z"} +{"doc_count":211,"split_key":398324,"timestamp":"2026-03-14T18:00:00.000Z"} +{"doc_count":2493,"split_key":262909,"timestamp":"2026-03-14T19:00:00.000Z"} +{"doc_count":847,"split_key":14061,"timestamp":"2026-03-14T19:00:00.000Z"} +{"doc_count":746,"split_key":24940,"timestamp":"2026-03-14T19:00:00.000Z"} +{"doc_count":263,"split_key":44486,"timestamp":"2026-03-14T19:00:00.000Z"} +{"doc_count":242,"split_key":396982,"timestamp":"2026-03-14T19:00:00.000Z"} +{"doc_count":2372,"split_key":262909,"timestamp":"2026-03-14T20:00:00.000Z"} +{"doc_count":685,"split_key":24940,"timestamp":"2026-03-14T20:00:00.000Z"} +{"doc_count":559,"split_key":138915,"timestamp":"2026-03-14T20:00:00.000Z"} +{"doc_count":293,"split_key":396982,"timestamp":"2026-03-14T20:00:00.000Z"} +{"doc_count":282,"split_key":44486,"timestamp":"2026-03-14T20:00:00.000Z"} +{"doc_count":2936,"split_key":262909,"timestamp":"2026-03-14T21:00:00.000Z"} +{"doc_count":787,"split_key":398324,"timestamp":"2026-03-14T21:00:00.000Z"} +{"doc_count":672,"split_key":24940,"timestamp":"2026-03-14T21:00:00.000Z"} +{"doc_count":569,"split_key":396982,"timestamp":"2026-03-14T21:00:00.000Z"} +{"doc_count":455,"split_key":37963,"timestamp":"2026-03-14T21:00:00.000Z"} +{"doc_count":2791,"split_key":262909,"timestamp":"2026-03-14T22:00:00.000Z"} +{"doc_count":719,"split_key":24940,"timestamp":"2026-03-14T22:00:00.000Z"} +{"doc_count":538,"split_key":138915,"timestamp":"2026-03-14T22:00:00.000Z"} +{"doc_count":459,"split_key":396982,"timestamp":"2026-03-14T22:00:00.000Z"} +{"doc_count":400,"split_key":209334,"timestamp":"2026-03-14T22:00:00.000Z"} +{"doc_count":31966,"split_key":209334,"timestamp":"2026-03-14T23:00:00.000Z"} +{"doc_count":3449,"split_key":262909,"timestamp":"2026-03-14T23:00:00.000Z"} +{"doc_count":790,"split_key":396982,"timestamp":"2026-03-14T23:00:00.000Z"} +{"doc_count":463,"split_key":138915,"timestamp":"2026-03-14T23:00:00.000Z"} +{"doc_count":454,"split_key":24940,"timestamp":"2026-03-14T23:00:00.000Z"} +{"doc_count":42662,"split_key":209334,"timestamp":"2026-03-15T00:00:00.000Z"} +{"doc_count":2416,"split_key":262909,"timestamp":"2026-03-15T00:00:00.000Z"} +{"doc_count":1683,"split_key":201401,"timestamp":"2026-03-15T00:00:00.000Z"} +{"doc_count":676,"split_key":24940,"timestamp":"2026-03-15T00:00:00.000Z"} +{"doc_count":585,"split_key":47890,"timestamp":"2026-03-15T00:00:00.000Z"} +{"doc_count":49374,"split_key":209334,"timestamp":"2026-03-15T01:00:00.000Z"} +{"doc_count":1983,"split_key":262909,"timestamp":"2026-03-15T01:00:00.000Z"} +{"doc_count":1105,"split_key":201401,"timestamp":"2026-03-15T01:00:00.000Z"} +{"doc_count":1007,"split_key":213790,"timestamp":"2026-03-15T01:00:00.000Z"} +{"doc_count":639,"split_key":24940,"timestamp":"2026-03-15T01:00:00.000Z"} +{"doc_count":5175,"split_key":209334,"timestamp":"2026-03-15T02:00:00.000Z"} +{"doc_count":3434,"split_key":262909,"timestamp":"2026-03-15T02:00:00.000Z"} +{"doc_count":711,"split_key":396982,"timestamp":"2026-03-15T02:00:00.000Z"} +{"doc_count":685,"split_key":24940,"timestamp":"2026-03-15T02:00:00.000Z"} +{"doc_count":514,"split_key":138915,"timestamp":"2026-03-15T02:00:00.000Z"} +{"doc_count":2804,"split_key":262909,"timestamp":"2026-03-15T03:00:00.000Z"} +{"doc_count":762,"split_key":37963,"timestamp":"2026-03-15T03:00:00.000Z"} +{"doc_count":725,"split_key":24940,"timestamp":"2026-03-15T03:00:00.000Z"} +{"doc_count":623,"split_key":396982,"timestamp":"2026-03-15T03:00:00.000Z"} +{"doc_count":566,"split_key":16509,"timestamp":"2026-03-15T03:00:00.000Z"} +{"doc_count":4163,"split_key":209334,"timestamp":"2026-03-15T04:00:00.000Z"} +{"doc_count":1293,"split_key":211590,"timestamp":"2026-03-15T04:00:00.000Z"} +{"doc_count":712,"split_key":14061,"timestamp":"2026-03-15T04:00:00.000Z"} +{"doc_count":683,"split_key":396982,"timestamp":"2026-03-15T04:00:00.000Z"} +{"doc_count":644,"split_key":24940,"timestamp":"2026-03-15T04:00:00.000Z"} +{"doc_count":1218,"split_key":211590,"timestamp":"2026-03-15T05:00:00.000Z"} +{"doc_count":1034,"split_key":14061,"timestamp":"2026-03-15T05:00:00.000Z"} +{"doc_count":810,"split_key":135377,"timestamp":"2026-03-15T05:00:00.000Z"} +{"doc_count":779,"split_key":209334,"timestamp":"2026-03-15T05:00:00.000Z"} +{"doc_count":644,"split_key":24940,"timestamp":"2026-03-15T05:00:00.000Z"} +{"doc_count":4020,"split_key":51396,"timestamp":"2026-03-15T06:00:00.000Z"} +{"doc_count":1212,"split_key":131562,"timestamp":"2026-03-15T06:00:00.000Z"} +{"doc_count":709,"split_key":24940,"timestamp":"2026-03-15T06:00:00.000Z"} +{"doc_count":687,"split_key":14061,"timestamp":"2026-03-15T06:00:00.000Z"} +{"doc_count":618,"split_key":396982,"timestamp":"2026-03-15T06:00:00.000Z"} +{"doc_count":4330,"split_key":209334,"timestamp":"2026-03-15T07:00:00.000Z"} +{"doc_count":1806,"split_key":131562,"timestamp":"2026-03-15T07:00:00.000Z"} +{"doc_count":1465,"split_key":51852,"timestamp":"2026-03-15T07:00:00.000Z"} +{"doc_count":557,"split_key":396982,"timestamp":"2026-03-15T07:00:00.000Z"} +{"doc_count":538,"split_key":24940,"timestamp":"2026-03-15T07:00:00.000Z"} +{"doc_count":1842,"split_key":131562,"timestamp":"2026-03-15T08:00:00.000Z"} +{"doc_count":874,"split_key":398324,"timestamp":"2026-03-15T08:00:00.000Z"} +{"doc_count":860,"split_key":209334,"timestamp":"2026-03-15T08:00:00.000Z"} +{"doc_count":698,"split_key":24940,"timestamp":"2026-03-15T08:00:00.000Z"} +{"doc_count":691,"split_key":16509,"timestamp":"2026-03-15T08:00:00.000Z"} +{"doc_count":1770,"split_key":131562,"timestamp":"2026-03-15T09:00:00.000Z"} +{"doc_count":963,"split_key":396982,"timestamp":"2026-03-15T09:00:00.000Z"} +{"doc_count":820,"split_key":211590,"timestamp":"2026-03-15T09:00:00.000Z"} +{"doc_count":809,"split_key":16509,"timestamp":"2026-03-15T09:00:00.000Z"} +{"doc_count":702,"split_key":24940,"timestamp":"2026-03-15T09:00:00.000Z"} +{"doc_count":3254,"split_key":209334,"timestamp":"2026-03-15T10:00:00.000Z"} +{"doc_count":1628,"split_key":131562,"timestamp":"2026-03-15T10:00:00.000Z"} +{"doc_count":697,"split_key":24940,"timestamp":"2026-03-15T10:00:00.000Z"} +{"doc_count":626,"split_key":51396,"timestamp":"2026-03-15T10:00:00.000Z"} +{"doc_count":529,"split_key":16509,"timestamp":"2026-03-15T10:00:00.000Z"} +{"doc_count":836,"split_key":131562,"timestamp":"2026-03-15T11:00:00.000Z"} +{"doc_count":627,"split_key":24940,"timestamp":"2026-03-15T11:00:00.000Z"} +{"doc_count":589,"split_key":14061,"timestamp":"2026-03-15T11:00:00.000Z"} +{"doc_count":583,"split_key":209334,"timestamp":"2026-03-15T11:00:00.000Z"} +{"doc_count":502,"split_key":396982,"timestamp":"2026-03-15T11:00:00.000Z"} +{"doc_count":923,"split_key":209334,"timestamp":"2026-03-15T12:00:00.000Z"} +{"doc_count":721,"split_key":24940,"timestamp":"2026-03-15T12:00:00.000Z"} +{"doc_count":649,"split_key":14061,"timestamp":"2026-03-15T12:00:00.000Z"} +{"doc_count":637,"split_key":398324,"timestamp":"2026-03-15T12:00:00.000Z"} +{"doc_count":474,"split_key":138915,"timestamp":"2026-03-15T12:00:00.000Z"} +{"doc_count":1530,"split_key":8560,"timestamp":"2026-03-15T13:00:00.000Z"} +{"doc_count":1394,"split_key":209334,"timestamp":"2026-03-15T13:00:00.000Z"} +{"doc_count":782,"split_key":24940,"timestamp":"2026-03-15T13:00:00.000Z"} +{"doc_count":629,"split_key":14061,"timestamp":"2026-03-15T13:00:00.000Z"} +{"doc_count":533,"split_key":45102,"timestamp":"2026-03-15T13:00:00.000Z"} +{"doc_count":4249,"split_key":209334,"timestamp":"2026-03-15T14:00:00.000Z"} +{"doc_count":788,"split_key":45102,"timestamp":"2026-03-15T14:00:00.000Z"} +{"doc_count":669,"split_key":24940,"timestamp":"2026-03-15T14:00:00.000Z"} +{"doc_count":552,"split_key":14061,"timestamp":"2026-03-15T14:00:00.000Z"} +{"doc_count":457,"split_key":138915,"timestamp":"2026-03-15T14:00:00.000Z"} +{"doc_count":1163,"split_key":209334,"timestamp":"2026-03-15T15:00:00.000Z"} +{"doc_count":1004,"split_key":14061,"timestamp":"2026-03-15T15:00:00.000Z"} +{"doc_count":875,"split_key":45102,"timestamp":"2026-03-15T15:00:00.000Z"} +{"doc_count":682,"split_key":24940,"timestamp":"2026-03-15T15:00:00.000Z"} +{"doc_count":486,"split_key":138915,"timestamp":"2026-03-15T15:00:00.000Z"} +{"doc_count":742,"split_key":45102,"timestamp":"2026-03-15T16:00:00.000Z"} +{"doc_count":700,"split_key":209334,"timestamp":"2026-03-15T16:00:00.000Z"} +{"doc_count":579,"split_key":24940,"timestamp":"2026-03-15T16:00:00.000Z"} +{"doc_count":524,"split_key":16509,"timestamp":"2026-03-15T16:00:00.000Z"} +{"doc_count":520,"split_key":138915,"timestamp":"2026-03-15T16:00:00.000Z"} +{"doc_count":1040,"split_key":14061,"timestamp":"2026-03-15T17:00:00.000Z"} +{"doc_count":835,"split_key":209334,"timestamp":"2026-03-15T17:00:00.000Z"} +{"doc_count":691,"split_key":45102,"timestamp":"2026-03-15T17:00:00.000Z"} +{"doc_count":638,"split_key":24940,"timestamp":"2026-03-15T17:00:00.000Z"} +{"doc_count":598,"split_key":16509,"timestamp":"2026-03-15T17:00:00.000Z"} +{"doc_count":3821,"split_key":265410,"timestamp":"2026-03-15T18:00:00.000Z"} +{"doc_count":1924,"split_key":209334,"timestamp":"2026-03-15T18:00:00.000Z"} +{"doc_count":1509,"split_key":3786,"timestamp":"2026-03-15T18:00:00.000Z"} +{"doc_count":766,"split_key":45102,"timestamp":"2026-03-15T18:00:00.000Z"} +{"doc_count":622,"split_key":24940,"timestamp":"2026-03-15T18:00:00.000Z"} +{"doc_count":5395,"split_key":265410,"timestamp":"2026-03-15T19:00:00.000Z"} +{"doc_count":2929,"split_key":3786,"timestamp":"2026-03-15T19:00:00.000Z"} +{"doc_count":773,"split_key":209334,"timestamp":"2026-03-15T19:00:00.000Z"} +{"doc_count":767,"split_key":24940,"timestamp":"2026-03-15T19:00:00.000Z"} +{"doc_count":616,"split_key":37963,"timestamp":"2026-03-15T19:00:00.000Z"} +{"doc_count":6202,"split_key":265410,"timestamp":"2026-03-15T20:00:00.000Z"} +{"doc_count":3254,"split_key":3786,"timestamp":"2026-03-15T20:00:00.000Z"} +{"doc_count":1230,"split_key":209605,"timestamp":"2026-03-15T20:00:00.000Z"} +{"doc_count":1210,"split_key":37963,"timestamp":"2026-03-15T20:00:00.000Z"} +{"doc_count":709,"split_key":24940,"timestamp":"2026-03-15T20:00:00.000Z"} +{"doc_count":4236,"split_key":265410,"timestamp":"2026-03-15T21:00:00.000Z"} +{"doc_count":3127,"split_key":3786,"timestamp":"2026-03-15T21:00:00.000Z"} +{"doc_count":2307,"split_key":209605,"timestamp":"2026-03-15T21:00:00.000Z"} +{"doc_count":700,"split_key":37963,"timestamp":"2026-03-15T21:00:00.000Z"} +{"doc_count":632,"split_key":209334,"timestamp":"2026-03-15T21:00:00.000Z"} +{"doc_count":3951,"split_key":52937,"timestamp":"2026-03-15T22:00:00.000Z"} +{"doc_count":2594,"split_key":3786,"timestamp":"2026-03-15T22:00:00.000Z"} +{"doc_count":2044,"split_key":209605,"timestamp":"2026-03-15T22:00:00.000Z"} +{"doc_count":1041,"split_key":265410,"timestamp":"2026-03-15T22:00:00.000Z"} +{"doc_count":523,"split_key":37963,"timestamp":"2026-03-15T22:00:00.000Z"} +{"doc_count":20564,"split_key":209334,"timestamp":"2026-03-15T23:00:00.000Z"} +{"doc_count":6909,"split_key":52937,"timestamp":"2026-03-15T23:00:00.000Z"} +{"doc_count":2759,"split_key":3786,"timestamp":"2026-03-15T23:00:00.000Z"} +{"doc_count":1062,"split_key":48090,"timestamp":"2026-03-15T23:00:00.000Z"} +{"doc_count":814,"split_key":209605,"timestamp":"2026-03-15T23:00:00.000Z"} +{"doc_count":29861,"split_key":209334,"timestamp":"2026-03-16T00:00:00.000Z"} +{"doc_count":8189,"split_key":14987,"timestamp":"2026-03-16T00:00:00.000Z"} +{"doc_count":5896,"split_key":52937,"timestamp":"2026-03-16T00:00:00.000Z"} +{"doc_count":1732,"split_key":37963,"timestamp":"2026-03-16T00:00:00.000Z"} +{"doc_count":1712,"split_key":3786,"timestamp":"2026-03-16T00:00:00.000Z"} +{"doc_count":6766,"split_key":52937,"timestamp":"2026-03-16T01:00:00.000Z"} +{"doc_count":5622,"split_key":209334,"timestamp":"2026-03-16T01:00:00.000Z"} +{"doc_count":1680,"split_key":211590,"timestamp":"2026-03-16T01:00:00.000Z"} +{"doc_count":1124,"split_key":37963,"timestamp":"2026-03-16T01:00:00.000Z"} +{"doc_count":1105,"split_key":3786,"timestamp":"2026-03-16T01:00:00.000Z"} +{"doc_count":7594,"split_key":4134,"timestamp":"2026-03-16T02:00:00.000Z"} +{"doc_count":5744,"split_key":52937,"timestamp":"2026-03-16T02:00:00.000Z"} +{"doc_count":1934,"split_key":209334,"timestamp":"2026-03-16T02:00:00.000Z"} +{"doc_count":1859,"split_key":209605,"timestamp":"2026-03-16T02:00:00.000Z"} +{"doc_count":1717,"split_key":49581,"timestamp":"2026-03-16T02:00:00.000Z"} +{"doc_count":7258,"split_key":52937,"timestamp":"2026-03-16T03:00:00.000Z"} +{"doc_count":1685,"split_key":209605,"timestamp":"2026-03-16T03:00:00.000Z"} +{"doc_count":1588,"split_key":63949,"timestamp":"2026-03-16T03:00:00.000Z"} +{"doc_count":1265,"split_key":16509,"timestamp":"2026-03-16T03:00:00.000Z"} +{"doc_count":997,"split_key":3786,"timestamp":"2026-03-16T03:00:00.000Z"} +{"doc_count":6181,"split_key":52937,"timestamp":"2026-03-16T04:00:00.000Z"} +{"doc_count":1380,"split_key":209605,"timestamp":"2026-03-16T04:00:00.000Z"} +{"doc_count":931,"split_key":50360,"timestamp":"2026-03-16T04:00:00.000Z"} +{"doc_count":883,"split_key":3786,"timestamp":"2026-03-16T04:00:00.000Z"} +{"doc_count":800,"split_key":49581,"timestamp":"2026-03-16T04:00:00.000Z"} +{"doc_count":7863,"split_key":49581,"timestamp":"2026-03-16T05:00:00.000Z"} +{"doc_count":6854,"split_key":52937,"timestamp":"2026-03-16T05:00:00.000Z"} +{"doc_count":4016,"split_key":133385,"timestamp":"2026-03-16T05:00:00.000Z"} +{"doc_count":2664,"split_key":141216,"timestamp":"2026-03-16T05:00:00.000Z"} +{"doc_count":1559,"split_key":209334,"timestamp":"2026-03-16T05:00:00.000Z"} +{"doc_count":6279,"split_key":52937,"timestamp":"2026-03-16T06:00:00.000Z"} +{"doc_count":1205,"split_key":209605,"timestamp":"2026-03-16T06:00:00.000Z"} +{"doc_count":842,"split_key":50360,"timestamp":"2026-03-16T06:00:00.000Z"} +{"doc_count":834,"split_key":3786,"timestamp":"2026-03-16T06:00:00.000Z"} +{"doc_count":787,"split_key":16509,"timestamp":"2026-03-16T06:00:00.000Z"} +{"doc_count":6497,"split_key":52937,"timestamp":"2026-03-16T07:00:00.000Z"} +{"doc_count":1255,"split_key":49581,"timestamp":"2026-03-16T07:00:00.000Z"} +{"doc_count":893,"split_key":50360,"timestamp":"2026-03-16T07:00:00.000Z"} +{"doc_count":848,"split_key":3786,"timestamp":"2026-03-16T07:00:00.000Z"} +{"doc_count":848,"split_key":209605,"timestamp":"2026-03-16T07:00:00.000Z"} +{"doc_count":6518,"split_key":52937,"timestamp":"2026-03-16T08:00:00.000Z"} +{"doc_count":3484,"split_key":49581,"timestamp":"2026-03-16T08:00:00.000Z"} +{"doc_count":2162,"split_key":211590,"timestamp":"2026-03-16T08:00:00.000Z"} +{"doc_count":1082,"split_key":3786,"timestamp":"2026-03-16T08:00:00.000Z"} +{"doc_count":879,"split_key":209334,"timestamp":"2026-03-16T08:00:00.000Z"} +{"doc_count":6267,"split_key":52937,"timestamp":"2026-03-16T09:00:00.000Z"} +{"doc_count":3109,"split_key":49581,"timestamp":"2026-03-16T09:00:00.000Z"} +{"doc_count":936,"split_key":3786,"timestamp":"2026-03-16T09:00:00.000Z"} +{"doc_count":765,"split_key":209334,"timestamp":"2026-03-16T09:00:00.000Z"} +{"doc_count":696,"split_key":50360,"timestamp":"2026-03-16T09:00:00.000Z"} +{"doc_count":12757,"split_key":49581,"timestamp":"2026-03-16T10:00:00.000Z"} +{"doc_count":3419,"split_key":265410,"timestamp":"2026-03-16T10:00:00.000Z"} +{"doc_count":977,"split_key":3786,"timestamp":"2026-03-16T10:00:00.000Z"} +{"doc_count":903,"split_key":16509,"timestamp":"2026-03-16T10:00:00.000Z"} +{"doc_count":899,"split_key":52937,"timestamp":"2026-03-16T10:00:00.000Z"} +{"doc_count":21558,"split_key":49581,"timestamp":"2026-03-16T11:00:00.000Z"} +{"doc_count":3288,"split_key":265410,"timestamp":"2026-03-16T11:00:00.000Z"} +{"doc_count":2761,"split_key":14061,"timestamp":"2026-03-16T11:00:00.000Z"} +{"doc_count":1480,"split_key":209605,"timestamp":"2026-03-16T11:00:00.000Z"} +{"doc_count":1051,"split_key":50360,"timestamp":"2026-03-16T11:00:00.000Z"} +{"doc_count":19720,"split_key":49581,"timestamp":"2026-03-16T12:00:00.000Z"} +{"doc_count":4848,"split_key":211590,"timestamp":"2026-03-16T12:00:00.000Z"} +{"doc_count":4350,"split_key":265410,"timestamp":"2026-03-16T12:00:00.000Z"} +{"doc_count":1376,"split_key":209605,"timestamp":"2026-03-16T12:00:00.000Z"} +{"doc_count":1079,"split_key":3786,"timestamp":"2026-03-16T12:00:00.000Z"} +{"doc_count":23496,"split_key":49581,"timestamp":"2026-03-16T13:00:00.000Z"} +{"doc_count":3552,"split_key":265410,"timestamp":"2026-03-16T13:00:00.000Z"} +{"doc_count":1643,"split_key":209605,"timestamp":"2026-03-16T13:00:00.000Z"} +{"doc_count":1293,"split_key":50360,"timestamp":"2026-03-16T13:00:00.000Z"} +{"doc_count":847,"split_key":3786,"timestamp":"2026-03-16T13:00:00.000Z"} +{"doc_count":20715,"split_key":49581,"timestamp":"2026-03-16T14:00:00.000Z"} +{"doc_count":3854,"split_key":265410,"timestamp":"2026-03-16T14:00:00.000Z"} +{"doc_count":1299,"split_key":209605,"timestamp":"2026-03-16T14:00:00.000Z"} +{"doc_count":908,"split_key":3786,"timestamp":"2026-03-16T14:00:00.000Z"} +{"doc_count":490,"split_key":16509,"timestamp":"2026-03-16T14:00:00.000Z"} +{"doc_count":21040,"split_key":49581,"timestamp":"2026-03-16T15:00:00.000Z"} +{"doc_count":4344,"split_key":265410,"timestamp":"2026-03-16T15:00:00.000Z"} +{"doc_count":529,"split_key":16509,"timestamp":"2026-03-16T15:00:00.000Z"} +{"doc_count":505,"split_key":209605,"timestamp":"2026-03-16T15:00:00.000Z"} +{"doc_count":505,"split_key":398324,"timestamp":"2026-03-16T15:00:00.000Z"} +{"doc_count":19449,"split_key":49581,"timestamp":"2026-03-16T16:00:00.000Z"} +{"doc_count":4213,"split_key":265410,"timestamp":"2026-03-16T16:00:00.000Z"} +{"doc_count":587,"split_key":16509,"timestamp":"2026-03-16T16:00:00.000Z"} +{"doc_count":480,"split_key":24323,"timestamp":"2026-03-16T16:00:00.000Z"} +{"doc_count":478,"split_key":209605,"timestamp":"2026-03-16T16:00:00.000Z"} +{"doc_count":21021,"split_key":49581,"timestamp":"2026-03-16T17:00:00.000Z"} +{"doc_count":2164,"split_key":267325,"timestamp":"2026-03-16T17:00:00.000Z"} +{"doc_count":1662,"split_key":14061,"timestamp":"2026-03-16T17:00:00.000Z"} +{"doc_count":1121,"split_key":265410,"timestamp":"2026-03-16T17:00:00.000Z"} +{"doc_count":740,"split_key":16509,"timestamp":"2026-03-16T17:00:00.000Z"} +{"doc_count":22217,"split_key":49581,"timestamp":"2026-03-16T18:00:00.000Z"} +{"doc_count":3683,"split_key":267325,"timestamp":"2026-03-16T18:00:00.000Z"} +{"doc_count":826,"split_key":16509,"timestamp":"2026-03-16T18:00:00.000Z"} +{"doc_count":570,"split_key":37963,"timestamp":"2026-03-16T18:00:00.000Z"} +{"doc_count":539,"split_key":209605,"timestamp":"2026-03-16T18:00:00.000Z"} +{"doc_count":16810,"split_key":49581,"timestamp":"2026-03-16T19:00:00.000Z"} +{"doc_count":3604,"split_key":267325,"timestamp":"2026-03-16T19:00:00.000Z"} +{"doc_count":749,"split_key":16509,"timestamp":"2026-03-16T19:00:00.000Z"} +{"doc_count":438,"split_key":209605,"timestamp":"2026-03-16T19:00:00.000Z"} +{"doc_count":360,"split_key":209334,"timestamp":"2026-03-16T19:00:00.000Z"} +{"doc_count":15767,"split_key":49581,"timestamp":"2026-03-16T20:00:00.000Z"} +{"doc_count":2421,"split_key":267325,"timestamp":"2026-03-16T20:00:00.000Z"} +{"doc_count":436,"split_key":16509,"timestamp":"2026-03-16T20:00:00.000Z"} +{"doc_count":390,"split_key":209605,"timestamp":"2026-03-16T20:00:00.000Z"} +{"doc_count":387,"split_key":24323,"timestamp":"2026-03-16T20:00:00.000Z"} +{"doc_count":18730,"split_key":49581,"timestamp":"2026-03-16T21:00:00.000Z"} +{"doc_count":3698,"split_key":267325,"timestamp":"2026-03-16T21:00:00.000Z"} +{"doc_count":688,"split_key":16509,"timestamp":"2026-03-16T21:00:00.000Z"} +{"doc_count":631,"split_key":209605,"timestamp":"2026-03-16T21:00:00.000Z"} +{"doc_count":537,"split_key":396982,"timestamp":"2026-03-16T21:00:00.000Z"} +{"doc_count":20653,"split_key":49581,"timestamp":"2026-03-16T22:00:00.000Z"} +{"doc_count":4661,"split_key":16509,"timestamp":"2026-03-16T22:00:00.000Z"} +{"doc_count":3366,"split_key":267325,"timestamp":"2026-03-16T22:00:00.000Z"} +{"doc_count":1709,"split_key":209605,"timestamp":"2026-03-16T22:00:00.000Z"} +{"doc_count":553,"split_key":209334,"timestamp":"2026-03-16T22:00:00.000Z"} +{"doc_count":18561,"split_key":209334,"timestamp":"2026-03-16T23:00:00.000Z"} +{"doc_count":16825,"split_key":49581,"timestamp":"2026-03-16T23:00:00.000Z"} +{"doc_count":3960,"split_key":16509,"timestamp":"2026-03-16T23:00:00.000Z"} +{"doc_count":3859,"split_key":14618,"timestamp":"2026-03-16T23:00:00.000Z"} +{"doc_count":3676,"split_key":267325,"timestamp":"2026-03-16T23:00:00.000Z"} +{"doc_count":29764,"split_key":209334,"timestamp":"2026-03-17T00:00:00.000Z"} +{"doc_count":21320,"split_key":49581,"timestamp":"2026-03-17T00:00:00.000Z"} +{"doc_count":2472,"split_key":267325,"timestamp":"2026-03-17T00:00:00.000Z"} +{"doc_count":1758,"split_key":209605,"timestamp":"2026-03-17T00:00:00.000Z"} +{"doc_count":1245,"split_key":16509,"timestamp":"2026-03-17T00:00:00.000Z"} +{"doc_count":20213,"split_key":49581,"timestamp":"2026-03-17T01:00:00.000Z"} +{"doc_count":9573,"split_key":209334,"timestamp":"2026-03-17T01:00:00.000Z"} +{"doc_count":3794,"split_key":267325,"timestamp":"2026-03-17T01:00:00.000Z"} +{"doc_count":2454,"split_key":16509,"timestamp":"2026-03-17T01:00:00.000Z"} +{"doc_count":1639,"split_key":209605,"timestamp":"2026-03-17T01:00:00.000Z"} +{"doc_count":21618,"split_key":49581,"timestamp":"2026-03-17T02:00:00.000Z"} +{"doc_count":3531,"split_key":267325,"timestamp":"2026-03-17T02:00:00.000Z"} +{"doc_count":1724,"split_key":209605,"timestamp":"2026-03-17T02:00:00.000Z"} +{"doc_count":790,"split_key":16509,"timestamp":"2026-03-17T02:00:00.000Z"} +{"doc_count":558,"split_key":396982,"timestamp":"2026-03-17T02:00:00.000Z"} +{"doc_count":19272,"split_key":49581,"timestamp":"2026-03-17T03:00:00.000Z"} +{"doc_count":3441,"split_key":267325,"timestamp":"2026-03-17T03:00:00.000Z"} +{"doc_count":1580,"split_key":209605,"timestamp":"2026-03-17T03:00:00.000Z"} +{"doc_count":1114,"split_key":16509,"timestamp":"2026-03-17T03:00:00.000Z"} +{"doc_count":508,"split_key":209334,"timestamp":"2026-03-17T03:00:00.000Z"} +{"doc_count":21805,"split_key":49581,"timestamp":"2026-03-17T04:00:00.000Z"} +{"doc_count":1881,"split_key":267325,"timestamp":"2026-03-17T04:00:00.000Z"} +{"doc_count":1709,"split_key":209605,"timestamp":"2026-03-17T04:00:00.000Z"} +{"doc_count":731,"split_key":16509,"timestamp":"2026-03-17T04:00:00.000Z"} +{"doc_count":394,"split_key":209334,"timestamp":"2026-03-17T04:00:00.000Z"} +{"doc_count":22025,"split_key":49581,"timestamp":"2026-03-17T05:00:00.000Z"} +{"doc_count":1773,"split_key":209605,"timestamp":"2026-03-17T05:00:00.000Z"} +{"doc_count":1618,"split_key":267325,"timestamp":"2026-03-17T05:00:00.000Z"} +{"doc_count":915,"split_key":16509,"timestamp":"2026-03-17T05:00:00.000Z"} +{"doc_count":461,"split_key":209334,"timestamp":"2026-03-17T05:00:00.000Z"} +{"doc_count":19336,"split_key":49581,"timestamp":"2026-03-17T06:00:00.000Z"} +{"doc_count":1653,"split_key":267325,"timestamp":"2026-03-17T06:00:00.000Z"} +{"doc_count":1575,"split_key":209605,"timestamp":"2026-03-17T06:00:00.000Z"} +{"doc_count":777,"split_key":16509,"timestamp":"2026-03-17T06:00:00.000Z"} +{"doc_count":595,"split_key":209334,"timestamp":"2026-03-17T06:00:00.000Z"} +{"doc_count":11523,"split_key":14061,"timestamp":"2026-03-17T07:00:00.000Z"} +{"doc_count":1814,"split_key":209605,"timestamp":"2026-03-17T07:00:00.000Z"} +{"doc_count":1716,"split_key":267325,"timestamp":"2026-03-17T07:00:00.000Z"} +{"doc_count":898,"split_key":49581,"timestamp":"2026-03-17T07:00:00.000Z"} +{"doc_count":718,"split_key":16509,"timestamp":"2026-03-17T07:00:00.000Z"} +{"doc_count":15292,"split_key":14061,"timestamp":"2026-03-17T08:00:00.000Z"} +{"doc_count":1874,"split_key":267325,"timestamp":"2026-03-17T08:00:00.000Z"} +{"doc_count":1610,"split_key":209605,"timestamp":"2026-03-17T08:00:00.000Z"} +{"doc_count":532,"split_key":16509,"timestamp":"2026-03-17T08:00:00.000Z"} +{"doc_count":492,"split_key":209334,"timestamp":"2026-03-17T08:00:00.000Z"} +{"doc_count":1525,"split_key":267325,"timestamp":"2026-03-17T09:00:00.000Z"} +{"doc_count":1438,"split_key":209605,"timestamp":"2026-03-17T09:00:00.000Z"} +{"doc_count":651,"split_key":16509,"timestamp":"2026-03-17T09:00:00.000Z"} +{"doc_count":514,"split_key":138915,"timestamp":"2026-03-17T09:00:00.000Z"} +{"doc_count":503,"split_key":209334,"timestamp":"2026-03-17T09:00:00.000Z"} +{"doc_count":1652,"split_key":209605,"timestamp":"2026-03-17T10:00:00.000Z"} +{"doc_count":1017,"split_key":267325,"timestamp":"2026-03-17T10:00:00.000Z"} +{"doc_count":999,"split_key":16509,"timestamp":"2026-03-17T10:00:00.000Z"} +{"doc_count":793,"split_key":209334,"timestamp":"2026-03-17T10:00:00.000Z"} +{"doc_count":465,"split_key":396982,"timestamp":"2026-03-17T10:00:00.000Z"} +{"doc_count":1602,"split_key":209605,"timestamp":"2026-03-17T11:00:00.000Z"} +{"doc_count":780,"split_key":267325,"timestamp":"2026-03-17T11:00:00.000Z"} +{"doc_count":667,"split_key":209334,"timestamp":"2026-03-17T11:00:00.000Z"} +{"doc_count":472,"split_key":16509,"timestamp":"2026-03-17T11:00:00.000Z"} +{"doc_count":438,"split_key":14061,"timestamp":"2026-03-17T11:00:00.000Z"} +{"doc_count":2016,"split_key":267325,"timestamp":"2026-03-17T12:00:00.000Z"} +{"doc_count":1396,"split_key":209605,"timestamp":"2026-03-17T12:00:00.000Z"} +{"doc_count":479,"split_key":209334,"timestamp":"2026-03-17T12:00:00.000Z"} +{"doc_count":434,"split_key":16509,"timestamp":"2026-03-17T12:00:00.000Z"} +{"doc_count":357,"split_key":398324,"timestamp":"2026-03-17T12:00:00.000Z"} +{"doc_count":2616,"split_key":267325,"timestamp":"2026-03-17T13:00:00.000Z"} +{"doc_count":1671,"split_key":136646,"timestamp":"2026-03-17T13:00:00.000Z"} +{"doc_count":1551,"split_key":209605,"timestamp":"2026-03-17T13:00:00.000Z"} +{"doc_count":633,"split_key":16509,"timestamp":"2026-03-17T13:00:00.000Z"} +{"doc_count":537,"split_key":37963,"timestamp":"2026-03-17T13:00:00.000Z"} +{"doc_count":2997,"split_key":267325,"timestamp":"2026-03-17T14:00:00.000Z"} +{"doc_count":1567,"split_key":209605,"timestamp":"2026-03-17T14:00:00.000Z"} +{"doc_count":870,"split_key":16509,"timestamp":"2026-03-17T14:00:00.000Z"} +{"doc_count":533,"split_key":201814,"timestamp":"2026-03-17T14:00:00.000Z"} +{"doc_count":525,"split_key":37963,"timestamp":"2026-03-17T14:00:00.000Z"} +{"doc_count":1621,"split_key":209605,"timestamp":"2026-03-17T15:00:00.000Z"} +{"doc_count":1588,"split_key":267325,"timestamp":"2026-03-17T15:00:00.000Z"} +{"doc_count":670,"split_key":37963,"timestamp":"2026-03-17T15:00:00.000Z"} +{"doc_count":649,"split_key":16509,"timestamp":"2026-03-17T15:00:00.000Z"} +{"doc_count":513,"split_key":201814,"timestamp":"2026-03-17T15:00:00.000Z"} +{"doc_count":1628,"split_key":209605,"timestamp":"2026-03-17T16:00:00.000Z"} +{"doc_count":1137,"split_key":37963,"timestamp":"2026-03-17T16:00:00.000Z"} +{"doc_count":594,"split_key":267325,"timestamp":"2026-03-17T16:00:00.000Z"} +{"doc_count":568,"split_key":136646,"timestamp":"2026-03-17T16:00:00.000Z"} +{"doc_count":528,"split_key":201814,"timestamp":"2026-03-17T16:00:00.000Z"} +{"doc_count":2128,"split_key":267325,"timestamp":"2026-03-17T17:00:00.000Z"} +{"doc_count":1871,"split_key":209605,"timestamp":"2026-03-17T17:00:00.000Z"} +{"doc_count":1083,"split_key":136646,"timestamp":"2026-03-17T17:00:00.000Z"} +{"doc_count":975,"split_key":16509,"timestamp":"2026-03-17T17:00:00.000Z"} +{"doc_count":747,"split_key":37963,"timestamp":"2026-03-17T17:00:00.000Z"} +{"doc_count":3008,"split_key":267325,"timestamp":"2026-03-17T18:00:00.000Z"} +{"doc_count":1533,"split_key":209605,"timestamp":"2026-03-17T18:00:00.000Z"} +{"doc_count":874,"split_key":209334,"timestamp":"2026-03-17T18:00:00.000Z"} +{"doc_count":817,"split_key":16509,"timestamp":"2026-03-17T18:00:00.000Z"} +{"doc_count":639,"split_key":37963,"timestamp":"2026-03-17T18:00:00.000Z"} +{"doc_count":1658,"split_key":209605,"timestamp":"2026-03-17T19:00:00.000Z"} +{"doc_count":1026,"split_key":267325,"timestamp":"2026-03-17T19:00:00.000Z"} +{"doc_count":809,"split_key":209334,"timestamp":"2026-03-17T19:00:00.000Z"} +{"doc_count":779,"split_key":16509,"timestamp":"2026-03-17T19:00:00.000Z"} +{"doc_count":696,"split_key":37963,"timestamp":"2026-03-17T19:00:00.000Z"} +{"doc_count":4391,"split_key":267325,"timestamp":"2026-03-17T20:00:00.000Z"} +{"doc_count":1730,"split_key":209605,"timestamp":"2026-03-17T20:00:00.000Z"} +{"doc_count":478,"split_key":398324,"timestamp":"2026-03-17T20:00:00.000Z"} +{"doc_count":409,"split_key":201814,"timestamp":"2026-03-17T20:00:00.000Z"} +{"doc_count":371,"split_key":16509,"timestamp":"2026-03-17T20:00:00.000Z"} +{"doc_count":2685,"split_key":267325,"timestamp":"2026-03-17T21:00:00.000Z"} +{"doc_count":1023,"split_key":209605,"timestamp":"2026-03-17T21:00:00.000Z"} +{"doc_count":868,"split_key":16509,"timestamp":"2026-03-17T21:00:00.000Z"} +{"doc_count":472,"split_key":136646,"timestamp":"2026-03-17T21:00:00.000Z"} +{"doc_count":453,"split_key":209334,"timestamp":"2026-03-17T21:00:00.000Z"} +{"doc_count":4394,"split_key":267325,"timestamp":"2026-03-17T22:00:00.000Z"} +{"doc_count":1467,"split_key":136646,"timestamp":"2026-03-17T22:00:00.000Z"} +{"doc_count":708,"split_key":209334,"timestamp":"2026-03-17T22:00:00.000Z"} +{"doc_count":533,"split_key":14061,"timestamp":"2026-03-17T22:00:00.000Z"} +{"doc_count":482,"split_key":201814,"timestamp":"2026-03-17T22:00:00.000Z"} +{"doc_count":11710,"split_key":209334,"timestamp":"2026-03-17T23:00:00.000Z"} +{"doc_count":3090,"split_key":267325,"timestamp":"2026-03-17T23:00:00.000Z"} +{"doc_count":714,"split_key":16509,"timestamp":"2026-03-17T23:00:00.000Z"} +{"doc_count":404,"split_key":201814,"timestamp":"2026-03-17T23:00:00.000Z"} +{"doc_count":337,"split_key":396982,"timestamp":"2026-03-17T23:00:00.000Z"} +{"doc_count":20686,"split_key":209334,"timestamp":"2026-03-18T00:00:00.000Z"} +{"doc_count":4693,"split_key":267325,"timestamp":"2026-03-18T00:00:00.000Z"} +{"doc_count":555,"split_key":16509,"timestamp":"2026-03-18T00:00:00.000Z"} +{"doc_count":516,"split_key":396982,"timestamp":"2026-03-18T00:00:00.000Z"} +{"doc_count":336,"split_key":201814,"timestamp":"2026-03-18T00:00:00.000Z"} +{"doc_count":22224,"split_key":209334,"timestamp":"2026-03-18T01:00:00.000Z"} +{"doc_count":3012,"split_key":267325,"timestamp":"2026-03-18T01:00:00.000Z"} +{"doc_count":1426,"split_key":136646,"timestamp":"2026-03-18T01:00:00.000Z"} +{"doc_count":1319,"split_key":23470,"timestamp":"2026-03-18T01:00:00.000Z"} +{"doc_count":450,"split_key":16509,"timestamp":"2026-03-18T01:00:00.000Z"} +{"doc_count":8355,"split_key":209334,"timestamp":"2026-03-18T02:00:00.000Z"} +{"doc_count":1814,"split_key":23470,"timestamp":"2026-03-18T02:00:00.000Z"} +{"doc_count":435,"split_key":201814,"timestamp":"2026-03-18T02:00:00.000Z"} +{"doc_count":386,"split_key":396982,"timestamp":"2026-03-18T02:00:00.000Z"} +{"doc_count":354,"split_key":16509,"timestamp":"2026-03-18T02:00:00.000Z"} +{"doc_count":1009,"split_key":23470,"timestamp":"2026-03-18T03:00:00.000Z"} +{"doc_count":473,"split_key":209334,"timestamp":"2026-03-18T03:00:00.000Z"} +{"doc_count":454,"split_key":398324,"timestamp":"2026-03-18T03:00:00.000Z"} +{"doc_count":446,"split_key":16509,"timestamp":"2026-03-18T03:00:00.000Z"} +{"doc_count":394,"split_key":201814,"timestamp":"2026-03-18T03:00:00.000Z"} +{"doc_count":5232,"split_key":51396,"timestamp":"2026-03-18T04:00:00.000Z"} +{"doc_count":507,"split_key":209334,"timestamp":"2026-03-18T04:00:00.000Z"} +{"doc_count":445,"split_key":201814,"timestamp":"2026-03-18T04:00:00.000Z"} +{"doc_count":377,"split_key":16509,"timestamp":"2026-03-18T04:00:00.000Z"} +{"doc_count":280,"split_key":138915,"timestamp":"2026-03-18T04:00:00.000Z"} +{"doc_count":5857,"split_key":51396,"timestamp":"2026-03-18T05:00:00.000Z"} +{"doc_count":468,"split_key":16509,"timestamp":"2026-03-18T05:00:00.000Z"} +{"doc_count":437,"split_key":135377,"timestamp":"2026-03-18T05:00:00.000Z"} +{"doc_count":360,"split_key":201814,"timestamp":"2026-03-18T05:00:00.000Z"} +{"doc_count":315,"split_key":209334,"timestamp":"2026-03-18T05:00:00.000Z"} +{"doc_count":1529,"split_key":51396,"timestamp":"2026-03-18T06:00:00.000Z"} +{"doc_count":368,"split_key":209334,"timestamp":"2026-03-18T06:00:00.000Z"} +{"doc_count":364,"split_key":398324,"timestamp":"2026-03-18T06:00:00.000Z"} +{"doc_count":332,"split_key":396982,"timestamp":"2026-03-18T06:00:00.000Z"} +{"doc_count":331,"split_key":201814,"timestamp":"2026-03-18T06:00:00.000Z"} +{"doc_count":7037,"split_key":49581,"timestamp":"2026-03-18T07:00:00.000Z"} +{"doc_count":487,"split_key":209334,"timestamp":"2026-03-18T07:00:00.000Z"} +{"doc_count":425,"split_key":51396,"timestamp":"2026-03-18T07:00:00.000Z"} +{"doc_count":413,"split_key":201814,"timestamp":"2026-03-18T07:00:00.000Z"} +{"doc_count":342,"split_key":396982,"timestamp":"2026-03-18T07:00:00.000Z"} +{"doc_count":32174,"split_key":49581,"timestamp":"2026-03-18T08:00:00.000Z"} +{"doc_count":1039,"split_key":51396,"timestamp":"2026-03-18T08:00:00.000Z"} +{"doc_count":637,"split_key":398324,"timestamp":"2026-03-18T08:00:00.000Z"} +{"doc_count":598,"split_key":138915,"timestamp":"2026-03-18T08:00:00.000Z"} +{"doc_count":519,"split_key":209334,"timestamp":"2026-03-18T08:00:00.000Z"} +{"doc_count":34430,"split_key":49581,"timestamp":"2026-03-18T09:00:00.000Z"} +{"doc_count":6909,"split_key":24757,"timestamp":"2026-03-18T09:00:00.000Z"} +{"doc_count":676,"split_key":53667,"timestamp":"2026-03-18T09:00:00.000Z"} +{"doc_count":441,"split_key":398324,"timestamp":"2026-03-18T09:00:00.000Z"} +{"doc_count":421,"split_key":16509,"timestamp":"2026-03-18T09:00:00.000Z"} +{"doc_count":46680,"split_key":49581,"timestamp":"2026-03-18T10:00:00.000Z"} +{"doc_count":6960,"split_key":24757,"timestamp":"2026-03-18T10:00:00.000Z"} +{"doc_count":765,"split_key":138915,"timestamp":"2026-03-18T10:00:00.000Z"} +{"doc_count":474,"split_key":209334,"timestamp":"2026-03-18T10:00:00.000Z"} +{"doc_count":422,"split_key":201814,"timestamp":"2026-03-18T10:00:00.000Z"} +{"doc_count":536,"split_key":138915,"timestamp":"2026-03-18T11:00:00.000Z"} +{"doc_count":462,"split_key":398324,"timestamp":"2026-03-18T11:00:00.000Z"} +{"doc_count":396,"split_key":201814,"timestamp":"2026-03-18T11:00:00.000Z"} +{"doc_count":369,"split_key":16509,"timestamp":"2026-03-18T11:00:00.000Z"} +{"doc_count":311,"split_key":211860,"timestamp":"2026-03-18T11:00:00.000Z"} +{"doc_count":542,"split_key":213790,"timestamp":"2026-03-18T12:00:00.000Z"} +{"doc_count":360,"split_key":209334,"timestamp":"2026-03-18T12:00:00.000Z"} +{"doc_count":349,"split_key":56041,"timestamp":"2026-03-18T12:00:00.000Z"} +{"doc_count":342,"split_key":37963,"timestamp":"2026-03-18T12:00:00.000Z"} +{"doc_count":295,"split_key":201814,"timestamp":"2026-03-18T12:00:00.000Z"} +{"doc_count":503,"split_key":209334,"timestamp":"2026-03-18T13:00:00.000Z"} +{"doc_count":465,"split_key":398324,"timestamp":"2026-03-18T13:00:00.000Z"} +{"doc_count":458,"split_key":14061,"timestamp":"2026-03-18T13:00:00.000Z"} +{"doc_count":436,"split_key":16509,"timestamp":"2026-03-18T13:00:00.000Z"} +{"doc_count":408,"split_key":201814,"timestamp":"2026-03-18T13:00:00.000Z"} +{"doc_count":357,"split_key":201814,"timestamp":"2026-03-18T14:00:00.000Z"} +{"doc_count":337,"split_key":209334,"timestamp":"2026-03-18T14:00:00.000Z"} +{"doc_count":324,"split_key":138915,"timestamp":"2026-03-18T14:00:00.000Z"} +{"doc_count":242,"split_key":398324,"timestamp":"2026-03-18T14:00:00.000Z"} +{"doc_count":220,"split_key":14061,"timestamp":"2026-03-18T14:00:00.000Z"} +{"doc_count":411,"split_key":14061,"timestamp":"2026-03-18T15:00:00.000Z"} +{"doc_count":405,"split_key":209334,"timestamp":"2026-03-18T15:00:00.000Z"} +{"doc_count":402,"split_key":201814,"timestamp":"2026-03-18T15:00:00.000Z"} +{"doc_count":400,"split_key":398324,"timestamp":"2026-03-18T15:00:00.000Z"} +{"doc_count":364,"split_key":53667,"timestamp":"2026-03-18T15:00:00.000Z"} +{"doc_count":563,"split_key":16509,"timestamp":"2026-03-18T16:00:00.000Z"} +{"doc_count":487,"split_key":209334,"timestamp":"2026-03-18T16:00:00.000Z"} +{"doc_count":432,"split_key":201814,"timestamp":"2026-03-18T16:00:00.000Z"} +{"doc_count":409,"split_key":398324,"timestamp":"2026-03-18T16:00:00.000Z"} +{"doc_count":364,"split_key":14061,"timestamp":"2026-03-18T16:00:00.000Z"} +{"doc_count":5973,"split_key":139659,"timestamp":"2026-03-18T17:00:00.000Z"} +{"doc_count":847,"split_key":138915,"timestamp":"2026-03-18T17:00:00.000Z"} +{"doc_count":642,"split_key":209334,"timestamp":"2026-03-18T17:00:00.000Z"} +{"doc_count":494,"split_key":16509,"timestamp":"2026-03-18T17:00:00.000Z"} +{"doc_count":459,"split_key":9498,"timestamp":"2026-03-18T17:00:00.000Z"} +{"doc_count":435,"split_key":14061,"timestamp":"2026-03-18T18:00:00.000Z"} +{"doc_count":428,"split_key":201814,"timestamp":"2026-03-18T18:00:00.000Z"} +{"doc_count":408,"split_key":209334,"timestamp":"2026-03-18T18:00:00.000Z"} +{"doc_count":389,"split_key":211590,"timestamp":"2026-03-18T18:00:00.000Z"} +{"doc_count":346,"split_key":16509,"timestamp":"2026-03-18T18:00:00.000Z"} +{"doc_count":1034,"split_key":37963,"timestamp":"2026-03-18T19:00:00.000Z"} +{"doc_count":477,"split_key":14061,"timestamp":"2026-03-18T19:00:00.000Z"} +{"doc_count":451,"split_key":209334,"timestamp":"2026-03-18T19:00:00.000Z"} +{"doc_count":443,"split_key":201814,"timestamp":"2026-03-18T19:00:00.000Z"} +{"doc_count":410,"split_key":16509,"timestamp":"2026-03-18T19:00:00.000Z"} +{"doc_count":1335,"split_key":37963,"timestamp":"2026-03-18T20:00:00.000Z"} +{"doc_count":616,"split_key":209334,"timestamp":"2026-03-18T20:00:00.000Z"} +{"doc_count":540,"split_key":14061,"timestamp":"2026-03-18T20:00:00.000Z"} +{"doc_count":485,"split_key":398324,"timestamp":"2026-03-18T20:00:00.000Z"} +{"doc_count":461,"split_key":201814,"timestamp":"2026-03-18T20:00:00.000Z"} +{"doc_count":3480,"split_key":16509,"timestamp":"2026-03-18T21:00:00.000Z"} +{"doc_count":1575,"split_key":37963,"timestamp":"2026-03-18T21:00:00.000Z"} +{"doc_count":635,"split_key":209334,"timestamp":"2026-03-18T21:00:00.000Z"} +{"doc_count":514,"split_key":53667,"timestamp":"2026-03-18T21:00:00.000Z"} +{"doc_count":434,"split_key":201814,"timestamp":"2026-03-18T21:00:00.000Z"} +{"doc_count":1421,"split_key":37963,"timestamp":"2026-03-18T22:00:00.000Z"} +{"doc_count":537,"split_key":209334,"timestamp":"2026-03-18T22:00:00.000Z"} +{"doc_count":441,"split_key":201814,"timestamp":"2026-03-18T22:00:00.000Z"} +{"doc_count":433,"split_key":398324,"timestamp":"2026-03-18T22:00:00.000Z"} +{"doc_count":403,"split_key":396982,"timestamp":"2026-03-18T22:00:00.000Z"} +{"doc_count":13915,"split_key":209334,"timestamp":"2026-03-18T23:00:00.000Z"} +{"doc_count":1062,"split_key":37963,"timestamp":"2026-03-18T23:00:00.000Z"} +{"doc_count":375,"split_key":201814,"timestamp":"2026-03-18T23:00:00.000Z"} +{"doc_count":350,"split_key":396982,"timestamp":"2026-03-18T23:00:00.000Z"} +{"doc_count":325,"split_key":211860,"timestamp":"2026-03-18T23:00:00.000Z"} +{"doc_count":24450,"split_key":209334,"timestamp":"2026-03-19T00:00:00.000Z"} +{"doc_count":9208,"split_key":264014,"timestamp":"2026-03-19T00:00:00.000Z"} +{"doc_count":1498,"split_key":37963,"timestamp":"2026-03-19T00:00:00.000Z"} +{"doc_count":579,"split_key":201401,"timestamp":"2026-03-19T00:00:00.000Z"} +{"doc_count":471,"split_key":396982,"timestamp":"2026-03-19T00:00:00.000Z"} +{"doc_count":19713,"split_key":209334,"timestamp":"2026-03-19T01:00:00.000Z"} +{"doc_count":10299,"split_key":264014,"timestamp":"2026-03-19T01:00:00.000Z"} +{"doc_count":2682,"split_key":37963,"timestamp":"2026-03-19T01:00:00.000Z"} +{"doc_count":467,"split_key":16509,"timestamp":"2026-03-19T01:00:00.000Z"} +{"doc_count":401,"split_key":398324,"timestamp":"2026-03-19T01:00:00.000Z"} +{"doc_count":11377,"split_key":264014,"timestamp":"2026-03-19T02:00:00.000Z"} +{"doc_count":3647,"split_key":37963,"timestamp":"2026-03-19T02:00:00.000Z"} +{"doc_count":880,"split_key":16509,"timestamp":"2026-03-19T02:00:00.000Z"} +{"doc_count":469,"split_key":396982,"timestamp":"2026-03-19T02:00:00.000Z"} +{"doc_count":374,"split_key":398324,"timestamp":"2026-03-19T02:00:00.000Z"} +{"doc_count":8467,"split_key":264014,"timestamp":"2026-03-19T03:00:00.000Z"} +{"doc_count":1641,"split_key":37963,"timestamp":"2026-03-19T03:00:00.000Z"} +{"doc_count":1376,"split_key":16509,"timestamp":"2026-03-19T03:00:00.000Z"} +{"doc_count":382,"split_key":201814,"timestamp":"2026-03-19T03:00:00.000Z"} +{"doc_count":377,"split_key":396982,"timestamp":"2026-03-19T03:00:00.000Z"} +{"doc_count":2341,"split_key":37963,"timestamp":"2026-03-19T04:00:00.000Z"} +{"doc_count":2026,"split_key":264014,"timestamp":"2026-03-19T04:00:00.000Z"} +{"doc_count":999,"split_key":16509,"timestamp":"2026-03-19T04:00:00.000Z"} +{"doc_count":577,"split_key":398324,"timestamp":"2026-03-19T04:00:00.000Z"} +{"doc_count":489,"split_key":45102,"timestamp":"2026-03-19T04:00:00.000Z"} +{"doc_count":2080,"split_key":37963,"timestamp":"2026-03-19T05:00:00.000Z"} +{"doc_count":2012,"split_key":45102,"timestamp":"2026-03-19T05:00:00.000Z"} +{"doc_count":1804,"split_key":264014,"timestamp":"2026-03-19T05:00:00.000Z"} +{"doc_count":1045,"split_key":16509,"timestamp":"2026-03-19T05:00:00.000Z"} +{"doc_count":545,"split_key":209334,"timestamp":"2026-03-19T05:00:00.000Z"} +{"doc_count":1888,"split_key":45102,"timestamp":"2026-03-19T06:00:00.000Z"} +{"doc_count":1243,"split_key":37963,"timestamp":"2026-03-19T06:00:00.000Z"} +{"doc_count":1159,"split_key":264014,"timestamp":"2026-03-19T06:00:00.000Z"} +{"doc_count":733,"split_key":16509,"timestamp":"2026-03-19T06:00:00.000Z"} +{"doc_count":541,"split_key":209334,"timestamp":"2026-03-19T06:00:00.000Z"} +{"doc_count":1990,"split_key":45102,"timestamp":"2026-03-19T07:00:00.000Z"} +{"doc_count":1860,"split_key":264014,"timestamp":"2026-03-19T07:00:00.000Z"} +{"doc_count":1436,"split_key":37963,"timestamp":"2026-03-19T07:00:00.000Z"} +{"doc_count":772,"split_key":16509,"timestamp":"2026-03-19T07:00:00.000Z"} +{"doc_count":493,"split_key":209334,"timestamp":"2026-03-19T07:00:00.000Z"} +{"doc_count":8977,"split_key":213790,"timestamp":"2026-03-19T08:00:00.000Z"} +{"doc_count":1497,"split_key":264014,"timestamp":"2026-03-19T08:00:00.000Z"} +{"doc_count":1414,"split_key":37963,"timestamp":"2026-03-19T08:00:00.000Z"} +{"doc_count":999,"split_key":16509,"timestamp":"2026-03-19T08:00:00.000Z"} +{"doc_count":705,"split_key":45102,"timestamp":"2026-03-19T08:00:00.000Z"} +{"doc_count":4980,"split_key":51396,"timestamp":"2026-03-19T09:00:00.000Z"} +{"doc_count":1530,"split_key":264014,"timestamp":"2026-03-19T09:00:00.000Z"} +{"doc_count":1418,"split_key":37963,"timestamp":"2026-03-19T09:00:00.000Z"} +{"doc_count":1110,"split_key":16509,"timestamp":"2026-03-19T09:00:00.000Z"} +{"doc_count":808,"split_key":45102,"timestamp":"2026-03-19T09:00:00.000Z"} +{"doc_count":3792,"split_key":51396,"timestamp":"2026-03-19T10:00:00.000Z"} +{"doc_count":1344,"split_key":37963,"timestamp":"2026-03-19T10:00:00.000Z"} +{"doc_count":1025,"split_key":16509,"timestamp":"2026-03-19T10:00:00.000Z"} +{"doc_count":1001,"split_key":264014,"timestamp":"2026-03-19T10:00:00.000Z"} +{"doc_count":636,"split_key":45102,"timestamp":"2026-03-19T10:00:00.000Z"} +{"doc_count":1123,"split_key":264014,"timestamp":"2026-03-19T11:00:00.000Z"} +{"doc_count":1087,"split_key":16509,"timestamp":"2026-03-19T11:00:00.000Z"} +{"doc_count":459,"split_key":209334,"timestamp":"2026-03-19T11:00:00.000Z"} +{"doc_count":410,"split_key":37963,"timestamp":"2026-03-19T11:00:00.000Z"} +{"doc_count":404,"split_key":201814,"timestamp":"2026-03-19T11:00:00.000Z"} +{"doc_count":1573,"split_key":264014,"timestamp":"2026-03-19T12:00:00.000Z"} +{"doc_count":1085,"split_key":45102,"timestamp":"2026-03-19T12:00:00.000Z"} +{"doc_count":619,"split_key":209334,"timestamp":"2026-03-19T12:00:00.000Z"} +{"doc_count":439,"split_key":16509,"timestamp":"2026-03-19T12:00:00.000Z"} +{"doc_count":414,"split_key":201814,"timestamp":"2026-03-19T12:00:00.000Z"} +{"doc_count":2563,"split_key":63949,"timestamp":"2026-03-19T13:00:00.000Z"} +{"doc_count":1589,"split_key":264014,"timestamp":"2026-03-19T13:00:00.000Z"} +{"doc_count":1210,"split_key":45102,"timestamp":"2026-03-19T13:00:00.000Z"} +{"doc_count":646,"split_key":16509,"timestamp":"2026-03-19T13:00:00.000Z"} +{"doc_count":507,"split_key":209334,"timestamp":"2026-03-19T13:00:00.000Z"} +{"doc_count":5739,"split_key":63949,"timestamp":"2026-03-19T14:00:00.000Z"} +{"doc_count":1607,"split_key":264014,"timestamp":"2026-03-19T14:00:00.000Z"} +{"doc_count":1186,"split_key":45102,"timestamp":"2026-03-19T14:00:00.000Z"} +{"doc_count":973,"split_key":16509,"timestamp":"2026-03-19T14:00:00.000Z"} +{"doc_count":650,"split_key":14061,"timestamp":"2026-03-19T14:00:00.000Z"} +{"doc_count":1538,"split_key":264014,"timestamp":"2026-03-19T15:00:00.000Z"} +{"doc_count":1199,"split_key":45102,"timestamp":"2026-03-19T15:00:00.000Z"} +{"doc_count":807,"split_key":14061,"timestamp":"2026-03-19T15:00:00.000Z"} +{"doc_count":805,"split_key":16509,"timestamp":"2026-03-19T15:00:00.000Z"} +{"doc_count":395,"split_key":398324,"timestamp":"2026-03-19T15:00:00.000Z"} +{"doc_count":1519,"split_key":264014,"timestamp":"2026-03-19T16:00:00.000Z"} +{"doc_count":596,"split_key":16509,"timestamp":"2026-03-19T16:00:00.000Z"} +{"doc_count":379,"split_key":201814,"timestamp":"2026-03-19T16:00:00.000Z"} +{"doc_count":285,"split_key":398324,"timestamp":"2026-03-19T16:00:00.000Z"} +{"doc_count":264,"split_key":14061,"timestamp":"2026-03-19T16:00:00.000Z"} +{"doc_count":3999,"split_key":267325,"timestamp":"2026-03-19T17:00:00.000Z"} +{"doc_count":362,"split_key":201814,"timestamp":"2026-03-19T17:00:00.000Z"} +{"doc_count":324,"split_key":16509,"timestamp":"2026-03-19T17:00:00.000Z"} +{"doc_count":291,"split_key":138915,"timestamp":"2026-03-19T17:00:00.000Z"} +{"doc_count":238,"split_key":398324,"timestamp":"2026-03-19T17:00:00.000Z"} +{"doc_count":4169,"split_key":267325,"timestamp":"2026-03-19T18:00:00.000Z"} +{"doc_count":977,"split_key":16509,"timestamp":"2026-03-19T18:00:00.000Z"} +{"doc_count":449,"split_key":135377,"timestamp":"2026-03-19T18:00:00.000Z"} +{"doc_count":409,"split_key":138915,"timestamp":"2026-03-19T18:00:00.000Z"} +{"doc_count":375,"split_key":201814,"timestamp":"2026-03-19T18:00:00.000Z"} +{"doc_count":4490,"split_key":267325,"timestamp":"2026-03-19T19:00:00.000Z"} +{"doc_count":411,"split_key":398324,"timestamp":"2026-03-19T19:00:00.000Z"} +{"doc_count":389,"split_key":396982,"timestamp":"2026-03-19T19:00:00.000Z"} +{"doc_count":370,"split_key":16509,"timestamp":"2026-03-19T19:00:00.000Z"} +{"doc_count":359,"split_key":201814,"timestamp":"2026-03-19T19:00:00.000Z"} +{"doc_count":4543,"split_key":267325,"timestamp":"2026-03-19T20:00:00.000Z"} +{"doc_count":2736,"split_key":8615,"timestamp":"2026-03-19T20:00:00.000Z"} +{"doc_count":2368,"split_key":63949,"timestamp":"2026-03-19T20:00:00.000Z"} +{"doc_count":1282,"split_key":48090,"timestamp":"2026-03-19T20:00:00.000Z"} +{"doc_count":530,"split_key":398324,"timestamp":"2026-03-19T20:00:00.000Z"} +{"doc_count":7263,"split_key":8615,"timestamp":"2026-03-19T21:00:00.000Z"} +{"doc_count":6342,"split_key":63949,"timestamp":"2026-03-19T21:00:00.000Z"} +{"doc_count":4535,"split_key":267325,"timestamp":"2026-03-19T21:00:00.000Z"} +{"doc_count":744,"split_key":16509,"timestamp":"2026-03-19T21:00:00.000Z"} +{"doc_count":626,"split_key":209605,"timestamp":"2026-03-19T21:00:00.000Z"} +{"doc_count":6572,"split_key":63949,"timestamp":"2026-03-19T22:00:00.000Z"} +{"doc_count":4478,"split_key":267325,"timestamp":"2026-03-19T22:00:00.000Z"} +{"doc_count":1169,"split_key":45102,"timestamp":"2026-03-19T22:00:00.000Z"} +{"doc_count":781,"split_key":16509,"timestamp":"2026-03-19T22:00:00.000Z"} +{"doc_count":643,"split_key":209605,"timestamp":"2026-03-19T22:00:00.000Z"} +{"doc_count":6348,"split_key":63949,"timestamp":"2026-03-19T23:00:00.000Z"} +{"doc_count":5429,"split_key":209334,"timestamp":"2026-03-19T23:00:00.000Z"} +{"doc_count":4569,"split_key":267325,"timestamp":"2026-03-19T23:00:00.000Z"} +{"doc_count":1726,"split_key":45102,"timestamp":"2026-03-19T23:00:00.000Z"} +{"doc_count":1607,"split_key":37963,"timestamp":"2026-03-19T23:00:00.000Z"} +{"doc_count":7833,"split_key":209334,"timestamp":"2026-03-20T00:00:00.000Z"} +{"doc_count":4964,"split_key":63949,"timestamp":"2026-03-20T00:00:00.000Z"} +{"doc_count":4674,"split_key":267325,"timestamp":"2026-03-20T00:00:00.000Z"} +{"doc_count":1702,"split_key":45102,"timestamp":"2026-03-20T00:00:00.000Z"} +{"doc_count":1611,"split_key":37963,"timestamp":"2026-03-20T00:00:00.000Z"} +{"doc_count":4891,"split_key":209334,"timestamp":"2026-03-20T01:00:00.000Z"} +{"doc_count":627,"split_key":209605,"timestamp":"2026-03-20T01:00:00.000Z"} +{"doc_count":603,"split_key":37963,"timestamp":"2026-03-20T01:00:00.000Z"} +{"doc_count":494,"split_key":16509,"timestamp":"2026-03-20T01:00:00.000Z"} +{"doc_count":409,"split_key":398324,"timestamp":"2026-03-20T01:00:00.000Z"} +{"doc_count":619,"split_key":209605,"timestamp":"2026-03-20T02:00:00.000Z"} +{"doc_count":518,"split_key":398324,"timestamp":"2026-03-20T02:00:00.000Z"} +{"doc_count":399,"split_key":396982,"timestamp":"2026-03-20T02:00:00.000Z"} +{"doc_count":388,"split_key":201814,"timestamp":"2026-03-20T02:00:00.000Z"} +{"doc_count":269,"split_key":14061,"timestamp":"2026-03-20T02:00:00.000Z"} +{"doc_count":625,"split_key":209605,"timestamp":"2026-03-20T03:00:00.000Z"} +{"doc_count":586,"split_key":396982,"timestamp":"2026-03-20T03:00:00.000Z"} +{"doc_count":457,"split_key":398324,"timestamp":"2026-03-20T03:00:00.000Z"} +{"doc_count":394,"split_key":201814,"timestamp":"2026-03-20T03:00:00.000Z"} +{"doc_count":347,"split_key":16509,"timestamp":"2026-03-20T03:00:00.000Z"} +{"doc_count":890,"split_key":14061,"timestamp":"2026-03-20T04:00:00.000Z"} +{"doc_count":599,"split_key":209605,"timestamp":"2026-03-20T04:00:00.000Z"} +{"doc_count":443,"split_key":396982,"timestamp":"2026-03-20T04:00:00.000Z"} +{"doc_count":423,"split_key":16509,"timestamp":"2026-03-20T04:00:00.000Z"} +{"doc_count":381,"split_key":201814,"timestamp":"2026-03-20T04:00:00.000Z"} +{"doc_count":607,"split_key":398324,"timestamp":"2026-03-20T05:00:00.000Z"} +{"doc_count":483,"split_key":209605,"timestamp":"2026-03-20T05:00:00.000Z"} +{"doc_count":406,"split_key":14061,"timestamp":"2026-03-20T05:00:00.000Z"} +{"doc_count":402,"split_key":201814,"timestamp":"2026-03-20T05:00:00.000Z"} +{"doc_count":353,"split_key":396982,"timestamp":"2026-03-20T05:00:00.000Z"} +{"doc_count":541,"split_key":209605,"timestamp":"2026-03-20T06:00:00.000Z"} +{"doc_count":516,"split_key":24282,"timestamp":"2026-03-20T06:00:00.000Z"} +{"doc_count":372,"split_key":16509,"timestamp":"2026-03-20T06:00:00.000Z"} +{"doc_count":364,"split_key":201814,"timestamp":"2026-03-20T06:00:00.000Z"} +{"doc_count":354,"split_key":396982,"timestamp":"2026-03-20T06:00:00.000Z"} +{"doc_count":604,"split_key":209605,"timestamp":"2026-03-20T07:00:00.000Z"} +{"doc_count":460,"split_key":398324,"timestamp":"2026-03-20T07:00:00.000Z"} +{"doc_count":389,"split_key":396982,"timestamp":"2026-03-20T07:00:00.000Z"} +{"doc_count":378,"split_key":201814,"timestamp":"2026-03-20T07:00:00.000Z"} +{"doc_count":325,"split_key":16509,"timestamp":"2026-03-20T07:00:00.000Z"} +{"doc_count":690,"split_key":51167,"timestamp":"2026-03-20T08:00:00.000Z"} +{"doc_count":492,"split_key":209605,"timestamp":"2026-03-20T08:00:00.000Z"} +{"doc_count":392,"split_key":396982,"timestamp":"2026-03-20T08:00:00.000Z"} +{"doc_count":378,"split_key":201814,"timestamp":"2026-03-20T08:00:00.000Z"} +{"doc_count":323,"split_key":16509,"timestamp":"2026-03-20T08:00:00.000Z"} +{"doc_count":610,"split_key":51167,"timestamp":"2026-03-20T09:00:00.000Z"} +{"doc_count":463,"split_key":398324,"timestamp":"2026-03-20T09:00:00.000Z"} +{"doc_count":455,"split_key":209605,"timestamp":"2026-03-20T09:00:00.000Z"} +{"doc_count":449,"split_key":396982,"timestamp":"2026-03-20T09:00:00.000Z"} +{"doc_count":436,"split_key":16509,"timestamp":"2026-03-20T09:00:00.000Z"} +{"doc_count":4125,"split_key":8615,"timestamp":"2026-03-20T10:00:00.000Z"} +{"doc_count":776,"split_key":45102,"timestamp":"2026-03-20T10:00:00.000Z"} +{"doc_count":646,"split_key":51167,"timestamp":"2026-03-20T10:00:00.000Z"} +{"doc_count":497,"split_key":16509,"timestamp":"2026-03-20T10:00:00.000Z"} +{"doc_count":468,"split_key":201814,"timestamp":"2026-03-20T10:00:00.000Z"} +{"doc_count":1690,"split_key":45102,"timestamp":"2026-03-20T11:00:00.000Z"} +{"doc_count":974,"split_key":209334,"timestamp":"2026-03-20T11:00:00.000Z"} +{"doc_count":604,"split_key":51167,"timestamp":"2026-03-20T11:00:00.000Z"} +{"doc_count":555,"split_key":209605,"timestamp":"2026-03-20T11:00:00.000Z"} +{"doc_count":418,"split_key":23674,"timestamp":"2026-03-20T11:00:00.000Z"} +{"doc_count":1699,"split_key":45102,"timestamp":"2026-03-20T12:00:00.000Z"} +{"doc_count":643,"split_key":51167,"timestamp":"2026-03-20T12:00:00.000Z"} +{"doc_count":446,"split_key":23674,"timestamp":"2026-03-20T12:00:00.000Z"} +{"doc_count":384,"split_key":14061,"timestamp":"2026-03-20T12:00:00.000Z"} +{"doc_count":380,"split_key":396982,"timestamp":"2026-03-20T12:00:00.000Z"} +{"doc_count":1796,"split_key":14061,"timestamp":"2026-03-20T13:00:00.000Z"} +{"doc_count":624,"split_key":51167,"timestamp":"2026-03-20T13:00:00.000Z"} +{"doc_count":593,"split_key":209605,"timestamp":"2026-03-20T13:00:00.000Z"} +{"doc_count":517,"split_key":16509,"timestamp":"2026-03-20T13:00:00.000Z"} +{"doc_count":484,"split_key":23674,"timestamp":"2026-03-20T13:00:00.000Z"} +{"doc_count":5539,"split_key":14061,"timestamp":"2026-03-20T14:00:00.000Z"} +{"doc_count":647,"split_key":51167,"timestamp":"2026-03-20T14:00:00.000Z"} +{"doc_count":607,"split_key":209605,"timestamp":"2026-03-20T14:00:00.000Z"} +{"doc_count":443,"split_key":23674,"timestamp":"2026-03-20T14:00:00.000Z"} +{"doc_count":402,"split_key":201814,"timestamp":"2026-03-20T14:00:00.000Z"} +{"doc_count":672,"split_key":51167,"timestamp":"2026-03-20T15:00:00.000Z"} +{"doc_count":612,"split_key":209605,"timestamp":"2026-03-20T15:00:00.000Z"} +{"doc_count":498,"split_key":23674,"timestamp":"2026-03-20T15:00:00.000Z"} +{"doc_count":396,"split_key":43595,"timestamp":"2026-03-20T15:00:00.000Z"} +{"doc_count":390,"split_key":201814,"timestamp":"2026-03-20T15:00:00.000Z"} +{"doc_count":612,"split_key":209605,"timestamp":"2026-03-20T16:00:00.000Z"} +{"doc_count":607,"split_key":51167,"timestamp":"2026-03-20T16:00:00.000Z"} +{"doc_count":572,"split_key":267325,"timestamp":"2026-03-20T16:00:00.000Z"} +{"doc_count":495,"split_key":23674,"timestamp":"2026-03-20T16:00:00.000Z"} +{"doc_count":455,"split_key":398324,"timestamp":"2026-03-20T16:00:00.000Z"} +{"doc_count":2325,"split_key":267325,"timestamp":"2026-03-20T17:00:00.000Z"} +{"doc_count":1812,"split_key":209334,"timestamp":"2026-03-20T17:00:00.000Z"} +{"doc_count":627,"split_key":136188,"timestamp":"2026-03-20T17:00:00.000Z"} +{"doc_count":614,"split_key":209605,"timestamp":"2026-03-20T17:00:00.000Z"} +{"doc_count":608,"split_key":51167,"timestamp":"2026-03-20T17:00:00.000Z"} +{"doc_count":2295,"split_key":267325,"timestamp":"2026-03-20T18:00:00.000Z"} +{"doc_count":1138,"split_key":37963,"timestamp":"2026-03-20T18:00:00.000Z"} +{"doc_count":556,"split_key":23674,"timestamp":"2026-03-20T18:00:00.000Z"} +{"doc_count":455,"split_key":209605,"timestamp":"2026-03-20T18:00:00.000Z"} +{"doc_count":449,"split_key":16509,"timestamp":"2026-03-20T18:00:00.000Z"} +{"doc_count":2255,"split_key":267325,"timestamp":"2026-03-20T19:00:00.000Z"} +{"doc_count":566,"split_key":398324,"timestamp":"2026-03-20T19:00:00.000Z"} +{"doc_count":564,"split_key":23674,"timestamp":"2026-03-20T19:00:00.000Z"} +{"doc_count":511,"split_key":209605,"timestamp":"2026-03-20T19:00:00.000Z"} +{"doc_count":402,"split_key":201814,"timestamp":"2026-03-20T19:00:00.000Z"} +{"doc_count":2155,"split_key":267325,"timestamp":"2026-03-20T20:00:00.000Z"} +{"doc_count":815,"split_key":51396,"timestamp":"2026-03-20T20:00:00.000Z"} +{"doc_count":618,"split_key":209605,"timestamp":"2026-03-20T20:00:00.000Z"} +{"doc_count":432,"split_key":396982,"timestamp":"2026-03-20T20:00:00.000Z"} +{"doc_count":380,"split_key":201814,"timestamp":"2026-03-20T20:00:00.000Z"} +{"doc_count":2267,"split_key":267325,"timestamp":"2026-03-20T21:00:00.000Z"} +{"doc_count":2105,"split_key":37963,"timestamp":"2026-03-20T21:00:00.000Z"} +{"doc_count":761,"split_key":51396,"timestamp":"2026-03-20T21:00:00.000Z"} +{"doc_count":412,"split_key":209605,"timestamp":"2026-03-20T21:00:00.000Z"} +{"doc_count":394,"split_key":398324,"timestamp":"2026-03-20T21:00:00.000Z"} +{"doc_count":2318,"split_key":267325,"timestamp":"2026-03-20T22:00:00.000Z"} +{"doc_count":2098,"split_key":37963,"timestamp":"2026-03-20T22:00:00.000Z"} +{"doc_count":803,"split_key":51396,"timestamp":"2026-03-20T22:00:00.000Z"} +{"doc_count":475,"split_key":209605,"timestamp":"2026-03-20T22:00:00.000Z"} +{"doc_count":434,"split_key":396982,"timestamp":"2026-03-20T22:00:00.000Z"} +{"doc_count":5265,"split_key":209334,"timestamp":"2026-03-20T23:00:00.000Z"} +{"doc_count":2288,"split_key":267325,"timestamp":"2026-03-20T23:00:00.000Z"} +{"doc_count":831,"split_key":51396,"timestamp":"2026-03-20T23:00:00.000Z"} +{"doc_count":498,"split_key":209605,"timestamp":"2026-03-20T23:00:00.000Z"} +{"doc_count":364,"split_key":201814,"timestamp":"2026-03-20T23:00:00.000Z"} +{"doc_count":5792,"split_key":209334,"timestamp":"2026-03-21T00:00:00.000Z"} +{"doc_count":2285,"split_key":267325,"timestamp":"2026-03-21T00:00:00.000Z"} +{"doc_count":835,"split_key":51396,"timestamp":"2026-03-21T00:00:00.000Z"} +{"doc_count":766,"split_key":17552,"timestamp":"2026-03-21T00:00:00.000Z"} +{"doc_count":551,"split_key":209605,"timestamp":"2026-03-21T00:00:00.000Z"} +{"doc_count":16406,"split_key":267325,"timestamp":"2026-03-21T01:00:00.000Z"} +{"doc_count":3548,"split_key":209334,"timestamp":"2026-03-21T01:00:00.000Z"} +{"doc_count":985,"split_key":17552,"timestamp":"2026-03-21T01:00:00.000Z"} +{"doc_count":942,"split_key":51396,"timestamp":"2026-03-21T01:00:00.000Z"} +{"doc_count":622,"split_key":45102,"timestamp":"2026-03-21T01:00:00.000Z"} +{"doc_count":25765,"split_key":267325,"timestamp":"2026-03-21T02:00:00.000Z"} +{"doc_count":1306,"split_key":45102,"timestamp":"2026-03-21T02:00:00.000Z"} +{"doc_count":1077,"split_key":17552,"timestamp":"2026-03-21T02:00:00.000Z"} +{"doc_count":839,"split_key":51396,"timestamp":"2026-03-21T02:00:00.000Z"} +{"doc_count":487,"split_key":209605,"timestamp":"2026-03-21T02:00:00.000Z"} +{"doc_count":25856,"split_key":267325,"timestamp":"2026-03-21T03:00:00.000Z"} +{"doc_count":1269,"split_key":45102,"timestamp":"2026-03-21T03:00:00.000Z"} +{"doc_count":1138,"split_key":17552,"timestamp":"2026-03-21T03:00:00.000Z"} +{"doc_count":712,"split_key":51396,"timestamp":"2026-03-21T03:00:00.000Z"} +{"doc_count":613,"split_key":209605,"timestamp":"2026-03-21T03:00:00.000Z"} +{"doc_count":26222,"split_key":267325,"timestamp":"2026-03-21T04:00:00.000Z"} +{"doc_count":1292,"split_key":48090,"timestamp":"2026-03-21T04:00:00.000Z"} +{"doc_count":1256,"split_key":45102,"timestamp":"2026-03-21T04:00:00.000Z"} +{"doc_count":741,"split_key":51396,"timestamp":"2026-03-21T04:00:00.000Z"} +{"doc_count":682,"split_key":209605,"timestamp":"2026-03-21T04:00:00.000Z"} +{"doc_count":43769,"split_key":211590,"timestamp":"2026-03-21T05:00:00.000Z"} +{"doc_count":25640,"split_key":267325,"timestamp":"2026-03-21T05:00:00.000Z"} +{"doc_count":900,"split_key":51396,"timestamp":"2026-03-21T05:00:00.000Z"} +{"doc_count":601,"split_key":398324,"timestamp":"2026-03-21T05:00:00.000Z"} +{"doc_count":464,"split_key":209605,"timestamp":"2026-03-21T05:00:00.000Z"} +{"doc_count":25672,"split_key":267325,"timestamp":"2026-03-21T06:00:00.000Z"} +{"doc_count":769,"split_key":51396,"timestamp":"2026-03-21T06:00:00.000Z"} +{"doc_count":558,"split_key":209605,"timestamp":"2026-03-21T06:00:00.000Z"} +{"doc_count":507,"split_key":398324,"timestamp":"2026-03-21T06:00:00.000Z"} +{"doc_count":376,"split_key":16509,"timestamp":"2026-03-21T06:00:00.000Z"} +{"doc_count":25265,"split_key":267325,"timestamp":"2026-03-21T07:00:00.000Z"} +{"doc_count":11320,"split_key":211590,"timestamp":"2026-03-21T07:00:00.000Z"} +{"doc_count":1278,"split_key":48090,"timestamp":"2026-03-21T07:00:00.000Z"} +{"doc_count":770,"split_key":51396,"timestamp":"2026-03-21T07:00:00.000Z"} +{"doc_count":478,"split_key":209605,"timestamp":"2026-03-21T07:00:00.000Z"} +{"doc_count":25637,"split_key":267325,"timestamp":"2026-03-21T08:00:00.000Z"} +{"doc_count":4350,"split_key":63949,"timestamp":"2026-03-21T08:00:00.000Z"} +{"doc_count":732,"split_key":51396,"timestamp":"2026-03-21T08:00:00.000Z"} +{"doc_count":665,"split_key":211590,"timestamp":"2026-03-21T08:00:00.000Z"} +{"doc_count":561,"split_key":398324,"timestamp":"2026-03-21T08:00:00.000Z"} +{"doc_count":25473,"split_key":267325,"timestamp":"2026-03-21T09:00:00.000Z"} +{"doc_count":2522,"split_key":63949,"timestamp":"2026-03-21T09:00:00.000Z"} +{"doc_count":948,"split_key":51396,"timestamp":"2026-03-21T09:00:00.000Z"} +{"doc_count":514,"split_key":16509,"timestamp":"2026-03-21T09:00:00.000Z"} +{"doc_count":455,"split_key":209334,"timestamp":"2026-03-21T09:00:00.000Z"} +{"doc_count":25803,"split_key":267325,"timestamp":"2026-03-21T10:00:00.000Z"} +{"doc_count":1997,"split_key":211590,"timestamp":"2026-03-21T10:00:00.000Z"} +{"doc_count":1612,"split_key":37963,"timestamp":"2026-03-21T10:00:00.000Z"} +{"doc_count":887,"split_key":51396,"timestamp":"2026-03-21T10:00:00.000Z"} +{"doc_count":608,"split_key":209605,"timestamp":"2026-03-21T10:00:00.000Z"} +{"doc_count":25668,"split_key":267325,"timestamp":"2026-03-21T11:00:00.000Z"} +{"doc_count":876,"split_key":51396,"timestamp":"2026-03-21T11:00:00.000Z"} +{"doc_count":556,"split_key":215925,"timestamp":"2026-03-21T11:00:00.000Z"} +{"doc_count":420,"split_key":209605,"timestamp":"2026-03-21T11:00:00.000Z"} +{"doc_count":360,"split_key":201814,"timestamp":"2026-03-21T11:00:00.000Z"} +{"doc_count":13712,"split_key":267325,"timestamp":"2026-03-21T12:00:00.000Z"} +{"doc_count":1167,"split_key":48090,"timestamp":"2026-03-21T12:00:00.000Z"} +{"doc_count":944,"split_key":51396,"timestamp":"2026-03-21T12:00:00.000Z"} +{"doc_count":560,"split_key":209605,"timestamp":"2026-03-21T12:00:00.000Z"} +{"doc_count":440,"split_key":16509,"timestamp":"2026-03-21T12:00:00.000Z"} +{"doc_count":915,"split_key":51396,"timestamp":"2026-03-21T13:00:00.000Z"} +{"doc_count":687,"split_key":264014,"timestamp":"2026-03-21T13:00:00.000Z"} +{"doc_count":570,"split_key":209605,"timestamp":"2026-03-21T13:00:00.000Z"} +{"doc_count":449,"split_key":16509,"timestamp":"2026-03-21T13:00:00.000Z"} +{"doc_count":381,"split_key":396982,"timestamp":"2026-03-21T13:00:00.000Z"} +{"doc_count":2395,"split_key":264014,"timestamp":"2026-03-21T14:00:00.000Z"} +{"doc_count":931,"split_key":51396,"timestamp":"2026-03-21T14:00:00.000Z"} +{"doc_count":593,"split_key":24940,"timestamp":"2026-03-21T14:00:00.000Z"} +{"doc_count":583,"split_key":209605,"timestamp":"2026-03-21T14:00:00.000Z"} +{"doc_count":453,"split_key":4811,"timestamp":"2026-03-21T14:00:00.000Z"} +{"doc_count":3684,"split_key":24940,"timestamp":"2026-03-21T15:00:00.000Z"} +{"doc_count":2364,"split_key":264014,"timestamp":"2026-03-21T15:00:00.000Z"} +{"doc_count":2150,"split_key":212477,"timestamp":"2026-03-21T15:00:00.000Z"} +{"doc_count":1829,"split_key":58212,"timestamp":"2026-03-21T15:00:00.000Z"} +{"doc_count":1078,"split_key":48090,"timestamp":"2026-03-21T15:00:00.000Z"} +{"doc_count":33729,"split_key":53667,"timestamp":"2026-03-21T16:00:00.000Z"} +{"doc_count":2876,"split_key":24940,"timestamp":"2026-03-21T16:00:00.000Z"} +{"doc_count":1089,"split_key":45102,"timestamp":"2026-03-21T16:00:00.000Z"} +{"doc_count":1020,"split_key":212477,"timestamp":"2026-03-21T16:00:00.000Z"} +{"doc_count":962,"split_key":51396,"timestamp":"2026-03-21T16:00:00.000Z"} +{"doc_count":1347,"split_key":45102,"timestamp":"2026-03-21T17:00:00.000Z"} +{"doc_count":1109,"split_key":24940,"timestamp":"2026-03-21T17:00:00.000Z"} +{"doc_count":913,"split_key":51396,"timestamp":"2026-03-21T17:00:00.000Z"} +{"doc_count":879,"split_key":27712,"timestamp":"2026-03-21T17:00:00.000Z"} +{"doc_count":844,"split_key":58212,"timestamp":"2026-03-21T17:00:00.000Z"} +{"doc_count":5774,"split_key":265131,"timestamp":"2026-03-21T18:00:00.000Z"} +{"doc_count":2106,"split_key":27712,"timestamp":"2026-03-21T18:00:00.000Z"} +{"doc_count":1360,"split_key":45102,"timestamp":"2026-03-21T18:00:00.000Z"} +{"doc_count":840,"split_key":51396,"timestamp":"2026-03-21T18:00:00.000Z"} +{"doc_count":637,"split_key":209605,"timestamp":"2026-03-21T18:00:00.000Z"} +{"doc_count":8465,"split_key":265131,"timestamp":"2026-03-21T19:00:00.000Z"} +{"doc_count":895,"split_key":51396,"timestamp":"2026-03-21T19:00:00.000Z"} +{"doc_count":825,"split_key":45102,"timestamp":"2026-03-21T19:00:00.000Z"} +{"doc_count":604,"split_key":4811,"timestamp":"2026-03-21T19:00:00.000Z"} +{"doc_count":538,"split_key":396982,"timestamp":"2026-03-21T19:00:00.000Z"} +{"doc_count":8627,"split_key":265131,"timestamp":"2026-03-21T20:00:00.000Z"} +{"doc_count":1292,"split_key":48090,"timestamp":"2026-03-21T20:00:00.000Z"} +{"doc_count":853,"split_key":51396,"timestamp":"2026-03-21T20:00:00.000Z"} +{"doc_count":648,"split_key":4811,"timestamp":"2026-03-21T20:00:00.000Z"} +{"doc_count":593,"split_key":209605,"timestamp":"2026-03-21T20:00:00.000Z"} +{"doc_count":8671,"split_key":265131,"timestamp":"2026-03-21T21:00:00.000Z"} +{"doc_count":944,"split_key":51396,"timestamp":"2026-03-21T21:00:00.000Z"} +{"doc_count":576,"split_key":209605,"timestamp":"2026-03-21T21:00:00.000Z"} +{"doc_count":499,"split_key":4811,"timestamp":"2026-03-21T21:00:00.000Z"} +{"doc_count":498,"split_key":396982,"timestamp":"2026-03-21T21:00:00.000Z"} +{"doc_count":8753,"split_key":265131,"timestamp":"2026-03-21T22:00:00.000Z"} +{"doc_count":857,"split_key":51396,"timestamp":"2026-03-21T22:00:00.000Z"} +{"doc_count":424,"split_key":396982,"timestamp":"2026-03-21T22:00:00.000Z"} +{"doc_count":380,"split_key":201814,"timestamp":"2026-03-21T22:00:00.000Z"} +{"doc_count":297,"split_key":209605,"timestamp":"2026-03-21T22:00:00.000Z"} +{"doc_count":8626,"split_key":265131,"timestamp":"2026-03-21T23:00:00.000Z"} +{"doc_count":2866,"split_key":209334,"timestamp":"2026-03-21T23:00:00.000Z"} +{"doc_count":992,"split_key":214295,"timestamp":"2026-03-21T23:00:00.000Z"} +{"doc_count":875,"split_key":51396,"timestamp":"2026-03-21T23:00:00.000Z"} +{"doc_count":369,"split_key":396982,"timestamp":"2026-03-21T23:00:00.000Z"} +{"doc_count":6909,"split_key":209334,"timestamp":"2026-03-22T00:00:00.000Z"} +{"doc_count":5619,"split_key":265131,"timestamp":"2026-03-22T00:00:00.000Z"} +{"doc_count":2456,"split_key":267325,"timestamp":"2026-03-22T00:00:00.000Z"} +{"doc_count":1570,"split_key":63949,"timestamp":"2026-03-22T00:00:00.000Z"} +{"doc_count":703,"split_key":51396,"timestamp":"2026-03-22T00:00:00.000Z"} +{"doc_count":8751,"split_key":267325,"timestamp":"2026-03-22T01:00:00.000Z"} +{"doc_count":3927,"split_key":209334,"timestamp":"2026-03-22T01:00:00.000Z"} +{"doc_count":2172,"split_key":4134,"timestamp":"2026-03-22T01:00:00.000Z"} +{"doc_count":839,"split_key":51396,"timestamp":"2026-03-22T01:00:00.000Z"} +{"doc_count":657,"split_key":14061,"timestamp":"2026-03-22T01:00:00.000Z"} +{"doc_count":8724,"split_key":267325,"timestamp":"2026-03-22T02:00:00.000Z"} +{"doc_count":896,"split_key":51396,"timestamp":"2026-03-22T02:00:00.000Z"} +{"doc_count":557,"split_key":4134,"timestamp":"2026-03-22T02:00:00.000Z"} +{"doc_count":480,"split_key":396982,"timestamp":"2026-03-22T02:00:00.000Z"} +{"doc_count":399,"split_key":398324,"timestamp":"2026-03-22T02:00:00.000Z"} +{"doc_count":8767,"split_key":267325,"timestamp":"2026-03-22T03:00:00.000Z"} +{"doc_count":793,"split_key":51396,"timestamp":"2026-03-22T03:00:00.000Z"} +{"doc_count":736,"split_key":396982,"timestamp":"2026-03-22T03:00:00.000Z"} +{"doc_count":404,"split_key":398324,"timestamp":"2026-03-22T03:00:00.000Z"} +{"doc_count":354,"split_key":201814,"timestamp":"2026-03-22T03:00:00.000Z"} +{"doc_count":8814,"split_key":267325,"timestamp":"2026-03-22T04:00:00.000Z"} +{"doc_count":790,"split_key":51396,"timestamp":"2026-03-22T04:00:00.000Z"} +{"doc_count":605,"split_key":396982,"timestamp":"2026-03-22T04:00:00.000Z"} +{"doc_count":404,"split_key":16509,"timestamp":"2026-03-22T04:00:00.000Z"} +{"doc_count":367,"split_key":201814,"timestamp":"2026-03-22T04:00:00.000Z"} +{"doc_count":8847,"split_key":267325,"timestamp":"2026-03-22T05:00:00.000Z"} +{"doc_count":762,"split_key":51396,"timestamp":"2026-03-22T05:00:00.000Z"} +{"doc_count":480,"split_key":396982,"timestamp":"2026-03-22T05:00:00.000Z"} +{"doc_count":406,"split_key":398324,"timestamp":"2026-03-22T05:00:00.000Z"} +{"doc_count":376,"split_key":201814,"timestamp":"2026-03-22T05:00:00.000Z"} +{"doc_count":8612,"split_key":267325,"timestamp":"2026-03-22T06:00:00.000Z"} +{"doc_count":885,"split_key":51396,"timestamp":"2026-03-22T06:00:00.000Z"} +{"doc_count":520,"split_key":396982,"timestamp":"2026-03-22T06:00:00.000Z"} +{"doc_count":509,"split_key":16509,"timestamp":"2026-03-22T06:00:00.000Z"} +{"doc_count":468,"split_key":398324,"timestamp":"2026-03-22T06:00:00.000Z"} +{"doc_count":8901,"split_key":267325,"timestamp":"2026-03-22T07:00:00.000Z"} +{"doc_count":743,"split_key":51396,"timestamp":"2026-03-22T07:00:00.000Z"} +{"doc_count":578,"split_key":396982,"timestamp":"2026-03-22T07:00:00.000Z"} +{"doc_count":550,"split_key":398324,"timestamp":"2026-03-22T07:00:00.000Z"} +{"doc_count":460,"split_key":6568,"timestamp":"2026-03-22T07:00:00.000Z"} +{"doc_count":8533,"split_key":267325,"timestamp":"2026-03-22T08:00:00.000Z"} +{"doc_count":893,"split_key":51396,"timestamp":"2026-03-22T08:00:00.000Z"} +{"doc_count":796,"split_key":37963,"timestamp":"2026-03-22T08:00:00.000Z"} +{"doc_count":585,"split_key":396982,"timestamp":"2026-03-22T08:00:00.000Z"} +{"doc_count":518,"split_key":6568,"timestamp":"2026-03-22T08:00:00.000Z"} +{"doc_count":8812,"split_key":267325,"timestamp":"2026-03-22T09:00:00.000Z"} +{"doc_count":877,"split_key":37963,"timestamp":"2026-03-22T09:00:00.000Z"} +{"doc_count":743,"split_key":51396,"timestamp":"2026-03-22T09:00:00.000Z"} +{"doc_count":700,"split_key":396982,"timestamp":"2026-03-22T09:00:00.000Z"} +{"doc_count":567,"split_key":6568,"timestamp":"2026-03-22T09:00:00.000Z"} +{"doc_count":8786,"split_key":267325,"timestamp":"2026-03-22T10:00:00.000Z"} +{"doc_count":1057,"split_key":45102,"timestamp":"2026-03-22T10:00:00.000Z"} +{"doc_count":868,"split_key":37963,"timestamp":"2026-03-22T10:00:00.000Z"} +{"doc_count":825,"split_key":51396,"timestamp":"2026-03-22T10:00:00.000Z"} +{"doc_count":599,"split_key":6568,"timestamp":"2026-03-22T10:00:00.000Z"} +{"doc_count":8824,"split_key":267325,"timestamp":"2026-03-22T11:00:00.000Z"} +{"doc_count":1644,"split_key":45102,"timestamp":"2026-03-22T11:00:00.000Z"} +{"doc_count":1619,"split_key":209334,"timestamp":"2026-03-22T11:00:00.000Z"} +{"doc_count":1580,"split_key":4134,"timestamp":"2026-03-22T11:00:00.000Z"} +{"doc_count":885,"split_key":37963,"timestamp":"2026-03-22T11:00:00.000Z"} +{"doc_count":8942,"split_key":267325,"timestamp":"2026-03-22T12:00:00.000Z"} +{"doc_count":7100,"split_key":4134,"timestamp":"2026-03-22T12:00:00.000Z"} +{"doc_count":2317,"split_key":45102,"timestamp":"2026-03-22T12:00:00.000Z"} +{"doc_count":956,"split_key":209334,"timestamp":"2026-03-22T12:00:00.000Z"} +{"doc_count":922,"split_key":51396,"timestamp":"2026-03-22T12:00:00.000Z"} +{"doc_count":8857,"split_key":267325,"timestamp":"2026-03-22T13:00:00.000Z"} +{"doc_count":1778,"split_key":45102,"timestamp":"2026-03-22T13:00:00.000Z"} +{"doc_count":895,"split_key":209334,"timestamp":"2026-03-22T13:00:00.000Z"} +{"doc_count":716,"split_key":6568,"timestamp":"2026-03-22T13:00:00.000Z"} +{"doc_count":525,"split_key":51396,"timestamp":"2026-03-22T13:00:00.000Z"} +{"doc_count":8609,"split_key":267325,"timestamp":"2026-03-22T14:00:00.000Z"} +{"doc_count":955,"split_key":14061,"timestamp":"2026-03-22T14:00:00.000Z"} +{"doc_count":887,"split_key":45102,"timestamp":"2026-03-22T14:00:00.000Z"} +{"doc_count":810,"split_key":51396,"timestamp":"2026-03-22T14:00:00.000Z"} +{"doc_count":729,"split_key":6568,"timestamp":"2026-03-22T14:00:00.000Z"} +{"doc_count":1917,"split_key":267325,"timestamp":"2026-03-22T15:00:00.000Z"} +{"doc_count":889,"split_key":45102,"timestamp":"2026-03-22T15:00:00.000Z"} +{"doc_count":842,"split_key":51396,"timestamp":"2026-03-22T15:00:00.000Z"} +{"doc_count":825,"split_key":209334,"timestamp":"2026-03-22T15:00:00.000Z"} +{"doc_count":761,"split_key":6568,"timestamp":"2026-03-22T15:00:00.000Z"} +{"doc_count":1616,"split_key":267325,"timestamp":"2026-03-22T16:00:00.000Z"} +{"doc_count":889,"split_key":51396,"timestamp":"2026-03-22T16:00:00.000Z"} +{"doc_count":808,"split_key":45102,"timestamp":"2026-03-22T16:00:00.000Z"} +{"doc_count":791,"split_key":6568,"timestamp":"2026-03-22T16:00:00.000Z"} +{"doc_count":633,"split_key":209334,"timestamp":"2026-03-22T16:00:00.000Z"} +{"doc_count":3515,"split_key":270923,"timestamp":"2026-03-22T17:00:00.000Z"} +{"doc_count":930,"split_key":267325,"timestamp":"2026-03-22T17:00:00.000Z"} +{"doc_count":814,"split_key":51396,"timestamp":"2026-03-22T17:00:00.000Z"} +{"doc_count":810,"split_key":6568,"timestamp":"2026-03-22T17:00:00.000Z"} +{"doc_count":708,"split_key":209334,"timestamp":"2026-03-22T17:00:00.000Z"} +{"doc_count":6663,"split_key":270923,"timestamp":"2026-03-22T18:00:00.000Z"} +{"doc_count":856,"split_key":209334,"timestamp":"2026-03-22T18:00:00.000Z"} +{"doc_count":791,"split_key":6568,"timestamp":"2026-03-22T18:00:00.000Z"} +{"doc_count":761,"split_key":51396,"timestamp":"2026-03-22T18:00:00.000Z"} +{"doc_count":687,"split_key":23674,"timestamp":"2026-03-22T18:00:00.000Z"} +{"doc_count":6806,"split_key":270923,"timestamp":"2026-03-22T19:00:00.000Z"} +{"doc_count":868,"split_key":209334,"timestamp":"2026-03-22T19:00:00.000Z"} +{"doc_count":843,"split_key":6568,"timestamp":"2026-03-22T19:00:00.000Z"} +{"doc_count":815,"split_key":51396,"timestamp":"2026-03-22T19:00:00.000Z"} +{"doc_count":698,"split_key":23674,"timestamp":"2026-03-22T19:00:00.000Z"} +{"doc_count":6828,"split_key":270923,"timestamp":"2026-03-22T20:00:00.000Z"} +{"doc_count":1288,"split_key":16509,"timestamp":"2026-03-22T20:00:00.000Z"} +{"doc_count":910,"split_key":6568,"timestamp":"2026-03-22T20:00:00.000Z"} +{"doc_count":778,"split_key":51396,"timestamp":"2026-03-22T20:00:00.000Z"} +{"doc_count":723,"split_key":23674,"timestamp":"2026-03-22T20:00:00.000Z"} +{"doc_count":9099,"split_key":16509,"timestamp":"2026-03-22T21:00:00.000Z"} +{"doc_count":6678,"split_key":270923,"timestamp":"2026-03-22T21:00:00.000Z"} +{"doc_count":2779,"split_key":14618,"timestamp":"2026-03-22T21:00:00.000Z"} +{"doc_count":833,"split_key":6568,"timestamp":"2026-03-22T21:00:00.000Z"} +{"doc_count":682,"split_key":209334,"timestamp":"2026-03-22T21:00:00.000Z"} +{"doc_count":11640,"split_key":16509,"timestamp":"2026-03-22T22:00:00.000Z"} +{"doc_count":7072,"split_key":270923,"timestamp":"2026-03-22T22:00:00.000Z"} +{"doc_count":2855,"split_key":14618,"timestamp":"2026-03-22T22:00:00.000Z"} +{"doc_count":1091,"split_key":37963,"timestamp":"2026-03-22T22:00:00.000Z"} +{"doc_count":748,"split_key":6568,"timestamp":"2026-03-22T22:00:00.000Z"} +{"doc_count":8967,"split_key":16509,"timestamp":"2026-03-22T23:00:00.000Z"} +{"doc_count":6644,"split_key":270923,"timestamp":"2026-03-22T23:00:00.000Z"} +{"doc_count":5477,"split_key":209334,"timestamp":"2026-03-22T23:00:00.000Z"} +{"doc_count":2531,"split_key":14618,"timestamp":"2026-03-22T23:00:00.000Z"} +{"doc_count":1272,"split_key":37963,"timestamp":"2026-03-22T23:00:00.000Z"} +{"doc_count":6847,"split_key":270923,"timestamp":"2026-03-23T00:00:00.000Z"} +{"doc_count":5220,"split_key":209334,"timestamp":"2026-03-23T00:00:00.000Z"} +{"doc_count":1719,"split_key":14618,"timestamp":"2026-03-23T00:00:00.000Z"} +{"doc_count":1245,"split_key":37963,"timestamp":"2026-03-23T00:00:00.000Z"} +{"doc_count":817,"split_key":51396,"timestamp":"2026-03-23T00:00:00.000Z"} +{"doc_count":6351,"split_key":262880,"timestamp":"2026-03-23T01:00:00.000Z"} +{"doc_count":4521,"split_key":209334,"timestamp":"2026-03-23T01:00:00.000Z"} +{"doc_count":1777,"split_key":14618,"timestamp":"2026-03-23T01:00:00.000Z"} +{"doc_count":965,"split_key":37963,"timestamp":"2026-03-23T01:00:00.000Z"} +{"doc_count":776,"split_key":51396,"timestamp":"2026-03-23T01:00:00.000Z"} +{"doc_count":6195,"split_key":262880,"timestamp":"2026-03-23T02:00:00.000Z"} +{"doc_count":1426,"split_key":45102,"timestamp":"2026-03-23T02:00:00.000Z"} +{"doc_count":1056,"split_key":14618,"timestamp":"2026-03-23T02:00:00.000Z"} +{"doc_count":792,"split_key":51396,"timestamp":"2026-03-23T02:00:00.000Z"} +{"doc_count":715,"split_key":23674,"timestamp":"2026-03-23T02:00:00.000Z"} +{"doc_count":6629,"split_key":262880,"timestamp":"2026-03-23T03:00:00.000Z"} +{"doc_count":1415,"split_key":45102,"timestamp":"2026-03-23T03:00:00.000Z"} +{"doc_count":721,"split_key":23674,"timestamp":"2026-03-23T03:00:00.000Z"} +{"doc_count":701,"split_key":51396,"timestamp":"2026-03-23T03:00:00.000Z"} +{"doc_count":595,"split_key":16509,"timestamp":"2026-03-23T03:00:00.000Z"} +{"doc_count":6777,"split_key":262880,"timestamp":"2026-03-23T04:00:00.000Z"} +{"doc_count":1434,"split_key":45102,"timestamp":"2026-03-23T04:00:00.000Z"} +{"doc_count":804,"split_key":51396,"timestamp":"2026-03-23T04:00:00.000Z"} +{"doc_count":734,"split_key":23674,"timestamp":"2026-03-23T04:00:00.000Z"} +{"doc_count":614,"split_key":37963,"timestamp":"2026-03-23T04:00:00.000Z"} +{"doc_count":6928,"split_key":262880,"timestamp":"2026-03-23T05:00:00.000Z"} +{"doc_count":738,"split_key":23674,"timestamp":"2026-03-23T05:00:00.000Z"} +{"doc_count":698,"split_key":16509,"timestamp":"2026-03-23T05:00:00.000Z"} +{"doc_count":693,"split_key":51396,"timestamp":"2026-03-23T05:00:00.000Z"} +{"doc_count":544,"split_key":24323,"timestamp":"2026-03-23T05:00:00.000Z"} +{"doc_count":6781,"split_key":262880,"timestamp":"2026-03-23T06:00:00.000Z"} +{"doc_count":775,"split_key":51396,"timestamp":"2026-03-23T06:00:00.000Z"} +{"doc_count":771,"split_key":23674,"timestamp":"2026-03-23T06:00:00.000Z"} +{"doc_count":602,"split_key":24323,"timestamp":"2026-03-23T06:00:00.000Z"} +{"doc_count":510,"split_key":16509,"timestamp":"2026-03-23T06:00:00.000Z"} +{"doc_count":6807,"split_key":262880,"timestamp":"2026-03-23T07:00:00.000Z"} +{"doc_count":1804,"split_key":14061,"timestamp":"2026-03-23T07:00:00.000Z"} +{"doc_count":972,"split_key":209334,"timestamp":"2026-03-23T07:00:00.000Z"} +{"doc_count":862,"split_key":23674,"timestamp":"2026-03-23T07:00:00.000Z"} +{"doc_count":858,"split_key":51396,"timestamp":"2026-03-23T07:00:00.000Z"} +{"doc_count":6925,"split_key":262880,"timestamp":"2026-03-23T08:00:00.000Z"} +{"doc_count":6744,"split_key":14061,"timestamp":"2026-03-23T08:00:00.000Z"} +{"doc_count":1010,"split_key":209334,"timestamp":"2026-03-23T08:00:00.000Z"} +{"doc_count":815,"split_key":51396,"timestamp":"2026-03-23T08:00:00.000Z"} +{"doc_count":785,"split_key":23674,"timestamp":"2026-03-23T08:00:00.000Z"} +{"doc_count":6921,"split_key":262880,"timestamp":"2026-03-23T09:00:00.000Z"} +{"doc_count":906,"split_key":16509,"timestamp":"2026-03-23T09:00:00.000Z"} +{"doc_count":782,"split_key":23674,"timestamp":"2026-03-23T09:00:00.000Z"} +{"doc_count":774,"split_key":209334,"timestamp":"2026-03-23T09:00:00.000Z"} +{"doc_count":764,"split_key":51396,"timestamp":"2026-03-23T09:00:00.000Z"} +{"doc_count":6876,"split_key":262880,"timestamp":"2026-03-23T10:00:00.000Z"} +{"doc_count":829,"split_key":23674,"timestamp":"2026-03-23T10:00:00.000Z"} +{"doc_count":763,"split_key":51396,"timestamp":"2026-03-23T10:00:00.000Z"} +{"doc_count":663,"split_key":16509,"timestamp":"2026-03-23T10:00:00.000Z"} +{"doc_count":517,"split_key":24323,"timestamp":"2026-03-23T10:00:00.000Z"} +{"doc_count":3650,"split_key":265410,"timestamp":"2026-03-23T11:00:00.000Z"} +{"doc_count":1635,"split_key":262880,"timestamp":"2026-03-23T11:00:00.000Z"} +{"doc_count":785,"split_key":23674,"timestamp":"2026-03-23T11:00:00.000Z"} +{"doc_count":763,"split_key":51396,"timestamp":"2026-03-23T11:00:00.000Z"} +{"doc_count":483,"split_key":24323,"timestamp":"2026-03-23T11:00:00.000Z"} +{"doc_count":4759,"split_key":265410,"timestamp":"2026-03-23T12:00:00.000Z"} +{"doc_count":849,"split_key":23674,"timestamp":"2026-03-23T12:00:00.000Z"} +{"doc_count":810,"split_key":51396,"timestamp":"2026-03-23T12:00:00.000Z"} +{"doc_count":485,"split_key":24323,"timestamp":"2026-03-23T12:00:00.000Z"} +{"doc_count":386,"split_key":16509,"timestamp":"2026-03-23T12:00:00.000Z"} +{"doc_count":3687,"split_key":265410,"timestamp":"2026-03-23T13:00:00.000Z"} +{"doc_count":1942,"split_key":14061,"timestamp":"2026-03-23T13:00:00.000Z"} +{"doc_count":813,"split_key":23674,"timestamp":"2026-03-23T13:00:00.000Z"} +{"doc_count":746,"split_key":51396,"timestamp":"2026-03-23T13:00:00.000Z"} +{"doc_count":551,"split_key":209334,"timestamp":"2026-03-23T13:00:00.000Z"} +{"doc_count":4992,"split_key":265410,"timestamp":"2026-03-23T14:00:00.000Z"} +{"doc_count":813,"split_key":23674,"timestamp":"2026-03-23T14:00:00.000Z"} +{"doc_count":780,"split_key":51396,"timestamp":"2026-03-23T14:00:00.000Z"} +{"doc_count":626,"split_key":24323,"timestamp":"2026-03-23T14:00:00.000Z"} +{"doc_count":455,"split_key":209334,"timestamp":"2026-03-23T14:00:00.000Z"} +{"doc_count":3484,"split_key":265410,"timestamp":"2026-03-23T15:00:00.000Z"} +{"doc_count":1101,"split_key":209334,"timestamp":"2026-03-23T15:00:00.000Z"} +{"doc_count":826,"split_key":23674,"timestamp":"2026-03-23T15:00:00.000Z"} +{"doc_count":796,"split_key":51396,"timestamp":"2026-03-23T15:00:00.000Z"} +{"doc_count":691,"split_key":16509,"timestamp":"2026-03-23T15:00:00.000Z"} +{"doc_count":807,"split_key":23674,"timestamp":"2026-03-23T16:00:00.000Z"} +{"doc_count":795,"split_key":51396,"timestamp":"2026-03-23T16:00:00.000Z"} +{"doc_count":573,"split_key":16509,"timestamp":"2026-03-23T16:00:00.000Z"} +{"doc_count":446,"split_key":209334,"timestamp":"2026-03-23T16:00:00.000Z"} +{"doc_count":345,"split_key":201814,"timestamp":"2026-03-23T16:00:00.000Z"} +{"doc_count":1128,"split_key":60754,"timestamp":"2026-03-23T17:00:00.000Z"} +{"doc_count":799,"split_key":23674,"timestamp":"2026-03-23T17:00:00.000Z"} +{"doc_count":752,"split_key":209334,"timestamp":"2026-03-23T17:00:00.000Z"} +{"doc_count":744,"split_key":51396,"timestamp":"2026-03-23T17:00:00.000Z"} +{"doc_count":387,"split_key":37963,"timestamp":"2026-03-23T17:00:00.000Z"} +{"doc_count":750,"split_key":51396,"timestamp":"2026-03-23T18:00:00.000Z"} +{"doc_count":734,"split_key":23674,"timestamp":"2026-03-23T18:00:00.000Z"} +{"doc_count":555,"split_key":45102,"timestamp":"2026-03-23T18:00:00.000Z"} +{"doc_count":459,"split_key":42624,"timestamp":"2026-03-23T18:00:00.000Z"} +{"doc_count":443,"split_key":209334,"timestamp":"2026-03-23T18:00:00.000Z"} +{"doc_count":761,"split_key":51396,"timestamp":"2026-03-23T19:00:00.000Z"} +{"doc_count":735,"split_key":23674,"timestamp":"2026-03-23T19:00:00.000Z"} +{"doc_count":699,"split_key":16509,"timestamp":"2026-03-23T19:00:00.000Z"} +{"doc_count":414,"split_key":396982,"timestamp":"2026-03-23T19:00:00.000Z"} +{"doc_count":373,"split_key":201814,"timestamp":"2026-03-23T19:00:00.000Z"} +{"doc_count":18598,"split_key":265410,"timestamp":"2026-03-23T20:00:00.000Z"} +{"doc_count":779,"split_key":51396,"timestamp":"2026-03-23T20:00:00.000Z"} +{"doc_count":710,"split_key":23674,"timestamp":"2026-03-23T20:00:00.000Z"} +{"doc_count":437,"split_key":16509,"timestamp":"2026-03-23T20:00:00.000Z"} +{"doc_count":351,"split_key":201814,"timestamp":"2026-03-23T20:00:00.000Z"} +{"doc_count":25982,"split_key":265410,"timestamp":"2026-03-23T21:00:00.000Z"} +{"doc_count":714,"split_key":51396,"timestamp":"2026-03-23T21:00:00.000Z"} +{"doc_count":597,"split_key":23674,"timestamp":"2026-03-23T21:00:00.000Z"} +{"doc_count":420,"split_key":396982,"timestamp":"2026-03-23T21:00:00.000Z"} +{"doc_count":407,"split_key":16509,"timestamp":"2026-03-23T21:00:00.000Z"} +{"doc_count":20980,"split_key":265410,"timestamp":"2026-03-23T22:00:00.000Z"} +{"doc_count":725,"split_key":51396,"timestamp":"2026-03-23T22:00:00.000Z"} +{"doc_count":372,"split_key":201814,"timestamp":"2026-03-23T22:00:00.000Z"} +{"doc_count":315,"split_key":396982,"timestamp":"2026-03-23T22:00:00.000Z"} +{"doc_count":276,"split_key":24940,"timestamp":"2026-03-23T22:00:00.000Z"} +{"doc_count":5512,"split_key":265410,"timestamp":"2026-03-23T23:00:00.000Z"} +{"doc_count":4341,"split_key":209334,"timestamp":"2026-03-23T23:00:00.000Z"} +{"doc_count":797,"split_key":51396,"timestamp":"2026-03-23T23:00:00.000Z"} +{"doc_count":366,"split_key":201814,"timestamp":"2026-03-23T23:00:00.000Z"} +{"doc_count":359,"split_key":396982,"timestamp":"2026-03-23T23:00:00.000Z"} +{"doc_count":5382,"split_key":265410,"timestamp":"2026-03-24T00:00:00.000Z"} +{"doc_count":4884,"split_key":209334,"timestamp":"2026-03-24T00:00:00.000Z"} +{"doc_count":787,"split_key":51396,"timestamp":"2026-03-24T00:00:00.000Z"} +{"doc_count":395,"split_key":16509,"timestamp":"2026-03-24T00:00:00.000Z"} +{"doc_count":377,"split_key":201814,"timestamp":"2026-03-24T00:00:00.000Z"} +{"doc_count":5406,"split_key":265410,"timestamp":"2026-03-24T01:00:00.000Z"} +{"doc_count":3979,"split_key":209334,"timestamp":"2026-03-24T01:00:00.000Z"} +{"doc_count":728,"split_key":51396,"timestamp":"2026-03-24T01:00:00.000Z"} +{"doc_count":609,"split_key":396982,"timestamp":"2026-03-24T01:00:00.000Z"} +{"doc_count":402,"split_key":14061,"timestamp":"2026-03-24T01:00:00.000Z"} +{"doc_count":11906,"split_key":265410,"timestamp":"2026-03-24T02:00:00.000Z"} +{"doc_count":709,"split_key":51396,"timestamp":"2026-03-24T02:00:00.000Z"} +{"doc_count":366,"split_key":201814,"timestamp":"2026-03-24T02:00:00.000Z"} +{"doc_count":356,"split_key":396982,"timestamp":"2026-03-24T02:00:00.000Z"} +{"doc_count":334,"split_key":14061,"timestamp":"2026-03-24T02:00:00.000Z"} +{"doc_count":24264,"split_key":265410,"timestamp":"2026-03-24T03:00:00.000Z"} +{"doc_count":745,"split_key":51396,"timestamp":"2026-03-24T03:00:00.000Z"} +{"doc_count":503,"split_key":16509,"timestamp":"2026-03-24T03:00:00.000Z"} +{"doc_count":352,"split_key":14061,"timestamp":"2026-03-24T03:00:00.000Z"} +{"doc_count":348,"split_key":201814,"timestamp":"2026-03-24T03:00:00.000Z"} +{"doc_count":19648,"split_key":265410,"timestamp":"2026-03-24T04:00:00.000Z"} +{"doc_count":764,"split_key":51396,"timestamp":"2026-03-24T04:00:00.000Z"} +{"doc_count":600,"split_key":396982,"timestamp":"2026-03-24T04:00:00.000Z"} +{"doc_count":516,"split_key":16509,"timestamp":"2026-03-24T04:00:00.000Z"} +{"doc_count":362,"split_key":201814,"timestamp":"2026-03-24T04:00:00.000Z"} +{"doc_count":20622,"split_key":265410,"timestamp":"2026-03-24T05:00:00.000Z"} +{"doc_count":878,"split_key":51396,"timestamp":"2026-03-24T05:00:00.000Z"} +{"doc_count":566,"split_key":16509,"timestamp":"2026-03-24T05:00:00.000Z"} +{"doc_count":360,"split_key":201814,"timestamp":"2026-03-24T05:00:00.000Z"} +{"doc_count":338,"split_key":14061,"timestamp":"2026-03-24T05:00:00.000Z"} +{"doc_count":20141,"split_key":265410,"timestamp":"2026-03-24T06:00:00.000Z"} +{"doc_count":726,"split_key":51396,"timestamp":"2026-03-24T06:00:00.000Z"} +{"doc_count":376,"split_key":201814,"timestamp":"2026-03-24T06:00:00.000Z"} +{"doc_count":313,"split_key":24940,"timestamp":"2026-03-24T06:00:00.000Z"} +{"doc_count":258,"split_key":396982,"timestamp":"2026-03-24T06:00:00.000Z"} +{"doc_count":17965,"split_key":265410,"timestamp":"2026-03-24T07:00:00.000Z"} +{"doc_count":4601,"split_key":14061,"timestamp":"2026-03-24T07:00:00.000Z"} +{"doc_count":689,"split_key":51396,"timestamp":"2026-03-24T07:00:00.000Z"} +{"doc_count":356,"split_key":201814,"timestamp":"2026-03-24T07:00:00.000Z"} +{"doc_count":299,"split_key":396982,"timestamp":"2026-03-24T07:00:00.000Z"} +{"doc_count":17463,"split_key":265410,"timestamp":"2026-03-24T08:00:00.000Z"} +{"doc_count":1990,"split_key":14061,"timestamp":"2026-03-24T08:00:00.000Z"} +{"doc_count":1966,"split_key":16509,"timestamp":"2026-03-24T08:00:00.000Z"} +{"doc_count":809,"split_key":51396,"timestamp":"2026-03-24T08:00:00.000Z"} +{"doc_count":387,"split_key":398324,"timestamp":"2026-03-24T08:00:00.000Z"} +{"doc_count":16945,"split_key":265410,"timestamp":"2026-03-24T09:00:00.000Z"} +{"doc_count":6747,"split_key":49870,"timestamp":"2026-03-24T09:00:00.000Z"} +{"doc_count":758,"split_key":51396,"timestamp":"2026-03-24T09:00:00.000Z"} +{"doc_count":561,"split_key":396982,"timestamp":"2026-03-24T09:00:00.000Z"} +{"doc_count":447,"split_key":209334,"timestamp":"2026-03-24T09:00:00.000Z"} +{"doc_count":16281,"split_key":265410,"timestamp":"2026-03-24T10:00:00.000Z"} +{"doc_count":9678,"split_key":49870,"timestamp":"2026-03-24T10:00:00.000Z"} +{"doc_count":935,"split_key":51396,"timestamp":"2026-03-24T10:00:00.000Z"} +{"doc_count":381,"split_key":16509,"timestamp":"2026-03-24T10:00:00.000Z"} +{"doc_count":372,"split_key":201814,"timestamp":"2026-03-24T10:00:00.000Z"} +{"doc_count":15704,"split_key":265410,"timestamp":"2026-03-24T11:00:00.000Z"} +{"doc_count":815,"split_key":51396,"timestamp":"2026-03-24T11:00:00.000Z"} +{"doc_count":557,"split_key":37963,"timestamp":"2026-03-24T11:00:00.000Z"} +{"doc_count":465,"split_key":24940,"timestamp":"2026-03-24T11:00:00.000Z"} +{"doc_count":372,"split_key":201814,"timestamp":"2026-03-24T11:00:00.000Z"} +{"doc_count":11308,"split_key":265410,"timestamp":"2026-03-24T12:00:00.000Z"} +{"doc_count":986,"split_key":51396,"timestamp":"2026-03-24T12:00:00.000Z"} +{"doc_count":548,"split_key":37963,"timestamp":"2026-03-24T12:00:00.000Z"} +{"doc_count":484,"split_key":24940,"timestamp":"2026-03-24T12:00:00.000Z"} +{"doc_count":409,"split_key":16509,"timestamp":"2026-03-24T12:00:00.000Z"} +{"doc_count":3475,"split_key":265410,"timestamp":"2026-03-24T13:00:00.000Z"} +{"doc_count":1065,"split_key":51396,"timestamp":"2026-03-24T13:00:00.000Z"} +{"doc_count":624,"split_key":396982,"timestamp":"2026-03-24T13:00:00.000Z"} +{"doc_count":539,"split_key":37963,"timestamp":"2026-03-24T13:00:00.000Z"} +{"doc_count":529,"split_key":24940,"timestamp":"2026-03-24T13:00:00.000Z"} +{"doc_count":3292,"split_key":265410,"timestamp":"2026-03-24T14:00:00.000Z"} +{"doc_count":941,"split_key":51396,"timestamp":"2026-03-24T14:00:00.000Z"} +{"doc_count":610,"split_key":16509,"timestamp":"2026-03-24T14:00:00.000Z"} +{"doc_count":540,"split_key":14061,"timestamp":"2026-03-24T14:00:00.000Z"} +{"doc_count":507,"split_key":37963,"timestamp":"2026-03-24T14:00:00.000Z"} +{"doc_count":3437,"split_key":265410,"timestamp":"2026-03-24T15:00:00.000Z"} +{"doc_count":1035,"split_key":51396,"timestamp":"2026-03-24T15:00:00.000Z"} +{"doc_count":506,"split_key":37963,"timestamp":"2026-03-24T15:00:00.000Z"} +{"doc_count":502,"split_key":14061,"timestamp":"2026-03-24T15:00:00.000Z"} +{"doc_count":495,"split_key":16509,"timestamp":"2026-03-24T15:00:00.000Z"} +{"doc_count":1806,"split_key":265410,"timestamp":"2026-03-24T16:00:00.000Z"} +{"doc_count":926,"split_key":51396,"timestamp":"2026-03-24T16:00:00.000Z"} +{"doc_count":533,"split_key":37963,"timestamp":"2026-03-24T16:00:00.000Z"} +{"doc_count":488,"split_key":24940,"timestamp":"2026-03-24T16:00:00.000Z"} +{"doc_count":479,"split_key":56041,"timestamp":"2026-03-24T16:00:00.000Z"} +{"doc_count":3008,"split_key":265410,"timestamp":"2026-03-24T17:00:00.000Z"} +{"doc_count":857,"split_key":51396,"timestamp":"2026-03-24T17:00:00.000Z"} +{"doc_count":751,"split_key":209334,"timestamp":"2026-03-24T17:00:00.000Z"} +{"doc_count":570,"split_key":37963,"timestamp":"2026-03-24T17:00:00.000Z"} +{"doc_count":550,"split_key":396982,"timestamp":"2026-03-24T17:00:00.000Z"} +{"doc_count":3200,"split_key":265410,"timestamp":"2026-03-24T18:00:00.000Z"} +{"doc_count":835,"split_key":51396,"timestamp":"2026-03-24T18:00:00.000Z"} +{"doc_count":627,"split_key":37963,"timestamp":"2026-03-24T18:00:00.000Z"} +{"doc_count":560,"split_key":16509,"timestamp":"2026-03-24T18:00:00.000Z"} +{"doc_count":520,"split_key":135377,"timestamp":"2026-03-24T18:00:00.000Z"} +{"doc_count":2610,"split_key":265410,"timestamp":"2026-03-24T19:00:00.000Z"} +{"doc_count":922,"split_key":51396,"timestamp":"2026-03-24T19:00:00.000Z"} +{"doc_count":649,"split_key":37963,"timestamp":"2026-03-24T19:00:00.000Z"} +{"doc_count":519,"split_key":16509,"timestamp":"2026-03-24T19:00:00.000Z"} +{"doc_count":469,"split_key":24940,"timestamp":"2026-03-24T19:00:00.000Z"} +{"doc_count":2820,"split_key":265410,"timestamp":"2026-03-24T20:00:00.000Z"} +{"doc_count":924,"split_key":51396,"timestamp":"2026-03-24T20:00:00.000Z"} +{"doc_count":591,"split_key":209334,"timestamp":"2026-03-24T20:00:00.000Z"} +{"doc_count":453,"split_key":24940,"timestamp":"2026-03-24T20:00:00.000Z"} +{"doc_count":415,"split_key":396982,"timestamp":"2026-03-24T20:00:00.000Z"} +{"doc_count":1311,"split_key":265410,"timestamp":"2026-03-24T21:00:00.000Z"} +{"doc_count":1105,"split_key":37963,"timestamp":"2026-03-24T21:00:00.000Z"} +{"doc_count":951,"split_key":51396,"timestamp":"2026-03-24T21:00:00.000Z"} +{"doc_count":647,"split_key":396982,"timestamp":"2026-03-24T21:00:00.000Z"} +{"doc_count":434,"split_key":24940,"timestamp":"2026-03-24T21:00:00.000Z"} +{"doc_count":1052,"split_key":265410,"timestamp":"2026-03-24T22:00:00.000Z"} +{"doc_count":971,"split_key":51396,"timestamp":"2026-03-24T22:00:00.000Z"} +{"doc_count":483,"split_key":396982,"timestamp":"2026-03-24T22:00:00.000Z"} +{"doc_count":426,"split_key":24940,"timestamp":"2026-03-24T22:00:00.000Z"} +{"doc_count":364,"split_key":209334,"timestamp":"2026-03-24T22:00:00.000Z"} +{"doc_count":2469,"split_key":209334,"timestamp":"2026-03-24T23:00:00.000Z"} +{"doc_count":1232,"split_key":265410,"timestamp":"2026-03-24T23:00:00.000Z"} +{"doc_count":1017,"split_key":51396,"timestamp":"2026-03-24T23:00:00.000Z"} +{"doc_count":403,"split_key":24940,"timestamp":"2026-03-24T23:00:00.000Z"} +{"doc_count":370,"split_key":37963,"timestamp":"2026-03-24T23:00:00.000Z"} +{"doc_count":4328,"split_key":209334,"timestamp":"2026-03-25T00:00:00.000Z"} +{"doc_count":1037,"split_key":265410,"timestamp":"2026-03-25T00:00:00.000Z"} +{"doc_count":935,"split_key":51396,"timestamp":"2026-03-25T00:00:00.000Z"} +{"doc_count":429,"split_key":396982,"timestamp":"2026-03-25T00:00:00.000Z"} +{"doc_count":393,"split_key":37963,"timestamp":"2026-03-25T00:00:00.000Z"} +{"doc_count":2105,"split_key":209334,"timestamp":"2026-03-25T01:00:00.000Z"} +{"doc_count":1004,"split_key":51396,"timestamp":"2026-03-25T01:00:00.000Z"} +{"doc_count":971,"split_key":265410,"timestamp":"2026-03-25T01:00:00.000Z"} +{"doc_count":467,"split_key":267325,"timestamp":"2026-03-25T01:00:00.000Z"} +{"doc_count":458,"split_key":396982,"timestamp":"2026-03-25T01:00:00.000Z"} +{"doc_count":5797,"split_key":267325,"timestamp":"2026-03-25T02:00:00.000Z"} +{"doc_count":1050,"split_key":51396,"timestamp":"2026-03-25T02:00:00.000Z"} +{"doc_count":869,"split_key":37963,"timestamp":"2026-03-25T02:00:00.000Z"} +{"doc_count":859,"split_key":209334,"timestamp":"2026-03-25T02:00:00.000Z"} +{"doc_count":427,"split_key":396982,"timestamp":"2026-03-25T02:00:00.000Z"} +{"doc_count":3228,"split_key":264014,"timestamp":"2026-03-25T03:00:00.000Z"} +{"doc_count":2431,"split_key":267325,"timestamp":"2026-03-25T03:00:00.000Z"} +{"doc_count":2135,"split_key":37963,"timestamp":"2026-03-25T03:00:00.000Z"} +{"doc_count":1607,"split_key":209334,"timestamp":"2026-03-25T03:00:00.000Z"} +{"doc_count":955,"split_key":51396,"timestamp":"2026-03-25T03:00:00.000Z"} +{"doc_count":4638,"split_key":264014,"timestamp":"2026-03-25T04:00:00.000Z"} +{"doc_count":1009,"split_key":37963,"timestamp":"2026-03-25T04:00:00.000Z"} +{"doc_count":972,"split_key":51396,"timestamp":"2026-03-25T04:00:00.000Z"} +{"doc_count":669,"split_key":209334,"timestamp":"2026-03-25T04:00:00.000Z"} +{"doc_count":525,"split_key":24940,"timestamp":"2026-03-25T04:00:00.000Z"} +{"doc_count":4627,"split_key":264014,"timestamp":"2026-03-25T05:00:00.000Z"} +{"doc_count":1203,"split_key":37963,"timestamp":"2026-03-25T05:00:00.000Z"} +{"doc_count":1089,"split_key":51396,"timestamp":"2026-03-25T05:00:00.000Z"} +{"doc_count":539,"split_key":24940,"timestamp":"2026-03-25T05:00:00.000Z"} +{"doc_count":453,"split_key":396982,"timestamp":"2026-03-25T05:00:00.000Z"} +{"doc_count":4569,"split_key":264014,"timestamp":"2026-03-25T06:00:00.000Z"} +{"doc_count":3622,"split_key":37963,"timestamp":"2026-03-25T06:00:00.000Z"} +{"doc_count":1586,"split_key":209334,"timestamp":"2026-03-25T06:00:00.000Z"} +{"doc_count":944,"split_key":51396,"timestamp":"2026-03-25T06:00:00.000Z"} +{"doc_count":492,"split_key":24940,"timestamp":"2026-03-25T06:00:00.000Z"} +{"doc_count":4668,"split_key":264014,"timestamp":"2026-03-25T07:00:00.000Z"} +{"doc_count":4592,"split_key":37963,"timestamp":"2026-03-25T07:00:00.000Z"} +{"doc_count":898,"split_key":51396,"timestamp":"2026-03-25T07:00:00.000Z"} +{"doc_count":500,"split_key":16509,"timestamp":"2026-03-25T07:00:00.000Z"} +{"doc_count":444,"split_key":24940,"timestamp":"2026-03-25T07:00:00.000Z"} +{"doc_count":4787,"split_key":264014,"timestamp":"2026-03-25T08:00:00.000Z"} +{"doc_count":1005,"split_key":51396,"timestamp":"2026-03-25T08:00:00.000Z"} +{"doc_count":444,"split_key":37963,"timestamp":"2026-03-25T08:00:00.000Z"} +{"doc_count":385,"split_key":14061,"timestamp":"2026-03-25T08:00:00.000Z"} +{"doc_count":354,"split_key":396982,"timestamp":"2026-03-25T08:00:00.000Z"} +{"doc_count":4693,"split_key":264014,"timestamp":"2026-03-25T09:00:00.000Z"} +{"doc_count":1035,"split_key":51396,"timestamp":"2026-03-25T09:00:00.000Z"} +{"doc_count":407,"split_key":37963,"timestamp":"2026-03-25T09:00:00.000Z"} +{"doc_count":379,"split_key":396982,"timestamp":"2026-03-25T09:00:00.000Z"} +{"doc_count":348,"split_key":24940,"timestamp":"2026-03-25T09:00:00.000Z"} +{"doc_count":4530,"split_key":264014,"timestamp":"2026-03-25T10:00:00.000Z"} +{"doc_count":1076,"split_key":51396,"timestamp":"2026-03-25T10:00:00.000Z"} +{"doc_count":595,"split_key":16509,"timestamp":"2026-03-25T10:00:00.000Z"} +{"doc_count":387,"split_key":24940,"timestamp":"2026-03-25T10:00:00.000Z"} +{"doc_count":295,"split_key":9318,"timestamp":"2026-03-25T10:00:00.000Z"} +{"doc_count":4619,"split_key":264014,"timestamp":"2026-03-25T11:00:00.000Z"} +{"doc_count":1042,"split_key":51396,"timestamp":"2026-03-25T11:00:00.000Z"} +{"doc_count":950,"split_key":209334,"timestamp":"2026-03-25T11:00:00.000Z"} +{"doc_count":494,"split_key":24940,"timestamp":"2026-03-25T11:00:00.000Z"} +{"doc_count":384,"split_key":16509,"timestamp":"2026-03-25T11:00:00.000Z"} +{"doc_count":4355,"split_key":264014,"timestamp":"2026-03-25T12:00:00.000Z"} +{"doc_count":1042,"split_key":51396,"timestamp":"2026-03-25T12:00:00.000Z"} +{"doc_count":619,"split_key":14061,"timestamp":"2026-03-25T12:00:00.000Z"} +{"doc_count":513,"split_key":209334,"timestamp":"2026-03-25T12:00:00.000Z"} +{"doc_count":510,"split_key":24940,"timestamp":"2026-03-25T12:00:00.000Z"} +{"doc_count":1612,"split_key":264014,"timestamp":"2026-03-25T13:00:00.000Z"} +{"doc_count":992,"split_key":51396,"timestamp":"2026-03-25T13:00:00.000Z"} +{"doc_count":447,"split_key":16509,"timestamp":"2026-03-25T13:00:00.000Z"} +{"doc_count":441,"split_key":24940,"timestamp":"2026-03-25T13:00:00.000Z"} +{"doc_count":414,"split_key":398324,"timestamp":"2026-03-25T13:00:00.000Z"} +{"doc_count":985,"split_key":51396,"timestamp":"2026-03-25T14:00:00.000Z"} +{"doc_count":481,"split_key":24940,"timestamp":"2026-03-25T14:00:00.000Z"} +{"doc_count":366,"split_key":398324,"timestamp":"2026-03-25T14:00:00.000Z"} +{"doc_count":358,"split_key":14061,"timestamp":"2026-03-25T14:00:00.000Z"} +{"doc_count":286,"split_key":16509,"timestamp":"2026-03-25T14:00:00.000Z"} +{"doc_count":949,"split_key":51396,"timestamp":"2026-03-25T15:00:00.000Z"} +{"doc_count":519,"split_key":24940,"timestamp":"2026-03-25T15:00:00.000Z"} +{"doc_count":409,"split_key":14061,"timestamp":"2026-03-25T15:00:00.000Z"} +{"doc_count":333,"split_key":398324,"timestamp":"2026-03-25T15:00:00.000Z"} +{"doc_count":273,"split_key":16509,"timestamp":"2026-03-25T15:00:00.000Z"} +{"doc_count":958,"split_key":51396,"timestamp":"2026-03-25T16:00:00.000Z"} +{"doc_count":556,"split_key":24940,"timestamp":"2026-03-25T16:00:00.000Z"} +{"doc_count":381,"split_key":14061,"timestamp":"2026-03-25T16:00:00.000Z"} +{"doc_count":333,"split_key":16509,"timestamp":"2026-03-25T16:00:00.000Z"} +{"doc_count":282,"split_key":398324,"timestamp":"2026-03-25T16:00:00.000Z"} +{"doc_count":867,"split_key":51396,"timestamp":"2026-03-25T17:00:00.000Z"} +{"doc_count":677,"split_key":14061,"timestamp":"2026-03-25T17:00:00.000Z"} +{"doc_count":530,"split_key":37963,"timestamp":"2026-03-25T17:00:00.000Z"} +{"doc_count":511,"split_key":24940,"timestamp":"2026-03-25T17:00:00.000Z"} +{"doc_count":399,"split_key":16509,"timestamp":"2026-03-25T17:00:00.000Z"} +{"doc_count":1274,"split_key":48090,"timestamp":"2026-03-25T18:00:00.000Z"} +{"doc_count":1170,"split_key":37963,"timestamp":"2026-03-25T18:00:00.000Z"} +{"doc_count":937,"split_key":51396,"timestamp":"2026-03-25T18:00:00.000Z"} +{"doc_count":850,"split_key":14061,"timestamp":"2026-03-25T18:00:00.000Z"} +{"doc_count":699,"split_key":16509,"timestamp":"2026-03-25T18:00:00.000Z"} +{"doc_count":8533,"split_key":264014,"timestamp":"2026-03-25T19:00:00.000Z"} +{"doc_count":2256,"split_key":37963,"timestamp":"2026-03-25T19:00:00.000Z"} +{"doc_count":744,"split_key":51396,"timestamp":"2026-03-25T19:00:00.000Z"} +{"doc_count":742,"split_key":14061,"timestamp":"2026-03-25T19:00:00.000Z"} +{"doc_count":489,"split_key":24940,"timestamp":"2026-03-25T19:00:00.000Z"} +{"doc_count":12774,"split_key":264014,"timestamp":"2026-03-25T20:00:00.000Z"} +{"doc_count":1076,"split_key":37963,"timestamp":"2026-03-25T20:00:00.000Z"} +{"doc_count":886,"split_key":51396,"timestamp":"2026-03-25T20:00:00.000Z"} +{"doc_count":808,"split_key":14061,"timestamp":"2026-03-25T20:00:00.000Z"} +{"doc_count":490,"split_key":24940,"timestamp":"2026-03-25T20:00:00.000Z"} +{"doc_count":6096,"split_key":264014,"timestamp":"2026-03-25T21:00:00.000Z"} +{"doc_count":1109,"split_key":37963,"timestamp":"2026-03-25T21:00:00.000Z"} +{"doc_count":875,"split_key":14061,"timestamp":"2026-03-25T21:00:00.000Z"} +{"doc_count":823,"split_key":51396,"timestamp":"2026-03-25T21:00:00.000Z"} +{"doc_count":823,"split_key":205759,"timestamp":"2026-03-25T21:00:00.000Z"} +{"doc_count":6406,"split_key":264014,"timestamp":"2026-03-25T22:00:00.000Z"} +{"doc_count":1136,"split_key":37963,"timestamp":"2026-03-25T22:00:00.000Z"} +{"doc_count":877,"split_key":51396,"timestamp":"2026-03-25T22:00:00.000Z"} +{"doc_count":799,"split_key":14061,"timestamp":"2026-03-25T22:00:00.000Z"} +{"doc_count":676,"split_key":205759,"timestamp":"2026-03-25T22:00:00.000Z"} +{"doc_count":5457,"split_key":209334,"timestamp":"2026-03-25T23:00:00.000Z"} +{"doc_count":2697,"split_key":264014,"timestamp":"2026-03-25T23:00:00.000Z"} +{"doc_count":2491,"split_key":37963,"timestamp":"2026-03-25T23:00:00.000Z"} +{"doc_count":943,"split_key":205759,"timestamp":"2026-03-25T23:00:00.000Z"} +{"doc_count":849,"split_key":14061,"timestamp":"2026-03-25T23:00:00.000Z"} +{"doc_count":6494,"split_key":209334,"timestamp":"2026-03-26T00:00:00.000Z"} +{"doc_count":2117,"split_key":37963,"timestamp":"2026-03-26T00:00:00.000Z"} +{"doc_count":842,"split_key":14061,"timestamp":"2026-03-26T00:00:00.000Z"} +{"doc_count":832,"split_key":51396,"timestamp":"2026-03-26T00:00:00.000Z"} +{"doc_count":601,"split_key":205759,"timestamp":"2026-03-26T00:00:00.000Z"} +{"doc_count":5406,"split_key":209334,"timestamp":"2026-03-26T01:00:00.000Z"} +{"doc_count":844,"split_key":51396,"timestamp":"2026-03-26T01:00:00.000Z"} +{"doc_count":786,"split_key":14061,"timestamp":"2026-03-26T01:00:00.000Z"} +{"doc_count":576,"split_key":205759,"timestamp":"2026-03-26T01:00:00.000Z"} +{"doc_count":513,"split_key":37963,"timestamp":"2026-03-26T01:00:00.000Z"} +{"doc_count":4943,"split_key":264014,"timestamp":"2026-03-26T02:00:00.000Z"} +{"doc_count":957,"split_key":14061,"timestamp":"2026-03-26T02:00:00.000Z"} +{"doc_count":913,"split_key":205759,"timestamp":"2026-03-26T02:00:00.000Z"} +{"doc_count":851,"split_key":51396,"timestamp":"2026-03-26T02:00:00.000Z"} +{"doc_count":727,"split_key":396982,"timestamp":"2026-03-26T02:00:00.000Z"} +{"doc_count":4123,"split_key":264014,"timestamp":"2026-03-26T03:00:00.000Z"} +{"doc_count":1021,"split_key":51396,"timestamp":"2026-03-26T03:00:00.000Z"} +{"doc_count":858,"split_key":14061,"timestamp":"2026-03-26T03:00:00.000Z"} +{"doc_count":719,"split_key":396982,"timestamp":"2026-03-26T03:00:00.000Z"} +{"doc_count":511,"split_key":37963,"timestamp":"2026-03-26T03:00:00.000Z"} +{"doc_count":5492,"split_key":133385,"timestamp":"2026-03-26T04:00:00.000Z"} +{"doc_count":4420,"split_key":264014,"timestamp":"2026-03-26T04:00:00.000Z"} +{"doc_count":1079,"split_key":9988,"timestamp":"2026-03-26T04:00:00.000Z"} +{"doc_count":854,"split_key":134840,"timestamp":"2026-03-26T04:00:00.000Z"} +{"doc_count":840,"split_key":51396,"timestamp":"2026-03-26T04:00:00.000Z"} +{"doc_count":4394,"split_key":264014,"timestamp":"2026-03-26T05:00:00.000Z"} +{"doc_count":1737,"split_key":211590,"timestamp":"2026-03-26T05:00:00.000Z"} +{"doc_count":868,"split_key":51396,"timestamp":"2026-03-26T05:00:00.000Z"} +{"doc_count":833,"split_key":37963,"timestamp":"2026-03-26T05:00:00.000Z"} +{"doc_count":612,"split_key":16509,"timestamp":"2026-03-26T05:00:00.000Z"} +{"doc_count":8059,"split_key":211590,"timestamp":"2026-03-26T06:00:00.000Z"} +{"doc_count":5398,"split_key":14061,"timestamp":"2026-03-26T06:00:00.000Z"} +{"doc_count":4519,"split_key":264014,"timestamp":"2026-03-26T06:00:00.000Z"} +{"doc_count":873,"split_key":51396,"timestamp":"2026-03-26T06:00:00.000Z"} +{"doc_count":609,"split_key":37963,"timestamp":"2026-03-26T06:00:00.000Z"} +{"doc_count":4856,"split_key":211590,"timestamp":"2026-03-26T07:00:00.000Z"} +{"doc_count":4333,"split_key":264014,"timestamp":"2026-03-26T07:00:00.000Z"} +{"doc_count":1684,"split_key":14061,"timestamp":"2026-03-26T07:00:00.000Z"} +{"doc_count":1049,"split_key":45102,"timestamp":"2026-03-26T07:00:00.000Z"} +{"doc_count":957,"split_key":51396,"timestamp":"2026-03-26T07:00:00.000Z"} +{"doc_count":9818,"split_key":211590,"timestamp":"2026-03-26T08:00:00.000Z"} +{"doc_count":4509,"split_key":264014,"timestamp":"2026-03-26T08:00:00.000Z"} +{"doc_count":1122,"split_key":45102,"timestamp":"2026-03-26T08:00:00.000Z"} +{"doc_count":904,"split_key":51396,"timestamp":"2026-03-26T08:00:00.000Z"} +{"doc_count":478,"split_key":16509,"timestamp":"2026-03-26T08:00:00.000Z"} +{"doc_count":8185,"split_key":262909,"timestamp":"2026-03-26T09:00:00.000Z"} +{"doc_count":7393,"split_key":211590,"timestamp":"2026-03-26T09:00:00.000Z"} +{"doc_count":891,"split_key":51396,"timestamp":"2026-03-26T09:00:00.000Z"} +{"doc_count":620,"split_key":264014,"timestamp":"2026-03-26T09:00:00.000Z"} +{"doc_count":470,"split_key":45102,"timestamp":"2026-03-26T09:00:00.000Z"} +{"doc_count":13153,"split_key":262909,"timestamp":"2026-03-26T10:00:00.000Z"} +{"doc_count":6103,"split_key":211590,"timestamp":"2026-03-26T10:00:00.000Z"} +{"doc_count":770,"split_key":51396,"timestamp":"2026-03-26T10:00:00.000Z"} +{"doc_count":449,"split_key":16509,"timestamp":"2026-03-26T10:00:00.000Z"} +{"doc_count":345,"split_key":209334,"timestamp":"2026-03-26T10:00:00.000Z"} +{"doc_count":10393,"split_key":262909,"timestamp":"2026-03-26T11:00:00.000Z"} +{"doc_count":5338,"split_key":211590,"timestamp":"2026-03-26T11:00:00.000Z"} +{"doc_count":793,"split_key":51396,"timestamp":"2026-03-26T11:00:00.000Z"} +{"doc_count":775,"split_key":209334,"timestamp":"2026-03-26T11:00:00.000Z"} +{"doc_count":657,"split_key":16509,"timestamp":"2026-03-26T11:00:00.000Z"} +{"doc_count":9522,"split_key":262909,"timestamp":"2026-03-26T12:00:00.000Z"} +{"doc_count":2302,"split_key":211590,"timestamp":"2026-03-26T12:00:00.000Z"} +{"doc_count":1207,"split_key":209334,"timestamp":"2026-03-26T12:00:00.000Z"} +{"doc_count":780,"split_key":51396,"timestamp":"2026-03-26T12:00:00.000Z"} +{"doc_count":635,"split_key":16509,"timestamp":"2026-03-26T12:00:00.000Z"} +{"doc_count":9963,"split_key":262909,"timestamp":"2026-03-26T13:00:00.000Z"} +{"doc_count":2553,"split_key":211590,"timestamp":"2026-03-26T13:00:00.000Z"} +{"doc_count":880,"split_key":51396,"timestamp":"2026-03-26T13:00:00.000Z"} +{"doc_count":590,"split_key":24940,"timestamp":"2026-03-26T13:00:00.000Z"} +{"doc_count":442,"split_key":396982,"timestamp":"2026-03-26T13:00:00.000Z"} +{"doc_count":9795,"split_key":262909,"timestamp":"2026-03-26T14:00:00.000Z"} +{"doc_count":1226,"split_key":211590,"timestamp":"2026-03-26T14:00:00.000Z"} +{"doc_count":829,"split_key":51396,"timestamp":"2026-03-26T14:00:00.000Z"} +{"doc_count":571,"split_key":24940,"timestamp":"2026-03-26T14:00:00.000Z"} +{"doc_count":383,"split_key":14061,"timestamp":"2026-03-26T14:00:00.000Z"} +{"doc_count":10014,"split_key":262909,"timestamp":"2026-03-26T15:00:00.000Z"} +{"doc_count":8583,"split_key":152611,"timestamp":"2026-03-26T15:00:00.000Z"} +{"doc_count":2168,"split_key":37963,"timestamp":"2026-03-26T15:00:00.000Z"} +{"doc_count":777,"split_key":51396,"timestamp":"2026-03-26T15:00:00.000Z"} +{"doc_count":570,"split_key":209334,"timestamp":"2026-03-26T15:00:00.000Z"} +{"doc_count":10015,"split_key":262909,"timestamp":"2026-03-26T16:00:00.000Z"} +{"doc_count":7537,"split_key":211590,"timestamp":"2026-03-26T16:00:00.000Z"} +{"doc_count":2298,"split_key":37963,"timestamp":"2026-03-26T16:00:00.000Z"} +{"doc_count":783,"split_key":51396,"timestamp":"2026-03-26T16:00:00.000Z"} +{"doc_count":582,"split_key":396982,"timestamp":"2026-03-26T16:00:00.000Z"} +{"doc_count":5470,"split_key":211590,"timestamp":"2026-03-26T17:00:00.000Z"} +{"doc_count":3090,"split_key":263641,"timestamp":"2026-03-26T17:00:00.000Z"} +{"doc_count":1089,"split_key":37963,"timestamp":"2026-03-26T17:00:00.000Z"} +{"doc_count":1077,"split_key":262909,"timestamp":"2026-03-26T17:00:00.000Z"} +{"doc_count":810,"split_key":51396,"timestamp":"2026-03-26T17:00:00.000Z"} +{"doc_count":4031,"split_key":263641,"timestamp":"2026-03-26T18:00:00.000Z"} +{"doc_count":3470,"split_key":211590,"timestamp":"2026-03-26T18:00:00.000Z"} +{"doc_count":1078,"split_key":37963,"timestamp":"2026-03-26T18:00:00.000Z"} +{"doc_count":828,"split_key":51396,"timestamp":"2026-03-26T18:00:00.000Z"} +{"doc_count":531,"split_key":16509,"timestamp":"2026-03-26T18:00:00.000Z"} +{"doc_count":3379,"split_key":263641,"timestamp":"2026-03-26T19:00:00.000Z"} +{"doc_count":974,"split_key":37963,"timestamp":"2026-03-26T19:00:00.000Z"} +{"doc_count":767,"split_key":51396,"timestamp":"2026-03-26T19:00:00.000Z"} +{"doc_count":766,"split_key":211590,"timestamp":"2026-03-26T19:00:00.000Z"} +{"doc_count":458,"split_key":16509,"timestamp":"2026-03-26T19:00:00.000Z"} +{"doc_count":6903,"split_key":262909,"timestamp":"2026-03-26T20:00:00.000Z"} +{"doc_count":1106,"split_key":263641,"timestamp":"2026-03-26T20:00:00.000Z"} +{"doc_count":866,"split_key":51396,"timestamp":"2026-03-26T20:00:00.000Z"} +{"doc_count":554,"split_key":396982,"timestamp":"2026-03-26T20:00:00.000Z"} +{"doc_count":391,"split_key":14061,"timestamp":"2026-03-26T20:00:00.000Z"} +{"doc_count":11640,"split_key":262909,"timestamp":"2026-03-26T21:00:00.000Z"} +{"doc_count":792,"split_key":51396,"timestamp":"2026-03-26T21:00:00.000Z"} +{"doc_count":635,"split_key":396982,"timestamp":"2026-03-26T21:00:00.000Z"} +{"doc_count":382,"split_key":16509,"timestamp":"2026-03-26T21:00:00.000Z"} +{"doc_count":380,"split_key":201814,"timestamp":"2026-03-26T21:00:00.000Z"} +{"doc_count":10679,"split_key":262909,"timestamp":"2026-03-26T22:00:00.000Z"} +{"doc_count":719,"split_key":51396,"timestamp":"2026-03-26T22:00:00.000Z"} +{"doc_count":439,"split_key":396982,"timestamp":"2026-03-26T22:00:00.000Z"} +{"doc_count":373,"split_key":14061,"timestamp":"2026-03-26T22:00:00.000Z"} +{"doc_count":357,"split_key":201814,"timestamp":"2026-03-26T22:00:00.000Z"} +{"doc_count":11000,"split_key":262909,"timestamp":"2026-03-26T23:00:00.000Z"} +{"doc_count":3149,"split_key":209334,"timestamp":"2026-03-26T23:00:00.000Z"} +{"doc_count":799,"split_key":51396,"timestamp":"2026-03-26T23:00:00.000Z"} +{"doc_count":595,"split_key":14061,"timestamp":"2026-03-26T23:00:00.000Z"} +{"doc_count":443,"split_key":396982,"timestamp":"2026-03-26T23:00:00.000Z"} +{"doc_count":11282,"split_key":262909,"timestamp":"2026-03-27T00:00:00.000Z"} +{"doc_count":2962,"split_key":37963,"timestamp":"2026-03-27T00:00:00.000Z"} +{"doc_count":2432,"split_key":209334,"timestamp":"2026-03-27T00:00:00.000Z"} +{"doc_count":872,"split_key":51396,"timestamp":"2026-03-27T00:00:00.000Z"} +{"doc_count":488,"split_key":396982,"timestamp":"2026-03-27T00:00:00.000Z"} +{"doc_count":11523,"split_key":262909,"timestamp":"2026-03-27T01:00:00.000Z"} +{"doc_count":4135,"split_key":209334,"timestamp":"2026-03-27T01:00:00.000Z"} +{"doc_count":957,"split_key":51396,"timestamp":"2026-03-27T01:00:00.000Z"} +{"doc_count":545,"split_key":396982,"timestamp":"2026-03-27T01:00:00.000Z"} +{"doc_count":472,"split_key":14061,"timestamp":"2026-03-27T01:00:00.000Z"} +{"doc_count":10001,"split_key":262909,"timestamp":"2026-03-27T02:00:00.000Z"} +{"doc_count":1014,"split_key":268106,"timestamp":"2026-03-27T02:00:00.000Z"} +{"doc_count":931,"split_key":51396,"timestamp":"2026-03-27T02:00:00.000Z"} +{"doc_count":607,"split_key":16509,"timestamp":"2026-03-27T02:00:00.000Z"} +{"doc_count":468,"split_key":396982,"timestamp":"2026-03-27T02:00:00.000Z"} +{"doc_count":7499,"split_key":268106,"timestamp":"2026-03-27T03:00:00.000Z"} +{"doc_count":3520,"split_key":267325,"timestamp":"2026-03-27T03:00:00.000Z"} +{"doc_count":1189,"split_key":16509,"timestamp":"2026-03-27T03:00:00.000Z"} +{"doc_count":946,"split_key":51396,"timestamp":"2026-03-27T03:00:00.000Z"} +{"doc_count":588,"split_key":45102,"timestamp":"2026-03-27T03:00:00.000Z"} +{"doc_count":11504,"split_key":267325,"timestamp":"2026-03-27T04:00:00.000Z"} +{"doc_count":1424,"split_key":37963,"timestamp":"2026-03-27T04:00:00.000Z"} +{"doc_count":1210,"split_key":16509,"timestamp":"2026-03-27T04:00:00.000Z"} +{"doc_count":907,"split_key":51396,"timestamp":"2026-03-27T04:00:00.000Z"} +{"doc_count":872,"split_key":45102,"timestamp":"2026-03-27T04:00:00.000Z"} +{"doc_count":10833,"split_key":267325,"timestamp":"2026-03-27T05:00:00.000Z"} +{"doc_count":1021,"split_key":51396,"timestamp":"2026-03-27T05:00:00.000Z"} +{"doc_count":906,"split_key":45102,"timestamp":"2026-03-27T05:00:00.000Z"} +{"doc_count":892,"split_key":16509,"timestamp":"2026-03-27T05:00:00.000Z"} +{"doc_count":697,"split_key":396982,"timestamp":"2026-03-27T05:00:00.000Z"} +{"doc_count":11911,"split_key":267325,"timestamp":"2026-03-27T06:00:00.000Z"} +{"doc_count":1014,"split_key":51396,"timestamp":"2026-03-27T06:00:00.000Z"} +{"doc_count":916,"split_key":45102,"timestamp":"2026-03-27T06:00:00.000Z"} +{"doc_count":756,"split_key":16509,"timestamp":"2026-03-27T06:00:00.000Z"} +{"doc_count":751,"split_key":14061,"timestamp":"2026-03-27T06:00:00.000Z"} +{"doc_count":11906,"split_key":267325,"timestamp":"2026-03-27T07:00:00.000Z"} +{"doc_count":955,"split_key":209334,"timestamp":"2026-03-27T07:00:00.000Z"} +{"doc_count":952,"split_key":51396,"timestamp":"2026-03-27T07:00:00.000Z"} +{"doc_count":917,"split_key":45102,"timestamp":"2026-03-27T07:00:00.000Z"} +{"doc_count":867,"split_key":16509,"timestamp":"2026-03-27T07:00:00.000Z"} +{"doc_count":12162,"split_key":267325,"timestamp":"2026-03-27T08:00:00.000Z"} +{"doc_count":1374,"split_key":16509,"timestamp":"2026-03-27T08:00:00.000Z"} +{"doc_count":951,"split_key":51396,"timestamp":"2026-03-27T08:00:00.000Z"} +{"doc_count":910,"split_key":45102,"timestamp":"2026-03-27T08:00:00.000Z"} +{"doc_count":616,"split_key":396982,"timestamp":"2026-03-27T08:00:00.000Z"} +{"doc_count":12215,"split_key":267325,"timestamp":"2026-03-27T09:00:00.000Z"} +{"doc_count":1229,"split_key":16509,"timestamp":"2026-03-27T09:00:00.000Z"} +{"doc_count":965,"split_key":51396,"timestamp":"2026-03-27T09:00:00.000Z"} +{"doc_count":576,"split_key":396982,"timestamp":"2026-03-27T09:00:00.000Z"} +{"doc_count":433,"split_key":271677,"timestamp":"2026-03-27T09:00:00.000Z"} +{"doc_count":11824,"split_key":267325,"timestamp":"2026-03-27T10:00:00.000Z"} +{"doc_count":1128,"split_key":16509,"timestamp":"2026-03-27T10:00:00.000Z"} +{"doc_count":1010,"split_key":51396,"timestamp":"2026-03-27T10:00:00.000Z"} +{"doc_count":444,"split_key":396982,"timestamp":"2026-03-27T10:00:00.000Z"} +{"doc_count":442,"split_key":271677,"timestamp":"2026-03-27T10:00:00.000Z"} +{"doc_count":11520,"split_key":267325,"timestamp":"2026-03-27T11:00:00.000Z"} +{"doc_count":1420,"split_key":209334,"timestamp":"2026-03-27T11:00:00.000Z"} +{"doc_count":958,"split_key":51396,"timestamp":"2026-03-27T11:00:00.000Z"} +{"doc_count":646,"split_key":16509,"timestamp":"2026-03-27T11:00:00.000Z"} +{"doc_count":443,"split_key":271677,"timestamp":"2026-03-27T11:00:00.000Z"} +{"doc_count":12734,"split_key":267325,"timestamp":"2026-03-27T12:00:00.000Z"} +{"doc_count":1099,"split_key":16509,"timestamp":"2026-03-27T12:00:00.000Z"} +{"doc_count":963,"split_key":209334,"timestamp":"2026-03-27T12:00:00.000Z"} +{"doc_count":903,"split_key":51396,"timestamp":"2026-03-27T12:00:00.000Z"} +{"doc_count":886,"split_key":45090,"timestamp":"2026-03-27T12:00:00.000Z"} +{"doc_count":7186,"split_key":267325,"timestamp":"2026-03-27T13:00:00.000Z"} +{"doc_count":889,"split_key":51396,"timestamp":"2026-03-27T13:00:00.000Z"} +{"doc_count":802,"split_key":45090,"timestamp":"2026-03-27T13:00:00.000Z"} +{"doc_count":753,"split_key":209334,"timestamp":"2026-03-27T13:00:00.000Z"} +{"doc_count":443,"split_key":271677,"timestamp":"2026-03-27T13:00:00.000Z"} +{"doc_count":1254,"split_key":209334,"timestamp":"2026-03-27T14:00:00.000Z"} +{"doc_count":975,"split_key":51396,"timestamp":"2026-03-27T14:00:00.000Z"} +{"doc_count":823,"split_key":16509,"timestamp":"2026-03-27T14:00:00.000Z"} +{"doc_count":738,"split_key":45090,"timestamp":"2026-03-27T14:00:00.000Z"} +{"doc_count":453,"split_key":271677,"timestamp":"2026-03-27T14:00:00.000Z"} +{"doc_count":6049,"split_key":211590,"timestamp":"2026-03-27T15:00:00.000Z"} +{"doc_count":1001,"split_key":16509,"timestamp":"2026-03-27T15:00:00.000Z"} +{"doc_count":949,"split_key":209334,"timestamp":"2026-03-27T15:00:00.000Z"} +{"doc_count":923,"split_key":51396,"timestamp":"2026-03-27T15:00:00.000Z"} +{"doc_count":762,"split_key":45090,"timestamp":"2026-03-27T15:00:00.000Z"} +{"doc_count":5720,"split_key":211590,"timestamp":"2026-03-27T16:00:00.000Z"} +{"doc_count":911,"split_key":51396,"timestamp":"2026-03-27T16:00:00.000Z"} +{"doc_count":890,"split_key":45090,"timestamp":"2026-03-27T16:00:00.000Z"} +{"doc_count":772,"split_key":16509,"timestamp":"2026-03-27T16:00:00.000Z"} +{"doc_count":728,"split_key":209334,"timestamp":"2026-03-27T16:00:00.000Z"} +{"doc_count":2152,"split_key":211590,"timestamp":"2026-03-27T17:00:00.000Z"} +{"doc_count":1004,"split_key":16509,"timestamp":"2026-03-27T17:00:00.000Z"} +{"doc_count":968,"split_key":51396,"timestamp":"2026-03-27T17:00:00.000Z"} +{"doc_count":803,"split_key":209334,"timestamp":"2026-03-27T17:00:00.000Z"} +{"doc_count":528,"split_key":45090,"timestamp":"2026-03-27T17:00:00.000Z"} +{"doc_count":4222,"split_key":211590,"timestamp":"2026-03-27T18:00:00.000Z"} +{"doc_count":1458,"split_key":209334,"timestamp":"2026-03-27T18:00:00.000Z"} +{"doc_count":890,"split_key":51396,"timestamp":"2026-03-27T18:00:00.000Z"} +{"doc_count":818,"split_key":16509,"timestamp":"2026-03-27T18:00:00.000Z"} +{"doc_count":426,"split_key":271677,"timestamp":"2026-03-27T18:00:00.000Z"} +{"doc_count":1433,"split_key":37963,"timestamp":"2026-03-27T19:00:00.000Z"} +{"doc_count":1393,"split_key":211590,"timestamp":"2026-03-27T19:00:00.000Z"} +{"doc_count":1185,"split_key":16509,"timestamp":"2026-03-27T19:00:00.000Z"} +{"doc_count":909,"split_key":51396,"timestamp":"2026-03-27T19:00:00.000Z"} +{"doc_count":900,"split_key":209334,"timestamp":"2026-03-27T19:00:00.000Z"} +{"doc_count":6701,"split_key":211590,"timestamp":"2026-03-27T20:00:00.000Z"} +{"doc_count":1485,"split_key":16509,"timestamp":"2026-03-27T20:00:00.000Z"} +{"doc_count":958,"split_key":51396,"timestamp":"2026-03-27T20:00:00.000Z"} +{"doc_count":777,"split_key":209334,"timestamp":"2026-03-27T20:00:00.000Z"} +{"doc_count":433,"split_key":396982,"timestamp":"2026-03-27T20:00:00.000Z"} +{"doc_count":1589,"split_key":211590,"timestamp":"2026-03-27T21:00:00.000Z"} +{"doc_count":1047,"split_key":16509,"timestamp":"2026-03-27T21:00:00.000Z"} +{"doc_count":940,"split_key":51396,"timestamp":"2026-03-27T21:00:00.000Z"} +{"doc_count":814,"split_key":209334,"timestamp":"2026-03-27T21:00:00.000Z"} +{"doc_count":438,"split_key":396982,"timestamp":"2026-03-27T21:00:00.000Z"} +{"doc_count":1596,"split_key":211590,"timestamp":"2026-03-27T22:00:00.000Z"} +{"doc_count":1132,"split_key":16509,"timestamp":"2026-03-27T22:00:00.000Z"} +{"doc_count":998,"split_key":209334,"timestamp":"2026-03-27T22:00:00.000Z"} +{"doc_count":619,"split_key":51396,"timestamp":"2026-03-27T22:00:00.000Z"} +{"doc_count":530,"split_key":267325,"timestamp":"2026-03-27T22:00:00.000Z"} +{"doc_count":3499,"split_key":209334,"timestamp":"2026-03-27T23:00:00.000Z"} +{"doc_count":3305,"split_key":267325,"timestamp":"2026-03-27T23:00:00.000Z"} +{"doc_count":2115,"split_key":51396,"timestamp":"2026-03-27T23:00:00.000Z"} +{"doc_count":714,"split_key":16509,"timestamp":"2026-03-27T23:00:00.000Z"} +{"doc_count":471,"split_key":37963,"timestamp":"2026-03-27T23:00:00.000Z"} +{"doc_count":3093,"split_key":209334,"timestamp":"2026-03-28T00:00:00.000Z"} +{"doc_count":711,"split_key":37963,"timestamp":"2026-03-28T00:00:00.000Z"} +{"doc_count":549,"split_key":396982,"timestamp":"2026-03-28T00:00:00.000Z"} +{"doc_count":484,"split_key":16509,"timestamp":"2026-03-28T00:00:00.000Z"} +{"doc_count":387,"split_key":201814,"timestamp":"2026-03-28T00:00:00.000Z"} +{"doc_count":2167,"split_key":209334,"timestamp":"2026-03-28T01:00:00.000Z"} +{"doc_count":553,"split_key":16509,"timestamp":"2026-03-28T01:00:00.000Z"} +{"doc_count":475,"split_key":396982,"timestamp":"2026-03-28T01:00:00.000Z"} +{"doc_count":460,"split_key":37963,"timestamp":"2026-03-28T01:00:00.000Z"} +{"doc_count":391,"split_key":36236,"timestamp":"2026-03-28T01:00:00.000Z"} +{"doc_count":3322,"split_key":271410,"timestamp":"2026-03-28T02:00:00.000Z"} +{"doc_count":3232,"split_key":209334,"timestamp":"2026-03-28T02:00:00.000Z"} +{"doc_count":505,"split_key":16509,"timestamp":"2026-03-28T02:00:00.000Z"} +{"doc_count":456,"split_key":396982,"timestamp":"2026-03-28T02:00:00.000Z"} +{"doc_count":433,"split_key":37963,"timestamp":"2026-03-28T02:00:00.000Z"} +{"doc_count":697,"split_key":61782,"timestamp":"2026-03-28T03:00:00.000Z"} +{"doc_count":672,"split_key":16509,"timestamp":"2026-03-28T03:00:00.000Z"} +{"doc_count":617,"split_key":271410,"timestamp":"2026-03-28T03:00:00.000Z"} +{"doc_count":510,"split_key":209334,"timestamp":"2026-03-28T03:00:00.000Z"} +{"doc_count":503,"split_key":396982,"timestamp":"2026-03-28T03:00:00.000Z"} +{"doc_count":1288,"split_key":51396,"timestamp":"2026-03-28T04:00:00.000Z"} +{"doc_count":1024,"split_key":213790,"timestamp":"2026-03-28T04:00:00.000Z"} +{"doc_count":828,"split_key":61782,"timestamp":"2026-03-28T04:00:00.000Z"} +{"doc_count":775,"split_key":16509,"timestamp":"2026-03-28T04:00:00.000Z"} +{"doc_count":458,"split_key":37963,"timestamp":"2026-03-28T04:00:00.000Z"} +{"doc_count":1528,"split_key":213790,"timestamp":"2026-03-28T05:00:00.000Z"} +{"doc_count":1438,"split_key":51396,"timestamp":"2026-03-28T05:00:00.000Z"} +{"doc_count":818,"split_key":61782,"timestamp":"2026-03-28T05:00:00.000Z"} +{"doc_count":525,"split_key":16509,"timestamp":"2026-03-28T05:00:00.000Z"} +{"doc_count":469,"split_key":37963,"timestamp":"2026-03-28T05:00:00.000Z"} +{"doc_count":2157,"split_key":213790,"timestamp":"2026-03-28T06:00:00.000Z"} +{"doc_count":2067,"split_key":51396,"timestamp":"2026-03-28T06:00:00.000Z"} +{"doc_count":1956,"split_key":45102,"timestamp":"2026-03-28T06:00:00.000Z"} +{"doc_count":830,"split_key":61782,"timestamp":"2026-03-28T06:00:00.000Z"} +{"doc_count":500,"split_key":209334,"timestamp":"2026-03-28T06:00:00.000Z"} +{"doc_count":2489,"split_key":45102,"timestamp":"2026-03-28T07:00:00.000Z"} +{"doc_count":2121,"split_key":213790,"timestamp":"2026-03-28T07:00:00.000Z"} +{"doc_count":2059,"split_key":51396,"timestamp":"2026-03-28T07:00:00.000Z"} +{"doc_count":857,"split_key":61782,"timestamp":"2026-03-28T07:00:00.000Z"} +{"doc_count":521,"split_key":208137,"timestamp":"2026-03-28T07:00:00.000Z"} +{"doc_count":996,"split_key":209334,"timestamp":"2026-03-28T08:00:00.000Z"} +{"doc_count":990,"split_key":51396,"timestamp":"2026-03-28T08:00:00.000Z"} +{"doc_count":890,"split_key":213790,"timestamp":"2026-03-28T08:00:00.000Z"} +{"doc_count":799,"split_key":61782,"timestamp":"2026-03-28T08:00:00.000Z"} +{"doc_count":492,"split_key":37963,"timestamp":"2026-03-28T08:00:00.000Z"} +{"doc_count":950,"split_key":45102,"timestamp":"2026-03-28T09:00:00.000Z"} +{"doc_count":732,"split_key":61782,"timestamp":"2026-03-28T09:00:00.000Z"} +{"doc_count":569,"split_key":24323,"timestamp":"2026-03-28T09:00:00.000Z"} +{"doc_count":559,"split_key":37963,"timestamp":"2026-03-28T09:00:00.000Z"} +{"doc_count":553,"split_key":396982,"timestamp":"2026-03-28T09:00:00.000Z"} +{"doc_count":988,"split_key":45102,"timestamp":"2026-03-28T10:00:00.000Z"} +{"doc_count":861,"split_key":61782,"timestamp":"2026-03-28T10:00:00.000Z"} +{"doc_count":602,"split_key":16509,"timestamp":"2026-03-28T10:00:00.000Z"} +{"doc_count":593,"split_key":24323,"timestamp":"2026-03-28T10:00:00.000Z"} +{"doc_count":447,"split_key":396982,"timestamp":"2026-03-28T10:00:00.000Z"} +{"doc_count":885,"split_key":45102,"timestamp":"2026-03-28T11:00:00.000Z"} +{"doc_count":843,"split_key":271380,"timestamp":"2026-03-28T11:00:00.000Z"} +{"doc_count":621,"split_key":61782,"timestamp":"2026-03-28T11:00:00.000Z"} +{"doc_count":584,"split_key":24323,"timestamp":"2026-03-28T11:00:00.000Z"} +{"doc_count":466,"split_key":396982,"timestamp":"2026-03-28T11:00:00.000Z"} +{"doc_count":4152,"split_key":271380,"timestamp":"2026-03-28T12:00:00.000Z"} +{"doc_count":917,"split_key":45102,"timestamp":"2026-03-28T12:00:00.000Z"} +{"doc_count":511,"split_key":24323,"timestamp":"2026-03-28T12:00:00.000Z"} +{"doc_count":393,"split_key":201814,"timestamp":"2026-03-28T12:00:00.000Z"} +{"doc_count":382,"split_key":16509,"timestamp":"2026-03-28T12:00:00.000Z"} +{"doc_count":7222,"split_key":211590,"timestamp":"2026-03-28T13:00:00.000Z"} +{"doc_count":4068,"split_key":271380,"timestamp":"2026-03-28T13:00:00.000Z"} +{"doc_count":831,"split_key":45102,"timestamp":"2026-03-28T13:00:00.000Z"} +{"doc_count":557,"split_key":24323,"timestamp":"2026-03-28T13:00:00.000Z"} +{"doc_count":473,"split_key":16509,"timestamp":"2026-03-28T13:00:00.000Z"} +{"doc_count":10572,"split_key":211590,"timestamp":"2026-03-28T14:00:00.000Z"} +{"doc_count":4659,"split_key":271380,"timestamp":"2026-03-28T14:00:00.000Z"} +{"doc_count":583,"split_key":209334,"timestamp":"2026-03-28T14:00:00.000Z"} +{"doc_count":575,"split_key":45102,"timestamp":"2026-03-28T14:00:00.000Z"} +{"doc_count":513,"split_key":24323,"timestamp":"2026-03-28T14:00:00.000Z"} +{"doc_count":25014,"split_key":211590,"timestamp":"2026-03-28T15:00:00.000Z"} +{"doc_count":5424,"split_key":271380,"timestamp":"2026-03-28T15:00:00.000Z"} +{"doc_count":2127,"split_key":51396,"timestamp":"2026-03-28T15:00:00.000Z"} +{"doc_count":822,"split_key":141995,"timestamp":"2026-03-28T15:00:00.000Z"} +{"doc_count":519,"split_key":24323,"timestamp":"2026-03-28T15:00:00.000Z"} +{"doc_count":6765,"split_key":211590,"timestamp":"2026-03-28T16:00:00.000Z"} +{"doc_count":5533,"split_key":271380,"timestamp":"2026-03-28T16:00:00.000Z"} +{"doc_count":507,"split_key":24323,"timestamp":"2026-03-28T16:00:00.000Z"} +{"doc_count":426,"split_key":398324,"timestamp":"2026-03-28T16:00:00.000Z"} +{"doc_count":382,"split_key":201814,"timestamp":"2026-03-28T16:00:00.000Z"} +{"doc_count":7805,"split_key":211590,"timestamp":"2026-03-28T17:00:00.000Z"} +{"doc_count":5501,"split_key":271380,"timestamp":"2026-03-28T17:00:00.000Z"} +{"doc_count":506,"split_key":24323,"timestamp":"2026-03-28T17:00:00.000Z"} +{"doc_count":449,"split_key":209334,"timestamp":"2026-03-28T17:00:00.000Z"} +{"doc_count":408,"split_key":16509,"timestamp":"2026-03-28T17:00:00.000Z"} +{"doc_count":4835,"split_key":271380,"timestamp":"2026-03-28T18:00:00.000Z"} +{"doc_count":4130,"split_key":211590,"timestamp":"2026-03-28T18:00:00.000Z"} +{"doc_count":560,"split_key":16509,"timestamp":"2026-03-28T18:00:00.000Z"} +{"doc_count":499,"split_key":396982,"timestamp":"2026-03-28T18:00:00.000Z"} +{"doc_count":459,"split_key":209334,"timestamp":"2026-03-28T18:00:00.000Z"} +{"doc_count":5853,"split_key":211590,"timestamp":"2026-03-28T19:00:00.000Z"} +{"doc_count":1448,"split_key":271380,"timestamp":"2026-03-28T19:00:00.000Z"} +{"doc_count":561,"split_key":16509,"timestamp":"2026-03-28T19:00:00.000Z"} +{"doc_count":442,"split_key":209334,"timestamp":"2026-03-28T19:00:00.000Z"} +{"doc_count":413,"split_key":201814,"timestamp":"2026-03-28T19:00:00.000Z"} +{"doc_count":6825,"split_key":271380,"timestamp":"2026-03-28T20:00:00.000Z"} +{"doc_count":370,"split_key":201814,"timestamp":"2026-03-28T20:00:00.000Z"} +{"doc_count":342,"split_key":211590,"timestamp":"2026-03-28T20:00:00.000Z"} +{"doc_count":310,"split_key":398324,"timestamp":"2026-03-28T20:00:00.000Z"} +{"doc_count":300,"split_key":396982,"timestamp":"2026-03-28T20:00:00.000Z"} +{"doc_count":6263,"split_key":271380,"timestamp":"2026-03-28T21:00:00.000Z"} +{"doc_count":2306,"split_key":211590,"timestamp":"2026-03-28T21:00:00.000Z"} +{"doc_count":452,"split_key":396982,"timestamp":"2026-03-28T21:00:00.000Z"} +{"doc_count":404,"split_key":209334,"timestamp":"2026-03-28T21:00:00.000Z"} +{"doc_count":402,"split_key":201814,"timestamp":"2026-03-28T21:00:00.000Z"} +{"doc_count":5710,"split_key":271380,"timestamp":"2026-03-28T22:00:00.000Z"} +{"doc_count":490,"split_key":396982,"timestamp":"2026-03-28T22:00:00.000Z"} +{"doc_count":438,"split_key":209334,"timestamp":"2026-03-28T22:00:00.000Z"} +{"doc_count":380,"split_key":36236,"timestamp":"2026-03-28T22:00:00.000Z"} +{"doc_count":315,"split_key":201814,"timestamp":"2026-03-28T22:00:00.000Z"} +{"doc_count":5786,"split_key":271380,"timestamp":"2026-03-28T23:00:00.000Z"} +{"doc_count":3766,"split_key":209334,"timestamp":"2026-03-28T23:00:00.000Z"} +{"doc_count":2152,"split_key":211590,"timestamp":"2026-03-28T23:00:00.000Z"} +{"doc_count":572,"split_key":396982,"timestamp":"2026-03-28T23:00:00.000Z"} +{"doc_count":350,"split_key":36236,"timestamp":"2026-03-28T23:00:00.000Z"} +{"doc_count":5943,"split_key":271380,"timestamp":"2026-03-29T00:00:00.000Z"} +{"doc_count":3647,"split_key":209334,"timestamp":"2026-03-29T00:00:00.000Z"} +{"doc_count":510,"split_key":396982,"timestamp":"2026-03-29T00:00:00.000Z"} +{"doc_count":307,"split_key":201814,"timestamp":"2026-03-29T00:00:00.000Z"} +{"doc_count":273,"split_key":36236,"timestamp":"2026-03-29T00:00:00.000Z"} +{"doc_count":13221,"split_key":271380,"timestamp":"2026-03-29T01:00:00.000Z"} +{"doc_count":2490,"split_key":209334,"timestamp":"2026-03-29T01:00:00.000Z"} +{"doc_count":920,"split_key":396982,"timestamp":"2026-03-29T01:00:00.000Z"} +{"doc_count":394,"split_key":36236,"timestamp":"2026-03-29T01:00:00.000Z"} +{"doc_count":324,"split_key":14061,"timestamp":"2026-03-29T01:00:00.000Z"} +{"doc_count":26405,"split_key":271380,"timestamp":"2026-03-29T02:00:00.000Z"} +{"doc_count":2999,"split_key":209334,"timestamp":"2026-03-29T02:00:00.000Z"} +{"doc_count":2397,"split_key":45102,"timestamp":"2026-03-29T02:00:00.000Z"} +{"doc_count":569,"split_key":396982,"timestamp":"2026-03-29T02:00:00.000Z"} +{"doc_count":459,"split_key":16509,"timestamp":"2026-03-29T02:00:00.000Z"} +{"doc_count":26829,"split_key":271380,"timestamp":"2026-03-29T03:00:00.000Z"} +{"doc_count":2152,"split_key":211590,"timestamp":"2026-03-29T03:00:00.000Z"} +{"doc_count":1932,"split_key":45102,"timestamp":"2026-03-29T03:00:00.000Z"} +{"doc_count":621,"split_key":396982,"timestamp":"2026-03-29T03:00:00.000Z"} +{"doc_count":428,"split_key":14061,"timestamp":"2026-03-29T03:00:00.000Z"} +{"doc_count":27694,"split_key":271380,"timestamp":"2026-03-29T04:00:00.000Z"} +{"doc_count":786,"split_key":396982,"timestamp":"2026-03-29T04:00:00.000Z"} +{"doc_count":550,"split_key":16509,"timestamp":"2026-03-29T04:00:00.000Z"} +{"doc_count":452,"split_key":14061,"timestamp":"2026-03-29T04:00:00.000Z"} +{"doc_count":293,"split_key":398324,"timestamp":"2026-03-29T04:00:00.000Z"} +{"doc_count":28006,"split_key":271380,"timestamp":"2026-03-29T05:00:00.000Z"} +{"doc_count":633,"split_key":16509,"timestamp":"2026-03-29T05:00:00.000Z"} +{"doc_count":319,"split_key":201814,"timestamp":"2026-03-29T05:00:00.000Z"} +{"doc_count":313,"split_key":135377,"timestamp":"2026-03-29T05:00:00.000Z"} +{"doc_count":312,"split_key":36236,"timestamp":"2026-03-29T05:00:00.000Z"} +{"doc_count":27486,"split_key":271380,"timestamp":"2026-03-29T06:00:00.000Z"} +{"doc_count":2152,"split_key":211590,"timestamp":"2026-03-29T06:00:00.000Z"} +{"doc_count":759,"split_key":16509,"timestamp":"2026-03-29T06:00:00.000Z"} +{"doc_count":509,"split_key":398324,"timestamp":"2026-03-29T06:00:00.000Z"} +{"doc_count":365,"split_key":63949,"timestamp":"2026-03-29T06:00:00.000Z"} +{"doc_count":28480,"split_key":271380,"timestamp":"2026-03-29T07:00:00.000Z"} +{"doc_count":1411,"split_key":14061,"timestamp":"2026-03-29T07:00:00.000Z"} +{"doc_count":471,"split_key":16509,"timestamp":"2026-03-29T07:00:00.000Z"} +{"doc_count":330,"split_key":201814,"timestamp":"2026-03-29T07:00:00.000Z"} +{"doc_count":243,"split_key":396982,"timestamp":"2026-03-29T07:00:00.000Z"} +{"doc_count":28558,"split_key":271380,"timestamp":"2026-03-29T08:00:00.000Z"} +{"doc_count":6277,"split_key":14061,"timestamp":"2026-03-29T08:00:00.000Z"} +{"doc_count":2218,"split_key":211590,"timestamp":"2026-03-29T08:00:00.000Z"} +{"doc_count":588,"split_key":16509,"timestamp":"2026-03-29T08:00:00.000Z"} +{"doc_count":423,"split_key":396982,"timestamp":"2026-03-29T08:00:00.000Z"} +{"doc_count":28680,"split_key":271380,"timestamp":"2026-03-29T09:00:00.000Z"} +{"doc_count":787,"split_key":396982,"timestamp":"2026-03-29T09:00:00.000Z"} +{"doc_count":400,"split_key":16509,"timestamp":"2026-03-29T09:00:00.000Z"} +{"doc_count":275,"split_key":201814,"timestamp":"2026-03-29T09:00:00.000Z"} +{"doc_count":240,"split_key":205759,"timestamp":"2026-03-29T09:00:00.000Z"} +{"doc_count":28283,"split_key":271380,"timestamp":"2026-03-29T10:00:00.000Z"} +{"doc_count":638,"split_key":396982,"timestamp":"2026-03-29T10:00:00.000Z"} +{"doc_count":636,"split_key":16509,"timestamp":"2026-03-29T10:00:00.000Z"} +{"doc_count":356,"split_key":24444,"timestamp":"2026-03-29T10:00:00.000Z"} +{"doc_count":294,"split_key":201814,"timestamp":"2026-03-29T10:00:00.000Z"} +{"doc_count":26900,"split_key":271380,"timestamp":"2026-03-29T11:00:00.000Z"} +{"doc_count":810,"split_key":16509,"timestamp":"2026-03-29T11:00:00.000Z"} +{"doc_count":533,"split_key":396982,"timestamp":"2026-03-29T11:00:00.000Z"} +{"doc_count":385,"split_key":209334,"timestamp":"2026-03-29T11:00:00.000Z"} +{"doc_count":291,"split_key":201814,"timestamp":"2026-03-29T11:00:00.000Z"} +{"doc_count":28066,"split_key":271380,"timestamp":"2026-03-29T12:00:00.000Z"} +{"doc_count":549,"split_key":396982,"timestamp":"2026-03-29T12:00:00.000Z"} +{"doc_count":512,"split_key":16509,"timestamp":"2026-03-29T12:00:00.000Z"} +{"doc_count":487,"split_key":138915,"timestamp":"2026-03-29T12:00:00.000Z"} +{"doc_count":304,"split_key":201814,"timestamp":"2026-03-29T12:00:00.000Z"} +{"doc_count":29344,"split_key":271380,"timestamp":"2026-03-29T13:00:00.000Z"} +{"doc_count":670,"split_key":396982,"timestamp":"2026-03-29T13:00:00.000Z"} +{"doc_count":469,"split_key":16509,"timestamp":"2026-03-29T13:00:00.000Z"} +{"doc_count":418,"split_key":398324,"timestamp":"2026-03-29T13:00:00.000Z"} +{"doc_count":277,"split_key":201814,"timestamp":"2026-03-29T13:00:00.000Z"} +{"doc_count":28597,"split_key":271380,"timestamp":"2026-03-29T14:00:00.000Z"} +{"doc_count":484,"split_key":16509,"timestamp":"2026-03-29T14:00:00.000Z"} +{"doc_count":450,"split_key":396982,"timestamp":"2026-03-29T14:00:00.000Z"} +{"doc_count":346,"split_key":37963,"timestamp":"2026-03-29T14:00:00.000Z"} +{"doc_count":283,"split_key":201814,"timestamp":"2026-03-29T14:00:00.000Z"} +{"doc_count":29696,"split_key":271380,"timestamp":"2026-03-29T15:00:00.000Z"} +{"doc_count":916,"split_key":37963,"timestamp":"2026-03-29T15:00:00.000Z"} +{"doc_count":587,"split_key":213493,"timestamp":"2026-03-29T15:00:00.000Z"} +{"doc_count":474,"split_key":16509,"timestamp":"2026-03-29T15:00:00.000Z"} +{"doc_count":289,"split_key":201814,"timestamp":"2026-03-29T15:00:00.000Z"} +{"doc_count":28895,"split_key":271380,"timestamp":"2026-03-29T16:00:00.000Z"} +{"doc_count":981,"split_key":37963,"timestamp":"2026-03-29T16:00:00.000Z"} +{"doc_count":340,"split_key":396982,"timestamp":"2026-03-29T16:00:00.000Z"} +{"doc_count":336,"split_key":16509,"timestamp":"2026-03-29T16:00:00.000Z"} +{"doc_count":290,"split_key":201814,"timestamp":"2026-03-29T16:00:00.000Z"} +{"doc_count":5191,"split_key":271380,"timestamp":"2026-03-29T17:00:00.000Z"} +{"doc_count":972,"split_key":37963,"timestamp":"2026-03-29T17:00:00.000Z"} +{"doc_count":870,"split_key":138915,"timestamp":"2026-03-29T17:00:00.000Z"} +{"doc_count":552,"split_key":16509,"timestamp":"2026-03-29T17:00:00.000Z"} +{"doc_count":503,"split_key":396982,"timestamp":"2026-03-29T17:00:00.000Z"} +{"doc_count":2647,"split_key":51167,"timestamp":"2026-03-29T18:00:00.000Z"} +{"doc_count":1356,"split_key":37963,"timestamp":"2026-03-29T18:00:00.000Z"} +{"doc_count":561,"split_key":209334,"timestamp":"2026-03-29T18:00:00.000Z"} +{"doc_count":433,"split_key":16509,"timestamp":"2026-03-29T18:00:00.000Z"} +{"doc_count":421,"split_key":138915,"timestamp":"2026-03-29T18:00:00.000Z"} +{"doc_count":1978,"split_key":37963,"timestamp":"2026-03-29T19:00:00.000Z"} +{"doc_count":419,"split_key":396982,"timestamp":"2026-03-29T19:00:00.000Z"} +{"doc_count":417,"split_key":209334,"timestamp":"2026-03-29T19:00:00.000Z"} +{"doc_count":318,"split_key":16509,"timestamp":"2026-03-29T19:00:00.000Z"} +{"doc_count":318,"split_key":201814,"timestamp":"2026-03-29T19:00:00.000Z"} +{"doc_count":1955,"split_key":37963,"timestamp":"2026-03-29T20:00:00.000Z"} +{"doc_count":1068,"split_key":16509,"timestamp":"2026-03-29T20:00:00.000Z"} +{"doc_count":566,"split_key":396982,"timestamp":"2026-03-29T20:00:00.000Z"} +{"doc_count":350,"split_key":398324,"timestamp":"2026-03-29T20:00:00.000Z"} +{"doc_count":306,"split_key":201814,"timestamp":"2026-03-29T20:00:00.000Z"} +{"doc_count":2419,"split_key":16509,"timestamp":"2026-03-29T21:00:00.000Z"} +{"doc_count":1309,"split_key":37963,"timestamp":"2026-03-29T21:00:00.000Z"} +{"doc_count":607,"split_key":396982,"timestamp":"2026-03-29T21:00:00.000Z"} +{"doc_count":379,"split_key":138915,"timestamp":"2026-03-29T21:00:00.000Z"} +{"doc_count":299,"split_key":201814,"timestamp":"2026-03-29T21:00:00.000Z"} +{"doc_count":788,"split_key":16509,"timestamp":"2026-03-29T22:00:00.000Z"} +{"doc_count":603,"split_key":37963,"timestamp":"2026-03-29T22:00:00.000Z"} +{"doc_count":517,"split_key":51396,"timestamp":"2026-03-29T22:00:00.000Z"} +{"doc_count":448,"split_key":396982,"timestamp":"2026-03-29T22:00:00.000Z"} +{"doc_count":370,"split_key":201814,"timestamp":"2026-03-29T22:00:00.000Z"} +{"doc_count":4463,"split_key":209334,"timestamp":"2026-03-29T23:00:00.000Z"} +{"doc_count":1856,"split_key":37963,"timestamp":"2026-03-29T23:00:00.000Z"} +{"doc_count":902,"split_key":45102,"timestamp":"2026-03-29T23:00:00.000Z"} +{"doc_count":425,"split_key":396982,"timestamp":"2026-03-29T23:00:00.000Z"} +{"doc_count":269,"split_key":398324,"timestamp":"2026-03-29T23:00:00.000Z"} +{"doc_count":4121,"split_key":209334,"timestamp":"2026-03-30T00:00:00.000Z"} +{"doc_count":1731,"split_key":271380,"timestamp":"2026-03-30T00:00:00.000Z"} +{"doc_count":1244,"split_key":45102,"timestamp":"2026-03-30T00:00:00.000Z"} +{"doc_count":1160,"split_key":37963,"timestamp":"2026-03-30T00:00:00.000Z"} +{"doc_count":440,"split_key":396982,"timestamp":"2026-03-30T00:00:00.000Z"} +{"doc_count":6193,"split_key":271380,"timestamp":"2026-03-30T01:00:00.000Z"} +{"doc_count":2718,"split_key":209334,"timestamp":"2026-03-30T01:00:00.000Z"} +{"doc_count":2152,"split_key":211590,"timestamp":"2026-03-30T01:00:00.000Z"} +{"doc_count":899,"split_key":37963,"timestamp":"2026-03-30T01:00:00.000Z"} +{"doc_count":861,"split_key":45102,"timestamp":"2026-03-30T01:00:00.000Z"} +{"doc_count":6245,"split_key":271380,"timestamp":"2026-03-30T02:00:00.000Z"} +{"doc_count":1761,"split_key":209334,"timestamp":"2026-03-30T02:00:00.000Z"} +{"doc_count":1469,"split_key":37963,"timestamp":"2026-03-30T02:00:00.000Z"} +{"doc_count":859,"split_key":45102,"timestamp":"2026-03-30T02:00:00.000Z"} +{"doc_count":426,"split_key":16509,"timestamp":"2026-03-30T02:00:00.000Z"} +{"doc_count":6171,"split_key":271380,"timestamp":"2026-03-30T03:00:00.000Z"} +{"doc_count":1483,"split_key":37963,"timestamp":"2026-03-30T03:00:00.000Z"} +{"doc_count":830,"split_key":16509,"timestamp":"2026-03-30T03:00:00.000Z"} +{"doc_count":806,"split_key":45102,"timestamp":"2026-03-30T03:00:00.000Z"} +{"doc_count":793,"split_key":209334,"timestamp":"2026-03-30T03:00:00.000Z"} +{"doc_count":6297,"split_key":271380,"timestamp":"2026-03-30T04:00:00.000Z"} +{"doc_count":2152,"split_key":211590,"timestamp":"2026-03-30T04:00:00.000Z"} +{"doc_count":1454,"split_key":37963,"timestamp":"2026-03-30T04:00:00.000Z"} +{"doc_count":910,"split_key":16509,"timestamp":"2026-03-30T04:00:00.000Z"} +{"doc_count":872,"split_key":45102,"timestamp":"2026-03-30T04:00:00.000Z"} +{"doc_count":6089,"split_key":271380,"timestamp":"2026-03-30T05:00:00.000Z"} +{"doc_count":1270,"split_key":37963,"timestamp":"2026-03-30T05:00:00.000Z"} +{"doc_count":882,"split_key":45102,"timestamp":"2026-03-30T05:00:00.000Z"} +{"doc_count":468,"split_key":209334,"timestamp":"2026-03-30T05:00:00.000Z"} +{"doc_count":397,"split_key":396982,"timestamp":"2026-03-30T05:00:00.000Z"} +{"doc_count":6161,"split_key":271380,"timestamp":"2026-03-30T06:00:00.000Z"} +{"doc_count":1335,"split_key":37963,"timestamp":"2026-03-30T06:00:00.000Z"} +{"doc_count":920,"split_key":45102,"timestamp":"2026-03-30T06:00:00.000Z"} +{"doc_count":411,"split_key":398324,"timestamp":"2026-03-30T06:00:00.000Z"} +{"doc_count":385,"split_key":209334,"timestamp":"2026-03-30T06:00:00.000Z"} +{"doc_count":6031,"split_key":271380,"timestamp":"2026-03-30T07:00:00.000Z"} +{"doc_count":2152,"split_key":211590,"timestamp":"2026-03-30T07:00:00.000Z"} +{"doc_count":1365,"split_key":37963,"timestamp":"2026-03-30T07:00:00.000Z"} +{"doc_count":866,"split_key":45102,"timestamp":"2026-03-30T07:00:00.000Z"} +{"doc_count":721,"split_key":16509,"timestamp":"2026-03-30T07:00:00.000Z"} +{"doc_count":6161,"split_key":271380,"timestamp":"2026-03-30T08:00:00.000Z"} +{"doc_count":2023,"split_key":37963,"timestamp":"2026-03-30T08:00:00.000Z"} +{"doc_count":1425,"split_key":57717,"timestamp":"2026-03-30T08:00:00.000Z"} +{"doc_count":862,"split_key":45102,"timestamp":"2026-03-30T08:00:00.000Z"} +{"doc_count":722,"split_key":42397,"timestamp":"2026-03-30T08:00:00.000Z"} +{"doc_count":6052,"split_key":271380,"timestamp":"2026-03-30T09:00:00.000Z"} +{"doc_count":1764,"split_key":37963,"timestamp":"2026-03-30T09:00:00.000Z"} +{"doc_count":1644,"split_key":209334,"timestamp":"2026-03-30T09:00:00.000Z"} +{"doc_count":1491,"split_key":57717,"timestamp":"2026-03-30T09:00:00.000Z"} +{"doc_count":845,"split_key":45102,"timestamp":"2026-03-30T09:00:00.000Z"} +{"doc_count":5912,"split_key":271380,"timestamp":"2026-03-30T10:00:00.000Z"} +{"doc_count":3011,"split_key":49581,"timestamp":"2026-03-30T10:00:00.000Z"} +{"doc_count":2340,"split_key":211590,"timestamp":"2026-03-30T10:00:00.000Z"} +{"doc_count":1487,"split_key":57717,"timestamp":"2026-03-30T10:00:00.000Z"} +{"doc_count":1400,"split_key":37963,"timestamp":"2026-03-30T10:00:00.000Z"} +{"doc_count":15622,"split_key":271380,"timestamp":"2026-03-30T11:00:00.000Z"} +{"doc_count":1465,"split_key":37963,"timestamp":"2026-03-30T11:00:00.000Z"} +{"doc_count":994,"split_key":45102,"timestamp":"2026-03-30T11:00:00.000Z"} +{"doc_count":963,"split_key":209334,"timestamp":"2026-03-30T11:00:00.000Z"} +{"doc_count":633,"split_key":16509,"timestamp":"2026-03-30T11:00:00.000Z"} +{"doc_count":23270,"split_key":271380,"timestamp":"2026-03-30T12:00:00.000Z"} +{"doc_count":2766,"split_key":45102,"timestamp":"2026-03-30T12:00:00.000Z"} +{"doc_count":1516,"split_key":37963,"timestamp":"2026-03-30T12:00:00.000Z"} +{"doc_count":487,"split_key":209334,"timestamp":"2026-03-30T12:00:00.000Z"} +{"doc_count":464,"split_key":16509,"timestamp":"2026-03-30T12:00:00.000Z"} +{"doc_count":24475,"split_key":271380,"timestamp":"2026-03-30T13:00:00.000Z"} +{"doc_count":3247,"split_key":45102,"timestamp":"2026-03-30T13:00:00.000Z"} +{"doc_count":1926,"split_key":37963,"timestamp":"2026-03-30T13:00:00.000Z"} +{"doc_count":647,"split_key":16509,"timestamp":"2026-03-30T13:00:00.000Z"} +{"doc_count":287,"split_key":398324,"timestamp":"2026-03-30T13:00:00.000Z"} +{"doc_count":24051,"split_key":271380,"timestamp":"2026-03-30T14:00:00.000Z"} +{"doc_count":2049,"split_key":37963,"timestamp":"2026-03-30T14:00:00.000Z"} +{"doc_count":1682,"split_key":45102,"timestamp":"2026-03-30T14:00:00.000Z"} +{"doc_count":388,"split_key":199829,"timestamp":"2026-03-30T14:00:00.000Z"} +{"doc_count":372,"split_key":16509,"timestamp":"2026-03-30T14:00:00.000Z"} +{"doc_count":50549,"split_key":263284,"timestamp":"2026-03-30T15:00:00.000Z"} +{"doc_count":24400,"split_key":271380,"timestamp":"2026-03-30T15:00:00.000Z"} +{"doc_count":16127,"split_key":264051,"timestamp":"2026-03-30T15:00:00.000Z"} +{"doc_count":15410,"split_key":270581,"timestamp":"2026-03-30T15:00:00.000Z"} +{"doc_count":3227,"split_key":53072,"timestamp":"2026-03-30T15:00:00.000Z"} +{"doc_count":22005,"split_key":271380,"timestamp":"2026-03-30T16:00:00.000Z"} +{"doc_count":889,"split_key":37963,"timestamp":"2026-03-30T16:00:00.000Z"} +{"doc_count":607,"split_key":16509,"timestamp":"2026-03-30T16:00:00.000Z"} +{"doc_count":374,"split_key":199829,"timestamp":"2026-03-30T16:00:00.000Z"} +{"doc_count":284,"split_key":131090,"timestamp":"2026-03-30T16:00:00.000Z"} +{"doc_count":21794,"split_key":271380,"timestamp":"2026-03-30T17:00:00.000Z"} +{"doc_count":2278,"split_key":211590,"timestamp":"2026-03-30T17:00:00.000Z"} +{"doc_count":1142,"split_key":209334,"timestamp":"2026-03-30T17:00:00.000Z"} +{"doc_count":829,"split_key":37963,"timestamp":"2026-03-30T17:00:00.000Z"} +{"doc_count":704,"split_key":16509,"timestamp":"2026-03-30T17:00:00.000Z"} +{"doc_count":21086,"split_key":271380,"timestamp":"2026-03-30T18:00:00.000Z"} +{"doc_count":1081,"split_key":199829,"timestamp":"2026-03-30T18:00:00.000Z"} +{"doc_count":861,"split_key":37963,"timestamp":"2026-03-30T18:00:00.000Z"} +{"doc_count":705,"split_key":16509,"timestamp":"2026-03-30T18:00:00.000Z"} +{"doc_count":477,"split_key":396982,"timestamp":"2026-03-30T18:00:00.000Z"} +{"doc_count":20805,"split_key":271380,"timestamp":"2026-03-30T19:00:00.000Z"} +{"doc_count":1220,"split_key":37963,"timestamp":"2026-03-30T19:00:00.000Z"} +{"doc_count":1001,"split_key":199829,"timestamp":"2026-03-30T19:00:00.000Z"} +{"doc_count":821,"split_key":16509,"timestamp":"2026-03-30T19:00:00.000Z"} +{"doc_count":416,"split_key":135377,"timestamp":"2026-03-30T19:00:00.000Z"} +{"doc_count":20922,"split_key":271380,"timestamp":"2026-03-30T20:00:00.000Z"} +{"doc_count":7328,"split_key":52630,"timestamp":"2026-03-30T20:00:00.000Z"} +{"doc_count":729,"split_key":37963,"timestamp":"2026-03-30T20:00:00.000Z"} +{"doc_count":595,"split_key":16509,"timestamp":"2026-03-30T20:00:00.000Z"} +{"doc_count":475,"split_key":396982,"timestamp":"2026-03-30T20:00:00.000Z"} +{"doc_count":20458,"split_key":271380,"timestamp":"2026-03-30T21:00:00.000Z"} +{"doc_count":3507,"split_key":271201,"timestamp":"2026-03-30T21:00:00.000Z"} +{"doc_count":402,"split_key":16509,"timestamp":"2026-03-30T21:00:00.000Z"} +{"doc_count":361,"split_key":396982,"timestamp":"2026-03-30T21:00:00.000Z"} +{"doc_count":342,"split_key":37963,"timestamp":"2026-03-30T21:00:00.000Z"} +{"doc_count":71476,"split_key":271201,"timestamp":"2026-03-30T22:00:00.000Z"} +{"doc_count":20474,"split_key":271380,"timestamp":"2026-03-30T22:00:00.000Z"} +{"doc_count":2152,"split_key":211590,"timestamp":"2026-03-30T22:00:00.000Z"} +{"doc_count":453,"split_key":396982,"timestamp":"2026-03-30T22:00:00.000Z"} +{"doc_count":442,"split_key":16509,"timestamp":"2026-03-30T22:00:00.000Z"} +{"doc_count":24168,"split_key":263284,"timestamp":"2026-03-30T23:00:00.000Z"} +{"doc_count":22977,"split_key":263536,"timestamp":"2026-03-30T23:00:00.000Z"} +{"doc_count":20994,"split_key":271380,"timestamp":"2026-03-30T23:00:00.000Z"} +{"doc_count":12618,"split_key":271201,"timestamp":"2026-03-30T23:00:00.000Z"} +{"doc_count":4545,"split_key":262988,"timestamp":"2026-03-30T23:00:00.000Z"} +{"doc_count":32812,"split_key":263284,"timestamp":"2026-03-31T00:00:00.000Z"} +{"doc_count":24601,"split_key":263536,"timestamp":"2026-03-31T00:00:00.000Z"} +{"doc_count":21024,"split_key":271380,"timestamp":"2026-03-31T00:00:00.000Z"} +{"doc_count":6359,"split_key":262988,"timestamp":"2026-03-31T00:00:00.000Z"} +{"doc_count":6358,"split_key":266498,"timestamp":"2026-03-31T00:00:00.000Z"} +{"doc_count":24633,"split_key":263284,"timestamp":"2026-03-31T01:00:00.000Z"} +{"doc_count":20124,"split_key":271380,"timestamp":"2026-03-31T01:00:00.000Z"} +{"doc_count":10024,"split_key":263536,"timestamp":"2026-03-31T01:00:00.000Z"} +{"doc_count":4984,"split_key":266498,"timestamp":"2026-03-31T01:00:00.000Z"} +{"doc_count":4583,"split_key":262988,"timestamp":"2026-03-31T01:00:00.000Z"} +{"doc_count":17925,"split_key":271380,"timestamp":"2026-03-31T02:00:00.000Z"} +{"doc_count":2792,"split_key":268983,"timestamp":"2026-03-31T02:00:00.000Z"} +{"doc_count":2153,"split_key":211590,"timestamp":"2026-03-31T02:00:00.000Z"} +{"doc_count":643,"split_key":209334,"timestamp":"2026-03-31T02:00:00.000Z"} +{"doc_count":625,"split_key":16509,"timestamp":"2026-03-31T02:00:00.000Z"} +{"doc_count":53200,"split_key":268983,"timestamp":"2026-03-31T03:00:00.000Z"} +{"doc_count":43106,"split_key":53158,"timestamp":"2026-03-31T03:00:00.000Z"} +{"doc_count":758,"split_key":16509,"timestamp":"2026-03-31T03:00:00.000Z"} +{"doc_count":372,"split_key":201814,"timestamp":"2026-03-31T03:00:00.000Z"} +{"doc_count":324,"split_key":396982,"timestamp":"2026-03-31T03:00:00.000Z"} +{"doc_count":51970,"split_key":268983,"timestamp":"2026-03-31T04:00:00.000Z"} +{"doc_count":46640,"split_key":53158,"timestamp":"2026-03-31T04:00:00.000Z"} +{"doc_count":771,"split_key":16509,"timestamp":"2026-03-31T04:00:00.000Z"} +{"doc_count":393,"split_key":396982,"timestamp":"2026-03-31T04:00:00.000Z"} +{"doc_count":390,"split_key":201814,"timestamp":"2026-03-31T04:00:00.000Z"} +{"doc_count":55327,"split_key":268983,"timestamp":"2026-03-31T05:00:00.000Z"} +{"doc_count":52520,"split_key":53158,"timestamp":"2026-03-31T05:00:00.000Z"} +{"doc_count":588,"split_key":16509,"timestamp":"2026-03-31T05:00:00.000Z"} +{"doc_count":360,"split_key":396982,"timestamp":"2026-03-31T05:00:00.000Z"} +{"doc_count":349,"split_key":201814,"timestamp":"2026-03-31T05:00:00.000Z"} +{"doc_count":51722,"split_key":268983,"timestamp":"2026-03-31T06:00:00.000Z"} +{"doc_count":51620,"split_key":53158,"timestamp":"2026-03-31T06:00:00.000Z"} +{"doc_count":686,"split_key":396982,"timestamp":"2026-03-31T06:00:00.000Z"} +{"doc_count":569,"split_key":16509,"timestamp":"2026-03-31T06:00:00.000Z"} +{"doc_count":380,"split_key":14061,"timestamp":"2026-03-31T06:00:00.000Z"} +{"doc_count":53078,"split_key":268983,"timestamp":"2026-03-31T07:00:00.000Z"} +{"doc_count":51424,"split_key":53158,"timestamp":"2026-03-31T07:00:00.000Z"} +{"doc_count":1629,"split_key":63949,"timestamp":"2026-03-31T07:00:00.000Z"} +{"doc_count":813,"split_key":16509,"timestamp":"2026-03-31T07:00:00.000Z"} +{"doc_count":505,"split_key":396982,"timestamp":"2026-03-31T07:00:00.000Z"} +{"doc_count":54105,"split_key":268983,"timestamp":"2026-03-31T08:00:00.000Z"} +{"doc_count":52077,"split_key":53158,"timestamp":"2026-03-31T08:00:00.000Z"} +{"doc_count":956,"split_key":16509,"timestamp":"2026-03-31T08:00:00.000Z"} +{"doc_count":744,"split_key":211590,"timestamp":"2026-03-31T08:00:00.000Z"} +{"doc_count":441,"split_key":396982,"timestamp":"2026-03-31T08:00:00.000Z"} +{"doc_count":53388,"split_key":53158,"timestamp":"2026-03-31T09:00:00.000Z"} +{"doc_count":52870,"split_key":268983,"timestamp":"2026-03-31T09:00:00.000Z"} +{"doc_count":2152,"split_key":211590,"timestamp":"2026-03-31T09:00:00.000Z"} +{"doc_count":792,"split_key":16509,"timestamp":"2026-03-31T09:00:00.000Z"} +{"doc_count":490,"split_key":209334,"timestamp":"2026-03-31T09:00:00.000Z"} +{"doc_count":52525,"split_key":268983,"timestamp":"2026-03-31T10:00:00.000Z"} +{"doc_count":50848,"split_key":53158,"timestamp":"2026-03-31T10:00:00.000Z"} +{"doc_count":4084,"split_key":265464,"timestamp":"2026-03-31T10:00:00.000Z"} +{"doc_count":596,"split_key":396982,"timestamp":"2026-03-31T10:00:00.000Z"} +{"doc_count":381,"split_key":201814,"timestamp":"2026-03-31T10:00:00.000Z"} +{"doc_count":6045,"split_key":265464,"timestamp":"2026-03-31T11:00:00.000Z"} +{"doc_count":566,"split_key":16509,"timestamp":"2026-03-31T11:00:00.000Z"} +{"doc_count":486,"split_key":209334,"timestamp":"2026-03-31T11:00:00.000Z"} +{"doc_count":455,"split_key":396982,"timestamp":"2026-03-31T11:00:00.000Z"} +{"doc_count":370,"split_key":201814,"timestamp":"2026-03-31T11:00:00.000Z"} +{"doc_count":4658,"split_key":265464,"timestamp":"2026-03-31T12:00:00.000Z"} +{"doc_count":2029,"split_key":211590,"timestamp":"2026-03-31T12:00:00.000Z"} +{"doc_count":859,"split_key":209334,"timestamp":"2026-03-31T12:00:00.000Z"} +{"doc_count":719,"split_key":16509,"timestamp":"2026-03-31T12:00:00.000Z"} +{"doc_count":453,"split_key":45102,"timestamp":"2026-03-31T12:00:00.000Z"} +{"doc_count":5750,"split_key":265464,"timestamp":"2026-03-31T13:00:00.000Z"} +{"doc_count":639,"split_key":45102,"timestamp":"2026-03-31T13:00:00.000Z"} +{"doc_count":543,"split_key":16509,"timestamp":"2026-03-31T13:00:00.000Z"} +{"doc_count":452,"split_key":209334,"timestamp":"2026-03-31T13:00:00.000Z"} +{"doc_count":388,"split_key":201814,"timestamp":"2026-03-31T13:00:00.000Z"} +{"doc_count":6033,"split_key":265464,"timestamp":"2026-03-31T14:00:00.000Z"} +{"doc_count":605,"split_key":45102,"timestamp":"2026-03-31T14:00:00.000Z"} +{"doc_count":587,"split_key":396982,"timestamp":"2026-03-31T14:00:00.000Z"} +{"doc_count":371,"split_key":201814,"timestamp":"2026-03-31T14:00:00.000Z"} +{"doc_count":352,"split_key":16509,"timestamp":"2026-03-31T14:00:00.000Z"} +{"doc_count":4682,"split_key":265464,"timestamp":"2026-03-31T15:00:00.000Z"} +{"doc_count":838,"split_key":16509,"timestamp":"2026-03-31T15:00:00.000Z"} +{"doc_count":630,"split_key":45102,"timestamp":"2026-03-31T15:00:00.000Z"} +{"doc_count":612,"split_key":9318,"timestamp":"2026-03-31T15:00:00.000Z"} +{"doc_count":413,"split_key":396982,"timestamp":"2026-03-31T15:00:00.000Z"} +{"doc_count":4722,"split_key":265464,"timestamp":"2026-03-31T16:00:00.000Z"} +{"doc_count":532,"split_key":9318,"timestamp":"2026-03-31T16:00:00.000Z"} +{"doc_count":465,"split_key":16509,"timestamp":"2026-03-31T16:00:00.000Z"} +{"doc_count":383,"split_key":201814,"timestamp":"2026-03-31T16:00:00.000Z"} +{"doc_count":324,"split_key":45102,"timestamp":"2026-03-31T16:00:00.000Z"} +{"doc_count":2151,"split_key":211590,"timestamp":"2026-03-31T17:00:00.000Z"} +{"doc_count":725,"split_key":16509,"timestamp":"2026-03-31T17:00:00.000Z"} +{"doc_count":470,"split_key":45102,"timestamp":"2026-03-31T17:00:00.000Z"} +{"doc_count":404,"split_key":201814,"timestamp":"2026-03-31T17:00:00.000Z"} +{"doc_count":362,"split_key":135377,"timestamp":"2026-03-31T17:00:00.000Z"} +{"doc_count":3481,"split_key":211590,"timestamp":"2026-03-31T18:00:00.000Z"} +{"doc_count":1389,"split_key":45102,"timestamp":"2026-03-31T18:00:00.000Z"} +{"doc_count":404,"split_key":201814,"timestamp":"2026-03-31T18:00:00.000Z"} +{"doc_count":370,"split_key":141995,"timestamp":"2026-03-31T18:00:00.000Z"} +{"doc_count":366,"split_key":16509,"timestamp":"2026-03-31T18:00:00.000Z"} +{"doc_count":928,"split_key":45102,"timestamp":"2026-03-31T19:00:00.000Z"} +{"doc_count":755,"split_key":16509,"timestamp":"2026-03-31T19:00:00.000Z"} +{"doc_count":381,"split_key":201814,"timestamp":"2026-03-31T19:00:00.000Z"} +{"doc_count":348,"split_key":396982,"timestamp":"2026-03-31T19:00:00.000Z"} +{"doc_count":301,"split_key":24757,"timestamp":"2026-03-31T19:00:00.000Z"} +{"doc_count":978,"split_key":396982,"timestamp":"2026-03-31T20:00:00.000Z"} +{"doc_count":959,"split_key":45102,"timestamp":"2026-03-31T20:00:00.000Z"} +{"doc_count":958,"split_key":16509,"timestamp":"2026-03-31T20:00:00.000Z"} +{"doc_count":373,"split_key":201814,"timestamp":"2026-03-31T20:00:00.000Z"} +{"doc_count":301,"split_key":24757,"timestamp":"2026-03-31T20:00:00.000Z"} +{"doc_count":955,"split_key":396982,"timestamp":"2026-03-31T21:00:00.000Z"} +{"doc_count":692,"split_key":16509,"timestamp":"2026-03-31T21:00:00.000Z"} +{"doc_count":375,"split_key":201814,"timestamp":"2026-03-31T21:00:00.000Z"} +{"doc_count":303,"split_key":24757,"timestamp":"2026-03-31T21:00:00.000Z"} +{"doc_count":301,"split_key":24940,"timestamp":"2026-03-31T21:00:00.000Z"} +{"doc_count":1224,"split_key":271380,"timestamp":"2026-03-31T22:00:00.000Z"} +{"doc_count":440,"split_key":396982,"timestamp":"2026-03-31T22:00:00.000Z"} +{"doc_count":407,"split_key":201814,"timestamp":"2026-03-31T22:00:00.000Z"} +{"doc_count":317,"split_key":24940,"timestamp":"2026-03-31T22:00:00.000Z"} +{"doc_count":303,"split_key":16509,"timestamp":"2026-03-31T22:00:00.000Z"} +{"doc_count":8063,"split_key":271380,"timestamp":"2026-03-31T23:00:00.000Z"} +{"doc_count":3978,"split_key":209334,"timestamp":"2026-03-31T23:00:00.000Z"} +{"doc_count":2251,"split_key":211590,"timestamp":"2026-03-31T23:00:00.000Z"} +{"doc_count":838,"split_key":51396,"timestamp":"2026-03-31T23:00:00.000Z"} +{"doc_count":425,"split_key":396982,"timestamp":"2026-03-31T23:00:00.000Z"} +{"doc_count":8660,"split_key":271380,"timestamp":"2026-04-01T00:00:00.000Z"} +{"doc_count":4083,"split_key":209334,"timestamp":"2026-04-01T00:00:00.000Z"} +{"doc_count":721,"split_key":16509,"timestamp":"2026-04-01T00:00:00.000Z"} +{"doc_count":410,"split_key":201814,"timestamp":"2026-04-01T00:00:00.000Z"} +{"doc_count":325,"split_key":51396,"timestamp":"2026-04-01T00:00:00.000Z"} +{"doc_count":9042,"split_key":271380,"timestamp":"2026-04-01T01:00:00.000Z"} +{"doc_count":6616,"split_key":209334,"timestamp":"2026-04-01T01:00:00.000Z"} +{"doc_count":1527,"split_key":16509,"timestamp":"2026-04-01T01:00:00.000Z"} +{"doc_count":744,"split_key":396982,"timestamp":"2026-04-01T01:00:00.000Z"} +{"doc_count":635,"split_key":138915,"timestamp":"2026-04-01T01:00:00.000Z"} +{"doc_count":9122,"split_key":271380,"timestamp":"2026-04-01T02:00:00.000Z"} +{"doc_count":1354,"split_key":209334,"timestamp":"2026-04-01T02:00:00.000Z"} +{"doc_count":548,"split_key":16509,"timestamp":"2026-04-01T02:00:00.000Z"} +{"doc_count":402,"split_key":396982,"timestamp":"2026-04-01T02:00:00.000Z"} +{"doc_count":394,"split_key":14061,"timestamp":"2026-04-01T02:00:00.000Z"} +{"doc_count":9012,"split_key":271380,"timestamp":"2026-04-01T03:00:00.000Z"} +{"doc_count":622,"split_key":16509,"timestamp":"2026-04-01T03:00:00.000Z"} +{"doc_count":385,"split_key":24757,"timestamp":"2026-04-01T03:00:00.000Z"} +{"doc_count":370,"split_key":201814,"timestamp":"2026-04-01T03:00:00.000Z"} +{"doc_count":364,"split_key":396982,"timestamp":"2026-04-01T03:00:00.000Z"} +{"doc_count":9223,"split_key":271380,"timestamp":"2026-04-01T04:00:00.000Z"} +{"doc_count":2166,"split_key":211590,"timestamp":"2026-04-01T04:00:00.000Z"} +{"doc_count":871,"split_key":16509,"timestamp":"2026-04-01T04:00:00.000Z"} +{"doc_count":390,"split_key":396982,"timestamp":"2026-04-01T04:00:00.000Z"} +{"doc_count":387,"split_key":24757,"timestamp":"2026-04-01T04:00:00.000Z"} +{"doc_count":9268,"split_key":271380,"timestamp":"2026-04-01T05:00:00.000Z"} +{"doc_count":1966,"split_key":14061,"timestamp":"2026-04-01T05:00:00.000Z"} +{"doc_count":970,"split_key":16509,"timestamp":"2026-04-01T05:00:00.000Z"} +{"doc_count":729,"split_key":396982,"timestamp":"2026-04-01T05:00:00.000Z"} +{"doc_count":622,"split_key":209334,"timestamp":"2026-04-01T05:00:00.000Z"} +{"doc_count":7981,"split_key":271380,"timestamp":"2026-04-01T06:00:00.000Z"} +{"doc_count":3286,"split_key":14061,"timestamp":"2026-04-01T06:00:00.000Z"} +{"doc_count":2947,"split_key":16509,"timestamp":"2026-04-01T06:00:00.000Z"} +{"doc_count":560,"split_key":209334,"timestamp":"2026-04-01T06:00:00.000Z"} +{"doc_count":415,"split_key":24757,"timestamp":"2026-04-01T06:00:00.000Z"} +{"doc_count":7678,"split_key":271380,"timestamp":"2026-04-01T07:00:00.000Z"} +{"doc_count":1373,"split_key":16509,"timestamp":"2026-04-01T07:00:00.000Z"} +{"doc_count":475,"split_key":14618,"timestamp":"2026-04-01T07:00:00.000Z"} +{"doc_count":406,"split_key":24757,"timestamp":"2026-04-01T07:00:00.000Z"} +{"doc_count":405,"split_key":201814,"timestamp":"2026-04-01T07:00:00.000Z"} +{"doc_count":7262,"split_key":271380,"timestamp":"2026-04-01T08:00:00.000Z"} +{"doc_count":2229,"split_key":211590,"timestamp":"2026-04-01T08:00:00.000Z"} +{"doc_count":822,"split_key":16509,"timestamp":"2026-04-01T08:00:00.000Z"} +{"doc_count":483,"split_key":396982,"timestamp":"2026-04-01T08:00:00.000Z"} +{"doc_count":468,"split_key":56041,"timestamp":"2026-04-01T08:00:00.000Z"} +{"doc_count":7380,"split_key":271380,"timestamp":"2026-04-01T09:00:00.000Z"} +{"doc_count":684,"split_key":16509,"timestamp":"2026-04-01T09:00:00.000Z"} +{"doc_count":433,"split_key":24757,"timestamp":"2026-04-01T09:00:00.000Z"} +{"doc_count":399,"split_key":14061,"timestamp":"2026-04-01T09:00:00.000Z"} +{"doc_count":368,"split_key":201814,"timestamp":"2026-04-01T09:00:00.000Z"} +{"doc_count":7342,"split_key":271380,"timestamp":"2026-04-01T10:00:00.000Z"} +{"doc_count":1151,"split_key":16509,"timestamp":"2026-04-01T10:00:00.000Z"} +{"doc_count":886,"split_key":138915,"timestamp":"2026-04-01T10:00:00.000Z"} +{"doc_count":434,"split_key":24757,"timestamp":"2026-04-01T10:00:00.000Z"} +{"doc_count":402,"split_key":396982,"timestamp":"2026-04-01T10:00:00.000Z"} +{"doc_count":7168,"split_key":271380,"timestamp":"2026-04-01T11:00:00.000Z"} +{"doc_count":3393,"split_key":134674,"timestamp":"2026-04-01T11:00:00.000Z"} +{"doc_count":1691,"split_key":16509,"timestamp":"2026-04-01T11:00:00.000Z"} +{"doc_count":1493,"split_key":209334,"timestamp":"2026-04-01T11:00:00.000Z"} +{"doc_count":451,"split_key":138915,"timestamp":"2026-04-01T11:00:00.000Z"} +{"doc_count":17452,"split_key":271380,"timestamp":"2026-04-01T12:00:00.000Z"} +{"doc_count":876,"split_key":209334,"timestamp":"2026-04-01T12:00:00.000Z"} +{"doc_count":683,"split_key":138915,"timestamp":"2026-04-01T12:00:00.000Z"} +{"doc_count":672,"split_key":16509,"timestamp":"2026-04-01T12:00:00.000Z"} +{"doc_count":535,"split_key":20598,"timestamp":"2026-04-01T12:00:00.000Z"} +{"doc_count":17897,"split_key":271380,"timestamp":"2026-04-01T13:00:00.000Z"} +{"doc_count":951,"split_key":209334,"timestamp":"2026-04-01T13:00:00.000Z"} +{"doc_count":605,"split_key":16509,"timestamp":"2026-04-01T13:00:00.000Z"} +{"doc_count":571,"split_key":24940,"timestamp":"2026-04-01T13:00:00.000Z"} +{"doc_count":472,"split_key":14618,"timestamp":"2026-04-01T13:00:00.000Z"} +{"doc_count":17607,"split_key":271380,"timestamp":"2026-04-01T14:00:00.000Z"} +{"doc_count":992,"split_key":209334,"timestamp":"2026-04-01T14:00:00.000Z"} +{"doc_count":712,"split_key":16509,"timestamp":"2026-04-01T14:00:00.000Z"} +{"doc_count":694,"split_key":24940,"timestamp":"2026-04-01T14:00:00.000Z"} +{"doc_count":441,"split_key":138915,"timestamp":"2026-04-01T14:00:00.000Z"} +{"doc_count":17633,"split_key":271380,"timestamp":"2026-04-01T15:00:00.000Z"} +{"doc_count":914,"split_key":209334,"timestamp":"2026-04-01T15:00:00.000Z"} +{"doc_count":821,"split_key":24940,"timestamp":"2026-04-01T15:00:00.000Z"} +{"doc_count":739,"split_key":16509,"timestamp":"2026-04-01T15:00:00.000Z"} +{"doc_count":542,"split_key":211590,"timestamp":"2026-04-01T15:00:00.000Z"} +{"doc_count":16909,"split_key":271380,"timestamp":"2026-04-01T16:00:00.000Z"} +{"doc_count":1411,"split_key":16509,"timestamp":"2026-04-01T16:00:00.000Z"} +{"doc_count":963,"split_key":209334,"timestamp":"2026-04-01T16:00:00.000Z"} +{"doc_count":913,"split_key":24940,"timestamp":"2026-04-01T16:00:00.000Z"} +{"doc_count":420,"split_key":24757,"timestamp":"2026-04-01T16:00:00.000Z"} +{"doc_count":17829,"split_key":271380,"timestamp":"2026-04-01T17:00:00.000Z"} +{"doc_count":853,"split_key":209334,"timestamp":"2026-04-01T17:00:00.000Z"} +{"doc_count":816,"split_key":24940,"timestamp":"2026-04-01T17:00:00.000Z"} +{"doc_count":793,"split_key":16509,"timestamp":"2026-04-01T17:00:00.000Z"} +{"doc_count":429,"split_key":24757,"timestamp":"2026-04-01T17:00:00.000Z"} +{"doc_count":16795,"split_key":271380,"timestamp":"2026-04-01T18:00:00.000Z"} +{"doc_count":894,"split_key":209334,"timestamp":"2026-04-01T18:00:00.000Z"} +{"doc_count":859,"split_key":211590,"timestamp":"2026-04-01T18:00:00.000Z"} +{"doc_count":760,"split_key":16509,"timestamp":"2026-04-01T18:00:00.000Z"} +{"doc_count":454,"split_key":138915,"timestamp":"2026-04-01T18:00:00.000Z"} +{"doc_count":17197,"split_key":271380,"timestamp":"2026-04-01T19:00:00.000Z"} +{"doc_count":2166,"split_key":211590,"timestamp":"2026-04-01T19:00:00.000Z"} +{"doc_count":1383,"split_key":16509,"timestamp":"2026-04-01T19:00:00.000Z"} +{"doc_count":1067,"split_key":209334,"timestamp":"2026-04-01T19:00:00.000Z"} +{"doc_count":606,"split_key":14618,"timestamp":"2026-04-01T19:00:00.000Z"} +{"doc_count":7567,"split_key":271380,"timestamp":"2026-04-01T20:00:00.000Z"} +{"doc_count":3761,"split_key":265282,"timestamp":"2026-04-01T20:00:00.000Z"} +{"doc_count":899,"split_key":209334,"timestamp":"2026-04-01T20:00:00.000Z"} +{"doc_count":485,"split_key":138915,"timestamp":"2026-04-01T20:00:00.000Z"} +{"doc_count":462,"split_key":16509,"timestamp":"2026-04-01T20:00:00.000Z"} +{"doc_count":4501,"split_key":265282,"timestamp":"2026-04-01T21:00:00.000Z"} +{"doc_count":1717,"split_key":211590,"timestamp":"2026-04-01T21:00:00.000Z"} +{"doc_count":1002,"split_key":209334,"timestamp":"2026-04-01T21:00:00.000Z"} +{"doc_count":667,"split_key":16509,"timestamp":"2026-04-01T21:00:00.000Z"} +{"doc_count":542,"split_key":396982,"timestamp":"2026-04-01T21:00:00.000Z"} +{"doc_count":5006,"split_key":265282,"timestamp":"2026-04-01T22:00:00.000Z"} +{"doc_count":858,"split_key":209334,"timestamp":"2026-04-01T22:00:00.000Z"} +{"doc_count":612,"split_key":16509,"timestamp":"2026-04-01T22:00:00.000Z"} +{"doc_count":504,"split_key":396982,"timestamp":"2026-04-01T22:00:00.000Z"} +{"doc_count":472,"split_key":138915,"timestamp":"2026-04-01T22:00:00.000Z"} +{"doc_count":5816,"split_key":265282,"timestamp":"2026-04-01T23:00:00.000Z"} +{"doc_count":3865,"split_key":209334,"timestamp":"2026-04-01T23:00:00.000Z"} +{"doc_count":2231,"split_key":211590,"timestamp":"2026-04-01T23:00:00.000Z"} +{"doc_count":546,"split_key":47890,"timestamp":"2026-04-01T23:00:00.000Z"} +{"doc_count":451,"split_key":396982,"timestamp":"2026-04-01T23:00:00.000Z"} +{"doc_count":6183,"split_key":209334,"timestamp":"2026-04-02T00:00:00.000Z"} +{"doc_count":5695,"split_key":265282,"timestamp":"2026-04-02T00:00:00.000Z"} +{"doc_count":923,"split_key":211590,"timestamp":"2026-04-02T00:00:00.000Z"} +{"doc_count":623,"split_key":16509,"timestamp":"2026-04-02T00:00:00.000Z"} +{"doc_count":529,"split_key":24757,"timestamp":"2026-04-02T00:00:00.000Z"} +{"doc_count":7072,"split_key":209334,"timestamp":"2026-04-02T01:00:00.000Z"} +{"doc_count":5801,"split_key":265282,"timestamp":"2026-04-02T01:00:00.000Z"} +{"doc_count":2229,"split_key":211590,"timestamp":"2026-04-02T01:00:00.000Z"} +{"doc_count":659,"split_key":396982,"timestamp":"2026-04-02T01:00:00.000Z"} +{"doc_count":636,"split_key":16509,"timestamp":"2026-04-02T01:00:00.000Z"} +{"doc_count":22562,"split_key":264280,"timestamp":"2026-04-02T02:00:00.000Z"} +{"doc_count":5927,"split_key":265282,"timestamp":"2026-04-02T02:00:00.000Z"} +{"doc_count":2201,"split_key":52630,"timestamp":"2026-04-02T02:00:00.000Z"} +{"doc_count":865,"split_key":16509,"timestamp":"2026-04-02T02:00:00.000Z"} +{"doc_count":553,"split_key":24757,"timestamp":"2026-04-02T02:00:00.000Z"} +{"doc_count":34883,"split_key":264280,"timestamp":"2026-04-02T03:00:00.000Z"} +{"doc_count":33137,"split_key":52630,"timestamp":"2026-04-02T03:00:00.000Z"} +{"doc_count":5910,"split_key":265282,"timestamp":"2026-04-02T03:00:00.000Z"} +{"doc_count":745,"split_key":16509,"timestamp":"2026-04-02T03:00:00.000Z"} +{"doc_count":585,"split_key":24757,"timestamp":"2026-04-02T03:00:00.000Z"} +{"doc_count":34408,"split_key":52630,"timestamp":"2026-04-02T04:00:00.000Z"} +{"doc_count":33022,"split_key":264280,"timestamp":"2026-04-02T04:00:00.000Z"} +{"doc_count":5993,"split_key":265282,"timestamp":"2026-04-02T04:00:00.000Z"} +{"doc_count":2171,"split_key":211590,"timestamp":"2026-04-02T04:00:00.000Z"} +{"doc_count":842,"split_key":16509,"timestamp":"2026-04-02T04:00:00.000Z"} +{"doc_count":36747,"split_key":52630,"timestamp":"2026-04-02T05:00:00.000Z"} +{"doc_count":34632,"split_key":264280,"timestamp":"2026-04-02T05:00:00.000Z"} +{"doc_count":5833,"split_key":265282,"timestamp":"2026-04-02T05:00:00.000Z"} +{"doc_count":3820,"split_key":24323,"timestamp":"2026-04-02T05:00:00.000Z"} +{"doc_count":767,"split_key":16509,"timestamp":"2026-04-02T05:00:00.000Z"} +{"doc_count":36159,"split_key":52630,"timestamp":"2026-04-02T06:00:00.000Z"} +{"doc_count":34318,"split_key":264280,"timestamp":"2026-04-02T06:00:00.000Z"} +{"doc_count":5966,"split_key":265282,"timestamp":"2026-04-02T06:00:00.000Z"} +{"doc_count":2710,"split_key":24323,"timestamp":"2026-04-02T06:00:00.000Z"} +{"doc_count":1193,"split_key":37963,"timestamp":"2026-04-02T06:00:00.000Z"} +{"doc_count":36219,"split_key":52630,"timestamp":"2026-04-02T07:00:00.000Z"} +{"doc_count":35159,"split_key":264280,"timestamp":"2026-04-02T07:00:00.000Z"} +{"doc_count":6029,"split_key":265282,"timestamp":"2026-04-02T07:00:00.000Z"} +{"doc_count":2166,"split_key":211590,"timestamp":"2026-04-02T07:00:00.000Z"} +{"doc_count":1162,"split_key":37963,"timestamp":"2026-04-02T07:00:00.000Z"} +{"doc_count":36761,"split_key":52630,"timestamp":"2026-04-02T08:00:00.000Z"} +{"doc_count":34891,"split_key":264280,"timestamp":"2026-04-02T08:00:00.000Z"} +{"doc_count":6136,"split_key":265282,"timestamp":"2026-04-02T08:00:00.000Z"} +{"doc_count":1115,"split_key":37963,"timestamp":"2026-04-02T08:00:00.000Z"} +{"doc_count":956,"split_key":45102,"timestamp":"2026-04-02T08:00:00.000Z"} +{"doc_count":34245,"split_key":264280,"timestamp":"2026-04-02T09:00:00.000Z"} +{"doc_count":31665,"split_key":52630,"timestamp":"2026-04-02T09:00:00.000Z"} +{"doc_count":6034,"split_key":265282,"timestamp":"2026-04-02T09:00:00.000Z"} +{"doc_count":1038,"split_key":16509,"timestamp":"2026-04-02T09:00:00.000Z"} +{"doc_count":925,"split_key":45102,"timestamp":"2026-04-02T09:00:00.000Z"} +{"doc_count":35214,"split_key":264280,"timestamp":"2026-04-02T10:00:00.000Z"} +{"doc_count":12404,"split_key":52630,"timestamp":"2026-04-02T10:00:00.000Z"} +{"doc_count":5832,"split_key":265282,"timestamp":"2026-04-02T10:00:00.000Z"} +{"doc_count":946,"split_key":45102,"timestamp":"2026-04-02T10:00:00.000Z"} +{"doc_count":857,"split_key":16509,"timestamp":"2026-04-02T10:00:00.000Z"} +{"doc_count":33381,"split_key":264280,"timestamp":"2026-04-02T11:00:00.000Z"} +{"doc_count":14495,"split_key":52630,"timestamp":"2026-04-02T11:00:00.000Z"} +{"doc_count":4913,"split_key":265282,"timestamp":"2026-04-02T11:00:00.000Z"} +{"doc_count":922,"split_key":45102,"timestamp":"2026-04-02T11:00:00.000Z"} +{"doc_count":751,"split_key":16509,"timestamp":"2026-04-02T11:00:00.000Z"} +{"doc_count":28831,"split_key":264280,"timestamp":"2026-04-02T12:00:00.000Z"} +{"doc_count":20269,"split_key":52630,"timestamp":"2026-04-02T12:00:00.000Z"} +{"doc_count":700,"split_key":16509,"timestamp":"2026-04-02T12:00:00.000Z"} +{"doc_count":550,"split_key":9299,"timestamp":"2026-04-02T12:00:00.000Z"} +{"doc_count":518,"split_key":138915,"timestamp":"2026-04-02T12:00:00.000Z"} +{"doc_count":32763,"split_key":52630,"timestamp":"2026-04-02T13:00:00.000Z"} +{"doc_count":5417,"split_key":264280,"timestamp":"2026-04-02T13:00:00.000Z"} +{"doc_count":2025,"split_key":45102,"timestamp":"2026-04-02T13:00:00.000Z"} +{"doc_count":997,"split_key":16509,"timestamp":"2026-04-02T13:00:00.000Z"} +{"doc_count":483,"split_key":9299,"timestamp":"2026-04-02T13:00:00.000Z"} +{"doc_count":33119,"split_key":52630,"timestamp":"2026-04-02T14:00:00.000Z"} +{"doc_count":10428,"split_key":264280,"timestamp":"2026-04-02T14:00:00.000Z"} +{"doc_count":2013,"split_key":45102,"timestamp":"2026-04-02T14:00:00.000Z"} +{"doc_count":735,"split_key":16509,"timestamp":"2026-04-02T14:00:00.000Z"} +{"doc_count":495,"split_key":209334,"timestamp":"2026-04-02T14:00:00.000Z"} +{"doc_count":35244,"split_key":52630,"timestamp":"2026-04-02T15:00:00.000Z"} +{"doc_count":12772,"split_key":264280,"timestamp":"2026-04-02T15:00:00.000Z"} +{"doc_count":1036,"split_key":16509,"timestamp":"2026-04-02T15:00:00.000Z"} +{"doc_count":482,"split_key":14061,"timestamp":"2026-04-02T15:00:00.000Z"} +{"doc_count":481,"split_key":9299,"timestamp":"2026-04-02T15:00:00.000Z"} +{"doc_count":25517,"split_key":52630,"timestamp":"2026-04-02T16:00:00.000Z"} +{"doc_count":6061,"split_key":264280,"timestamp":"2026-04-02T16:00:00.000Z"} +{"doc_count":2167,"split_key":211590,"timestamp":"2026-04-02T16:00:00.000Z"} +{"doc_count":1022,"split_key":16509,"timestamp":"2026-04-02T16:00:00.000Z"} +{"doc_count":643,"split_key":14061,"timestamp":"2026-04-02T16:00:00.000Z"} +{"doc_count":25159,"split_key":53072,"timestamp":"2026-04-02T17:00:00.000Z"} +{"doc_count":25127,"split_key":61851,"timestamp":"2026-04-02T17:00:00.000Z"} +{"doc_count":22927,"split_key":52780,"timestamp":"2026-04-02T17:00:00.000Z"} +{"doc_count":2894,"split_key":266270,"timestamp":"2026-04-02T17:00:00.000Z"} +{"doc_count":2756,"split_key":264280,"timestamp":"2026-04-02T17:00:00.000Z"} +{"doc_count":2355,"split_key":211590,"timestamp":"2026-04-02T18:00:00.000Z"} +{"doc_count":1097,"split_key":16509,"timestamp":"2026-04-02T18:00:00.000Z"} +{"doc_count":1053,"split_key":264280,"timestamp":"2026-04-02T18:00:00.000Z"} +{"doc_count":1028,"split_key":396982,"timestamp":"2026-04-02T18:00:00.000Z"} +{"doc_count":541,"split_key":9299,"timestamp":"2026-04-02T18:00:00.000Z"} +{"doc_count":5927,"split_key":264280,"timestamp":"2026-04-02T19:00:00.000Z"} +{"doc_count":1182,"split_key":16509,"timestamp":"2026-04-02T19:00:00.000Z"} +{"doc_count":1144,"split_key":37963,"timestamp":"2026-04-02T19:00:00.000Z"} +{"doc_count":581,"split_key":9299,"timestamp":"2026-04-02T19:00:00.000Z"} +{"doc_count":565,"split_key":396982,"timestamp":"2026-04-02T19:00:00.000Z"} +{"doc_count":43021,"split_key":264280,"timestamp":"2026-04-02T20:00:00.000Z"} +{"doc_count":1975,"split_key":37963,"timestamp":"2026-04-02T20:00:00.000Z"} +{"doc_count":816,"split_key":396982,"timestamp":"2026-04-02T20:00:00.000Z"} +{"doc_count":539,"split_key":9299,"timestamp":"2026-04-02T20:00:00.000Z"} +{"doc_count":466,"split_key":45102,"timestamp":"2026-04-02T20:00:00.000Z"} +{"doc_count":40580,"split_key":264280,"timestamp":"2026-04-02T21:00:00.000Z"} +{"doc_count":1886,"split_key":37963,"timestamp":"2026-04-02T21:00:00.000Z"} +{"doc_count":1308,"split_key":45102,"timestamp":"2026-04-02T21:00:00.000Z"} +{"doc_count":812,"split_key":16509,"timestamp":"2026-04-02T21:00:00.000Z"} +{"doc_count":627,"split_key":396982,"timestamp":"2026-04-02T21:00:00.000Z"} +{"doc_count":5327,"split_key":16509,"timestamp":"2026-04-02T22:00:00.000Z"} +{"doc_count":1601,"split_key":45102,"timestamp":"2026-04-02T22:00:00.000Z"} +{"doc_count":1010,"split_key":138915,"timestamp":"2026-04-02T22:00:00.000Z"} +{"doc_count":705,"split_key":396982,"timestamp":"2026-04-02T22:00:00.000Z"} +{"doc_count":691,"split_key":14061,"timestamp":"2026-04-02T22:00:00.000Z"} +{"doc_count":2265,"split_key":6400,"timestamp":"2026-04-02T23:00:00.000Z"} +{"doc_count":1731,"split_key":209334,"timestamp":"2026-04-02T23:00:00.000Z"} +{"doc_count":1342,"split_key":37963,"timestamp":"2026-04-02T23:00:00.000Z"} +{"doc_count":973,"split_key":45102,"timestamp":"2026-04-02T23:00:00.000Z"} +{"doc_count":577,"split_key":396982,"timestamp":"2026-04-02T23:00:00.000Z"} +{"doc_count":5851,"split_key":209334,"timestamp":"2026-04-03T00:00:00.000Z"} +{"doc_count":1203,"split_key":45102,"timestamp":"2026-04-03T00:00:00.000Z"} +{"doc_count":709,"split_key":4134,"timestamp":"2026-04-03T00:00:00.000Z"} +{"doc_count":589,"split_key":9299,"timestamp":"2026-04-03T00:00:00.000Z"} +{"doc_count":543,"split_key":396982,"timestamp":"2026-04-03T00:00:00.000Z"} +{"doc_count":3252,"split_key":209334,"timestamp":"2026-04-03T01:00:00.000Z"} +{"doc_count":766,"split_key":45090,"timestamp":"2026-04-03T01:00:00.000Z"} +{"doc_count":577,"split_key":9299,"timestamp":"2026-04-03T01:00:00.000Z"} +{"doc_count":539,"split_key":396982,"timestamp":"2026-04-03T01:00:00.000Z"} +{"doc_count":524,"split_key":7693,"timestamp":"2026-04-03T01:00:00.000Z"} +{"doc_count":1410,"split_key":209334,"timestamp":"2026-04-03T02:00:00.000Z"} +{"doc_count":1077,"split_key":45090,"timestamp":"2026-04-03T02:00:00.000Z"} +{"doc_count":627,"split_key":396982,"timestamp":"2026-04-03T02:00:00.000Z"} +{"doc_count":624,"split_key":9299,"timestamp":"2026-04-03T02:00:00.000Z"} +{"doc_count":541,"split_key":7693,"timestamp":"2026-04-03T02:00:00.000Z"} +{"doc_count":2240,"split_key":211590,"timestamp":"2026-04-03T03:00:00.000Z"} +{"doc_count":1114,"split_key":45090,"timestamp":"2026-04-03T03:00:00.000Z"} +{"doc_count":651,"split_key":16509,"timestamp":"2026-04-03T03:00:00.000Z"} +{"doc_count":612,"split_key":396982,"timestamp":"2026-04-03T03:00:00.000Z"} +{"doc_count":596,"split_key":9299,"timestamp":"2026-04-03T03:00:00.000Z"} +{"doc_count":2151,"split_key":211590,"timestamp":"2026-04-03T04:00:00.000Z"} +{"doc_count":1005,"split_key":45090,"timestamp":"2026-04-03T04:00:00.000Z"} +{"doc_count":570,"split_key":396982,"timestamp":"2026-04-03T04:00:00.000Z"} +{"doc_count":562,"split_key":16509,"timestamp":"2026-04-03T04:00:00.000Z"} +{"doc_count":544,"split_key":9299,"timestamp":"2026-04-03T04:00:00.000Z"} +{"doc_count":2278,"split_key":14061,"timestamp":"2026-04-03T05:00:00.000Z"} +{"doc_count":2151,"split_key":211590,"timestamp":"2026-04-03T05:00:00.000Z"} +{"doc_count":639,"split_key":135905,"timestamp":"2026-04-03T05:00:00.000Z"} +{"doc_count":596,"split_key":45090,"timestamp":"2026-04-03T05:00:00.000Z"} +{"doc_count":548,"split_key":7693,"timestamp":"2026-04-03T05:00:00.000Z"} +{"doc_count":4734,"split_key":14061,"timestamp":"2026-04-03T06:00:00.000Z"} +{"doc_count":1484,"split_key":7713,"timestamp":"2026-04-03T06:00:00.000Z"} +{"doc_count":636,"split_key":396982,"timestamp":"2026-04-03T06:00:00.000Z"} +{"doc_count":596,"split_key":9299,"timestamp":"2026-04-03T06:00:00.000Z"} +{"doc_count":595,"split_key":7693,"timestamp":"2026-04-03T06:00:00.000Z"} +{"doc_count":6845,"split_key":211590,"timestamp":"2026-04-03T07:00:00.000Z"} +{"doc_count":4309,"split_key":4837,"timestamp":"2026-04-03T07:00:00.000Z"} +{"doc_count":2150,"split_key":7713,"timestamp":"2026-04-03T07:00:00.000Z"} +{"doc_count":655,"split_key":7693,"timestamp":"2026-04-03T07:00:00.000Z"} +{"doc_count":588,"split_key":9299,"timestamp":"2026-04-03T07:00:00.000Z"} +{"doc_count":1398,"split_key":7713,"timestamp":"2026-04-03T08:00:00.000Z"} +{"doc_count":718,"split_key":9299,"timestamp":"2026-04-03T08:00:00.000Z"} +{"doc_count":664,"split_key":7693,"timestamp":"2026-04-03T08:00:00.000Z"} +{"doc_count":542,"split_key":24940,"timestamp":"2026-04-03T08:00:00.000Z"} +{"doc_count":392,"split_key":201814,"timestamp":"2026-04-03T08:00:00.000Z"} +{"doc_count":1051,"split_key":7713,"timestamp":"2026-04-03T09:00:00.000Z"} +{"doc_count":603,"split_key":9299,"timestamp":"2026-04-03T09:00:00.000Z"} +{"doc_count":553,"split_key":262287,"timestamp":"2026-04-03T09:00:00.000Z"} +{"doc_count":425,"split_key":16509,"timestamp":"2026-04-03T09:00:00.000Z"} +{"doc_count":394,"split_key":201814,"timestamp":"2026-04-03T09:00:00.000Z"} +{"doc_count":1054,"split_key":7713,"timestamp":"2026-04-03T10:00:00.000Z"} +{"doc_count":822,"split_key":396982,"timestamp":"2026-04-03T10:00:00.000Z"} +{"doc_count":702,"split_key":16509,"timestamp":"2026-04-03T10:00:00.000Z"} +{"doc_count":671,"split_key":9299,"timestamp":"2026-04-03T10:00:00.000Z"} +{"doc_count":574,"split_key":60558,"timestamp":"2026-04-03T10:00:00.000Z"} +{"doc_count":4302,"split_key":211590,"timestamp":"2026-04-03T11:00:00.000Z"} +{"doc_count":1456,"split_key":45102,"timestamp":"2026-04-03T11:00:00.000Z"} +{"doc_count":994,"split_key":7713,"timestamp":"2026-04-03T11:00:00.000Z"} +{"doc_count":692,"split_key":37963,"timestamp":"2026-04-03T11:00:00.000Z"} +{"doc_count":688,"split_key":16509,"timestamp":"2026-04-03T11:00:00.000Z"} +{"doc_count":2152,"split_key":211590,"timestamp":"2026-04-03T12:00:00.000Z"} +{"doc_count":1456,"split_key":45102,"timestamp":"2026-04-03T12:00:00.000Z"} +{"doc_count":1054,"split_key":7713,"timestamp":"2026-04-03T12:00:00.000Z"} +{"doc_count":937,"split_key":60558,"timestamp":"2026-04-03T12:00:00.000Z"} +{"doc_count":690,"split_key":9299,"timestamp":"2026-04-03T12:00:00.000Z"} +{"doc_count":8320,"split_key":271380,"timestamp":"2026-04-03T13:00:00.000Z"} +{"doc_count":1541,"split_key":45102,"timestamp":"2026-04-03T13:00:00.000Z"} +{"doc_count":1051,"split_key":7713,"timestamp":"2026-04-03T13:00:00.000Z"} +{"doc_count":1043,"split_key":211590,"timestamp":"2026-04-03T13:00:00.000Z"} +{"doc_count":694,"split_key":9299,"timestamp":"2026-04-03T13:00:00.000Z"} +{"doc_count":8633,"split_key":271380,"timestamp":"2026-04-03T14:00:00.000Z"} +{"doc_count":1109,"split_key":211590,"timestamp":"2026-04-03T14:00:00.000Z"} +{"doc_count":1047,"split_key":7713,"timestamp":"2026-04-03T14:00:00.000Z"} +{"doc_count":736,"split_key":9299,"timestamp":"2026-04-03T14:00:00.000Z"} +{"doc_count":688,"split_key":23470,"timestamp":"2026-04-03T14:00:00.000Z"} +{"doc_count":8554,"split_key":271380,"timestamp":"2026-04-03T15:00:00.000Z"} +{"doc_count":1054,"split_key":7713,"timestamp":"2026-04-03T15:00:00.000Z"} +{"doc_count":732,"split_key":9299,"timestamp":"2026-04-03T15:00:00.000Z"} +{"doc_count":491,"split_key":24323,"timestamp":"2026-04-03T15:00:00.000Z"} +{"doc_count":458,"split_key":60558,"timestamp":"2026-04-03T15:00:00.000Z"} +{"doc_count":8650,"split_key":271380,"timestamp":"2026-04-03T16:00:00.000Z"} +{"doc_count":1520,"split_key":37963,"timestamp":"2026-04-03T16:00:00.000Z"} +{"doc_count":1050,"split_key":7713,"timestamp":"2026-04-03T16:00:00.000Z"} +{"doc_count":664,"split_key":9299,"timestamp":"2026-04-03T16:00:00.000Z"} +{"doc_count":640,"split_key":16509,"timestamp":"2026-04-03T16:00:00.000Z"} +{"doc_count":8711,"split_key":271380,"timestamp":"2026-04-03T17:00:00.000Z"} +{"doc_count":1047,"split_key":7713,"timestamp":"2026-04-03T17:00:00.000Z"} +{"doc_count":649,"split_key":262287,"timestamp":"2026-04-03T17:00:00.000Z"} +{"doc_count":625,"split_key":9299,"timestamp":"2026-04-03T17:00:00.000Z"} +{"doc_count":553,"split_key":24323,"timestamp":"2026-04-03T17:00:00.000Z"} +{"doc_count":8671,"split_key":271380,"timestamp":"2026-04-03T18:00:00.000Z"} +{"doc_count":2798,"split_key":211590,"timestamp":"2026-04-03T18:00:00.000Z"} +{"doc_count":1281,"split_key":45102,"timestamp":"2026-04-03T18:00:00.000Z"} +{"doc_count":1044,"split_key":7713,"timestamp":"2026-04-03T18:00:00.000Z"} +{"doc_count":632,"split_key":16509,"timestamp":"2026-04-03T18:00:00.000Z"} +{"doc_count":8712,"split_key":271380,"timestamp":"2026-04-03T19:00:00.000Z"} +{"doc_count":1839,"split_key":45102,"timestamp":"2026-04-03T19:00:00.000Z"} +{"doc_count":1045,"split_key":7713,"timestamp":"2026-04-03T19:00:00.000Z"} +{"doc_count":1030,"split_key":14061,"timestamp":"2026-04-03T19:00:00.000Z"} +{"doc_count":551,"split_key":24323,"timestamp":"2026-04-03T19:00:00.000Z"} +{"doc_count":8859,"split_key":271380,"timestamp":"2026-04-03T20:00:00.000Z"} +{"doc_count":1823,"split_key":45102,"timestamp":"2026-04-03T20:00:00.000Z"} +{"doc_count":1049,"split_key":7713,"timestamp":"2026-04-03T20:00:00.000Z"} +{"doc_count":566,"split_key":9299,"timestamp":"2026-04-03T20:00:00.000Z"} +{"doc_count":506,"split_key":24323,"timestamp":"2026-04-03T20:00:00.000Z"} +{"doc_count":9311,"split_key":271380,"timestamp":"2026-04-03T21:00:00.000Z"} +{"doc_count":1453,"split_key":45102,"timestamp":"2026-04-03T21:00:00.000Z"} +{"doc_count":1046,"split_key":7713,"timestamp":"2026-04-03T21:00:00.000Z"} +{"doc_count":607,"split_key":9299,"timestamp":"2026-04-03T21:00:00.000Z"} +{"doc_count":540,"split_key":396982,"timestamp":"2026-04-03T21:00:00.000Z"} +{"doc_count":9210,"split_key":271380,"timestamp":"2026-04-03T22:00:00.000Z"} +{"doc_count":1767,"split_key":45102,"timestamp":"2026-04-03T22:00:00.000Z"} +{"doc_count":1048,"split_key":7713,"timestamp":"2026-04-03T22:00:00.000Z"} +{"doc_count":1018,"split_key":23470,"timestamp":"2026-04-03T22:00:00.000Z"} +{"doc_count":629,"split_key":9299,"timestamp":"2026-04-03T22:00:00.000Z"} +{"doc_count":15623,"split_key":209334,"timestamp":"2026-04-03T23:00:00.000Z"} +{"doc_count":9976,"split_key":271380,"timestamp":"2026-04-03T23:00:00.000Z"} +{"doc_count":2831,"split_key":211590,"timestamp":"2026-04-03T23:00:00.000Z"} +{"doc_count":1864,"split_key":45102,"timestamp":"2026-04-03T23:00:00.000Z"} +{"doc_count":1046,"split_key":23470,"timestamp":"2026-04-03T23:00:00.000Z"} +{"doc_count":8905,"split_key":271380,"timestamp":"2026-04-04T00:00:00.000Z"} +{"doc_count":2340,"split_key":209334,"timestamp":"2026-04-04T00:00:00.000Z"} +{"doc_count":1088,"split_key":45102,"timestamp":"2026-04-04T00:00:00.000Z"} +{"doc_count":671,"split_key":9299,"timestamp":"2026-04-04T00:00:00.000Z"} +{"doc_count":642,"split_key":14061,"timestamp":"2026-04-04T00:00:00.000Z"} +{"doc_count":8200,"split_key":271380,"timestamp":"2026-04-04T01:00:00.000Z"} +{"doc_count":1837,"split_key":209334,"timestamp":"2026-04-04T01:00:00.000Z"} +{"doc_count":652,"split_key":396982,"timestamp":"2026-04-04T01:00:00.000Z"} +{"doc_count":611,"split_key":9299,"timestamp":"2026-04-04T01:00:00.000Z"} +{"doc_count":465,"split_key":37963,"timestamp":"2026-04-04T01:00:00.000Z"} +{"doc_count":8123,"split_key":271380,"timestamp":"2026-04-04T02:00:00.000Z"} +{"doc_count":4952,"split_key":209334,"timestamp":"2026-04-04T02:00:00.000Z"} +{"doc_count":1382,"split_key":211590,"timestamp":"2026-04-04T02:00:00.000Z"} +{"doc_count":764,"split_key":37963,"timestamp":"2026-04-04T02:00:00.000Z"} +{"doc_count":702,"split_key":14061,"timestamp":"2026-04-04T02:00:00.000Z"} +{"doc_count":8191,"split_key":271380,"timestamp":"2026-04-04T03:00:00.000Z"} +{"doc_count":3486,"split_key":209334,"timestamp":"2026-04-04T03:00:00.000Z"} +{"doc_count":899,"split_key":37963,"timestamp":"2026-04-04T03:00:00.000Z"} +{"doc_count":692,"split_key":16509,"timestamp":"2026-04-04T03:00:00.000Z"} +{"doc_count":602,"split_key":9299,"timestamp":"2026-04-04T03:00:00.000Z"} +{"doc_count":4873,"split_key":271380,"timestamp":"2026-04-04T04:00:00.000Z"} +{"doc_count":2249,"split_key":209334,"timestamp":"2026-04-04T04:00:00.000Z"} +{"doc_count":1406,"split_key":211590,"timestamp":"2026-04-04T04:00:00.000Z"} +{"doc_count":627,"split_key":9299,"timestamp":"2026-04-04T04:00:00.000Z"} +{"doc_count":534,"split_key":16509,"timestamp":"2026-04-04T04:00:00.000Z"} +{"doc_count":4045,"split_key":209334,"timestamp":"2026-04-04T05:00:00.000Z"} +{"doc_count":3213,"split_key":211590,"timestamp":"2026-04-04T05:00:00.000Z"} +{"doc_count":627,"split_key":9299,"timestamp":"2026-04-04T05:00:00.000Z"} +{"doc_count":562,"split_key":396982,"timestamp":"2026-04-04T05:00:00.000Z"} +{"doc_count":523,"split_key":16509,"timestamp":"2026-04-04T05:00:00.000Z"} +{"doc_count":2769,"split_key":209334,"timestamp":"2026-04-04T06:00:00.000Z"} +{"doc_count":832,"split_key":211590,"timestamp":"2026-04-04T06:00:00.000Z"} +{"doc_count":672,"split_key":45102,"timestamp":"2026-04-04T06:00:00.000Z"} +{"doc_count":604,"split_key":9299,"timestamp":"2026-04-04T06:00:00.000Z"} +{"doc_count":532,"split_key":14061,"timestamp":"2026-04-04T06:00:00.000Z"} +{"doc_count":2951,"split_key":209605,"timestamp":"2026-04-04T07:00:00.000Z"} +{"doc_count":2471,"split_key":209334,"timestamp":"2026-04-04T07:00:00.000Z"} +{"doc_count":764,"split_key":45102,"timestamp":"2026-04-04T07:00:00.000Z"} +{"doc_count":599,"split_key":9299,"timestamp":"2026-04-04T07:00:00.000Z"} +{"doc_count":497,"split_key":37963,"timestamp":"2026-04-04T07:00:00.000Z"} +{"doc_count":3230,"split_key":209334,"timestamp":"2026-04-04T08:00:00.000Z"} +{"doc_count":2166,"split_key":211590,"timestamp":"2026-04-04T08:00:00.000Z"} +{"doc_count":748,"split_key":45102,"timestamp":"2026-04-04T08:00:00.000Z"} +{"doc_count":657,"split_key":9299,"timestamp":"2026-04-04T08:00:00.000Z"} +{"doc_count":485,"split_key":24940,"timestamp":"2026-04-04T08:00:00.000Z"} +{"doc_count":3846,"split_key":209334,"timestamp":"2026-04-04T09:00:00.000Z"} +{"doc_count":2151,"split_key":211590,"timestamp":"2026-04-04T09:00:00.000Z"} +{"doc_count":668,"split_key":9299,"timestamp":"2026-04-04T09:00:00.000Z"} +{"doc_count":662,"split_key":45102,"timestamp":"2026-04-04T09:00:00.000Z"} +{"doc_count":558,"split_key":37963,"timestamp":"2026-04-04T09:00:00.000Z"} +{"doc_count":3639,"split_key":209334,"timestamp":"2026-04-04T10:00:00.000Z"} +{"doc_count":1901,"split_key":211590,"timestamp":"2026-04-04T10:00:00.000Z"} +{"doc_count":810,"split_key":37963,"timestamp":"2026-04-04T10:00:00.000Z"} +{"doc_count":676,"split_key":45102,"timestamp":"2026-04-04T10:00:00.000Z"} +{"doc_count":564,"split_key":9299,"timestamp":"2026-04-04T10:00:00.000Z"} +{"doc_count":4000,"split_key":209334,"timestamp":"2026-04-04T11:00:00.000Z"} +{"doc_count":825,"split_key":45102,"timestamp":"2026-04-04T11:00:00.000Z"} +{"doc_count":669,"split_key":37963,"timestamp":"2026-04-04T11:00:00.000Z"} +{"doc_count":526,"split_key":142347,"timestamp":"2026-04-04T11:00:00.000Z"} +{"doc_count":499,"split_key":9299,"timestamp":"2026-04-04T11:00:00.000Z"} +{"doc_count":3667,"split_key":209334,"timestamp":"2026-04-04T12:00:00.000Z"} +{"doc_count":2170,"split_key":211590,"timestamp":"2026-04-04T12:00:00.000Z"} +{"doc_count":1261,"split_key":45102,"timestamp":"2026-04-04T12:00:00.000Z"} +{"doc_count":715,"split_key":37963,"timestamp":"2026-04-04T12:00:00.000Z"} +{"doc_count":506,"split_key":142347,"timestamp":"2026-04-04T12:00:00.000Z"} +{"doc_count":5025,"split_key":14618,"timestamp":"2026-04-04T13:00:00.000Z"} +{"doc_count":4064,"split_key":209334,"timestamp":"2026-04-04T13:00:00.000Z"} +{"doc_count":1045,"split_key":45102,"timestamp":"2026-04-04T13:00:00.000Z"} +{"doc_count":1033,"split_key":55577,"timestamp":"2026-04-04T13:00:00.000Z"} +{"doc_count":660,"split_key":37963,"timestamp":"2026-04-04T13:00:00.000Z"} +{"doc_count":39328,"split_key":14618,"timestamp":"2026-04-04T14:00:00.000Z"} +{"doc_count":4749,"split_key":209334,"timestamp":"2026-04-04T14:00:00.000Z"} +{"doc_count":4303,"split_key":211590,"timestamp":"2026-04-04T14:00:00.000Z"} +{"doc_count":3707,"split_key":271380,"timestamp":"2026-04-04T14:00:00.000Z"} +{"doc_count":840,"split_key":55577,"timestamp":"2026-04-04T14:00:00.000Z"} +{"doc_count":23620,"split_key":271380,"timestamp":"2026-04-04T15:00:00.000Z"} +{"doc_count":5345,"split_key":209334,"timestamp":"2026-04-04T15:00:00.000Z"} +{"doc_count":1396,"split_key":23470,"timestamp":"2026-04-04T15:00:00.000Z"} +{"doc_count":667,"split_key":37963,"timestamp":"2026-04-04T15:00:00.000Z"} +{"doc_count":506,"split_key":9299,"timestamp":"2026-04-04T15:00:00.000Z"} +{"doc_count":23917,"split_key":271380,"timestamp":"2026-04-04T16:00:00.000Z"} +{"doc_count":4249,"split_key":209334,"timestamp":"2026-04-04T16:00:00.000Z"} +{"doc_count":720,"split_key":206760,"timestamp":"2026-04-04T16:00:00.000Z"} +{"doc_count":648,"split_key":37963,"timestamp":"2026-04-04T16:00:00.000Z"} +{"doc_count":556,"split_key":9299,"timestamp":"2026-04-04T16:00:00.000Z"} +{"doc_count":24324,"split_key":271380,"timestamp":"2026-04-04T17:00:00.000Z"} +{"doc_count":5605,"split_key":209334,"timestamp":"2026-04-04T17:00:00.000Z"} +{"doc_count":2214,"split_key":211590,"timestamp":"2026-04-04T17:00:00.000Z"} +{"doc_count":642,"split_key":37963,"timestamp":"2026-04-04T17:00:00.000Z"} +{"doc_count":547,"split_key":9299,"timestamp":"2026-04-04T17:00:00.000Z"} +{"doc_count":23828,"split_key":271380,"timestamp":"2026-04-04T18:00:00.000Z"} +{"doc_count":4958,"split_key":209334,"timestamp":"2026-04-04T18:00:00.000Z"} +{"doc_count":4389,"split_key":211590,"timestamp":"2026-04-04T18:00:00.000Z"} +{"doc_count":1044,"split_key":23470,"timestamp":"2026-04-04T18:00:00.000Z"} +{"doc_count":686,"split_key":37963,"timestamp":"2026-04-04T18:00:00.000Z"} +{"doc_count":24396,"split_key":271380,"timestamp":"2026-04-04T19:00:00.000Z"} +{"doc_count":5019,"split_key":209334,"timestamp":"2026-04-04T19:00:00.000Z"} +{"doc_count":722,"split_key":37963,"timestamp":"2026-04-04T19:00:00.000Z"} +{"doc_count":480,"split_key":9299,"timestamp":"2026-04-04T19:00:00.000Z"} +{"doc_count":470,"split_key":21738,"timestamp":"2026-04-04T19:00:00.000Z"} +{"doc_count":24368,"split_key":271380,"timestamp":"2026-04-04T20:00:00.000Z"} +{"doc_count":5120,"split_key":209334,"timestamp":"2026-04-04T20:00:00.000Z"} +{"doc_count":929,"split_key":23470,"timestamp":"2026-04-04T20:00:00.000Z"} +{"doc_count":761,"split_key":37963,"timestamp":"2026-04-04T20:00:00.000Z"} +{"doc_count":655,"split_key":21738,"timestamp":"2026-04-04T20:00:00.000Z"} +{"doc_count":23701,"split_key":271380,"timestamp":"2026-04-04T21:00:00.000Z"} +{"doc_count":5090,"split_key":209334,"timestamp":"2026-04-04T21:00:00.000Z"} +{"doc_count":850,"split_key":21738,"timestamp":"2026-04-04T21:00:00.000Z"} +{"doc_count":749,"split_key":37963,"timestamp":"2026-04-04T21:00:00.000Z"} +{"doc_count":674,"split_key":396982,"timestamp":"2026-04-04T21:00:00.000Z"} +{"doc_count":24261,"split_key":271380,"timestamp":"2026-04-04T22:00:00.000Z"} +{"doc_count":4393,"split_key":209334,"timestamp":"2026-04-04T22:00:00.000Z"} +{"doc_count":718,"split_key":37963,"timestamp":"2026-04-04T22:00:00.000Z"} +{"doc_count":593,"split_key":396982,"timestamp":"2026-04-04T22:00:00.000Z"} +{"doc_count":579,"split_key":21738,"timestamp":"2026-04-04T22:00:00.000Z"} +{"doc_count":24600,"split_key":271380,"timestamp":"2026-04-04T23:00:00.000Z"} +{"doc_count":4824,"split_key":209334,"timestamp":"2026-04-04T23:00:00.000Z"} +{"doc_count":2151,"split_key":211590,"timestamp":"2026-04-04T23:00:00.000Z"} +{"doc_count":757,"split_key":17552,"timestamp":"2026-04-04T23:00:00.000Z"} +{"doc_count":687,"split_key":37963,"timestamp":"2026-04-04T23:00:00.000Z"} +{"doc_count":25110,"split_key":271380,"timestamp":"2026-04-05T00:00:00.000Z"} +{"doc_count":4994,"split_key":209334,"timestamp":"2026-04-05T00:00:00.000Z"} +{"doc_count":4304,"split_key":211590,"timestamp":"2026-04-05T00:00:00.000Z"} +{"doc_count":1668,"split_key":17552,"timestamp":"2026-04-05T00:00:00.000Z"} +{"doc_count":741,"split_key":37963,"timestamp":"2026-04-05T00:00:00.000Z"} +{"doc_count":25045,"split_key":271380,"timestamp":"2026-04-05T01:00:00.000Z"} +{"doc_count":4375,"split_key":209334,"timestamp":"2026-04-05T01:00:00.000Z"} +{"doc_count":1732,"split_key":14061,"timestamp":"2026-04-05T01:00:00.000Z"} +{"doc_count":1701,"split_key":17552,"timestamp":"2026-04-05T01:00:00.000Z"} +{"doc_count":870,"split_key":396982,"timestamp":"2026-04-05T01:00:00.000Z"} +{"doc_count":24602,"split_key":271380,"timestamp":"2026-04-05T02:00:00.000Z"} +{"doc_count":5312,"split_key":209334,"timestamp":"2026-04-05T02:00:00.000Z"} +{"doc_count":2166,"split_key":211590,"timestamp":"2026-04-05T02:00:00.000Z"} +{"doc_count":1958,"split_key":14061,"timestamp":"2026-04-05T02:00:00.000Z"} +{"doc_count":863,"split_key":396982,"timestamp":"2026-04-05T02:00:00.000Z"} +{"doc_count":25600,"split_key":271380,"timestamp":"2026-04-05T03:00:00.000Z"} +{"doc_count":4710,"split_key":209334,"timestamp":"2026-04-05T03:00:00.000Z"} +{"doc_count":2757,"split_key":51396,"timestamp":"2026-04-05T03:00:00.000Z"} +{"doc_count":987,"split_key":396982,"timestamp":"2026-04-05T03:00:00.000Z"} +{"doc_count":811,"split_key":132203,"timestamp":"2026-04-05T03:00:00.000Z"} +{"doc_count":25561,"split_key":271380,"timestamp":"2026-04-05T04:00:00.000Z"} +{"doc_count":6111,"split_key":209334,"timestamp":"2026-04-05T04:00:00.000Z"} +{"doc_count":2185,"split_key":211590,"timestamp":"2026-04-05T04:00:00.000Z"} +{"doc_count":951,"split_key":396982,"timestamp":"2026-04-05T04:00:00.000Z"} +{"doc_count":543,"split_key":16509,"timestamp":"2026-04-05T04:00:00.000Z"} +{"doc_count":25706,"split_key":271380,"timestamp":"2026-04-05T05:00:00.000Z"} +{"doc_count":5450,"split_key":209334,"timestamp":"2026-04-05T05:00:00.000Z"} +{"doc_count":2151,"split_key":211590,"timestamp":"2026-04-05T05:00:00.000Z"} +{"doc_count":794,"split_key":396982,"timestamp":"2026-04-05T05:00:00.000Z"} +{"doc_count":640,"split_key":21738,"timestamp":"2026-04-05T05:00:00.000Z"} +{"doc_count":10364,"split_key":271380,"timestamp":"2026-04-05T06:00:00.000Z"} +{"doc_count":7457,"split_key":209334,"timestamp":"2026-04-05T06:00:00.000Z"} +{"doc_count":596,"split_key":4134,"timestamp":"2026-04-05T06:00:00.000Z"} +{"doc_count":536,"split_key":16509,"timestamp":"2026-04-05T06:00:00.000Z"} +{"doc_count":516,"split_key":24323,"timestamp":"2026-04-05T06:00:00.000Z"} +{"doc_count":3145,"split_key":209334,"timestamp":"2026-04-05T07:00:00.000Z"} +{"doc_count":1342,"split_key":4134,"timestamp":"2026-04-05T07:00:00.000Z"} +{"doc_count":613,"split_key":262287,"timestamp":"2026-04-05T07:00:00.000Z"} +{"doc_count":529,"split_key":24323,"timestamp":"2026-04-05T07:00:00.000Z"} +{"doc_count":460,"split_key":16509,"timestamp":"2026-04-05T07:00:00.000Z"} +{"doc_count":16206,"split_key":209334,"timestamp":"2026-04-05T08:00:00.000Z"} +{"doc_count":2153,"split_key":211590,"timestamp":"2026-04-05T08:00:00.000Z"} +{"doc_count":1076,"split_key":16509,"timestamp":"2026-04-05T08:00:00.000Z"} +{"doc_count":869,"split_key":21738,"timestamp":"2026-04-05T08:00:00.000Z"} +{"doc_count":513,"split_key":24323,"timestamp":"2026-04-05T08:00:00.000Z"} +{"doc_count":27519,"split_key":209334,"timestamp":"2026-04-05T09:00:00.000Z"} +{"doc_count":3960,"split_key":211590,"timestamp":"2026-04-05T09:00:00.000Z"} +{"doc_count":1026,"split_key":24323,"timestamp":"2026-04-05T09:00:00.000Z"} +{"doc_count":689,"split_key":16509,"timestamp":"2026-04-05T09:00:00.000Z"} +{"doc_count":476,"split_key":21738,"timestamp":"2026-04-05T09:00:00.000Z"} +{"doc_count":31869,"split_key":209334,"timestamp":"2026-04-05T10:00:00.000Z"} +{"doc_count":1282,"split_key":24323,"timestamp":"2026-04-05T10:00:00.000Z"} +{"doc_count":903,"split_key":211590,"timestamp":"2026-04-05T10:00:00.000Z"} +{"doc_count":771,"split_key":138997,"timestamp":"2026-04-05T10:00:00.000Z"} +{"doc_count":634,"split_key":16509,"timestamp":"2026-04-05T10:00:00.000Z"} +{"doc_count":35914,"split_key":209334,"timestamp":"2026-04-05T11:00:00.000Z"} +{"doc_count":1271,"split_key":37963,"timestamp":"2026-04-05T11:00:00.000Z"} +{"doc_count":1268,"split_key":24323,"timestamp":"2026-04-05T11:00:00.000Z"} +{"doc_count":660,"split_key":201401,"timestamp":"2026-04-05T11:00:00.000Z"} +{"doc_count":627,"split_key":16509,"timestamp":"2026-04-05T11:00:00.000Z"} +{"doc_count":22250,"split_key":209334,"timestamp":"2026-04-05T12:00:00.000Z"} +{"doc_count":2151,"split_key":211590,"timestamp":"2026-04-05T12:00:00.000Z"} +{"doc_count":1270,"split_key":37963,"timestamp":"2026-04-05T12:00:00.000Z"} +{"doc_count":1110,"split_key":24323,"timestamp":"2026-04-05T12:00:00.000Z"} +{"doc_count":369,"split_key":21738,"timestamp":"2026-04-05T12:00:00.000Z"} +{"doc_count":17490,"split_key":14618,"timestamp":"2026-04-05T13:00:00.000Z"} +{"doc_count":6469,"split_key":211590,"timestamp":"2026-04-05T13:00:00.000Z"} +{"doc_count":1998,"split_key":271380,"timestamp":"2026-04-05T13:00:00.000Z"} +{"doc_count":1241,"split_key":37963,"timestamp":"2026-04-05T13:00:00.000Z"} +{"doc_count":1137,"split_key":24323,"timestamp":"2026-04-05T13:00:00.000Z"} +{"doc_count":6966,"split_key":211590,"timestamp":"2026-04-05T14:00:00.000Z"} +{"doc_count":3261,"split_key":271380,"timestamp":"2026-04-05T14:00:00.000Z"} +{"doc_count":1353,"split_key":14061,"timestamp":"2026-04-05T14:00:00.000Z"} +{"doc_count":1222,"split_key":37963,"timestamp":"2026-04-05T14:00:00.000Z"} +{"doc_count":1140,"split_key":24323,"timestamp":"2026-04-05T14:00:00.000Z"} +{"doc_count":6679,"split_key":14618,"timestamp":"2026-04-05T15:00:00.000Z"} +{"doc_count":4712,"split_key":14061,"timestamp":"2026-04-05T15:00:00.000Z"} +{"doc_count":3198,"split_key":271380,"timestamp":"2026-04-05T15:00:00.000Z"} +{"doc_count":1678,"split_key":37963,"timestamp":"2026-04-05T15:00:00.000Z"} +{"doc_count":1133,"split_key":24323,"timestamp":"2026-04-05T15:00:00.000Z"} +{"doc_count":4735,"split_key":14061,"timestamp":"2026-04-05T16:00:00.000Z"} +{"doc_count":3279,"split_key":271380,"timestamp":"2026-04-05T16:00:00.000Z"} +{"doc_count":2117,"split_key":396356,"timestamp":"2026-04-05T16:00:00.000Z"} +{"doc_count":1120,"split_key":37963,"timestamp":"2026-04-05T16:00:00.000Z"} +{"doc_count":956,"split_key":24323,"timestamp":"2026-04-05T16:00:00.000Z"} +{"doc_count":4779,"split_key":211590,"timestamp":"2026-04-05T17:00:00.000Z"} +{"doc_count":4043,"split_key":45102,"timestamp":"2026-04-05T17:00:00.000Z"} +{"doc_count":3121,"split_key":271380,"timestamp":"2026-04-05T17:00:00.000Z"} +{"doc_count":2235,"split_key":396356,"timestamp":"2026-04-05T17:00:00.000Z"} +{"doc_count":2095,"split_key":14061,"timestamp":"2026-04-05T17:00:00.000Z"} +{"doc_count":4761,"split_key":211590,"timestamp":"2026-04-05T18:00:00.000Z"} +{"doc_count":3232,"split_key":271380,"timestamp":"2026-04-05T18:00:00.000Z"} +{"doc_count":2882,"split_key":45102,"timestamp":"2026-04-05T18:00:00.000Z"} +{"doc_count":2171,"split_key":37963,"timestamp":"2026-04-05T18:00:00.000Z"} +{"doc_count":2002,"split_key":396356,"timestamp":"2026-04-05T18:00:00.000Z"} +{"doc_count":3268,"split_key":271380,"timestamp":"2026-04-05T19:00:00.000Z"} +{"doc_count":2746,"split_key":45102,"timestamp":"2026-04-05T19:00:00.000Z"} +{"doc_count":2552,"split_key":37963,"timestamp":"2026-04-05T19:00:00.000Z"} +{"doc_count":2151,"split_key":211590,"timestamp":"2026-04-05T19:00:00.000Z"} +{"doc_count":1570,"split_key":396356,"timestamp":"2026-04-05T19:00:00.000Z"} +{"doc_count":3210,"split_key":271380,"timestamp":"2026-04-05T20:00:00.000Z"} +{"doc_count":2801,"split_key":45102,"timestamp":"2026-04-05T20:00:00.000Z"} +{"doc_count":2621,"split_key":37963,"timestamp":"2026-04-05T20:00:00.000Z"} +{"doc_count":591,"split_key":211590,"timestamp":"2026-04-05T20:00:00.000Z"} +{"doc_count":432,"split_key":396982,"timestamp":"2026-04-05T20:00:00.000Z"} +{"doc_count":3342,"split_key":271380,"timestamp":"2026-04-05T21:00:00.000Z"} +{"doc_count":2216,"split_key":211590,"timestamp":"2026-04-05T21:00:00.000Z"} +{"doc_count":1892,"split_key":37963,"timestamp":"2026-04-05T21:00:00.000Z"} +{"doc_count":1328,"split_key":396356,"timestamp":"2026-04-05T21:00:00.000Z"} +{"doc_count":1304,"split_key":45102,"timestamp":"2026-04-05T21:00:00.000Z"} +{"doc_count":4468,"split_key":211590,"timestamp":"2026-04-05T22:00:00.000Z"} +{"doc_count":3410,"split_key":271380,"timestamp":"2026-04-05T22:00:00.000Z"} +{"doc_count":1199,"split_key":37963,"timestamp":"2026-04-05T22:00:00.000Z"} +{"doc_count":655,"split_key":50360,"timestamp":"2026-04-05T22:00:00.000Z"} +{"doc_count":587,"split_key":209334,"timestamp":"2026-04-05T22:00:00.000Z"} +{"doc_count":19034,"split_key":209334,"timestamp":"2026-04-05T23:00:00.000Z"} +{"doc_count":3079,"split_key":211590,"timestamp":"2026-04-05T23:00:00.000Z"} +{"doc_count":2599,"split_key":271380,"timestamp":"2026-04-05T23:00:00.000Z"} +{"doc_count":2165,"split_key":396356,"timestamp":"2026-04-05T23:00:00.000Z"} +{"doc_count":1195,"split_key":50360,"timestamp":"2026-04-05T23:00:00.000Z"} +{"doc_count":30727,"split_key":209334,"timestamp":"2026-04-06T00:00:00.000Z"} +{"doc_count":1695,"split_key":271380,"timestamp":"2026-04-06T00:00:00.000Z"} +{"doc_count":1544,"split_key":211590,"timestamp":"2026-04-06T00:00:00.000Z"} +{"doc_count":1394,"split_key":396356,"timestamp":"2026-04-06T00:00:00.000Z"} +{"doc_count":1215,"split_key":50360,"timestamp":"2026-04-06T00:00:00.000Z"} +{"doc_count":22151,"split_key":209334,"timestamp":"2026-04-06T01:00:00.000Z"} +{"doc_count":1174,"split_key":50360,"timestamp":"2026-04-06T01:00:00.000Z"} +{"doc_count":659,"split_key":396356,"timestamp":"2026-04-06T01:00:00.000Z"} +{"doc_count":478,"split_key":16509,"timestamp":"2026-04-06T01:00:00.000Z"} +{"doc_count":477,"split_key":37963,"timestamp":"2026-04-06T01:00:00.000Z"} +{"doc_count":15738,"split_key":209334,"timestamp":"2026-04-06T02:00:00.000Z"} +{"doc_count":1204,"split_key":50360,"timestamp":"2026-04-06T02:00:00.000Z"} +{"doc_count":550,"split_key":396982,"timestamp":"2026-04-06T02:00:00.000Z"} +{"doc_count":528,"split_key":271380,"timestamp":"2026-04-06T02:00:00.000Z"} +{"doc_count":516,"split_key":201401,"timestamp":"2026-04-06T02:00:00.000Z"} +{"doc_count":29942,"split_key":209334,"timestamp":"2026-04-06T03:00:00.000Z"} +{"doc_count":3304,"split_key":271380,"timestamp":"2026-04-06T03:00:00.000Z"} +{"doc_count":1174,"split_key":50360,"timestamp":"2026-04-06T03:00:00.000Z"} +{"doc_count":881,"split_key":201401,"timestamp":"2026-04-06T03:00:00.000Z"} +{"doc_count":777,"split_key":45102,"timestamp":"2026-04-06T03:00:00.000Z"} +{"doc_count":8200,"split_key":209334,"timestamp":"2026-04-06T04:00:00.000Z"} +{"doc_count":3119,"split_key":271380,"timestamp":"2026-04-06T04:00:00.000Z"} +{"doc_count":1210,"split_key":50360,"timestamp":"2026-04-06T04:00:00.000Z"} +{"doc_count":667,"split_key":16509,"timestamp":"2026-04-06T04:00:00.000Z"} +{"doc_count":421,"split_key":37963,"timestamp":"2026-04-06T04:00:00.000Z"} +{"doc_count":5208,"split_key":209334,"timestamp":"2026-04-06T05:00:00.000Z"} +{"doc_count":1196,"split_key":50360,"timestamp":"2026-04-06T05:00:00.000Z"} +{"doc_count":918,"split_key":262287,"timestamp":"2026-04-06T05:00:00.000Z"} +{"doc_count":441,"split_key":16509,"timestamp":"2026-04-06T05:00:00.000Z"} +{"doc_count":357,"split_key":201814,"timestamp":"2026-04-06T05:00:00.000Z"} +{"doc_count":2742,"split_key":209334,"timestamp":"2026-04-06T06:00:00.000Z"} +{"doc_count":1776,"split_key":262287,"timestamp":"2026-04-06T06:00:00.000Z"} +{"doc_count":1169,"split_key":50360,"timestamp":"2026-04-06T06:00:00.000Z"} +{"doc_count":752,"split_key":14618,"timestamp":"2026-04-06T06:00:00.000Z"} +{"doc_count":497,"split_key":396982,"timestamp":"2026-04-06T06:00:00.000Z"} +{"doc_count":2214,"split_key":211590,"timestamp":"2026-04-06T07:00:00.000Z"} +{"doc_count":1034,"split_key":50360,"timestamp":"2026-04-06T07:00:00.000Z"} +{"doc_count":914,"split_key":262287,"timestamp":"2026-04-06T07:00:00.000Z"} +{"doc_count":869,"split_key":45102,"timestamp":"2026-04-06T07:00:00.000Z"} +{"doc_count":487,"split_key":209334,"timestamp":"2026-04-06T07:00:00.000Z"} +{"doc_count":2641,"split_key":45102,"timestamp":"2026-04-06T08:00:00.000Z"} +{"doc_count":1010,"split_key":50360,"timestamp":"2026-04-06T08:00:00.000Z"} +{"doc_count":782,"split_key":262287,"timestamp":"2026-04-06T08:00:00.000Z"} +{"doc_count":433,"split_key":16509,"timestamp":"2026-04-06T08:00:00.000Z"} +{"doc_count":382,"split_key":131471,"timestamp":"2026-04-06T08:00:00.000Z"} +{"doc_count":1929,"split_key":262287,"timestamp":"2026-04-06T09:00:00.000Z"} +{"doc_count":1562,"split_key":45102,"timestamp":"2026-04-06T09:00:00.000Z"} +{"doc_count":1141,"split_key":396356,"timestamp":"2026-04-06T09:00:00.000Z"} +{"doc_count":1035,"split_key":50360,"timestamp":"2026-04-06T09:00:00.000Z"} +{"doc_count":533,"split_key":16509,"timestamp":"2026-04-06T09:00:00.000Z"} +{"doc_count":1821,"split_key":37963,"timestamp":"2026-04-06T10:00:00.000Z"} +{"doc_count":1380,"split_key":262287,"timestamp":"2026-04-06T10:00:00.000Z"} +{"doc_count":1112,"split_key":50360,"timestamp":"2026-04-06T10:00:00.000Z"} +{"doc_count":426,"split_key":197540,"timestamp":"2026-04-06T10:00:00.000Z"} +{"doc_count":418,"split_key":16509,"timestamp":"2026-04-06T10:00:00.000Z"} +{"doc_count":1721,"split_key":37963,"timestamp":"2026-04-06T11:00:00.000Z"} +{"doc_count":1297,"split_key":262287,"timestamp":"2026-04-06T11:00:00.000Z"} +{"doc_count":1237,"split_key":50360,"timestamp":"2026-04-06T11:00:00.000Z"} +{"doc_count":909,"split_key":209334,"timestamp":"2026-04-06T11:00:00.000Z"} +{"doc_count":591,"split_key":16509,"timestamp":"2026-04-06T11:00:00.000Z"} +{"doc_count":1175,"split_key":50360,"timestamp":"2026-04-06T12:00:00.000Z"} +{"doc_count":973,"split_key":209334,"timestamp":"2026-04-06T12:00:00.000Z"} +{"doc_count":862,"split_key":37963,"timestamp":"2026-04-06T12:00:00.000Z"} +{"doc_count":721,"split_key":262287,"timestamp":"2026-04-06T12:00:00.000Z"} +{"doc_count":371,"split_key":16509,"timestamp":"2026-04-06T12:00:00.000Z"} +{"doc_count":4366,"split_key":211590,"timestamp":"2026-04-06T13:00:00.000Z"} +{"doc_count":1386,"split_key":262287,"timestamp":"2026-04-06T13:00:00.000Z"} +{"doc_count":1227,"split_key":2609,"timestamp":"2026-04-06T13:00:00.000Z"} +{"doc_count":1212,"split_key":50360,"timestamp":"2026-04-06T13:00:00.000Z"} +{"doc_count":676,"split_key":209334,"timestamp":"2026-04-06T13:00:00.000Z"} +{"doc_count":7037,"split_key":211590,"timestamp":"2026-04-06T14:00:00.000Z"} +{"doc_count":1424,"split_key":262287,"timestamp":"2026-04-06T14:00:00.000Z"} +{"doc_count":1176,"split_key":50360,"timestamp":"2026-04-06T14:00:00.000Z"} +{"doc_count":731,"split_key":209334,"timestamp":"2026-04-06T14:00:00.000Z"} +{"doc_count":601,"split_key":138754,"timestamp":"2026-04-06T14:00:00.000Z"} +{"doc_count":1764,"split_key":211590,"timestamp":"2026-04-06T15:00:00.000Z"} +{"doc_count":1247,"split_key":262287,"timestamp":"2026-04-06T15:00:00.000Z"} +{"doc_count":1199,"split_key":50360,"timestamp":"2026-04-06T15:00:00.000Z"} +{"doc_count":680,"split_key":209334,"timestamp":"2026-04-06T15:00:00.000Z"} +{"doc_count":539,"split_key":199829,"timestamp":"2026-04-06T15:00:00.000Z"} +{"doc_count":2948,"split_key":209605,"timestamp":"2026-04-06T16:00:00.000Z"} +{"doc_count":2415,"split_key":45102,"timestamp":"2026-04-06T16:00:00.000Z"} +{"doc_count":1539,"split_key":199829,"timestamp":"2026-04-06T16:00:00.000Z"} +{"doc_count":1182,"split_key":50360,"timestamp":"2026-04-06T16:00:00.000Z"} +{"doc_count":1175,"split_key":14061,"timestamp":"2026-04-06T16:00:00.000Z"} +{"doc_count":2038,"split_key":45102,"timestamp":"2026-04-06T17:00:00.000Z"} +{"doc_count":1387,"split_key":211590,"timestamp":"2026-04-06T17:00:00.000Z"} +{"doc_count":1180,"split_key":50360,"timestamp":"2026-04-06T17:00:00.000Z"} +{"doc_count":665,"split_key":16509,"timestamp":"2026-04-06T17:00:00.000Z"} +{"doc_count":657,"split_key":209334,"timestamp":"2026-04-06T17:00:00.000Z"} +{"doc_count":7413,"split_key":271380,"timestamp":"2026-04-06T18:00:00.000Z"} +{"doc_count":2228,"split_key":211590,"timestamp":"2026-04-06T18:00:00.000Z"} +{"doc_count":1153,"split_key":50360,"timestamp":"2026-04-06T18:00:00.000Z"} +{"doc_count":648,"split_key":16509,"timestamp":"2026-04-06T18:00:00.000Z"} +{"doc_count":601,"split_key":209334,"timestamp":"2026-04-06T18:00:00.000Z"} +{"doc_count":14993,"split_key":271380,"timestamp":"2026-04-06T19:00:00.000Z"} +{"doc_count":4333,"split_key":211590,"timestamp":"2026-04-06T19:00:00.000Z"} +{"doc_count":2962,"split_key":209605,"timestamp":"2026-04-06T19:00:00.000Z"} +{"doc_count":1183,"split_key":50360,"timestamp":"2026-04-06T19:00:00.000Z"} +{"doc_count":839,"split_key":209334,"timestamp":"2026-04-06T19:00:00.000Z"} +{"doc_count":15197,"split_key":271380,"timestamp":"2026-04-06T20:00:00.000Z"} +{"doc_count":1875,"split_key":199829,"timestamp":"2026-04-06T20:00:00.000Z"} +{"doc_count":1169,"split_key":50360,"timestamp":"2026-04-06T20:00:00.000Z"} +{"doc_count":821,"split_key":209334,"timestamp":"2026-04-06T20:00:00.000Z"} +{"doc_count":680,"split_key":211590,"timestamp":"2026-04-06T20:00:00.000Z"} +{"doc_count":14318,"split_key":271380,"timestamp":"2026-04-06T21:00:00.000Z"} +{"doc_count":1417,"split_key":211590,"timestamp":"2026-04-06T21:00:00.000Z"} +{"doc_count":1215,"split_key":50360,"timestamp":"2026-04-06T21:00:00.000Z"} +{"doc_count":758,"split_key":209334,"timestamp":"2026-04-06T21:00:00.000Z"} +{"doc_count":591,"split_key":396982,"timestamp":"2026-04-06T21:00:00.000Z"} +{"doc_count":6565,"split_key":211590,"timestamp":"2026-04-06T22:00:00.000Z"} +{"doc_count":3355,"split_key":271380,"timestamp":"2026-04-06T22:00:00.000Z"} +{"doc_count":1546,"split_key":14061,"timestamp":"2026-04-06T22:00:00.000Z"} +{"doc_count":1198,"split_key":50360,"timestamp":"2026-04-06T22:00:00.000Z"} +{"doc_count":418,"split_key":141995,"timestamp":"2026-04-06T22:00:00.000Z"} +{"doc_count":21924,"split_key":209334,"timestamp":"2026-04-06T23:00:00.000Z"} +{"doc_count":10163,"split_key":211590,"timestamp":"2026-04-06T23:00:00.000Z"} +{"doc_count":1490,"split_key":14061,"timestamp":"2026-04-06T23:00:00.000Z"} +{"doc_count":1212,"split_key":50360,"timestamp":"2026-04-06T23:00:00.000Z"} +{"doc_count":480,"split_key":396982,"timestamp":"2026-04-06T23:00:00.000Z"} +{"doc_count":24525,"split_key":209334,"timestamp":"2026-04-07T00:00:00.000Z"} +{"doc_count":9289,"split_key":211590,"timestamp":"2026-04-07T00:00:00.000Z"} +{"doc_count":1742,"split_key":135905,"timestamp":"2026-04-07T00:00:00.000Z"} +{"doc_count":1239,"split_key":50360,"timestamp":"2026-04-07T00:00:00.000Z"} +{"doc_count":765,"split_key":396982,"timestamp":"2026-04-07T00:00:00.000Z"} +{"doc_count":24381,"split_key":209334,"timestamp":"2026-04-07T01:00:00.000Z"} +{"doc_count":2152,"split_key":211590,"timestamp":"2026-04-07T01:00:00.000Z"} +{"doc_count":1192,"split_key":50360,"timestamp":"2026-04-07T01:00:00.000Z"} +{"doc_count":448,"split_key":45102,"timestamp":"2026-04-07T01:00:00.000Z"} +{"doc_count":396,"split_key":396982,"timestamp":"2026-04-07T01:00:00.000Z"} +{"doc_count":22456,"split_key":209334,"timestamp":"2026-04-07T02:00:00.000Z"} +{"doc_count":12006,"split_key":211590,"timestamp":"2026-04-07T02:00:00.000Z"} +{"doc_count":1168,"split_key":50360,"timestamp":"2026-04-07T02:00:00.000Z"} +{"doc_count":1040,"split_key":16509,"timestamp":"2026-04-07T02:00:00.000Z"} +{"doc_count":501,"split_key":45102,"timestamp":"2026-04-07T02:00:00.000Z"} +{"doc_count":26741,"split_key":209334,"timestamp":"2026-04-07T03:00:00.000Z"} +{"doc_count":6031,"split_key":211590,"timestamp":"2026-04-07T03:00:00.000Z"} +{"doc_count":1167,"split_key":50360,"timestamp":"2026-04-07T03:00:00.000Z"} +{"doc_count":812,"split_key":16509,"timestamp":"2026-04-07T03:00:00.000Z"} +{"doc_count":473,"split_key":45102,"timestamp":"2026-04-07T03:00:00.000Z"} +{"doc_count":12773,"split_key":209334,"timestamp":"2026-04-07T04:00:00.000Z"} +{"doc_count":6227,"split_key":211590,"timestamp":"2026-04-07T04:00:00.000Z"} +{"doc_count":1185,"split_key":50360,"timestamp":"2026-04-07T04:00:00.000Z"} +{"doc_count":1118,"split_key":16509,"timestamp":"2026-04-07T04:00:00.000Z"} +{"doc_count":457,"split_key":24940,"timestamp":"2026-04-07T04:00:00.000Z"} +{"doc_count":5711,"split_key":209334,"timestamp":"2026-04-07T05:00:00.000Z"} +{"doc_count":1186,"split_key":50360,"timestamp":"2026-04-07T05:00:00.000Z"} +{"doc_count":1051,"split_key":14061,"timestamp":"2026-04-07T05:00:00.000Z"} +{"doc_count":848,"split_key":211590,"timestamp":"2026-04-07T05:00:00.000Z"} +{"doc_count":839,"split_key":396982,"timestamp":"2026-04-07T05:00:00.000Z"} +{"doc_count":4218,"split_key":14061,"timestamp":"2026-04-07T06:00:00.000Z"} +{"doc_count":3006,"split_key":211590,"timestamp":"2026-04-07T06:00:00.000Z"} +{"doc_count":2950,"split_key":209334,"timestamp":"2026-04-07T06:00:00.000Z"} +{"doc_count":1169,"split_key":50360,"timestamp":"2026-04-07T06:00:00.000Z"} +{"doc_count":909,"split_key":45102,"timestamp":"2026-04-07T06:00:00.000Z"} +{"doc_count":3586,"split_key":211590,"timestamp":"2026-04-07T07:00:00.000Z"} +{"doc_count":1190,"split_key":50360,"timestamp":"2026-04-07T07:00:00.000Z"} +{"doc_count":775,"split_key":16509,"timestamp":"2026-04-07T07:00:00.000Z"} +{"doc_count":682,"split_key":14061,"timestamp":"2026-04-07T07:00:00.000Z"} +{"doc_count":660,"split_key":26599,"timestamp":"2026-04-07T07:00:00.000Z"} +{"doc_count":6531,"split_key":211590,"timestamp":"2026-04-07T08:00:00.000Z"} +{"doc_count":1173,"split_key":50360,"timestamp":"2026-04-07T08:00:00.000Z"} +{"doc_count":668,"split_key":26599,"timestamp":"2026-04-07T08:00:00.000Z"} +{"doc_count":553,"split_key":16509,"timestamp":"2026-04-07T08:00:00.000Z"} +{"doc_count":527,"split_key":45582,"timestamp":"2026-04-07T08:00:00.000Z"} +{"doc_count":5515,"split_key":211590,"timestamp":"2026-04-07T09:00:00.000Z"} +{"doc_count":1179,"split_key":50360,"timestamp":"2026-04-07T09:00:00.000Z"} +{"doc_count":1132,"split_key":16509,"timestamp":"2026-04-07T09:00:00.000Z"} +{"doc_count":692,"split_key":396982,"timestamp":"2026-04-07T09:00:00.000Z"} +{"doc_count":657,"split_key":26599,"timestamp":"2026-04-07T09:00:00.000Z"} +{"doc_count":3420,"split_key":211590,"timestamp":"2026-04-07T10:00:00.000Z"} +{"doc_count":1198,"split_key":50360,"timestamp":"2026-04-07T10:00:00.000Z"} +{"doc_count":993,"split_key":16509,"timestamp":"2026-04-07T10:00:00.000Z"} +{"doc_count":657,"split_key":26599,"timestamp":"2026-04-07T10:00:00.000Z"} +{"doc_count":424,"split_key":24940,"timestamp":"2026-04-07T10:00:00.000Z"} +{"doc_count":5398,"split_key":211590,"timestamp":"2026-04-07T11:00:00.000Z"} +{"doc_count":1200,"split_key":50360,"timestamp":"2026-04-07T11:00:00.000Z"} +{"doc_count":701,"split_key":16509,"timestamp":"2026-04-07T11:00:00.000Z"} +{"doc_count":680,"split_key":26599,"timestamp":"2026-04-07T11:00:00.000Z"} +{"doc_count":428,"split_key":9299,"timestamp":"2026-04-07T11:00:00.000Z"} +{"doc_count":3352,"split_key":211590,"timestamp":"2026-04-07T12:00:00.000Z"} +{"doc_count":2184,"split_key":268502,"timestamp":"2026-04-07T12:00:00.000Z"} +{"doc_count":1187,"split_key":50360,"timestamp":"2026-04-07T12:00:00.000Z"} +{"doc_count":1089,"split_key":45102,"timestamp":"2026-04-07T12:00:00.000Z"} +{"doc_count":1081,"split_key":23470,"timestamp":"2026-04-07T12:00:00.000Z"} +{"doc_count":20865,"split_key":268502,"timestamp":"2026-04-07T13:00:00.000Z"} +{"doc_count":15105,"split_key":211590,"timestamp":"2026-04-07T13:00:00.000Z"} +{"doc_count":1360,"split_key":45102,"timestamp":"2026-04-07T13:00:00.000Z"} +{"doc_count":1168,"split_key":50360,"timestamp":"2026-04-07T13:00:00.000Z"} +{"doc_count":574,"split_key":16509,"timestamp":"2026-04-07T13:00:00.000Z"} +{"doc_count":8540,"split_key":211590,"timestamp":"2026-04-07T14:00:00.000Z"} +{"doc_count":8483,"split_key":271380,"timestamp":"2026-04-07T14:00:00.000Z"} +{"doc_count":7633,"split_key":268502,"timestamp":"2026-04-07T14:00:00.000Z"} +{"doc_count":2954,"split_key":209605,"timestamp":"2026-04-07T14:00:00.000Z"} +{"doc_count":2116,"split_key":45102,"timestamp":"2026-04-07T14:00:00.000Z"} +{"doc_count":19922,"split_key":271380,"timestamp":"2026-04-07T15:00:00.000Z"} +{"doc_count":1366,"split_key":45102,"timestamp":"2026-04-07T15:00:00.000Z"} +{"doc_count":1164,"split_key":50360,"timestamp":"2026-04-07T15:00:00.000Z"} +{"doc_count":969,"split_key":211590,"timestamp":"2026-04-07T15:00:00.000Z"} +{"doc_count":884,"split_key":16509,"timestamp":"2026-04-07T15:00:00.000Z"} +{"doc_count":20558,"split_key":271380,"timestamp":"2026-04-07T16:00:00.000Z"} +{"doc_count":9479,"split_key":45899,"timestamp":"2026-04-07T16:00:00.000Z"} +{"doc_count":6288,"split_key":211590,"timestamp":"2026-04-07T16:00:00.000Z"} +{"doc_count":1194,"split_key":50360,"timestamp":"2026-04-07T16:00:00.000Z"} +{"doc_count":898,"split_key":16509,"timestamp":"2026-04-07T16:00:00.000Z"} +{"doc_count":21882,"split_key":271380,"timestamp":"2026-04-07T17:00:00.000Z"} +{"doc_count":2167,"split_key":211590,"timestamp":"2026-04-07T17:00:00.000Z"} +{"doc_count":1179,"split_key":50360,"timestamp":"2026-04-07T17:00:00.000Z"} +{"doc_count":768,"split_key":16509,"timestamp":"2026-04-07T17:00:00.000Z"} +{"doc_count":693,"split_key":14061,"timestamp":"2026-04-07T17:00:00.000Z"} +{"doc_count":22343,"split_key":271380,"timestamp":"2026-04-07T18:00:00.000Z"} +{"doc_count":8635,"split_key":211590,"timestamp":"2026-04-07T18:00:00.000Z"} +{"doc_count":1157,"split_key":50360,"timestamp":"2026-04-07T18:00:00.000Z"} +{"doc_count":538,"split_key":16509,"timestamp":"2026-04-07T18:00:00.000Z"} +{"doc_count":532,"split_key":3301,"timestamp":"2026-04-07T18:00:00.000Z"} +{"doc_count":20663,"split_key":271380,"timestamp":"2026-04-07T19:00:00.000Z"} +{"doc_count":1169,"split_key":50360,"timestamp":"2026-04-07T19:00:00.000Z"} +{"doc_count":631,"split_key":16509,"timestamp":"2026-04-07T19:00:00.000Z"} +{"doc_count":573,"split_key":45102,"timestamp":"2026-04-07T19:00:00.000Z"} +{"doc_count":524,"split_key":3301,"timestamp":"2026-04-07T19:00:00.000Z"} +{"doc_count":20314,"split_key":63949,"timestamp":"2026-04-07T20:00:00.000Z"} +{"doc_count":2011,"split_key":269546,"timestamp":"2026-04-07T20:00:00.000Z"} +{"doc_count":1180,"split_key":50360,"timestamp":"2026-04-07T20:00:00.000Z"} +{"doc_count":711,"split_key":396982,"timestamp":"2026-04-07T20:00:00.000Z"} +{"doc_count":500,"split_key":3301,"timestamp":"2026-04-07T20:00:00.000Z"} +{"doc_count":22622,"split_key":63949,"timestamp":"2026-04-07T21:00:00.000Z"} +{"doc_count":4057,"split_key":211590,"timestamp":"2026-04-07T21:00:00.000Z"} +{"doc_count":2498,"split_key":269546,"timestamp":"2026-04-07T21:00:00.000Z"} +{"doc_count":1207,"split_key":50360,"timestamp":"2026-04-07T21:00:00.000Z"} +{"doc_count":717,"split_key":211859,"timestamp":"2026-04-07T21:00:00.000Z"} +{"doc_count":24267,"split_key":63949,"timestamp":"2026-04-07T22:00:00.000Z"} +{"doc_count":11551,"split_key":211590,"timestamp":"2026-04-07T22:00:00.000Z"} +{"doc_count":4951,"split_key":269546,"timestamp":"2026-04-07T22:00:00.000Z"} +{"doc_count":1208,"split_key":50360,"timestamp":"2026-04-07T22:00:00.000Z"} +{"doc_count":546,"split_key":9299,"timestamp":"2026-04-07T22:00:00.000Z"} +{"doc_count":23619,"split_key":63949,"timestamp":"2026-04-07T23:00:00.000Z"} +{"doc_count":13543,"split_key":209334,"timestamp":"2026-04-07T23:00:00.000Z"} +{"doc_count":4777,"split_key":269546,"timestamp":"2026-04-07T23:00:00.000Z"} +{"doc_count":1638,"split_key":3223,"timestamp":"2026-04-07T23:00:00.000Z"} +{"doc_count":1453,"split_key":211590,"timestamp":"2026-04-07T23:00:00.000Z"} +{"doc_count":30268,"split_key":209334,"timestamp":"2026-04-08T00:00:00.000Z"} +{"doc_count":6148,"split_key":211590,"timestamp":"2026-04-08T00:00:00.000Z"} +{"doc_count":4819,"split_key":269546,"timestamp":"2026-04-08T00:00:00.000Z"} +{"doc_count":3745,"split_key":63949,"timestamp":"2026-04-08T00:00:00.000Z"} +{"doc_count":1219,"split_key":50360,"timestamp":"2026-04-08T00:00:00.000Z"} +{"doc_count":36448,"split_key":209334,"timestamp":"2026-04-08T01:00:00.000Z"} +{"doc_count":4642,"split_key":269546,"timestamp":"2026-04-08T01:00:00.000Z"} +{"doc_count":4531,"split_key":211590,"timestamp":"2026-04-08T01:00:00.000Z"} +{"doc_count":1231,"split_key":50360,"timestamp":"2026-04-08T01:00:00.000Z"} +{"doc_count":888,"split_key":16509,"timestamp":"2026-04-08T01:00:00.000Z"} +{"doc_count":26345,"split_key":209334,"timestamp":"2026-04-08T02:00:00.000Z"} +{"doc_count":4513,"split_key":269546,"timestamp":"2026-04-08T02:00:00.000Z"} +{"doc_count":1777,"split_key":211590,"timestamp":"2026-04-08T02:00:00.000Z"} +{"doc_count":1223,"split_key":16509,"timestamp":"2026-04-08T02:00:00.000Z"} +{"doc_count":1176,"split_key":50360,"timestamp":"2026-04-08T02:00:00.000Z"} +{"doc_count":19889,"split_key":209334,"timestamp":"2026-04-08T03:00:00.000Z"} +{"doc_count":5003,"split_key":211590,"timestamp":"2026-04-08T03:00:00.000Z"} +{"doc_count":4626,"split_key":269546,"timestamp":"2026-04-08T03:00:00.000Z"} +{"doc_count":1180,"split_key":50360,"timestamp":"2026-04-08T03:00:00.000Z"} +{"doc_count":1075,"split_key":16509,"timestamp":"2026-04-08T03:00:00.000Z"} +{"doc_count":6102,"split_key":209334,"timestamp":"2026-04-08T04:00:00.000Z"} +{"doc_count":4842,"split_key":269546,"timestamp":"2026-04-08T04:00:00.000Z"} +{"doc_count":4788,"split_key":211590,"timestamp":"2026-04-08T04:00:00.000Z"} +{"doc_count":1336,"split_key":16509,"timestamp":"2026-04-08T04:00:00.000Z"} +{"doc_count":1177,"split_key":50360,"timestamp":"2026-04-08T04:00:00.000Z"} +{"doc_count":5790,"split_key":209334,"timestamp":"2026-04-08T05:00:00.000Z"} +{"doc_count":5147,"split_key":269546,"timestamp":"2026-04-08T05:00:00.000Z"} +{"doc_count":3801,"split_key":211590,"timestamp":"2026-04-08T05:00:00.000Z"} +{"doc_count":1172,"split_key":50360,"timestamp":"2026-04-08T05:00:00.000Z"} +{"doc_count":1167,"split_key":16509,"timestamp":"2026-04-08T05:00:00.000Z"} +{"doc_count":5119,"split_key":269546,"timestamp":"2026-04-08T06:00:00.000Z"} +{"doc_count":2785,"split_key":209334,"timestamp":"2026-04-08T06:00:00.000Z"} +{"doc_count":1172,"split_key":50360,"timestamp":"2026-04-08T06:00:00.000Z"} +{"doc_count":945,"split_key":16509,"timestamp":"2026-04-08T06:00:00.000Z"} +{"doc_count":815,"split_key":45102,"timestamp":"2026-04-08T06:00:00.000Z"} +{"doc_count":5796,"split_key":211590,"timestamp":"2026-04-08T07:00:00.000Z"} +{"doc_count":5152,"split_key":269546,"timestamp":"2026-04-08T07:00:00.000Z"} +{"doc_count":1409,"split_key":16509,"timestamp":"2026-04-08T07:00:00.000Z"} +{"doc_count":1166,"split_key":50360,"timestamp":"2026-04-08T07:00:00.000Z"} +{"doc_count":694,"split_key":45102,"timestamp":"2026-04-08T07:00:00.000Z"} +{"doc_count":4912,"split_key":269546,"timestamp":"2026-04-08T08:00:00.000Z"} +{"doc_count":3949,"split_key":211590,"timestamp":"2026-04-08T08:00:00.000Z"} +{"doc_count":1236,"split_key":16509,"timestamp":"2026-04-08T08:00:00.000Z"} +{"doc_count":1171,"split_key":50360,"timestamp":"2026-04-08T08:00:00.000Z"} +{"doc_count":986,"split_key":45102,"timestamp":"2026-04-08T08:00:00.000Z"} +{"doc_count":5075,"split_key":269546,"timestamp":"2026-04-08T09:00:00.000Z"} +{"doc_count":4115,"split_key":211590,"timestamp":"2026-04-08T09:00:00.000Z"} +{"doc_count":1306,"split_key":16509,"timestamp":"2026-04-08T09:00:00.000Z"} +{"doc_count":1175,"split_key":50360,"timestamp":"2026-04-08T09:00:00.000Z"} +{"doc_count":731,"split_key":45102,"timestamp":"2026-04-08T09:00:00.000Z"} +{"doc_count":10132,"split_key":211590,"timestamp":"2026-04-08T10:00:00.000Z"} +{"doc_count":1789,"split_key":269546,"timestamp":"2026-04-08T10:00:00.000Z"} +{"doc_count":1421,"split_key":16509,"timestamp":"2026-04-08T10:00:00.000Z"} +{"doc_count":1151,"split_key":50360,"timestamp":"2026-04-08T10:00:00.000Z"} +{"doc_count":570,"split_key":9299,"timestamp":"2026-04-08T10:00:00.000Z"} +{"doc_count":2697,"split_key":211590,"timestamp":"2026-04-08T11:00:00.000Z"} +{"doc_count":1827,"split_key":206119,"timestamp":"2026-04-08T11:00:00.000Z"} +{"doc_count":1186,"split_key":50360,"timestamp":"2026-04-08T11:00:00.000Z"} +{"doc_count":1099,"split_key":16509,"timestamp":"2026-04-08T11:00:00.000Z"} +{"doc_count":742,"split_key":203771,"timestamp":"2026-04-08T11:00:00.000Z"} +{"doc_count":11253,"split_key":211590,"timestamp":"2026-04-08T12:00:00.000Z"} +{"doc_count":1777,"split_key":16509,"timestamp":"2026-04-08T12:00:00.000Z"} +{"doc_count":1174,"split_key":50360,"timestamp":"2026-04-08T12:00:00.000Z"} +{"doc_count":784,"split_key":203771,"timestamp":"2026-04-08T12:00:00.000Z"} +{"doc_count":579,"split_key":9299,"timestamp":"2026-04-08T12:00:00.000Z"} +{"doc_count":6895,"split_key":211590,"timestamp":"2026-04-08T13:00:00.000Z"} +{"doc_count":1219,"split_key":16509,"timestamp":"2026-04-08T13:00:00.000Z"} +{"doc_count":1208,"split_key":50360,"timestamp":"2026-04-08T13:00:00.000Z"} +{"doc_count":1020,"split_key":37963,"timestamp":"2026-04-08T13:00:00.000Z"} +{"doc_count":545,"split_key":9299,"timestamp":"2026-04-08T13:00:00.000Z"} +{"doc_count":4719,"split_key":211590,"timestamp":"2026-04-08T14:00:00.000Z"} +{"doc_count":1166,"split_key":50360,"timestamp":"2026-04-08T14:00:00.000Z"} +{"doc_count":1151,"split_key":16509,"timestamp":"2026-04-08T14:00:00.000Z"} +{"doc_count":1001,"split_key":37963,"timestamp":"2026-04-08T14:00:00.000Z"} +{"doc_count":568,"split_key":51396,"timestamp":"2026-04-08T14:00:00.000Z"} +{"doc_count":7431,"split_key":211590,"timestamp":"2026-04-08T15:00:00.000Z"} +{"doc_count":4598,"split_key":209456,"timestamp":"2026-04-08T15:00:00.000Z"} +{"doc_count":2330,"split_key":45102,"timestamp":"2026-04-08T15:00:00.000Z"} +{"doc_count":1183,"split_key":50360,"timestamp":"2026-04-08T15:00:00.000Z"} +{"doc_count":1044,"split_key":37963,"timestamp":"2026-04-08T15:00:00.000Z"} +{"doc_count":7284,"split_key":211590,"timestamp":"2026-04-08T16:00:00.000Z"} +{"doc_count":2155,"split_key":45102,"timestamp":"2026-04-08T16:00:00.000Z"} +{"doc_count":1255,"split_key":16509,"timestamp":"2026-04-08T16:00:00.000Z"} +{"doc_count":1179,"split_key":37963,"timestamp":"2026-04-08T16:00:00.000Z"} +{"doc_count":1176,"split_key":50360,"timestamp":"2026-04-08T16:00:00.000Z"} +{"doc_count":5249,"split_key":211590,"timestamp":"2026-04-08T17:00:00.000Z"} +{"doc_count":1257,"split_key":16509,"timestamp":"2026-04-08T17:00:00.000Z"} +{"doc_count":1146,"split_key":50360,"timestamp":"2026-04-08T17:00:00.000Z"} +{"doc_count":839,"split_key":45102,"timestamp":"2026-04-08T17:00:00.000Z"} +{"doc_count":586,"split_key":9299,"timestamp":"2026-04-08T17:00:00.000Z"} +{"doc_count":6728,"split_key":211590,"timestamp":"2026-04-08T18:00:00.000Z"} +{"doc_count":1515,"split_key":45102,"timestamp":"2026-04-08T18:00:00.000Z"} +{"doc_count":1170,"split_key":50360,"timestamp":"2026-04-08T18:00:00.000Z"} +{"doc_count":822,"split_key":16509,"timestamp":"2026-04-08T18:00:00.000Z"} +{"doc_count":615,"split_key":9299,"timestamp":"2026-04-08T18:00:00.000Z"} +{"doc_count":3067,"split_key":211590,"timestamp":"2026-04-08T19:00:00.000Z"} +{"doc_count":1535,"split_key":45102,"timestamp":"2026-04-08T19:00:00.000Z"} +{"doc_count":1176,"split_key":50360,"timestamp":"2026-04-08T19:00:00.000Z"} +{"doc_count":600,"split_key":51396,"timestamp":"2026-04-08T19:00:00.000Z"} +{"doc_count":542,"split_key":9299,"timestamp":"2026-04-08T19:00:00.000Z"} +{"doc_count":14592,"split_key":211590,"timestamp":"2026-04-08T20:00:00.000Z"} +{"doc_count":909,"split_key":16509,"timestamp":"2026-04-08T20:00:00.000Z"} +{"doc_count":825,"split_key":45102,"timestamp":"2026-04-08T20:00:00.000Z"} +{"doc_count":761,"split_key":50360,"timestamp":"2026-04-08T20:00:00.000Z"} +{"doc_count":595,"split_key":9299,"timestamp":"2026-04-08T20:00:00.000Z"} +{"doc_count":4191,"split_key":211590,"timestamp":"2026-04-08T21:00:00.000Z"} +{"doc_count":1018,"split_key":16509,"timestamp":"2026-04-08T21:00:00.000Z"} +{"doc_count":795,"split_key":396982,"timestamp":"2026-04-08T21:00:00.000Z"} +{"doc_count":629,"split_key":9299,"timestamp":"2026-04-08T21:00:00.000Z"} +{"doc_count":391,"split_key":201814,"timestamp":"2026-04-08T21:00:00.000Z"} +{"doc_count":4817,"split_key":211590,"timestamp":"2026-04-08T22:00:00.000Z"} +{"doc_count":1104,"split_key":14061,"timestamp":"2026-04-08T22:00:00.000Z"} +{"doc_count":1016,"split_key":396982,"timestamp":"2026-04-08T22:00:00.000Z"} +{"doc_count":670,"split_key":9299,"timestamp":"2026-04-08T22:00:00.000Z"} +{"doc_count":626,"split_key":199829,"timestamp":"2026-04-08T22:00:00.000Z"} +{"doc_count":17255,"split_key":209334,"timestamp":"2026-04-08T23:00:00.000Z"} +{"doc_count":4745,"split_key":211590,"timestamp":"2026-04-08T23:00:00.000Z"} +{"doc_count":1458,"split_key":199829,"timestamp":"2026-04-08T23:00:00.000Z"} +{"doc_count":1019,"split_key":396982,"timestamp":"2026-04-08T23:00:00.000Z"} +{"doc_count":924,"split_key":16509,"timestamp":"2026-04-08T23:00:00.000Z"} +{"doc_count":23722,"split_key":209334,"timestamp":"2026-04-09T00:00:00.000Z"} +{"doc_count":5758,"split_key":211590,"timestamp":"2026-04-09T00:00:00.000Z"} +{"doc_count":1544,"split_key":396982,"timestamp":"2026-04-09T00:00:00.000Z"} +{"doc_count":898,"split_key":16509,"timestamp":"2026-04-09T00:00:00.000Z"} +{"doc_count":600,"split_key":9299,"timestamp":"2026-04-09T00:00:00.000Z"} +{"doc_count":26001,"split_key":209334,"timestamp":"2026-04-09T01:00:00.000Z"} +{"doc_count":2758,"split_key":211590,"timestamp":"2026-04-09T01:00:00.000Z"} +{"doc_count":1188,"split_key":396982,"timestamp":"2026-04-09T01:00:00.000Z"} +{"doc_count":580,"split_key":45102,"timestamp":"2026-04-09T01:00:00.000Z"} +{"doc_count":539,"split_key":9299,"timestamp":"2026-04-09T01:00:00.000Z"} +{"doc_count":33993,"split_key":209334,"timestamp":"2026-04-09T02:00:00.000Z"} +{"doc_count":9003,"split_key":211590,"timestamp":"2026-04-09T02:00:00.000Z"} +{"doc_count":1760,"split_key":37963,"timestamp":"2026-04-09T02:00:00.000Z"} +{"doc_count":1481,"split_key":396982,"timestamp":"2026-04-09T02:00:00.000Z"} +{"doc_count":1177,"split_key":45102,"timestamp":"2026-04-09T02:00:00.000Z"} +{"doc_count":23218,"split_key":209334,"timestamp":"2026-04-09T03:00:00.000Z"} +{"doc_count":4535,"split_key":211590,"timestamp":"2026-04-09T03:00:00.000Z"} +{"doc_count":1876,"split_key":199829,"timestamp":"2026-04-09T03:00:00.000Z"} +{"doc_count":1759,"split_key":37963,"timestamp":"2026-04-09T03:00:00.000Z"} +{"doc_count":1197,"split_key":45102,"timestamp":"2026-04-09T03:00:00.000Z"} +{"doc_count":7022,"split_key":209334,"timestamp":"2026-04-09T04:00:00.000Z"} +{"doc_count":3894,"split_key":211590,"timestamp":"2026-04-09T04:00:00.000Z"} +{"doc_count":3765,"split_key":206264,"timestamp":"2026-04-09T04:00:00.000Z"} +{"doc_count":1383,"split_key":37963,"timestamp":"2026-04-09T04:00:00.000Z"} +{"doc_count":1256,"split_key":45102,"timestamp":"2026-04-09T04:00:00.000Z"} +{"doc_count":12752,"split_key":211590,"timestamp":"2026-04-09T05:00:00.000Z"} +{"doc_count":5409,"split_key":209334,"timestamp":"2026-04-09T05:00:00.000Z"} +{"doc_count":1340,"split_key":45102,"timestamp":"2026-04-09T05:00:00.000Z"} +{"doc_count":917,"split_key":396982,"timestamp":"2026-04-09T05:00:00.000Z"} +{"doc_count":806,"split_key":16509,"timestamp":"2026-04-09T05:00:00.000Z"} +{"doc_count":6160,"split_key":211590,"timestamp":"2026-04-09T06:00:00.000Z"} +{"doc_count":2615,"split_key":209334,"timestamp":"2026-04-09T06:00:00.000Z"} +{"doc_count":2286,"split_key":45102,"timestamp":"2026-04-09T06:00:00.000Z"} +{"doc_count":1084,"split_key":396982,"timestamp":"2026-04-09T06:00:00.000Z"} +{"doc_count":864,"split_key":16509,"timestamp":"2026-04-09T06:00:00.000Z"} +{"doc_count":9201,"split_key":211590,"timestamp":"2026-04-09T07:00:00.000Z"} +{"doc_count":1302,"split_key":45102,"timestamp":"2026-04-09T07:00:00.000Z"} +{"doc_count":847,"split_key":16509,"timestamp":"2026-04-09T07:00:00.000Z"} +{"doc_count":782,"split_key":396982,"timestamp":"2026-04-09T07:00:00.000Z"} +{"doc_count":713,"split_key":24323,"timestamp":"2026-04-09T07:00:00.000Z"} +{"doc_count":7420,"split_key":211590,"timestamp":"2026-04-09T08:00:00.000Z"} +{"doc_count":1528,"split_key":45102,"timestamp":"2026-04-09T08:00:00.000Z"} +{"doc_count":949,"split_key":16509,"timestamp":"2026-04-09T08:00:00.000Z"} +{"doc_count":710,"split_key":24323,"timestamp":"2026-04-09T08:00:00.000Z"} +{"doc_count":499,"split_key":9299,"timestamp":"2026-04-09T08:00:00.000Z"} +{"doc_count":14184,"split_key":14061,"timestamp":"2026-04-09T09:00:00.000Z"} +{"doc_count":2468,"split_key":211590,"timestamp":"2026-04-09T09:00:00.000Z"} +{"doc_count":1417,"split_key":209334,"timestamp":"2026-04-09T09:00:00.000Z"} +{"doc_count":1345,"split_key":132839,"timestamp":"2026-04-09T09:00:00.000Z"} +{"doc_count":1321,"split_key":45102,"timestamp":"2026-04-09T09:00:00.000Z"} +{"doc_count":1994,"split_key":63949,"timestamp":"2026-04-09T10:00:00.000Z"} +{"doc_count":1390,"split_key":211590,"timestamp":"2026-04-09T10:00:00.000Z"} +{"doc_count":1304,"split_key":132839,"timestamp":"2026-04-09T10:00:00.000Z"} +{"doc_count":1291,"split_key":45102,"timestamp":"2026-04-09T10:00:00.000Z"} +{"doc_count":718,"split_key":24323,"timestamp":"2026-04-09T10:00:00.000Z"} +{"doc_count":65899,"split_key":201814,"timestamp":"2026-04-09T11:00:00.000Z"} +{"doc_count":1159,"split_key":45102,"timestamp":"2026-04-09T11:00:00.000Z"} +{"doc_count":1156,"split_key":211590,"timestamp":"2026-04-09T11:00:00.000Z"} +{"doc_count":828,"split_key":16509,"timestamp":"2026-04-09T11:00:00.000Z"} +{"doc_count":786,"split_key":132839,"timestamp":"2026-04-09T11:00:00.000Z"} +{"doc_count":8501,"split_key":212193,"timestamp":"2026-04-09T12:00:00.000Z"} +{"doc_count":2695,"split_key":211590,"timestamp":"2026-04-09T12:00:00.000Z"} +{"doc_count":2337,"split_key":132839,"timestamp":"2026-04-09T12:00:00.000Z"} +{"doc_count":1231,"split_key":45102,"timestamp":"2026-04-09T12:00:00.000Z"} +{"doc_count":709,"split_key":24323,"timestamp":"2026-04-09T12:00:00.000Z"} +{"doc_count":9938,"split_key":212193,"timestamp":"2026-04-09T13:00:00.000Z"} +{"doc_count":4616,"split_key":211590,"timestamp":"2026-04-09T13:00:00.000Z"} +{"doc_count":2314,"split_key":132839,"timestamp":"2026-04-09T13:00:00.000Z"} +{"doc_count":1154,"split_key":45102,"timestamp":"2026-04-09T13:00:00.000Z"} +{"doc_count":721,"split_key":16509,"timestamp":"2026-04-09T13:00:00.000Z"} +{"doc_count":10156,"split_key":212193,"timestamp":"2026-04-09T14:00:00.000Z"} +{"doc_count":2307,"split_key":132839,"timestamp":"2026-04-09T14:00:00.000Z"} +{"doc_count":1390,"split_key":211590,"timestamp":"2026-04-09T14:00:00.000Z"} +{"doc_count":1213,"split_key":45102,"timestamp":"2026-04-09T14:00:00.000Z"} +{"doc_count":732,"split_key":24323,"timestamp":"2026-04-09T14:00:00.000Z"} +{"doc_count":10166,"split_key":212193,"timestamp":"2026-04-09T15:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-04-09T15:00:00.000Z"} +{"doc_count":2313,"split_key":132839,"timestamp":"2026-04-09T15:00:00.000Z"} +{"doc_count":1472,"split_key":45102,"timestamp":"2026-04-09T15:00:00.000Z"} +{"doc_count":841,"split_key":16509,"timestamp":"2026-04-09T15:00:00.000Z"} +{"doc_count":11191,"split_key":203771,"timestamp":"2026-04-09T16:00:00.000Z"} +{"doc_count":6862,"split_key":211590,"timestamp":"2026-04-09T16:00:00.000Z"} +{"doc_count":2308,"split_key":132839,"timestamp":"2026-04-09T16:00:00.000Z"} +{"doc_count":1842,"split_key":45102,"timestamp":"2026-04-09T16:00:00.000Z"} +{"doc_count":819,"split_key":16509,"timestamp":"2026-04-09T16:00:00.000Z"} +{"doc_count":12896,"split_key":203771,"timestamp":"2026-04-09T17:00:00.000Z"} +{"doc_count":2293,"split_key":132839,"timestamp":"2026-04-09T17:00:00.000Z"} +{"doc_count":1822,"split_key":45102,"timestamp":"2026-04-09T17:00:00.000Z"} +{"doc_count":1076,"split_key":16509,"timestamp":"2026-04-09T17:00:00.000Z"} +{"doc_count":572,"split_key":396982,"timestamp":"2026-04-09T17:00:00.000Z"} +{"doc_count":8283,"split_key":203979,"timestamp":"2026-04-09T18:00:00.000Z"} +{"doc_count":2239,"split_key":211590,"timestamp":"2026-04-09T18:00:00.000Z"} +{"doc_count":1819,"split_key":45102,"timestamp":"2026-04-09T18:00:00.000Z"} +{"doc_count":1741,"split_key":211496,"timestamp":"2026-04-09T18:00:00.000Z"} +{"doc_count":884,"split_key":203771,"timestamp":"2026-04-09T18:00:00.000Z"} +{"doc_count":12482,"split_key":211496,"timestamp":"2026-04-09T19:00:00.000Z"} +{"doc_count":8907,"split_key":211590,"timestamp":"2026-04-09T19:00:00.000Z"} +{"doc_count":1870,"split_key":45102,"timestamp":"2026-04-09T19:00:00.000Z"} +{"doc_count":1557,"split_key":37963,"timestamp":"2026-04-09T19:00:00.000Z"} +{"doc_count":614,"split_key":16509,"timestamp":"2026-04-09T19:00:00.000Z"} +{"doc_count":4687,"split_key":45899,"timestamp":"2026-04-09T20:00:00.000Z"} +{"doc_count":4340,"split_key":203771,"timestamp":"2026-04-09T20:00:00.000Z"} +{"doc_count":4309,"split_key":211496,"timestamp":"2026-04-09T20:00:00.000Z"} +{"doc_count":2434,"split_key":45102,"timestamp":"2026-04-09T20:00:00.000Z"} +{"doc_count":847,"split_key":209334,"timestamp":"2026-04-09T20:00:00.000Z"} +{"doc_count":9367,"split_key":203771,"timestamp":"2026-04-09T21:00:00.000Z"} +{"doc_count":2861,"split_key":45102,"timestamp":"2026-04-09T21:00:00.000Z"} +{"doc_count":2474,"split_key":209604,"timestamp":"2026-04-09T21:00:00.000Z"} +{"doc_count":707,"split_key":16509,"timestamp":"2026-04-09T21:00:00.000Z"} +{"doc_count":608,"split_key":396982,"timestamp":"2026-04-09T21:00:00.000Z"} +{"doc_count":8029,"split_key":209604,"timestamp":"2026-04-09T22:00:00.000Z"} +{"doc_count":4038,"split_key":211590,"timestamp":"2026-04-09T22:00:00.000Z"} +{"doc_count":3899,"split_key":201178,"timestamp":"2026-04-09T22:00:00.000Z"} +{"doc_count":3125,"split_key":14061,"timestamp":"2026-04-09T22:00:00.000Z"} +{"doc_count":2994,"split_key":45102,"timestamp":"2026-04-09T22:00:00.000Z"} +{"doc_count":33918,"split_key":209334,"timestamp":"2026-04-09T23:00:00.000Z"} +{"doc_count":13383,"split_key":211590,"timestamp":"2026-04-09T23:00:00.000Z"} +{"doc_count":11894,"split_key":203771,"timestamp":"2026-04-09T23:00:00.000Z"} +{"doc_count":7373,"split_key":14061,"timestamp":"2026-04-09T23:00:00.000Z"} +{"doc_count":2066,"split_key":45102,"timestamp":"2026-04-09T23:00:00.000Z"} +{"doc_count":38003,"split_key":209334,"timestamp":"2026-04-10T00:00:00.000Z"} +{"doc_count":12223,"split_key":203771,"timestamp":"2026-04-10T00:00:00.000Z"} +{"doc_count":6151,"split_key":211590,"timestamp":"2026-04-10T00:00:00.000Z"} +{"doc_count":2037,"split_key":14061,"timestamp":"2026-04-10T00:00:00.000Z"} +{"doc_count":2032,"split_key":45102,"timestamp":"2026-04-10T00:00:00.000Z"} +{"doc_count":27578,"split_key":209334,"timestamp":"2026-04-10T01:00:00.000Z"} +{"doc_count":10286,"split_key":203771,"timestamp":"2026-04-10T01:00:00.000Z"} +{"doc_count":4200,"split_key":211590,"timestamp":"2026-04-10T01:00:00.000Z"} +{"doc_count":2147,"split_key":205733,"timestamp":"2026-04-10T01:00:00.000Z"} +{"doc_count":1293,"split_key":201401,"timestamp":"2026-04-10T01:00:00.000Z"} +{"doc_count":23072,"split_key":209334,"timestamp":"2026-04-10T02:00:00.000Z"} +{"doc_count":19167,"split_key":14061,"timestamp":"2026-04-10T02:00:00.000Z"} +{"doc_count":12983,"split_key":203771,"timestamp":"2026-04-10T02:00:00.000Z"} +{"doc_count":6764,"split_key":211590,"timestamp":"2026-04-10T02:00:00.000Z"} +{"doc_count":792,"split_key":201401,"timestamp":"2026-04-10T02:00:00.000Z"} +{"doc_count":12966,"split_key":203771,"timestamp":"2026-04-10T03:00:00.000Z"} +{"doc_count":5152,"split_key":209334,"timestamp":"2026-04-10T03:00:00.000Z"} +{"doc_count":5128,"split_key":211590,"timestamp":"2026-04-10T03:00:00.000Z"} +{"doc_count":1488,"split_key":47890,"timestamp":"2026-04-10T03:00:00.000Z"} +{"doc_count":795,"split_key":16509,"timestamp":"2026-04-10T03:00:00.000Z"} +{"doc_count":5752,"split_key":209334,"timestamp":"2026-04-10T04:00:00.000Z"} +{"doc_count":3508,"split_key":203771,"timestamp":"2026-04-10T04:00:00.000Z"} +{"doc_count":2985,"split_key":37963,"timestamp":"2026-04-10T04:00:00.000Z"} +{"doc_count":1708,"split_key":47890,"timestamp":"2026-04-10T04:00:00.000Z"} +{"doc_count":1030,"split_key":211590,"timestamp":"2026-04-10T04:00:00.000Z"} +{"doc_count":5059,"split_key":209334,"timestamp":"2026-04-10T05:00:00.000Z"} +{"doc_count":1709,"split_key":47890,"timestamp":"2026-04-10T05:00:00.000Z"} +{"doc_count":695,"split_key":396982,"timestamp":"2026-04-10T05:00:00.000Z"} +{"doc_count":535,"split_key":149419,"timestamp":"2026-04-10T05:00:00.000Z"} +{"doc_count":388,"split_key":51396,"timestamp":"2026-04-10T05:00:00.000Z"} +{"doc_count":2520,"split_key":209334,"timestamp":"2026-04-10T06:00:00.000Z"} +{"doc_count":1616,"split_key":47890,"timestamp":"2026-04-10T06:00:00.000Z"} +{"doc_count":505,"split_key":149419,"timestamp":"2026-04-10T06:00:00.000Z"} +{"doc_count":483,"split_key":396982,"timestamp":"2026-04-10T06:00:00.000Z"} +{"doc_count":473,"split_key":24940,"timestamp":"2026-04-10T06:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-04-10T07:00:00.000Z"} +{"doc_count":1665,"split_key":47890,"timestamp":"2026-04-10T07:00:00.000Z"} +{"doc_count":546,"split_key":209334,"timestamp":"2026-04-10T07:00:00.000Z"} +{"doc_count":495,"split_key":149419,"timestamp":"2026-04-10T07:00:00.000Z"} +{"doc_count":490,"split_key":396982,"timestamp":"2026-04-10T07:00:00.000Z"} +{"doc_count":5636,"split_key":211590,"timestamp":"2026-04-10T08:00:00.000Z"} +{"doc_count":1626,"split_key":47890,"timestamp":"2026-04-10T08:00:00.000Z"} +{"doc_count":583,"split_key":16509,"timestamp":"2026-04-10T08:00:00.000Z"} +{"doc_count":540,"split_key":396982,"timestamp":"2026-04-10T08:00:00.000Z"} +{"doc_count":464,"split_key":149419,"timestamp":"2026-04-10T08:00:00.000Z"} +{"doc_count":7079,"split_key":211590,"timestamp":"2026-04-10T09:00:00.000Z"} +{"doc_count":2268,"split_key":209334,"timestamp":"2026-04-10T09:00:00.000Z"} +{"doc_count":1715,"split_key":47890,"timestamp":"2026-04-10T09:00:00.000Z"} +{"doc_count":511,"split_key":396982,"timestamp":"2026-04-10T09:00:00.000Z"} +{"doc_count":495,"split_key":16509,"timestamp":"2026-04-10T09:00:00.000Z"} +{"doc_count":27091,"split_key":209334,"timestamp":"2026-04-10T10:00:00.000Z"} +{"doc_count":3191,"split_key":211590,"timestamp":"2026-04-10T10:00:00.000Z"} +{"doc_count":1607,"split_key":47890,"timestamp":"2026-04-10T10:00:00.000Z"} +{"doc_count":887,"split_key":201401,"timestamp":"2026-04-10T10:00:00.000Z"} +{"doc_count":544,"split_key":16509,"timestamp":"2026-04-10T10:00:00.000Z"} +{"doc_count":22630,"split_key":209334,"timestamp":"2026-04-10T11:00:00.000Z"} +{"doc_count":3343,"split_key":14061,"timestamp":"2026-04-10T11:00:00.000Z"} +{"doc_count":1618,"split_key":47890,"timestamp":"2026-04-10T11:00:00.000Z"} +{"doc_count":1190,"split_key":37963,"timestamp":"2026-04-10T11:00:00.000Z"} +{"doc_count":903,"split_key":201401,"timestamp":"2026-04-10T11:00:00.000Z"} +{"doc_count":19981,"split_key":209334,"timestamp":"2026-04-10T12:00:00.000Z"} +{"doc_count":4029,"split_key":14061,"timestamp":"2026-04-10T12:00:00.000Z"} +{"doc_count":3278,"split_key":211590,"timestamp":"2026-04-10T12:00:00.000Z"} +{"doc_count":1694,"split_key":47890,"timestamp":"2026-04-10T12:00:00.000Z"} +{"doc_count":715,"split_key":201401,"timestamp":"2026-04-10T12:00:00.000Z"} +{"doc_count":18088,"split_key":209334,"timestamp":"2026-04-10T13:00:00.000Z"} +{"doc_count":7029,"split_key":211590,"timestamp":"2026-04-10T13:00:00.000Z"} +{"doc_count":1303,"split_key":47890,"timestamp":"2026-04-10T13:00:00.000Z"} +{"doc_count":676,"split_key":201401,"timestamp":"2026-04-10T13:00:00.000Z"} +{"doc_count":496,"split_key":16509,"timestamp":"2026-04-10T13:00:00.000Z"} +{"doc_count":27348,"split_key":209334,"timestamp":"2026-04-10T14:00:00.000Z"} +{"doc_count":12731,"split_key":211590,"timestamp":"2026-04-10T14:00:00.000Z"} +{"doc_count":1879,"split_key":209604,"timestamp":"2026-04-10T14:00:00.000Z"} +{"doc_count":1429,"split_key":45102,"timestamp":"2026-04-10T14:00:00.000Z"} +{"doc_count":838,"split_key":201401,"timestamp":"2026-04-10T14:00:00.000Z"} +{"doc_count":17747,"split_key":209604,"timestamp":"2026-04-10T15:00:00.000Z"} +{"doc_count":16982,"split_key":209334,"timestamp":"2026-04-10T15:00:00.000Z"} +{"doc_count":6562,"split_key":45102,"timestamp":"2026-04-10T15:00:00.000Z"} +{"doc_count":5872,"split_key":211590,"timestamp":"2026-04-10T15:00:00.000Z"} +{"doc_count":625,"split_key":201401,"timestamp":"2026-04-10T15:00:00.000Z"} +{"doc_count":18052,"split_key":209604,"timestamp":"2026-04-10T16:00:00.000Z"} +{"doc_count":3064,"split_key":211590,"timestamp":"2026-04-10T16:00:00.000Z"} +{"doc_count":652,"split_key":45102,"timestamp":"2026-04-10T16:00:00.000Z"} +{"doc_count":427,"split_key":16509,"timestamp":"2026-04-10T16:00:00.000Z"} +{"doc_count":376,"split_key":24940,"timestamp":"2026-04-10T16:00:00.000Z"} +{"doc_count":15575,"split_key":212193,"timestamp":"2026-04-10T17:00:00.000Z"} +{"doc_count":5998,"split_key":211590,"timestamp":"2026-04-10T17:00:00.000Z"} +{"doc_count":1010,"split_key":37963,"timestamp":"2026-04-10T17:00:00.000Z"} +{"doc_count":386,"split_key":24940,"timestamp":"2026-04-10T17:00:00.000Z"} +{"doc_count":382,"split_key":16509,"timestamp":"2026-04-10T17:00:00.000Z"} +{"doc_count":14277,"split_key":212193,"timestamp":"2026-04-10T18:00:00.000Z"} +{"doc_count":6295,"split_key":211590,"timestamp":"2026-04-10T18:00:00.000Z"} +{"doc_count":891,"split_key":23470,"timestamp":"2026-04-10T18:00:00.000Z"} +{"doc_count":568,"split_key":141995,"timestamp":"2026-04-10T18:00:00.000Z"} +{"doc_count":513,"split_key":16509,"timestamp":"2026-04-10T18:00:00.000Z"} +{"doc_count":5852,"split_key":203771,"timestamp":"2026-04-10T19:00:00.000Z"} +{"doc_count":4810,"split_key":211590,"timestamp":"2026-04-10T19:00:00.000Z"} +{"doc_count":3392,"split_key":212193,"timestamp":"2026-04-10T19:00:00.000Z"} +{"doc_count":1821,"split_key":23470,"timestamp":"2026-04-10T19:00:00.000Z"} +{"doc_count":1238,"split_key":209275,"timestamp":"2026-04-10T19:00:00.000Z"} +{"doc_count":16503,"split_key":203771,"timestamp":"2026-04-10T20:00:00.000Z"} +{"doc_count":9249,"split_key":211590,"timestamp":"2026-04-10T20:00:00.000Z"} +{"doc_count":529,"split_key":396982,"timestamp":"2026-04-10T20:00:00.000Z"} +{"doc_count":357,"split_key":201814,"timestamp":"2026-04-10T20:00:00.000Z"} +{"doc_count":355,"split_key":48090,"timestamp":"2026-04-10T20:00:00.000Z"} +{"doc_count":17991,"split_key":203771,"timestamp":"2026-04-10T21:00:00.000Z"} +{"doc_count":4447,"split_key":211590,"timestamp":"2026-04-10T21:00:00.000Z"} +{"doc_count":532,"split_key":396982,"timestamp":"2026-04-10T21:00:00.000Z"} +{"doc_count":506,"split_key":141995,"timestamp":"2026-04-10T21:00:00.000Z"} +{"doc_count":478,"split_key":23470,"timestamp":"2026-04-10T21:00:00.000Z"} +{"doc_count":17850,"split_key":203771,"timestamp":"2026-04-10T22:00:00.000Z"} +{"doc_count":3233,"split_key":211590,"timestamp":"2026-04-10T22:00:00.000Z"} +{"doc_count":515,"split_key":396982,"timestamp":"2026-04-10T22:00:00.000Z"} +{"doc_count":346,"split_key":201814,"timestamp":"2026-04-10T22:00:00.000Z"} +{"doc_count":328,"split_key":135377,"timestamp":"2026-04-10T22:00:00.000Z"} +{"doc_count":7925,"split_key":203771,"timestamp":"2026-04-10T23:00:00.000Z"} +{"doc_count":5998,"split_key":211590,"timestamp":"2026-04-10T23:00:00.000Z"} +{"doc_count":576,"split_key":37963,"timestamp":"2026-04-10T23:00:00.000Z"} +{"doc_count":501,"split_key":396982,"timestamp":"2026-04-10T23:00:00.000Z"} +{"doc_count":485,"split_key":45102,"timestamp":"2026-04-10T23:00:00.000Z"} +{"doc_count":13037,"split_key":203771,"timestamp":"2026-04-11T00:00:00.000Z"} +{"doc_count":5999,"split_key":211590,"timestamp":"2026-04-11T00:00:00.000Z"} +{"doc_count":1163,"split_key":37963,"timestamp":"2026-04-11T00:00:00.000Z"} +{"doc_count":547,"split_key":396982,"timestamp":"2026-04-11T00:00:00.000Z"} +{"doc_count":418,"split_key":45102,"timestamp":"2026-04-11T00:00:00.000Z"} +{"doc_count":17758,"split_key":203771,"timestamp":"2026-04-11T01:00:00.000Z"} +{"doc_count":9179,"split_key":211590,"timestamp":"2026-04-11T01:00:00.000Z"} +{"doc_count":1099,"split_key":37963,"timestamp":"2026-04-11T01:00:00.000Z"} +{"doc_count":876,"split_key":45102,"timestamp":"2026-04-11T01:00:00.000Z"} +{"doc_count":513,"split_key":49870,"timestamp":"2026-04-11T01:00:00.000Z"} +{"doc_count":17963,"split_key":203771,"timestamp":"2026-04-11T02:00:00.000Z"} +{"doc_count":6063,"split_key":211590,"timestamp":"2026-04-11T02:00:00.000Z"} +{"doc_count":520,"split_key":396982,"timestamp":"2026-04-11T02:00:00.000Z"} +{"doc_count":482,"split_key":16509,"timestamp":"2026-04-11T02:00:00.000Z"} +{"doc_count":423,"split_key":149419,"timestamp":"2026-04-11T02:00:00.000Z"} +{"doc_count":14492,"split_key":203771,"timestamp":"2026-04-11T03:00:00.000Z"} +{"doc_count":6044,"split_key":211590,"timestamp":"2026-04-11T03:00:00.000Z"} +{"doc_count":717,"split_key":16509,"timestamp":"2026-04-11T03:00:00.000Z"} +{"doc_count":488,"split_key":149419,"timestamp":"2026-04-11T03:00:00.000Z"} +{"doc_count":470,"split_key":396982,"timestamp":"2026-04-11T03:00:00.000Z"} +{"doc_count":5998,"split_key":211590,"timestamp":"2026-04-11T04:00:00.000Z"} +{"doc_count":639,"split_key":51396,"timestamp":"2026-04-11T04:00:00.000Z"} +{"doc_count":527,"split_key":149419,"timestamp":"2026-04-11T04:00:00.000Z"} +{"doc_count":518,"split_key":16509,"timestamp":"2026-04-11T04:00:00.000Z"} +{"doc_count":501,"split_key":396982,"timestamp":"2026-04-11T04:00:00.000Z"} +{"doc_count":5998,"split_key":211590,"timestamp":"2026-04-11T05:00:00.000Z"} +{"doc_count":806,"split_key":26042,"timestamp":"2026-04-11T05:00:00.000Z"} +{"doc_count":556,"split_key":45102,"timestamp":"2026-04-11T05:00:00.000Z"} +{"doc_count":556,"split_key":149419,"timestamp":"2026-04-11T05:00:00.000Z"} +{"doc_count":508,"split_key":49870,"timestamp":"2026-04-11T05:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-04-11T06:00:00.000Z"} +{"doc_count":1123,"split_key":26042,"timestamp":"2026-04-11T06:00:00.000Z"} +{"doc_count":566,"split_key":149419,"timestamp":"2026-04-11T06:00:00.000Z"} +{"doc_count":539,"split_key":396982,"timestamp":"2026-04-11T06:00:00.000Z"} +{"doc_count":529,"split_key":16509,"timestamp":"2026-04-11T06:00:00.000Z"} +{"doc_count":3317,"split_key":211590,"timestamp":"2026-04-11T07:00:00.000Z"} +{"doc_count":1131,"split_key":26042,"timestamp":"2026-04-11T07:00:00.000Z"} +{"doc_count":537,"split_key":149419,"timestamp":"2026-04-11T07:00:00.000Z"} +{"doc_count":477,"split_key":8075,"timestamp":"2026-04-11T07:00:00.000Z"} +{"doc_count":431,"split_key":16509,"timestamp":"2026-04-11T07:00:00.000Z"} +{"doc_count":5999,"split_key":211590,"timestamp":"2026-04-11T08:00:00.000Z"} +{"doc_count":1131,"split_key":26042,"timestamp":"2026-04-11T08:00:00.000Z"} +{"doc_count":518,"split_key":149419,"timestamp":"2026-04-11T08:00:00.000Z"} +{"doc_count":503,"split_key":8075,"timestamp":"2026-04-11T08:00:00.000Z"} +{"doc_count":459,"split_key":45102,"timestamp":"2026-04-11T08:00:00.000Z"} +{"doc_count":11793,"split_key":209334,"timestamp":"2026-04-11T09:00:00.000Z"} +{"doc_count":3156,"split_key":211590,"timestamp":"2026-04-11T09:00:00.000Z"} +{"doc_count":1140,"split_key":26042,"timestamp":"2026-04-11T09:00:00.000Z"} +{"doc_count":549,"split_key":16509,"timestamp":"2026-04-11T09:00:00.000Z"} +{"doc_count":539,"split_key":149419,"timestamp":"2026-04-11T09:00:00.000Z"} +{"doc_count":23803,"split_key":209334,"timestamp":"2026-04-11T10:00:00.000Z"} +{"doc_count":2277,"split_key":211590,"timestamp":"2026-04-11T10:00:00.000Z"} +{"doc_count":1125,"split_key":26042,"timestamp":"2026-04-11T10:00:00.000Z"} +{"doc_count":925,"split_key":201401,"timestamp":"2026-04-11T10:00:00.000Z"} +{"doc_count":537,"split_key":149419,"timestamp":"2026-04-11T10:00:00.000Z"} +{"doc_count":21715,"split_key":209334,"timestamp":"2026-04-11T11:00:00.000Z"} +{"doc_count":8910,"split_key":211590,"timestamp":"2026-04-11T11:00:00.000Z"} +{"doc_count":1136,"split_key":26042,"timestamp":"2026-04-11T11:00:00.000Z"} +{"doc_count":981,"split_key":14061,"timestamp":"2026-04-11T11:00:00.000Z"} +{"doc_count":639,"split_key":201401,"timestamp":"2026-04-11T11:00:00.000Z"} +{"doc_count":23113,"split_key":209334,"timestamp":"2026-04-11T12:00:00.000Z"} +{"doc_count":11662,"split_key":211590,"timestamp":"2026-04-11T12:00:00.000Z"} +{"doc_count":1138,"split_key":26042,"timestamp":"2026-04-11T12:00:00.000Z"} +{"doc_count":669,"split_key":201401,"timestamp":"2026-04-11T12:00:00.000Z"} +{"doc_count":620,"split_key":149419,"timestamp":"2026-04-11T12:00:00.000Z"} +{"doc_count":28561,"split_key":209334,"timestamp":"2026-04-11T13:00:00.000Z"} +{"doc_count":13474,"split_key":209604,"timestamp":"2026-04-11T13:00:00.000Z"} +{"doc_count":12598,"split_key":211590,"timestamp":"2026-04-11T13:00:00.000Z"} +{"doc_count":1120,"split_key":26042,"timestamp":"2026-04-11T13:00:00.000Z"} +{"doc_count":806,"split_key":201401,"timestamp":"2026-04-11T13:00:00.000Z"} +{"doc_count":23504,"split_key":209334,"timestamp":"2026-04-11T14:00:00.000Z"} +{"doc_count":17896,"split_key":211590,"timestamp":"2026-04-11T14:00:00.000Z"} +{"doc_count":17288,"split_key":209604,"timestamp":"2026-04-11T14:00:00.000Z"} +{"doc_count":1123,"split_key":26042,"timestamp":"2026-04-11T14:00:00.000Z"} +{"doc_count":830,"split_key":201401,"timestamp":"2026-04-11T14:00:00.000Z"} +{"doc_count":10708,"split_key":211590,"timestamp":"2026-04-11T15:00:00.000Z"} +{"doc_count":4579,"split_key":205463,"timestamp":"2026-04-11T15:00:00.000Z"} +{"doc_count":1137,"split_key":26042,"timestamp":"2026-04-11T15:00:00.000Z"} +{"doc_count":611,"split_key":149419,"timestamp":"2026-04-11T15:00:00.000Z"} +{"doc_count":508,"split_key":49870,"timestamp":"2026-04-11T15:00:00.000Z"} +{"doc_count":5942,"split_key":211590,"timestamp":"2026-04-11T16:00:00.000Z"} +{"doc_count":4387,"split_key":203771,"timestamp":"2026-04-11T16:00:00.000Z"} +{"doc_count":2365,"split_key":207483,"timestamp":"2026-04-11T16:00:00.000Z"} +{"doc_count":1138,"split_key":26042,"timestamp":"2026-04-11T16:00:00.000Z"} +{"doc_count":732,"split_key":45102,"timestamp":"2026-04-11T16:00:00.000Z"} +{"doc_count":3382,"split_key":211590,"timestamp":"2026-04-11T17:00:00.000Z"} +{"doc_count":1844,"split_key":203771,"timestamp":"2026-04-11T17:00:00.000Z"} +{"doc_count":1131,"split_key":26042,"timestamp":"2026-04-11T17:00:00.000Z"} +{"doc_count":599,"split_key":149419,"timestamp":"2026-04-11T17:00:00.000Z"} +{"doc_count":378,"split_key":201814,"timestamp":"2026-04-11T17:00:00.000Z"} +{"doc_count":14958,"split_key":211590,"timestamp":"2026-04-11T18:00:00.000Z"} +{"doc_count":1119,"split_key":26042,"timestamp":"2026-04-11T18:00:00.000Z"} +{"doc_count":810,"split_key":396982,"timestamp":"2026-04-11T18:00:00.000Z"} +{"doc_count":562,"split_key":149419,"timestamp":"2026-04-11T18:00:00.000Z"} +{"doc_count":556,"split_key":203771,"timestamp":"2026-04-11T18:00:00.000Z"} +{"doc_count":7370,"split_key":211590,"timestamp":"2026-04-11T19:00:00.000Z"} +{"doc_count":3038,"split_key":209605,"timestamp":"2026-04-11T19:00:00.000Z"} +{"doc_count":1608,"split_key":23470,"timestamp":"2026-04-11T19:00:00.000Z"} +{"doc_count":1030,"split_key":26042,"timestamp":"2026-04-11T19:00:00.000Z"} +{"doc_count":738,"split_key":203771,"timestamp":"2026-04-11T19:00:00.000Z"} +{"doc_count":4242,"split_key":211590,"timestamp":"2026-04-11T20:00:00.000Z"} +{"doc_count":1496,"split_key":203771,"timestamp":"2026-04-11T20:00:00.000Z"} +{"doc_count":986,"split_key":26042,"timestamp":"2026-04-11T20:00:00.000Z"} +{"doc_count":606,"split_key":149419,"timestamp":"2026-04-11T20:00:00.000Z"} +{"doc_count":588,"split_key":8075,"timestamp":"2026-04-11T20:00:00.000Z"} +{"doc_count":3298,"split_key":211590,"timestamp":"2026-04-11T21:00:00.000Z"} +{"doc_count":1032,"split_key":26042,"timestamp":"2026-04-11T21:00:00.000Z"} +{"doc_count":891,"split_key":203771,"timestamp":"2026-04-11T21:00:00.000Z"} +{"doc_count":665,"split_key":149419,"timestamp":"2026-04-11T21:00:00.000Z"} +{"doc_count":598,"split_key":8075,"timestamp":"2026-04-11T21:00:00.000Z"} +{"doc_count":6064,"split_key":211590,"timestamp":"2026-04-11T22:00:00.000Z"} +{"doc_count":1133,"split_key":26042,"timestamp":"2026-04-11T22:00:00.000Z"} +{"doc_count":919,"split_key":203771,"timestamp":"2026-04-11T22:00:00.000Z"} +{"doc_count":909,"split_key":23470,"timestamp":"2026-04-11T22:00:00.000Z"} +{"doc_count":785,"split_key":396982,"timestamp":"2026-04-11T22:00:00.000Z"} +{"doc_count":3147,"split_key":211590,"timestamp":"2026-04-11T23:00:00.000Z"} +{"doc_count":1048,"split_key":26042,"timestamp":"2026-04-11T23:00:00.000Z"} +{"doc_count":776,"split_key":203771,"timestamp":"2026-04-11T23:00:00.000Z"} +{"doc_count":648,"split_key":149419,"timestamp":"2026-04-11T23:00:00.000Z"} +{"doc_count":576,"split_key":8075,"timestamp":"2026-04-11T23:00:00.000Z"} +{"doc_count":9071,"split_key":211590,"timestamp":"2026-04-12T00:00:00.000Z"} +{"doc_count":1109,"split_key":26042,"timestamp":"2026-04-12T00:00:00.000Z"} +{"doc_count":818,"split_key":203771,"timestamp":"2026-04-12T00:00:00.000Z"} +{"doc_count":727,"split_key":396982,"timestamp":"2026-04-12T00:00:00.000Z"} +{"doc_count":605,"split_key":149419,"timestamp":"2026-04-12T00:00:00.000Z"} +{"doc_count":9000,"split_key":211590,"timestamp":"2026-04-12T01:00:00.000Z"} +{"doc_count":4687,"split_key":203771,"timestamp":"2026-04-12T01:00:00.000Z"} +{"doc_count":1068,"split_key":26042,"timestamp":"2026-04-12T01:00:00.000Z"} +{"doc_count":944,"split_key":396982,"timestamp":"2026-04-12T01:00:00.000Z"} +{"doc_count":784,"split_key":142430,"timestamp":"2026-04-12T01:00:00.000Z"} +{"doc_count":10044,"split_key":211590,"timestamp":"2026-04-12T02:00:00.000Z"} +{"doc_count":3445,"split_key":203771,"timestamp":"2026-04-12T02:00:00.000Z"} +{"doc_count":1088,"split_key":26042,"timestamp":"2026-04-12T02:00:00.000Z"} +{"doc_count":796,"split_key":396982,"timestamp":"2026-04-12T02:00:00.000Z"} +{"doc_count":592,"split_key":14061,"timestamp":"2026-04-12T02:00:00.000Z"} +{"doc_count":3063,"split_key":211590,"timestamp":"2026-04-12T03:00:00.000Z"} +{"doc_count":2317,"split_key":203771,"timestamp":"2026-04-12T03:00:00.000Z"} +{"doc_count":1140,"split_key":26042,"timestamp":"2026-04-12T03:00:00.000Z"} +{"doc_count":800,"split_key":396982,"timestamp":"2026-04-12T03:00:00.000Z"} +{"doc_count":518,"split_key":49870,"timestamp":"2026-04-12T03:00:00.000Z"} +{"doc_count":3882,"split_key":203771,"timestamp":"2026-04-12T04:00:00.000Z"} +{"doc_count":1134,"split_key":26042,"timestamp":"2026-04-12T04:00:00.000Z"} +{"doc_count":843,"split_key":396982,"timestamp":"2026-04-12T04:00:00.000Z"} +{"doc_count":592,"split_key":14061,"timestamp":"2026-04-12T04:00:00.000Z"} +{"doc_count":343,"split_key":16509,"timestamp":"2026-04-12T04:00:00.000Z"} +{"doc_count":9508,"split_key":211590,"timestamp":"2026-04-12T05:00:00.000Z"} +{"doc_count":4286,"split_key":203771,"timestamp":"2026-04-12T05:00:00.000Z"} +{"doc_count":1679,"split_key":23470,"timestamp":"2026-04-12T05:00:00.000Z"} +{"doc_count":999,"split_key":26042,"timestamp":"2026-04-12T05:00:00.000Z"} +{"doc_count":708,"split_key":396982,"timestamp":"2026-04-12T05:00:00.000Z"} +{"doc_count":1265,"split_key":203771,"timestamp":"2026-04-12T06:00:00.000Z"} +{"doc_count":1235,"split_key":37963,"timestamp":"2026-04-12T06:00:00.000Z"} +{"doc_count":909,"split_key":26042,"timestamp":"2026-04-12T06:00:00.000Z"} +{"doc_count":861,"split_key":211860,"timestamp":"2026-04-12T06:00:00.000Z"} +{"doc_count":609,"split_key":14061,"timestamp":"2026-04-12T06:00:00.000Z"} +{"doc_count":5999,"split_key":211590,"timestamp":"2026-04-12T07:00:00.000Z"} +{"doc_count":3941,"split_key":203771,"timestamp":"2026-04-12T07:00:00.000Z"} +{"doc_count":1487,"split_key":37963,"timestamp":"2026-04-12T07:00:00.000Z"} +{"doc_count":1125,"split_key":26042,"timestamp":"2026-04-12T07:00:00.000Z"} +{"doc_count":772,"split_key":16509,"timestamp":"2026-04-12T07:00:00.000Z"} +{"doc_count":11153,"split_key":211590,"timestamp":"2026-04-12T08:00:00.000Z"} +{"doc_count":3005,"split_key":203771,"timestamp":"2026-04-12T08:00:00.000Z"} +{"doc_count":1552,"split_key":37963,"timestamp":"2026-04-12T08:00:00.000Z"} +{"doc_count":1146,"split_key":26042,"timestamp":"2026-04-12T08:00:00.000Z"} +{"doc_count":369,"split_key":14061,"timestamp":"2026-04-12T08:00:00.000Z"} +{"doc_count":13095,"split_key":209334,"timestamp":"2026-04-12T09:00:00.000Z"} +{"doc_count":10812,"split_key":209604,"timestamp":"2026-04-12T09:00:00.000Z"} +{"doc_count":3343,"split_key":211590,"timestamp":"2026-04-12T09:00:00.000Z"} +{"doc_count":1617,"split_key":203771,"timestamp":"2026-04-12T09:00:00.000Z"} +{"doc_count":1561,"split_key":45102,"timestamp":"2026-04-12T09:00:00.000Z"} +{"doc_count":18968,"split_key":209334,"timestamp":"2026-04-12T10:00:00.000Z"} +{"doc_count":17728,"split_key":209604,"timestamp":"2026-04-12T10:00:00.000Z"} +{"doc_count":2772,"split_key":45102,"timestamp":"2026-04-12T10:00:00.000Z"} +{"doc_count":1142,"split_key":26042,"timestamp":"2026-04-12T10:00:00.000Z"} +{"doc_count":975,"split_key":201401,"timestamp":"2026-04-12T10:00:00.000Z"} +{"doc_count":21646,"split_key":209334,"timestamp":"2026-04-12T11:00:00.000Z"} +{"doc_count":17479,"split_key":209604,"timestamp":"2026-04-12T11:00:00.000Z"} +{"doc_count":3510,"split_key":45102,"timestamp":"2026-04-12T11:00:00.000Z"} +{"doc_count":1567,"split_key":211590,"timestamp":"2026-04-12T11:00:00.000Z"} +{"doc_count":1148,"split_key":26042,"timestamp":"2026-04-12T11:00:00.000Z"} +{"doc_count":21209,"split_key":209334,"timestamp":"2026-04-12T12:00:00.000Z"} +{"doc_count":17588,"split_key":209604,"timestamp":"2026-04-12T12:00:00.000Z"} +{"doc_count":5257,"split_key":45102,"timestamp":"2026-04-12T12:00:00.000Z"} +{"doc_count":2660,"split_key":211590,"timestamp":"2026-04-12T12:00:00.000Z"} +{"doc_count":2000,"split_key":63949,"timestamp":"2026-04-12T12:00:00.000Z"} +{"doc_count":33586,"split_key":209334,"timestamp":"2026-04-12T13:00:00.000Z"} +{"doc_count":22048,"split_key":63949,"timestamp":"2026-04-12T13:00:00.000Z"} +{"doc_count":12390,"split_key":209604,"timestamp":"2026-04-12T13:00:00.000Z"} +{"doc_count":4742,"split_key":203771,"timestamp":"2026-04-12T13:00:00.000Z"} +{"doc_count":2333,"split_key":4812,"timestamp":"2026-04-12T13:00:00.000Z"} +{"doc_count":23128,"split_key":209334,"timestamp":"2026-04-12T14:00:00.000Z"} +{"doc_count":21216,"split_key":63949,"timestamp":"2026-04-12T14:00:00.000Z"} +{"doc_count":18962,"split_key":203771,"timestamp":"2026-04-12T14:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-04-12T14:00:00.000Z"} +{"doc_count":2152,"split_key":45102,"timestamp":"2026-04-12T14:00:00.000Z"} +{"doc_count":21044,"split_key":63949,"timestamp":"2026-04-12T15:00:00.000Z"} +{"doc_count":14755,"split_key":203771,"timestamp":"2026-04-12T15:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-04-12T15:00:00.000Z"} +{"doc_count":2041,"split_key":209334,"timestamp":"2026-04-12T15:00:00.000Z"} +{"doc_count":1957,"split_key":37963,"timestamp":"2026-04-12T15:00:00.000Z"} +{"doc_count":22078,"split_key":63949,"timestamp":"2026-04-12T16:00:00.000Z"} +{"doc_count":13285,"split_key":203771,"timestamp":"2026-04-12T16:00:00.000Z"} +{"doc_count":3091,"split_key":211590,"timestamp":"2026-04-12T16:00:00.000Z"} +{"doc_count":1709,"split_key":37963,"timestamp":"2026-04-12T16:00:00.000Z"} +{"doc_count":1158,"split_key":26042,"timestamp":"2026-04-12T16:00:00.000Z"} +{"doc_count":6141,"split_key":63949,"timestamp":"2026-04-12T17:00:00.000Z"} +{"doc_count":1954,"split_key":23470,"timestamp":"2026-04-12T17:00:00.000Z"} +{"doc_count":1157,"split_key":26042,"timestamp":"2026-04-12T17:00:00.000Z"} +{"doc_count":1126,"split_key":37963,"timestamp":"2026-04-12T17:00:00.000Z"} +{"doc_count":1087,"split_key":16509,"timestamp":"2026-04-12T17:00:00.000Z"} +{"doc_count":10251,"split_key":203771,"timestamp":"2026-04-12T18:00:00.000Z"} +{"doc_count":1142,"split_key":26042,"timestamp":"2026-04-12T18:00:00.000Z"} +{"doc_count":1106,"split_key":16509,"timestamp":"2026-04-12T18:00:00.000Z"} +{"doc_count":439,"split_key":396982,"timestamp":"2026-04-12T18:00:00.000Z"} +{"doc_count":438,"split_key":135377,"timestamp":"2026-04-12T18:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-04-12T19:00:00.000Z"} +{"doc_count":933,"split_key":16276,"timestamp":"2026-04-12T19:00:00.000Z"} +{"doc_count":794,"split_key":26042,"timestamp":"2026-04-12T19:00:00.000Z"} +{"doc_count":635,"split_key":16509,"timestamp":"2026-04-12T19:00:00.000Z"} +{"doc_count":440,"split_key":396982,"timestamp":"2026-04-12T19:00:00.000Z"} +{"doc_count":1673,"split_key":211590,"timestamp":"2026-04-12T20:00:00.000Z"} +{"doc_count":800,"split_key":26042,"timestamp":"2026-04-12T20:00:00.000Z"} +{"doc_count":595,"split_key":16509,"timestamp":"2026-04-12T20:00:00.000Z"} +{"doc_count":522,"split_key":396982,"timestamp":"2026-04-12T20:00:00.000Z"} +{"doc_count":401,"split_key":141995,"timestamp":"2026-04-12T20:00:00.000Z"} +{"doc_count":14888,"split_key":203771,"timestamp":"2026-04-12T21:00:00.000Z"} +{"doc_count":2283,"split_key":211590,"timestamp":"2026-04-12T21:00:00.000Z"} +{"doc_count":844,"split_key":16509,"timestamp":"2026-04-12T21:00:00.000Z"} +{"doc_count":801,"split_key":26042,"timestamp":"2026-04-12T21:00:00.000Z"} +{"doc_count":589,"split_key":396982,"timestamp":"2026-04-12T21:00:00.000Z"} +{"doc_count":21616,"split_key":203771,"timestamp":"2026-04-12T22:00:00.000Z"} +{"doc_count":3858,"split_key":211590,"timestamp":"2026-04-12T22:00:00.000Z"} +{"doc_count":1190,"split_key":48090,"timestamp":"2026-04-12T22:00:00.000Z"} +{"doc_count":851,"split_key":16509,"timestamp":"2026-04-12T22:00:00.000Z"} +{"doc_count":794,"split_key":26042,"timestamp":"2026-04-12T22:00:00.000Z"} +{"doc_count":21397,"split_key":203771,"timestamp":"2026-04-12T23:00:00.000Z"} +{"doc_count":4321,"split_key":211590,"timestamp":"2026-04-12T23:00:00.000Z"} +{"doc_count":1745,"split_key":48090,"timestamp":"2026-04-12T23:00:00.000Z"} +{"doc_count":868,"split_key":16509,"timestamp":"2026-04-12T23:00:00.000Z"} +{"doc_count":791,"split_key":26042,"timestamp":"2026-04-12T23:00:00.000Z"} +{"doc_count":21379,"split_key":203771,"timestamp":"2026-04-13T00:00:00.000Z"} +{"doc_count":1680,"split_key":211590,"timestamp":"2026-04-13T00:00:00.000Z"} +{"doc_count":1449,"split_key":23470,"timestamp":"2026-04-13T00:00:00.000Z"} +{"doc_count":1304,"split_key":48090,"timestamp":"2026-04-13T00:00:00.000Z"} +{"doc_count":786,"split_key":26042,"timestamp":"2026-04-13T00:00:00.000Z"} +{"doc_count":21449,"split_key":203771,"timestamp":"2026-04-13T01:00:00.000Z"} +{"doc_count":6000,"split_key":211590,"timestamp":"2026-04-13T01:00:00.000Z"} +{"doc_count":1293,"split_key":48090,"timestamp":"2026-04-13T01:00:00.000Z"} +{"doc_count":782,"split_key":26042,"timestamp":"2026-04-13T01:00:00.000Z"} +{"doc_count":751,"split_key":9318,"timestamp":"2026-04-13T01:00:00.000Z"} +{"doc_count":21485,"split_key":203771,"timestamp":"2026-04-13T02:00:00.000Z"} +{"doc_count":5758,"split_key":211590,"timestamp":"2026-04-13T02:00:00.000Z"} +{"doc_count":1303,"split_key":48090,"timestamp":"2026-04-13T02:00:00.000Z"} +{"doc_count":843,"split_key":16509,"timestamp":"2026-04-13T02:00:00.000Z"} +{"doc_count":837,"split_key":9318,"timestamp":"2026-04-13T02:00:00.000Z"} +{"doc_count":21414,"split_key":203771,"timestamp":"2026-04-13T03:00:00.000Z"} +{"doc_count":16688,"split_key":211590,"timestamp":"2026-04-13T03:00:00.000Z"} +{"doc_count":1307,"split_key":48090,"timestamp":"2026-04-13T03:00:00.000Z"} +{"doc_count":956,"split_key":16509,"timestamp":"2026-04-13T03:00:00.000Z"} +{"doc_count":849,"split_key":9318,"timestamp":"2026-04-13T03:00:00.000Z"} +{"doc_count":21442,"split_key":203771,"timestamp":"2026-04-13T04:00:00.000Z"} +{"doc_count":3064,"split_key":211590,"timestamp":"2026-04-13T04:00:00.000Z"} +{"doc_count":1317,"split_key":48090,"timestamp":"2026-04-13T04:00:00.000Z"} +{"doc_count":1253,"split_key":16509,"timestamp":"2026-04-13T04:00:00.000Z"} +{"doc_count":861,"split_key":9318,"timestamp":"2026-04-13T04:00:00.000Z"} +{"doc_count":20981,"split_key":203771,"timestamp":"2026-04-13T05:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-04-13T05:00:00.000Z"} +{"doc_count":1350,"split_key":48090,"timestamp":"2026-04-13T05:00:00.000Z"} +{"doc_count":867,"split_key":9318,"timestamp":"2026-04-13T05:00:00.000Z"} +{"doc_count":794,"split_key":16509,"timestamp":"2026-04-13T05:00:00.000Z"} +{"doc_count":21647,"split_key":203771,"timestamp":"2026-04-13T06:00:00.000Z"} +{"doc_count":12000,"split_key":211590,"timestamp":"2026-04-13T06:00:00.000Z"} +{"doc_count":1303,"split_key":48090,"timestamp":"2026-04-13T06:00:00.000Z"} +{"doc_count":805,"split_key":16509,"timestamp":"2026-04-13T06:00:00.000Z"} +{"doc_count":783,"split_key":26042,"timestamp":"2026-04-13T06:00:00.000Z"} +{"doc_count":21703,"split_key":203771,"timestamp":"2026-04-13T07:00:00.000Z"} +{"doc_count":1644,"split_key":16509,"timestamp":"2026-04-13T07:00:00.000Z"} +{"doc_count":1292,"split_key":48090,"timestamp":"2026-04-13T07:00:00.000Z"} +{"doc_count":1035,"split_key":14061,"timestamp":"2026-04-13T07:00:00.000Z"} +{"doc_count":789,"split_key":26042,"timestamp":"2026-04-13T07:00:00.000Z"} +{"doc_count":21954,"split_key":203771,"timestamp":"2026-04-13T08:00:00.000Z"} +{"doc_count":5545,"split_key":211590,"timestamp":"2026-04-13T08:00:00.000Z"} +{"doc_count":1303,"split_key":48090,"timestamp":"2026-04-13T08:00:00.000Z"} +{"doc_count":733,"split_key":16509,"timestamp":"2026-04-13T08:00:00.000Z"} +{"doc_count":639,"split_key":134762,"timestamp":"2026-04-13T08:00:00.000Z"} +{"doc_count":21354,"split_key":203771,"timestamp":"2026-04-13T09:00:00.000Z"} +{"doc_count":13375,"split_key":209334,"timestamp":"2026-04-13T09:00:00.000Z"} +{"doc_count":3520,"split_key":211590,"timestamp":"2026-04-13T09:00:00.000Z"} +{"doc_count":1329,"split_key":48090,"timestamp":"2026-04-13T09:00:00.000Z"} +{"doc_count":798,"split_key":16509,"timestamp":"2026-04-13T09:00:00.000Z"} +{"doc_count":26716,"split_key":209334,"timestamp":"2026-04-13T10:00:00.000Z"} +{"doc_count":21598,"split_key":203771,"timestamp":"2026-04-13T10:00:00.000Z"} +{"doc_count":9065,"split_key":211590,"timestamp":"2026-04-13T10:00:00.000Z"} +{"doc_count":1279,"split_key":48090,"timestamp":"2026-04-13T10:00:00.000Z"} +{"doc_count":1045,"split_key":201401,"timestamp":"2026-04-13T10:00:00.000Z"} +{"doc_count":31571,"split_key":209334,"timestamp":"2026-04-13T11:00:00.000Z"} +{"doc_count":21638,"split_key":203771,"timestamp":"2026-04-13T11:00:00.000Z"} +{"doc_count":1283,"split_key":48090,"timestamp":"2026-04-13T11:00:00.000Z"} +{"doc_count":1227,"split_key":201401,"timestamp":"2026-04-13T11:00:00.000Z"} +{"doc_count":747,"split_key":16509,"timestamp":"2026-04-13T11:00:00.000Z"} +{"doc_count":24842,"split_key":209334,"timestamp":"2026-04-13T12:00:00.000Z"} +{"doc_count":21025,"split_key":203771,"timestamp":"2026-04-13T12:00:00.000Z"} +{"doc_count":2336,"split_key":211590,"timestamp":"2026-04-13T12:00:00.000Z"} +{"doc_count":1289,"split_key":48090,"timestamp":"2026-04-13T12:00:00.000Z"} +{"doc_count":1215,"split_key":201401,"timestamp":"2026-04-13T12:00:00.000Z"} +{"doc_count":22042,"split_key":209334,"timestamp":"2026-04-13T13:00:00.000Z"} +{"doc_count":15104,"split_key":203771,"timestamp":"2026-04-13T13:00:00.000Z"} +{"doc_count":1707,"split_key":211590,"timestamp":"2026-04-13T13:00:00.000Z"} +{"doc_count":1224,"split_key":48090,"timestamp":"2026-04-13T13:00:00.000Z"} +{"doc_count":1045,"split_key":4837,"timestamp":"2026-04-13T13:00:00.000Z"} +{"doc_count":22655,"split_key":209334,"timestamp":"2026-04-13T14:00:00.000Z"} +{"doc_count":10375,"split_key":203771,"timestamp":"2026-04-13T14:00:00.000Z"} +{"doc_count":2198,"split_key":205733,"timestamp":"2026-04-13T14:00:00.000Z"} +{"doc_count":1297,"split_key":48090,"timestamp":"2026-04-13T14:00:00.000Z"} +{"doc_count":1264,"split_key":16509,"timestamp":"2026-04-13T14:00:00.000Z"} +{"doc_count":13151,"split_key":203771,"timestamp":"2026-04-13T15:00:00.000Z"} +{"doc_count":7087,"split_key":205733,"timestamp":"2026-04-13T15:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-04-13T15:00:00.000Z"} +{"doc_count":1658,"split_key":37963,"timestamp":"2026-04-13T15:00:00.000Z"} +{"doc_count":1306,"split_key":48090,"timestamp":"2026-04-13T15:00:00.000Z"} +{"doc_count":10860,"split_key":203771,"timestamp":"2026-04-13T16:00:00.000Z"} +{"doc_count":7507,"split_key":211590,"timestamp":"2026-04-13T16:00:00.000Z"} +{"doc_count":4879,"split_key":205733,"timestamp":"2026-04-13T16:00:00.000Z"} +{"doc_count":1299,"split_key":48090,"timestamp":"2026-04-13T16:00:00.000Z"} +{"doc_count":1154,"split_key":37963,"timestamp":"2026-04-13T16:00:00.000Z"} +{"doc_count":2715,"split_key":14061,"timestamp":"2026-04-13T17:00:00.000Z"} +{"doc_count":2660,"split_key":209604,"timestamp":"2026-04-13T17:00:00.000Z"} +{"doc_count":1288,"split_key":48090,"timestamp":"2026-04-13T17:00:00.000Z"} +{"doc_count":1113,"split_key":16509,"timestamp":"2026-04-13T17:00:00.000Z"} +{"doc_count":984,"split_key":211590,"timestamp":"2026-04-13T17:00:00.000Z"} +{"doc_count":5692,"split_key":14061,"timestamp":"2026-04-13T18:00:00.000Z"} +{"doc_count":5018,"split_key":209604,"timestamp":"2026-04-13T18:00:00.000Z"} +{"doc_count":2172,"split_key":138997,"timestamp":"2026-04-13T18:00:00.000Z"} +{"doc_count":1311,"split_key":48090,"timestamp":"2026-04-13T18:00:00.000Z"} +{"doc_count":1266,"split_key":16509,"timestamp":"2026-04-13T18:00:00.000Z"} +{"doc_count":9364,"split_key":211590,"timestamp":"2026-04-13T19:00:00.000Z"} +{"doc_count":3180,"split_key":203771,"timestamp":"2026-04-13T19:00:00.000Z"} +{"doc_count":2824,"split_key":213488,"timestamp":"2026-04-13T19:00:00.000Z"} +{"doc_count":1337,"split_key":48090,"timestamp":"2026-04-13T19:00:00.000Z"} +{"doc_count":1251,"split_key":16509,"timestamp":"2026-04-13T19:00:00.000Z"} +{"doc_count":1328,"split_key":48090,"timestamp":"2026-04-13T20:00:00.000Z"} +{"doc_count":1160,"split_key":16509,"timestamp":"2026-04-13T20:00:00.000Z"} +{"doc_count":822,"split_key":14061,"timestamp":"2026-04-13T20:00:00.000Z"} +{"doc_count":502,"split_key":396982,"timestamp":"2026-04-13T20:00:00.000Z"} +{"doc_count":353,"split_key":201814,"timestamp":"2026-04-13T20:00:00.000Z"} +{"doc_count":6334,"split_key":211590,"timestamp":"2026-04-13T21:00:00.000Z"} +{"doc_count":1950,"split_key":16509,"timestamp":"2026-04-13T21:00:00.000Z"} +{"doc_count":1407,"split_key":37963,"timestamp":"2026-04-13T21:00:00.000Z"} +{"doc_count":1324,"split_key":48090,"timestamp":"2026-04-13T21:00:00.000Z"} +{"doc_count":1061,"split_key":14061,"timestamp":"2026-04-13T21:00:00.000Z"} +{"doc_count":4622,"split_key":211590,"timestamp":"2026-04-13T22:00:00.000Z"} +{"doc_count":1481,"split_key":45102,"timestamp":"2026-04-13T22:00:00.000Z"} +{"doc_count":1285,"split_key":48090,"timestamp":"2026-04-13T22:00:00.000Z"} +{"doc_count":1089,"split_key":14061,"timestamp":"2026-04-13T22:00:00.000Z"} +{"doc_count":1037,"split_key":16509,"timestamp":"2026-04-13T22:00:00.000Z"} +{"doc_count":1530,"split_key":45102,"timestamp":"2026-04-13T23:00:00.000Z"} +{"doc_count":1513,"split_key":37963,"timestamp":"2026-04-13T23:00:00.000Z"} +{"doc_count":1299,"split_key":48090,"timestamp":"2026-04-13T23:00:00.000Z"} +{"doc_count":908,"split_key":14061,"timestamp":"2026-04-13T23:00:00.000Z"} +{"doc_count":890,"split_key":16509,"timestamp":"2026-04-13T23:00:00.000Z"} +{"doc_count":1869,"split_key":8193,"timestamp":"2026-04-14T00:00:00.000Z"} +{"doc_count":1540,"split_key":37963,"timestamp":"2026-04-14T00:00:00.000Z"} +{"doc_count":1423,"split_key":45102,"timestamp":"2026-04-14T00:00:00.000Z"} +{"doc_count":1292,"split_key":48090,"timestamp":"2026-04-14T00:00:00.000Z"} +{"doc_count":944,"split_key":14061,"timestamp":"2026-04-14T00:00:00.000Z"} +{"doc_count":1291,"split_key":48090,"timestamp":"2026-04-14T01:00:00.000Z"} +{"doc_count":942,"split_key":14061,"timestamp":"2026-04-14T01:00:00.000Z"} +{"doc_count":590,"split_key":16509,"timestamp":"2026-04-14T01:00:00.000Z"} +{"doc_count":412,"split_key":396982,"timestamp":"2026-04-14T01:00:00.000Z"} +{"doc_count":394,"split_key":45102,"timestamp":"2026-04-14T01:00:00.000Z"} +{"doc_count":1289,"split_key":48090,"timestamp":"2026-04-14T02:00:00.000Z"} +{"doc_count":1179,"split_key":37963,"timestamp":"2026-04-14T02:00:00.000Z"} +{"doc_count":1020,"split_key":14061,"timestamp":"2026-04-14T02:00:00.000Z"} +{"doc_count":651,"split_key":396982,"timestamp":"2026-04-14T02:00:00.000Z"} +{"doc_count":349,"split_key":201814,"timestamp":"2026-04-14T02:00:00.000Z"} +{"doc_count":1679,"split_key":37963,"timestamp":"2026-04-14T03:00:00.000Z"} +{"doc_count":1293,"split_key":48090,"timestamp":"2026-04-14T03:00:00.000Z"} +{"doc_count":1269,"split_key":14061,"timestamp":"2026-04-14T03:00:00.000Z"} +{"doc_count":625,"split_key":16509,"timestamp":"2026-04-14T03:00:00.000Z"} +{"doc_count":386,"split_key":396982,"timestamp":"2026-04-14T03:00:00.000Z"} +{"doc_count":9929,"split_key":4134,"timestamp":"2026-04-14T04:00:00.000Z"} +{"doc_count":1292,"split_key":48090,"timestamp":"2026-04-14T04:00:00.000Z"} +{"doc_count":1284,"split_key":37963,"timestamp":"2026-04-14T04:00:00.000Z"} +{"doc_count":582,"split_key":16509,"timestamp":"2026-04-14T04:00:00.000Z"} +{"doc_count":461,"split_key":14061,"timestamp":"2026-04-14T04:00:00.000Z"} +{"doc_count":11831,"split_key":211590,"timestamp":"2026-04-14T05:00:00.000Z"} +{"doc_count":1827,"split_key":199829,"timestamp":"2026-04-14T05:00:00.000Z"} +{"doc_count":1289,"split_key":48090,"timestamp":"2026-04-14T05:00:00.000Z"} +{"doc_count":638,"split_key":16509,"timestamp":"2026-04-14T05:00:00.000Z"} +{"doc_count":385,"split_key":396982,"timestamp":"2026-04-14T05:00:00.000Z"} +{"doc_count":1316,"split_key":48090,"timestamp":"2026-04-14T06:00:00.000Z"} +{"doc_count":671,"split_key":396982,"timestamp":"2026-04-14T06:00:00.000Z"} +{"doc_count":365,"split_key":201814,"timestamp":"2026-04-14T06:00:00.000Z"} +{"doc_count":338,"split_key":16509,"timestamp":"2026-04-14T06:00:00.000Z"} +{"doc_count":318,"split_key":135377,"timestamp":"2026-04-14T06:00:00.000Z"} +{"doc_count":1379,"split_key":48090,"timestamp":"2026-04-14T07:00:00.000Z"} +{"doc_count":350,"split_key":201814,"timestamp":"2026-04-14T07:00:00.000Z"} +{"doc_count":297,"split_key":200730,"timestamp":"2026-04-14T07:00:00.000Z"} +{"doc_count":282,"split_key":14061,"timestamp":"2026-04-14T07:00:00.000Z"} +{"doc_count":280,"split_key":16509,"timestamp":"2026-04-14T07:00:00.000Z"} +{"doc_count":6787,"split_key":211590,"timestamp":"2026-04-14T08:00:00.000Z"} +{"doc_count":1438,"split_key":48090,"timestamp":"2026-04-14T08:00:00.000Z"} +{"doc_count":600,"split_key":213790,"timestamp":"2026-04-14T08:00:00.000Z"} +{"doc_count":507,"split_key":49870,"timestamp":"2026-04-14T08:00:00.000Z"} +{"doc_count":473,"split_key":16509,"timestamp":"2026-04-14T08:00:00.000Z"} +{"doc_count":10538,"split_key":209334,"timestamp":"2026-04-14T09:00:00.000Z"} +{"doc_count":1840,"split_key":199829,"timestamp":"2026-04-14T09:00:00.000Z"} +{"doc_count":1488,"split_key":48090,"timestamp":"2026-04-14T09:00:00.000Z"} +{"doc_count":597,"split_key":16509,"timestamp":"2026-04-14T09:00:00.000Z"} +{"doc_count":416,"split_key":14061,"timestamp":"2026-04-14T09:00:00.000Z"} +{"doc_count":24162,"split_key":209334,"timestamp":"2026-04-14T10:00:00.000Z"} +{"doc_count":2928,"split_key":209605,"timestamp":"2026-04-14T10:00:00.000Z"} +{"doc_count":1431,"split_key":48090,"timestamp":"2026-04-14T10:00:00.000Z"} +{"doc_count":1035,"split_key":201401,"timestamp":"2026-04-14T10:00:00.000Z"} +{"doc_count":578,"split_key":213790,"timestamp":"2026-04-14T10:00:00.000Z"} +{"doc_count":30361,"split_key":209334,"timestamp":"2026-04-14T11:00:00.000Z"} +{"doc_count":1424,"split_key":48090,"timestamp":"2026-04-14T11:00:00.000Z"} +{"doc_count":1254,"split_key":201401,"timestamp":"2026-04-14T11:00:00.000Z"} +{"doc_count":567,"split_key":396982,"timestamp":"2026-04-14T11:00:00.000Z"} +{"doc_count":421,"split_key":16509,"timestamp":"2026-04-14T11:00:00.000Z"} +{"doc_count":25908,"split_key":209334,"timestamp":"2026-04-14T12:00:00.000Z"} +{"doc_count":1448,"split_key":48090,"timestamp":"2026-04-14T12:00:00.000Z"} +{"doc_count":1192,"split_key":201401,"timestamp":"2026-04-14T12:00:00.000Z"} +{"doc_count":686,"split_key":14061,"timestamp":"2026-04-14T12:00:00.000Z"} +{"doc_count":544,"split_key":396982,"timestamp":"2026-04-14T12:00:00.000Z"} +{"doc_count":20314,"split_key":209334,"timestamp":"2026-04-14T13:00:00.000Z"} +{"doc_count":1429,"split_key":48090,"timestamp":"2026-04-14T13:00:00.000Z"} +{"doc_count":949,"split_key":201401,"timestamp":"2026-04-14T13:00:00.000Z"} +{"doc_count":457,"split_key":14061,"timestamp":"2026-04-14T13:00:00.000Z"} +{"doc_count":395,"split_key":16509,"timestamp":"2026-04-14T13:00:00.000Z"} +{"doc_count":20060,"split_key":209334,"timestamp":"2026-04-14T14:00:00.000Z"} +{"doc_count":1355,"split_key":48090,"timestamp":"2026-04-14T14:00:00.000Z"} +{"doc_count":1049,"split_key":201401,"timestamp":"2026-04-14T14:00:00.000Z"} +{"doc_count":758,"split_key":396982,"timestamp":"2026-04-14T14:00:00.000Z"} +{"doc_count":727,"split_key":53427,"timestamp":"2026-04-14T14:00:00.000Z"} +{"doc_count":3113,"split_key":209334,"timestamp":"2026-04-14T15:00:00.000Z"} +{"doc_count":2941,"split_key":209605,"timestamp":"2026-04-14T15:00:00.000Z"} +{"doc_count":1305,"split_key":48090,"timestamp":"2026-04-14T15:00:00.000Z"} +{"doc_count":690,"split_key":396982,"timestamp":"2026-04-14T15:00:00.000Z"} +{"doc_count":631,"split_key":16509,"timestamp":"2026-04-14T15:00:00.000Z"} +{"doc_count":1370,"split_key":48090,"timestamp":"2026-04-14T16:00:00.000Z"} +{"doc_count":387,"split_key":24940,"timestamp":"2026-04-14T16:00:00.000Z"} +{"doc_count":350,"split_key":16509,"timestamp":"2026-04-14T16:00:00.000Z"} +{"doc_count":348,"split_key":201814,"timestamp":"2026-04-14T16:00:00.000Z"} +{"doc_count":322,"split_key":200730,"timestamp":"2026-04-14T16:00:00.000Z"} +{"doc_count":1305,"split_key":48090,"timestamp":"2026-04-14T17:00:00.000Z"} +{"doc_count":486,"split_key":133199,"timestamp":"2026-04-14T17:00:00.000Z"} +{"doc_count":472,"split_key":16509,"timestamp":"2026-04-14T17:00:00.000Z"} +{"doc_count":462,"split_key":14061,"timestamp":"2026-04-14T17:00:00.000Z"} +{"doc_count":413,"split_key":396982,"timestamp":"2026-04-14T17:00:00.000Z"} +{"doc_count":1771,"split_key":48090,"timestamp":"2026-04-14T18:00:00.000Z"} +{"doc_count":828,"split_key":396982,"timestamp":"2026-04-14T18:00:00.000Z"} +{"doc_count":575,"split_key":16509,"timestamp":"2026-04-14T18:00:00.000Z"} +{"doc_count":493,"split_key":37963,"timestamp":"2026-04-14T18:00:00.000Z"} +{"doc_count":402,"split_key":14061,"timestamp":"2026-04-14T18:00:00.000Z"} +{"doc_count":1430,"split_key":48090,"timestamp":"2026-04-14T19:00:00.000Z"} +{"doc_count":1414,"split_key":37963,"timestamp":"2026-04-14T19:00:00.000Z"} +{"doc_count":616,"split_key":16509,"timestamp":"2026-04-14T19:00:00.000Z"} +{"doc_count":408,"split_key":396982,"timestamp":"2026-04-14T19:00:00.000Z"} +{"doc_count":352,"split_key":201814,"timestamp":"2026-04-14T19:00:00.000Z"} +{"doc_count":1459,"split_key":48090,"timestamp":"2026-04-14T20:00:00.000Z"} +{"doc_count":1423,"split_key":37963,"timestamp":"2026-04-14T20:00:00.000Z"} +{"doc_count":505,"split_key":49870,"timestamp":"2026-04-14T20:00:00.000Z"} +{"doc_count":499,"split_key":16509,"timestamp":"2026-04-14T20:00:00.000Z"} +{"doc_count":438,"split_key":14061,"timestamp":"2026-04-14T20:00:00.000Z"} +{"doc_count":7180,"split_key":203771,"timestamp":"2026-04-14T21:00:00.000Z"} +{"doc_count":1486,"split_key":48090,"timestamp":"2026-04-14T21:00:00.000Z"} +{"doc_count":1341,"split_key":37963,"timestamp":"2026-04-14T21:00:00.000Z"} +{"doc_count":685,"split_key":396982,"timestamp":"2026-04-14T21:00:00.000Z"} +{"doc_count":463,"split_key":16509,"timestamp":"2026-04-14T21:00:00.000Z"} +{"doc_count":6418,"split_key":203771,"timestamp":"2026-04-14T22:00:00.000Z"} +{"doc_count":1477,"split_key":48090,"timestamp":"2026-04-14T22:00:00.000Z"} +{"doc_count":1258,"split_key":37963,"timestamp":"2026-04-14T22:00:00.000Z"} +{"doc_count":480,"split_key":200239,"timestamp":"2026-04-14T22:00:00.000Z"} +{"doc_count":385,"split_key":209604,"timestamp":"2026-04-14T22:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-14T23:00:00.000Z"} +{"doc_count":1135,"split_key":37963,"timestamp":"2026-04-14T23:00:00.000Z"} +{"doc_count":1134,"split_key":48090,"timestamp":"2026-04-14T23:00:00.000Z"} +{"doc_count":399,"split_key":135377,"timestamp":"2026-04-14T23:00:00.000Z"} +{"doc_count":387,"split_key":396982,"timestamp":"2026-04-14T23:00:00.000Z"} +{"doc_count":1132,"split_key":37963,"timestamp":"2026-04-15T00:00:00.000Z"} +{"doc_count":507,"split_key":49870,"timestamp":"2026-04-15T00:00:00.000Z"} +{"doc_count":425,"split_key":396982,"timestamp":"2026-04-15T00:00:00.000Z"} +{"doc_count":362,"split_key":201814,"timestamp":"2026-04-15T00:00:00.000Z"} +{"doc_count":311,"split_key":199829,"timestamp":"2026-04-15T00:00:00.000Z"} +{"doc_count":17910,"split_key":63949,"timestamp":"2026-04-15T01:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-15T01:00:00.000Z"} +{"doc_count":1059,"split_key":37963,"timestamp":"2026-04-15T01:00:00.000Z"} +{"doc_count":677,"split_key":396982,"timestamp":"2026-04-15T01:00:00.000Z"} +{"doc_count":407,"split_key":16509,"timestamp":"2026-04-15T01:00:00.000Z"} +{"doc_count":24630,"split_key":63949,"timestamp":"2026-04-15T02:00:00.000Z"} +{"doc_count":1078,"split_key":16509,"timestamp":"2026-04-15T02:00:00.000Z"} +{"doc_count":1021,"split_key":37963,"timestamp":"2026-04-15T02:00:00.000Z"} +{"doc_count":606,"split_key":48090,"timestamp":"2026-04-15T02:00:00.000Z"} +{"doc_count":434,"split_key":396982,"timestamp":"2026-04-15T02:00:00.000Z"} +{"doc_count":24543,"split_key":63949,"timestamp":"2026-04-15T03:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-15T03:00:00.000Z"} +{"doc_count":890,"split_key":37963,"timestamp":"2026-04-15T03:00:00.000Z"} +{"doc_count":825,"split_key":16509,"timestamp":"2026-04-15T03:00:00.000Z"} +{"doc_count":367,"split_key":396982,"timestamp":"2026-04-15T03:00:00.000Z"} +{"doc_count":24605,"split_key":63949,"timestamp":"2026-04-15T04:00:00.000Z"} +{"doc_count":1241,"split_key":199829,"timestamp":"2026-04-15T04:00:00.000Z"} +{"doc_count":728,"split_key":16509,"timestamp":"2026-04-15T04:00:00.000Z"} +{"doc_count":467,"split_key":396982,"timestamp":"2026-04-15T04:00:00.000Z"} +{"doc_count":381,"split_key":132420,"timestamp":"2026-04-15T04:00:00.000Z"} +{"doc_count":2855,"split_key":63949,"timestamp":"2026-04-15T05:00:00.000Z"} +{"doc_count":2235,"split_key":211590,"timestamp":"2026-04-15T05:00:00.000Z"} +{"doc_count":788,"split_key":199829,"timestamp":"2026-04-15T05:00:00.000Z"} +{"doc_count":719,"split_key":396982,"timestamp":"2026-04-15T05:00:00.000Z"} +{"doc_count":670,"split_key":16509,"timestamp":"2026-04-15T05:00:00.000Z"} +{"doc_count":4125,"split_key":14061,"timestamp":"2026-04-15T06:00:00.000Z"} +{"doc_count":2523,"split_key":37963,"timestamp":"2026-04-15T06:00:00.000Z"} +{"doc_count":2224,"split_key":211590,"timestamp":"2026-04-15T06:00:00.000Z"} +{"doc_count":679,"split_key":16509,"timestamp":"2026-04-15T06:00:00.000Z"} +{"doc_count":352,"split_key":396982,"timestamp":"2026-04-15T06:00:00.000Z"} +{"doc_count":4195,"split_key":14061,"timestamp":"2026-04-15T07:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-15T07:00:00.000Z"} +{"doc_count":543,"split_key":16509,"timestamp":"2026-04-15T07:00:00.000Z"} +{"doc_count":375,"split_key":201814,"timestamp":"2026-04-15T07:00:00.000Z"} +{"doc_count":340,"split_key":396982,"timestamp":"2026-04-15T07:00:00.000Z"} +{"doc_count":3389,"split_key":14061,"timestamp":"2026-04-15T08:00:00.000Z"} +{"doc_count":2177,"split_key":211590,"timestamp":"2026-04-15T08:00:00.000Z"} +{"doc_count":1123,"split_key":199829,"timestamp":"2026-04-15T08:00:00.000Z"} +{"doc_count":532,"split_key":16509,"timestamp":"2026-04-15T08:00:00.000Z"} +{"doc_count":515,"split_key":49870,"timestamp":"2026-04-15T08:00:00.000Z"} +{"doc_count":10455,"split_key":209334,"timestamp":"2026-04-15T09:00:00.000Z"} +{"doc_count":8905,"split_key":211590,"timestamp":"2026-04-15T09:00:00.000Z"} +{"doc_count":1192,"split_key":16509,"timestamp":"2026-04-15T09:00:00.000Z"} +{"doc_count":762,"split_key":199829,"timestamp":"2026-04-15T09:00:00.000Z"} +{"doc_count":617,"split_key":141995,"timestamp":"2026-04-15T09:00:00.000Z"} +{"doc_count":25241,"split_key":209334,"timestamp":"2026-04-15T10:00:00.000Z"} +{"doc_count":6066,"split_key":211590,"timestamp":"2026-04-15T10:00:00.000Z"} +{"doc_count":1242,"split_key":201401,"timestamp":"2026-04-15T10:00:00.000Z"} +{"doc_count":1038,"split_key":16509,"timestamp":"2026-04-15T10:00:00.000Z"} +{"doc_count":927,"split_key":37963,"timestamp":"2026-04-15T10:00:00.000Z"} +{"doc_count":24516,"split_key":209334,"timestamp":"2026-04-15T11:00:00.000Z"} +{"doc_count":9480,"split_key":211590,"timestamp":"2026-04-15T11:00:00.000Z"} +{"doc_count":971,"split_key":201401,"timestamp":"2026-04-15T11:00:00.000Z"} +{"doc_count":898,"split_key":37963,"timestamp":"2026-04-15T11:00:00.000Z"} +{"doc_count":857,"split_key":16509,"timestamp":"2026-04-15T11:00:00.000Z"} +{"doc_count":26145,"split_key":209334,"timestamp":"2026-04-15T12:00:00.000Z"} +{"doc_count":1214,"split_key":201401,"timestamp":"2026-04-15T12:00:00.000Z"} +{"doc_count":889,"split_key":37963,"timestamp":"2026-04-15T12:00:00.000Z"} +{"doc_count":700,"split_key":16509,"timestamp":"2026-04-15T12:00:00.000Z"} +{"doc_count":574,"split_key":9829,"timestamp":"2026-04-15T12:00:00.000Z"} +{"doc_count":28464,"split_key":209334,"timestamp":"2026-04-15T13:00:00.000Z"} +{"doc_count":1120,"split_key":201401,"timestamp":"2026-04-15T13:00:00.000Z"} +{"doc_count":985,"split_key":16509,"timestamp":"2026-04-15T13:00:00.000Z"} +{"doc_count":862,"split_key":37963,"timestamp":"2026-04-15T13:00:00.000Z"} +{"doc_count":580,"split_key":9829,"timestamp":"2026-04-15T13:00:00.000Z"} +{"doc_count":21084,"split_key":209334,"timestamp":"2026-04-15T14:00:00.000Z"} +{"doc_count":3378,"split_key":211590,"timestamp":"2026-04-15T14:00:00.000Z"} +{"doc_count":1136,"split_key":201401,"timestamp":"2026-04-15T14:00:00.000Z"} +{"doc_count":1102,"split_key":16509,"timestamp":"2026-04-15T14:00:00.000Z"} +{"doc_count":1002,"split_key":202412,"timestamp":"2026-04-15T14:00:00.000Z"} +{"doc_count":2236,"split_key":211590,"timestamp":"2026-04-15T15:00:00.000Z"} +{"doc_count":617,"split_key":9829,"timestamp":"2026-04-15T15:00:00.000Z"} +{"doc_count":504,"split_key":16509,"timestamp":"2026-04-15T15:00:00.000Z"} +{"doc_count":467,"split_key":265748,"timestamp":"2026-04-15T15:00:00.000Z"} +{"doc_count":375,"split_key":201814,"timestamp":"2026-04-15T15:00:00.000Z"} +{"doc_count":1503,"split_key":37963,"timestamp":"2026-04-15T16:00:00.000Z"} +{"doc_count":652,"split_key":9829,"timestamp":"2026-04-15T16:00:00.000Z"} +{"doc_count":601,"split_key":16509,"timestamp":"2026-04-15T16:00:00.000Z"} +{"doc_count":525,"split_key":265748,"timestamp":"2026-04-15T16:00:00.000Z"} +{"doc_count":338,"split_key":201814,"timestamp":"2026-04-15T16:00:00.000Z"} +{"doc_count":4409,"split_key":211590,"timestamp":"2026-04-15T17:00:00.000Z"} +{"doc_count":842,"split_key":16509,"timestamp":"2026-04-15T17:00:00.000Z"} +{"doc_count":687,"split_key":9829,"timestamp":"2026-04-15T17:00:00.000Z"} +{"doc_count":389,"split_key":14061,"timestamp":"2026-04-15T17:00:00.000Z"} +{"doc_count":364,"split_key":201814,"timestamp":"2026-04-15T17:00:00.000Z"} +{"doc_count":1382,"split_key":37963,"timestamp":"2026-04-15T18:00:00.000Z"} +{"doc_count":885,"split_key":16509,"timestamp":"2026-04-15T18:00:00.000Z"} +{"doc_count":515,"split_key":9829,"timestamp":"2026-04-15T18:00:00.000Z"} +{"doc_count":407,"split_key":135377,"timestamp":"2026-04-15T18:00:00.000Z"} +{"doc_count":375,"split_key":201814,"timestamp":"2026-04-15T18:00:00.000Z"} +{"doc_count":6064,"split_key":211590,"timestamp":"2026-04-15T19:00:00.000Z"} +{"doc_count":4553,"split_key":14061,"timestamp":"2026-04-15T19:00:00.000Z"} +{"doc_count":1229,"split_key":16509,"timestamp":"2026-04-15T19:00:00.000Z"} +{"doc_count":415,"split_key":135377,"timestamp":"2026-04-15T19:00:00.000Z"} +{"doc_count":344,"split_key":201814,"timestamp":"2026-04-15T19:00:00.000Z"} +{"doc_count":11128,"split_key":203771,"timestamp":"2026-04-15T20:00:00.000Z"} +{"doc_count":1349,"split_key":211590,"timestamp":"2026-04-15T20:00:00.000Z"} +{"doc_count":960,"split_key":16509,"timestamp":"2026-04-15T20:00:00.000Z"} +{"doc_count":639,"split_key":136646,"timestamp":"2026-04-15T20:00:00.000Z"} +{"doc_count":619,"split_key":53427,"timestamp":"2026-04-15T20:00:00.000Z"} +{"doc_count":6816,"split_key":203771,"timestamp":"2026-04-15T21:00:00.000Z"} +{"doc_count":2449,"split_key":215027,"timestamp":"2026-04-15T21:00:00.000Z"} +{"doc_count":1255,"split_key":37963,"timestamp":"2026-04-15T21:00:00.000Z"} +{"doc_count":1032,"split_key":211590,"timestamp":"2026-04-15T21:00:00.000Z"} +{"doc_count":528,"split_key":396982,"timestamp":"2026-04-15T21:00:00.000Z"} +{"doc_count":2612,"split_key":215027,"timestamp":"2026-04-15T22:00:00.000Z"} +{"doc_count":1460,"split_key":37963,"timestamp":"2026-04-15T22:00:00.000Z"} +{"doc_count":976,"split_key":211590,"timestamp":"2026-04-15T22:00:00.000Z"} +{"doc_count":973,"split_key":53427,"timestamp":"2026-04-15T22:00:00.000Z"} +{"doc_count":563,"split_key":16509,"timestamp":"2026-04-15T22:00:00.000Z"} +{"doc_count":5668,"split_key":211590,"timestamp":"2026-04-15T23:00:00.000Z"} +{"doc_count":2934,"split_key":209605,"timestamp":"2026-04-15T23:00:00.000Z"} +{"doc_count":880,"split_key":16509,"timestamp":"2026-04-15T23:00:00.000Z"} +{"doc_count":778,"split_key":37963,"timestamp":"2026-04-15T23:00:00.000Z"} +{"doc_count":518,"split_key":396982,"timestamp":"2026-04-15T23:00:00.000Z"} +{"doc_count":8813,"split_key":203771,"timestamp":"2026-04-16T00:00:00.000Z"} +{"doc_count":6127,"split_key":211590,"timestamp":"2026-04-16T00:00:00.000Z"} +{"doc_count":1202,"split_key":45102,"timestamp":"2026-04-16T00:00:00.000Z"} +{"doc_count":733,"split_key":16509,"timestamp":"2026-04-16T00:00:00.000Z"} +{"doc_count":511,"split_key":49870,"timestamp":"2026-04-16T00:00:00.000Z"} +{"doc_count":23629,"split_key":203771,"timestamp":"2026-04-16T01:00:00.000Z"} +{"doc_count":1648,"split_key":45102,"timestamp":"2026-04-16T01:00:00.000Z"} +{"doc_count":1133,"split_key":16509,"timestamp":"2026-04-16T01:00:00.000Z"} +{"doc_count":762,"split_key":51396,"timestamp":"2026-04-16T01:00:00.000Z"} +{"doc_count":580,"split_key":53427,"timestamp":"2026-04-16T01:00:00.000Z"} +{"doc_count":23493,"split_key":203771,"timestamp":"2026-04-16T02:00:00.000Z"} +{"doc_count":1660,"split_key":45102,"timestamp":"2026-04-16T02:00:00.000Z"} +{"doc_count":962,"split_key":16509,"timestamp":"2026-04-16T02:00:00.000Z"} +{"doc_count":550,"split_key":37963,"timestamp":"2026-04-16T02:00:00.000Z"} +{"doc_count":490,"split_key":396982,"timestamp":"2026-04-16T02:00:00.000Z"} +{"doc_count":23566,"split_key":203771,"timestamp":"2026-04-16T03:00:00.000Z"} +{"doc_count":2177,"split_key":211590,"timestamp":"2026-04-16T03:00:00.000Z"} +{"doc_count":596,"split_key":16509,"timestamp":"2026-04-16T03:00:00.000Z"} +{"doc_count":518,"split_key":396982,"timestamp":"2026-04-16T03:00:00.000Z"} +{"doc_count":462,"split_key":142461,"timestamp":"2026-04-16T03:00:00.000Z"} +{"doc_count":23383,"split_key":203771,"timestamp":"2026-04-16T04:00:00.000Z"} +{"doc_count":834,"split_key":16509,"timestamp":"2026-04-16T04:00:00.000Z"} +{"doc_count":544,"split_key":53006,"timestamp":"2026-04-16T04:00:00.000Z"} +{"doc_count":524,"split_key":14061,"timestamp":"2026-04-16T04:00:00.000Z"} +{"doc_count":509,"split_key":396982,"timestamp":"2026-04-16T04:00:00.000Z"} +{"doc_count":23815,"split_key":203771,"timestamp":"2026-04-16T05:00:00.000Z"} +{"doc_count":1022,"split_key":45102,"timestamp":"2026-04-16T05:00:00.000Z"} +{"doc_count":762,"split_key":16509,"timestamp":"2026-04-16T05:00:00.000Z"} +{"doc_count":712,"split_key":63949,"timestamp":"2026-04-16T05:00:00.000Z"} +{"doc_count":559,"split_key":396982,"timestamp":"2026-04-16T05:00:00.000Z"} +{"doc_count":23819,"split_key":203771,"timestamp":"2026-04-16T06:00:00.000Z"} +{"doc_count":2299,"split_key":211590,"timestamp":"2026-04-16T06:00:00.000Z"} +{"doc_count":1557,"split_key":45102,"timestamp":"2026-04-16T06:00:00.000Z"} +{"doc_count":740,"split_key":16509,"timestamp":"2026-04-16T06:00:00.000Z"} +{"doc_count":560,"split_key":53006,"timestamp":"2026-04-16T06:00:00.000Z"} +{"doc_count":23593,"split_key":203771,"timestamp":"2026-04-16T07:00:00.000Z"} +{"doc_count":2237,"split_key":211590,"timestamp":"2026-04-16T07:00:00.000Z"} +{"doc_count":1277,"split_key":45102,"timestamp":"2026-04-16T07:00:00.000Z"} +{"doc_count":761,"split_key":16509,"timestamp":"2026-04-16T07:00:00.000Z"} +{"doc_count":569,"split_key":53006,"timestamp":"2026-04-16T07:00:00.000Z"} +{"doc_count":24228,"split_key":203771,"timestamp":"2026-04-16T08:00:00.000Z"} +{"doc_count":1008,"split_key":49870,"timestamp":"2026-04-16T08:00:00.000Z"} +{"doc_count":998,"split_key":45102,"timestamp":"2026-04-16T08:00:00.000Z"} +{"doc_count":849,"split_key":37963,"timestamp":"2026-04-16T08:00:00.000Z"} +{"doc_count":594,"split_key":53006,"timestamp":"2026-04-16T08:00:00.000Z"} +{"doc_count":24132,"split_key":203771,"timestamp":"2026-04-16T09:00:00.000Z"} +{"doc_count":12348,"split_key":209334,"timestamp":"2026-04-16T09:00:00.000Z"} +{"doc_count":2718,"split_key":211590,"timestamp":"2026-04-16T09:00:00.000Z"} +{"doc_count":630,"split_key":16509,"timestamp":"2026-04-16T09:00:00.000Z"} +{"doc_count":606,"split_key":53006,"timestamp":"2026-04-16T09:00:00.000Z"} +{"doc_count":29353,"split_key":209334,"timestamp":"2026-04-16T10:00:00.000Z"} +{"doc_count":11600,"split_key":203771,"timestamp":"2026-04-16T10:00:00.000Z"} +{"doc_count":3190,"split_key":211590,"timestamp":"2026-04-16T10:00:00.000Z"} +{"doc_count":931,"split_key":201401,"timestamp":"2026-04-16T10:00:00.000Z"} +{"doc_count":843,"split_key":6821,"timestamp":"2026-04-16T10:00:00.000Z"} +{"doc_count":26362,"split_key":209334,"timestamp":"2026-04-16T11:00:00.000Z"} +{"doc_count":1556,"split_key":211590,"timestamp":"2026-04-16T11:00:00.000Z"} +{"doc_count":1003,"split_key":201401,"timestamp":"2026-04-16T11:00:00.000Z"} +{"doc_count":597,"split_key":16509,"timestamp":"2026-04-16T11:00:00.000Z"} +{"doc_count":515,"split_key":49870,"timestamp":"2026-04-16T11:00:00.000Z"} +{"doc_count":24474,"split_key":209334,"timestamp":"2026-04-16T12:00:00.000Z"} +{"doc_count":6001,"split_key":211590,"timestamp":"2026-04-16T12:00:00.000Z"} +{"doc_count":2939,"split_key":203771,"timestamp":"2026-04-16T12:00:00.000Z"} +{"doc_count":1188,"split_key":201401,"timestamp":"2026-04-16T12:00:00.000Z"} +{"doc_count":552,"split_key":16509,"timestamp":"2026-04-16T12:00:00.000Z"} +{"doc_count":24584,"split_key":209334,"timestamp":"2026-04-16T13:00:00.000Z"} +{"doc_count":2174,"split_key":211590,"timestamp":"2026-04-16T13:00:00.000Z"} +{"doc_count":954,"split_key":201401,"timestamp":"2026-04-16T13:00:00.000Z"} +{"doc_count":736,"split_key":16509,"timestamp":"2026-04-16T13:00:00.000Z"} +{"doc_count":633,"split_key":37963,"timestamp":"2026-04-16T13:00:00.000Z"} +{"doc_count":22514,"split_key":209334,"timestamp":"2026-04-16T14:00:00.000Z"} +{"doc_count":2235,"split_key":211590,"timestamp":"2026-04-16T14:00:00.000Z"} +{"doc_count":959,"split_key":37963,"timestamp":"2026-04-16T14:00:00.000Z"} +{"doc_count":886,"split_key":201401,"timestamp":"2026-04-16T14:00:00.000Z"} +{"doc_count":479,"split_key":396982,"timestamp":"2026-04-16T14:00:00.000Z"} +{"doc_count":2173,"split_key":211590,"timestamp":"2026-04-16T15:00:00.000Z"} +{"doc_count":1583,"split_key":37963,"timestamp":"2026-04-16T15:00:00.000Z"} +{"doc_count":1178,"split_key":53427,"timestamp":"2026-04-16T15:00:00.000Z"} +{"doc_count":583,"split_key":16509,"timestamp":"2026-04-16T15:00:00.000Z"} +{"doc_count":530,"split_key":141995,"timestamp":"2026-04-16T15:00:00.000Z"} +{"doc_count":2189,"split_key":211590,"timestamp":"2026-04-16T16:00:00.000Z"} +{"doc_count":1450,"split_key":37963,"timestamp":"2026-04-16T16:00:00.000Z"} +{"doc_count":1035,"split_key":51722,"timestamp":"2026-04-16T16:00:00.000Z"} +{"doc_count":833,"split_key":16509,"timestamp":"2026-04-16T16:00:00.000Z"} +{"doc_count":548,"split_key":206996,"timestamp":"2026-04-16T16:00:00.000Z"} +{"doc_count":2236,"split_key":211590,"timestamp":"2026-04-16T17:00:00.000Z"} +{"doc_count":528,"split_key":16509,"timestamp":"2026-04-16T17:00:00.000Z"} +{"doc_count":414,"split_key":37963,"timestamp":"2026-04-16T17:00:00.000Z"} +{"doc_count":412,"split_key":4134,"timestamp":"2026-04-16T17:00:00.000Z"} +{"doc_count":410,"split_key":211860,"timestamp":"2026-04-16T17:00:00.000Z"} +{"doc_count":2173,"split_key":211590,"timestamp":"2026-04-16T18:00:00.000Z"} +{"doc_count":770,"split_key":16509,"timestamp":"2026-04-16T18:00:00.000Z"} +{"doc_count":604,"split_key":396982,"timestamp":"2026-04-16T18:00:00.000Z"} +{"doc_count":571,"split_key":135377,"timestamp":"2026-04-16T18:00:00.000Z"} +{"doc_count":552,"split_key":23470,"timestamp":"2026-04-16T18:00:00.000Z"} +{"doc_count":1009,"split_key":49870,"timestamp":"2026-04-16T19:00:00.000Z"} +{"doc_count":952,"split_key":16509,"timestamp":"2026-04-16T19:00:00.000Z"} +{"doc_count":681,"split_key":45102,"timestamp":"2026-04-16T19:00:00.000Z"} +{"doc_count":571,"split_key":396982,"timestamp":"2026-04-16T19:00:00.000Z"} +{"doc_count":508,"split_key":37963,"timestamp":"2026-04-16T19:00:00.000Z"} +{"doc_count":5334,"split_key":14061,"timestamp":"2026-04-16T20:00:00.000Z"} +{"doc_count":4916,"split_key":211590,"timestamp":"2026-04-16T20:00:00.000Z"} +{"doc_count":942,"split_key":16509,"timestamp":"2026-04-16T20:00:00.000Z"} +{"doc_count":700,"split_key":45102,"timestamp":"2026-04-16T20:00:00.000Z"} +{"doc_count":547,"split_key":4134,"timestamp":"2026-04-16T20:00:00.000Z"} +{"doc_count":8173,"split_key":211590,"timestamp":"2026-04-16T21:00:00.000Z"} +{"doc_count":1115,"split_key":37963,"timestamp":"2026-04-16T21:00:00.000Z"} +{"doc_count":759,"split_key":16509,"timestamp":"2026-04-16T21:00:00.000Z"} +{"doc_count":586,"split_key":396982,"timestamp":"2026-04-16T21:00:00.000Z"} +{"doc_count":564,"split_key":45102,"timestamp":"2026-04-16T21:00:00.000Z"} +{"doc_count":5970,"split_key":14061,"timestamp":"2026-04-16T22:00:00.000Z"} +{"doc_count":2600,"split_key":211590,"timestamp":"2026-04-16T22:00:00.000Z"} +{"doc_count":961,"split_key":37963,"timestamp":"2026-04-16T22:00:00.000Z"} +{"doc_count":608,"split_key":16509,"timestamp":"2026-04-16T22:00:00.000Z"} +{"doc_count":511,"split_key":49870,"timestamp":"2026-04-16T22:00:00.000Z"} +{"doc_count":2468,"split_key":14061,"timestamp":"2026-04-16T23:00:00.000Z"} +{"doc_count":1918,"split_key":211590,"timestamp":"2026-04-16T23:00:00.000Z"} +{"doc_count":1782,"split_key":35876,"timestamp":"2026-04-16T23:00:00.000Z"} +{"doc_count":1519,"split_key":138995,"timestamp":"2026-04-16T23:00:00.000Z"} +{"doc_count":792,"split_key":37963,"timestamp":"2026-04-16T23:00:00.000Z"} +{"doc_count":2544,"split_key":211590,"timestamp":"2026-04-17T00:00:00.000Z"} +{"doc_count":1772,"split_key":35876,"timestamp":"2026-04-17T00:00:00.000Z"} +{"doc_count":1180,"split_key":37963,"timestamp":"2026-04-17T00:00:00.000Z"} +{"doc_count":647,"split_key":396982,"timestamp":"2026-04-17T00:00:00.000Z"} +{"doc_count":532,"split_key":16509,"timestamp":"2026-04-17T00:00:00.000Z"} +{"doc_count":668,"split_key":37963,"timestamp":"2026-04-17T01:00:00.000Z"} +{"doc_count":526,"split_key":396982,"timestamp":"2026-04-17T01:00:00.000Z"} +{"doc_count":486,"split_key":4134,"timestamp":"2026-04-17T01:00:00.000Z"} +{"doc_count":380,"split_key":16509,"timestamp":"2026-04-17T01:00:00.000Z"} +{"doc_count":352,"split_key":24323,"timestamp":"2026-04-17T01:00:00.000Z"} +{"doc_count":702,"split_key":396982,"timestamp":"2026-04-17T02:00:00.000Z"} +{"doc_count":556,"split_key":37963,"timestamp":"2026-04-17T02:00:00.000Z"} +{"doc_count":474,"split_key":4134,"timestamp":"2026-04-17T02:00:00.000Z"} +{"doc_count":392,"split_key":16509,"timestamp":"2026-04-17T02:00:00.000Z"} +{"doc_count":370,"split_key":24323,"timestamp":"2026-04-17T02:00:00.000Z"} +{"doc_count":2710,"split_key":37963,"timestamp":"2026-04-17T03:00:00.000Z"} +{"doc_count":2377,"split_key":211590,"timestamp":"2026-04-17T03:00:00.000Z"} +{"doc_count":545,"split_key":396982,"timestamp":"2026-04-17T03:00:00.000Z"} +{"doc_count":491,"split_key":16509,"timestamp":"2026-04-17T03:00:00.000Z"} +{"doc_count":484,"split_key":4134,"timestamp":"2026-04-17T03:00:00.000Z"} +{"doc_count":2166,"split_key":37963,"timestamp":"2026-04-17T04:00:00.000Z"} +{"doc_count":623,"split_key":211590,"timestamp":"2026-04-17T04:00:00.000Z"} +{"doc_count":519,"split_key":4134,"timestamp":"2026-04-17T04:00:00.000Z"} +{"doc_count":473,"split_key":396982,"timestamp":"2026-04-17T04:00:00.000Z"} +{"doc_count":383,"split_key":16509,"timestamp":"2026-04-17T04:00:00.000Z"} +{"doc_count":2103,"split_key":37963,"timestamp":"2026-04-17T05:00:00.000Z"} +{"doc_count":531,"split_key":396982,"timestamp":"2026-04-17T05:00:00.000Z"} +{"doc_count":471,"split_key":4134,"timestamp":"2026-04-17T05:00:00.000Z"} +{"doc_count":386,"split_key":24323,"timestamp":"2026-04-17T05:00:00.000Z"} +{"doc_count":375,"split_key":16509,"timestamp":"2026-04-17T05:00:00.000Z"} +{"doc_count":1025,"split_key":396982,"timestamp":"2026-04-17T06:00:00.000Z"} +{"doc_count":655,"split_key":16509,"timestamp":"2026-04-17T06:00:00.000Z"} +{"doc_count":633,"split_key":37963,"timestamp":"2026-04-17T06:00:00.000Z"} +{"doc_count":510,"split_key":49870,"timestamp":"2026-04-17T06:00:00.000Z"} +{"doc_count":417,"split_key":4134,"timestamp":"2026-04-17T06:00:00.000Z"} +{"doc_count":1382,"split_key":7922,"timestamp":"2026-04-17T07:00:00.000Z"} +{"doc_count":628,"split_key":16509,"timestamp":"2026-04-17T07:00:00.000Z"} +{"doc_count":560,"split_key":37963,"timestamp":"2026-04-17T07:00:00.000Z"} +{"doc_count":508,"split_key":49870,"timestamp":"2026-04-17T07:00:00.000Z"} +{"doc_count":472,"split_key":396982,"timestamp":"2026-04-17T07:00:00.000Z"} +{"doc_count":602,"split_key":37963,"timestamp":"2026-04-17T08:00:00.000Z"} +{"doc_count":484,"split_key":4134,"timestamp":"2026-04-17T08:00:00.000Z"} +{"doc_count":394,"split_key":24323,"timestamp":"2026-04-17T08:00:00.000Z"} +{"doc_count":361,"split_key":201814,"timestamp":"2026-04-17T08:00:00.000Z"} +{"doc_count":349,"split_key":24940,"timestamp":"2026-04-17T08:00:00.000Z"} +{"doc_count":9309,"split_key":209334,"timestamp":"2026-04-17T09:00:00.000Z"} +{"doc_count":3257,"split_key":18881,"timestamp":"2026-04-17T09:00:00.000Z"} +{"doc_count":509,"split_key":49870,"timestamp":"2026-04-17T09:00:00.000Z"} +{"doc_count":447,"split_key":37963,"timestamp":"2026-04-17T09:00:00.000Z"} +{"doc_count":440,"split_key":4134,"timestamp":"2026-04-17T09:00:00.000Z"} +{"doc_count":27825,"split_key":209334,"timestamp":"2026-04-17T10:00:00.000Z"} +{"doc_count":5044,"split_key":18881,"timestamp":"2026-04-17T10:00:00.000Z"} +{"doc_count":938,"split_key":37963,"timestamp":"2026-04-17T10:00:00.000Z"} +{"doc_count":829,"split_key":396982,"timestamp":"2026-04-17T10:00:00.000Z"} +{"doc_count":696,"split_key":39351,"timestamp":"2026-04-17T10:00:00.000Z"} +{"doc_count":25723,"split_key":209334,"timestamp":"2026-04-17T11:00:00.000Z"} +{"doc_count":4485,"split_key":18881,"timestamp":"2026-04-17T11:00:00.000Z"} +{"doc_count":2950,"split_key":209605,"timestamp":"2026-04-17T11:00:00.000Z"} +{"doc_count":1954,"split_key":211590,"timestamp":"2026-04-17T11:00:00.000Z"} +{"doc_count":1221,"split_key":37963,"timestamp":"2026-04-17T11:00:00.000Z"} +{"doc_count":24987,"split_key":209334,"timestamp":"2026-04-17T12:00:00.000Z"} +{"doc_count":6319,"split_key":211590,"timestamp":"2026-04-17T12:00:00.000Z"} +{"doc_count":5013,"split_key":18881,"timestamp":"2026-04-17T12:00:00.000Z"} +{"doc_count":1425,"split_key":37963,"timestamp":"2026-04-17T12:00:00.000Z"} +{"doc_count":957,"split_key":24323,"timestamp":"2026-04-17T12:00:00.000Z"} +{"doc_count":21515,"split_key":209334,"timestamp":"2026-04-17T13:00:00.000Z"} +{"doc_count":6077,"split_key":18881,"timestamp":"2026-04-17T13:00:00.000Z"} +{"doc_count":1703,"split_key":37963,"timestamp":"2026-04-17T13:00:00.000Z"} +{"doc_count":1123,"split_key":211590,"timestamp":"2026-04-17T13:00:00.000Z"} +{"doc_count":1011,"split_key":24323,"timestamp":"2026-04-17T13:00:00.000Z"} +{"doc_count":25193,"split_key":209334,"timestamp":"2026-04-17T14:00:00.000Z"} +{"doc_count":6004,"split_key":18881,"timestamp":"2026-04-17T14:00:00.000Z"} +{"doc_count":4345,"split_key":211590,"timestamp":"2026-04-17T14:00:00.000Z"} +{"doc_count":1595,"split_key":37963,"timestamp":"2026-04-17T14:00:00.000Z"} +{"doc_count":1034,"split_key":24323,"timestamp":"2026-04-17T14:00:00.000Z"} +{"doc_count":5381,"split_key":209334,"timestamp":"2026-04-17T15:00:00.000Z"} +{"doc_count":4845,"split_key":18881,"timestamp":"2026-04-17T15:00:00.000Z"} +{"doc_count":1367,"split_key":37963,"timestamp":"2026-04-17T15:00:00.000Z"} +{"doc_count":881,"split_key":24323,"timestamp":"2026-04-17T15:00:00.000Z"} +{"doc_count":397,"split_key":4134,"timestamp":"2026-04-17T15:00:00.000Z"} +{"doc_count":6005,"split_key":211590,"timestamp":"2026-04-17T16:00:00.000Z"} +{"doc_count":4276,"split_key":18881,"timestamp":"2026-04-17T16:00:00.000Z"} +{"doc_count":1224,"split_key":37963,"timestamp":"2026-04-17T16:00:00.000Z"} +{"doc_count":871,"split_key":24323,"timestamp":"2026-04-17T16:00:00.000Z"} +{"doc_count":411,"split_key":16509,"timestamp":"2026-04-17T16:00:00.000Z"} +{"doc_count":4578,"split_key":18881,"timestamp":"2026-04-17T17:00:00.000Z"} +{"doc_count":1147,"split_key":49870,"timestamp":"2026-04-17T17:00:00.000Z"} +{"doc_count":1062,"split_key":37963,"timestamp":"2026-04-17T17:00:00.000Z"} +{"doc_count":842,"split_key":24323,"timestamp":"2026-04-17T17:00:00.000Z"} +{"doc_count":511,"split_key":4134,"timestamp":"2026-04-17T17:00:00.000Z"} +{"doc_count":4318,"split_key":18881,"timestamp":"2026-04-17T18:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-17T18:00:00.000Z"} +{"doc_count":1058,"split_key":37963,"timestamp":"2026-04-17T18:00:00.000Z"} +{"doc_count":877,"split_key":24323,"timestamp":"2026-04-17T18:00:00.000Z"} +{"doc_count":537,"split_key":16509,"timestamp":"2026-04-17T18:00:00.000Z"} +{"doc_count":5743,"split_key":18881,"timestamp":"2026-04-17T19:00:00.000Z"} +{"doc_count":1301,"split_key":37963,"timestamp":"2026-04-17T19:00:00.000Z"} +{"doc_count":905,"split_key":24323,"timestamp":"2026-04-17T19:00:00.000Z"} +{"doc_count":508,"split_key":63949,"timestamp":"2026-04-17T19:00:00.000Z"} +{"doc_count":462,"split_key":4134,"timestamp":"2026-04-17T19:00:00.000Z"} +{"doc_count":6287,"split_key":18881,"timestamp":"2026-04-17T20:00:00.000Z"} +{"doc_count":2173,"split_key":211590,"timestamp":"2026-04-17T20:00:00.000Z"} +{"doc_count":1353,"split_key":37963,"timestamp":"2026-04-17T20:00:00.000Z"} +{"doc_count":912,"split_key":24323,"timestamp":"2026-04-17T20:00:00.000Z"} +{"doc_count":523,"split_key":4134,"timestamp":"2026-04-17T20:00:00.000Z"} +{"doc_count":6003,"split_key":211590,"timestamp":"2026-04-17T21:00:00.000Z"} +{"doc_count":5844,"split_key":18881,"timestamp":"2026-04-17T21:00:00.000Z"} +{"doc_count":853,"split_key":24323,"timestamp":"2026-04-17T21:00:00.000Z"} +{"doc_count":783,"split_key":37963,"timestamp":"2026-04-17T21:00:00.000Z"} +{"doc_count":529,"split_key":396982,"timestamp":"2026-04-17T21:00:00.000Z"} +{"doc_count":4596,"split_key":18881,"timestamp":"2026-04-17T22:00:00.000Z"} +{"doc_count":1696,"split_key":37963,"timestamp":"2026-04-17T22:00:00.000Z"} +{"doc_count":850,"split_key":24323,"timestamp":"2026-04-17T22:00:00.000Z"} +{"doc_count":608,"split_key":201814,"timestamp":"2026-04-17T22:00:00.000Z"} +{"doc_count":522,"split_key":4134,"timestamp":"2026-04-17T22:00:00.000Z"} +{"doc_count":4571,"split_key":18881,"timestamp":"2026-04-17T23:00:00.000Z"} +{"doc_count":880,"split_key":24323,"timestamp":"2026-04-17T23:00:00.000Z"} +{"doc_count":739,"split_key":37963,"timestamp":"2026-04-17T23:00:00.000Z"} +{"doc_count":586,"split_key":201814,"timestamp":"2026-04-17T23:00:00.000Z"} +{"doc_count":482,"split_key":4134,"timestamp":"2026-04-17T23:00:00.000Z"} +{"doc_count":5513,"split_key":18881,"timestamp":"2026-04-18T00:00:00.000Z"} +{"doc_count":1434,"split_key":16591,"timestamp":"2026-04-18T00:00:00.000Z"} +{"doc_count":843,"split_key":24323,"timestamp":"2026-04-18T00:00:00.000Z"} +{"doc_count":670,"split_key":37963,"timestamp":"2026-04-18T00:00:00.000Z"} +{"doc_count":608,"split_key":201814,"timestamp":"2026-04-18T00:00:00.000Z"} +{"doc_count":5107,"split_key":18881,"timestamp":"2026-04-18T01:00:00.000Z"} +{"doc_count":1215,"split_key":37963,"timestamp":"2026-04-18T01:00:00.000Z"} +{"doc_count":1131,"split_key":24323,"timestamp":"2026-04-18T01:00:00.000Z"} +{"doc_count":618,"split_key":201814,"timestamp":"2026-04-18T01:00:00.000Z"} +{"doc_count":567,"split_key":27176,"timestamp":"2026-04-18T01:00:00.000Z"} +{"doc_count":9774,"split_key":4766,"timestamp":"2026-04-18T02:00:00.000Z"} +{"doc_count":6002,"split_key":211590,"timestamp":"2026-04-18T02:00:00.000Z"} +{"doc_count":5285,"split_key":18881,"timestamp":"2026-04-18T02:00:00.000Z"} +{"doc_count":1301,"split_key":24323,"timestamp":"2026-04-18T02:00:00.000Z"} +{"doc_count":668,"split_key":201814,"timestamp":"2026-04-18T02:00:00.000Z"} +{"doc_count":5391,"split_key":18881,"timestamp":"2026-04-18T03:00:00.000Z"} +{"doc_count":2173,"split_key":211590,"timestamp":"2026-04-18T03:00:00.000Z"} +{"doc_count":1420,"split_key":24323,"timestamp":"2026-04-18T03:00:00.000Z"} +{"doc_count":869,"split_key":16509,"timestamp":"2026-04-18T03:00:00.000Z"} +{"doc_count":642,"split_key":201814,"timestamp":"2026-04-18T03:00:00.000Z"} +{"doc_count":5122,"split_key":18881,"timestamp":"2026-04-18T04:00:00.000Z"} +{"doc_count":2300,"split_key":211590,"timestamp":"2026-04-18T04:00:00.000Z"} +{"doc_count":1342,"split_key":24323,"timestamp":"2026-04-18T04:00:00.000Z"} +{"doc_count":592,"split_key":201814,"timestamp":"2026-04-18T04:00:00.000Z"} +{"doc_count":513,"split_key":49870,"timestamp":"2026-04-18T04:00:00.000Z"} +{"doc_count":5250,"split_key":18881,"timestamp":"2026-04-18T05:00:00.000Z"} +{"doc_count":2933,"split_key":209605,"timestamp":"2026-04-18T05:00:00.000Z"} +{"doc_count":632,"split_key":16509,"timestamp":"2026-04-18T05:00:00.000Z"} +{"doc_count":606,"split_key":396982,"timestamp":"2026-04-18T05:00:00.000Z"} +{"doc_count":588,"split_key":201814,"timestamp":"2026-04-18T05:00:00.000Z"} +{"doc_count":6075,"split_key":18881,"timestamp":"2026-04-18T06:00:00.000Z"} +{"doc_count":888,"split_key":37963,"timestamp":"2026-04-18T06:00:00.000Z"} +{"doc_count":582,"split_key":201814,"timestamp":"2026-04-18T06:00:00.000Z"} +{"doc_count":501,"split_key":396982,"timestamp":"2026-04-18T06:00:00.000Z"} +{"doc_count":474,"split_key":16509,"timestamp":"2026-04-18T06:00:00.000Z"} +{"doc_count":5197,"split_key":18881,"timestamp":"2026-04-18T07:00:00.000Z"} +{"doc_count":2698,"split_key":37963,"timestamp":"2026-04-18T07:00:00.000Z"} +{"doc_count":823,"split_key":51396,"timestamp":"2026-04-18T07:00:00.000Z"} +{"doc_count":595,"split_key":201814,"timestamp":"2026-04-18T07:00:00.000Z"} +{"doc_count":514,"split_key":396982,"timestamp":"2026-04-18T07:00:00.000Z"} +{"doc_count":5249,"split_key":18881,"timestamp":"2026-04-18T08:00:00.000Z"} +{"doc_count":1946,"split_key":37963,"timestamp":"2026-04-18T08:00:00.000Z"} +{"doc_count":562,"split_key":201814,"timestamp":"2026-04-18T08:00:00.000Z"} +{"doc_count":451,"split_key":396982,"timestamp":"2026-04-18T08:00:00.000Z"} +{"doc_count":381,"split_key":16509,"timestamp":"2026-04-18T08:00:00.000Z"} +{"doc_count":10940,"split_key":209334,"timestamp":"2026-04-18T09:00:00.000Z"} +{"doc_count":4870,"split_key":18881,"timestamp":"2026-04-18T09:00:00.000Z"} +{"doc_count":2173,"split_key":211590,"timestamp":"2026-04-18T09:00:00.000Z"} +{"doc_count":1526,"split_key":37963,"timestamp":"2026-04-18T09:00:00.000Z"} +{"doc_count":740,"split_key":16509,"timestamp":"2026-04-18T09:00:00.000Z"} +{"doc_count":22532,"split_key":209334,"timestamp":"2026-04-18T10:00:00.000Z"} +{"doc_count":4661,"split_key":18881,"timestamp":"2026-04-18T10:00:00.000Z"} +{"doc_count":2173,"split_key":211590,"timestamp":"2026-04-18T10:00:00.000Z"} +{"doc_count":1030,"split_key":37963,"timestamp":"2026-04-18T10:00:00.000Z"} +{"doc_count":636,"split_key":201401,"timestamp":"2026-04-18T10:00:00.000Z"} +{"doc_count":23926,"split_key":209334,"timestamp":"2026-04-18T11:00:00.000Z"} +{"doc_count":4663,"split_key":18881,"timestamp":"2026-04-18T11:00:00.000Z"} +{"doc_count":2049,"split_key":211590,"timestamp":"2026-04-18T11:00:00.000Z"} +{"doc_count":1018,"split_key":201401,"timestamp":"2026-04-18T11:00:00.000Z"} +{"doc_count":604,"split_key":57717,"timestamp":"2026-04-18T11:00:00.000Z"} +{"doc_count":28386,"split_key":209334,"timestamp":"2026-04-18T12:00:00.000Z"} +{"doc_count":12127,"split_key":211590,"timestamp":"2026-04-18T12:00:00.000Z"} +{"doc_count":4615,"split_key":18881,"timestamp":"2026-04-18T12:00:00.000Z"} +{"doc_count":1036,"split_key":57717,"timestamp":"2026-04-18T12:00:00.000Z"} +{"doc_count":901,"split_key":201401,"timestamp":"2026-04-18T12:00:00.000Z"} +{"doc_count":24136,"split_key":209334,"timestamp":"2026-04-18T13:00:00.000Z"} +{"doc_count":4338,"split_key":18881,"timestamp":"2026-04-18T13:00:00.000Z"} +{"doc_count":3115,"split_key":136190,"timestamp":"2026-04-18T13:00:00.000Z"} +{"doc_count":1040,"split_key":57717,"timestamp":"2026-04-18T13:00:00.000Z"} +{"doc_count":685,"split_key":201401,"timestamp":"2026-04-18T13:00:00.000Z"} +{"doc_count":21860,"split_key":209334,"timestamp":"2026-04-18T14:00:00.000Z"} +{"doc_count":4344,"split_key":211590,"timestamp":"2026-04-18T14:00:00.000Z"} +{"doc_count":4268,"split_key":18881,"timestamp":"2026-04-18T14:00:00.000Z"} +{"doc_count":1087,"split_key":57717,"timestamp":"2026-04-18T14:00:00.000Z"} +{"doc_count":987,"split_key":201401,"timestamp":"2026-04-18T14:00:00.000Z"} +{"doc_count":10026,"split_key":203771,"timestamp":"2026-04-18T15:00:00.000Z"} +{"doc_count":6580,"split_key":211590,"timestamp":"2026-04-18T15:00:00.000Z"} +{"doc_count":6030,"split_key":209334,"timestamp":"2026-04-18T15:00:00.000Z"} +{"doc_count":4183,"split_key":18881,"timestamp":"2026-04-18T15:00:00.000Z"} +{"doc_count":629,"split_key":57717,"timestamp":"2026-04-18T15:00:00.000Z"} +{"doc_count":4237,"split_key":18881,"timestamp":"2026-04-18T16:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-18T16:00:00.000Z"} +{"doc_count":786,"split_key":24323,"timestamp":"2026-04-18T16:00:00.000Z"} +{"doc_count":589,"split_key":201814,"timestamp":"2026-04-18T16:00:00.000Z"} +{"doc_count":400,"split_key":37963,"timestamp":"2026-04-18T16:00:00.000Z"} +{"doc_count":4084,"split_key":18881,"timestamp":"2026-04-18T17:00:00.000Z"} +{"doc_count":2300,"split_key":211590,"timestamp":"2026-04-18T17:00:00.000Z"} +{"doc_count":1412,"split_key":24323,"timestamp":"2026-04-18T17:00:00.000Z"} +{"doc_count":691,"split_key":396982,"timestamp":"2026-04-18T17:00:00.000Z"} +{"doc_count":589,"split_key":201814,"timestamp":"2026-04-18T17:00:00.000Z"} +{"doc_count":6064,"split_key":211590,"timestamp":"2026-04-18T18:00:00.000Z"} +{"doc_count":4059,"split_key":18881,"timestamp":"2026-04-18T18:00:00.000Z"} +{"doc_count":2826,"split_key":203771,"timestamp":"2026-04-18T18:00:00.000Z"} +{"doc_count":1429,"split_key":24323,"timestamp":"2026-04-18T18:00:00.000Z"} +{"doc_count":744,"split_key":37963,"timestamp":"2026-04-18T18:00:00.000Z"} +{"doc_count":3815,"split_key":203771,"timestamp":"2026-04-18T19:00:00.000Z"} +{"doc_count":3795,"split_key":18881,"timestamp":"2026-04-18T19:00:00.000Z"} +{"doc_count":2031,"split_key":211590,"timestamp":"2026-04-18T19:00:00.000Z"} +{"doc_count":1410,"split_key":24323,"timestamp":"2026-04-18T19:00:00.000Z"} +{"doc_count":975,"split_key":37963,"timestamp":"2026-04-18T19:00:00.000Z"} +{"doc_count":8551,"split_key":203771,"timestamp":"2026-04-18T20:00:00.000Z"} +{"doc_count":4428,"split_key":18881,"timestamp":"2026-04-18T20:00:00.000Z"} +{"doc_count":2858,"split_key":211590,"timestamp":"2026-04-18T20:00:00.000Z"} +{"doc_count":1332,"split_key":24323,"timestamp":"2026-04-18T20:00:00.000Z"} +{"doc_count":572,"split_key":16509,"timestamp":"2026-04-18T20:00:00.000Z"} +{"doc_count":8450,"split_key":203771,"timestamp":"2026-04-18T21:00:00.000Z"} +{"doc_count":3942,"split_key":18881,"timestamp":"2026-04-18T21:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-18T21:00:00.000Z"} +{"doc_count":1413,"split_key":24323,"timestamp":"2026-04-18T21:00:00.000Z"} +{"doc_count":636,"split_key":37963,"timestamp":"2026-04-18T21:00:00.000Z"} +{"doc_count":4405,"split_key":18881,"timestamp":"2026-04-18T22:00:00.000Z"} +{"doc_count":3817,"split_key":215238,"timestamp":"2026-04-18T22:00:00.000Z"} +{"doc_count":1582,"split_key":24323,"timestamp":"2026-04-18T22:00:00.000Z"} +{"doc_count":660,"split_key":37963,"timestamp":"2026-04-18T22:00:00.000Z"} +{"doc_count":573,"split_key":201814,"timestamp":"2026-04-18T22:00:00.000Z"} +{"doc_count":4276,"split_key":18881,"timestamp":"2026-04-18T23:00:00.000Z"} +{"doc_count":3525,"split_key":215238,"timestamp":"2026-04-18T23:00:00.000Z"} +{"doc_count":2235,"split_key":211590,"timestamp":"2026-04-18T23:00:00.000Z"} +{"doc_count":1506,"split_key":24323,"timestamp":"2026-04-18T23:00:00.000Z"} +{"doc_count":601,"split_key":201814,"timestamp":"2026-04-18T23:00:00.000Z"} +{"doc_count":4686,"split_key":18881,"timestamp":"2026-04-19T00:00:00.000Z"} +{"doc_count":2235,"split_key":211590,"timestamp":"2026-04-19T00:00:00.000Z"} +{"doc_count":924,"split_key":16509,"timestamp":"2026-04-19T00:00:00.000Z"} +{"doc_count":754,"split_key":396982,"timestamp":"2026-04-19T00:00:00.000Z"} +{"doc_count":637,"split_key":201814,"timestamp":"2026-04-19T00:00:00.000Z"} +{"doc_count":4599,"split_key":18881,"timestamp":"2026-04-19T01:00:00.000Z"} +{"doc_count":1294,"split_key":37963,"timestamp":"2026-04-19T01:00:00.000Z"} +{"doc_count":890,"split_key":396982,"timestamp":"2026-04-19T01:00:00.000Z"} +{"doc_count":668,"split_key":10796,"timestamp":"2026-04-19T01:00:00.000Z"} +{"doc_count":663,"split_key":51396,"timestamp":"2026-04-19T01:00:00.000Z"} +{"doc_count":6517,"split_key":211590,"timestamp":"2026-04-19T02:00:00.000Z"} +{"doc_count":4520,"split_key":18881,"timestamp":"2026-04-19T02:00:00.000Z"} +{"doc_count":1409,"split_key":203771,"timestamp":"2026-04-19T02:00:00.000Z"} +{"doc_count":1207,"split_key":37963,"timestamp":"2026-04-19T02:00:00.000Z"} +{"doc_count":885,"split_key":396982,"timestamp":"2026-04-19T02:00:00.000Z"} +{"doc_count":6133,"split_key":18881,"timestamp":"2026-04-19T03:00:00.000Z"} +{"doc_count":1660,"split_key":37963,"timestamp":"2026-04-19T03:00:00.000Z"} +{"doc_count":816,"split_key":396982,"timestamp":"2026-04-19T03:00:00.000Z"} +{"doc_count":765,"split_key":16509,"timestamp":"2026-04-19T03:00:00.000Z"} +{"doc_count":605,"split_key":201814,"timestamp":"2026-04-19T03:00:00.000Z"} +{"doc_count":5238,"split_key":18881,"timestamp":"2026-04-19T04:00:00.000Z"} +{"doc_count":1208,"split_key":37963,"timestamp":"2026-04-19T04:00:00.000Z"} +{"doc_count":843,"split_key":396982,"timestamp":"2026-04-19T04:00:00.000Z"} +{"doc_count":772,"split_key":16509,"timestamp":"2026-04-19T04:00:00.000Z"} +{"doc_count":573,"split_key":201814,"timestamp":"2026-04-19T04:00:00.000Z"} +{"doc_count":4397,"split_key":18881,"timestamp":"2026-04-19T05:00:00.000Z"} +{"doc_count":1259,"split_key":37963,"timestamp":"2026-04-19T05:00:00.000Z"} +{"doc_count":1000,"split_key":16509,"timestamp":"2026-04-19T05:00:00.000Z"} +{"doc_count":622,"split_key":396982,"timestamp":"2026-04-19T05:00:00.000Z"} +{"doc_count":613,"split_key":27176,"timestamp":"2026-04-19T05:00:00.000Z"} +{"doc_count":4161,"split_key":18881,"timestamp":"2026-04-19T06:00:00.000Z"} +{"doc_count":3220,"split_key":203771,"timestamp":"2026-04-19T06:00:00.000Z"} +{"doc_count":1838,"split_key":37963,"timestamp":"2026-04-19T06:00:00.000Z"} +{"doc_count":1008,"split_key":16509,"timestamp":"2026-04-19T06:00:00.000Z"} +{"doc_count":708,"split_key":396982,"timestamp":"2026-04-19T06:00:00.000Z"} +{"doc_count":3455,"split_key":18881,"timestamp":"2026-04-19T07:00:00.000Z"} +{"doc_count":1262,"split_key":16509,"timestamp":"2026-04-19T07:00:00.000Z"} +{"doc_count":1262,"split_key":37963,"timestamp":"2026-04-19T07:00:00.000Z"} +{"doc_count":587,"split_key":201814,"timestamp":"2026-04-19T07:00:00.000Z"} +{"doc_count":371,"split_key":396982,"timestamp":"2026-04-19T07:00:00.000Z"} +{"doc_count":3939,"split_key":18881,"timestamp":"2026-04-19T08:00:00.000Z"} +{"doc_count":1084,"split_key":16509,"timestamp":"2026-04-19T08:00:00.000Z"} +{"doc_count":1084,"split_key":37963,"timestamp":"2026-04-19T08:00:00.000Z"} +{"doc_count":618,"split_key":201814,"timestamp":"2026-04-19T08:00:00.000Z"} +{"doc_count":511,"split_key":49870,"timestamp":"2026-04-19T08:00:00.000Z"} +{"doc_count":11146,"split_key":209334,"timestamp":"2026-04-19T09:00:00.000Z"} +{"doc_count":5235,"split_key":211590,"timestamp":"2026-04-19T09:00:00.000Z"} +{"doc_count":3738,"split_key":18881,"timestamp":"2026-04-19T09:00:00.000Z"} +{"doc_count":1107,"split_key":37963,"timestamp":"2026-04-19T09:00:00.000Z"} +{"doc_count":1002,"split_key":16509,"timestamp":"2026-04-19T09:00:00.000Z"} +{"doc_count":22556,"split_key":209334,"timestamp":"2026-04-19T10:00:00.000Z"} +{"doc_count":3437,"split_key":18881,"timestamp":"2026-04-19T10:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-04-19T10:00:00.000Z"} +{"doc_count":1122,"split_key":37963,"timestamp":"2026-04-19T10:00:00.000Z"} +{"doc_count":813,"split_key":201401,"timestamp":"2026-04-19T10:00:00.000Z"} +{"doc_count":22363,"split_key":209334,"timestamp":"2026-04-19T11:00:00.000Z"} +{"doc_count":3384,"split_key":18881,"timestamp":"2026-04-19T11:00:00.000Z"} +{"doc_count":2232,"split_key":211590,"timestamp":"2026-04-19T11:00:00.000Z"} +{"doc_count":1146,"split_key":201401,"timestamp":"2026-04-19T11:00:00.000Z"} +{"doc_count":1103,"split_key":37963,"timestamp":"2026-04-19T11:00:00.000Z"} +{"doc_count":21777,"split_key":209334,"timestamp":"2026-04-19T12:00:00.000Z"} +{"doc_count":3512,"split_key":18881,"timestamp":"2026-04-19T12:00:00.000Z"} +{"doc_count":2248,"split_key":211590,"timestamp":"2026-04-19T12:00:00.000Z"} +{"doc_count":1049,"split_key":37963,"timestamp":"2026-04-19T12:00:00.000Z"} +{"doc_count":952,"split_key":201401,"timestamp":"2026-04-19T12:00:00.000Z"} +{"doc_count":29189,"split_key":209334,"timestamp":"2026-04-19T13:00:00.000Z"} +{"doc_count":2873,"split_key":18881,"timestamp":"2026-04-19T13:00:00.000Z"} +{"doc_count":2096,"split_key":211590,"timestamp":"2026-04-19T13:00:00.000Z"} +{"doc_count":1485,"split_key":203771,"timestamp":"2026-04-19T13:00:00.000Z"} +{"doc_count":1101,"split_key":37963,"timestamp":"2026-04-19T13:00:00.000Z"} +{"doc_count":23119,"split_key":209334,"timestamp":"2026-04-19T14:00:00.000Z"} +{"doc_count":2917,"split_key":18881,"timestamp":"2026-04-19T14:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-19T14:00:00.000Z"} +{"doc_count":1718,"split_key":63949,"timestamp":"2026-04-19T14:00:00.000Z"} +{"doc_count":1044,"split_key":203771,"timestamp":"2026-04-19T14:00:00.000Z"} +{"doc_count":6063,"split_key":209334,"timestamp":"2026-04-19T15:00:00.000Z"} +{"doc_count":4345,"split_key":211590,"timestamp":"2026-04-19T15:00:00.000Z"} +{"doc_count":4078,"split_key":63949,"timestamp":"2026-04-19T15:00:00.000Z"} +{"doc_count":3004,"split_key":18881,"timestamp":"2026-04-19T15:00:00.000Z"} +{"doc_count":1477,"split_key":37963,"timestamp":"2026-04-19T15:00:00.000Z"} +{"doc_count":2964,"split_key":18881,"timestamp":"2026-04-19T16:00:00.000Z"} +{"doc_count":2554,"split_key":63949,"timestamp":"2026-04-19T16:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-19T16:00:00.000Z"} +{"doc_count":1784,"split_key":37963,"timestamp":"2026-04-19T16:00:00.000Z"} +{"doc_count":1009,"split_key":49870,"timestamp":"2026-04-19T16:00:00.000Z"} +{"doc_count":6416,"split_key":63949,"timestamp":"2026-04-19T17:00:00.000Z"} +{"doc_count":3471,"split_key":18881,"timestamp":"2026-04-19T17:00:00.000Z"} +{"doc_count":2092,"split_key":37963,"timestamp":"2026-04-19T17:00:00.000Z"} +{"doc_count":1542,"split_key":14061,"timestamp":"2026-04-19T17:00:00.000Z"} +{"doc_count":1122,"split_key":16509,"timestamp":"2026-04-19T17:00:00.000Z"} +{"doc_count":7297,"split_key":203771,"timestamp":"2026-04-19T18:00:00.000Z"} +{"doc_count":4918,"split_key":63949,"timestamp":"2026-04-19T18:00:00.000Z"} +{"doc_count":3348,"split_key":18881,"timestamp":"2026-04-19T18:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-19T18:00:00.000Z"} +{"doc_count":2123,"split_key":37963,"timestamp":"2026-04-19T18:00:00.000Z"} +{"doc_count":8766,"split_key":203771,"timestamp":"2026-04-19T19:00:00.000Z"} +{"doc_count":3412,"split_key":18881,"timestamp":"2026-04-19T19:00:00.000Z"} +{"doc_count":1968,"split_key":63949,"timestamp":"2026-04-19T19:00:00.000Z"} +{"doc_count":1130,"split_key":37963,"timestamp":"2026-04-19T19:00:00.000Z"} +{"doc_count":515,"split_key":49870,"timestamp":"2026-04-19T19:00:00.000Z"} +{"doc_count":3878,"split_key":203771,"timestamp":"2026-04-19T20:00:00.000Z"} +{"doc_count":3871,"split_key":18881,"timestamp":"2026-04-19T20:00:00.000Z"} +{"doc_count":3773,"split_key":211590,"timestamp":"2026-04-19T20:00:00.000Z"} +{"doc_count":890,"split_key":16509,"timestamp":"2026-04-19T20:00:00.000Z"} +{"doc_count":629,"split_key":37963,"timestamp":"2026-04-19T20:00:00.000Z"} +{"doc_count":6642,"split_key":203771,"timestamp":"2026-04-19T21:00:00.000Z"} +{"doc_count":3668,"split_key":18881,"timestamp":"2026-04-19T21:00:00.000Z"} +{"doc_count":2173,"split_key":211590,"timestamp":"2026-04-19T21:00:00.000Z"} +{"doc_count":1105,"split_key":37963,"timestamp":"2026-04-19T21:00:00.000Z"} +{"doc_count":977,"split_key":209334,"timestamp":"2026-04-19T21:00:00.000Z"} +{"doc_count":8570,"split_key":203771,"timestamp":"2026-04-19T22:00:00.000Z"} +{"doc_count":2870,"split_key":18881,"timestamp":"2026-04-19T22:00:00.000Z"} +{"doc_count":1624,"split_key":45102,"timestamp":"2026-04-19T22:00:00.000Z"} +{"doc_count":646,"split_key":396982,"timestamp":"2026-04-19T22:00:00.000Z"} +{"doc_count":612,"split_key":37963,"timestamp":"2026-04-19T22:00:00.000Z"} +{"doc_count":8544,"split_key":203771,"timestamp":"2026-04-19T23:00:00.000Z"} +{"doc_count":5853,"split_key":45102,"timestamp":"2026-04-19T23:00:00.000Z"} +{"doc_count":3066,"split_key":18881,"timestamp":"2026-04-19T23:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-19T23:00:00.000Z"} +{"doc_count":1130,"split_key":37963,"timestamp":"2026-04-19T23:00:00.000Z"} +{"doc_count":8738,"split_key":203771,"timestamp":"2026-04-20T00:00:00.000Z"} +{"doc_count":4799,"split_key":211590,"timestamp":"2026-04-20T00:00:00.000Z"} +{"doc_count":4608,"split_key":14987,"timestamp":"2026-04-20T00:00:00.000Z"} +{"doc_count":3151,"split_key":18881,"timestamp":"2026-04-20T00:00:00.000Z"} +{"doc_count":1347,"split_key":45102,"timestamp":"2026-04-20T00:00:00.000Z"} +{"doc_count":8663,"split_key":203771,"timestamp":"2026-04-20T01:00:00.000Z"} +{"doc_count":3373,"split_key":211590,"timestamp":"2026-04-20T01:00:00.000Z"} +{"doc_count":3248,"split_key":18881,"timestamp":"2026-04-20T01:00:00.000Z"} +{"doc_count":1528,"split_key":45102,"timestamp":"2026-04-20T01:00:00.000Z"} +{"doc_count":1061,"split_key":37963,"timestamp":"2026-04-20T01:00:00.000Z"} +{"doc_count":8759,"split_key":203771,"timestamp":"2026-04-20T02:00:00.000Z"} +{"doc_count":4173,"split_key":18881,"timestamp":"2026-04-20T02:00:00.000Z"} +{"doc_count":1684,"split_key":45102,"timestamp":"2026-04-20T02:00:00.000Z"} +{"doc_count":826,"split_key":16509,"timestamp":"2026-04-20T02:00:00.000Z"} +{"doc_count":815,"split_key":131628,"timestamp":"2026-04-20T02:00:00.000Z"} +{"doc_count":8587,"split_key":203771,"timestamp":"2026-04-20T03:00:00.000Z"} +{"doc_count":4032,"split_key":18881,"timestamp":"2026-04-20T03:00:00.000Z"} +{"doc_count":1565,"split_key":45102,"timestamp":"2026-04-20T03:00:00.000Z"} +{"doc_count":1014,"split_key":49870,"timestamp":"2026-04-20T03:00:00.000Z"} +{"doc_count":617,"split_key":201814,"timestamp":"2026-04-20T03:00:00.000Z"} +{"doc_count":64379,"split_key":16276,"timestamp":"2026-04-20T04:00:00.000Z"} +{"doc_count":8611,"split_key":203771,"timestamp":"2026-04-20T04:00:00.000Z"} +{"doc_count":4430,"split_key":18881,"timestamp":"2026-04-20T04:00:00.000Z"} +{"doc_count":652,"split_key":16509,"timestamp":"2026-04-20T04:00:00.000Z"} +{"doc_count":605,"split_key":201814,"timestamp":"2026-04-20T04:00:00.000Z"} +{"doc_count":8929,"split_key":203771,"timestamp":"2026-04-20T05:00:00.000Z"} +{"doc_count":3852,"split_key":18881,"timestamp":"2026-04-20T05:00:00.000Z"} +{"doc_count":704,"split_key":201814,"timestamp":"2026-04-20T05:00:00.000Z"} +{"doc_count":614,"split_key":16509,"timestamp":"2026-04-20T05:00:00.000Z"} +{"doc_count":611,"split_key":37963,"timestamp":"2026-04-20T05:00:00.000Z"} +{"doc_count":8677,"split_key":203771,"timestamp":"2026-04-20T06:00:00.000Z"} +{"doc_count":5994,"split_key":211590,"timestamp":"2026-04-20T06:00:00.000Z"} +{"doc_count":3690,"split_key":18881,"timestamp":"2026-04-20T06:00:00.000Z"} +{"doc_count":1038,"split_key":37963,"timestamp":"2026-04-20T06:00:00.000Z"} +{"doc_count":692,"split_key":201814,"timestamp":"2026-04-20T06:00:00.000Z"} +{"doc_count":8684,"split_key":203771,"timestamp":"2026-04-20T07:00:00.000Z"} +{"doc_count":4345,"split_key":211590,"timestamp":"2026-04-20T07:00:00.000Z"} +{"doc_count":3847,"split_key":18881,"timestamp":"2026-04-20T07:00:00.000Z"} +{"doc_count":1013,"split_key":16509,"timestamp":"2026-04-20T07:00:00.000Z"} +{"doc_count":749,"split_key":201814,"timestamp":"2026-04-20T07:00:00.000Z"} +{"doc_count":8605,"split_key":203771,"timestamp":"2026-04-20T08:00:00.000Z"} +{"doc_count":8173,"split_key":211590,"timestamp":"2026-04-20T08:00:00.000Z"} +{"doc_count":3718,"split_key":18881,"timestamp":"2026-04-20T08:00:00.000Z"} +{"doc_count":906,"split_key":37963,"timestamp":"2026-04-20T08:00:00.000Z"} +{"doc_count":794,"split_key":201814,"timestamp":"2026-04-20T08:00:00.000Z"} +{"doc_count":8698,"split_key":203771,"timestamp":"2026-04-20T09:00:00.000Z"} +{"doc_count":8456,"split_key":209334,"timestamp":"2026-04-20T09:00:00.000Z"} +{"doc_count":3205,"split_key":18881,"timestamp":"2026-04-20T09:00:00.000Z"} +{"doc_count":2173,"split_key":211590,"timestamp":"2026-04-20T09:00:00.000Z"} +{"doc_count":606,"split_key":201814,"timestamp":"2026-04-20T09:00:00.000Z"} +{"doc_count":31746,"split_key":209334,"timestamp":"2026-04-20T10:00:00.000Z"} +{"doc_count":6286,"split_key":203771,"timestamp":"2026-04-20T10:00:00.000Z"} +{"doc_count":4981,"split_key":24757,"timestamp":"2026-04-20T10:00:00.000Z"} +{"doc_count":3109,"split_key":18881,"timestamp":"2026-04-20T10:00:00.000Z"} +{"doc_count":946,"split_key":37963,"timestamp":"2026-04-20T10:00:00.000Z"} +{"doc_count":24947,"split_key":209334,"timestamp":"2026-04-20T11:00:00.000Z"} +{"doc_count":3592,"split_key":203771,"timestamp":"2026-04-20T11:00:00.000Z"} +{"doc_count":2970,"split_key":18881,"timestamp":"2026-04-20T11:00:00.000Z"} +{"doc_count":2175,"split_key":211590,"timestamp":"2026-04-20T11:00:00.000Z"} +{"doc_count":1453,"split_key":45899,"timestamp":"2026-04-20T11:00:00.000Z"} +{"doc_count":26327,"split_key":209334,"timestamp":"2026-04-20T12:00:00.000Z"} +{"doc_count":3121,"split_key":18881,"timestamp":"2026-04-20T12:00:00.000Z"} +{"doc_count":2924,"split_key":209605,"timestamp":"2026-04-20T12:00:00.000Z"} +{"doc_count":2428,"split_key":211590,"timestamp":"2026-04-20T12:00:00.000Z"} +{"doc_count":1534,"split_key":203771,"timestamp":"2026-04-20T12:00:00.000Z"} +{"doc_count":28606,"split_key":209334,"timestamp":"2026-04-20T13:00:00.000Z"} +{"doc_count":3038,"split_key":18881,"timestamp":"2026-04-20T13:00:00.000Z"} +{"doc_count":2686,"split_key":203771,"timestamp":"2026-04-20T13:00:00.000Z"} +{"doc_count":967,"split_key":201401,"timestamp":"2026-04-20T13:00:00.000Z"} +{"doc_count":602,"split_key":201814,"timestamp":"2026-04-20T13:00:00.000Z"} +{"doc_count":21016,"split_key":209334,"timestamp":"2026-04-20T14:00:00.000Z"} +{"doc_count":2910,"split_key":18881,"timestamp":"2026-04-20T14:00:00.000Z"} +{"doc_count":1443,"split_key":203771,"timestamp":"2026-04-20T14:00:00.000Z"} +{"doc_count":1035,"split_key":201401,"timestamp":"2026-04-20T14:00:00.000Z"} +{"doc_count":759,"split_key":49870,"timestamp":"2026-04-20T14:00:00.000Z"} +{"doc_count":2740,"split_key":18881,"timestamp":"2026-04-20T15:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-20T15:00:00.000Z"} +{"doc_count":1536,"split_key":49870,"timestamp":"2026-04-20T15:00:00.000Z"} +{"doc_count":675,"split_key":16509,"timestamp":"2026-04-20T15:00:00.000Z"} +{"doc_count":615,"split_key":201814,"timestamp":"2026-04-20T15:00:00.000Z"} +{"doc_count":3142,"split_key":18881,"timestamp":"2026-04-20T16:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-20T16:00:00.000Z"} +{"doc_count":877,"split_key":23470,"timestamp":"2026-04-20T16:00:00.000Z"} +{"doc_count":788,"split_key":16509,"timestamp":"2026-04-20T16:00:00.000Z"} +{"doc_count":602,"split_key":12479,"timestamp":"2026-04-20T16:00:00.000Z"} +{"doc_count":6516,"split_key":211590,"timestamp":"2026-04-20T17:00:00.000Z"} +{"doc_count":5933,"split_key":203771,"timestamp":"2026-04-20T17:00:00.000Z"} +{"doc_count":3038,"split_key":18881,"timestamp":"2026-04-20T17:00:00.000Z"} +{"doc_count":1302,"split_key":212193,"timestamp":"2026-04-20T17:00:00.000Z"} +{"doc_count":899,"split_key":45102,"timestamp":"2026-04-20T17:00:00.000Z"} +{"doc_count":3027,"split_key":18881,"timestamp":"2026-04-20T18:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-20T18:00:00.000Z"} +{"doc_count":2141,"split_key":212193,"timestamp":"2026-04-20T18:00:00.000Z"} +{"doc_count":741,"split_key":209334,"timestamp":"2026-04-20T18:00:00.000Z"} +{"doc_count":662,"split_key":37963,"timestamp":"2026-04-20T18:00:00.000Z"} +{"doc_count":6000,"split_key":211590,"timestamp":"2026-04-20T19:00:00.000Z"} +{"doc_count":2815,"split_key":18881,"timestamp":"2026-04-20T19:00:00.000Z"} +{"doc_count":1217,"split_key":203771,"timestamp":"2026-04-20T19:00:00.000Z"} +{"doc_count":798,"split_key":37963,"timestamp":"2026-04-20T19:00:00.000Z"} +{"doc_count":711,"split_key":16509,"timestamp":"2026-04-20T19:00:00.000Z"} +{"doc_count":2907,"split_key":18881,"timestamp":"2026-04-20T20:00:00.000Z"} +{"doc_count":1008,"split_key":37963,"timestamp":"2026-04-20T20:00:00.000Z"} +{"doc_count":800,"split_key":16509,"timestamp":"2026-04-20T20:00:00.000Z"} +{"doc_count":616,"split_key":201814,"timestamp":"2026-04-20T20:00:00.000Z"} +{"doc_count":494,"split_key":135377,"timestamp":"2026-04-20T20:00:00.000Z"} +{"doc_count":2870,"split_key":18881,"timestamp":"2026-04-20T21:00:00.000Z"} +{"doc_count":2176,"split_key":211590,"timestamp":"2026-04-20T21:00:00.000Z"} +{"doc_count":1592,"split_key":215238,"timestamp":"2026-04-20T21:00:00.000Z"} +{"doc_count":1458,"split_key":203771,"timestamp":"2026-04-20T21:00:00.000Z"} +{"doc_count":686,"split_key":36352,"timestamp":"2026-04-20T21:00:00.000Z"} +{"doc_count":3059,"split_key":18881,"timestamp":"2026-04-20T22:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-20T22:00:00.000Z"} +{"doc_count":620,"split_key":16509,"timestamp":"2026-04-20T22:00:00.000Z"} +{"doc_count":599,"split_key":201814,"timestamp":"2026-04-20T22:00:00.000Z"} +{"doc_count":565,"split_key":37963,"timestamp":"2026-04-20T22:00:00.000Z"} +{"doc_count":4400,"split_key":211590,"timestamp":"2026-04-20T23:00:00.000Z"} +{"doc_count":2663,"split_key":18881,"timestamp":"2026-04-20T23:00:00.000Z"} +{"doc_count":608,"split_key":201814,"timestamp":"2026-04-20T23:00:00.000Z"} +{"doc_count":541,"split_key":37963,"timestamp":"2026-04-20T23:00:00.000Z"} +{"doc_count":519,"split_key":396982,"timestamp":"2026-04-20T23:00:00.000Z"} +{"doc_count":6000,"split_key":211590,"timestamp":"2026-04-21T00:00:00.000Z"} +{"doc_count":2817,"split_key":18881,"timestamp":"2026-04-21T00:00:00.000Z"} +{"doc_count":854,"split_key":396982,"timestamp":"2026-04-21T00:00:00.000Z"} +{"doc_count":580,"split_key":201814,"timestamp":"2026-04-21T00:00:00.000Z"} +{"doc_count":549,"split_key":37963,"timestamp":"2026-04-21T00:00:00.000Z"} +{"doc_count":2872,"split_key":18881,"timestamp":"2026-04-21T01:00:00.000Z"} +{"doc_count":653,"split_key":16509,"timestamp":"2026-04-21T01:00:00.000Z"} +{"doc_count":609,"split_key":201814,"timestamp":"2026-04-21T01:00:00.000Z"} +{"doc_count":516,"split_key":49870,"timestamp":"2026-04-21T01:00:00.000Z"} +{"doc_count":468,"split_key":37963,"timestamp":"2026-04-21T01:00:00.000Z"} +{"doc_count":2976,"split_key":18881,"timestamp":"2026-04-21T02:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-21T02:00:00.000Z"} +{"doc_count":767,"split_key":16509,"timestamp":"2026-04-21T02:00:00.000Z"} +{"doc_count":567,"split_key":201814,"timestamp":"2026-04-21T02:00:00.000Z"} +{"doc_count":512,"split_key":49870,"timestamp":"2026-04-21T02:00:00.000Z"} +{"doc_count":3092,"split_key":18881,"timestamp":"2026-04-21T03:00:00.000Z"} +{"doc_count":715,"split_key":16509,"timestamp":"2026-04-21T03:00:00.000Z"} +{"doc_count":609,"split_key":201814,"timestamp":"2026-04-21T03:00:00.000Z"} +{"doc_count":459,"split_key":396982,"timestamp":"2026-04-21T03:00:00.000Z"} +{"doc_count":381,"split_key":37963,"timestamp":"2026-04-21T03:00:00.000Z"} +{"doc_count":3942,"split_key":18881,"timestamp":"2026-04-21T04:00:00.000Z"} +{"doc_count":812,"split_key":16509,"timestamp":"2026-04-21T04:00:00.000Z"} +{"doc_count":642,"split_key":201814,"timestamp":"2026-04-21T04:00:00.000Z"} +{"doc_count":510,"split_key":49870,"timestamp":"2026-04-21T04:00:00.000Z"} +{"doc_count":485,"split_key":396982,"timestamp":"2026-04-21T04:00:00.000Z"} +{"doc_count":3947,"split_key":18881,"timestamp":"2026-04-21T05:00:00.000Z"} +{"doc_count":875,"split_key":396982,"timestamp":"2026-04-21T05:00:00.000Z"} +{"doc_count":854,"split_key":37963,"timestamp":"2026-04-21T05:00:00.000Z"} +{"doc_count":687,"split_key":201814,"timestamp":"2026-04-21T05:00:00.000Z"} +{"doc_count":677,"split_key":16509,"timestamp":"2026-04-21T05:00:00.000Z"} +{"doc_count":3429,"split_key":18881,"timestamp":"2026-04-21T06:00:00.000Z"} +{"doc_count":1245,"split_key":201814,"timestamp":"2026-04-21T06:00:00.000Z"} +{"doc_count":1046,"split_key":211590,"timestamp":"2026-04-21T06:00:00.000Z"} +{"doc_count":817,"split_key":37963,"timestamp":"2026-04-21T06:00:00.000Z"} +{"doc_count":474,"split_key":23650,"timestamp":"2026-04-21T06:00:00.000Z"} +{"doc_count":6095,"split_key":211590,"timestamp":"2026-04-21T07:00:00.000Z"} +{"doc_count":3630,"split_key":18881,"timestamp":"2026-04-21T07:00:00.000Z"} +{"doc_count":1258,"split_key":37963,"timestamp":"2026-04-21T07:00:00.000Z"} +{"doc_count":595,"split_key":201814,"timestamp":"2026-04-21T07:00:00.000Z"} +{"doc_count":488,"split_key":16509,"timestamp":"2026-04-21T07:00:00.000Z"} +{"doc_count":3483,"split_key":18881,"timestamp":"2026-04-21T08:00:00.000Z"} +{"doc_count":2247,"split_key":211590,"timestamp":"2026-04-21T08:00:00.000Z"} +{"doc_count":1620,"split_key":37963,"timestamp":"2026-04-21T08:00:00.000Z"} +{"doc_count":789,"split_key":16509,"timestamp":"2026-04-21T08:00:00.000Z"} +{"doc_count":602,"split_key":201814,"timestamp":"2026-04-21T08:00:00.000Z"} +{"doc_count":12971,"split_key":138915,"timestamp":"2026-04-21T09:00:00.000Z"} +{"doc_count":8243,"split_key":209334,"timestamp":"2026-04-21T09:00:00.000Z"} +{"doc_count":6404,"split_key":14061,"timestamp":"2026-04-21T09:00:00.000Z"} +{"doc_count":6000,"split_key":211590,"timestamp":"2026-04-21T09:00:00.000Z"} +{"doc_count":3285,"split_key":18881,"timestamp":"2026-04-21T09:00:00.000Z"} +{"doc_count":27522,"split_key":209334,"timestamp":"2026-04-21T10:00:00.000Z"} +{"doc_count":3765,"split_key":18881,"timestamp":"2026-04-21T10:00:00.000Z"} +{"doc_count":1466,"split_key":37963,"timestamp":"2026-04-21T10:00:00.000Z"} +{"doc_count":1447,"split_key":211590,"timestamp":"2026-04-21T10:00:00.000Z"} +{"doc_count":869,"split_key":201401,"timestamp":"2026-04-21T10:00:00.000Z"} +{"doc_count":24212,"split_key":209334,"timestamp":"2026-04-21T11:00:00.000Z"} +{"doc_count":3722,"split_key":18881,"timestamp":"2026-04-21T11:00:00.000Z"} +{"doc_count":1084,"split_key":37963,"timestamp":"2026-04-21T11:00:00.000Z"} +{"doc_count":834,"split_key":211590,"timestamp":"2026-04-21T11:00:00.000Z"} +{"doc_count":680,"split_key":201401,"timestamp":"2026-04-21T11:00:00.000Z"} +{"doc_count":23129,"split_key":209334,"timestamp":"2026-04-21T12:00:00.000Z"} +{"doc_count":3601,"split_key":18881,"timestamp":"2026-04-21T12:00:00.000Z"} +{"doc_count":1109,"split_key":37963,"timestamp":"2026-04-21T12:00:00.000Z"} +{"doc_count":1013,"split_key":201401,"timestamp":"2026-04-21T12:00:00.000Z"} +{"doc_count":589,"split_key":201814,"timestamp":"2026-04-21T12:00:00.000Z"} +{"doc_count":21729,"split_key":209334,"timestamp":"2026-04-21T13:00:00.000Z"} +{"doc_count":3934,"split_key":211590,"timestamp":"2026-04-21T13:00:00.000Z"} +{"doc_count":2747,"split_key":18881,"timestamp":"2026-04-21T13:00:00.000Z"} +{"doc_count":1052,"split_key":37963,"timestamp":"2026-04-21T13:00:00.000Z"} +{"doc_count":947,"split_key":201401,"timestamp":"2026-04-21T13:00:00.000Z"} +{"doc_count":24829,"split_key":209334,"timestamp":"2026-04-21T14:00:00.000Z"} +{"doc_count":3266,"split_key":18881,"timestamp":"2026-04-21T14:00:00.000Z"} +{"doc_count":1054,"split_key":37963,"timestamp":"2026-04-21T14:00:00.000Z"} +{"doc_count":859,"split_key":201401,"timestamp":"2026-04-21T14:00:00.000Z"} +{"doc_count":791,"split_key":211590,"timestamp":"2026-04-21T14:00:00.000Z"} +{"doc_count":11042,"split_key":209334,"timestamp":"2026-04-21T15:00:00.000Z"} +{"doc_count":5719,"split_key":211590,"timestamp":"2026-04-21T15:00:00.000Z"} +{"doc_count":4044,"split_key":18881,"timestamp":"2026-04-21T15:00:00.000Z"} +{"doc_count":1048,"split_key":37963,"timestamp":"2026-04-21T15:00:00.000Z"} +{"doc_count":525,"split_key":49870,"timestamp":"2026-04-21T15:00:00.000Z"} +{"doc_count":5435,"split_key":211590,"timestamp":"2026-04-21T16:00:00.000Z"} +{"doc_count":3668,"split_key":18881,"timestamp":"2026-04-21T16:00:00.000Z"} +{"doc_count":1135,"split_key":37963,"timestamp":"2026-04-21T16:00:00.000Z"} +{"doc_count":764,"split_key":16509,"timestamp":"2026-04-21T16:00:00.000Z"} +{"doc_count":411,"split_key":214295,"timestamp":"2026-04-21T16:00:00.000Z"} +{"doc_count":3599,"split_key":18881,"timestamp":"2026-04-21T17:00:00.000Z"} +{"doc_count":1645,"split_key":37963,"timestamp":"2026-04-21T17:00:00.000Z"} +{"doc_count":587,"split_key":396982,"timestamp":"2026-04-21T17:00:00.000Z"} +{"doc_count":524,"split_key":49870,"timestamp":"2026-04-21T17:00:00.000Z"} +{"doc_count":394,"split_key":16509,"timestamp":"2026-04-21T17:00:00.000Z"} +{"doc_count":3266,"split_key":18881,"timestamp":"2026-04-21T18:00:00.000Z"} +{"doc_count":1342,"split_key":37963,"timestamp":"2026-04-21T18:00:00.000Z"} +{"doc_count":1178,"split_key":51396,"timestamp":"2026-04-21T18:00:00.000Z"} +{"doc_count":632,"split_key":16509,"timestamp":"2026-04-21T18:00:00.000Z"} +{"doc_count":594,"split_key":135377,"timestamp":"2026-04-21T18:00:00.000Z"} +{"doc_count":2980,"split_key":18881,"timestamp":"2026-04-21T19:00:00.000Z"} +{"doc_count":2374,"split_key":203771,"timestamp":"2026-04-21T19:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-21T19:00:00.000Z"} +{"doc_count":1096,"split_key":37963,"timestamp":"2026-04-21T19:00:00.000Z"} +{"doc_count":776,"split_key":209605,"timestamp":"2026-04-21T19:00:00.000Z"} +{"doc_count":3421,"split_key":18881,"timestamp":"2026-04-21T20:00:00.000Z"} +{"doc_count":2569,"split_key":37963,"timestamp":"2026-04-21T20:00:00.000Z"} +{"doc_count":2173,"split_key":211590,"timestamp":"2026-04-21T20:00:00.000Z"} +{"doc_count":775,"split_key":209605,"timestamp":"2026-04-21T20:00:00.000Z"} +{"doc_count":520,"split_key":51396,"timestamp":"2026-04-21T20:00:00.000Z"} +{"doc_count":6001,"split_key":211590,"timestamp":"2026-04-21T21:00:00.000Z"} +{"doc_count":3128,"split_key":18881,"timestamp":"2026-04-21T21:00:00.000Z"} +{"doc_count":2693,"split_key":37963,"timestamp":"2026-04-21T21:00:00.000Z"} +{"doc_count":775,"split_key":209605,"timestamp":"2026-04-21T21:00:00.000Z"} +{"doc_count":678,"split_key":396982,"timestamp":"2026-04-21T21:00:00.000Z"} +{"doc_count":3732,"split_key":205733,"timestamp":"2026-04-21T22:00:00.000Z"} +{"doc_count":3099,"split_key":18881,"timestamp":"2026-04-21T22:00:00.000Z"} +{"doc_count":3065,"split_key":37963,"timestamp":"2026-04-21T22:00:00.000Z"} +{"doc_count":1464,"split_key":49981,"timestamp":"2026-04-21T22:00:00.000Z"} +{"doc_count":1303,"split_key":203771,"timestamp":"2026-04-21T22:00:00.000Z"} +{"doc_count":3689,"split_key":18881,"timestamp":"2026-04-21T23:00:00.000Z"} +{"doc_count":3381,"split_key":49981,"timestamp":"2026-04-21T23:00:00.000Z"} +{"doc_count":2561,"split_key":37963,"timestamp":"2026-04-21T23:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-21T23:00:00.000Z"} +{"doc_count":617,"split_key":201814,"timestamp":"2026-04-21T23:00:00.000Z"} +{"doc_count":3551,"split_key":18881,"timestamp":"2026-04-22T00:00:00.000Z"} +{"doc_count":2366,"split_key":37963,"timestamp":"2026-04-22T00:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-22T00:00:00.000Z"} +{"doc_count":598,"split_key":201814,"timestamp":"2026-04-22T00:00:00.000Z"} +{"doc_count":526,"split_key":396982,"timestamp":"2026-04-22T00:00:00.000Z"} +{"doc_count":3742,"split_key":18881,"timestamp":"2026-04-22T01:00:00.000Z"} +{"doc_count":2551,"split_key":211590,"timestamp":"2026-04-22T01:00:00.000Z"} +{"doc_count":1787,"split_key":37963,"timestamp":"2026-04-22T01:00:00.000Z"} +{"doc_count":628,"split_key":201814,"timestamp":"2026-04-22T01:00:00.000Z"} +{"doc_count":530,"split_key":396982,"timestamp":"2026-04-22T01:00:00.000Z"} +{"doc_count":4021,"split_key":18881,"timestamp":"2026-04-22T02:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-22T02:00:00.000Z"} +{"doc_count":933,"split_key":16509,"timestamp":"2026-04-22T02:00:00.000Z"} +{"doc_count":912,"split_key":37963,"timestamp":"2026-04-22T02:00:00.000Z"} +{"doc_count":780,"split_key":396982,"timestamp":"2026-04-22T02:00:00.000Z"} +{"doc_count":4205,"split_key":18881,"timestamp":"2026-04-22T03:00:00.000Z"} +{"doc_count":681,"split_key":16509,"timestamp":"2026-04-22T03:00:00.000Z"} +{"doc_count":596,"split_key":201814,"timestamp":"2026-04-22T03:00:00.000Z"} +{"doc_count":394,"split_key":209605,"timestamp":"2026-04-22T03:00:00.000Z"} +{"doc_count":381,"split_key":396982,"timestamp":"2026-04-22T03:00:00.000Z"} +{"doc_count":4129,"split_key":18881,"timestamp":"2026-04-22T04:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-22T04:00:00.000Z"} +{"doc_count":597,"split_key":16509,"timestamp":"2026-04-22T04:00:00.000Z"} +{"doc_count":589,"split_key":201814,"timestamp":"2026-04-22T04:00:00.000Z"} +{"doc_count":572,"split_key":45102,"timestamp":"2026-04-22T04:00:00.000Z"} +{"doc_count":5339,"split_key":18881,"timestamp":"2026-04-22T05:00:00.000Z"} +{"doc_count":4649,"split_key":211590,"timestamp":"2026-04-22T05:00:00.000Z"} +{"doc_count":1309,"split_key":37963,"timestamp":"2026-04-22T05:00:00.000Z"} +{"doc_count":881,"split_key":45102,"timestamp":"2026-04-22T05:00:00.000Z"} +{"doc_count":749,"split_key":396982,"timestamp":"2026-04-22T05:00:00.000Z"} +{"doc_count":5443,"split_key":18881,"timestamp":"2026-04-22T06:00:00.000Z"} +{"doc_count":3791,"split_key":211590,"timestamp":"2026-04-22T06:00:00.000Z"} +{"doc_count":1530,"split_key":37963,"timestamp":"2026-04-22T06:00:00.000Z"} +{"doc_count":623,"split_key":201814,"timestamp":"2026-04-22T06:00:00.000Z"} +{"doc_count":575,"split_key":51396,"timestamp":"2026-04-22T06:00:00.000Z"} +{"doc_count":2173,"split_key":211590,"timestamp":"2026-04-22T07:00:00.000Z"} +{"doc_count":1167,"split_key":37963,"timestamp":"2026-04-22T07:00:00.000Z"} +{"doc_count":938,"split_key":18881,"timestamp":"2026-04-22T07:00:00.000Z"} +{"doc_count":716,"split_key":16509,"timestamp":"2026-04-22T07:00:00.000Z"} +{"doc_count":591,"split_key":201814,"timestamp":"2026-04-22T07:00:00.000Z"} +{"doc_count":11048,"split_key":211590,"timestamp":"2026-04-22T08:00:00.000Z"} +{"doc_count":1112,"split_key":37963,"timestamp":"2026-04-22T08:00:00.000Z"} +{"doc_count":825,"split_key":16509,"timestamp":"2026-04-22T08:00:00.000Z"} +{"doc_count":580,"split_key":201814,"timestamp":"2026-04-22T08:00:00.000Z"} +{"doc_count":526,"split_key":209605,"timestamp":"2026-04-22T08:00:00.000Z"} +{"doc_count":10964,"split_key":209334,"timestamp":"2026-04-22T09:00:00.000Z"} +{"doc_count":6932,"split_key":14061,"timestamp":"2026-04-22T09:00:00.000Z"} +{"doc_count":5817,"split_key":211590,"timestamp":"2026-04-22T09:00:00.000Z"} +{"doc_count":1554,"split_key":37963,"timestamp":"2026-04-22T09:00:00.000Z"} +{"doc_count":775,"split_key":209605,"timestamp":"2026-04-22T09:00:00.000Z"} +{"doc_count":24003,"split_key":209334,"timestamp":"2026-04-22T10:00:00.000Z"} +{"doc_count":4344,"split_key":211590,"timestamp":"2026-04-22T10:00:00.000Z"} +{"doc_count":2142,"split_key":37963,"timestamp":"2026-04-22T10:00:00.000Z"} +{"doc_count":1776,"split_key":14061,"timestamp":"2026-04-22T10:00:00.000Z"} +{"doc_count":1008,"split_key":201401,"timestamp":"2026-04-22T10:00:00.000Z"} +{"doc_count":32274,"split_key":209334,"timestamp":"2026-04-22T11:00:00.000Z"} +{"doc_count":4345,"split_key":211590,"timestamp":"2026-04-22T11:00:00.000Z"} +{"doc_count":1383,"split_key":37963,"timestamp":"2026-04-22T11:00:00.000Z"} +{"doc_count":1038,"split_key":201401,"timestamp":"2026-04-22T11:00:00.000Z"} +{"doc_count":752,"split_key":209605,"timestamp":"2026-04-22T11:00:00.000Z"} +{"doc_count":22862,"split_key":209334,"timestamp":"2026-04-22T12:00:00.000Z"} +{"doc_count":6002,"split_key":211590,"timestamp":"2026-04-22T12:00:00.000Z"} +{"doc_count":1769,"split_key":136190,"timestamp":"2026-04-22T12:00:00.000Z"} +{"doc_count":1317,"split_key":37963,"timestamp":"2026-04-22T12:00:00.000Z"} +{"doc_count":1038,"split_key":201401,"timestamp":"2026-04-22T12:00:00.000Z"} +{"doc_count":22473,"split_key":209334,"timestamp":"2026-04-22T13:00:00.000Z"} +{"doc_count":7062,"split_key":53158,"timestamp":"2026-04-22T13:00:00.000Z"} +{"doc_count":6602,"split_key":211590,"timestamp":"2026-04-22T13:00:00.000Z"} +{"doc_count":6029,"split_key":51167,"timestamp":"2026-04-22T13:00:00.000Z"} +{"doc_count":2932,"split_key":136190,"timestamp":"2026-04-22T13:00:00.000Z"} +{"doc_count":23876,"split_key":209334,"timestamp":"2026-04-22T14:00:00.000Z"} +{"doc_count":887,"split_key":201401,"timestamp":"2026-04-22T14:00:00.000Z"} +{"doc_count":640,"split_key":201814,"timestamp":"2026-04-22T14:00:00.000Z"} +{"doc_count":617,"split_key":209605,"timestamp":"2026-04-22T14:00:00.000Z"} +{"doc_count":593,"split_key":45102,"timestamp":"2026-04-22T14:00:00.000Z"} +{"doc_count":6784,"split_key":211590,"timestamp":"2026-04-22T15:00:00.000Z"} +{"doc_count":2787,"split_key":209334,"timestamp":"2026-04-22T15:00:00.000Z"} +{"doc_count":1517,"split_key":45102,"timestamp":"2026-04-22T15:00:00.000Z"} +{"doc_count":728,"split_key":209605,"timestamp":"2026-04-22T15:00:00.000Z"} +{"doc_count":635,"split_key":201814,"timestamp":"2026-04-22T15:00:00.000Z"} +{"doc_count":5468,"split_key":211590,"timestamp":"2026-04-22T16:00:00.000Z"} +{"doc_count":1593,"split_key":45102,"timestamp":"2026-04-22T16:00:00.000Z"} +{"doc_count":885,"split_key":214295,"timestamp":"2026-04-22T16:00:00.000Z"} +{"doc_count":753,"split_key":141995,"timestamp":"2026-04-22T16:00:00.000Z"} +{"doc_count":750,"split_key":209605,"timestamp":"2026-04-22T16:00:00.000Z"} +{"doc_count":1550,"split_key":45102,"timestamp":"2026-04-22T17:00:00.000Z"} +{"doc_count":1092,"split_key":214295,"timestamp":"2026-04-22T17:00:00.000Z"} +{"doc_count":776,"split_key":16509,"timestamp":"2026-04-22T17:00:00.000Z"} +{"doc_count":621,"split_key":201814,"timestamp":"2026-04-22T17:00:00.000Z"} +{"doc_count":515,"split_key":49870,"timestamp":"2026-04-22T17:00:00.000Z"} +{"doc_count":1090,"split_key":214295,"timestamp":"2026-04-22T18:00:00.000Z"} +{"doc_count":680,"split_key":396982,"timestamp":"2026-04-22T18:00:00.000Z"} +{"doc_count":630,"split_key":201814,"timestamp":"2026-04-22T18:00:00.000Z"} +{"doc_count":596,"split_key":16509,"timestamp":"2026-04-22T18:00:00.000Z"} +{"doc_count":500,"split_key":135377,"timestamp":"2026-04-22T18:00:00.000Z"} +{"doc_count":4680,"split_key":211590,"timestamp":"2026-04-22T19:00:00.000Z"} +{"doc_count":1137,"split_key":214295,"timestamp":"2026-04-22T19:00:00.000Z"} +{"doc_count":637,"split_key":201814,"timestamp":"2026-04-22T19:00:00.000Z"} +{"doc_count":522,"split_key":49870,"timestamp":"2026-04-22T19:00:00.000Z"} +{"doc_count":401,"split_key":16509,"timestamp":"2026-04-22T19:00:00.000Z"} +{"doc_count":1150,"split_key":214295,"timestamp":"2026-04-22T20:00:00.000Z"} +{"doc_count":666,"split_key":201814,"timestamp":"2026-04-22T20:00:00.000Z"} +{"doc_count":400,"split_key":37963,"timestamp":"2026-04-22T20:00:00.000Z"} +{"doc_count":374,"split_key":16509,"timestamp":"2026-04-22T20:00:00.000Z"} +{"doc_count":370,"split_key":398324,"timestamp":"2026-04-22T20:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-22T21:00:00.000Z"} +{"doc_count":1120,"split_key":214295,"timestamp":"2026-04-22T21:00:00.000Z"} +{"doc_count":623,"split_key":201814,"timestamp":"2026-04-22T21:00:00.000Z"} +{"doc_count":520,"split_key":49870,"timestamp":"2026-04-22T21:00:00.000Z"} +{"doc_count":376,"split_key":396982,"timestamp":"2026-04-22T21:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-22T22:00:00.000Z"} +{"doc_count":1110,"split_key":396982,"timestamp":"2026-04-22T22:00:00.000Z"} +{"doc_count":1087,"split_key":214295,"timestamp":"2026-04-22T22:00:00.000Z"} +{"doc_count":971,"split_key":49870,"timestamp":"2026-04-22T22:00:00.000Z"} +{"doc_count":642,"split_key":201814,"timestamp":"2026-04-22T22:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-22T23:00:00.000Z"} +{"doc_count":1060,"split_key":214295,"timestamp":"2026-04-22T23:00:00.000Z"} +{"doc_count":614,"split_key":201814,"timestamp":"2026-04-22T23:00:00.000Z"} +{"doc_count":602,"split_key":396982,"timestamp":"2026-04-22T23:00:00.000Z"} +{"doc_count":380,"split_key":16509,"timestamp":"2026-04-22T23:00:00.000Z"} +{"doc_count":1101,"split_key":214295,"timestamp":"2026-04-23T00:00:00.000Z"} +{"doc_count":866,"split_key":37963,"timestamp":"2026-04-23T00:00:00.000Z"} +{"doc_count":766,"split_key":211590,"timestamp":"2026-04-23T00:00:00.000Z"} +{"doc_count":608,"split_key":201814,"timestamp":"2026-04-23T00:00:00.000Z"} +{"doc_count":576,"split_key":396982,"timestamp":"2026-04-23T00:00:00.000Z"} +{"doc_count":1089,"split_key":214295,"timestamp":"2026-04-23T01:00:00.000Z"} +{"doc_count":1069,"split_key":37963,"timestamp":"2026-04-23T01:00:00.000Z"} +{"doc_count":808,"split_key":396982,"timestamp":"2026-04-23T01:00:00.000Z"} +{"doc_count":734,"split_key":51396,"timestamp":"2026-04-23T01:00:00.000Z"} +{"doc_count":664,"split_key":201814,"timestamp":"2026-04-23T01:00:00.000Z"} +{"doc_count":1106,"split_key":37963,"timestamp":"2026-04-23T02:00:00.000Z"} +{"doc_count":1066,"split_key":214295,"timestamp":"2026-04-23T02:00:00.000Z"} +{"doc_count":911,"split_key":16509,"timestamp":"2026-04-23T02:00:00.000Z"} +{"doc_count":801,"split_key":51396,"timestamp":"2026-04-23T02:00:00.000Z"} +{"doc_count":669,"split_key":396982,"timestamp":"2026-04-23T02:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-23T03:00:00.000Z"} +{"doc_count":1281,"split_key":37963,"timestamp":"2026-04-23T03:00:00.000Z"} +{"doc_count":1055,"split_key":214295,"timestamp":"2026-04-23T03:00:00.000Z"} +{"doc_count":924,"split_key":16509,"timestamp":"2026-04-23T03:00:00.000Z"} +{"doc_count":734,"split_key":14061,"timestamp":"2026-04-23T03:00:00.000Z"} +{"doc_count":3099,"split_key":14061,"timestamp":"2026-04-23T04:00:00.000Z"} +{"doc_count":1309,"split_key":37963,"timestamp":"2026-04-23T04:00:00.000Z"} +{"doc_count":1170,"split_key":16509,"timestamp":"2026-04-23T04:00:00.000Z"} +{"doc_count":1116,"split_key":214295,"timestamp":"2026-04-23T04:00:00.000Z"} +{"doc_count":622,"split_key":201814,"timestamp":"2026-04-23T04:00:00.000Z"} +{"doc_count":3801,"split_key":14061,"timestamp":"2026-04-23T05:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-23T05:00:00.000Z"} +{"doc_count":1351,"split_key":15735,"timestamp":"2026-04-23T05:00:00.000Z"} +{"doc_count":1118,"split_key":214295,"timestamp":"2026-04-23T05:00:00.000Z"} +{"doc_count":804,"split_key":16509,"timestamp":"2026-04-23T05:00:00.000Z"} +{"doc_count":3610,"split_key":14061,"timestamp":"2026-04-23T06:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-04-23T06:00:00.000Z"} +{"doc_count":1734,"split_key":15735,"timestamp":"2026-04-23T06:00:00.000Z"} +{"doc_count":1369,"split_key":45102,"timestamp":"2026-04-23T06:00:00.000Z"} +{"doc_count":1086,"split_key":214295,"timestamp":"2026-04-23T06:00:00.000Z"} +{"doc_count":3516,"split_key":14061,"timestamp":"2026-04-23T07:00:00.000Z"} +{"doc_count":1323,"split_key":15735,"timestamp":"2026-04-23T07:00:00.000Z"} +{"doc_count":1292,"split_key":45102,"timestamp":"2026-04-23T07:00:00.000Z"} +{"doc_count":1087,"split_key":214295,"timestamp":"2026-04-23T07:00:00.000Z"} +{"doc_count":975,"split_key":16509,"timestamp":"2026-04-23T07:00:00.000Z"} +{"doc_count":4344,"split_key":211590,"timestamp":"2026-04-23T08:00:00.000Z"} +{"doc_count":3504,"split_key":14061,"timestamp":"2026-04-23T08:00:00.000Z"} +{"doc_count":1435,"split_key":45102,"timestamp":"2026-04-23T08:00:00.000Z"} +{"doc_count":1296,"split_key":16509,"timestamp":"2026-04-23T08:00:00.000Z"} +{"doc_count":1084,"split_key":214295,"timestamp":"2026-04-23T08:00:00.000Z"} +{"doc_count":8796,"split_key":209334,"timestamp":"2026-04-23T09:00:00.000Z"} +{"doc_count":5365,"split_key":16509,"timestamp":"2026-04-23T09:00:00.000Z"} +{"doc_count":3504,"split_key":14061,"timestamp":"2026-04-23T09:00:00.000Z"} +{"doc_count":2173,"split_key":211590,"timestamp":"2026-04-23T09:00:00.000Z"} +{"doc_count":1108,"split_key":214295,"timestamp":"2026-04-23T09:00:00.000Z"} +{"doc_count":34436,"split_key":209334,"timestamp":"2026-04-23T10:00:00.000Z"} +{"doc_count":3448,"split_key":14061,"timestamp":"2026-04-23T10:00:00.000Z"} +{"doc_count":1286,"split_key":16509,"timestamp":"2026-04-23T10:00:00.000Z"} +{"doc_count":1285,"split_key":201401,"timestamp":"2026-04-23T10:00:00.000Z"} +{"doc_count":1111,"split_key":214295,"timestamp":"2026-04-23T10:00:00.000Z"} +{"doc_count":29115,"split_key":209334,"timestamp":"2026-04-23T11:00:00.000Z"} +{"doc_count":3319,"split_key":211590,"timestamp":"2026-04-23T11:00:00.000Z"} +{"doc_count":3273,"split_key":14061,"timestamp":"2026-04-23T11:00:00.000Z"} +{"doc_count":2243,"split_key":23470,"timestamp":"2026-04-23T11:00:00.000Z"} +{"doc_count":1093,"split_key":214295,"timestamp":"2026-04-23T11:00:00.000Z"} +{"doc_count":25533,"split_key":209334,"timestamp":"2026-04-23T12:00:00.000Z"} +{"doc_count":8174,"split_key":211590,"timestamp":"2026-04-23T12:00:00.000Z"} +{"doc_count":3033,"split_key":14061,"timestamp":"2026-04-23T12:00:00.000Z"} +{"doc_count":2504,"split_key":136190,"timestamp":"2026-04-23T12:00:00.000Z"} +{"doc_count":1138,"split_key":201401,"timestamp":"2026-04-23T12:00:00.000Z"} +{"doc_count":32110,"split_key":209334,"timestamp":"2026-04-23T13:00:00.000Z"} +{"doc_count":1235,"split_key":201401,"timestamp":"2026-04-23T13:00:00.000Z"} +{"doc_count":1092,"split_key":214295,"timestamp":"2026-04-23T13:00:00.000Z"} +{"doc_count":620,"split_key":16509,"timestamp":"2026-04-23T13:00:00.000Z"} +{"doc_count":620,"split_key":201814,"timestamp":"2026-04-23T13:00:00.000Z"} +{"doc_count":7232,"split_key":209334,"timestamp":"2026-04-23T14:00:00.000Z"} +{"doc_count":2023,"split_key":37963,"timestamp":"2026-04-23T14:00:00.000Z"} +{"doc_count":1095,"split_key":214295,"timestamp":"2026-04-23T14:00:00.000Z"} +{"doc_count":996,"split_key":16509,"timestamp":"2026-04-23T14:00:00.000Z"} +{"doc_count":500,"split_key":201814,"timestamp":"2026-04-23T14:00:00.000Z"} +{"doc_count":1149,"split_key":49870,"timestamp":"2026-04-23T15:00:00.000Z"} +{"doc_count":1134,"split_key":214295,"timestamp":"2026-04-23T15:00:00.000Z"} +{"doc_count":954,"split_key":37963,"timestamp":"2026-04-23T15:00:00.000Z"} +{"doc_count":852,"split_key":16509,"timestamp":"2026-04-23T15:00:00.000Z"} +{"doc_count":557,"split_key":201814,"timestamp":"2026-04-23T15:00:00.000Z"} +{"doc_count":1072,"split_key":214295,"timestamp":"2026-04-23T16:00:00.000Z"} +{"doc_count":921,"split_key":16509,"timestamp":"2026-04-23T16:00:00.000Z"} +{"doc_count":908,"split_key":37963,"timestamp":"2026-04-23T16:00:00.000Z"} +{"doc_count":601,"split_key":201814,"timestamp":"2026-04-23T16:00:00.000Z"} +{"doc_count":556,"split_key":396982,"timestamp":"2026-04-23T16:00:00.000Z"} +{"doc_count":1067,"split_key":214295,"timestamp":"2026-04-23T17:00:00.000Z"} +{"doc_count":1027,"split_key":16509,"timestamp":"2026-04-23T17:00:00.000Z"} +{"doc_count":736,"split_key":396982,"timestamp":"2026-04-23T17:00:00.000Z"} +{"doc_count":693,"split_key":201814,"timestamp":"2026-04-23T17:00:00.000Z"} +{"doc_count":568,"split_key":37963,"timestamp":"2026-04-23T17:00:00.000Z"} +{"doc_count":1081,"split_key":214295,"timestamp":"2026-04-23T18:00:00.000Z"} +{"doc_count":735,"split_key":16509,"timestamp":"2026-04-23T18:00:00.000Z"} +{"doc_count":661,"split_key":37963,"timestamp":"2026-04-23T18:00:00.000Z"} +{"doc_count":650,"split_key":201814,"timestamp":"2026-04-23T18:00:00.000Z"} +{"doc_count":608,"split_key":51396,"timestamp":"2026-04-23T18:00:00.000Z"} +{"doc_count":1000,"split_key":214295,"timestamp":"2026-04-23T19:00:00.000Z"} +{"doc_count":920,"split_key":16509,"timestamp":"2026-04-23T19:00:00.000Z"} +{"doc_count":690,"split_key":51396,"timestamp":"2026-04-23T19:00:00.000Z"} +{"doc_count":637,"split_key":201814,"timestamp":"2026-04-23T19:00:00.000Z"} +{"doc_count":629,"split_key":37963,"timestamp":"2026-04-23T19:00:00.000Z"} +{"doc_count":1115,"split_key":37963,"timestamp":"2026-04-23T20:00:00.000Z"} +{"doc_count":1022,"split_key":214295,"timestamp":"2026-04-23T20:00:00.000Z"} +{"doc_count":759,"split_key":16509,"timestamp":"2026-04-23T20:00:00.000Z"} +{"doc_count":650,"split_key":396982,"timestamp":"2026-04-23T20:00:00.000Z"} +{"doc_count":625,"split_key":201814,"timestamp":"2026-04-23T20:00:00.000Z"} +{"doc_count":7851,"split_key":209604,"timestamp":"2026-04-23T21:00:00.000Z"} +{"doc_count":5284,"split_key":215238,"timestamp":"2026-04-23T21:00:00.000Z"} +{"doc_count":1163,"split_key":203771,"timestamp":"2026-04-23T21:00:00.000Z"} +{"doc_count":847,"split_key":396982,"timestamp":"2026-04-23T21:00:00.000Z"} +{"doc_count":821,"split_key":214295,"timestamp":"2026-04-23T21:00:00.000Z"} +{"doc_count":5373,"split_key":215238,"timestamp":"2026-04-23T22:00:00.000Z"} +{"doc_count":2372,"split_key":51396,"timestamp":"2026-04-23T22:00:00.000Z"} +{"doc_count":1595,"split_key":209604,"timestamp":"2026-04-23T22:00:00.000Z"} +{"doc_count":803,"split_key":214295,"timestamp":"2026-04-23T22:00:00.000Z"} +{"doc_count":720,"split_key":49870,"timestamp":"2026-04-23T22:00:00.000Z"} +{"doc_count":1164,"split_key":45102,"timestamp":"2026-04-23T23:00:00.000Z"} +{"doc_count":909,"split_key":49870,"timestamp":"2026-04-23T23:00:00.000Z"} +{"doc_count":849,"split_key":16509,"timestamp":"2026-04-23T23:00:00.000Z"} +{"doc_count":808,"split_key":214295,"timestamp":"2026-04-23T23:00:00.000Z"} +{"doc_count":625,"split_key":201814,"timestamp":"2026-04-23T23:00:00.000Z"} +{"doc_count":757,"split_key":396982,"timestamp":"2026-04-24T00:00:00.000Z"} +{"doc_count":750,"split_key":214295,"timestamp":"2026-04-24T00:00:00.000Z"} +{"doc_count":654,"split_key":201814,"timestamp":"2026-04-24T00:00:00.000Z"} +{"doc_count":595,"split_key":16509,"timestamp":"2026-04-24T00:00:00.000Z"} +{"doc_count":524,"split_key":49870,"timestamp":"2026-04-24T00:00:00.000Z"} +{"doc_count":837,"split_key":396982,"timestamp":"2026-04-24T01:00:00.000Z"} +{"doc_count":743,"split_key":214295,"timestamp":"2026-04-24T01:00:00.000Z"} +{"doc_count":630,"split_key":201814,"timestamp":"2026-04-24T01:00:00.000Z"} +{"doc_count":591,"split_key":45102,"timestamp":"2026-04-24T01:00:00.000Z"} +{"doc_count":491,"split_key":16509,"timestamp":"2026-04-24T01:00:00.000Z"} +{"doc_count":1663,"split_key":45102,"timestamp":"2026-04-24T02:00:00.000Z"} +{"doc_count":1028,"split_key":49870,"timestamp":"2026-04-24T02:00:00.000Z"} +{"doc_count":878,"split_key":16509,"timestamp":"2026-04-24T02:00:00.000Z"} +{"doc_count":803,"split_key":396982,"timestamp":"2026-04-24T02:00:00.000Z"} +{"doc_count":780,"split_key":214295,"timestamp":"2026-04-24T02:00:00.000Z"} +{"doc_count":2671,"split_key":37963,"timestamp":"2026-04-24T03:00:00.000Z"} +{"doc_count":1700,"split_key":45102,"timestamp":"2026-04-24T03:00:00.000Z"} +{"doc_count":1647,"split_key":49870,"timestamp":"2026-04-24T03:00:00.000Z"} +{"doc_count":771,"split_key":396982,"timestamp":"2026-04-24T03:00:00.000Z"} +{"doc_count":704,"split_key":214295,"timestamp":"2026-04-24T03:00:00.000Z"} +{"doc_count":2250,"split_key":63949,"timestamp":"2026-04-24T04:00:00.000Z"} +{"doc_count":1726,"split_key":37963,"timestamp":"2026-04-24T04:00:00.000Z"} +{"doc_count":1133,"split_key":45102,"timestamp":"2026-04-24T04:00:00.000Z"} +{"doc_count":775,"split_key":214295,"timestamp":"2026-04-24T04:00:00.000Z"} +{"doc_count":755,"split_key":396982,"timestamp":"2026-04-24T04:00:00.000Z"} +{"doc_count":4811,"split_key":63949,"timestamp":"2026-04-24T05:00:00.000Z"} +{"doc_count":1633,"split_key":211590,"timestamp":"2026-04-24T05:00:00.000Z"} +{"doc_count":847,"split_key":214295,"timestamp":"2026-04-24T05:00:00.000Z"} +{"doc_count":836,"split_key":37963,"timestamp":"2026-04-24T05:00:00.000Z"} +{"doc_count":779,"split_key":396982,"timestamp":"2026-04-24T05:00:00.000Z"} +{"doc_count":4032,"split_key":63949,"timestamp":"2026-04-24T06:00:00.000Z"} +{"doc_count":1071,"split_key":211590,"timestamp":"2026-04-24T06:00:00.000Z"} +{"doc_count":777,"split_key":214295,"timestamp":"2026-04-24T06:00:00.000Z"} +{"doc_count":682,"split_key":396982,"timestamp":"2026-04-24T06:00:00.000Z"} +{"doc_count":632,"split_key":201814,"timestamp":"2026-04-24T06:00:00.000Z"} +{"doc_count":4854,"split_key":63949,"timestamp":"2026-04-24T07:00:00.000Z"} +{"doc_count":919,"split_key":45102,"timestamp":"2026-04-24T07:00:00.000Z"} +{"doc_count":848,"split_key":214295,"timestamp":"2026-04-24T07:00:00.000Z"} +{"doc_count":786,"split_key":16509,"timestamp":"2026-04-24T07:00:00.000Z"} +{"doc_count":621,"split_key":201814,"timestamp":"2026-04-24T07:00:00.000Z"} +{"doc_count":4970,"split_key":63949,"timestamp":"2026-04-24T08:00:00.000Z"} +{"doc_count":969,"split_key":45102,"timestamp":"2026-04-24T08:00:00.000Z"} +{"doc_count":929,"split_key":214295,"timestamp":"2026-04-24T08:00:00.000Z"} +{"doc_count":637,"split_key":201814,"timestamp":"2026-04-24T08:00:00.000Z"} +{"doc_count":634,"split_key":16509,"timestamp":"2026-04-24T08:00:00.000Z"} +{"doc_count":15678,"split_key":209334,"timestamp":"2026-04-24T09:00:00.000Z"} +{"doc_count":3535,"split_key":14061,"timestamp":"2026-04-24T09:00:00.000Z"} +{"doc_count":1985,"split_key":63949,"timestamp":"2026-04-24T09:00:00.000Z"} +{"doc_count":1652,"split_key":201814,"timestamp":"2026-04-24T09:00:00.000Z"} +{"doc_count":1159,"split_key":214295,"timestamp":"2026-04-24T09:00:00.000Z"} +{"doc_count":22323,"split_key":209334,"timestamp":"2026-04-24T10:00:00.000Z"} +{"doc_count":4637,"split_key":14061,"timestamp":"2026-04-24T10:00:00.000Z"} +{"doc_count":1974,"split_key":8075,"timestamp":"2026-04-24T10:00:00.000Z"} +{"doc_count":1150,"split_key":214295,"timestamp":"2026-04-24T10:00:00.000Z"} +{"doc_count":966,"split_key":45102,"timestamp":"2026-04-24T10:00:00.000Z"} +{"doc_count":21997,"split_key":209334,"timestamp":"2026-04-24T11:00:00.000Z"} +{"doc_count":3217,"split_key":14061,"timestamp":"2026-04-24T11:00:00.000Z"} +{"doc_count":2479,"split_key":8075,"timestamp":"2026-04-24T11:00:00.000Z"} +{"doc_count":1089,"split_key":214295,"timestamp":"2026-04-24T11:00:00.000Z"} +{"doc_count":943,"split_key":45102,"timestamp":"2026-04-24T11:00:00.000Z"} +{"doc_count":25858,"split_key":209334,"timestamp":"2026-04-24T12:00:00.000Z"} +{"doc_count":2528,"split_key":8075,"timestamp":"2026-04-24T12:00:00.000Z"} +{"doc_count":2168,"split_key":136190,"timestamp":"2026-04-24T12:00:00.000Z"} +{"doc_count":1301,"split_key":45102,"timestamp":"2026-04-24T12:00:00.000Z"} +{"doc_count":1190,"split_key":214295,"timestamp":"2026-04-24T12:00:00.000Z"} +{"doc_count":27359,"split_key":209334,"timestamp":"2026-04-24T13:00:00.000Z"} +{"doc_count":2691,"split_key":136190,"timestamp":"2026-04-24T13:00:00.000Z"} +{"doc_count":2480,"split_key":8075,"timestamp":"2026-04-24T13:00:00.000Z"} +{"doc_count":1165,"split_key":214295,"timestamp":"2026-04-24T13:00:00.000Z"} +{"doc_count":1063,"split_key":201401,"timestamp":"2026-04-24T13:00:00.000Z"} +{"doc_count":21047,"split_key":209334,"timestamp":"2026-04-24T14:00:00.000Z"} +{"doc_count":6002,"split_key":211590,"timestamp":"2026-04-24T14:00:00.000Z"} +{"doc_count":2500,"split_key":8075,"timestamp":"2026-04-24T14:00:00.000Z"} +{"doc_count":1140,"split_key":201401,"timestamp":"2026-04-24T14:00:00.000Z"} +{"doc_count":1095,"split_key":214295,"timestamp":"2026-04-24T14:00:00.000Z"} +{"doc_count":2477,"split_key":8075,"timestamp":"2026-04-24T15:00:00.000Z"} +{"doc_count":2049,"split_key":209334,"timestamp":"2026-04-24T15:00:00.000Z"} +{"doc_count":1079,"split_key":214295,"timestamp":"2026-04-24T15:00:00.000Z"} +{"doc_count":801,"split_key":16509,"timestamp":"2026-04-24T15:00:00.000Z"} +{"doc_count":787,"split_key":49981,"timestamp":"2026-04-24T15:00:00.000Z"} +{"doc_count":1619,"split_key":8075,"timestamp":"2026-04-24T16:00:00.000Z"} +{"doc_count":1107,"split_key":214295,"timestamp":"2026-04-24T16:00:00.000Z"} +{"doc_count":808,"split_key":49981,"timestamp":"2026-04-24T16:00:00.000Z"} +{"doc_count":676,"split_key":16509,"timestamp":"2026-04-24T16:00:00.000Z"} +{"doc_count":623,"split_key":201814,"timestamp":"2026-04-24T16:00:00.000Z"} +{"doc_count":1522,"split_key":8075,"timestamp":"2026-04-24T17:00:00.000Z"} +{"doc_count":1062,"split_key":214295,"timestamp":"2026-04-24T17:00:00.000Z"} +{"doc_count":877,"split_key":49981,"timestamp":"2026-04-24T17:00:00.000Z"} +{"doc_count":696,"split_key":16509,"timestamp":"2026-04-24T17:00:00.000Z"} +{"doc_count":637,"split_key":201814,"timestamp":"2026-04-24T17:00:00.000Z"} +{"doc_count":1708,"split_key":63949,"timestamp":"2026-04-24T18:00:00.000Z"} +{"doc_count":1495,"split_key":8075,"timestamp":"2026-04-24T18:00:00.000Z"} +{"doc_count":1041,"split_key":214295,"timestamp":"2026-04-24T18:00:00.000Z"} +{"doc_count":1030,"split_key":49981,"timestamp":"2026-04-24T18:00:00.000Z"} +{"doc_count":761,"split_key":396982,"timestamp":"2026-04-24T18:00:00.000Z"} +{"doc_count":20547,"split_key":142430,"timestamp":"2026-04-24T19:00:00.000Z"} +{"doc_count":1507,"split_key":8075,"timestamp":"2026-04-24T19:00:00.000Z"} +{"doc_count":1453,"split_key":14061,"timestamp":"2026-04-24T19:00:00.000Z"} +{"doc_count":1146,"split_key":214295,"timestamp":"2026-04-24T19:00:00.000Z"} +{"doc_count":941,"split_key":49981,"timestamp":"2026-04-24T19:00:00.000Z"} +{"doc_count":1480,"split_key":8075,"timestamp":"2026-04-24T20:00:00.000Z"} +{"doc_count":1063,"split_key":214295,"timestamp":"2026-04-24T20:00:00.000Z"} +{"doc_count":564,"split_key":396982,"timestamp":"2026-04-24T20:00:00.000Z"} +{"doc_count":462,"split_key":37963,"timestamp":"2026-04-24T20:00:00.000Z"} +{"doc_count":347,"split_key":45899,"timestamp":"2026-04-24T20:00:00.000Z"} +{"doc_count":31938,"split_key":142430,"timestamp":"2026-04-24T21:00:00.000Z"} +{"doc_count":1761,"split_key":211590,"timestamp":"2026-04-24T21:00:00.000Z"} +{"doc_count":1499,"split_key":8075,"timestamp":"2026-04-24T21:00:00.000Z"} +{"doc_count":1045,"split_key":214295,"timestamp":"2026-04-24T21:00:00.000Z"} +{"doc_count":795,"split_key":14061,"timestamp":"2026-04-24T21:00:00.000Z"} +{"doc_count":34050,"split_key":142430,"timestamp":"2026-04-24T22:00:00.000Z"} +{"doc_count":1805,"split_key":203771,"timestamp":"2026-04-24T22:00:00.000Z"} +{"doc_count":1091,"split_key":214295,"timestamp":"2026-04-24T22:00:00.000Z"} +{"doc_count":902,"split_key":8075,"timestamp":"2026-04-24T22:00:00.000Z"} +{"doc_count":691,"split_key":215238,"timestamp":"2026-04-24T22:00:00.000Z"} +{"doc_count":17958,"split_key":142430,"timestamp":"2026-04-24T23:00:00.000Z"} +{"doc_count":3063,"split_key":215238,"timestamp":"2026-04-24T23:00:00.000Z"} +{"doc_count":1110,"split_key":214295,"timestamp":"2026-04-24T23:00:00.000Z"} +{"doc_count":633,"split_key":37963,"timestamp":"2026-04-24T23:00:00.000Z"} +{"doc_count":604,"split_key":396982,"timestamp":"2026-04-24T23:00:00.000Z"} +{"doc_count":2915,"split_key":142430,"timestamp":"2026-04-25T00:00:00.000Z"} +{"doc_count":1388,"split_key":205733,"timestamp":"2026-04-25T00:00:00.000Z"} +{"doc_count":1062,"split_key":214295,"timestamp":"2026-04-25T00:00:00.000Z"} +{"doc_count":948,"split_key":37963,"timestamp":"2026-04-25T00:00:00.000Z"} +{"doc_count":608,"split_key":8075,"timestamp":"2026-04-25T00:00:00.000Z"} +{"doc_count":3594,"split_key":207483,"timestamp":"2026-04-25T01:00:00.000Z"} +{"doc_count":3103,"split_key":142430,"timestamp":"2026-04-25T01:00:00.000Z"} +{"doc_count":2730,"split_key":205733,"timestamp":"2026-04-25T01:00:00.000Z"} +{"doc_count":1104,"split_key":214295,"timestamp":"2026-04-25T01:00:00.000Z"} +{"doc_count":836,"split_key":37963,"timestamp":"2026-04-25T01:00:00.000Z"} +{"doc_count":48914,"split_key":142430,"timestamp":"2026-04-25T02:00:00.000Z"} +{"doc_count":1196,"split_key":135377,"timestamp":"2026-04-25T02:00:00.000Z"} +{"doc_count":1066,"split_key":214295,"timestamp":"2026-04-25T02:00:00.000Z"} +{"doc_count":633,"split_key":396982,"timestamp":"2026-04-25T02:00:00.000Z"} +{"doc_count":543,"split_key":16509,"timestamp":"2026-04-25T02:00:00.000Z"} +{"doc_count":2749,"split_key":135377,"timestamp":"2026-04-25T03:00:00.000Z"} +{"doc_count":1110,"split_key":214295,"timestamp":"2026-04-25T03:00:00.000Z"} +{"doc_count":615,"split_key":16509,"timestamp":"2026-04-25T03:00:00.000Z"} +{"doc_count":574,"split_key":396982,"timestamp":"2026-04-25T03:00:00.000Z"} +{"doc_count":570,"split_key":8075,"timestamp":"2026-04-25T03:00:00.000Z"} +{"doc_count":2646,"split_key":135377,"timestamp":"2026-04-25T04:00:00.000Z"} +{"doc_count":1503,"split_key":45090,"timestamp":"2026-04-25T04:00:00.000Z"} +{"doc_count":1079,"split_key":214295,"timestamp":"2026-04-25T04:00:00.000Z"} +{"doc_count":679,"split_key":396982,"timestamp":"2026-04-25T04:00:00.000Z"} +{"doc_count":570,"split_key":8075,"timestamp":"2026-04-25T04:00:00.000Z"} +{"doc_count":2031,"split_key":135377,"timestamp":"2026-04-25T05:00:00.000Z"} +{"doc_count":1421,"split_key":45090,"timestamp":"2026-04-25T05:00:00.000Z"} +{"doc_count":1086,"split_key":214295,"timestamp":"2026-04-25T05:00:00.000Z"} +{"doc_count":575,"split_key":8075,"timestamp":"2026-04-25T05:00:00.000Z"} +{"doc_count":557,"split_key":396982,"timestamp":"2026-04-25T05:00:00.000Z"} +{"doc_count":2568,"split_key":135377,"timestamp":"2026-04-25T06:00:00.000Z"} +{"doc_count":1323,"split_key":45090,"timestamp":"2026-04-25T06:00:00.000Z"} +{"doc_count":1100,"split_key":214295,"timestamp":"2026-04-25T06:00:00.000Z"} +{"doc_count":1000,"split_key":45102,"timestamp":"2026-04-25T06:00:00.000Z"} +{"doc_count":761,"split_key":396982,"timestamp":"2026-04-25T06:00:00.000Z"} +{"doc_count":2700,"split_key":135377,"timestamp":"2026-04-25T07:00:00.000Z"} +{"doc_count":1153,"split_key":214295,"timestamp":"2026-04-25T07:00:00.000Z"} +{"doc_count":1053,"split_key":45102,"timestamp":"2026-04-25T07:00:00.000Z"} +{"doc_count":981,"split_key":14061,"timestamp":"2026-04-25T07:00:00.000Z"} +{"doc_count":562,"split_key":8075,"timestamp":"2026-04-25T07:00:00.000Z"} +{"doc_count":1727,"split_key":135377,"timestamp":"2026-04-25T08:00:00.000Z"} +{"doc_count":1034,"split_key":214295,"timestamp":"2026-04-25T08:00:00.000Z"} +{"doc_count":954,"split_key":45102,"timestamp":"2026-04-25T08:00:00.000Z"} +{"doc_count":612,"split_key":8075,"timestamp":"2026-04-25T08:00:00.000Z"} +{"doc_count":447,"split_key":53667,"timestamp":"2026-04-25T08:00:00.000Z"} +{"doc_count":14678,"split_key":209334,"timestamp":"2026-04-25T09:00:00.000Z"} +{"doc_count":4342,"split_key":14061,"timestamp":"2026-04-25T09:00:00.000Z"} +{"doc_count":1160,"split_key":214295,"timestamp":"2026-04-25T09:00:00.000Z"} +{"doc_count":1049,"split_key":45102,"timestamp":"2026-04-25T09:00:00.000Z"} +{"doc_count":722,"split_key":45899,"timestamp":"2026-04-25T09:00:00.000Z"} +{"doc_count":20955,"split_key":209334,"timestamp":"2026-04-25T10:00:00.000Z"} +{"doc_count":1137,"split_key":45102,"timestamp":"2026-04-25T10:00:00.000Z"} +{"doc_count":1116,"split_key":214295,"timestamp":"2026-04-25T10:00:00.000Z"} +{"doc_count":1010,"split_key":201401,"timestamp":"2026-04-25T10:00:00.000Z"} +{"doc_count":787,"split_key":14061,"timestamp":"2026-04-25T10:00:00.000Z"} +{"doc_count":24160,"split_key":209334,"timestamp":"2026-04-25T11:00:00.000Z"} +{"doc_count":1111,"split_key":214295,"timestamp":"2026-04-25T11:00:00.000Z"} +{"doc_count":1046,"split_key":201401,"timestamp":"2026-04-25T11:00:00.000Z"} +{"doc_count":764,"split_key":53667,"timestamp":"2026-04-25T11:00:00.000Z"} +{"doc_count":645,"split_key":45899,"timestamp":"2026-04-25T11:00:00.000Z"} +{"doc_count":25812,"split_key":209334,"timestamp":"2026-04-25T12:00:00.000Z"} +{"doc_count":1805,"split_key":136190,"timestamp":"2026-04-25T12:00:00.000Z"} +{"doc_count":1184,"split_key":201401,"timestamp":"2026-04-25T12:00:00.000Z"} +{"doc_count":1145,"split_key":214295,"timestamp":"2026-04-25T12:00:00.000Z"} +{"doc_count":797,"split_key":53667,"timestamp":"2026-04-25T12:00:00.000Z"} +{"doc_count":22405,"split_key":209334,"timestamp":"2026-04-25T13:00:00.000Z"} +{"doc_count":1714,"split_key":136190,"timestamp":"2026-04-25T13:00:00.000Z"} +{"doc_count":1118,"split_key":201401,"timestamp":"2026-04-25T13:00:00.000Z"} +{"doc_count":1100,"split_key":214295,"timestamp":"2026-04-25T13:00:00.000Z"} +{"doc_count":704,"split_key":45899,"timestamp":"2026-04-25T13:00:00.000Z"} +{"doc_count":20818,"split_key":209334,"timestamp":"2026-04-25T14:00:00.000Z"} +{"doc_count":1128,"split_key":214295,"timestamp":"2026-04-25T14:00:00.000Z"} +{"doc_count":1123,"split_key":201401,"timestamp":"2026-04-25T14:00:00.000Z"} +{"doc_count":943,"split_key":53427,"timestamp":"2026-04-25T14:00:00.000Z"} +{"doc_count":780,"split_key":396982,"timestamp":"2026-04-25T14:00:00.000Z"} +{"doc_count":3767,"split_key":209334,"timestamp":"2026-04-25T15:00:00.000Z"} +{"doc_count":1831,"split_key":199724,"timestamp":"2026-04-25T15:00:00.000Z"} +{"doc_count":1069,"split_key":214295,"timestamp":"2026-04-25T15:00:00.000Z"} +{"doc_count":780,"split_key":53427,"timestamp":"2026-04-25T15:00:00.000Z"} +{"doc_count":662,"split_key":53667,"timestamp":"2026-04-25T15:00:00.000Z"} +{"doc_count":1067,"split_key":214295,"timestamp":"2026-04-25T16:00:00.000Z"} +{"doc_count":690,"split_key":45899,"timestamp":"2026-04-25T16:00:00.000Z"} +{"doc_count":586,"split_key":53667,"timestamp":"2026-04-25T16:00:00.000Z"} +{"doc_count":513,"split_key":199724,"timestamp":"2026-04-25T16:00:00.000Z"} +{"doc_count":493,"split_key":8075,"timestamp":"2026-04-25T16:00:00.000Z"} +{"doc_count":1101,"split_key":214295,"timestamp":"2026-04-25T17:00:00.000Z"} +{"doc_count":654,"split_key":45899,"timestamp":"2026-04-25T17:00:00.000Z"} +{"doc_count":595,"split_key":53667,"timestamp":"2026-04-25T17:00:00.000Z"} +{"doc_count":556,"split_key":8075,"timestamp":"2026-04-25T17:00:00.000Z"} +{"doc_count":449,"split_key":14618,"timestamp":"2026-04-25T17:00:00.000Z"} +{"doc_count":1055,"split_key":214295,"timestamp":"2026-04-25T18:00:00.000Z"} +{"doc_count":898,"split_key":396982,"timestamp":"2026-04-25T18:00:00.000Z"} +{"doc_count":677,"split_key":45899,"timestamp":"2026-04-25T18:00:00.000Z"} +{"doc_count":597,"split_key":53667,"timestamp":"2026-04-25T18:00:00.000Z"} +{"doc_count":484,"split_key":8075,"timestamp":"2026-04-25T18:00:00.000Z"} +{"doc_count":1105,"split_key":214295,"timestamp":"2026-04-25T19:00:00.000Z"} +{"doc_count":869,"split_key":14061,"timestamp":"2026-04-25T19:00:00.000Z"} +{"doc_count":654,"split_key":396982,"timestamp":"2026-04-25T19:00:00.000Z"} +{"doc_count":633,"split_key":45899,"timestamp":"2026-04-25T19:00:00.000Z"} +{"doc_count":586,"split_key":53667,"timestamp":"2026-04-25T19:00:00.000Z"} +{"doc_count":1496,"split_key":49870,"timestamp":"2026-04-25T20:00:00.000Z"} +{"doc_count":1091,"split_key":214295,"timestamp":"2026-04-25T20:00:00.000Z"} +{"doc_count":645,"split_key":45899,"timestamp":"2026-04-25T20:00:00.000Z"} +{"doc_count":604,"split_key":396982,"timestamp":"2026-04-25T20:00:00.000Z"} +{"doc_count":569,"split_key":53667,"timestamp":"2026-04-25T20:00:00.000Z"} +{"doc_count":1084,"split_key":214295,"timestamp":"2026-04-25T21:00:00.000Z"} +{"doc_count":902,"split_key":49870,"timestamp":"2026-04-25T21:00:00.000Z"} +{"doc_count":722,"split_key":396982,"timestamp":"2026-04-25T21:00:00.000Z"} +{"doc_count":705,"split_key":45899,"timestamp":"2026-04-25T21:00:00.000Z"} +{"doc_count":502,"split_key":53667,"timestamp":"2026-04-25T21:00:00.000Z"} +{"doc_count":1633,"split_key":209334,"timestamp":"2026-04-25T22:00:00.000Z"} +{"doc_count":1188,"split_key":214295,"timestamp":"2026-04-25T22:00:00.000Z"} +{"doc_count":1045,"split_key":49870,"timestamp":"2026-04-25T22:00:00.000Z"} +{"doc_count":666,"split_key":45899,"timestamp":"2026-04-25T22:00:00.000Z"} +{"doc_count":630,"split_key":396982,"timestamp":"2026-04-25T22:00:00.000Z"} +{"doc_count":1157,"split_key":214295,"timestamp":"2026-04-25T23:00:00.000Z"} +{"doc_count":696,"split_key":396982,"timestamp":"2026-04-25T23:00:00.000Z"} +{"doc_count":669,"split_key":45899,"timestamp":"2026-04-25T23:00:00.000Z"} +{"doc_count":584,"split_key":53667,"timestamp":"2026-04-25T23:00:00.000Z"} +{"doc_count":542,"split_key":14061,"timestamp":"2026-04-25T23:00:00.000Z"} +{"doc_count":3565,"split_key":203771,"timestamp":"2026-04-26T00:00:00.000Z"} +{"doc_count":1023,"split_key":214295,"timestamp":"2026-04-26T00:00:00.000Z"} +{"doc_count":1019,"split_key":49870,"timestamp":"2026-04-26T00:00:00.000Z"} +{"doc_count":829,"split_key":396982,"timestamp":"2026-04-26T00:00:00.000Z"} +{"doc_count":672,"split_key":45899,"timestamp":"2026-04-26T00:00:00.000Z"} +{"doc_count":5445,"split_key":203771,"timestamp":"2026-04-26T01:00:00.000Z"} +{"doc_count":1071,"split_key":214295,"timestamp":"2026-04-26T01:00:00.000Z"} +{"doc_count":1001,"split_key":396982,"timestamp":"2026-04-26T01:00:00.000Z"} +{"doc_count":814,"split_key":16509,"timestamp":"2026-04-26T01:00:00.000Z"} +{"doc_count":673,"split_key":49981,"timestamp":"2026-04-26T01:00:00.000Z"} +{"doc_count":1294,"split_key":16509,"timestamp":"2026-04-26T02:00:00.000Z"} +{"doc_count":962,"split_key":214295,"timestamp":"2026-04-26T02:00:00.000Z"} +{"doc_count":905,"split_key":396982,"timestamp":"2026-04-26T02:00:00.000Z"} +{"doc_count":703,"split_key":49981,"timestamp":"2026-04-26T02:00:00.000Z"} +{"doc_count":674,"split_key":37963,"timestamp":"2026-04-26T02:00:00.000Z"} +{"doc_count":1495,"split_key":135377,"timestamp":"2026-04-26T03:00:00.000Z"} +{"doc_count":1029,"split_key":214295,"timestamp":"2026-04-26T03:00:00.000Z"} +{"doc_count":981,"split_key":396982,"timestamp":"2026-04-26T03:00:00.000Z"} +{"doc_count":979,"split_key":16509,"timestamp":"2026-04-26T03:00:00.000Z"} +{"doc_count":712,"split_key":45102,"timestamp":"2026-04-26T03:00:00.000Z"} +{"doc_count":6111,"split_key":211590,"timestamp":"2026-04-26T04:00:00.000Z"} +{"doc_count":2304,"split_key":45102,"timestamp":"2026-04-26T04:00:00.000Z"} +{"doc_count":1596,"split_key":135377,"timestamp":"2026-04-26T04:00:00.000Z"} +{"doc_count":1108,"split_key":16509,"timestamp":"2026-04-26T04:00:00.000Z"} +{"doc_count":1063,"split_key":214295,"timestamp":"2026-04-26T04:00:00.000Z"} +{"doc_count":2096,"split_key":135377,"timestamp":"2026-04-26T05:00:00.000Z"} +{"doc_count":1853,"split_key":45102,"timestamp":"2026-04-26T05:00:00.000Z"} +{"doc_count":1440,"split_key":16509,"timestamp":"2026-04-26T05:00:00.000Z"} +{"doc_count":1009,"split_key":214295,"timestamp":"2026-04-26T05:00:00.000Z"} +{"doc_count":928,"split_key":396982,"timestamp":"2026-04-26T05:00:00.000Z"} +{"doc_count":1523,"split_key":16509,"timestamp":"2026-04-26T06:00:00.000Z"} +{"doc_count":1091,"split_key":214295,"timestamp":"2026-04-26T06:00:00.000Z"} +{"doc_count":872,"split_key":135377,"timestamp":"2026-04-26T06:00:00.000Z"} +{"doc_count":736,"split_key":14061,"timestamp":"2026-04-26T06:00:00.000Z"} +{"doc_count":676,"split_key":37963,"timestamp":"2026-04-26T06:00:00.000Z"} +{"doc_count":1051,"split_key":214295,"timestamp":"2026-04-26T07:00:00.000Z"} +{"doc_count":1013,"split_key":16509,"timestamp":"2026-04-26T07:00:00.000Z"} +{"doc_count":714,"split_key":37963,"timestamp":"2026-04-26T07:00:00.000Z"} +{"doc_count":696,"split_key":14061,"timestamp":"2026-04-26T07:00:00.000Z"} +{"doc_count":693,"split_key":45899,"timestamp":"2026-04-26T07:00:00.000Z"} +{"doc_count":1003,"split_key":214295,"timestamp":"2026-04-26T08:00:00.000Z"} +{"doc_count":750,"split_key":45899,"timestamp":"2026-04-26T08:00:00.000Z"} +{"doc_count":743,"split_key":37963,"timestamp":"2026-04-26T08:00:00.000Z"} +{"doc_count":691,"split_key":16509,"timestamp":"2026-04-26T08:00:00.000Z"} +{"doc_count":615,"split_key":53667,"timestamp":"2026-04-26T08:00:00.000Z"} +{"doc_count":15828,"split_key":209334,"timestamp":"2026-04-26T09:00:00.000Z"} +{"doc_count":1122,"split_key":16509,"timestamp":"2026-04-26T09:00:00.000Z"} +{"doc_count":1026,"split_key":49870,"timestamp":"2026-04-26T09:00:00.000Z"} +{"doc_count":802,"split_key":214295,"timestamp":"2026-04-26T09:00:00.000Z"} +{"doc_count":764,"split_key":37963,"timestamp":"2026-04-26T09:00:00.000Z"} +{"doc_count":24520,"split_key":209334,"timestamp":"2026-04-26T10:00:00.000Z"} +{"doc_count":1139,"split_key":201401,"timestamp":"2026-04-26T10:00:00.000Z"} +{"doc_count":972,"split_key":16509,"timestamp":"2026-04-26T10:00:00.000Z"} +{"doc_count":824,"split_key":37963,"timestamp":"2026-04-26T10:00:00.000Z"} +{"doc_count":678,"split_key":214295,"timestamp":"2026-04-26T10:00:00.000Z"} +{"doc_count":21237,"split_key":209334,"timestamp":"2026-04-26T11:00:00.000Z"} +{"doc_count":1074,"split_key":16509,"timestamp":"2026-04-26T11:00:00.000Z"} +{"doc_count":1019,"split_key":49870,"timestamp":"2026-04-26T11:00:00.000Z"} +{"doc_count":856,"split_key":201401,"timestamp":"2026-04-26T11:00:00.000Z"} +{"doc_count":820,"split_key":45899,"timestamp":"2026-04-26T11:00:00.000Z"} +{"doc_count":27609,"split_key":209334,"timestamp":"2026-04-26T12:00:00.000Z"} +{"doc_count":6755,"split_key":201814,"timestamp":"2026-04-26T12:00:00.000Z"} +{"doc_count":2614,"split_key":136190,"timestamp":"2026-04-26T12:00:00.000Z"} +{"doc_count":1093,"split_key":201401,"timestamp":"2026-04-26T12:00:00.000Z"} +{"doc_count":889,"split_key":16509,"timestamp":"2026-04-26T12:00:00.000Z"} +{"doc_count":26696,"split_key":209334,"timestamp":"2026-04-26T13:00:00.000Z"} +{"doc_count":2463,"split_key":136190,"timestamp":"2026-04-26T13:00:00.000Z"} +{"doc_count":1235,"split_key":211590,"timestamp":"2026-04-26T13:00:00.000Z"} +{"doc_count":1151,"split_key":51396,"timestamp":"2026-04-26T13:00:00.000Z"} +{"doc_count":1106,"split_key":201401,"timestamp":"2026-04-26T13:00:00.000Z"} +{"doc_count":18677,"split_key":209334,"timestamp":"2026-04-26T14:00:00.000Z"} +{"doc_count":3091,"split_key":211590,"timestamp":"2026-04-26T14:00:00.000Z"} +{"doc_count":1065,"split_key":16509,"timestamp":"2026-04-26T14:00:00.000Z"} +{"doc_count":958,"split_key":201401,"timestamp":"2026-04-26T14:00:00.000Z"} +{"doc_count":725,"split_key":45090,"timestamp":"2026-04-26T14:00:00.000Z"} +{"doc_count":1087,"split_key":16509,"timestamp":"2026-04-26T15:00:00.000Z"} +{"doc_count":748,"split_key":45090,"timestamp":"2026-04-26T15:00:00.000Z"} +{"doc_count":736,"split_key":45899,"timestamp":"2026-04-26T15:00:00.000Z"} +{"doc_count":675,"split_key":14061,"timestamp":"2026-04-26T15:00:00.000Z"} +{"doc_count":541,"split_key":214295,"timestamp":"2026-04-26T15:00:00.000Z"} +{"doc_count":1654,"split_key":142430,"timestamp":"2026-04-26T16:00:00.000Z"} +{"doc_count":713,"split_key":45899,"timestamp":"2026-04-26T16:00:00.000Z"} +{"doc_count":708,"split_key":45090,"timestamp":"2026-04-26T16:00:00.000Z"} +{"doc_count":620,"split_key":16509,"timestamp":"2026-04-26T16:00:00.000Z"} +{"doc_count":569,"split_key":53667,"timestamp":"2026-04-26T16:00:00.000Z"} +{"doc_count":31513,"split_key":142430,"timestamp":"2026-04-26T17:00:00.000Z"} +{"doc_count":1061,"split_key":51396,"timestamp":"2026-04-26T17:00:00.000Z"} +{"doc_count":1016,"split_key":16509,"timestamp":"2026-04-26T17:00:00.000Z"} +{"doc_count":922,"split_key":45090,"timestamp":"2026-04-26T17:00:00.000Z"} +{"doc_count":521,"split_key":45899,"timestamp":"2026-04-26T17:00:00.000Z"} +{"doc_count":20104,"split_key":142430,"timestamp":"2026-04-26T18:00:00.000Z"} +{"doc_count":1005,"split_key":16509,"timestamp":"2026-04-26T18:00:00.000Z"} +{"doc_count":566,"split_key":45090,"timestamp":"2026-04-26T18:00:00.000Z"} +{"doc_count":511,"split_key":396982,"timestamp":"2026-04-26T18:00:00.000Z"} +{"doc_count":505,"split_key":8075,"timestamp":"2026-04-26T18:00:00.000Z"} +{"doc_count":5668,"split_key":5650,"timestamp":"2026-04-26T19:00:00.000Z"} +{"doc_count":1215,"split_key":16509,"timestamp":"2026-04-26T19:00:00.000Z"} +{"doc_count":796,"split_key":51396,"timestamp":"2026-04-26T19:00:00.000Z"} +{"doc_count":511,"split_key":49870,"timestamp":"2026-04-26T19:00:00.000Z"} +{"doc_count":504,"split_key":8075,"timestamp":"2026-04-26T19:00:00.000Z"} +{"doc_count":3785,"split_key":203771,"timestamp":"2026-04-26T20:00:00.000Z"} +{"doc_count":3436,"split_key":211590,"timestamp":"2026-04-26T20:00:00.000Z"} +{"doc_count":1243,"split_key":5650,"timestamp":"2026-04-26T20:00:00.000Z"} +{"doc_count":872,"split_key":51396,"timestamp":"2026-04-26T20:00:00.000Z"} +{"doc_count":646,"split_key":16509,"timestamp":"2026-04-26T20:00:00.000Z"} +{"doc_count":3613,"split_key":203771,"timestamp":"2026-04-26T21:00:00.000Z"} +{"doc_count":756,"split_key":16509,"timestamp":"2026-04-26T21:00:00.000Z"} +{"doc_count":702,"split_key":49870,"timestamp":"2026-04-26T21:00:00.000Z"} +{"doc_count":507,"split_key":8075,"timestamp":"2026-04-26T21:00:00.000Z"} +{"doc_count":474,"split_key":205733,"timestamp":"2026-04-26T21:00:00.000Z"} +{"doc_count":6001,"split_key":211590,"timestamp":"2026-04-26T22:00:00.000Z"} +{"doc_count":4485,"split_key":205733,"timestamp":"2026-04-26T22:00:00.000Z"} +{"doc_count":918,"split_key":16509,"timestamp":"2026-04-26T22:00:00.000Z"} +{"doc_count":672,"split_key":49870,"timestamp":"2026-04-26T22:00:00.000Z"} +{"doc_count":558,"split_key":22773,"timestamp":"2026-04-26T22:00:00.000Z"} +{"doc_count":2049,"split_key":203771,"timestamp":"2026-04-26T23:00:00.000Z"} +{"doc_count":1805,"split_key":205733,"timestamp":"2026-04-26T23:00:00.000Z"} +{"doc_count":678,"split_key":49870,"timestamp":"2026-04-26T23:00:00.000Z"} +{"doc_count":641,"split_key":16509,"timestamp":"2026-04-26T23:00:00.000Z"} +{"doc_count":499,"split_key":22773,"timestamp":"2026-04-26T23:00:00.000Z"} +{"doc_count":4204,"split_key":203771,"timestamp":"2026-04-27T00:00:00.000Z"} +{"doc_count":975,"split_key":51396,"timestamp":"2026-04-27T00:00:00.000Z"} +{"doc_count":592,"split_key":16509,"timestamp":"2026-04-27T00:00:00.000Z"} +{"doc_count":576,"split_key":22773,"timestamp":"2026-04-27T00:00:00.000Z"} +{"doc_count":513,"split_key":8075,"timestamp":"2026-04-27T00:00:00.000Z"} +{"doc_count":4317,"split_key":203771,"timestamp":"2026-04-27T01:00:00.000Z"} +{"doc_count":946,"split_key":16509,"timestamp":"2026-04-27T01:00:00.000Z"} +{"doc_count":498,"split_key":396982,"timestamp":"2026-04-27T01:00:00.000Z"} +{"doc_count":373,"split_key":214295,"timestamp":"2026-04-27T01:00:00.000Z"} +{"doc_count":360,"split_key":22773,"timestamp":"2026-04-27T01:00:00.000Z"} +{"doc_count":4396,"split_key":203771,"timestamp":"2026-04-27T02:00:00.000Z"} +{"doc_count":699,"split_key":16509,"timestamp":"2026-04-27T02:00:00.000Z"} +{"doc_count":421,"split_key":22773,"timestamp":"2026-04-27T02:00:00.000Z"} +{"doc_count":374,"split_key":214295,"timestamp":"2026-04-27T02:00:00.000Z"} +{"doc_count":345,"split_key":396982,"timestamp":"2026-04-27T02:00:00.000Z"} +{"doc_count":4163,"split_key":203771,"timestamp":"2026-04-27T03:00:00.000Z"} +{"doc_count":641,"split_key":16509,"timestamp":"2026-04-27T03:00:00.000Z"} +{"doc_count":398,"split_key":22773,"timestamp":"2026-04-27T03:00:00.000Z"} +{"doc_count":366,"split_key":214295,"timestamp":"2026-04-27T03:00:00.000Z"} +{"doc_count":318,"split_key":396982,"timestamp":"2026-04-27T03:00:00.000Z"} +{"doc_count":6000,"split_key":211590,"timestamp":"2026-04-27T04:00:00.000Z"} +{"doc_count":4367,"split_key":203771,"timestamp":"2026-04-27T04:00:00.000Z"} +{"doc_count":716,"split_key":16509,"timestamp":"2026-04-27T04:00:00.000Z"} +{"doc_count":406,"split_key":22773,"timestamp":"2026-04-27T04:00:00.000Z"} +{"doc_count":402,"split_key":214295,"timestamp":"2026-04-27T04:00:00.000Z"} +{"doc_count":4309,"split_key":203771,"timestamp":"2026-04-27T05:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-04-27T05:00:00.000Z"} +{"doc_count":1083,"split_key":16509,"timestamp":"2026-04-27T05:00:00.000Z"} +{"doc_count":434,"split_key":396982,"timestamp":"2026-04-27T05:00:00.000Z"} +{"doc_count":418,"split_key":22773,"timestamp":"2026-04-27T05:00:00.000Z"} +{"doc_count":15003,"split_key":211590,"timestamp":"2026-04-27T06:00:00.000Z"} +{"doc_count":4133,"split_key":203771,"timestamp":"2026-04-27T06:00:00.000Z"} +{"doc_count":515,"split_key":49870,"timestamp":"2026-04-27T06:00:00.000Z"} +{"doc_count":414,"split_key":22773,"timestamp":"2026-04-27T06:00:00.000Z"} +{"doc_count":393,"split_key":214295,"timestamp":"2026-04-27T06:00:00.000Z"} +{"doc_count":6406,"split_key":211590,"timestamp":"2026-04-27T07:00:00.000Z"} +{"doc_count":2900,"split_key":203771,"timestamp":"2026-04-27T07:00:00.000Z"} +{"doc_count":836,"split_key":16509,"timestamp":"2026-04-27T07:00:00.000Z"} +{"doc_count":513,"split_key":49870,"timestamp":"2026-04-27T07:00:00.000Z"} +{"doc_count":397,"split_key":22773,"timestamp":"2026-04-27T07:00:00.000Z"} +{"doc_count":5724,"split_key":211590,"timestamp":"2026-04-27T08:00:00.000Z"} +{"doc_count":1015,"split_key":49870,"timestamp":"2026-04-27T08:00:00.000Z"} +{"doc_count":931,"split_key":23470,"timestamp":"2026-04-27T08:00:00.000Z"} +{"doc_count":765,"split_key":16509,"timestamp":"2026-04-27T08:00:00.000Z"} +{"doc_count":510,"split_key":141995,"timestamp":"2026-04-27T08:00:00.000Z"} +{"doc_count":13008,"split_key":209334,"timestamp":"2026-04-27T09:00:00.000Z"} +{"doc_count":2317,"split_key":211590,"timestamp":"2026-04-27T09:00:00.000Z"} +{"doc_count":1304,"split_key":45102,"timestamp":"2026-04-27T09:00:00.000Z"} +{"doc_count":919,"split_key":16509,"timestamp":"2026-04-27T09:00:00.000Z"} +{"doc_count":493,"split_key":51396,"timestamp":"2026-04-27T09:00:00.000Z"} +{"doc_count":29753,"split_key":209334,"timestamp":"2026-04-27T10:00:00.000Z"} +{"doc_count":5311,"split_key":211590,"timestamp":"2026-04-27T10:00:00.000Z"} +{"doc_count":1787,"split_key":45102,"timestamp":"2026-04-27T10:00:00.000Z"} +{"doc_count":1015,"split_key":49870,"timestamp":"2026-04-27T10:00:00.000Z"} +{"doc_count":908,"split_key":201401,"timestamp":"2026-04-27T10:00:00.000Z"} +{"doc_count":27753,"split_key":209334,"timestamp":"2026-04-27T11:00:00.000Z"} +{"doc_count":9999,"split_key":211590,"timestamp":"2026-04-27T11:00:00.000Z"} +{"doc_count":1808,"split_key":45102,"timestamp":"2026-04-27T11:00:00.000Z"} +{"doc_count":1065,"split_key":51396,"timestamp":"2026-04-27T11:00:00.000Z"} +{"doc_count":1017,"split_key":16509,"timestamp":"2026-04-27T11:00:00.000Z"} +{"doc_count":23101,"split_key":209334,"timestamp":"2026-04-27T12:00:00.000Z"} +{"doc_count":5841,"split_key":211590,"timestamp":"2026-04-27T12:00:00.000Z"} +{"doc_count":1838,"split_key":136190,"timestamp":"2026-04-27T12:00:00.000Z"} +{"doc_count":1003,"split_key":16509,"timestamp":"2026-04-27T12:00:00.000Z"} +{"doc_count":994,"split_key":201401,"timestamp":"2026-04-27T12:00:00.000Z"} +{"doc_count":25535,"split_key":209334,"timestamp":"2026-04-27T13:00:00.000Z"} +{"doc_count":2107,"split_key":136190,"timestamp":"2026-04-27T13:00:00.000Z"} +{"doc_count":871,"split_key":16509,"timestamp":"2026-04-27T13:00:00.000Z"} +{"doc_count":835,"split_key":201401,"timestamp":"2026-04-27T13:00:00.000Z"} +{"doc_count":715,"split_key":211590,"timestamp":"2026-04-27T13:00:00.000Z"} +{"doc_count":15307,"split_key":209334,"timestamp":"2026-04-27T14:00:00.000Z"} +{"doc_count":768,"split_key":201401,"timestamp":"2026-04-27T14:00:00.000Z"} +{"doc_count":432,"split_key":22773,"timestamp":"2026-04-27T14:00:00.000Z"} +{"doc_count":412,"split_key":214295,"timestamp":"2026-04-27T14:00:00.000Z"} +{"doc_count":408,"split_key":16509,"timestamp":"2026-04-27T14:00:00.000Z"} +{"doc_count":924,"split_key":16509,"timestamp":"2026-04-27T15:00:00.000Z"} +{"doc_count":621,"split_key":51396,"timestamp":"2026-04-27T15:00:00.000Z"} +{"doc_count":528,"split_key":8151,"timestamp":"2026-04-27T15:00:00.000Z"} +{"doc_count":418,"split_key":51167,"timestamp":"2026-04-27T15:00:00.000Z"} +{"doc_count":402,"split_key":214295,"timestamp":"2026-04-27T15:00:00.000Z"} +{"doc_count":651,"split_key":16509,"timestamp":"2026-04-27T16:00:00.000Z"} +{"doc_count":470,"split_key":51396,"timestamp":"2026-04-27T16:00:00.000Z"} +{"doc_count":406,"split_key":22773,"timestamp":"2026-04-27T16:00:00.000Z"} +{"doc_count":396,"split_key":214295,"timestamp":"2026-04-27T16:00:00.000Z"} +{"doc_count":363,"split_key":201814,"timestamp":"2026-04-27T16:00:00.000Z"} +{"doc_count":546,"split_key":16509,"timestamp":"2026-04-27T17:00:00.000Z"} +{"doc_count":477,"split_key":22773,"timestamp":"2026-04-27T17:00:00.000Z"} +{"doc_count":456,"split_key":49870,"timestamp":"2026-04-27T17:00:00.000Z"} +{"doc_count":360,"split_key":201814,"timestamp":"2026-04-27T17:00:00.000Z"} +{"doc_count":352,"split_key":214295,"timestamp":"2026-04-27T17:00:00.000Z"} +{"doc_count":6002,"split_key":211590,"timestamp":"2026-04-27T18:00:00.000Z"} +{"doc_count":1018,"split_key":49870,"timestamp":"2026-04-27T18:00:00.000Z"} +{"doc_count":681,"split_key":16509,"timestamp":"2026-04-27T18:00:00.000Z"} +{"doc_count":443,"split_key":396982,"timestamp":"2026-04-27T18:00:00.000Z"} +{"doc_count":381,"split_key":214295,"timestamp":"2026-04-27T18:00:00.000Z"} +{"doc_count":1017,"split_key":49870,"timestamp":"2026-04-27T19:00:00.000Z"} +{"doc_count":555,"split_key":16509,"timestamp":"2026-04-27T19:00:00.000Z"} +{"doc_count":462,"split_key":396982,"timestamp":"2026-04-27T19:00:00.000Z"} +{"doc_count":443,"split_key":57717,"timestamp":"2026-04-27T19:00:00.000Z"} +{"doc_count":405,"split_key":22773,"timestamp":"2026-04-27T19:00:00.000Z"} +{"doc_count":537,"split_key":16509,"timestamp":"2026-04-27T20:00:00.000Z"} +{"doc_count":531,"split_key":396982,"timestamp":"2026-04-27T20:00:00.000Z"} +{"doc_count":475,"split_key":57717,"timestamp":"2026-04-27T20:00:00.000Z"} +{"doc_count":446,"split_key":51167,"timestamp":"2026-04-27T20:00:00.000Z"} +{"doc_count":430,"split_key":22773,"timestamp":"2026-04-27T20:00:00.000Z"} +{"doc_count":12097,"split_key":211590,"timestamp":"2026-04-27T21:00:00.000Z"} +{"doc_count":2378,"split_key":49870,"timestamp":"2026-04-27T21:00:00.000Z"} +{"doc_count":599,"split_key":396982,"timestamp":"2026-04-27T21:00:00.000Z"} +{"doc_count":530,"split_key":57717,"timestamp":"2026-04-27T21:00:00.000Z"} +{"doc_count":449,"split_key":141995,"timestamp":"2026-04-27T21:00:00.000Z"} +{"doc_count":12102,"split_key":211590,"timestamp":"2026-04-27T22:00:00.000Z"} +{"doc_count":836,"split_key":203771,"timestamp":"2026-04-27T22:00:00.000Z"} +{"doc_count":640,"split_key":396982,"timestamp":"2026-04-27T22:00:00.000Z"} +{"doc_count":615,"split_key":16509,"timestamp":"2026-04-27T22:00:00.000Z"} +{"doc_count":531,"split_key":49870,"timestamp":"2026-04-27T22:00:00.000Z"} +{"doc_count":8408,"split_key":203771,"timestamp":"2026-04-27T23:00:00.000Z"} +{"doc_count":769,"split_key":201814,"timestamp":"2026-04-27T23:00:00.000Z"} +{"doc_count":737,"split_key":51396,"timestamp":"2026-04-27T23:00:00.000Z"} +{"doc_count":479,"split_key":396982,"timestamp":"2026-04-27T23:00:00.000Z"} +{"doc_count":456,"split_key":57717,"timestamp":"2026-04-27T23:00:00.000Z"} +{"doc_count":8172,"split_key":203771,"timestamp":"2026-04-28T00:00:00.000Z"} +{"doc_count":988,"split_key":201814,"timestamp":"2026-04-28T00:00:00.000Z"} +{"doc_count":572,"split_key":152194,"timestamp":"2026-04-28T00:00:00.000Z"} +{"doc_count":493,"split_key":16509,"timestamp":"2026-04-28T00:00:00.000Z"} +{"doc_count":485,"split_key":396982,"timestamp":"2026-04-28T00:00:00.000Z"} +{"doc_count":6296,"split_key":203771,"timestamp":"2026-04-28T01:00:00.000Z"} +{"doc_count":512,"split_key":396982,"timestamp":"2026-04-28T01:00:00.000Z"} +{"doc_count":438,"split_key":57717,"timestamp":"2026-04-28T01:00:00.000Z"} +{"doc_count":412,"split_key":53667,"timestamp":"2026-04-28T01:00:00.000Z"} +{"doc_count":393,"split_key":22773,"timestamp":"2026-04-28T01:00:00.000Z"} +{"doc_count":1636,"split_key":63949,"timestamp":"2026-04-28T02:00:00.000Z"} +{"doc_count":855,"split_key":51396,"timestamp":"2026-04-28T02:00:00.000Z"} +{"doc_count":729,"split_key":396982,"timestamp":"2026-04-28T02:00:00.000Z"} +{"doc_count":447,"split_key":57717,"timestamp":"2026-04-28T02:00:00.000Z"} +{"doc_count":442,"split_key":53667,"timestamp":"2026-04-28T02:00:00.000Z"} +{"doc_count":729,"split_key":16509,"timestamp":"2026-04-28T03:00:00.000Z"} +{"doc_count":725,"split_key":51396,"timestamp":"2026-04-28T03:00:00.000Z"} +{"doc_count":479,"split_key":396982,"timestamp":"2026-04-28T03:00:00.000Z"} +{"doc_count":433,"split_key":57717,"timestamp":"2026-04-28T03:00:00.000Z"} +{"doc_count":412,"split_key":22773,"timestamp":"2026-04-28T03:00:00.000Z"} +{"doc_count":1870,"split_key":211590,"timestamp":"2026-04-28T04:00:00.000Z"} +{"doc_count":1169,"split_key":45102,"timestamp":"2026-04-28T04:00:00.000Z"} +{"doc_count":619,"split_key":16509,"timestamp":"2026-04-28T04:00:00.000Z"} +{"doc_count":557,"split_key":396982,"timestamp":"2026-04-28T04:00:00.000Z"} +{"doc_count":528,"split_key":51396,"timestamp":"2026-04-28T04:00:00.000Z"} +{"doc_count":7475,"split_key":211590,"timestamp":"2026-04-28T05:00:00.000Z"} +{"doc_count":1625,"split_key":45102,"timestamp":"2026-04-28T05:00:00.000Z"} +{"doc_count":1026,"split_key":49870,"timestamp":"2026-04-28T05:00:00.000Z"} +{"doc_count":689,"split_key":22773,"timestamp":"2026-04-28T05:00:00.000Z"} +{"doc_count":644,"split_key":16509,"timestamp":"2026-04-28T05:00:00.000Z"} +{"doc_count":10350,"split_key":211590,"timestamp":"2026-04-28T06:00:00.000Z"} +{"doc_count":1716,"split_key":45102,"timestamp":"2026-04-28T06:00:00.000Z"} +{"doc_count":928,"split_key":396982,"timestamp":"2026-04-28T06:00:00.000Z"} +{"doc_count":575,"split_key":22773,"timestamp":"2026-04-28T06:00:00.000Z"} +{"doc_count":573,"split_key":16509,"timestamp":"2026-04-28T06:00:00.000Z"} +{"doc_count":4653,"split_key":211590,"timestamp":"2026-04-28T07:00:00.000Z"} +{"doc_count":941,"split_key":45102,"timestamp":"2026-04-28T07:00:00.000Z"} +{"doc_count":696,"split_key":16509,"timestamp":"2026-04-28T07:00:00.000Z"} +{"doc_count":540,"split_key":49870,"timestamp":"2026-04-28T07:00:00.000Z"} +{"doc_count":508,"split_key":22773,"timestamp":"2026-04-28T07:00:00.000Z"} +{"doc_count":6000,"split_key":211590,"timestamp":"2026-04-28T08:00:00.000Z"} +{"doc_count":724,"split_key":16509,"timestamp":"2026-04-28T08:00:00.000Z"} +{"doc_count":643,"split_key":22773,"timestamp":"2026-04-28T08:00:00.000Z"} +{"doc_count":516,"split_key":49870,"timestamp":"2026-04-28T08:00:00.000Z"} +{"doc_count":401,"split_key":53667,"timestamp":"2026-04-28T08:00:00.000Z"} +{"doc_count":12713,"split_key":209334,"timestamp":"2026-04-28T09:00:00.000Z"} +{"doc_count":6001,"split_key":211590,"timestamp":"2026-04-28T09:00:00.000Z"} +{"doc_count":1010,"split_key":45102,"timestamp":"2026-04-28T09:00:00.000Z"} +{"doc_count":803,"split_key":16509,"timestamp":"2026-04-28T09:00:00.000Z"} +{"doc_count":519,"split_key":49870,"timestamp":"2026-04-28T09:00:00.000Z"} +{"doc_count":23372,"split_key":209334,"timestamp":"2026-04-28T10:00:00.000Z"} +{"doc_count":6000,"split_key":211590,"timestamp":"2026-04-28T10:00:00.000Z"} +{"doc_count":3022,"split_key":14061,"timestamp":"2026-04-28T10:00:00.000Z"} +{"doc_count":2412,"split_key":201814,"timestamp":"2026-04-28T10:00:00.000Z"} +{"doc_count":1165,"split_key":45102,"timestamp":"2026-04-28T10:00:00.000Z"} +{"doc_count":21562,"split_key":209334,"timestamp":"2026-04-28T11:00:00.000Z"} +{"doc_count":2340,"split_key":14061,"timestamp":"2026-04-28T11:00:00.000Z"} +{"doc_count":1199,"split_key":45102,"timestamp":"2026-04-28T11:00:00.000Z"} +{"doc_count":1190,"split_key":201401,"timestamp":"2026-04-28T11:00:00.000Z"} +{"doc_count":405,"split_key":16509,"timestamp":"2026-04-28T11:00:00.000Z"} +{"doc_count":21127,"split_key":209334,"timestamp":"2026-04-28T12:00:00.000Z"} +{"doc_count":1194,"split_key":45102,"timestamp":"2026-04-28T12:00:00.000Z"} +{"doc_count":1094,"split_key":201401,"timestamp":"2026-04-28T12:00:00.000Z"} +{"doc_count":674,"split_key":16509,"timestamp":"2026-04-28T12:00:00.000Z"} +{"doc_count":664,"split_key":51396,"timestamp":"2026-04-28T12:00:00.000Z"} +{"doc_count":20700,"split_key":209334,"timestamp":"2026-04-28T13:00:00.000Z"} +{"doc_count":1076,"split_key":45102,"timestamp":"2026-04-28T13:00:00.000Z"} +{"doc_count":912,"split_key":201401,"timestamp":"2026-04-28T13:00:00.000Z"} +{"doc_count":694,"split_key":136190,"timestamp":"2026-04-28T13:00:00.000Z"} +{"doc_count":622,"split_key":16509,"timestamp":"2026-04-28T13:00:00.000Z"} +{"doc_count":21609,"split_key":209334,"timestamp":"2026-04-28T14:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-04-28T14:00:00.000Z"} +{"doc_count":1027,"split_key":201401,"timestamp":"2026-04-28T14:00:00.000Z"} +{"doc_count":666,"split_key":16509,"timestamp":"2026-04-28T14:00:00.000Z"} +{"doc_count":542,"split_key":396982,"timestamp":"2026-04-28T14:00:00.000Z"} +{"doc_count":13656,"split_key":209334,"timestamp":"2026-04-28T15:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-04-28T15:00:00.000Z"} +{"doc_count":1223,"split_key":215607,"timestamp":"2026-04-28T15:00:00.000Z"} +{"doc_count":1000,"split_key":141995,"timestamp":"2026-04-28T15:00:00.000Z"} +{"doc_count":754,"split_key":201401,"timestamp":"2026-04-28T15:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-04-28T16:00:00.000Z"} +{"doc_count":2882,"split_key":9318,"timestamp":"2026-04-28T16:00:00.000Z"} +{"doc_count":523,"split_key":49870,"timestamp":"2026-04-28T16:00:00.000Z"} +{"doc_count":490,"split_key":16509,"timestamp":"2026-04-28T16:00:00.000Z"} +{"doc_count":392,"split_key":214295,"timestamp":"2026-04-28T16:00:00.000Z"} +{"doc_count":5037,"split_key":211590,"timestamp":"2026-04-28T17:00:00.000Z"} +{"doc_count":1868,"split_key":60404,"timestamp":"2026-04-28T17:00:00.000Z"} +{"doc_count":1222,"split_key":215607,"timestamp":"2026-04-28T17:00:00.000Z"} +{"doc_count":1033,"split_key":138915,"timestamp":"2026-04-28T17:00:00.000Z"} +{"doc_count":769,"split_key":51396,"timestamp":"2026-04-28T17:00:00.000Z"} +{"doc_count":11454,"split_key":211590,"timestamp":"2026-04-28T18:00:00.000Z"} +{"doc_count":3226,"split_key":201814,"timestamp":"2026-04-28T18:00:00.000Z"} +{"doc_count":875,"split_key":45102,"timestamp":"2026-04-28T18:00:00.000Z"} +{"doc_count":672,"split_key":141995,"timestamp":"2026-04-28T18:00:00.000Z"} +{"doc_count":508,"split_key":135377,"timestamp":"2026-04-28T18:00:00.000Z"} +{"doc_count":11980,"split_key":211590,"timestamp":"2026-04-28T19:00:00.000Z"} +{"doc_count":858,"split_key":45102,"timestamp":"2026-04-28T19:00:00.000Z"} +{"doc_count":856,"split_key":141995,"timestamp":"2026-04-28T19:00:00.000Z"} +{"doc_count":503,"split_key":24323,"timestamp":"2026-04-28T19:00:00.000Z"} +{"doc_count":447,"split_key":43139,"timestamp":"2026-04-28T19:00:00.000Z"} +{"doc_count":6002,"split_key":211590,"timestamp":"2026-04-28T20:00:00.000Z"} +{"doc_count":1207,"split_key":16509,"timestamp":"2026-04-28T20:00:00.000Z"} +{"doc_count":890,"split_key":45102,"timestamp":"2026-04-28T20:00:00.000Z"} +{"doc_count":540,"split_key":24323,"timestamp":"2026-04-28T20:00:00.000Z"} +{"doc_count":454,"split_key":396982,"timestamp":"2026-04-28T20:00:00.000Z"} +{"doc_count":9578,"split_key":211590,"timestamp":"2026-04-28T21:00:00.000Z"} +{"doc_count":777,"split_key":396982,"timestamp":"2026-04-28T21:00:00.000Z"} +{"doc_count":597,"split_key":16509,"timestamp":"2026-04-28T21:00:00.000Z"} +{"doc_count":536,"split_key":24323,"timestamp":"2026-04-28T21:00:00.000Z"} +{"doc_count":513,"split_key":49870,"timestamp":"2026-04-28T21:00:00.000Z"} +{"doc_count":8425,"split_key":211590,"timestamp":"2026-04-28T22:00:00.000Z"} +{"doc_count":627,"split_key":51396,"timestamp":"2026-04-28T22:00:00.000Z"} +{"doc_count":567,"split_key":142430,"timestamp":"2026-04-28T22:00:00.000Z"} +{"doc_count":561,"split_key":16509,"timestamp":"2026-04-28T22:00:00.000Z"} +{"doc_count":503,"split_key":24323,"timestamp":"2026-04-28T22:00:00.000Z"} +{"doc_count":6002,"split_key":211590,"timestamp":"2026-04-28T23:00:00.000Z"} +{"doc_count":527,"split_key":24323,"timestamp":"2026-04-28T23:00:00.000Z"} +{"doc_count":409,"split_key":214295,"timestamp":"2026-04-28T23:00:00.000Z"} +{"doc_count":407,"split_key":16509,"timestamp":"2026-04-28T23:00:00.000Z"} +{"doc_count":391,"split_key":396982,"timestamp":"2026-04-28T23:00:00.000Z"} +{"doc_count":6002,"split_key":211590,"timestamp":"2026-04-29T00:00:00.000Z"} +{"doc_count":583,"split_key":24323,"timestamp":"2026-04-29T00:00:00.000Z"} +{"doc_count":478,"split_key":396982,"timestamp":"2026-04-29T00:00:00.000Z"} +{"doc_count":440,"split_key":16509,"timestamp":"2026-04-29T00:00:00.000Z"} +{"doc_count":432,"split_key":53088,"timestamp":"2026-04-29T00:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-04-29T01:00:00.000Z"} +{"doc_count":1664,"split_key":210940,"timestamp":"2026-04-29T01:00:00.000Z"} +{"doc_count":1631,"split_key":27176,"timestamp":"2026-04-29T01:00:00.000Z"} +{"doc_count":981,"split_key":16509,"timestamp":"2026-04-29T01:00:00.000Z"} +{"doc_count":948,"split_key":24323,"timestamp":"2026-04-29T01:00:00.000Z"} +{"doc_count":12002,"split_key":211590,"timestamp":"2026-04-29T02:00:00.000Z"} +{"doc_count":1612,"split_key":49870,"timestamp":"2026-04-29T02:00:00.000Z"} +{"doc_count":1468,"split_key":16509,"timestamp":"2026-04-29T02:00:00.000Z"} +{"doc_count":1172,"split_key":24323,"timestamp":"2026-04-29T02:00:00.000Z"} +{"doc_count":926,"split_key":45102,"timestamp":"2026-04-29T02:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-04-29T03:00:00.000Z"} +{"doc_count":1971,"split_key":45102,"timestamp":"2026-04-29T03:00:00.000Z"} +{"doc_count":1650,"split_key":16509,"timestamp":"2026-04-29T03:00:00.000Z"} +{"doc_count":1303,"split_key":24323,"timestamp":"2026-04-29T03:00:00.000Z"} +{"doc_count":491,"split_key":51396,"timestamp":"2026-04-29T03:00:00.000Z"} +{"doc_count":1678,"split_key":45102,"timestamp":"2026-04-29T04:00:00.000Z"} +{"doc_count":1404,"split_key":16509,"timestamp":"2026-04-29T04:00:00.000Z"} +{"doc_count":1121,"split_key":24323,"timestamp":"2026-04-29T04:00:00.000Z"} +{"doc_count":549,"split_key":396982,"timestamp":"2026-04-29T04:00:00.000Z"} +{"doc_count":418,"split_key":37963,"timestamp":"2026-04-29T04:00:00.000Z"} +{"doc_count":12004,"split_key":211590,"timestamp":"2026-04-29T05:00:00.000Z"} +{"doc_count":2719,"split_key":142430,"timestamp":"2026-04-29T05:00:00.000Z"} +{"doc_count":751,"split_key":396982,"timestamp":"2026-04-29T05:00:00.000Z"} +{"doc_count":737,"split_key":24323,"timestamp":"2026-04-29T05:00:00.000Z"} +{"doc_count":495,"split_key":51396,"timestamp":"2026-04-29T05:00:00.000Z"} +{"doc_count":9002,"split_key":211590,"timestamp":"2026-04-29T06:00:00.000Z"} +{"doc_count":906,"split_key":24323,"timestamp":"2026-04-29T06:00:00.000Z"} +{"doc_count":750,"split_key":16509,"timestamp":"2026-04-29T06:00:00.000Z"} +{"doc_count":659,"split_key":63949,"timestamp":"2026-04-29T06:00:00.000Z"} +{"doc_count":586,"split_key":396982,"timestamp":"2026-04-29T06:00:00.000Z"} +{"doc_count":8109,"split_key":211590,"timestamp":"2026-04-29T07:00:00.000Z"} +{"doc_count":1214,"split_key":16509,"timestamp":"2026-04-29T07:00:00.000Z"} +{"doc_count":729,"split_key":396982,"timestamp":"2026-04-29T07:00:00.000Z"} +{"doc_count":642,"split_key":24323,"timestamp":"2026-04-29T07:00:00.000Z"} +{"doc_count":441,"split_key":141995,"timestamp":"2026-04-29T07:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-04-29T08:00:00.000Z"} +{"doc_count":1162,"split_key":16509,"timestamp":"2026-04-29T08:00:00.000Z"} +{"doc_count":469,"split_key":396982,"timestamp":"2026-04-29T08:00:00.000Z"} +{"doc_count":463,"split_key":15366,"timestamp":"2026-04-29T08:00:00.000Z"} +{"doc_count":380,"split_key":53667,"timestamp":"2026-04-29T08:00:00.000Z"} +{"doc_count":11731,"split_key":211590,"timestamp":"2026-04-29T09:00:00.000Z"} +{"doc_count":8632,"split_key":209334,"timestamp":"2026-04-29T09:00:00.000Z"} +{"doc_count":1279,"split_key":16509,"timestamp":"2026-04-29T09:00:00.000Z"} +{"doc_count":953,"split_key":51396,"timestamp":"2026-04-29T09:00:00.000Z"} +{"doc_count":407,"split_key":396982,"timestamp":"2026-04-29T09:00:00.000Z"} +{"doc_count":21738,"split_key":209334,"timestamp":"2026-04-29T10:00:00.000Z"} +{"doc_count":4166,"split_key":211590,"timestamp":"2026-04-29T10:00:00.000Z"} +{"doc_count":1176,"split_key":16509,"timestamp":"2026-04-29T10:00:00.000Z"} +{"doc_count":868,"split_key":51396,"timestamp":"2026-04-29T10:00:00.000Z"} +{"doc_count":841,"split_key":201401,"timestamp":"2026-04-29T10:00:00.000Z"} +{"doc_count":21971,"split_key":209334,"timestamp":"2026-04-29T11:00:00.000Z"} +{"doc_count":5105,"split_key":211590,"timestamp":"2026-04-29T11:00:00.000Z"} +{"doc_count":1223,"split_key":16509,"timestamp":"2026-04-29T11:00:00.000Z"} +{"doc_count":840,"split_key":201401,"timestamp":"2026-04-29T11:00:00.000Z"} +{"doc_count":518,"split_key":51396,"timestamp":"2026-04-29T11:00:00.000Z"} +{"doc_count":20568,"split_key":209334,"timestamp":"2026-04-29T12:00:00.000Z"} +{"doc_count":7721,"split_key":211590,"timestamp":"2026-04-29T12:00:00.000Z"} +{"doc_count":1579,"split_key":136190,"timestamp":"2026-04-29T12:00:00.000Z"} +{"doc_count":1415,"split_key":16509,"timestamp":"2026-04-29T12:00:00.000Z"} +{"doc_count":720,"split_key":45899,"timestamp":"2026-04-29T12:00:00.000Z"} +{"doc_count":21127,"split_key":209334,"timestamp":"2026-04-29T13:00:00.000Z"} +{"doc_count":7200,"split_key":211590,"timestamp":"2026-04-29T13:00:00.000Z"} +{"doc_count":1707,"split_key":136190,"timestamp":"2026-04-29T13:00:00.000Z"} +{"doc_count":1102,"split_key":16509,"timestamp":"2026-04-29T13:00:00.000Z"} +{"doc_count":1022,"split_key":201401,"timestamp":"2026-04-29T13:00:00.000Z"} +{"doc_count":20376,"split_key":209334,"timestamp":"2026-04-29T14:00:00.000Z"} +{"doc_count":3629,"split_key":268624,"timestamp":"2026-04-29T14:00:00.000Z"} +{"doc_count":3592,"split_key":142430,"timestamp":"2026-04-29T14:00:00.000Z"} +{"doc_count":3368,"split_key":211590,"timestamp":"2026-04-29T14:00:00.000Z"} +{"doc_count":941,"split_key":201401,"timestamp":"2026-04-29T14:00:00.000Z"} +{"doc_count":18699,"split_key":209334,"timestamp":"2026-04-29T15:00:00.000Z"} +{"doc_count":1183,"split_key":16509,"timestamp":"2026-04-29T15:00:00.000Z"} +{"doc_count":971,"split_key":201401,"timestamp":"2026-04-29T15:00:00.000Z"} +{"doc_count":859,"split_key":45102,"timestamp":"2026-04-29T15:00:00.000Z"} +{"doc_count":672,"split_key":45899,"timestamp":"2026-04-29T15:00:00.000Z"} +{"doc_count":3467,"split_key":211590,"timestamp":"2026-04-29T16:00:00.000Z"} +{"doc_count":1533,"split_key":45102,"timestamp":"2026-04-29T16:00:00.000Z"} +{"doc_count":1148,"split_key":16509,"timestamp":"2026-04-29T16:00:00.000Z"} +{"doc_count":704,"split_key":9318,"timestamp":"2026-04-29T16:00:00.000Z"} +{"doc_count":680,"split_key":45899,"timestamp":"2026-04-29T16:00:00.000Z"} +{"doc_count":36072,"split_key":268433,"timestamp":"2026-04-29T17:00:00.000Z"} +{"doc_count":22356,"split_key":211590,"timestamp":"2026-04-29T17:00:00.000Z"} +{"doc_count":865,"split_key":141995,"timestamp":"2026-04-29T17:00:00.000Z"} +{"doc_count":837,"split_key":45102,"timestamp":"2026-04-29T17:00:00.000Z"} +{"doc_count":778,"split_key":16509,"timestamp":"2026-04-29T17:00:00.000Z"} +{"doc_count":49986,"split_key":268433,"timestamp":"2026-04-29T18:00:00.000Z"} +{"doc_count":21700,"split_key":211590,"timestamp":"2026-04-29T18:00:00.000Z"} +{"doc_count":1507,"split_key":53088,"timestamp":"2026-04-29T18:00:00.000Z"} +{"doc_count":1387,"split_key":16509,"timestamp":"2026-04-29T18:00:00.000Z"} +{"doc_count":1090,"split_key":45102,"timestamp":"2026-04-29T18:00:00.000Z"} +{"doc_count":25085,"split_key":268433,"timestamp":"2026-04-29T19:00:00.000Z"} +{"doc_count":13255,"split_key":211590,"timestamp":"2026-04-29T19:00:00.000Z"} +{"doc_count":2101,"split_key":45102,"timestamp":"2026-04-29T19:00:00.000Z"} +{"doc_count":1687,"split_key":268538,"timestamp":"2026-04-29T19:00:00.000Z"} +{"doc_count":1171,"split_key":16509,"timestamp":"2026-04-29T19:00:00.000Z"} +{"doc_count":8973,"split_key":268538,"timestamp":"2026-04-29T20:00:00.000Z"} +{"doc_count":6002,"split_key":211590,"timestamp":"2026-04-29T20:00:00.000Z"} +{"doc_count":1259,"split_key":45102,"timestamp":"2026-04-29T20:00:00.000Z"} +{"doc_count":1048,"split_key":16509,"timestamp":"2026-04-29T20:00:00.000Z"} +{"doc_count":755,"split_key":9318,"timestamp":"2026-04-29T20:00:00.000Z"} +{"doc_count":6517,"split_key":268538,"timestamp":"2026-04-29T21:00:00.000Z"} +{"doc_count":6000,"split_key":211590,"timestamp":"2026-04-29T21:00:00.000Z"} +{"doc_count":1556,"split_key":45102,"timestamp":"2026-04-29T21:00:00.000Z"} +{"doc_count":1188,"split_key":16509,"timestamp":"2026-04-29T21:00:00.000Z"} +{"doc_count":669,"split_key":45899,"timestamp":"2026-04-29T21:00:00.000Z"} +{"doc_count":6617,"split_key":268538,"timestamp":"2026-04-29T22:00:00.000Z"} +{"doc_count":1942,"split_key":211590,"timestamp":"2026-04-29T22:00:00.000Z"} +{"doc_count":893,"split_key":45102,"timestamp":"2026-04-29T22:00:00.000Z"} +{"doc_count":832,"split_key":16509,"timestamp":"2026-04-29T22:00:00.000Z"} +{"doc_count":723,"split_key":396982,"timestamp":"2026-04-29T22:00:00.000Z"} +{"doc_count":9253,"split_key":211590,"timestamp":"2026-04-29T23:00:00.000Z"} +{"doc_count":6610,"split_key":268538,"timestamp":"2026-04-29T23:00:00.000Z"} +{"doc_count":1144,"split_key":16509,"timestamp":"2026-04-29T23:00:00.000Z"} +{"doc_count":754,"split_key":396982,"timestamp":"2026-04-29T23:00:00.000Z"} +{"doc_count":627,"split_key":45899,"timestamp":"2026-04-29T23:00:00.000Z"} +{"doc_count":20518,"split_key":211590,"timestamp":"2026-04-30T00:00:00.000Z"} +{"doc_count":6489,"split_key":268538,"timestamp":"2026-04-30T00:00:00.000Z"} +{"doc_count":3785,"split_key":142430,"timestamp":"2026-04-30T00:00:00.000Z"} +{"doc_count":684,"split_key":45899,"timestamp":"2026-04-30T00:00:00.000Z"} +{"doc_count":676,"split_key":396982,"timestamp":"2026-04-30T00:00:00.000Z"} +{"doc_count":12486,"split_key":211590,"timestamp":"2026-04-30T01:00:00.000Z"} +{"doc_count":6583,"split_key":268538,"timestamp":"2026-04-30T01:00:00.000Z"} +{"doc_count":1650,"split_key":45102,"timestamp":"2026-04-30T01:00:00.000Z"} +{"doc_count":707,"split_key":16509,"timestamp":"2026-04-30T01:00:00.000Z"} +{"doc_count":707,"split_key":396982,"timestamp":"2026-04-30T01:00:00.000Z"} +{"doc_count":6622,"split_key":268538,"timestamp":"2026-04-30T02:00:00.000Z"} +{"doc_count":1663,"split_key":45102,"timestamp":"2026-04-30T02:00:00.000Z"} +{"doc_count":952,"split_key":396982,"timestamp":"2026-04-30T02:00:00.000Z"} +{"doc_count":676,"split_key":45899,"timestamp":"2026-04-30T02:00:00.000Z"} +{"doc_count":613,"split_key":53667,"timestamp":"2026-04-30T02:00:00.000Z"} +{"doc_count":5665,"split_key":262880,"timestamp":"2026-04-30T03:00:00.000Z"} +{"doc_count":1758,"split_key":45102,"timestamp":"2026-04-30T03:00:00.000Z"} +{"doc_count":964,"split_key":14061,"timestamp":"2026-04-30T03:00:00.000Z"} +{"doc_count":933,"split_key":16509,"timestamp":"2026-04-30T03:00:00.000Z"} +{"doc_count":759,"split_key":396982,"timestamp":"2026-04-30T03:00:00.000Z"} +{"doc_count":6626,"split_key":262880,"timestamp":"2026-04-30T04:00:00.000Z"} +{"doc_count":1662,"split_key":45102,"timestamp":"2026-04-30T04:00:00.000Z"} +{"doc_count":748,"split_key":396982,"timestamp":"2026-04-30T04:00:00.000Z"} +{"doc_count":657,"split_key":53667,"timestamp":"2026-04-30T04:00:00.000Z"} +{"doc_count":635,"split_key":45899,"timestamp":"2026-04-30T04:00:00.000Z"} +{"doc_count":6534,"split_key":262880,"timestamp":"2026-04-30T05:00:00.000Z"} +{"doc_count":3441,"split_key":14061,"timestamp":"2026-04-30T05:00:00.000Z"} +{"doc_count":1698,"split_key":45102,"timestamp":"2026-04-30T05:00:00.000Z"} +{"doc_count":916,"split_key":396982,"timestamp":"2026-04-30T05:00:00.000Z"} +{"doc_count":838,"split_key":200730,"timestamp":"2026-04-30T05:00:00.000Z"} +{"doc_count":6685,"split_key":262880,"timestamp":"2026-04-30T06:00:00.000Z"} +{"doc_count":1684,"split_key":45102,"timestamp":"2026-04-30T06:00:00.000Z"} +{"doc_count":707,"split_key":53667,"timestamp":"2026-04-30T06:00:00.000Z"} +{"doc_count":665,"split_key":45899,"timestamp":"2026-04-30T06:00:00.000Z"} +{"doc_count":625,"split_key":49870,"timestamp":"2026-04-30T06:00:00.000Z"} +{"doc_count":6580,"split_key":262880,"timestamp":"2026-04-30T07:00:00.000Z"} +{"doc_count":1695,"split_key":45102,"timestamp":"2026-04-30T07:00:00.000Z"} +{"doc_count":1297,"split_key":49870,"timestamp":"2026-04-30T07:00:00.000Z"} +{"doc_count":741,"split_key":37963,"timestamp":"2026-04-30T07:00:00.000Z"} +{"doc_count":709,"split_key":53667,"timestamp":"2026-04-30T07:00:00.000Z"} +{"doc_count":6811,"split_key":262880,"timestamp":"2026-04-30T08:00:00.000Z"} +{"doc_count":3281,"split_key":16276,"timestamp":"2026-04-30T08:00:00.000Z"} +{"doc_count":1689,"split_key":45102,"timestamp":"2026-04-30T08:00:00.000Z"} +{"doc_count":794,"split_key":53667,"timestamp":"2026-04-30T08:00:00.000Z"} +{"doc_count":651,"split_key":45899,"timestamp":"2026-04-30T08:00:00.000Z"} +{"doc_count":6485,"split_key":262880,"timestamp":"2026-04-30T09:00:00.000Z"} +{"doc_count":1651,"split_key":45102,"timestamp":"2026-04-30T09:00:00.000Z"} +{"doc_count":904,"split_key":14061,"timestamp":"2026-04-30T09:00:00.000Z"} +{"doc_count":880,"split_key":24940,"timestamp":"2026-04-30T09:00:00.000Z"} +{"doc_count":823,"split_key":46606,"timestamp":"2026-04-30T09:00:00.000Z"} +{"doc_count":17828,"split_key":209334,"timestamp":"2026-04-30T10:00:00.000Z"} +{"doc_count":6658,"split_key":262880,"timestamp":"2026-04-30T10:00:00.000Z"} +{"doc_count":5319,"split_key":62904,"timestamp":"2026-04-30T10:00:00.000Z"} +{"doc_count":4014,"split_key":3842,"timestamp":"2026-04-30T10:00:00.000Z"} +{"doc_count":3436,"split_key":29802,"timestamp":"2026-04-30T10:00:00.000Z"} +{"doc_count":13007,"split_key":209334,"timestamp":"2026-04-30T11:00:00.000Z"} +{"doc_count":6724,"split_key":262880,"timestamp":"2026-04-30T11:00:00.000Z"} +{"doc_count":5888,"split_key":14061,"timestamp":"2026-04-30T11:00:00.000Z"} +{"doc_count":4246,"split_key":197540,"timestamp":"2026-04-30T11:00:00.000Z"} +{"doc_count":2822,"split_key":16276,"timestamp":"2026-04-30T11:00:00.000Z"} +{"doc_count":12209,"split_key":209334,"timestamp":"2026-04-30T12:00:00.000Z"} +{"doc_count":4320,"split_key":14061,"timestamp":"2026-04-30T12:00:00.000Z"} +{"doc_count":3923,"split_key":63949,"timestamp":"2026-04-30T12:00:00.000Z"} +{"doc_count":2615,"split_key":136190,"timestamp":"2026-04-30T12:00:00.000Z"} +{"doc_count":2517,"split_key":51167,"timestamp":"2026-04-30T12:00:00.000Z"} +{"doc_count":13834,"split_key":209334,"timestamp":"2026-04-30T13:00:00.000Z"} +{"doc_count":3819,"split_key":32181,"timestamp":"2026-04-30T13:00:00.000Z"} +{"doc_count":3458,"split_key":24940,"timestamp":"2026-04-30T13:00:00.000Z"} +{"doc_count":2906,"split_key":37611,"timestamp":"2026-04-30T13:00:00.000Z"} +{"doc_count":2517,"split_key":14061,"timestamp":"2026-04-30T13:00:00.000Z"} +{"doc_count":25805,"split_key":209334,"timestamp":"2026-04-30T14:00:00.000Z"} +{"doc_count":5256,"split_key":271410,"timestamp":"2026-04-30T14:00:00.000Z"} +{"doc_count":3184,"split_key":327864,"timestamp":"2026-04-30T14:00:00.000Z"} +{"doc_count":3070,"split_key":149089,"timestamp":"2026-04-30T14:00:00.000Z"} +{"doc_count":2203,"split_key":24940,"timestamp":"2026-04-30T14:00:00.000Z"} +{"doc_count":20029,"split_key":209334,"timestamp":"2026-04-30T15:00:00.000Z"} +{"doc_count":6652,"split_key":271410,"timestamp":"2026-04-30T15:00:00.000Z"} +{"doc_count":2770,"split_key":14061,"timestamp":"2026-04-30T15:00:00.000Z"} +{"doc_count":2743,"split_key":51167,"timestamp":"2026-04-30T15:00:00.000Z"} +{"doc_count":2482,"split_key":16276,"timestamp":"2026-04-30T15:00:00.000Z"} +{"doc_count":12660,"split_key":209334,"timestamp":"2026-04-30T16:00:00.000Z"} +{"doc_count":6461,"split_key":271410,"timestamp":"2026-04-30T16:00:00.000Z"} +{"doc_count":4330,"split_key":14061,"timestamp":"2026-04-30T16:00:00.000Z"} +{"doc_count":2888,"split_key":51167,"timestamp":"2026-04-30T16:00:00.000Z"} +{"doc_count":1710,"split_key":45102,"timestamp":"2026-04-30T16:00:00.000Z"} +{"doc_count":6655,"split_key":271410,"timestamp":"2026-04-30T17:00:00.000Z"} +{"doc_count":5421,"split_key":51167,"timestamp":"2026-04-30T17:00:00.000Z"} +{"doc_count":3721,"split_key":16276,"timestamp":"2026-04-30T17:00:00.000Z"} +{"doc_count":3242,"split_key":63949,"timestamp":"2026-04-30T17:00:00.000Z"} +{"doc_count":3225,"split_key":14061,"timestamp":"2026-04-30T17:00:00.000Z"} +{"doc_count":6653,"split_key":271410,"timestamp":"2026-04-30T18:00:00.000Z"} +{"doc_count":2016,"split_key":45102,"timestamp":"2026-04-30T18:00:00.000Z"} +{"doc_count":1596,"split_key":24940,"timestamp":"2026-04-30T18:00:00.000Z"} +{"doc_count":1223,"split_key":51167,"timestamp":"2026-04-30T18:00:00.000Z"} +{"doc_count":959,"split_key":396982,"timestamp":"2026-04-30T18:00:00.000Z"} +{"doc_count":21448,"split_key":63949,"timestamp":"2026-04-30T19:00:00.000Z"} +{"doc_count":20257,"split_key":200404,"timestamp":"2026-04-30T19:00:00.000Z"} +{"doc_count":5366,"split_key":209334,"timestamp":"2026-04-30T19:00:00.000Z"} +{"doc_count":4822,"split_key":51167,"timestamp":"2026-04-30T19:00:00.000Z"} +{"doc_count":2310,"split_key":6698,"timestamp":"2026-04-30T19:00:00.000Z"} +{"doc_count":21165,"split_key":200404,"timestamp":"2026-04-30T20:00:00.000Z"} +{"doc_count":13175,"split_key":49453,"timestamp":"2026-04-30T20:00:00.000Z"} +{"doc_count":12303,"split_key":209334,"timestamp":"2026-04-30T20:00:00.000Z"} +{"doc_count":12059,"split_key":49981,"timestamp":"2026-04-30T20:00:00.000Z"} +{"doc_count":10254,"split_key":14061,"timestamp":"2026-04-30T20:00:00.000Z"} +{"doc_count":12656,"split_key":200404,"timestamp":"2026-04-30T21:00:00.000Z"} +{"doc_count":3232,"split_key":396982,"timestamp":"2026-04-30T21:00:00.000Z"} +{"doc_count":3224,"split_key":51167,"timestamp":"2026-04-30T21:00:00.000Z"} +{"doc_count":2721,"split_key":55803,"timestamp":"2026-04-30T21:00:00.000Z"} +{"doc_count":2391,"split_key":14061,"timestamp":"2026-04-30T21:00:00.000Z"} +{"doc_count":12172,"split_key":14061,"timestamp":"2026-04-30T22:00:00.000Z"} +{"doc_count":7918,"split_key":51167,"timestamp":"2026-04-30T22:00:00.000Z"} +{"doc_count":1791,"split_key":46606,"timestamp":"2026-04-30T22:00:00.000Z"} +{"doc_count":1430,"split_key":203771,"timestamp":"2026-04-30T22:00:00.000Z"} +{"doc_count":1243,"split_key":45102,"timestamp":"2026-04-30T22:00:00.000Z"} +{"doc_count":24592,"split_key":16276,"timestamp":"2026-04-30T23:00:00.000Z"} +{"doc_count":14366,"split_key":36352,"timestamp":"2026-04-30T23:00:00.000Z"} +{"doc_count":12871,"split_key":14061,"timestamp":"2026-04-30T23:00:00.000Z"} +{"doc_count":10941,"split_key":31898,"timestamp":"2026-04-30T23:00:00.000Z"} +{"doc_count":8648,"split_key":19318,"timestamp":"2026-04-30T23:00:00.000Z"} +{"doc_count":8625,"split_key":60781,"timestamp":"2026-05-01T00:00:00.000Z"} +{"doc_count":5838,"split_key":51167,"timestamp":"2026-05-01T00:00:00.000Z"} +{"doc_count":5163,"split_key":46606,"timestamp":"2026-05-01T00:00:00.000Z"} +{"doc_count":4488,"split_key":16276,"timestamp":"2026-05-01T00:00:00.000Z"} +{"doc_count":4349,"split_key":39505,"timestamp":"2026-05-01T00:00:00.000Z"} +{"doc_count":4321,"split_key":14061,"timestamp":"2026-05-01T01:00:00.000Z"} +{"doc_count":2648,"split_key":203380,"timestamp":"2026-05-01T01:00:00.000Z"} +{"doc_count":1347,"split_key":51167,"timestamp":"2026-05-01T01:00:00.000Z"} +{"doc_count":1240,"split_key":33322,"timestamp":"2026-05-01T01:00:00.000Z"} +{"doc_count":1185,"split_key":20473,"timestamp":"2026-05-01T01:00:00.000Z"} +{"doc_count":39308,"split_key":62068,"timestamp":"2026-05-01T02:00:00.000Z"} +{"doc_count":7757,"split_key":51167,"timestamp":"2026-05-01T02:00:00.000Z"} +{"doc_count":6055,"split_key":16276,"timestamp":"2026-05-01T02:00:00.000Z"} +{"doc_count":4439,"split_key":14061,"timestamp":"2026-05-01T02:00:00.000Z"} +{"doc_count":2512,"split_key":46606,"timestamp":"2026-05-01T02:00:00.000Z"} +{"doc_count":41037,"split_key":16276,"timestamp":"2026-05-01T03:00:00.000Z"} +{"doc_count":17919,"split_key":14061,"timestamp":"2026-05-01T03:00:00.000Z"} +{"doc_count":12464,"split_key":51167,"timestamp":"2026-05-01T03:00:00.000Z"} +{"doc_count":2855,"split_key":24940,"timestamp":"2026-05-01T03:00:00.000Z"} +{"doc_count":2828,"split_key":32475,"timestamp":"2026-05-01T03:00:00.000Z"} +{"doc_count":37272,"split_key":51167,"timestamp":"2026-05-01T04:00:00.000Z"} +{"doc_count":21914,"split_key":24940,"timestamp":"2026-05-01T04:00:00.000Z"} +{"doc_count":20858,"split_key":14061,"timestamp":"2026-05-01T04:00:00.000Z"} +{"doc_count":3535,"split_key":19871,"timestamp":"2026-05-01T04:00:00.000Z"} +{"doc_count":2905,"split_key":212238,"timestamp":"2026-05-01T04:00:00.000Z"} +{"doc_count":9169,"split_key":22768,"timestamp":"2026-05-01T05:00:00.000Z"} +{"doc_count":7684,"split_key":46606,"timestamp":"2026-05-01T05:00:00.000Z"} +{"doc_count":7189,"split_key":35916,"timestamp":"2026-05-01T05:00:00.000Z"} +{"doc_count":2629,"split_key":14061,"timestamp":"2026-05-01T05:00:00.000Z"} +{"doc_count":2619,"split_key":60781,"timestamp":"2026-05-01T05:00:00.000Z"} +{"doc_count":8808,"split_key":51167,"timestamp":"2026-05-01T06:00:00.000Z"} +{"doc_count":8340,"split_key":14061,"timestamp":"2026-05-01T06:00:00.000Z"} +{"doc_count":8203,"split_key":16276,"timestamp":"2026-05-01T06:00:00.000Z"} +{"doc_count":6922,"split_key":59711,"timestamp":"2026-05-01T06:00:00.000Z"} +{"doc_count":6846,"split_key":22878,"timestamp":"2026-05-01T06:00:00.000Z"} +{"doc_count":14940,"split_key":14061,"timestamp":"2026-05-01T07:00:00.000Z"} +{"doc_count":8099,"split_key":214693,"timestamp":"2026-05-01T07:00:00.000Z"} +{"doc_count":6628,"split_key":51167,"timestamp":"2026-05-01T07:00:00.000Z"} +{"doc_count":5391,"split_key":394695,"timestamp":"2026-05-01T07:00:00.000Z"} +{"doc_count":5363,"split_key":13213,"timestamp":"2026-05-01T07:00:00.000Z"} +{"doc_count":11897,"split_key":37611,"timestamp":"2026-05-01T08:00:00.000Z"} +{"doc_count":11036,"split_key":16276,"timestamp":"2026-05-01T08:00:00.000Z"} +{"doc_count":6851,"split_key":14061,"timestamp":"2026-05-01T08:00:00.000Z"} +{"doc_count":5990,"split_key":51167,"timestamp":"2026-05-01T08:00:00.000Z"} +{"doc_count":2893,"split_key":20473,"timestamp":"2026-05-01T08:00:00.000Z"} +{"doc_count":25810,"split_key":204601,"timestamp":"2026-05-01T09:00:00.000Z"} +{"doc_count":3913,"split_key":209334,"timestamp":"2026-05-01T09:00:00.000Z"} +{"doc_count":3317,"split_key":51167,"timestamp":"2026-05-01T09:00:00.000Z"} +{"doc_count":1812,"split_key":24940,"timestamp":"2026-05-01T09:00:00.000Z"} +{"doc_count":1370,"split_key":14061,"timestamp":"2026-05-01T09:00:00.000Z"} +{"doc_count":142813,"split_key":24940,"timestamp":"2026-05-01T10:00:00.000Z"} +{"doc_count":22318,"split_key":209334,"timestamp":"2026-05-01T10:00:00.000Z"} +{"doc_count":11418,"split_key":14061,"timestamp":"2026-05-01T10:00:00.000Z"} +{"doc_count":7228,"split_key":19871,"timestamp":"2026-05-01T10:00:00.000Z"} +{"doc_count":4411,"split_key":141995,"timestamp":"2026-05-01T10:00:00.000Z"} +{"doc_count":27102,"split_key":209334,"timestamp":"2026-05-01T11:00:00.000Z"} +{"doc_count":26015,"split_key":133150,"timestamp":"2026-05-01T11:00:00.000Z"} +{"doc_count":16474,"split_key":16276,"timestamp":"2026-05-01T11:00:00.000Z"} +{"doc_count":9008,"split_key":24940,"timestamp":"2026-05-01T11:00:00.000Z"} +{"doc_count":6321,"split_key":14061,"timestamp":"2026-05-01T11:00:00.000Z"} +{"doc_count":27717,"split_key":63949,"timestamp":"2026-05-01T12:00:00.000Z"} +{"doc_count":24570,"split_key":209334,"timestamp":"2026-05-01T12:00:00.000Z"} +{"doc_count":23995,"split_key":14061,"timestamp":"2026-05-01T12:00:00.000Z"} +{"doc_count":11088,"split_key":20473,"timestamp":"2026-05-01T12:00:00.000Z"} +{"doc_count":4081,"split_key":51167,"timestamp":"2026-05-01T12:00:00.000Z"} +{"doc_count":24404,"split_key":209334,"timestamp":"2026-05-01T13:00:00.000Z"} +{"doc_count":14518,"split_key":202425,"timestamp":"2026-05-01T13:00:00.000Z"} +{"doc_count":7266,"split_key":55293,"timestamp":"2026-05-01T13:00:00.000Z"} +{"doc_count":6530,"split_key":14061,"timestamp":"2026-05-01T13:00:00.000Z"} +{"doc_count":4722,"split_key":51167,"timestamp":"2026-05-01T13:00:00.000Z"} +{"doc_count":34044,"split_key":209334,"timestamp":"2026-05-01T14:00:00.000Z"} +{"doc_count":21264,"split_key":202425,"timestamp":"2026-05-01T14:00:00.000Z"} +{"doc_count":7933,"split_key":51167,"timestamp":"2026-05-01T14:00:00.000Z"} +{"doc_count":2448,"split_key":14061,"timestamp":"2026-05-01T14:00:00.000Z"} +{"doc_count":1576,"split_key":20738,"timestamp":"2026-05-01T14:00:00.000Z"} +{"doc_count":7709,"split_key":32748,"timestamp":"2026-05-01T15:00:00.000Z"} +{"doc_count":5091,"split_key":51167,"timestamp":"2026-05-01T15:00:00.000Z"} +{"doc_count":5036,"split_key":63949,"timestamp":"2026-05-01T15:00:00.000Z"} +{"doc_count":4391,"split_key":19318,"timestamp":"2026-05-01T15:00:00.000Z"} +{"doc_count":4194,"split_key":396073,"timestamp":"2026-05-01T15:00:00.000Z"} +{"doc_count":23001,"split_key":63949,"timestamp":"2026-05-01T16:00:00.000Z"} +{"doc_count":5529,"split_key":14061,"timestamp":"2026-05-01T16:00:00.000Z"} +{"doc_count":4957,"split_key":13213,"timestamp":"2026-05-01T16:00:00.000Z"} +{"doc_count":2577,"split_key":46606,"timestamp":"2026-05-01T16:00:00.000Z"} +{"doc_count":2519,"split_key":42020,"timestamp":"2026-05-01T16:00:00.000Z"} +{"doc_count":10926,"split_key":398019,"timestamp":"2026-05-01T17:00:00.000Z"} +{"doc_count":10569,"split_key":42020,"timestamp":"2026-05-01T17:00:00.000Z"} +{"doc_count":7566,"split_key":16276,"timestamp":"2026-05-01T17:00:00.000Z"} +{"doc_count":5878,"split_key":32613,"timestamp":"2026-05-01T17:00:00.000Z"} +{"doc_count":5404,"split_key":14061,"timestamp":"2026-05-01T17:00:00.000Z"} +{"doc_count":8269,"split_key":32613,"timestamp":"2026-05-01T18:00:00.000Z"} +{"doc_count":7915,"split_key":12028,"timestamp":"2026-05-01T18:00:00.000Z"} +{"doc_count":7667,"split_key":14061,"timestamp":"2026-05-01T18:00:00.000Z"} +{"doc_count":6875,"split_key":202840,"timestamp":"2026-05-01T18:00:00.000Z"} +{"doc_count":4558,"split_key":42020,"timestamp":"2026-05-01T18:00:00.000Z"} +{"doc_count":30849,"split_key":7979,"timestamp":"2026-05-01T19:00:00.000Z"} +{"doc_count":13942,"split_key":51167,"timestamp":"2026-05-01T19:00:00.000Z"} +{"doc_count":12206,"split_key":202840,"timestamp":"2026-05-01T19:00:00.000Z"} +{"doc_count":8852,"split_key":26277,"timestamp":"2026-05-01T19:00:00.000Z"} +{"doc_count":4060,"split_key":14061,"timestamp":"2026-05-01T19:00:00.000Z"} +{"doc_count":4888,"split_key":16276,"timestamp":"2026-05-01T20:00:00.000Z"} +{"doc_count":4524,"split_key":138915,"timestamp":"2026-05-01T20:00:00.000Z"} +{"doc_count":2799,"split_key":12876,"timestamp":"2026-05-01T20:00:00.000Z"} +{"doc_count":2658,"split_key":36352,"timestamp":"2026-05-01T20:00:00.000Z"} +{"doc_count":2191,"split_key":41828,"timestamp":"2026-05-01T20:00:00.000Z"} +{"doc_count":19565,"split_key":18501,"timestamp":"2026-05-01T21:00:00.000Z"} +{"doc_count":7015,"split_key":14061,"timestamp":"2026-05-01T21:00:00.000Z"} +{"doc_count":2033,"split_key":41828,"timestamp":"2026-05-01T21:00:00.000Z"} +{"doc_count":1580,"split_key":36352,"timestamp":"2026-05-01T21:00:00.000Z"} +{"doc_count":1127,"split_key":53667,"timestamp":"2026-05-01T21:00:00.000Z"} +{"doc_count":12874,"split_key":14061,"timestamp":"2026-05-01T22:00:00.000Z"} +{"doc_count":11438,"split_key":18501,"timestamp":"2026-05-01T22:00:00.000Z"} +{"doc_count":8780,"split_key":36352,"timestamp":"2026-05-01T22:00:00.000Z"} +{"doc_count":8187,"split_key":138915,"timestamp":"2026-05-01T22:00:00.000Z"} +{"doc_count":6919,"split_key":19969,"timestamp":"2026-05-01T22:00:00.000Z"} +{"doc_count":11038,"split_key":13768,"timestamp":"2026-05-01T23:00:00.000Z"} +{"doc_count":5926,"split_key":55286,"timestamp":"2026-05-01T23:00:00.000Z"} +{"doc_count":3062,"split_key":32475,"timestamp":"2026-05-01T23:00:00.000Z"} +{"doc_count":2723,"split_key":149020,"timestamp":"2026-05-01T23:00:00.000Z"} +{"doc_count":2614,"split_key":36352,"timestamp":"2026-05-01T23:00:00.000Z"} +{"doc_count":8204,"split_key":60071,"timestamp":"2026-05-02T00:00:00.000Z"} +{"doc_count":3880,"split_key":16276,"timestamp":"2026-05-02T00:00:00.000Z"} +{"doc_count":2069,"split_key":14061,"timestamp":"2026-05-02T00:00:00.000Z"} +{"doc_count":1771,"split_key":36352,"timestamp":"2026-05-02T00:00:00.000Z"} +{"doc_count":1377,"split_key":51167,"timestamp":"2026-05-02T00:00:00.000Z"} +{"doc_count":2091,"split_key":36352,"timestamp":"2026-05-02T01:00:00.000Z"} +{"doc_count":1910,"split_key":14061,"timestamp":"2026-05-02T01:00:00.000Z"} +{"doc_count":1685,"split_key":7393,"timestamp":"2026-05-02T01:00:00.000Z"} +{"doc_count":1406,"split_key":16276,"timestamp":"2026-05-02T01:00:00.000Z"} +{"doc_count":1050,"split_key":24940,"timestamp":"2026-05-02T01:00:00.000Z"} +{"doc_count":13225,"split_key":13213,"timestamp":"2026-05-02T02:00:00.000Z"} +{"doc_count":2608,"split_key":141995,"timestamp":"2026-05-02T02:00:00.000Z"} +{"doc_count":1904,"split_key":14061,"timestamp":"2026-05-02T02:00:00.000Z"} +{"doc_count":1731,"split_key":36352,"timestamp":"2026-05-02T02:00:00.000Z"} +{"doc_count":1142,"split_key":24940,"timestamp":"2026-05-02T02:00:00.000Z"} +{"doc_count":20004,"split_key":51167,"timestamp":"2026-05-02T03:00:00.000Z"} +{"doc_count":12068,"split_key":53755,"timestamp":"2026-05-02T03:00:00.000Z"} +{"doc_count":4801,"split_key":31898,"timestamp":"2026-05-02T03:00:00.000Z"} +{"doc_count":2364,"split_key":24940,"timestamp":"2026-05-02T03:00:00.000Z"} +{"doc_count":2122,"split_key":14061,"timestamp":"2026-05-02T03:00:00.000Z"} +{"doc_count":4144,"split_key":215730,"timestamp":"2026-05-02T04:00:00.000Z"} +{"doc_count":2970,"split_key":40021,"timestamp":"2026-05-02T04:00:00.000Z"} +{"doc_count":2376,"split_key":20857,"timestamp":"2026-05-02T04:00:00.000Z"} +{"doc_count":2251,"split_key":14061,"timestamp":"2026-05-02T04:00:00.000Z"} +{"doc_count":1805,"split_key":63949,"timestamp":"2026-05-02T04:00:00.000Z"} +{"doc_count":8781,"split_key":133380,"timestamp":"2026-05-02T05:00:00.000Z"} +{"doc_count":8277,"split_key":40021,"timestamp":"2026-05-02T05:00:00.000Z"} +{"doc_count":6717,"split_key":213038,"timestamp":"2026-05-02T05:00:00.000Z"} +{"doc_count":6639,"split_key":9009,"timestamp":"2026-05-02T05:00:00.000Z"} +{"doc_count":6447,"split_key":14061,"timestamp":"2026-05-02T05:00:00.000Z"} +{"doc_count":27721,"split_key":51852,"timestamp":"2026-05-02T06:00:00.000Z"} +{"doc_count":5277,"split_key":51167,"timestamp":"2026-05-02T06:00:00.000Z"} +{"doc_count":1833,"split_key":24940,"timestamp":"2026-05-02T06:00:00.000Z"} +{"doc_count":1801,"split_key":14061,"timestamp":"2026-05-02T06:00:00.000Z"} +{"doc_count":1181,"split_key":396982,"timestamp":"2026-05-02T06:00:00.000Z"} +{"doc_count":16517,"split_key":14061,"timestamp":"2026-05-02T07:00:00.000Z"} +{"doc_count":12083,"split_key":140641,"timestamp":"2026-05-02T07:00:00.000Z"} +{"doc_count":11327,"split_key":16276,"timestamp":"2026-05-02T07:00:00.000Z"} +{"doc_count":7457,"split_key":40092,"timestamp":"2026-05-02T07:00:00.000Z"} +{"doc_count":6022,"split_key":58212,"timestamp":"2026-05-02T07:00:00.000Z"} +{"doc_count":7629,"split_key":49981,"timestamp":"2026-05-02T08:00:00.000Z"} +{"doc_count":5307,"split_key":14361,"timestamp":"2026-05-02T08:00:00.000Z"} +{"doc_count":3095,"split_key":200019,"timestamp":"2026-05-02T08:00:00.000Z"} +{"doc_count":2245,"split_key":16276,"timestamp":"2026-05-02T08:00:00.000Z"} +{"doc_count":2184,"split_key":14061,"timestamp":"2026-05-02T08:00:00.000Z"} +{"doc_count":6837,"split_key":51167,"timestamp":"2026-05-02T09:00:00.000Z"} +{"doc_count":5178,"split_key":209334,"timestamp":"2026-05-02T09:00:00.000Z"} +{"doc_count":3543,"split_key":14061,"timestamp":"2026-05-02T09:00:00.000Z"} +{"doc_count":3490,"split_key":35042,"timestamp":"2026-05-02T09:00:00.000Z"} +{"doc_count":3291,"split_key":25198,"timestamp":"2026-05-02T09:00:00.000Z"} +{"doc_count":40748,"split_key":206264,"timestamp":"2026-05-02T10:00:00.000Z"} +{"doc_count":24629,"split_key":209334,"timestamp":"2026-05-02T10:00:00.000Z"} +{"doc_count":3058,"split_key":205544,"timestamp":"2026-05-02T10:00:00.000Z"} +{"doc_count":2715,"split_key":14061,"timestamp":"2026-05-02T10:00:00.000Z"} +{"doc_count":1740,"split_key":25198,"timestamp":"2026-05-02T10:00:00.000Z"} +{"doc_count":36640,"split_key":206264,"timestamp":"2026-05-02T11:00:00.000Z"} +{"doc_count":24827,"split_key":209334,"timestamp":"2026-05-02T11:00:00.000Z"} +{"doc_count":14288,"split_key":14061,"timestamp":"2026-05-02T11:00:00.000Z"} +{"doc_count":13328,"split_key":20454,"timestamp":"2026-05-02T11:00:00.000Z"} +{"doc_count":9217,"split_key":51167,"timestamp":"2026-05-02T11:00:00.000Z"} +{"doc_count":32225,"split_key":206264,"timestamp":"2026-05-02T12:00:00.000Z"} +{"doc_count":24182,"split_key":209334,"timestamp":"2026-05-02T12:00:00.000Z"} +{"doc_count":13735,"split_key":16276,"timestamp":"2026-05-02T12:00:00.000Z"} +{"doc_count":2418,"split_key":14061,"timestamp":"2026-05-02T12:00:00.000Z"} +{"doc_count":1810,"split_key":24940,"timestamp":"2026-05-02T12:00:00.000Z"} +{"doc_count":33124,"split_key":206264,"timestamp":"2026-05-02T13:00:00.000Z"} +{"doc_count":27238,"split_key":16276,"timestamp":"2026-05-02T13:00:00.000Z"} +{"doc_count":25133,"split_key":209334,"timestamp":"2026-05-02T13:00:00.000Z"} +{"doc_count":2059,"split_key":24940,"timestamp":"2026-05-02T13:00:00.000Z"} +{"doc_count":1464,"split_key":14061,"timestamp":"2026-05-02T13:00:00.000Z"} +{"doc_count":33748,"split_key":206264,"timestamp":"2026-05-02T14:00:00.000Z"} +{"doc_count":24197,"split_key":209334,"timestamp":"2026-05-02T14:00:00.000Z"} +{"doc_count":15648,"split_key":16276,"timestamp":"2026-05-02T14:00:00.000Z"} +{"doc_count":1734,"split_key":24940,"timestamp":"2026-05-02T14:00:00.000Z"} +{"doc_count":1698,"split_key":14061,"timestamp":"2026-05-02T14:00:00.000Z"} +{"doc_count":16987,"split_key":206264,"timestamp":"2026-05-02T15:00:00.000Z"} +{"doc_count":16542,"split_key":16276,"timestamp":"2026-05-02T15:00:00.000Z"} +{"doc_count":11014,"split_key":132335,"timestamp":"2026-05-02T15:00:00.000Z"} +{"doc_count":10459,"split_key":209334,"timestamp":"2026-05-02T15:00:00.000Z"} +{"doc_count":4521,"split_key":13213,"timestamp":"2026-05-02T15:00:00.000Z"} +{"doc_count":2917,"split_key":16276,"timestamp":"2026-05-02T16:00:00.000Z"} +{"doc_count":2203,"split_key":133719,"timestamp":"2026-05-02T16:00:00.000Z"} +{"doc_count":1844,"split_key":141995,"timestamp":"2026-05-02T16:00:00.000Z"} +{"doc_count":1662,"split_key":51167,"timestamp":"2026-05-02T16:00:00.000Z"} +{"doc_count":1429,"split_key":14061,"timestamp":"2026-05-02T16:00:00.000Z"} +{"doc_count":1390,"split_key":206264,"timestamp":"2026-05-02T17:00:00.000Z"} +{"doc_count":1380,"split_key":14061,"timestamp":"2026-05-02T17:00:00.000Z"} +{"doc_count":1114,"split_key":24940,"timestamp":"2026-05-02T17:00:00.000Z"} +{"doc_count":975,"split_key":131423,"timestamp":"2026-05-02T17:00:00.000Z"} +{"doc_count":952,"split_key":133719,"timestamp":"2026-05-02T17:00:00.000Z"} +{"doc_count":35642,"split_key":206264,"timestamp":"2026-05-02T18:00:00.000Z"} +{"doc_count":7164,"split_key":51167,"timestamp":"2026-05-02T18:00:00.000Z"} +{"doc_count":2061,"split_key":131423,"timestamp":"2026-05-02T18:00:00.000Z"} +{"doc_count":1440,"split_key":14061,"timestamp":"2026-05-02T18:00:00.000Z"} +{"doc_count":1106,"split_key":24940,"timestamp":"2026-05-02T18:00:00.000Z"} +{"doc_count":35334,"split_key":206264,"timestamp":"2026-05-02T19:00:00.000Z"} +{"doc_count":11153,"split_key":13213,"timestamp":"2026-05-02T19:00:00.000Z"} +{"doc_count":3005,"split_key":24446,"timestamp":"2026-05-02T19:00:00.000Z"} +{"doc_count":1568,"split_key":14061,"timestamp":"2026-05-02T19:00:00.000Z"} +{"doc_count":1523,"split_key":131423,"timestamp":"2026-05-02T19:00:00.000Z"} +{"doc_count":36405,"split_key":206264,"timestamp":"2026-05-02T20:00:00.000Z"} +{"doc_count":10724,"split_key":140444,"timestamp":"2026-05-02T20:00:00.000Z"} +{"doc_count":1688,"split_key":14061,"timestamp":"2026-05-02T20:00:00.000Z"} +{"doc_count":1560,"split_key":51167,"timestamp":"2026-05-02T20:00:00.000Z"} +{"doc_count":1272,"split_key":131423,"timestamp":"2026-05-02T20:00:00.000Z"} +{"doc_count":36863,"split_key":206264,"timestamp":"2026-05-02T21:00:00.000Z"} +{"doc_count":2735,"split_key":51167,"timestamp":"2026-05-02T21:00:00.000Z"} +{"doc_count":1508,"split_key":45102,"timestamp":"2026-05-02T21:00:00.000Z"} +{"doc_count":1444,"split_key":14061,"timestamp":"2026-05-02T21:00:00.000Z"} +{"doc_count":1175,"split_key":51396,"timestamp":"2026-05-02T21:00:00.000Z"} +{"doc_count":37043,"split_key":206264,"timestamp":"2026-05-02T22:00:00.000Z"} +{"doc_count":1502,"split_key":14061,"timestamp":"2026-05-02T22:00:00.000Z"} +{"doc_count":1480,"split_key":45102,"timestamp":"2026-05-02T22:00:00.000Z"} +{"doc_count":1294,"split_key":16276,"timestamp":"2026-05-02T22:00:00.000Z"} +{"doc_count":1156,"split_key":7203,"timestamp":"2026-05-02T22:00:00.000Z"} +{"doc_count":37587,"split_key":206264,"timestamp":"2026-05-02T23:00:00.000Z"} +{"doc_count":4093,"split_key":36352,"timestamp":"2026-05-02T23:00:00.000Z"} +{"doc_count":3830,"split_key":32475,"timestamp":"2026-05-02T23:00:00.000Z"} +{"doc_count":1641,"split_key":45102,"timestamp":"2026-05-02T23:00:00.000Z"} +{"doc_count":1447,"split_key":14061,"timestamp":"2026-05-02T23:00:00.000Z"} +{"doc_count":38162,"split_key":206264,"timestamp":"2026-05-03T00:00:00.000Z"} +{"doc_count":11233,"split_key":19318,"timestamp":"2026-05-03T00:00:00.000Z"} +{"doc_count":1490,"split_key":14061,"timestamp":"2026-05-03T00:00:00.000Z"} +{"doc_count":1129,"split_key":24940,"timestamp":"2026-05-03T00:00:00.000Z"} +{"doc_count":866,"split_key":396982,"timestamp":"2026-05-03T00:00:00.000Z"} +{"doc_count":62419,"split_key":19318,"timestamp":"2026-05-03T01:00:00.000Z"} +{"doc_count":38680,"split_key":206264,"timestamp":"2026-05-03T01:00:00.000Z"} +{"doc_count":9095,"split_key":29757,"timestamp":"2026-05-03T01:00:00.000Z"} +{"doc_count":5254,"split_key":329184,"timestamp":"2026-05-03T01:00:00.000Z"} +{"doc_count":2563,"split_key":133296,"timestamp":"2026-05-03T01:00:00.000Z"} +{"doc_count":39622,"split_key":206264,"timestamp":"2026-05-03T02:00:00.000Z"} +{"doc_count":3852,"split_key":51167,"timestamp":"2026-05-03T02:00:00.000Z"} +{"doc_count":1901,"split_key":14061,"timestamp":"2026-05-03T02:00:00.000Z"} +{"doc_count":1484,"split_key":133296,"timestamp":"2026-05-03T02:00:00.000Z"} +{"doc_count":1441,"split_key":13213,"timestamp":"2026-05-03T02:00:00.000Z"} +{"doc_count":40138,"split_key":206264,"timestamp":"2026-05-03T03:00:00.000Z"} +{"doc_count":2208,"split_key":205759,"timestamp":"2026-05-03T03:00:00.000Z"} +{"doc_count":1731,"split_key":20473,"timestamp":"2026-05-03T03:00:00.000Z"} +{"doc_count":1613,"split_key":14061,"timestamp":"2026-05-03T03:00:00.000Z"} +{"doc_count":1254,"split_key":45102,"timestamp":"2026-05-03T03:00:00.000Z"} +{"doc_count":40213,"split_key":206264,"timestamp":"2026-05-03T04:00:00.000Z"} +{"doc_count":3274,"split_key":51167,"timestamp":"2026-05-03T04:00:00.000Z"} +{"doc_count":2044,"split_key":396982,"timestamp":"2026-05-03T04:00:00.000Z"} +{"doc_count":1611,"split_key":14061,"timestamp":"2026-05-03T04:00:00.000Z"} +{"doc_count":1278,"split_key":45102,"timestamp":"2026-05-03T04:00:00.000Z"} +{"doc_count":40128,"split_key":206264,"timestamp":"2026-05-03T05:00:00.000Z"} +{"doc_count":2179,"split_key":396982,"timestamp":"2026-05-03T05:00:00.000Z"} +{"doc_count":1594,"split_key":14061,"timestamp":"2026-05-03T05:00:00.000Z"} +{"doc_count":1301,"split_key":45102,"timestamp":"2026-05-03T05:00:00.000Z"} +{"doc_count":1057,"split_key":24940,"timestamp":"2026-05-03T05:00:00.000Z"} +{"doc_count":40741,"split_key":206264,"timestamp":"2026-05-03T06:00:00.000Z"} +{"doc_count":1914,"split_key":14061,"timestamp":"2026-05-03T06:00:00.000Z"} +{"doc_count":1708,"split_key":396982,"timestamp":"2026-05-03T06:00:00.000Z"} +{"doc_count":1079,"split_key":24940,"timestamp":"2026-05-03T06:00:00.000Z"} +{"doc_count":779,"split_key":51396,"timestamp":"2026-05-03T06:00:00.000Z"} +{"doc_count":41747,"split_key":206264,"timestamp":"2026-05-03T07:00:00.000Z"} +{"doc_count":11494,"split_key":37100,"timestamp":"2026-05-03T07:00:00.000Z"} +{"doc_count":6639,"split_key":13213,"timestamp":"2026-05-03T07:00:00.000Z"} +{"doc_count":2586,"split_key":14061,"timestamp":"2026-05-03T07:00:00.000Z"} +{"doc_count":2206,"split_key":396982,"timestamp":"2026-05-03T07:00:00.000Z"} +{"doc_count":42067,"split_key":206264,"timestamp":"2026-05-03T08:00:00.000Z"} +{"doc_count":12133,"split_key":37100,"timestamp":"2026-05-03T08:00:00.000Z"} +{"doc_count":3798,"split_key":211590,"timestamp":"2026-05-03T08:00:00.000Z"} +{"doc_count":3436,"split_key":14061,"timestamp":"2026-05-03T08:00:00.000Z"} +{"doc_count":3355,"split_key":16276,"timestamp":"2026-05-03T08:00:00.000Z"} +{"doc_count":42408,"split_key":206264,"timestamp":"2026-05-03T09:00:00.000Z"} +{"doc_count":7208,"split_key":211590,"timestamp":"2026-05-03T09:00:00.000Z"} +{"doc_count":4036,"split_key":209334,"timestamp":"2026-05-03T09:00:00.000Z"} +{"doc_count":3972,"split_key":14061,"timestamp":"2026-05-03T09:00:00.000Z"} +{"doc_count":2897,"split_key":51167,"timestamp":"2026-05-03T09:00:00.000Z"} +{"doc_count":36174,"split_key":206264,"timestamp":"2026-05-03T10:00:00.000Z"} +{"doc_count":19369,"split_key":209334,"timestamp":"2026-05-03T10:00:00.000Z"} +{"doc_count":6075,"split_key":23470,"timestamp":"2026-05-03T10:00:00.000Z"} +{"doc_count":5923,"split_key":14061,"timestamp":"2026-05-03T10:00:00.000Z"} +{"doc_count":4549,"split_key":51167,"timestamp":"2026-05-03T10:00:00.000Z"} +{"doc_count":22560,"split_key":209334,"timestamp":"2026-05-03T11:00:00.000Z"} +{"doc_count":8645,"split_key":14061,"timestamp":"2026-05-03T11:00:00.000Z"} +{"doc_count":4322,"split_key":211590,"timestamp":"2026-05-03T11:00:00.000Z"} +{"doc_count":1315,"split_key":24940,"timestamp":"2026-05-03T11:00:00.000Z"} +{"doc_count":942,"split_key":28423,"timestamp":"2026-05-03T11:00:00.000Z"} +{"doc_count":29979,"split_key":206264,"timestamp":"2026-05-03T12:00:00.000Z"} +{"doc_count":22573,"split_key":209334,"timestamp":"2026-05-03T12:00:00.000Z"} +{"doc_count":22274,"split_key":211590,"timestamp":"2026-05-03T12:00:00.000Z"} +{"doc_count":3382,"split_key":14061,"timestamp":"2026-05-03T12:00:00.000Z"} +{"doc_count":1397,"split_key":24940,"timestamp":"2026-05-03T12:00:00.000Z"} +{"doc_count":43092,"split_key":206264,"timestamp":"2026-05-03T13:00:00.000Z"} +{"doc_count":21869,"split_key":209334,"timestamp":"2026-05-03T13:00:00.000Z"} +{"doc_count":14802,"split_key":211590,"timestamp":"2026-05-03T13:00:00.000Z"} +{"doc_count":2963,"split_key":14061,"timestamp":"2026-05-03T13:00:00.000Z"} +{"doc_count":1648,"split_key":141995,"timestamp":"2026-05-03T13:00:00.000Z"} +{"doc_count":44096,"split_key":206264,"timestamp":"2026-05-03T14:00:00.000Z"} +{"doc_count":21051,"split_key":209334,"timestamp":"2026-05-03T14:00:00.000Z"} +{"doc_count":9853,"split_key":51167,"timestamp":"2026-05-03T14:00:00.000Z"} +{"doc_count":6460,"split_key":211590,"timestamp":"2026-05-03T14:00:00.000Z"} +{"doc_count":4460,"split_key":16276,"timestamp":"2026-05-03T14:00:00.000Z"} +{"doc_count":44764,"split_key":206264,"timestamp":"2026-05-03T15:00:00.000Z"} +{"doc_count":21376,"split_key":209334,"timestamp":"2026-05-03T15:00:00.000Z"} +{"doc_count":3129,"split_key":211590,"timestamp":"2026-05-03T15:00:00.000Z"} +{"doc_count":1961,"split_key":14061,"timestamp":"2026-05-03T15:00:00.000Z"} +{"doc_count":1090,"split_key":24940,"timestamp":"2026-05-03T15:00:00.000Z"} +{"doc_count":45059,"split_key":206264,"timestamp":"2026-05-03T16:00:00.000Z"} +{"doc_count":5051,"split_key":209334,"timestamp":"2026-05-03T16:00:00.000Z"} +{"doc_count":2060,"split_key":20473,"timestamp":"2026-05-03T16:00:00.000Z"} +{"doc_count":1595,"split_key":14061,"timestamp":"2026-05-03T16:00:00.000Z"} +{"doc_count":1394,"split_key":141959,"timestamp":"2026-05-03T16:00:00.000Z"} +{"doc_count":45454,"split_key":206264,"timestamp":"2026-05-03T17:00:00.000Z"} +{"doc_count":11075,"split_key":20473,"timestamp":"2026-05-03T17:00:00.000Z"} +{"doc_count":10931,"split_key":51167,"timestamp":"2026-05-03T17:00:00.000Z"} +{"doc_count":2972,"split_key":9370,"timestamp":"2026-05-03T17:00:00.000Z"} +{"doc_count":2148,"split_key":24940,"timestamp":"2026-05-03T17:00:00.000Z"} +{"doc_count":46180,"split_key":206264,"timestamp":"2026-05-03T18:00:00.000Z"} +{"doc_count":21944,"split_key":212193,"timestamp":"2026-05-03T18:00:00.000Z"} +{"doc_count":10147,"split_key":211590,"timestamp":"2026-05-03T18:00:00.000Z"} +{"doc_count":4375,"split_key":51430,"timestamp":"2026-05-03T18:00:00.000Z"} +{"doc_count":2271,"split_key":51167,"timestamp":"2026-05-03T18:00:00.000Z"} +{"doc_count":46792,"split_key":206264,"timestamp":"2026-05-03T19:00:00.000Z"} +{"doc_count":22322,"split_key":212193,"timestamp":"2026-05-03T19:00:00.000Z"} +{"doc_count":4713,"split_key":211590,"timestamp":"2026-05-03T19:00:00.000Z"} +{"doc_count":3694,"split_key":51430,"timestamp":"2026-05-03T19:00:00.000Z"} +{"doc_count":2541,"split_key":395839,"timestamp":"2026-05-03T19:00:00.000Z"} +{"doc_count":47206,"split_key":206264,"timestamp":"2026-05-03T20:00:00.000Z"} +{"doc_count":23510,"split_key":31898,"timestamp":"2026-05-03T20:00:00.000Z"} +{"doc_count":19708,"split_key":212193,"timestamp":"2026-05-03T20:00:00.000Z"} +{"doc_count":4122,"split_key":211590,"timestamp":"2026-05-03T20:00:00.000Z"} +{"doc_count":3229,"split_key":395839,"timestamp":"2026-05-03T20:00:00.000Z"} +{"doc_count":47684,"split_key":206264,"timestamp":"2026-05-03T21:00:00.000Z"} +{"doc_count":21306,"split_key":212193,"timestamp":"2026-05-03T21:00:00.000Z"} +{"doc_count":3153,"split_key":395839,"timestamp":"2026-05-03T21:00:00.000Z"} +{"doc_count":2290,"split_key":16276,"timestamp":"2026-05-03T21:00:00.000Z"} +{"doc_count":1453,"split_key":14061,"timestamp":"2026-05-03T21:00:00.000Z"} +{"doc_count":48427,"split_key":206264,"timestamp":"2026-05-03T22:00:00.000Z"} +{"doc_count":3288,"split_key":271177,"timestamp":"2026-05-03T22:00:00.000Z"} +{"doc_count":3179,"split_key":395839,"timestamp":"2026-05-03T22:00:00.000Z"} +{"doc_count":1564,"split_key":138997,"timestamp":"2026-05-03T22:00:00.000Z"} +{"doc_count":1467,"split_key":14061,"timestamp":"2026-05-03T22:00:00.000Z"} +{"doc_count":48913,"split_key":206264,"timestamp":"2026-05-03T23:00:00.000Z"} +{"doc_count":6074,"split_key":6428,"timestamp":"2026-05-03T23:00:00.000Z"} +{"doc_count":3195,"split_key":395839,"timestamp":"2026-05-03T23:00:00.000Z"} +{"doc_count":2406,"split_key":20857,"timestamp":"2026-05-03T23:00:00.000Z"} +{"doc_count":1520,"split_key":24940,"timestamp":"2026-05-03T23:00:00.000Z"} +{"doc_count":49564,"split_key":206264,"timestamp":"2026-05-04T00:00:00.000Z"} +{"doc_count":11504,"split_key":211590,"timestamp":"2026-05-04T00:00:00.000Z"} +{"doc_count":8534,"split_key":51167,"timestamp":"2026-05-04T00:00:00.000Z"} +{"doc_count":5323,"split_key":14987,"timestamp":"2026-05-04T00:00:00.000Z"} +{"doc_count":2960,"split_key":395839,"timestamp":"2026-05-04T00:00:00.000Z"} +{"doc_count":49567,"split_key":206264,"timestamp":"2026-05-04T01:00:00.000Z"} +{"doc_count":3494,"split_key":51167,"timestamp":"2026-05-04T01:00:00.000Z"} +{"doc_count":3364,"split_key":25467,"timestamp":"2026-05-04T01:00:00.000Z"} +{"doc_count":2815,"split_key":395839,"timestamp":"2026-05-04T01:00:00.000Z"} +{"doc_count":2010,"split_key":205733,"timestamp":"2026-05-04T01:00:00.000Z"} +{"doc_count":50430,"split_key":206264,"timestamp":"2026-05-04T02:00:00.000Z"} +{"doc_count":12684,"split_key":51167,"timestamp":"2026-05-04T02:00:00.000Z"} +{"doc_count":6006,"split_key":211590,"timestamp":"2026-05-04T02:00:00.000Z"} +{"doc_count":2910,"split_key":395839,"timestamp":"2026-05-04T02:00:00.000Z"} +{"doc_count":1495,"split_key":14061,"timestamp":"2026-05-04T02:00:00.000Z"} +{"doc_count":50579,"split_key":206264,"timestamp":"2026-05-04T03:00:00.000Z"} +{"doc_count":2833,"split_key":395839,"timestamp":"2026-05-04T03:00:00.000Z"} +{"doc_count":2126,"split_key":8426,"timestamp":"2026-05-04T03:00:00.000Z"} +{"doc_count":1570,"split_key":14061,"timestamp":"2026-05-04T03:00:00.000Z"} +{"doc_count":1452,"split_key":24940,"timestamp":"2026-05-04T03:00:00.000Z"} +{"doc_count":50957,"split_key":206264,"timestamp":"2026-05-04T04:00:00.000Z"} +{"doc_count":17390,"split_key":51167,"timestamp":"2026-05-04T04:00:00.000Z"} +{"doc_count":9719,"split_key":211590,"timestamp":"2026-05-04T04:00:00.000Z"} +{"doc_count":2952,"split_key":14061,"timestamp":"2026-05-04T04:00:00.000Z"} +{"doc_count":2735,"split_key":395839,"timestamp":"2026-05-04T04:00:00.000Z"} +{"doc_count":51342,"split_key":206264,"timestamp":"2026-05-04T05:00:00.000Z"} +{"doc_count":4456,"split_key":14061,"timestamp":"2026-05-04T05:00:00.000Z"} +{"doc_count":4287,"split_key":60781,"timestamp":"2026-05-04T05:00:00.000Z"} +{"doc_count":3961,"split_key":212042,"timestamp":"2026-05-04T05:00:00.000Z"} +{"doc_count":2545,"split_key":211590,"timestamp":"2026-05-04T05:00:00.000Z"} +{"doc_count":51091,"split_key":206264,"timestamp":"2026-05-04T06:00:00.000Z"} +{"doc_count":2921,"split_key":211590,"timestamp":"2026-05-04T06:00:00.000Z"} +{"doc_count":2029,"split_key":14061,"timestamp":"2026-05-04T06:00:00.000Z"} +{"doc_count":1633,"split_key":396982,"timestamp":"2026-05-04T06:00:00.000Z"} +{"doc_count":1337,"split_key":24940,"timestamp":"2026-05-04T06:00:00.000Z"} +{"doc_count":51932,"split_key":206264,"timestamp":"2026-05-04T07:00:00.000Z"} +{"doc_count":8119,"split_key":211590,"timestamp":"2026-05-04T07:00:00.000Z"} +{"doc_count":2078,"split_key":14061,"timestamp":"2026-05-04T07:00:00.000Z"} +{"doc_count":1900,"split_key":51167,"timestamp":"2026-05-04T07:00:00.000Z"} +{"doc_count":1493,"split_key":24940,"timestamp":"2026-05-04T07:00:00.000Z"} +{"doc_count":53063,"split_key":206264,"timestamp":"2026-05-04T08:00:00.000Z"} +{"doc_count":4418,"split_key":211590,"timestamp":"2026-05-04T08:00:00.000Z"} +{"doc_count":1785,"split_key":14061,"timestamp":"2026-05-04T08:00:00.000Z"} +{"doc_count":1261,"split_key":55688,"timestamp":"2026-05-04T08:00:00.000Z"} +{"doc_count":1249,"split_key":24940,"timestamp":"2026-05-04T08:00:00.000Z"} +{"doc_count":53034,"split_key":206264,"timestamp":"2026-05-04T09:00:00.000Z"} +{"doc_count":6030,"split_key":209334,"timestamp":"2026-05-04T09:00:00.000Z"} +{"doc_count":1926,"split_key":20473,"timestamp":"2026-05-04T09:00:00.000Z"} +{"doc_count":1718,"split_key":24940,"timestamp":"2026-05-04T09:00:00.000Z"} +{"doc_count":1403,"split_key":14061,"timestamp":"2026-05-04T09:00:00.000Z"} +{"doc_count":54233,"split_key":206264,"timestamp":"2026-05-04T10:00:00.000Z"} +{"doc_count":23437,"split_key":209334,"timestamp":"2026-05-04T10:00:00.000Z"} +{"doc_count":3652,"split_key":211590,"timestamp":"2026-05-04T10:00:00.000Z"} +{"doc_count":1452,"split_key":14061,"timestamp":"2026-05-04T10:00:00.000Z"} +{"doc_count":1228,"split_key":24940,"timestamp":"2026-05-04T10:00:00.000Z"} +{"doc_count":53204,"split_key":206264,"timestamp":"2026-05-04T11:00:00.000Z"} +{"doc_count":24648,"split_key":209334,"timestamp":"2026-05-04T11:00:00.000Z"} +{"doc_count":3816,"split_key":51167,"timestamp":"2026-05-04T11:00:00.000Z"} +{"doc_count":3457,"split_key":211590,"timestamp":"2026-05-04T11:00:00.000Z"} +{"doc_count":1595,"split_key":24940,"timestamp":"2026-05-04T11:00:00.000Z"} +{"doc_count":53422,"split_key":206264,"timestamp":"2026-05-04T12:00:00.000Z"} +{"doc_count":24581,"split_key":209334,"timestamp":"2026-05-04T12:00:00.000Z"} +{"doc_count":5787,"split_key":211590,"timestamp":"2026-05-04T12:00:00.000Z"} +{"doc_count":2280,"split_key":14061,"timestamp":"2026-05-04T12:00:00.000Z"} +{"doc_count":1792,"split_key":49870,"timestamp":"2026-05-04T12:00:00.000Z"} +{"doc_count":53837,"split_key":206264,"timestamp":"2026-05-04T13:00:00.000Z"} +{"doc_count":19224,"split_key":209334,"timestamp":"2026-05-04T13:00:00.000Z"} +{"doc_count":13117,"split_key":211590,"timestamp":"2026-05-04T13:00:00.000Z"} +{"doc_count":2414,"split_key":14061,"timestamp":"2026-05-04T13:00:00.000Z"} +{"doc_count":1629,"split_key":141995,"timestamp":"2026-05-04T13:00:00.000Z"} +{"doc_count":54701,"split_key":206264,"timestamp":"2026-05-04T14:00:00.000Z"} +{"doc_count":20678,"split_key":209334,"timestamp":"2026-05-04T14:00:00.000Z"} +{"doc_count":17381,"split_key":29802,"timestamp":"2026-05-04T14:00:00.000Z"} +{"doc_count":15333,"split_key":23923,"timestamp":"2026-05-04T14:00:00.000Z"} +{"doc_count":4364,"split_key":211590,"timestamp":"2026-05-04T14:00:00.000Z"} +{"doc_count":16706,"split_key":209334,"timestamp":"2026-05-04T15:00:00.000Z"} +{"doc_count":4973,"split_key":211590,"timestamp":"2026-05-04T15:00:00.000Z"} +{"doc_count":2682,"split_key":396982,"timestamp":"2026-05-04T15:00:00.000Z"} +{"doc_count":2258,"split_key":14061,"timestamp":"2026-05-04T15:00:00.000Z"} +{"doc_count":2175,"split_key":206264,"timestamp":"2026-05-04T15:00:00.000Z"} +{"doc_count":7602,"split_key":51167,"timestamp":"2026-05-04T16:00:00.000Z"} +{"doc_count":6229,"split_key":211590,"timestamp":"2026-05-04T16:00:00.000Z"} +{"doc_count":3431,"split_key":16276,"timestamp":"2026-05-04T16:00:00.000Z"} +{"doc_count":2257,"split_key":14061,"timestamp":"2026-05-04T16:00:00.000Z"} +{"doc_count":1946,"split_key":137409,"timestamp":"2026-05-04T16:00:00.000Z"} +{"doc_count":4820,"split_key":16276,"timestamp":"2026-05-04T17:00:00.000Z"} +{"doc_count":1877,"split_key":14061,"timestamp":"2026-05-04T17:00:00.000Z"} +{"doc_count":1741,"split_key":51167,"timestamp":"2026-05-04T17:00:00.000Z"} +{"doc_count":938,"split_key":24940,"timestamp":"2026-05-04T17:00:00.000Z"} +{"doc_count":636,"split_key":51396,"timestamp":"2026-05-04T17:00:00.000Z"} +{"doc_count":13957,"split_key":211590,"timestamp":"2026-05-04T18:00:00.000Z"} +{"doc_count":2011,"split_key":14061,"timestamp":"2026-05-04T18:00:00.000Z"} +{"doc_count":986,"split_key":24940,"timestamp":"2026-05-04T18:00:00.000Z"} +{"doc_count":624,"split_key":22612,"timestamp":"2026-05-04T18:00:00.000Z"} +{"doc_count":510,"split_key":396982,"timestamp":"2026-05-04T18:00:00.000Z"} +{"doc_count":7617,"split_key":211590,"timestamp":"2026-05-04T19:00:00.000Z"} +{"doc_count":1805,"split_key":14061,"timestamp":"2026-05-04T19:00:00.000Z"} +{"doc_count":960,"split_key":24940,"timestamp":"2026-05-04T19:00:00.000Z"} +{"doc_count":631,"split_key":22612,"timestamp":"2026-05-04T19:00:00.000Z"} +{"doc_count":588,"split_key":14618,"timestamp":"2026-05-04T19:00:00.000Z"} +{"doc_count":16561,"split_key":40850,"timestamp":"2026-05-04T20:00:00.000Z"} +{"doc_count":15983,"split_key":211590,"timestamp":"2026-05-04T20:00:00.000Z"} +{"doc_count":3662,"split_key":16276,"timestamp":"2026-05-04T20:00:00.000Z"} +{"doc_count":2528,"split_key":14061,"timestamp":"2026-05-04T20:00:00.000Z"} +{"doc_count":2373,"split_key":328854,"timestamp":"2026-05-04T20:00:00.000Z"} +{"doc_count":17043,"split_key":40850,"timestamp":"2026-05-04T21:00:00.000Z"} +{"doc_count":7656,"split_key":16276,"timestamp":"2026-05-04T21:00:00.000Z"} +{"doc_count":7023,"split_key":211590,"timestamp":"2026-05-04T21:00:00.000Z"} +{"doc_count":5118,"split_key":62068,"timestamp":"2026-05-04T21:00:00.000Z"} +{"doc_count":2347,"split_key":14061,"timestamp":"2026-05-04T21:00:00.000Z"} +{"doc_count":13114,"split_key":211590,"timestamp":"2026-05-04T22:00:00.000Z"} +{"doc_count":6665,"split_key":16276,"timestamp":"2026-05-04T22:00:00.000Z"} +{"doc_count":2284,"split_key":14061,"timestamp":"2026-05-04T22:00:00.000Z"} +{"doc_count":2036,"split_key":40850,"timestamp":"2026-05-04T22:00:00.000Z"} +{"doc_count":1275,"split_key":141995,"timestamp":"2026-05-04T22:00:00.000Z"} +{"doc_count":5684,"split_key":16276,"timestamp":"2026-05-04T23:00:00.000Z"} +{"doc_count":2125,"split_key":14061,"timestamp":"2026-05-04T23:00:00.000Z"} +{"doc_count":1632,"split_key":211590,"timestamp":"2026-05-04T23:00:00.000Z"} +{"doc_count":1213,"split_key":45102,"timestamp":"2026-05-04T23:00:00.000Z"} +{"doc_count":1044,"split_key":24940,"timestamp":"2026-05-04T23:00:00.000Z"} +{"doc_count":18466,"split_key":211590,"timestamp":"2026-05-05T00:00:00.000Z"} +{"doc_count":4993,"split_key":16276,"timestamp":"2026-05-05T00:00:00.000Z"} +{"doc_count":2174,"split_key":14061,"timestamp":"2026-05-05T00:00:00.000Z"} +{"doc_count":1371,"split_key":141995,"timestamp":"2026-05-05T00:00:00.000Z"} +{"doc_count":1231,"split_key":45102,"timestamp":"2026-05-05T00:00:00.000Z"} +{"doc_count":3437,"split_key":16276,"timestamp":"2026-05-05T01:00:00.000Z"} +{"doc_count":2233,"split_key":14061,"timestamp":"2026-05-05T01:00:00.000Z"} +{"doc_count":1231,"split_key":45102,"timestamp":"2026-05-05T01:00:00.000Z"} +{"doc_count":1144,"split_key":26496,"timestamp":"2026-05-05T01:00:00.000Z"} +{"doc_count":1092,"split_key":396982,"timestamp":"2026-05-05T01:00:00.000Z"} +{"doc_count":14187,"split_key":14061,"timestamp":"2026-05-05T02:00:00.000Z"} +{"doc_count":3875,"split_key":48678,"timestamp":"2026-05-05T02:00:00.000Z"} +{"doc_count":2245,"split_key":16276,"timestamp":"2026-05-05T02:00:00.000Z"} +{"doc_count":1381,"split_key":23470,"timestamp":"2026-05-05T02:00:00.000Z"} +{"doc_count":1185,"split_key":45102,"timestamp":"2026-05-05T02:00:00.000Z"} +{"doc_count":8523,"split_key":14061,"timestamp":"2026-05-05T03:00:00.000Z"} +{"doc_count":3040,"split_key":48678,"timestamp":"2026-05-05T03:00:00.000Z"} +{"doc_count":1556,"split_key":16276,"timestamp":"2026-05-05T03:00:00.000Z"} +{"doc_count":1299,"split_key":45102,"timestamp":"2026-05-05T03:00:00.000Z"} +{"doc_count":1025,"split_key":24940,"timestamp":"2026-05-05T03:00:00.000Z"} +{"doc_count":6294,"split_key":14061,"timestamp":"2026-05-05T04:00:00.000Z"} +{"doc_count":1650,"split_key":48678,"timestamp":"2026-05-05T04:00:00.000Z"} +{"doc_count":1269,"split_key":45102,"timestamp":"2026-05-05T04:00:00.000Z"} +{"doc_count":997,"split_key":24940,"timestamp":"2026-05-05T04:00:00.000Z"} +{"doc_count":989,"split_key":22612,"timestamp":"2026-05-05T04:00:00.000Z"} +{"doc_count":2148,"split_key":14061,"timestamp":"2026-05-05T05:00:00.000Z"} +{"doc_count":1252,"split_key":45102,"timestamp":"2026-05-05T05:00:00.000Z"} +{"doc_count":1084,"split_key":24940,"timestamp":"2026-05-05T05:00:00.000Z"} +{"doc_count":1073,"split_key":19318,"timestamp":"2026-05-05T05:00:00.000Z"} +{"doc_count":979,"split_key":22612,"timestamp":"2026-05-05T05:00:00.000Z"} +{"doc_count":2468,"split_key":14061,"timestamp":"2026-05-05T06:00:00.000Z"} +{"doc_count":1356,"split_key":55720,"timestamp":"2026-05-05T06:00:00.000Z"} +{"doc_count":1230,"split_key":45102,"timestamp":"2026-05-05T06:00:00.000Z"} +{"doc_count":1046,"split_key":24940,"timestamp":"2026-05-05T06:00:00.000Z"} +{"doc_count":980,"split_key":22612,"timestamp":"2026-05-05T06:00:00.000Z"} +{"doc_count":2496,"split_key":14061,"timestamp":"2026-05-05T07:00:00.000Z"} +{"doc_count":1202,"split_key":45102,"timestamp":"2026-05-05T07:00:00.000Z"} +{"doc_count":1118,"split_key":16509,"timestamp":"2026-05-05T07:00:00.000Z"} +{"doc_count":1051,"split_key":24940,"timestamp":"2026-05-05T07:00:00.000Z"} +{"doc_count":987,"split_key":22612,"timestamp":"2026-05-05T07:00:00.000Z"} +{"doc_count":2895,"split_key":61323,"timestamp":"2026-05-05T08:00:00.000Z"} +{"doc_count":2289,"split_key":14061,"timestamp":"2026-05-05T08:00:00.000Z"} +{"doc_count":1253,"split_key":45102,"timestamp":"2026-05-05T08:00:00.000Z"} +{"doc_count":985,"split_key":22612,"timestamp":"2026-05-05T08:00:00.000Z"} +{"doc_count":970,"split_key":24940,"timestamp":"2026-05-05T08:00:00.000Z"} +{"doc_count":24357,"split_key":14061,"timestamp":"2026-05-05T09:00:00.000Z"} +{"doc_count":3612,"split_key":61323,"timestamp":"2026-05-05T09:00:00.000Z"} +{"doc_count":3448,"split_key":209334,"timestamp":"2026-05-05T09:00:00.000Z"} +{"doc_count":1261,"split_key":45102,"timestamp":"2026-05-05T09:00:00.000Z"} +{"doc_count":1160,"split_key":24940,"timestamp":"2026-05-05T09:00:00.000Z"} +{"doc_count":17153,"split_key":209334,"timestamp":"2026-05-05T10:00:00.000Z"} +{"doc_count":2247,"split_key":14061,"timestamp":"2026-05-05T10:00:00.000Z"} +{"doc_count":1653,"split_key":23470,"timestamp":"2026-05-05T10:00:00.000Z"} +{"doc_count":1232,"split_key":45102,"timestamp":"2026-05-05T10:00:00.000Z"} +{"doc_count":995,"split_key":24940,"timestamp":"2026-05-05T10:00:00.000Z"} +{"doc_count":20221,"split_key":209334,"timestamp":"2026-05-05T11:00:00.000Z"} +{"doc_count":3512,"split_key":14061,"timestamp":"2026-05-05T11:00:00.000Z"} +{"doc_count":995,"split_key":24940,"timestamp":"2026-05-05T11:00:00.000Z"} +{"doc_count":983,"split_key":22612,"timestamp":"2026-05-05T11:00:00.000Z"} +{"doc_count":688,"split_key":13213,"timestamp":"2026-05-05T11:00:00.000Z"} +{"doc_count":20118,"split_key":209334,"timestamp":"2026-05-05T12:00:00.000Z"} +{"doc_count":3468,"split_key":14061,"timestamp":"2026-05-05T12:00:00.000Z"} +{"doc_count":2042,"split_key":206264,"timestamp":"2026-05-05T12:00:00.000Z"} +{"doc_count":1051,"split_key":24940,"timestamp":"2026-05-05T12:00:00.000Z"} +{"doc_count":987,"split_key":22612,"timestamp":"2026-05-05T12:00:00.000Z"} +{"doc_count":62967,"split_key":206264,"timestamp":"2026-05-05T13:00:00.000Z"} +{"doc_count":18340,"split_key":209334,"timestamp":"2026-05-05T13:00:00.000Z"} +{"doc_count":3767,"split_key":14061,"timestamp":"2026-05-05T13:00:00.000Z"} +{"doc_count":1869,"split_key":24940,"timestamp":"2026-05-05T13:00:00.000Z"} +{"doc_count":982,"split_key":22612,"timestamp":"2026-05-05T13:00:00.000Z"} +{"doc_count":65415,"split_key":206264,"timestamp":"2026-05-05T14:00:00.000Z"} +{"doc_count":19014,"split_key":209334,"timestamp":"2026-05-05T14:00:00.000Z"} +{"doc_count":3171,"split_key":14061,"timestamp":"2026-05-05T14:00:00.000Z"} +{"doc_count":1565,"split_key":24940,"timestamp":"2026-05-05T14:00:00.000Z"} +{"doc_count":989,"split_key":22612,"timestamp":"2026-05-05T14:00:00.000Z"} +{"doc_count":66480,"split_key":206264,"timestamp":"2026-05-05T15:00:00.000Z"} +{"doc_count":19160,"split_key":209334,"timestamp":"2026-05-05T15:00:00.000Z"} +{"doc_count":3245,"split_key":31898,"timestamp":"2026-05-05T15:00:00.000Z"} +{"doc_count":2613,"split_key":14061,"timestamp":"2026-05-05T15:00:00.000Z"} +{"doc_count":1730,"split_key":23470,"timestamp":"2026-05-05T15:00:00.000Z"} +{"doc_count":66585,"split_key":206264,"timestamp":"2026-05-05T16:00:00.000Z"} +{"doc_count":33910,"split_key":27176,"timestamp":"2026-05-05T16:00:00.000Z"} +{"doc_count":19892,"split_key":209334,"timestamp":"2026-05-05T16:00:00.000Z"} +{"doc_count":2795,"split_key":14061,"timestamp":"2026-05-05T16:00:00.000Z"} +{"doc_count":2249,"split_key":20976,"timestamp":"2026-05-05T16:00:00.000Z"} +{"doc_count":66682,"split_key":206264,"timestamp":"2026-05-05T17:00:00.000Z"} +{"doc_count":5455,"split_key":27176,"timestamp":"2026-05-05T17:00:00.000Z"} +{"doc_count":2351,"split_key":14061,"timestamp":"2026-05-05T17:00:00.000Z"} +{"doc_count":1977,"split_key":24940,"timestamp":"2026-05-05T17:00:00.000Z"} +{"doc_count":990,"split_key":22612,"timestamp":"2026-05-05T17:00:00.000Z"} +{"doc_count":68029,"split_key":206264,"timestamp":"2026-05-05T18:00:00.000Z"} +{"doc_count":66751,"split_key":1218,"timestamp":"2026-05-05T18:00:00.000Z"} +{"doc_count":2018,"split_key":24940,"timestamp":"2026-05-05T18:00:00.000Z"} +{"doc_count":1863,"split_key":60404,"timestamp":"2026-05-05T18:00:00.000Z"} +{"doc_count":1702,"split_key":14061,"timestamp":"2026-05-05T18:00:00.000Z"} +{"doc_count":132144,"split_key":1218,"timestamp":"2026-05-05T19:00:00.000Z"} +{"doc_count":68908,"split_key":206264,"timestamp":"2026-05-05T19:00:00.000Z"} +{"doc_count":1958,"split_key":24940,"timestamp":"2026-05-05T19:00:00.000Z"} +{"doc_count":1877,"split_key":14061,"timestamp":"2026-05-05T19:00:00.000Z"} +{"doc_count":1000,"split_key":22612,"timestamp":"2026-05-05T19:00:00.000Z"} +{"doc_count":77580,"split_key":1218,"timestamp":"2026-05-05T20:00:00.000Z"} +{"doc_count":69151,"split_key":206264,"timestamp":"2026-05-05T20:00:00.000Z"} +{"doc_count":1872,"split_key":14061,"timestamp":"2026-05-05T20:00:00.000Z"} +{"doc_count":1701,"split_key":24940,"timestamp":"2026-05-05T20:00:00.000Z"} +{"doc_count":991,"split_key":22612,"timestamp":"2026-05-05T20:00:00.000Z"} +{"doc_count":195007,"split_key":1218,"timestamp":"2026-05-05T21:00:00.000Z"} +{"doc_count":69832,"split_key":206264,"timestamp":"2026-05-05T21:00:00.000Z"} +{"doc_count":1890,"split_key":14061,"timestamp":"2026-05-05T21:00:00.000Z"} +{"doc_count":1841,"split_key":24940,"timestamp":"2026-05-05T21:00:00.000Z"} +{"doc_count":1131,"split_key":17884,"timestamp":"2026-05-05T21:00:00.000Z"} +{"doc_count":70622,"split_key":206264,"timestamp":"2026-05-05T22:00:00.000Z"} +{"doc_count":36217,"split_key":1218,"timestamp":"2026-05-05T22:00:00.000Z"} +{"doc_count":2956,"split_key":14061,"timestamp":"2026-05-05T22:00:00.000Z"} +{"doc_count":1971,"split_key":17884,"timestamp":"2026-05-05T22:00:00.000Z"} +{"doc_count":1885,"split_key":133150,"timestamp":"2026-05-05T22:00:00.000Z"} +{"doc_count":71065,"split_key":206264,"timestamp":"2026-05-05T23:00:00.000Z"} +{"doc_count":37959,"split_key":1218,"timestamp":"2026-05-05T23:00:00.000Z"} +{"doc_count":2845,"split_key":14061,"timestamp":"2026-05-05T23:00:00.000Z"} +{"doc_count":2147,"split_key":17884,"timestamp":"2026-05-05T23:00:00.000Z"} +{"doc_count":1839,"split_key":24940,"timestamp":"2026-05-05T23:00:00.000Z"} +{"doc_count":71445,"split_key":206264,"timestamp":"2026-05-06T00:00:00.000Z"} +{"doc_count":37342,"split_key":1218,"timestamp":"2026-05-06T00:00:00.000Z"} +{"doc_count":2895,"split_key":14061,"timestamp":"2026-05-06T00:00:00.000Z"} +{"doc_count":1736,"split_key":17884,"timestamp":"2026-05-06T00:00:00.000Z"} +{"doc_count":1479,"split_key":24940,"timestamp":"2026-05-06T00:00:00.000Z"} +{"doc_count":71636,"split_key":206264,"timestamp":"2026-05-06T01:00:00.000Z"} +{"doc_count":36748,"split_key":1218,"timestamp":"2026-05-06T01:00:00.000Z"} +{"doc_count":2990,"split_key":14061,"timestamp":"2026-05-06T01:00:00.000Z"} +{"doc_count":2293,"split_key":133159,"timestamp":"2026-05-06T01:00:00.000Z"} +{"doc_count":1912,"split_key":24940,"timestamp":"2026-05-06T01:00:00.000Z"} +{"doc_count":72060,"split_key":206264,"timestamp":"2026-05-06T02:00:00.000Z"} +{"doc_count":39630,"split_key":1218,"timestamp":"2026-05-06T02:00:00.000Z"} +{"doc_count":3066,"split_key":14061,"timestamp":"2026-05-06T02:00:00.000Z"} +{"doc_count":2208,"split_key":32181,"timestamp":"2026-05-06T02:00:00.000Z"} +{"doc_count":1754,"split_key":24940,"timestamp":"2026-05-06T02:00:00.000Z"} +{"doc_count":72906,"split_key":206264,"timestamp":"2026-05-06T03:00:00.000Z"} +{"doc_count":37119,"split_key":1218,"timestamp":"2026-05-06T03:00:00.000Z"} +{"doc_count":4408,"split_key":38142,"timestamp":"2026-05-06T03:00:00.000Z"} +{"doc_count":3319,"split_key":32181,"timestamp":"2026-05-06T03:00:00.000Z"} +{"doc_count":3050,"split_key":14061,"timestamp":"2026-05-06T03:00:00.000Z"} +{"doc_count":73339,"split_key":206264,"timestamp":"2026-05-06T04:00:00.000Z"} +{"doc_count":35279,"split_key":1218,"timestamp":"2026-05-06T04:00:00.000Z"} +{"doc_count":4509,"split_key":14061,"timestamp":"2026-05-06T04:00:00.000Z"} +{"doc_count":1868,"split_key":141959,"timestamp":"2026-05-06T04:00:00.000Z"} +{"doc_count":1722,"split_key":24940,"timestamp":"2026-05-06T04:00:00.000Z"} +{"doc_count":73432,"split_key":206264,"timestamp":"2026-05-06T05:00:00.000Z"} +{"doc_count":39869,"split_key":1218,"timestamp":"2026-05-06T05:00:00.000Z"} +{"doc_count":7471,"split_key":14061,"timestamp":"2026-05-06T05:00:00.000Z"} +{"doc_count":1780,"split_key":24940,"timestamp":"2026-05-06T05:00:00.000Z"} +{"doc_count":983,"split_key":22612,"timestamp":"2026-05-06T05:00:00.000Z"} +{"doc_count":74185,"split_key":206264,"timestamp":"2026-05-06T06:00:00.000Z"} +{"doc_count":36895,"split_key":1218,"timestamp":"2026-05-06T06:00:00.000Z"} +{"doc_count":7780,"split_key":14061,"timestamp":"2026-05-06T06:00:00.000Z"} +{"doc_count":1909,"split_key":24940,"timestamp":"2026-05-06T06:00:00.000Z"} +{"doc_count":1581,"split_key":48254,"timestamp":"2026-05-06T06:00:00.000Z"} +{"doc_count":74411,"split_key":206264,"timestamp":"2026-05-06T07:00:00.000Z"} +{"doc_count":36827,"split_key":1218,"timestamp":"2026-05-06T07:00:00.000Z"} +{"doc_count":7728,"split_key":14061,"timestamp":"2026-05-06T07:00:00.000Z"} +{"doc_count":2508,"split_key":13213,"timestamp":"2026-05-06T07:00:00.000Z"} +{"doc_count":1878,"split_key":24940,"timestamp":"2026-05-06T07:00:00.000Z"} +{"doc_count":72931,"split_key":206264,"timestamp":"2026-05-06T08:00:00.000Z"} +{"doc_count":38476,"split_key":1218,"timestamp":"2026-05-06T08:00:00.000Z"} +{"doc_count":8389,"split_key":14061,"timestamp":"2026-05-06T08:00:00.000Z"} +{"doc_count":1866,"split_key":24940,"timestamp":"2026-05-06T08:00:00.000Z"} +{"doc_count":1806,"split_key":23470,"timestamp":"2026-05-06T08:00:00.000Z"} +{"doc_count":90498,"split_key":1218,"timestamp":"2026-05-06T09:00:00.000Z"} +{"doc_count":74886,"split_key":206264,"timestamp":"2026-05-06T09:00:00.000Z"} +{"doc_count":15236,"split_key":63949,"timestamp":"2026-05-06T09:00:00.000Z"} +{"doc_count":7492,"split_key":14061,"timestamp":"2026-05-06T09:00:00.000Z"} +{"doc_count":3287,"split_key":209334,"timestamp":"2026-05-06T09:00:00.000Z"} +{"doc_count":75428,"split_key":206264,"timestamp":"2026-05-06T10:00:00.000Z"} +{"doc_count":24649,"split_key":63949,"timestamp":"2026-05-06T10:00:00.000Z"} +{"doc_count":20594,"split_key":209334,"timestamp":"2026-05-06T10:00:00.000Z"} +{"doc_count":7482,"split_key":14061,"timestamp":"2026-05-06T10:00:00.000Z"} +{"doc_count":1721,"split_key":24940,"timestamp":"2026-05-06T10:00:00.000Z"} +{"doc_count":76238,"split_key":206264,"timestamp":"2026-05-06T11:00:00.000Z"} +{"doc_count":22768,"split_key":209334,"timestamp":"2026-05-06T11:00:00.000Z"} +{"doc_count":7221,"split_key":14061,"timestamp":"2026-05-06T11:00:00.000Z"} +{"doc_count":1523,"split_key":24940,"timestamp":"2026-05-06T11:00:00.000Z"} +{"doc_count":1317,"split_key":49581,"timestamp":"2026-05-06T11:00:00.000Z"} +{"doc_count":76780,"split_key":206264,"timestamp":"2026-05-06T12:00:00.000Z"} +{"doc_count":28737,"split_key":209334,"timestamp":"2026-05-06T12:00:00.000Z"} +{"doc_count":4849,"split_key":14061,"timestamp":"2026-05-06T12:00:00.000Z"} +{"doc_count":2200,"split_key":49581,"timestamp":"2026-05-06T12:00:00.000Z"} +{"doc_count":1674,"split_key":24940,"timestamp":"2026-05-06T12:00:00.000Z"} +{"doc_count":87036,"split_key":206264,"timestamp":"2026-05-06T13:00:00.000Z"} +{"doc_count":25705,"split_key":209334,"timestamp":"2026-05-06T13:00:00.000Z"} +{"doc_count":4309,"split_key":14061,"timestamp":"2026-05-06T13:00:00.000Z"} +{"doc_count":1983,"split_key":49581,"timestamp":"2026-05-06T13:00:00.000Z"} +{"doc_count":1644,"split_key":24940,"timestamp":"2026-05-06T13:00:00.000Z"} +{"doc_count":77516,"split_key":206264,"timestamp":"2026-05-06T14:00:00.000Z"} +{"doc_count":22156,"split_key":63949,"timestamp":"2026-05-06T14:00:00.000Z"} +{"doc_count":18638,"split_key":209334,"timestamp":"2026-05-06T14:00:00.000Z"} +{"doc_count":3859,"split_key":14061,"timestamp":"2026-05-06T14:00:00.000Z"} +{"doc_count":2102,"split_key":49581,"timestamp":"2026-05-06T14:00:00.000Z"} +{"doc_count":77463,"split_key":206264,"timestamp":"2026-05-06T15:00:00.000Z"} +{"doc_count":22129,"split_key":63949,"timestamp":"2026-05-06T15:00:00.000Z"} +{"doc_count":18555,"split_key":209334,"timestamp":"2026-05-06T15:00:00.000Z"} +{"doc_count":3552,"split_key":14061,"timestamp":"2026-05-06T15:00:00.000Z"} +{"doc_count":2120,"split_key":49581,"timestamp":"2026-05-06T15:00:00.000Z"} +{"doc_count":77841,"split_key":206264,"timestamp":"2026-05-06T16:00:00.000Z"} +{"doc_count":21871,"split_key":63949,"timestamp":"2026-05-06T16:00:00.000Z"} +{"doc_count":10386,"split_key":209334,"timestamp":"2026-05-06T16:00:00.000Z"} +{"doc_count":3382,"split_key":14061,"timestamp":"2026-05-06T16:00:00.000Z"} +{"doc_count":2161,"split_key":49581,"timestamp":"2026-05-06T16:00:00.000Z"} +{"doc_count":78770,"split_key":206264,"timestamp":"2026-05-06T17:00:00.000Z"} +{"doc_count":21834,"split_key":63949,"timestamp":"2026-05-06T17:00:00.000Z"} +{"doc_count":3493,"split_key":14061,"timestamp":"2026-05-06T17:00:00.000Z"} +{"doc_count":2045,"split_key":49581,"timestamp":"2026-05-06T17:00:00.000Z"} +{"doc_count":1980,"split_key":29802,"timestamp":"2026-05-06T17:00:00.000Z"} +{"doc_count":79478,"split_key":206264,"timestamp":"2026-05-06T18:00:00.000Z"} +{"doc_count":5671,"split_key":63949,"timestamp":"2026-05-06T18:00:00.000Z"} +{"doc_count":3037,"split_key":14061,"timestamp":"2026-05-06T18:00:00.000Z"} +{"doc_count":2159,"split_key":49581,"timestamp":"2026-05-06T18:00:00.000Z"} +{"doc_count":1742,"split_key":24940,"timestamp":"2026-05-06T18:00:00.000Z"} +{"doc_count":79086,"split_key":206264,"timestamp":"2026-05-06T19:00:00.000Z"} +{"doc_count":3029,"split_key":14061,"timestamp":"2026-05-06T19:00:00.000Z"} +{"doc_count":1944,"split_key":49581,"timestamp":"2026-05-06T19:00:00.000Z"} +{"doc_count":1704,"split_key":23470,"timestamp":"2026-05-06T19:00:00.000Z"} +{"doc_count":1577,"split_key":24940,"timestamp":"2026-05-06T19:00:00.000Z"} +{"doc_count":80314,"split_key":206264,"timestamp":"2026-05-06T20:00:00.000Z"} +{"doc_count":3167,"split_key":24961,"timestamp":"2026-05-06T20:00:00.000Z"} +{"doc_count":2847,"split_key":14061,"timestamp":"2026-05-06T20:00:00.000Z"} +{"doc_count":2099,"split_key":49581,"timestamp":"2026-05-06T20:00:00.000Z"} +{"doc_count":1465,"split_key":24940,"timestamp":"2026-05-06T20:00:00.000Z"} +{"doc_count":81389,"split_key":206264,"timestamp":"2026-05-06T21:00:00.000Z"} +{"doc_count":5134,"split_key":214640,"timestamp":"2026-05-06T21:00:00.000Z"} +{"doc_count":3106,"split_key":20738,"timestamp":"2026-05-06T21:00:00.000Z"} +{"doc_count":2725,"split_key":14061,"timestamp":"2026-05-06T21:00:00.000Z"} +{"doc_count":2063,"split_key":49581,"timestamp":"2026-05-06T21:00:00.000Z"} +{"doc_count":82921,"split_key":206264,"timestamp":"2026-05-06T22:00:00.000Z"} +{"doc_count":3292,"split_key":23470,"timestamp":"2026-05-06T22:00:00.000Z"} +{"doc_count":2619,"split_key":14061,"timestamp":"2026-05-06T22:00:00.000Z"} +{"doc_count":2099,"split_key":49581,"timestamp":"2026-05-06T22:00:00.000Z"} +{"doc_count":1349,"split_key":24940,"timestamp":"2026-05-06T22:00:00.000Z"} +{"doc_count":82747,"split_key":206264,"timestamp":"2026-05-06T23:00:00.000Z"} +{"doc_count":5973,"split_key":62068,"timestamp":"2026-05-06T23:00:00.000Z"} +{"doc_count":2611,"split_key":14061,"timestamp":"2026-05-06T23:00:00.000Z"} +{"doc_count":2136,"split_key":49581,"timestamp":"2026-05-06T23:00:00.000Z"} +{"doc_count":1606,"split_key":24940,"timestamp":"2026-05-06T23:00:00.000Z"} +{"doc_count":82115,"split_key":206264,"timestamp":"2026-05-07T00:00:00.000Z"} +{"doc_count":2578,"split_key":14061,"timestamp":"2026-05-07T00:00:00.000Z"} +{"doc_count":1928,"split_key":49581,"timestamp":"2026-05-07T00:00:00.000Z"} +{"doc_count":1899,"split_key":62068,"timestamp":"2026-05-07T00:00:00.000Z"} +{"doc_count":1456,"split_key":24940,"timestamp":"2026-05-07T00:00:00.000Z"} +{"doc_count":88465,"split_key":206264,"timestamp":"2026-05-07T01:00:00.000Z"} +{"doc_count":4643,"split_key":23470,"timestamp":"2026-05-07T01:00:00.000Z"} +{"doc_count":3063,"split_key":14061,"timestamp":"2026-05-07T01:00:00.000Z"} +{"doc_count":2090,"split_key":49581,"timestamp":"2026-05-07T01:00:00.000Z"} +{"doc_count":1399,"split_key":24940,"timestamp":"2026-05-07T01:00:00.000Z"} +{"doc_count":86400,"split_key":206264,"timestamp":"2026-05-07T02:00:00.000Z"} +{"doc_count":2927,"split_key":23470,"timestamp":"2026-05-07T02:00:00.000Z"} +{"doc_count":2824,"split_key":14061,"timestamp":"2026-05-07T02:00:00.000Z"} +{"doc_count":2075,"split_key":49581,"timestamp":"2026-05-07T02:00:00.000Z"} +{"doc_count":1431,"split_key":24940,"timestamp":"2026-05-07T02:00:00.000Z"} +{"doc_count":4273,"split_key":14061,"timestamp":"2026-05-07T03:00:00.000Z"} +{"doc_count":2223,"split_key":49581,"timestamp":"2026-05-07T03:00:00.000Z"} +{"doc_count":1054,"split_key":51396,"timestamp":"2026-05-07T03:00:00.000Z"} +{"doc_count":952,"split_key":24940,"timestamp":"2026-05-07T03:00:00.000Z"} +{"doc_count":852,"split_key":396982,"timestamp":"2026-05-07T03:00:00.000Z"} +{"doc_count":3738,"split_key":14061,"timestamp":"2026-05-07T04:00:00.000Z"} +{"doc_count":2138,"split_key":49581,"timestamp":"2026-05-07T04:00:00.000Z"} +{"doc_count":929,"split_key":24940,"timestamp":"2026-05-07T04:00:00.000Z"} +{"doc_count":871,"split_key":45102,"timestamp":"2026-05-07T04:00:00.000Z"} +{"doc_count":748,"split_key":396982,"timestamp":"2026-05-07T04:00:00.000Z"} +{"doc_count":2953,"split_key":14061,"timestamp":"2026-05-07T05:00:00.000Z"} +{"doc_count":2181,"split_key":49581,"timestamp":"2026-05-07T05:00:00.000Z"} +{"doc_count":955,"split_key":396982,"timestamp":"2026-05-07T05:00:00.000Z"} +{"doc_count":919,"split_key":24940,"timestamp":"2026-05-07T05:00:00.000Z"} +{"doc_count":869,"split_key":45102,"timestamp":"2026-05-07T05:00:00.000Z"} +{"doc_count":2758,"split_key":14061,"timestamp":"2026-05-07T06:00:00.000Z"} +{"doc_count":1915,"split_key":49581,"timestamp":"2026-05-07T06:00:00.000Z"} +{"doc_count":1230,"split_key":62068,"timestamp":"2026-05-07T06:00:00.000Z"} +{"doc_count":1036,"split_key":24940,"timestamp":"2026-05-07T06:00:00.000Z"} +{"doc_count":845,"split_key":45102,"timestamp":"2026-05-07T06:00:00.000Z"} +{"doc_count":65424,"split_key":206264,"timestamp":"2026-05-07T07:00:00.000Z"} +{"doc_count":3028,"split_key":14061,"timestamp":"2026-05-07T07:00:00.000Z"} +{"doc_count":2018,"split_key":49581,"timestamp":"2026-05-07T07:00:00.000Z"} +{"doc_count":1537,"split_key":8560,"timestamp":"2026-05-07T07:00:00.000Z"} +{"doc_count":1343,"split_key":62068,"timestamp":"2026-05-07T07:00:00.000Z"} +{"doc_count":80818,"split_key":206264,"timestamp":"2026-05-07T08:00:00.000Z"} +{"doc_count":64610,"split_key":23470,"timestamp":"2026-05-07T08:00:00.000Z"} +{"doc_count":3423,"split_key":14061,"timestamp":"2026-05-07T08:00:00.000Z"} +{"doc_count":2111,"split_key":49581,"timestamp":"2026-05-07T08:00:00.000Z"} +{"doc_count":1214,"split_key":45102,"timestamp":"2026-05-07T08:00:00.000Z"} +{"doc_count":80368,"split_key":206264,"timestamp":"2026-05-07T09:00:00.000Z"} +{"doc_count":3756,"split_key":209334,"timestamp":"2026-05-07T09:00:00.000Z"} +{"doc_count":2665,"split_key":14061,"timestamp":"2026-05-07T09:00:00.000Z"} +{"doc_count":2060,"split_key":49581,"timestamp":"2026-05-07T09:00:00.000Z"} +{"doc_count":1346,"split_key":45102,"timestamp":"2026-05-07T09:00:00.000Z"} +{"doc_count":81477,"split_key":206264,"timestamp":"2026-05-07T10:00:00.000Z"} +{"doc_count":18713,"split_key":209334,"timestamp":"2026-05-07T10:00:00.000Z"} +{"doc_count":2605,"split_key":14061,"timestamp":"2026-05-07T10:00:00.000Z"} +{"doc_count":1998,"split_key":45102,"timestamp":"2026-05-07T10:00:00.000Z"} +{"doc_count":1973,"split_key":49581,"timestamp":"2026-05-07T10:00:00.000Z"} +{"doc_count":83021,"split_key":206264,"timestamp":"2026-05-07T11:00:00.000Z"} +{"doc_count":26341,"split_key":209334,"timestamp":"2026-05-07T11:00:00.000Z"} +{"doc_count":2492,"split_key":14061,"timestamp":"2026-05-07T11:00:00.000Z"} +{"doc_count":2195,"split_key":49581,"timestamp":"2026-05-07T11:00:00.000Z"} +{"doc_count":1369,"split_key":23470,"timestamp":"2026-05-07T11:00:00.000Z"} +{"doc_count":48773,"split_key":206264,"timestamp":"2026-05-07T12:00:00.000Z"} +{"doc_count":22492,"split_key":209334,"timestamp":"2026-05-07T12:00:00.000Z"} +{"doc_count":2651,"split_key":14061,"timestamp":"2026-05-07T12:00:00.000Z"} +{"doc_count":2107,"split_key":49581,"timestamp":"2026-05-07T12:00:00.000Z"} +{"doc_count":1198,"split_key":23470,"timestamp":"2026-05-07T12:00:00.000Z"} +{"doc_count":52317,"split_key":206264,"timestamp":"2026-05-07T13:00:00.000Z"} +{"doc_count":19108,"split_key":209334,"timestamp":"2026-05-07T13:00:00.000Z"} +{"doc_count":3295,"split_key":208137,"timestamp":"2026-05-07T13:00:00.000Z"} +{"doc_count":2999,"split_key":211590,"timestamp":"2026-05-07T13:00:00.000Z"} +{"doc_count":2829,"split_key":14061,"timestamp":"2026-05-07T13:00:00.000Z"} +{"doc_count":81225,"split_key":206264,"timestamp":"2026-05-07T14:00:00.000Z"} +{"doc_count":21336,"split_key":209334,"timestamp":"2026-05-07T14:00:00.000Z"} +{"doc_count":2866,"split_key":14061,"timestamp":"2026-05-07T14:00:00.000Z"} +{"doc_count":2067,"split_key":49581,"timestamp":"2026-05-07T14:00:00.000Z"} +{"doc_count":1426,"split_key":53427,"timestamp":"2026-05-07T14:00:00.000Z"} +{"doc_count":82373,"split_key":206264,"timestamp":"2026-05-07T15:00:00.000Z"} +{"doc_count":17883,"split_key":209334,"timestamp":"2026-05-07T15:00:00.000Z"} +{"doc_count":2897,"split_key":14061,"timestamp":"2026-05-07T15:00:00.000Z"} +{"doc_count":2060,"split_key":200514,"timestamp":"2026-05-07T15:00:00.000Z"} +{"doc_count":1946,"split_key":49581,"timestamp":"2026-05-07T15:00:00.000Z"} +{"doc_count":82515,"split_key":206264,"timestamp":"2026-05-07T16:00:00.000Z"} +{"doc_count":6970,"split_key":209334,"timestamp":"2026-05-07T16:00:00.000Z"} +{"doc_count":4957,"split_key":14061,"timestamp":"2026-05-07T16:00:00.000Z"} +{"doc_count":3297,"split_key":200514,"timestamp":"2026-05-07T16:00:00.000Z"} +{"doc_count":955,"split_key":24940,"timestamp":"2026-05-07T16:00:00.000Z"} +{"doc_count":83525,"split_key":206264,"timestamp":"2026-05-07T17:00:00.000Z"} +{"doc_count":2761,"split_key":14061,"timestamp":"2026-05-07T17:00:00.000Z"} +{"doc_count":1162,"split_key":3170,"timestamp":"2026-05-07T17:00:00.000Z"} +{"doc_count":1134,"split_key":24940,"timestamp":"2026-05-07T17:00:00.000Z"} +{"doc_count":1028,"split_key":200514,"timestamp":"2026-05-07T17:00:00.000Z"} +{"doc_count":81439,"split_key":206264,"timestamp":"2026-05-07T18:00:00.000Z"} +{"doc_count":2806,"split_key":14061,"timestamp":"2026-05-07T18:00:00.000Z"} +{"doc_count":2062,"split_key":16509,"timestamp":"2026-05-07T18:00:00.000Z"} +{"doc_count":1860,"split_key":60404,"timestamp":"2026-05-07T18:00:00.000Z"} +{"doc_count":1088,"split_key":24940,"timestamp":"2026-05-07T18:00:00.000Z"} +{"doc_count":62307,"split_key":206264,"timestamp":"2026-05-07T19:00:00.000Z"} +{"doc_count":6024,"split_key":14061,"timestamp":"2026-05-07T19:00:00.000Z"} +{"doc_count":2999,"split_key":211590,"timestamp":"2026-05-07T19:00:00.000Z"} +{"doc_count":994,"split_key":24940,"timestamp":"2026-05-07T19:00:00.000Z"} +{"doc_count":653,"split_key":396982,"timestamp":"2026-05-07T19:00:00.000Z"} +{"doc_count":65144,"split_key":206264,"timestamp":"2026-05-07T20:00:00.000Z"} +{"doc_count":4137,"split_key":14061,"timestamp":"2026-05-07T20:00:00.000Z"} +{"doc_count":2999,"split_key":211590,"timestamp":"2026-05-07T20:00:00.000Z"} +{"doc_count":992,"split_key":24940,"timestamp":"2026-05-07T20:00:00.000Z"} +{"doc_count":711,"split_key":209334,"timestamp":"2026-05-07T20:00:00.000Z"} +{"doc_count":63318,"split_key":206264,"timestamp":"2026-05-07T21:00:00.000Z"} +{"doc_count":3757,"split_key":14061,"timestamp":"2026-05-07T21:00:00.000Z"} +{"doc_count":1076,"split_key":24940,"timestamp":"2026-05-07T21:00:00.000Z"} +{"doc_count":863,"split_key":396982,"timestamp":"2026-05-07T21:00:00.000Z"} +{"doc_count":793,"split_key":51396,"timestamp":"2026-05-07T21:00:00.000Z"} +{"doc_count":66945,"split_key":206264,"timestamp":"2026-05-07T22:00:00.000Z"} +{"doc_count":2597,"split_key":14061,"timestamp":"2026-05-07T22:00:00.000Z"} +{"doc_count":2015,"split_key":211590,"timestamp":"2026-05-07T22:00:00.000Z"} +{"doc_count":1040,"split_key":24940,"timestamp":"2026-05-07T22:00:00.000Z"} +{"doc_count":717,"split_key":396982,"timestamp":"2026-05-07T22:00:00.000Z"} +{"doc_count":83140,"split_key":206264,"timestamp":"2026-05-07T23:00:00.000Z"} +{"doc_count":7724,"split_key":14061,"timestamp":"2026-05-07T23:00:00.000Z"} +{"doc_count":1393,"split_key":211590,"timestamp":"2026-05-07T23:00:00.000Z"} +{"doc_count":977,"split_key":24940,"timestamp":"2026-05-07T23:00:00.000Z"} +{"doc_count":605,"split_key":396982,"timestamp":"2026-05-07T23:00:00.000Z"} +{"doc_count":82589,"split_key":206264,"timestamp":"2026-05-08T00:00:00.000Z"} +{"doc_count":4245,"split_key":14061,"timestamp":"2026-05-08T00:00:00.000Z"} +{"doc_count":1095,"split_key":24940,"timestamp":"2026-05-08T00:00:00.000Z"} +{"doc_count":944,"split_key":395839,"timestamp":"2026-05-08T00:00:00.000Z"} +{"doc_count":629,"split_key":396982,"timestamp":"2026-05-08T00:00:00.000Z"} +{"doc_count":75212,"split_key":206264,"timestamp":"2026-05-08T01:00:00.000Z"} +{"doc_count":2898,"split_key":14061,"timestamp":"2026-05-08T01:00:00.000Z"} +{"doc_count":1029,"split_key":24940,"timestamp":"2026-05-08T01:00:00.000Z"} +{"doc_count":724,"split_key":396982,"timestamp":"2026-05-08T01:00:00.000Z"} +{"doc_count":627,"split_key":53667,"timestamp":"2026-05-08T01:00:00.000Z"} +{"doc_count":85408,"split_key":206264,"timestamp":"2026-05-08T02:00:00.000Z"} +{"doc_count":2693,"split_key":14061,"timestamp":"2026-05-08T02:00:00.000Z"} +{"doc_count":1026,"split_key":24940,"timestamp":"2026-05-08T02:00:00.000Z"} +{"doc_count":753,"split_key":209334,"timestamp":"2026-05-08T02:00:00.000Z"} +{"doc_count":715,"split_key":396982,"timestamp":"2026-05-08T02:00:00.000Z"} +{"doc_count":86235,"split_key":206264,"timestamp":"2026-05-08T03:00:00.000Z"} +{"doc_count":3008,"split_key":14061,"timestamp":"2026-05-08T03:00:00.000Z"} +{"doc_count":1719,"split_key":63949,"timestamp":"2026-05-08T03:00:00.000Z"} +{"doc_count":1032,"split_key":24940,"timestamp":"2026-05-08T03:00:00.000Z"} +{"doc_count":822,"split_key":396982,"timestamp":"2026-05-08T03:00:00.000Z"} +{"doc_count":15573,"split_key":206264,"timestamp":"2026-05-08T04:00:00.000Z"} +{"doc_count":2584,"split_key":14061,"timestamp":"2026-05-08T04:00:00.000Z"} +{"doc_count":2315,"split_key":49870,"timestamp":"2026-05-08T04:00:00.000Z"} +{"doc_count":1143,"split_key":51396,"timestamp":"2026-05-08T04:00:00.000Z"} +{"doc_count":970,"split_key":24940,"timestamp":"2026-05-08T04:00:00.000Z"} +{"doc_count":2607,"split_key":14061,"timestamp":"2026-05-08T05:00:00.000Z"} +{"doc_count":2320,"split_key":49870,"timestamp":"2026-05-08T05:00:00.000Z"} +{"doc_count":1279,"split_key":396982,"timestamp":"2026-05-08T05:00:00.000Z"} +{"doc_count":982,"split_key":24940,"timestamp":"2026-05-08T05:00:00.000Z"} +{"doc_count":860,"split_key":13768,"timestamp":"2026-05-08T05:00:00.000Z"} +{"doc_count":2503,"split_key":14061,"timestamp":"2026-05-08T06:00:00.000Z"} +{"doc_count":1853,"split_key":49870,"timestamp":"2026-05-08T06:00:00.000Z"} +{"doc_count":1005,"split_key":24940,"timestamp":"2026-05-08T06:00:00.000Z"} +{"doc_count":725,"split_key":396982,"timestamp":"2026-05-08T06:00:00.000Z"} +{"doc_count":643,"split_key":16509,"timestamp":"2026-05-08T06:00:00.000Z"} +{"doc_count":2431,"split_key":14061,"timestamp":"2026-05-08T07:00:00.000Z"} +{"doc_count":1857,"split_key":49870,"timestamp":"2026-05-08T07:00:00.000Z"} +{"doc_count":1018,"split_key":24940,"timestamp":"2026-05-08T07:00:00.000Z"} +{"doc_count":743,"split_key":51167,"timestamp":"2026-05-08T07:00:00.000Z"} +{"doc_count":712,"split_key":16509,"timestamp":"2026-05-08T07:00:00.000Z"} +{"doc_count":2494,"split_key":14061,"timestamp":"2026-05-08T08:00:00.000Z"} +{"doc_count":1124,"split_key":49870,"timestamp":"2026-05-08T08:00:00.000Z"} +{"doc_count":1021,"split_key":24940,"timestamp":"2026-05-08T08:00:00.000Z"} +{"doc_count":691,"split_key":51167,"timestamp":"2026-05-08T08:00:00.000Z"} +{"doc_count":622,"split_key":396982,"timestamp":"2026-05-08T08:00:00.000Z"} +{"doc_count":2979,"split_key":209334,"timestamp":"2026-05-08T09:00:00.000Z"} +{"doc_count":2793,"split_key":14061,"timestamp":"2026-05-08T09:00:00.000Z"} +{"doc_count":1035,"split_key":24940,"timestamp":"2026-05-08T09:00:00.000Z"} +{"doc_count":837,"split_key":51167,"timestamp":"2026-05-08T09:00:00.000Z"} +{"doc_count":779,"split_key":396982,"timestamp":"2026-05-08T09:00:00.000Z"} +{"doc_count":13504,"split_key":209334,"timestamp":"2026-05-08T10:00:00.000Z"} +{"doc_count":2531,"split_key":14061,"timestamp":"2026-05-08T10:00:00.000Z"} +{"doc_count":1052,"split_key":24940,"timestamp":"2026-05-08T10:00:00.000Z"} +{"doc_count":829,"split_key":51167,"timestamp":"2026-05-08T10:00:00.000Z"} +{"doc_count":646,"split_key":16509,"timestamp":"2026-05-08T10:00:00.000Z"} +{"doc_count":13159,"split_key":209334,"timestamp":"2026-05-08T11:00:00.000Z"} +{"doc_count":2767,"split_key":14061,"timestamp":"2026-05-08T11:00:00.000Z"} +{"doc_count":1031,"split_key":24940,"timestamp":"2026-05-08T11:00:00.000Z"} +{"doc_count":968,"split_key":37963,"timestamp":"2026-05-08T11:00:00.000Z"} +{"doc_count":765,"split_key":51167,"timestamp":"2026-05-08T11:00:00.000Z"} +{"doc_count":14908,"split_key":209334,"timestamp":"2026-05-08T12:00:00.000Z"} +{"doc_count":2766,"split_key":14061,"timestamp":"2026-05-08T12:00:00.000Z"} +{"doc_count":1075,"split_key":24940,"timestamp":"2026-05-08T12:00:00.000Z"} +{"doc_count":909,"split_key":37963,"timestamp":"2026-05-08T12:00:00.000Z"} +{"doc_count":735,"split_key":16509,"timestamp":"2026-05-08T12:00:00.000Z"} +{"doc_count":15734,"split_key":209334,"timestamp":"2026-05-08T13:00:00.000Z"} +{"doc_count":3176,"split_key":14061,"timestamp":"2026-05-08T13:00:00.000Z"} +{"doc_count":977,"split_key":24940,"timestamp":"2026-05-08T13:00:00.000Z"} +{"doc_count":895,"split_key":51396,"timestamp":"2026-05-08T13:00:00.000Z"} +{"doc_count":888,"split_key":37963,"timestamp":"2026-05-08T13:00:00.000Z"} +{"doc_count":28518,"split_key":209334,"timestamp":"2026-05-08T14:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-05-08T14:00:00.000Z"} +{"doc_count":2945,"split_key":14061,"timestamp":"2026-05-08T14:00:00.000Z"} +{"doc_count":1038,"split_key":24940,"timestamp":"2026-05-08T14:00:00.000Z"} +{"doc_count":915,"split_key":37963,"timestamp":"2026-05-08T14:00:00.000Z"} +{"doc_count":33813,"split_key":209334,"timestamp":"2026-05-08T15:00:00.000Z"} +{"doc_count":2999,"split_key":211590,"timestamp":"2026-05-08T15:00:00.000Z"} +{"doc_count":2544,"split_key":14061,"timestamp":"2026-05-08T15:00:00.000Z"} +{"doc_count":1037,"split_key":24940,"timestamp":"2026-05-08T15:00:00.000Z"} +{"doc_count":797,"split_key":14618,"timestamp":"2026-05-08T15:00:00.000Z"} +{"doc_count":22831,"split_key":209334,"timestamp":"2026-05-08T16:00:00.000Z"} +{"doc_count":2270,"split_key":14061,"timestamp":"2026-05-08T16:00:00.000Z"} +{"doc_count":1013,"split_key":24940,"timestamp":"2026-05-08T16:00:00.000Z"} +{"doc_count":944,"split_key":51396,"timestamp":"2026-05-08T16:00:00.000Z"} +{"doc_count":803,"split_key":16509,"timestamp":"2026-05-08T16:00:00.000Z"} +{"doc_count":12756,"split_key":31898,"timestamp":"2026-05-08T17:00:00.000Z"} +{"doc_count":2372,"split_key":14061,"timestamp":"2026-05-08T17:00:00.000Z"} +{"doc_count":1033,"split_key":24940,"timestamp":"2026-05-08T17:00:00.000Z"} +{"doc_count":853,"split_key":51167,"timestamp":"2026-05-08T17:00:00.000Z"} +{"doc_count":757,"split_key":197540,"timestamp":"2026-05-08T17:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-05-08T18:00:00.000Z"} +{"doc_count":2774,"split_key":14061,"timestamp":"2026-05-08T18:00:00.000Z"} +{"doc_count":1056,"split_key":24940,"timestamp":"2026-05-08T18:00:00.000Z"} +{"doc_count":904,"split_key":51396,"timestamp":"2026-05-08T18:00:00.000Z"} +{"doc_count":867,"split_key":51167,"timestamp":"2026-05-08T18:00:00.000Z"} +{"doc_count":2316,"split_key":14061,"timestamp":"2026-05-08T19:00:00.000Z"} +{"doc_count":2281,"split_key":26277,"timestamp":"2026-05-08T19:00:00.000Z"} +{"doc_count":1433,"split_key":40021,"timestamp":"2026-05-08T19:00:00.000Z"} +{"doc_count":1113,"split_key":24940,"timestamp":"2026-05-08T19:00:00.000Z"} +{"doc_count":802,"split_key":51167,"timestamp":"2026-05-08T19:00:00.000Z"} +{"doc_count":2540,"split_key":14061,"timestamp":"2026-05-08T20:00:00.000Z"} +{"doc_count":2145,"split_key":26277,"timestamp":"2026-05-08T20:00:00.000Z"} +{"doc_count":1047,"split_key":24940,"timestamp":"2026-05-08T20:00:00.000Z"} +{"doc_count":894,"split_key":51167,"timestamp":"2026-05-08T20:00:00.000Z"} +{"doc_count":746,"split_key":205759,"timestamp":"2026-05-08T20:00:00.000Z"} +{"doc_count":2715,"split_key":14061,"timestamp":"2026-05-08T21:00:00.000Z"} +{"doc_count":1959,"split_key":26277,"timestamp":"2026-05-08T21:00:00.000Z"} +{"doc_count":1142,"split_key":24940,"timestamp":"2026-05-08T21:00:00.000Z"} +{"doc_count":759,"split_key":51167,"timestamp":"2026-05-08T21:00:00.000Z"} +{"doc_count":746,"split_key":396982,"timestamp":"2026-05-08T21:00:00.000Z"} +{"doc_count":3118,"split_key":14061,"timestamp":"2026-05-08T22:00:00.000Z"} +{"doc_count":1785,"split_key":26277,"timestamp":"2026-05-08T22:00:00.000Z"} +{"doc_count":1183,"split_key":24940,"timestamp":"2026-05-08T22:00:00.000Z"} +{"doc_count":816,"split_key":51167,"timestamp":"2026-05-08T22:00:00.000Z"} +{"doc_count":667,"split_key":396982,"timestamp":"2026-05-08T22:00:00.000Z"} +{"doc_count":63667,"split_key":1218,"timestamp":"2026-05-08T23:00:00.000Z"} +{"doc_count":2986,"split_key":14061,"timestamp":"2026-05-08T23:00:00.000Z"} +{"doc_count":1675,"split_key":26277,"timestamp":"2026-05-08T23:00:00.000Z"} +{"doc_count":1168,"split_key":24940,"timestamp":"2026-05-08T23:00:00.000Z"} +{"doc_count":923,"split_key":51167,"timestamp":"2026-05-08T23:00:00.000Z"} +{"doc_count":91656,"split_key":1218,"timestamp":"2026-05-09T00:00:00.000Z"} +{"doc_count":11884,"split_key":14061,"timestamp":"2026-05-09T00:00:00.000Z"} +{"doc_count":3223,"split_key":13213,"timestamp":"2026-05-09T00:00:00.000Z"} +{"doc_count":1561,"split_key":26277,"timestamp":"2026-05-09T00:00:00.000Z"} +{"doc_count":1334,"split_key":24940,"timestamp":"2026-05-09T00:00:00.000Z"} +{"doc_count":57348,"split_key":1218,"timestamp":"2026-05-09T01:00:00.000Z"} +{"doc_count":26676,"split_key":14061,"timestamp":"2026-05-09T01:00:00.000Z"} +{"doc_count":2325,"split_key":211590,"timestamp":"2026-05-09T01:00:00.000Z"} +{"doc_count":1401,"split_key":26277,"timestamp":"2026-05-09T01:00:00.000Z"} +{"doc_count":1204,"split_key":24940,"timestamp":"2026-05-09T01:00:00.000Z"} +{"doc_count":91097,"split_key":1218,"timestamp":"2026-05-09T02:00:00.000Z"} +{"doc_count":29266,"split_key":14061,"timestamp":"2026-05-09T02:00:00.000Z"} +{"doc_count":1276,"split_key":26277,"timestamp":"2026-05-09T02:00:00.000Z"} +{"doc_count":1213,"split_key":396982,"timestamp":"2026-05-09T02:00:00.000Z"} +{"doc_count":1201,"split_key":24940,"timestamp":"2026-05-09T02:00:00.000Z"} +{"doc_count":85231,"split_key":1218,"timestamp":"2026-05-09T03:00:00.000Z"} +{"doc_count":14209,"split_key":14061,"timestamp":"2026-05-09T03:00:00.000Z"} +{"doc_count":10623,"split_key":8560,"timestamp":"2026-05-09T03:00:00.000Z"} +{"doc_count":1163,"split_key":24940,"timestamp":"2026-05-09T03:00:00.000Z"} +{"doc_count":956,"split_key":51167,"timestamp":"2026-05-09T03:00:00.000Z"} +{"doc_count":35044,"split_key":1218,"timestamp":"2026-05-09T04:00:00.000Z"} +{"doc_count":4620,"split_key":211590,"timestamp":"2026-05-09T04:00:00.000Z"} +{"doc_count":2932,"split_key":14061,"timestamp":"2026-05-09T04:00:00.000Z"} +{"doc_count":1134,"split_key":24940,"timestamp":"2026-05-09T04:00:00.000Z"} +{"doc_count":924,"split_key":45102,"timestamp":"2026-05-09T04:00:00.000Z"} +{"doc_count":28185,"split_key":1218,"timestamp":"2026-05-09T05:00:00.000Z"} +{"doc_count":2944,"split_key":14061,"timestamp":"2026-05-09T05:00:00.000Z"} +{"doc_count":2471,"split_key":205759,"timestamp":"2026-05-09T05:00:00.000Z"} +{"doc_count":1477,"split_key":37963,"timestamp":"2026-05-09T05:00:00.000Z"} +{"doc_count":1094,"split_key":24940,"timestamp":"2026-05-09T05:00:00.000Z"} +{"doc_count":35294,"split_key":1218,"timestamp":"2026-05-09T06:00:00.000Z"} +{"doc_count":2885,"split_key":14061,"timestamp":"2026-05-09T06:00:00.000Z"} +{"doc_count":2287,"split_key":205759,"timestamp":"2026-05-09T06:00:00.000Z"} +{"doc_count":1329,"split_key":37963,"timestamp":"2026-05-09T06:00:00.000Z"} +{"doc_count":1229,"split_key":396982,"timestamp":"2026-05-09T06:00:00.000Z"} +{"doc_count":29137,"split_key":1218,"timestamp":"2026-05-09T07:00:00.000Z"} +{"doc_count":2840,"split_key":14061,"timestamp":"2026-05-09T07:00:00.000Z"} +{"doc_count":1202,"split_key":24940,"timestamp":"2026-05-09T07:00:00.000Z"} +{"doc_count":1051,"split_key":51167,"timestamp":"2026-05-09T07:00:00.000Z"} +{"doc_count":956,"split_key":45102,"timestamp":"2026-05-09T07:00:00.000Z"} +{"doc_count":29909,"split_key":1218,"timestamp":"2026-05-09T08:00:00.000Z"} +{"doc_count":2797,"split_key":14061,"timestamp":"2026-05-09T08:00:00.000Z"} +{"doc_count":1620,"split_key":211590,"timestamp":"2026-05-09T08:00:00.000Z"} +{"doc_count":1177,"split_key":24940,"timestamp":"2026-05-09T08:00:00.000Z"} +{"doc_count":1051,"split_key":51167,"timestamp":"2026-05-09T08:00:00.000Z"} +{"doc_count":29653,"split_key":1218,"timestamp":"2026-05-09T09:00:00.000Z"} +{"doc_count":4809,"split_key":209334,"timestamp":"2026-05-09T09:00:00.000Z"} +{"doc_count":3962,"split_key":211590,"timestamp":"2026-05-09T09:00:00.000Z"} +{"doc_count":2762,"split_key":14061,"timestamp":"2026-05-09T09:00:00.000Z"} +{"doc_count":1267,"split_key":24940,"timestamp":"2026-05-09T09:00:00.000Z"} +{"doc_count":29190,"split_key":209334,"timestamp":"2026-05-09T10:00:00.000Z"} +{"doc_count":28477,"split_key":1218,"timestamp":"2026-05-09T10:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-05-09T10:00:00.000Z"} +{"doc_count":2836,"split_key":14061,"timestamp":"2026-05-09T10:00:00.000Z"} +{"doc_count":2008,"split_key":16509,"timestamp":"2026-05-09T10:00:00.000Z"} +{"doc_count":29163,"split_key":1218,"timestamp":"2026-05-09T11:00:00.000Z"} +{"doc_count":21174,"split_key":209334,"timestamp":"2026-05-09T11:00:00.000Z"} +{"doc_count":2894,"split_key":14061,"timestamp":"2026-05-09T11:00:00.000Z"} +{"doc_count":1255,"split_key":24940,"timestamp":"2026-05-09T11:00:00.000Z"} +{"doc_count":949,"split_key":51167,"timestamp":"2026-05-09T11:00:00.000Z"} +{"doc_count":30173,"split_key":1218,"timestamp":"2026-05-09T12:00:00.000Z"} +{"doc_count":11735,"split_key":209334,"timestamp":"2026-05-09T12:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-05-09T12:00:00.000Z"} +{"doc_count":2817,"split_key":14061,"timestamp":"2026-05-09T12:00:00.000Z"} +{"doc_count":1275,"split_key":24940,"timestamp":"2026-05-09T12:00:00.000Z"} +{"doc_count":29236,"split_key":1218,"timestamp":"2026-05-09T13:00:00.000Z"} +{"doc_count":28809,"split_key":209334,"timestamp":"2026-05-09T13:00:00.000Z"} +{"doc_count":2905,"split_key":14061,"timestamp":"2026-05-09T13:00:00.000Z"} +{"doc_count":1872,"split_key":141968,"timestamp":"2026-05-09T13:00:00.000Z"} +{"doc_count":1278,"split_key":24940,"timestamp":"2026-05-09T13:00:00.000Z"} +{"doc_count":28527,"split_key":1218,"timestamp":"2026-05-09T14:00:00.000Z"} +{"doc_count":16239,"split_key":209334,"timestamp":"2026-05-09T14:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-05-09T14:00:00.000Z"} +{"doc_count":2924,"split_key":14061,"timestamp":"2026-05-09T14:00:00.000Z"} +{"doc_count":1260,"split_key":24940,"timestamp":"2026-05-09T14:00:00.000Z"} +{"doc_count":32579,"split_key":209334,"timestamp":"2026-05-09T15:00:00.000Z"} +{"doc_count":29053,"split_key":1218,"timestamp":"2026-05-09T15:00:00.000Z"} +{"doc_count":2960,"split_key":14061,"timestamp":"2026-05-09T15:00:00.000Z"} +{"doc_count":1226,"split_key":24940,"timestamp":"2026-05-09T15:00:00.000Z"} +{"doc_count":1193,"split_key":51396,"timestamp":"2026-05-09T15:00:00.000Z"} +{"doc_count":30395,"split_key":1218,"timestamp":"2026-05-09T16:00:00.000Z"} +{"doc_count":2849,"split_key":14061,"timestamp":"2026-05-09T16:00:00.000Z"} +{"doc_count":1528,"split_key":45102,"timestamp":"2026-05-09T16:00:00.000Z"} +{"doc_count":1231,"split_key":16509,"timestamp":"2026-05-09T16:00:00.000Z"} +{"doc_count":1224,"split_key":24940,"timestamp":"2026-05-09T16:00:00.000Z"} +{"doc_count":29121,"split_key":1218,"timestamp":"2026-05-09T17:00:00.000Z"} +{"doc_count":3104,"split_key":14061,"timestamp":"2026-05-09T17:00:00.000Z"} +{"doc_count":1921,"split_key":141968,"timestamp":"2026-05-09T17:00:00.000Z"} +{"doc_count":1780,"split_key":45102,"timestamp":"2026-05-09T17:00:00.000Z"} +{"doc_count":1205,"split_key":24940,"timestamp":"2026-05-09T17:00:00.000Z"} +{"doc_count":28714,"split_key":1218,"timestamp":"2026-05-09T18:00:00.000Z"} +{"doc_count":4554,"split_key":211590,"timestamp":"2026-05-09T18:00:00.000Z"} +{"doc_count":3494,"split_key":14061,"timestamp":"2026-05-09T18:00:00.000Z"} +{"doc_count":1483,"split_key":45102,"timestamp":"2026-05-09T18:00:00.000Z"} +{"doc_count":1247,"split_key":396356,"timestamp":"2026-05-09T18:00:00.000Z"} +{"doc_count":28905,"split_key":1218,"timestamp":"2026-05-09T19:00:00.000Z"} +{"doc_count":3270,"split_key":40065,"timestamp":"2026-05-09T19:00:00.000Z"} +{"doc_count":3154,"split_key":14061,"timestamp":"2026-05-09T19:00:00.000Z"} +{"doc_count":1729,"split_key":205759,"timestamp":"2026-05-09T19:00:00.000Z"} +{"doc_count":1240,"split_key":24940,"timestamp":"2026-05-09T19:00:00.000Z"} +{"doc_count":30656,"split_key":1218,"timestamp":"2026-05-09T20:00:00.000Z"} +{"doc_count":15762,"split_key":40065,"timestamp":"2026-05-09T20:00:00.000Z"} +{"doc_count":3263,"split_key":14061,"timestamp":"2026-05-09T20:00:00.000Z"} +{"doc_count":1659,"split_key":63949,"timestamp":"2026-05-09T20:00:00.000Z"} +{"doc_count":1194,"split_key":24940,"timestamp":"2026-05-09T20:00:00.000Z"} +{"doc_count":56596,"split_key":1218,"timestamp":"2026-05-09T21:00:00.000Z"} +{"doc_count":3351,"split_key":40065,"timestamp":"2026-05-09T21:00:00.000Z"} +{"doc_count":2886,"split_key":14061,"timestamp":"2026-05-09T21:00:00.000Z"} +{"doc_count":2070,"split_key":211590,"timestamp":"2026-05-09T21:00:00.000Z"} +{"doc_count":1292,"split_key":24940,"timestamp":"2026-05-09T21:00:00.000Z"} +{"doc_count":21893,"split_key":1218,"timestamp":"2026-05-09T22:00:00.000Z"} +{"doc_count":6421,"split_key":40065,"timestamp":"2026-05-09T22:00:00.000Z"} +{"doc_count":3596,"split_key":14061,"timestamp":"2026-05-09T22:00:00.000Z"} +{"doc_count":1467,"split_key":209334,"timestamp":"2026-05-09T22:00:00.000Z"} +{"doc_count":1356,"split_key":24940,"timestamp":"2026-05-09T22:00:00.000Z"} +{"doc_count":4223,"split_key":40065,"timestamp":"2026-05-09T23:00:00.000Z"} +{"doc_count":3594,"split_key":14061,"timestamp":"2026-05-09T23:00:00.000Z"} +{"doc_count":1887,"split_key":37963,"timestamp":"2026-05-09T23:00:00.000Z"} +{"doc_count":1396,"split_key":24940,"timestamp":"2026-05-09T23:00:00.000Z"} +{"doc_count":885,"split_key":51167,"timestamp":"2026-05-09T23:00:00.000Z"} +{"doc_count":3968,"split_key":14061,"timestamp":"2026-05-10T00:00:00.000Z"} +{"doc_count":2864,"split_key":40065,"timestamp":"2026-05-10T00:00:00.000Z"} +{"doc_count":1946,"split_key":37963,"timestamp":"2026-05-10T00:00:00.000Z"} +{"doc_count":1370,"split_key":24940,"timestamp":"2026-05-10T00:00:00.000Z"} +{"doc_count":921,"split_key":396982,"timestamp":"2026-05-10T00:00:00.000Z"} +{"doc_count":4753,"split_key":14061,"timestamp":"2026-05-10T01:00:00.000Z"} +{"doc_count":1973,"split_key":37963,"timestamp":"2026-05-10T01:00:00.000Z"} +{"doc_count":1421,"split_key":24940,"timestamp":"2026-05-10T01:00:00.000Z"} +{"doc_count":967,"split_key":396982,"timestamp":"2026-05-10T01:00:00.000Z"} +{"doc_count":898,"split_key":51167,"timestamp":"2026-05-10T01:00:00.000Z"} +{"doc_count":4108,"split_key":14061,"timestamp":"2026-05-10T02:00:00.000Z"} +{"doc_count":2999,"split_key":211590,"timestamp":"2026-05-10T02:00:00.000Z"} +{"doc_count":1421,"split_key":24940,"timestamp":"2026-05-10T02:00:00.000Z"} +{"doc_count":1312,"split_key":37963,"timestamp":"2026-05-10T02:00:00.000Z"} +{"doc_count":1138,"split_key":51167,"timestamp":"2026-05-10T02:00:00.000Z"} +{"doc_count":3548,"split_key":14061,"timestamp":"2026-05-10T03:00:00.000Z"} +{"doc_count":1479,"split_key":24940,"timestamp":"2026-05-10T03:00:00.000Z"} +{"doc_count":849,"split_key":51167,"timestamp":"2026-05-10T03:00:00.000Z"} +{"doc_count":849,"split_key":396982,"timestamp":"2026-05-10T03:00:00.000Z"} +{"doc_count":700,"split_key":212512,"timestamp":"2026-05-10T03:00:00.000Z"} +{"doc_count":3571,"split_key":14061,"timestamp":"2026-05-10T04:00:00.000Z"} +{"doc_count":1561,"split_key":24940,"timestamp":"2026-05-10T04:00:00.000Z"} +{"doc_count":1428,"split_key":51396,"timestamp":"2026-05-10T04:00:00.000Z"} +{"doc_count":905,"split_key":51167,"timestamp":"2026-05-10T04:00:00.000Z"} +{"doc_count":751,"split_key":212512,"timestamp":"2026-05-10T04:00:00.000Z"} +{"doc_count":4057,"split_key":14061,"timestamp":"2026-05-10T05:00:00.000Z"} +{"doc_count":1533,"split_key":24940,"timestamp":"2026-05-10T05:00:00.000Z"} +{"doc_count":829,"split_key":212512,"timestamp":"2026-05-10T05:00:00.000Z"} +{"doc_count":803,"split_key":51167,"timestamp":"2026-05-10T05:00:00.000Z"} +{"doc_count":715,"split_key":51396,"timestamp":"2026-05-10T05:00:00.000Z"} +{"doc_count":3782,"split_key":14061,"timestamp":"2026-05-10T06:00:00.000Z"} +{"doc_count":1393,"split_key":24940,"timestamp":"2026-05-10T06:00:00.000Z"} +{"doc_count":1074,"split_key":396982,"timestamp":"2026-05-10T06:00:00.000Z"} +{"doc_count":839,"split_key":51167,"timestamp":"2026-05-10T06:00:00.000Z"} +{"doc_count":817,"split_key":212512,"timestamp":"2026-05-10T06:00:00.000Z"} +{"doc_count":3740,"split_key":14061,"timestamp":"2026-05-10T07:00:00.000Z"} +{"doc_count":1365,"split_key":24940,"timestamp":"2026-05-10T07:00:00.000Z"} +{"doc_count":857,"split_key":51167,"timestamp":"2026-05-10T07:00:00.000Z"} +{"doc_count":792,"split_key":212512,"timestamp":"2026-05-10T07:00:00.000Z"} +{"doc_count":740,"split_key":396982,"timestamp":"2026-05-10T07:00:00.000Z"} +{"doc_count":3621,"split_key":14061,"timestamp":"2026-05-10T08:00:00.000Z"} +{"doc_count":1390,"split_key":24940,"timestamp":"2026-05-10T08:00:00.000Z"} +{"doc_count":1145,"split_key":51396,"timestamp":"2026-05-10T08:00:00.000Z"} +{"doc_count":862,"split_key":51167,"timestamp":"2026-05-10T08:00:00.000Z"} +{"doc_count":834,"split_key":212512,"timestamp":"2026-05-10T08:00:00.000Z"} +{"doc_count":3475,"split_key":14061,"timestamp":"2026-05-10T09:00:00.000Z"} +{"doc_count":1573,"split_key":212238,"timestamp":"2026-05-10T09:00:00.000Z"} +{"doc_count":1473,"split_key":24940,"timestamp":"2026-05-10T09:00:00.000Z"} +{"doc_count":1029,"split_key":401696,"timestamp":"2026-05-10T09:00:00.000Z"} +{"doc_count":936,"split_key":51396,"timestamp":"2026-05-10T09:00:00.000Z"} +{"doc_count":3571,"split_key":14061,"timestamp":"2026-05-10T10:00:00.000Z"} +{"doc_count":1787,"split_key":212238,"timestamp":"2026-05-10T10:00:00.000Z"} +{"doc_count":1462,"split_key":24940,"timestamp":"2026-05-10T10:00:00.000Z"} +{"doc_count":947,"split_key":212512,"timestamp":"2026-05-10T10:00:00.000Z"} +{"doc_count":902,"split_key":51396,"timestamp":"2026-05-10T10:00:00.000Z"} +{"doc_count":5086,"split_key":212238,"timestamp":"2026-05-10T11:00:00.000Z"} +{"doc_count":3311,"split_key":14061,"timestamp":"2026-05-10T11:00:00.000Z"} +{"doc_count":2999,"split_key":211590,"timestamp":"2026-05-10T11:00:00.000Z"} +{"doc_count":2568,"split_key":209334,"timestamp":"2026-05-10T11:00:00.000Z"} +{"doc_count":1396,"split_key":24940,"timestamp":"2026-05-10T11:00:00.000Z"} +{"doc_count":3273,"split_key":14061,"timestamp":"2026-05-10T12:00:00.000Z"} +{"doc_count":1398,"split_key":24940,"timestamp":"2026-05-10T12:00:00.000Z"} +{"doc_count":966,"split_key":212512,"timestamp":"2026-05-10T12:00:00.000Z"} +{"doc_count":832,"split_key":51167,"timestamp":"2026-05-10T12:00:00.000Z"} +{"doc_count":653,"split_key":211590,"timestamp":"2026-05-10T12:00:00.000Z"} +{"doc_count":3122,"split_key":14061,"timestamp":"2026-05-10T13:00:00.000Z"} +{"doc_count":1417,"split_key":24940,"timestamp":"2026-05-10T13:00:00.000Z"} +{"doc_count":975,"split_key":212512,"timestamp":"2026-05-10T13:00:00.000Z"} +{"doc_count":841,"split_key":51167,"timestamp":"2026-05-10T13:00:00.000Z"} +{"doc_count":713,"split_key":209334,"timestamp":"2026-05-10T13:00:00.000Z"} +{"doc_count":3060,"split_key":14061,"timestamp":"2026-05-10T14:00:00.000Z"} +{"doc_count":1516,"split_key":24940,"timestamp":"2026-05-10T14:00:00.000Z"} +{"doc_count":849,"split_key":212512,"timestamp":"2026-05-10T14:00:00.000Z"} +{"doc_count":833,"split_key":51167,"timestamp":"2026-05-10T14:00:00.000Z"} +{"doc_count":660,"split_key":35916,"timestamp":"2026-05-10T14:00:00.000Z"} +{"doc_count":2999,"split_key":211590,"timestamp":"2026-05-10T15:00:00.000Z"} +{"doc_count":2920,"split_key":14061,"timestamp":"2026-05-10T15:00:00.000Z"} +{"doc_count":1874,"split_key":50926,"timestamp":"2026-05-10T15:00:00.000Z"} +{"doc_count":1546,"split_key":24940,"timestamp":"2026-05-10T15:00:00.000Z"} +{"doc_count":902,"split_key":51396,"timestamp":"2026-05-10T15:00:00.000Z"} +{"doc_count":3534,"split_key":14061,"timestamp":"2026-05-10T16:00:00.000Z"} +{"doc_count":1612,"split_key":24940,"timestamp":"2026-05-10T16:00:00.000Z"} +{"doc_count":919,"split_key":51167,"timestamp":"2026-05-10T16:00:00.000Z"} +{"doc_count":869,"split_key":51396,"timestamp":"2026-05-10T16:00:00.000Z"} +{"doc_count":846,"split_key":212512,"timestamp":"2026-05-10T16:00:00.000Z"} +{"doc_count":5999,"split_key":211590,"timestamp":"2026-05-10T17:00:00.000Z"} +{"doc_count":4310,"split_key":14061,"timestamp":"2026-05-10T17:00:00.000Z"} +{"doc_count":3418,"split_key":396982,"timestamp":"2026-05-10T17:00:00.000Z"} +{"doc_count":1625,"split_key":31898,"timestamp":"2026-05-10T17:00:00.000Z"} +{"doc_count":1618,"split_key":24940,"timestamp":"2026-05-10T17:00:00.000Z"} +{"doc_count":6754,"split_key":211590,"timestamp":"2026-05-10T18:00:00.000Z"} +{"doc_count":6304,"split_key":396982,"timestamp":"2026-05-10T18:00:00.000Z"} +{"doc_count":3212,"split_key":14061,"timestamp":"2026-05-10T18:00:00.000Z"} +{"doc_count":2280,"split_key":209334,"timestamp":"2026-05-10T18:00:00.000Z"} +{"doc_count":1596,"split_key":24940,"timestamp":"2026-05-10T18:00:00.000Z"} +{"doc_count":3267,"split_key":14061,"timestamp":"2026-05-10T19:00:00.000Z"} +{"doc_count":3111,"split_key":396982,"timestamp":"2026-05-10T19:00:00.000Z"} +{"doc_count":1504,"split_key":205759,"timestamp":"2026-05-10T19:00:00.000Z"} +{"doc_count":1498,"split_key":24940,"timestamp":"2026-05-10T19:00:00.000Z"} +{"doc_count":967,"split_key":212512,"timestamp":"2026-05-10T19:00:00.000Z"} +{"doc_count":3212,"split_key":14061,"timestamp":"2026-05-10T20:00:00.000Z"} +{"doc_count":1563,"split_key":24940,"timestamp":"2026-05-10T20:00:00.000Z"} +{"doc_count":1224,"split_key":209334,"timestamp":"2026-05-10T20:00:00.000Z"} +{"doc_count":1138,"split_key":208137,"timestamp":"2026-05-10T20:00:00.000Z"} +{"doc_count":961,"split_key":212512,"timestamp":"2026-05-10T20:00:00.000Z"} +{"doc_count":7144,"split_key":209334,"timestamp":"2026-05-10T21:00:00.000Z"} +{"doc_count":4191,"split_key":396982,"timestamp":"2026-05-10T21:00:00.000Z"} +{"doc_count":2890,"split_key":14061,"timestamp":"2026-05-10T21:00:00.000Z"} +{"doc_count":1591,"split_key":24940,"timestamp":"2026-05-10T21:00:00.000Z"} +{"doc_count":1430,"split_key":211590,"timestamp":"2026-05-10T21:00:00.000Z"} +{"doc_count":5860,"split_key":396982,"timestamp":"2026-05-10T22:00:00.000Z"} +{"doc_count":3264,"split_key":14061,"timestamp":"2026-05-10T22:00:00.000Z"} +{"doc_count":1578,"split_key":24940,"timestamp":"2026-05-10T22:00:00.000Z"} +{"doc_count":1570,"split_key":211590,"timestamp":"2026-05-10T22:00:00.000Z"} +{"doc_count":1413,"split_key":209334,"timestamp":"2026-05-10T22:00:00.000Z"} +{"doc_count":11281,"split_key":209334,"timestamp":"2026-05-10T23:00:00.000Z"} +{"doc_count":7063,"split_key":396982,"timestamp":"2026-05-10T23:00:00.000Z"} +{"doc_count":2892,"split_key":14061,"timestamp":"2026-05-10T23:00:00.000Z"} +{"doc_count":1597,"split_key":24940,"timestamp":"2026-05-10T23:00:00.000Z"} +{"doc_count":850,"split_key":212512,"timestamp":"2026-05-10T23:00:00.000Z"} +{"doc_count":3043,"split_key":14061,"timestamp":"2026-05-11T00:00:00.000Z"} +{"doc_count":1669,"split_key":24940,"timestamp":"2026-05-11T00:00:00.000Z"} +{"doc_count":803,"split_key":212512,"timestamp":"2026-05-11T00:00:00.000Z"} +{"doc_count":531,"split_key":25956,"timestamp":"2026-05-11T00:00:00.000Z"} +{"doc_count":504,"split_key":16276,"timestamp":"2026-05-11T00:00:00.000Z"} +{"doc_count":3010,"split_key":14061,"timestamp":"2026-05-11T01:00:00.000Z"} +{"doc_count":1593,"split_key":211590,"timestamp":"2026-05-11T01:00:00.000Z"} +{"doc_count":1543,"split_key":24940,"timestamp":"2026-05-11T01:00:00.000Z"} +{"doc_count":1449,"split_key":209334,"timestamp":"2026-05-11T01:00:00.000Z"} +{"doc_count":1386,"split_key":16276,"timestamp":"2026-05-11T01:00:00.000Z"} +{"doc_count":3188,"split_key":14061,"timestamp":"2026-05-11T02:00:00.000Z"} +{"doc_count":1455,"split_key":24940,"timestamp":"2026-05-11T02:00:00.000Z"} +{"doc_count":1365,"split_key":16276,"timestamp":"2026-05-11T02:00:00.000Z"} +{"doc_count":983,"split_key":209334,"timestamp":"2026-05-11T02:00:00.000Z"} +{"doc_count":983,"split_key":212512,"timestamp":"2026-05-11T02:00:00.000Z"} +{"doc_count":9949,"split_key":209334,"timestamp":"2026-05-11T03:00:00.000Z"} +{"doc_count":3347,"split_key":14061,"timestamp":"2026-05-11T03:00:00.000Z"} +{"doc_count":2999,"split_key":211590,"timestamp":"2026-05-11T03:00:00.000Z"} +{"doc_count":1420,"split_key":24940,"timestamp":"2026-05-11T03:00:00.000Z"} +{"doc_count":1377,"split_key":16276,"timestamp":"2026-05-11T03:00:00.000Z"} +{"doc_count":3207,"split_key":14061,"timestamp":"2026-05-11T04:00:00.000Z"} +{"doc_count":2071,"split_key":208137,"timestamp":"2026-05-11T04:00:00.000Z"} +{"doc_count":1423,"split_key":24940,"timestamp":"2026-05-11T04:00:00.000Z"} +{"doc_count":1376,"split_key":16276,"timestamp":"2026-05-11T04:00:00.000Z"} +{"doc_count":1043,"split_key":212512,"timestamp":"2026-05-11T04:00:00.000Z"} +{"doc_count":3122,"split_key":14061,"timestamp":"2026-05-11T05:00:00.000Z"} +{"doc_count":3092,"split_key":211590,"timestamp":"2026-05-11T05:00:00.000Z"} +{"doc_count":2481,"split_key":208137,"timestamp":"2026-05-11T05:00:00.000Z"} +{"doc_count":1375,"split_key":24940,"timestamp":"2026-05-11T05:00:00.000Z"} +{"doc_count":1353,"split_key":16276,"timestamp":"2026-05-11T05:00:00.000Z"} +{"doc_count":10265,"split_key":209334,"timestamp":"2026-05-11T06:00:00.000Z"} +{"doc_count":3255,"split_key":14061,"timestamp":"2026-05-11T06:00:00.000Z"} +{"doc_count":1391,"split_key":16276,"timestamp":"2026-05-11T06:00:00.000Z"} +{"doc_count":1382,"split_key":24940,"timestamp":"2026-05-11T06:00:00.000Z"} +{"doc_count":1253,"split_key":208137,"timestamp":"2026-05-11T06:00:00.000Z"} +{"doc_count":6356,"split_key":209334,"timestamp":"2026-05-11T07:00:00.000Z"} +{"doc_count":3317,"split_key":14061,"timestamp":"2026-05-11T07:00:00.000Z"} +{"doc_count":2522,"split_key":136199,"timestamp":"2026-05-11T07:00:00.000Z"} +{"doc_count":1407,"split_key":24940,"timestamp":"2026-05-11T07:00:00.000Z"} +{"doc_count":1382,"split_key":16276,"timestamp":"2026-05-11T07:00:00.000Z"} +{"doc_count":3734,"split_key":209334,"timestamp":"2026-05-11T08:00:00.000Z"} +{"doc_count":3135,"split_key":14061,"timestamp":"2026-05-11T08:00:00.000Z"} +{"doc_count":1541,"split_key":24940,"timestamp":"2026-05-11T08:00:00.000Z"} +{"doc_count":1383,"split_key":16276,"timestamp":"2026-05-11T08:00:00.000Z"} +{"doc_count":1018,"split_key":212512,"timestamp":"2026-05-11T08:00:00.000Z"} +{"doc_count":12440,"split_key":209334,"timestamp":"2026-05-11T09:00:00.000Z"} +{"doc_count":7893,"split_key":142002,"timestamp":"2026-05-11T09:00:00.000Z"} +{"doc_count":2924,"split_key":14061,"timestamp":"2026-05-11T09:00:00.000Z"} +{"doc_count":1457,"split_key":24940,"timestamp":"2026-05-11T09:00:00.000Z"} +{"doc_count":1382,"split_key":16276,"timestamp":"2026-05-11T09:00:00.000Z"} +{"doc_count":2941,"split_key":14061,"timestamp":"2026-05-11T10:00:00.000Z"} +{"doc_count":2794,"split_key":209334,"timestamp":"2026-05-11T10:00:00.000Z"} +{"doc_count":1506,"split_key":24940,"timestamp":"2026-05-11T10:00:00.000Z"} +{"doc_count":1369,"split_key":16276,"timestamp":"2026-05-11T10:00:00.000Z"} +{"doc_count":945,"split_key":26496,"timestamp":"2026-05-11T10:00:00.000Z"} +{"doc_count":3140,"split_key":14061,"timestamp":"2026-05-11T11:00:00.000Z"} +{"doc_count":1444,"split_key":24940,"timestamp":"2026-05-11T11:00:00.000Z"} +{"doc_count":1381,"split_key":16276,"timestamp":"2026-05-11T11:00:00.000Z"} +{"doc_count":1069,"split_key":16509,"timestamp":"2026-05-11T11:00:00.000Z"} +{"doc_count":1012,"split_key":212512,"timestamp":"2026-05-11T11:00:00.000Z"} +{"doc_count":3179,"split_key":14061,"timestamp":"2026-05-11T12:00:00.000Z"} +{"doc_count":1861,"split_key":63949,"timestamp":"2026-05-11T12:00:00.000Z"} +{"doc_count":1823,"split_key":209242,"timestamp":"2026-05-11T12:00:00.000Z"} +{"doc_count":1480,"split_key":24940,"timestamp":"2026-05-11T12:00:00.000Z"} +{"doc_count":1387,"split_key":16276,"timestamp":"2026-05-11T12:00:00.000Z"} +{"doc_count":11661,"split_key":209334,"timestamp":"2026-05-11T13:00:00.000Z"} +{"doc_count":3232,"split_key":14061,"timestamp":"2026-05-11T13:00:00.000Z"} +{"doc_count":2887,"split_key":209242,"timestamp":"2026-05-11T13:00:00.000Z"} +{"doc_count":1586,"split_key":24940,"timestamp":"2026-05-11T13:00:00.000Z"} +{"doc_count":1373,"split_key":16276,"timestamp":"2026-05-11T13:00:00.000Z"} +{"doc_count":3283,"split_key":14061,"timestamp":"2026-05-11T14:00:00.000Z"} +{"doc_count":2493,"split_key":209242,"timestamp":"2026-05-11T14:00:00.000Z"} +{"doc_count":2467,"split_key":209334,"timestamp":"2026-05-11T14:00:00.000Z"} +{"doc_count":1506,"split_key":24940,"timestamp":"2026-05-11T14:00:00.000Z"} +{"doc_count":1377,"split_key":16276,"timestamp":"2026-05-11T14:00:00.000Z"} +{"doc_count":5407,"split_key":209334,"timestamp":"2026-05-11T15:00:00.000Z"} +{"doc_count":3131,"split_key":14061,"timestamp":"2026-05-11T15:00:00.000Z"} +{"doc_count":1443,"split_key":24940,"timestamp":"2026-05-11T15:00:00.000Z"} +{"doc_count":1376,"split_key":16276,"timestamp":"2026-05-11T15:00:00.000Z"} +{"doc_count":1022,"split_key":212512,"timestamp":"2026-05-11T15:00:00.000Z"} +{"doc_count":2717,"split_key":16276,"timestamp":"2026-05-11T16:00:00.000Z"} +{"doc_count":2197,"split_key":14061,"timestamp":"2026-05-11T16:00:00.000Z"} +{"doc_count":1491,"split_key":24940,"timestamp":"2026-05-11T16:00:00.000Z"} +{"doc_count":1258,"split_key":51167,"timestamp":"2026-05-11T16:00:00.000Z"} +{"doc_count":1025,"split_key":212512,"timestamp":"2026-05-11T16:00:00.000Z"} +{"doc_count":9663,"split_key":209334,"timestamp":"2026-05-11T17:00:00.000Z"} +{"doc_count":4216,"split_key":16276,"timestamp":"2026-05-11T17:00:00.000Z"} +{"doc_count":1665,"split_key":14061,"timestamp":"2026-05-11T17:00:00.000Z"} +{"doc_count":1572,"split_key":24940,"timestamp":"2026-05-11T17:00:00.000Z"} +{"doc_count":1104,"split_key":212512,"timestamp":"2026-05-11T17:00:00.000Z"} +{"doc_count":7104,"split_key":206264,"timestamp":"2026-05-11T18:00:00.000Z"} +{"doc_count":1816,"split_key":14061,"timestamp":"2026-05-11T18:00:00.000Z"} +{"doc_count":1564,"split_key":16276,"timestamp":"2026-05-11T18:00:00.000Z"} +{"doc_count":1543,"split_key":209334,"timestamp":"2026-05-11T18:00:00.000Z"} +{"doc_count":1489,"split_key":24940,"timestamp":"2026-05-11T18:00:00.000Z"} +{"doc_count":18242,"split_key":209334,"timestamp":"2026-05-11T19:00:00.000Z"} +{"doc_count":2582,"split_key":211590,"timestamp":"2026-05-11T19:00:00.000Z"} +{"doc_count":2240,"split_key":14061,"timestamp":"2026-05-11T19:00:00.000Z"} +{"doc_count":1576,"split_key":37963,"timestamp":"2026-05-11T19:00:00.000Z"} +{"doc_count":1458,"split_key":24940,"timestamp":"2026-05-11T19:00:00.000Z"} +{"doc_count":31700,"split_key":209334,"timestamp":"2026-05-11T20:00:00.000Z"} +{"doc_count":2383,"split_key":14061,"timestamp":"2026-05-11T20:00:00.000Z"} +{"doc_count":1399,"split_key":37963,"timestamp":"2026-05-11T20:00:00.000Z"} +{"doc_count":1370,"split_key":16276,"timestamp":"2026-05-11T20:00:00.000Z"} +{"doc_count":933,"split_key":206264,"timestamp":"2026-05-11T20:00:00.000Z"} +{"doc_count":12604,"split_key":209334,"timestamp":"2026-05-11T21:00:00.000Z"} +{"doc_count":2951,"split_key":14061,"timestamp":"2026-05-11T21:00:00.000Z"} +{"doc_count":1361,"split_key":16276,"timestamp":"2026-05-11T21:00:00.000Z"} +{"doc_count":1336,"split_key":206264,"timestamp":"2026-05-11T21:00:00.000Z"} +{"doc_count":1168,"split_key":37963,"timestamp":"2026-05-11T21:00:00.000Z"} +{"doc_count":13687,"split_key":209334,"timestamp":"2026-05-11T22:00:00.000Z"} +{"doc_count":3129,"split_key":211590,"timestamp":"2026-05-11T22:00:00.000Z"} +{"doc_count":2902,"split_key":14061,"timestamp":"2026-05-11T22:00:00.000Z"} +{"doc_count":1856,"split_key":206264,"timestamp":"2026-05-11T22:00:00.000Z"} +{"doc_count":1367,"split_key":16276,"timestamp":"2026-05-11T22:00:00.000Z"} +{"doc_count":6906,"split_key":209334,"timestamp":"2026-05-11T23:00:00.000Z"} +{"doc_count":2888,"split_key":14061,"timestamp":"2026-05-11T23:00:00.000Z"} +{"doc_count":2128,"split_key":206264,"timestamp":"2026-05-11T23:00:00.000Z"} +{"doc_count":1369,"split_key":16276,"timestamp":"2026-05-11T23:00:00.000Z"} +{"doc_count":789,"split_key":201401,"timestamp":"2026-05-11T23:00:00.000Z"} +{"doc_count":12281,"split_key":209334,"timestamp":"2026-05-12T00:00:00.000Z"} +{"doc_count":2864,"split_key":14061,"timestamp":"2026-05-12T00:00:00.000Z"} +{"doc_count":2546,"split_key":206264,"timestamp":"2026-05-12T00:00:00.000Z"} +{"doc_count":1462,"split_key":398101,"timestamp":"2026-05-12T00:00:00.000Z"} +{"doc_count":1366,"split_key":16276,"timestamp":"2026-05-12T00:00:00.000Z"} +{"doc_count":18797,"split_key":209334,"timestamp":"2026-05-12T01:00:00.000Z"} +{"doc_count":3050,"split_key":211590,"timestamp":"2026-05-12T01:00:00.000Z"} +{"doc_count":2849,"split_key":14061,"timestamp":"2026-05-12T01:00:00.000Z"} +{"doc_count":2845,"split_key":206264,"timestamp":"2026-05-12T01:00:00.000Z"} +{"doc_count":1373,"split_key":16276,"timestamp":"2026-05-12T01:00:00.000Z"} +{"doc_count":15048,"split_key":209334,"timestamp":"2026-05-12T02:00:00.000Z"} +{"doc_count":3265,"split_key":206264,"timestamp":"2026-05-12T02:00:00.000Z"} +{"doc_count":2847,"split_key":14061,"timestamp":"2026-05-12T02:00:00.000Z"} +{"doc_count":1369,"split_key":16276,"timestamp":"2026-05-12T02:00:00.000Z"} +{"doc_count":816,"split_key":396982,"timestamp":"2026-05-12T02:00:00.000Z"} +{"doc_count":10016,"split_key":209334,"timestamp":"2026-05-12T03:00:00.000Z"} +{"doc_count":3672,"split_key":206264,"timestamp":"2026-05-12T03:00:00.000Z"} +{"doc_count":2921,"split_key":14061,"timestamp":"2026-05-12T03:00:00.000Z"} +{"doc_count":1371,"split_key":16276,"timestamp":"2026-05-12T03:00:00.000Z"} +{"doc_count":917,"split_key":16509,"timestamp":"2026-05-12T03:00:00.000Z"} +{"doc_count":9317,"split_key":209334,"timestamp":"2026-05-12T04:00:00.000Z"} +{"doc_count":6948,"split_key":211590,"timestamp":"2026-05-12T04:00:00.000Z"} +{"doc_count":3956,"split_key":206264,"timestamp":"2026-05-12T04:00:00.000Z"} +{"doc_count":2788,"split_key":14061,"timestamp":"2026-05-12T04:00:00.000Z"} +{"doc_count":1359,"split_key":16276,"timestamp":"2026-05-12T04:00:00.000Z"} +{"doc_count":11567,"split_key":209334,"timestamp":"2026-05-12T05:00:00.000Z"} +{"doc_count":8334,"split_key":211590,"timestamp":"2026-05-12T05:00:00.000Z"} +{"doc_count":4334,"split_key":206264,"timestamp":"2026-05-12T05:00:00.000Z"} +{"doc_count":3255,"split_key":14061,"timestamp":"2026-05-12T05:00:00.000Z"} +{"doc_count":1498,"split_key":16276,"timestamp":"2026-05-12T05:00:00.000Z"} +{"doc_count":8508,"split_key":211590,"timestamp":"2026-05-12T06:00:00.000Z"} +{"doc_count":3918,"split_key":206264,"timestamp":"2026-05-12T06:00:00.000Z"} +{"doc_count":3335,"split_key":14061,"timestamp":"2026-05-12T06:00:00.000Z"} +{"doc_count":1920,"split_key":31898,"timestamp":"2026-05-12T06:00:00.000Z"} +{"doc_count":1374,"split_key":16276,"timestamp":"2026-05-12T06:00:00.000Z"} +{"doc_count":3614,"split_key":206264,"timestamp":"2026-05-12T07:00:00.000Z"} +{"doc_count":3415,"split_key":14061,"timestamp":"2026-05-12T07:00:00.000Z"} +{"doc_count":1375,"split_key":16276,"timestamp":"2026-05-12T07:00:00.000Z"} +{"doc_count":832,"split_key":16509,"timestamp":"2026-05-12T07:00:00.000Z"} +{"doc_count":551,"split_key":211590,"timestamp":"2026-05-12T07:00:00.000Z"} +{"doc_count":3960,"split_key":206264,"timestamp":"2026-05-12T08:00:00.000Z"} +{"doc_count":3874,"split_key":211590,"timestamp":"2026-05-12T08:00:00.000Z"} +{"doc_count":3869,"split_key":14061,"timestamp":"2026-05-12T08:00:00.000Z"} +{"doc_count":1399,"split_key":16276,"timestamp":"2026-05-12T08:00:00.000Z"} +{"doc_count":1077,"split_key":16509,"timestamp":"2026-05-12T08:00:00.000Z"} +{"doc_count":8231,"split_key":211590,"timestamp":"2026-05-12T09:00:00.000Z"} +{"doc_count":4596,"split_key":14061,"timestamp":"2026-05-12T09:00:00.000Z"} +{"doc_count":4432,"split_key":206264,"timestamp":"2026-05-12T09:00:00.000Z"} +{"doc_count":1410,"split_key":16276,"timestamp":"2026-05-12T09:00:00.000Z"} +{"doc_count":1035,"split_key":16509,"timestamp":"2026-05-12T09:00:00.000Z"} +{"doc_count":10012,"split_key":209334,"timestamp":"2026-05-12T10:00:00.000Z"} +{"doc_count":6304,"split_key":211590,"timestamp":"2026-05-12T10:00:00.000Z"} +{"doc_count":5006,"split_key":14061,"timestamp":"2026-05-12T10:00:00.000Z"} +{"doc_count":4831,"split_key":206264,"timestamp":"2026-05-12T10:00:00.000Z"} +{"doc_count":1398,"split_key":16276,"timestamp":"2026-05-12T10:00:00.000Z"} +{"doc_count":16764,"split_key":209334,"timestamp":"2026-05-12T11:00:00.000Z"} +{"doc_count":6000,"split_key":211590,"timestamp":"2026-05-12T11:00:00.000Z"} +{"doc_count":5197,"split_key":206264,"timestamp":"2026-05-12T11:00:00.000Z"} +{"doc_count":5065,"split_key":14061,"timestamp":"2026-05-12T11:00:00.000Z"} +{"doc_count":1384,"split_key":16276,"timestamp":"2026-05-12T11:00:00.000Z"} +{"doc_count":25296,"split_key":209334,"timestamp":"2026-05-12T12:00:00.000Z"} +{"doc_count":5509,"split_key":206264,"timestamp":"2026-05-12T12:00:00.000Z"} +{"doc_count":4947,"split_key":14061,"timestamp":"2026-05-12T12:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-05-12T12:00:00.000Z"} +{"doc_count":1392,"split_key":16276,"timestamp":"2026-05-12T12:00:00.000Z"} +{"doc_count":8865,"split_key":211590,"timestamp":"2026-05-12T13:00:00.000Z"} +{"doc_count":6015,"split_key":206264,"timestamp":"2026-05-12T13:00:00.000Z"} +{"doc_count":5740,"split_key":209334,"timestamp":"2026-05-12T13:00:00.000Z"} +{"doc_count":4497,"split_key":14061,"timestamp":"2026-05-12T13:00:00.000Z"} +{"doc_count":1390,"split_key":16276,"timestamp":"2026-05-12T13:00:00.000Z"} +{"doc_count":8636,"split_key":209334,"timestamp":"2026-05-12T14:00:00.000Z"} +{"doc_count":6279,"split_key":206264,"timestamp":"2026-05-12T14:00:00.000Z"} +{"doc_count":3839,"split_key":14061,"timestamp":"2026-05-12T14:00:00.000Z"} +{"doc_count":2694,"split_key":211590,"timestamp":"2026-05-12T14:00:00.000Z"} +{"doc_count":1748,"split_key":152194,"timestamp":"2026-05-12T14:00:00.000Z"} +{"doc_count":20597,"split_key":209334,"timestamp":"2026-05-12T15:00:00.000Z"} +{"doc_count":6678,"split_key":206264,"timestamp":"2026-05-12T15:00:00.000Z"} +{"doc_count":4633,"split_key":211590,"timestamp":"2026-05-12T15:00:00.000Z"} +{"doc_count":3965,"split_key":14061,"timestamp":"2026-05-12T15:00:00.000Z"} +{"doc_count":1807,"split_key":152194,"timestamp":"2026-05-12T15:00:00.000Z"} +{"doc_count":7019,"split_key":206264,"timestamp":"2026-05-12T16:00:00.000Z"} +{"doc_count":6309,"split_key":209334,"timestamp":"2026-05-12T16:00:00.000Z"} +{"doc_count":3740,"split_key":14061,"timestamp":"2026-05-12T16:00:00.000Z"} +{"doc_count":1354,"split_key":16276,"timestamp":"2026-05-12T16:00:00.000Z"} +{"doc_count":643,"split_key":16509,"timestamp":"2026-05-12T16:00:00.000Z"} +{"doc_count":7558,"split_key":206264,"timestamp":"2026-05-12T17:00:00.000Z"} +{"doc_count":5998,"split_key":211590,"timestamp":"2026-05-12T17:00:00.000Z"} +{"doc_count":4301,"split_key":209334,"timestamp":"2026-05-12T17:00:00.000Z"} +{"doc_count":3091,"split_key":14061,"timestamp":"2026-05-12T17:00:00.000Z"} +{"doc_count":1331,"split_key":16276,"timestamp":"2026-05-12T17:00:00.000Z"} +{"doc_count":7846,"split_key":206264,"timestamp":"2026-05-12T18:00:00.000Z"} +{"doc_count":6465,"split_key":209334,"timestamp":"2026-05-12T18:00:00.000Z"} +{"doc_count":4003,"split_key":211590,"timestamp":"2026-05-12T18:00:00.000Z"} +{"doc_count":2349,"split_key":14061,"timestamp":"2026-05-12T18:00:00.000Z"} +{"doc_count":1327,"split_key":16276,"timestamp":"2026-05-12T18:00:00.000Z"} +{"doc_count":8350,"split_key":209334,"timestamp":"2026-05-12T19:00:00.000Z"} +{"doc_count":8156,"split_key":206264,"timestamp":"2026-05-12T19:00:00.000Z"} +{"doc_count":5998,"split_key":211590,"timestamp":"2026-05-12T19:00:00.000Z"} +{"doc_count":2198,"split_key":14061,"timestamp":"2026-05-12T19:00:00.000Z"} +{"doc_count":1866,"split_key":60404,"timestamp":"2026-05-12T19:00:00.000Z"} +{"doc_count":8620,"split_key":209334,"timestamp":"2026-05-12T20:00:00.000Z"} +{"doc_count":8409,"split_key":206264,"timestamp":"2026-05-12T20:00:00.000Z"} +{"doc_count":3947,"split_key":211590,"timestamp":"2026-05-12T20:00:00.000Z"} +{"doc_count":2069,"split_key":14061,"timestamp":"2026-05-12T20:00:00.000Z"} +{"doc_count":1343,"split_key":16276,"timestamp":"2026-05-12T20:00:00.000Z"} +{"doc_count":10677,"split_key":209334,"timestamp":"2026-05-12T21:00:00.000Z"} +{"doc_count":8548,"split_key":206264,"timestamp":"2026-05-12T21:00:00.000Z"} +{"doc_count":3388,"split_key":211590,"timestamp":"2026-05-12T21:00:00.000Z"} +{"doc_count":2776,"split_key":14061,"timestamp":"2026-05-12T21:00:00.000Z"} +{"doc_count":1342,"split_key":16276,"timestamp":"2026-05-12T21:00:00.000Z"} +{"doc_count":8799,"split_key":206264,"timestamp":"2026-05-12T22:00:00.000Z"} +{"doc_count":3351,"split_key":14061,"timestamp":"2026-05-12T22:00:00.000Z"} +{"doc_count":1471,"split_key":45102,"timestamp":"2026-05-12T22:00:00.000Z"} +{"doc_count":1340,"split_key":16276,"timestamp":"2026-05-12T22:00:00.000Z"} +{"doc_count":1212,"split_key":36666,"timestamp":"2026-05-12T22:00:00.000Z"} +{"doc_count":8920,"split_key":206264,"timestamp":"2026-05-12T23:00:00.000Z"} +{"doc_count":3209,"split_key":14061,"timestamp":"2026-05-12T23:00:00.000Z"} +{"doc_count":1597,"split_key":211590,"timestamp":"2026-05-12T23:00:00.000Z"} +{"doc_count":1083,"split_key":16276,"timestamp":"2026-05-12T23:00:00.000Z"} +{"doc_count":855,"split_key":6428,"timestamp":"2026-05-12T23:00:00.000Z"} +{"doc_count":10039,"split_key":211590,"timestamp":"2026-05-13T00:00:00.000Z"} +{"doc_count":9084,"split_key":206264,"timestamp":"2026-05-13T00:00:00.000Z"} +{"doc_count":3205,"split_key":14061,"timestamp":"2026-05-13T00:00:00.000Z"} +{"doc_count":822,"split_key":398101,"timestamp":"2026-05-13T00:00:00.000Z"} +{"doc_count":428,"split_key":141995,"timestamp":"2026-05-13T00:00:00.000Z"} +{"doc_count":9296,"split_key":206264,"timestamp":"2026-05-13T01:00:00.000Z"} +{"doc_count":4285,"split_key":45102,"timestamp":"2026-05-13T01:00:00.000Z"} +{"doc_count":3832,"split_key":14061,"timestamp":"2026-05-13T01:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-05-13T01:00:00.000Z"} +{"doc_count":751,"split_key":16509,"timestamp":"2026-05-13T01:00:00.000Z"} +{"doc_count":9608,"split_key":206264,"timestamp":"2026-05-13T02:00:00.000Z"} +{"doc_count":3973,"split_key":14061,"timestamp":"2026-05-13T02:00:00.000Z"} +{"doc_count":2132,"split_key":211590,"timestamp":"2026-05-13T02:00:00.000Z"} +{"doc_count":614,"split_key":396982,"timestamp":"2026-05-13T02:00:00.000Z"} +{"doc_count":597,"split_key":16509,"timestamp":"2026-05-13T02:00:00.000Z"} +{"doc_count":9777,"split_key":206264,"timestamp":"2026-05-13T03:00:00.000Z"} +{"doc_count":7638,"split_key":211590,"timestamp":"2026-05-13T03:00:00.000Z"} +{"doc_count":3921,"split_key":14061,"timestamp":"2026-05-13T03:00:00.000Z"} +{"doc_count":950,"split_key":16509,"timestamp":"2026-05-13T03:00:00.000Z"} +{"doc_count":895,"split_key":51396,"timestamp":"2026-05-13T03:00:00.000Z"} +{"doc_count":9978,"split_key":206264,"timestamp":"2026-05-13T04:00:00.000Z"} +{"doc_count":3875,"split_key":14061,"timestamp":"2026-05-13T04:00:00.000Z"} +{"doc_count":1437,"split_key":211590,"timestamp":"2026-05-13T04:00:00.000Z"} +{"doc_count":838,"split_key":16509,"timestamp":"2026-05-13T04:00:00.000Z"} +{"doc_count":483,"split_key":42682,"timestamp":"2026-05-13T04:00:00.000Z"} +{"doc_count":10185,"split_key":206264,"timestamp":"2026-05-13T05:00:00.000Z"} +{"doc_count":3997,"split_key":14061,"timestamp":"2026-05-13T05:00:00.000Z"} +{"doc_count":1101,"split_key":16509,"timestamp":"2026-05-13T05:00:00.000Z"} +{"doc_count":668,"split_key":396982,"timestamp":"2026-05-13T05:00:00.000Z"} +{"doc_count":455,"split_key":42682,"timestamp":"2026-05-13T05:00:00.000Z"} +{"doc_count":10488,"split_key":206264,"timestamp":"2026-05-13T06:00:00.000Z"} +{"doc_count":4458,"split_key":14061,"timestamp":"2026-05-13T06:00:00.000Z"} +{"doc_count":980,"split_key":16509,"timestamp":"2026-05-13T06:00:00.000Z"} +{"doc_count":571,"split_key":16276,"timestamp":"2026-05-13T06:00:00.000Z"} +{"doc_count":436,"split_key":396982,"timestamp":"2026-05-13T06:00:00.000Z"} +{"doc_count":10910,"split_key":206264,"timestamp":"2026-05-13T07:00:00.000Z"} +{"doc_count":3699,"split_key":14061,"timestamp":"2026-05-13T07:00:00.000Z"} +{"doc_count":785,"split_key":16509,"timestamp":"2026-05-13T07:00:00.000Z"} +{"doc_count":732,"split_key":204428,"timestamp":"2026-05-13T07:00:00.000Z"} +{"doc_count":715,"split_key":16276,"timestamp":"2026-05-13T07:00:00.000Z"} +{"doc_count":10921,"split_key":206264,"timestamp":"2026-05-13T08:00:00.000Z"} +{"doc_count":3657,"split_key":14061,"timestamp":"2026-05-13T08:00:00.000Z"} +{"doc_count":1255,"split_key":16509,"timestamp":"2026-05-13T08:00:00.000Z"} +{"doc_count":346,"split_key":16276,"timestamp":"2026-05-13T08:00:00.000Z"} +{"doc_count":305,"split_key":396982,"timestamp":"2026-05-13T08:00:00.000Z"} +{"doc_count":10822,"split_key":206264,"timestamp":"2026-05-13T09:00:00.000Z"} +{"doc_count":3626,"split_key":14061,"timestamp":"2026-05-13T09:00:00.000Z"} +{"doc_count":1579,"split_key":16509,"timestamp":"2026-05-13T09:00:00.000Z"} +{"doc_count":538,"split_key":37963,"timestamp":"2026-05-13T09:00:00.000Z"} +{"doc_count":528,"split_key":32475,"timestamp":"2026-05-13T09:00:00.000Z"} +{"doc_count":10968,"split_key":206264,"timestamp":"2026-05-13T10:00:00.000Z"} +{"doc_count":3682,"split_key":14061,"timestamp":"2026-05-13T10:00:00.000Z"} +{"doc_count":1164,"split_key":16509,"timestamp":"2026-05-13T10:00:00.000Z"} +{"doc_count":669,"split_key":37963,"timestamp":"2026-05-13T10:00:00.000Z"} +{"doc_count":321,"split_key":55960,"timestamp":"2026-05-13T10:00:00.000Z"} +{"doc_count":11044,"split_key":206264,"timestamp":"2026-05-13T11:00:00.000Z"} +{"doc_count":3516,"split_key":14061,"timestamp":"2026-05-13T11:00:00.000Z"} +{"doc_count":661,"split_key":51396,"timestamp":"2026-05-13T11:00:00.000Z"} +{"doc_count":625,"split_key":16509,"timestamp":"2026-05-13T11:00:00.000Z"} +{"doc_count":591,"split_key":37963,"timestamp":"2026-05-13T11:00:00.000Z"} +{"doc_count":11233,"split_key":206264,"timestamp":"2026-05-13T12:00:00.000Z"} +{"doc_count":3491,"split_key":14061,"timestamp":"2026-05-13T12:00:00.000Z"} +{"doc_count":711,"split_key":51396,"timestamp":"2026-05-13T12:00:00.000Z"} +{"doc_count":675,"split_key":16509,"timestamp":"2026-05-13T12:00:00.000Z"} +{"doc_count":661,"split_key":25369,"timestamp":"2026-05-13T12:00:00.000Z"} +{"doc_count":11057,"split_key":206264,"timestamp":"2026-05-13T13:00:00.000Z"} +{"doc_count":3522,"split_key":14061,"timestamp":"2026-05-13T13:00:00.000Z"} +{"doc_count":974,"split_key":16509,"timestamp":"2026-05-13T13:00:00.000Z"} +{"doc_count":661,"split_key":209334,"timestamp":"2026-05-13T13:00:00.000Z"} +{"doc_count":606,"split_key":25369,"timestamp":"2026-05-13T13:00:00.000Z"} +{"doc_count":11395,"split_key":206264,"timestamp":"2026-05-13T14:00:00.000Z"} +{"doc_count":4152,"split_key":14061,"timestamp":"2026-05-13T14:00:00.000Z"} +{"doc_count":2415,"split_key":209334,"timestamp":"2026-05-13T14:00:00.000Z"} +{"doc_count":692,"split_key":328539,"timestamp":"2026-05-13T14:00:00.000Z"} +{"doc_count":574,"split_key":16509,"timestamp":"2026-05-13T14:00:00.000Z"} +{"doc_count":11629,"split_key":206264,"timestamp":"2026-05-13T15:00:00.000Z"} +{"doc_count":4986,"split_key":209334,"timestamp":"2026-05-13T15:00:00.000Z"} +{"doc_count":4346,"split_key":14061,"timestamp":"2026-05-13T15:00:00.000Z"} +{"doc_count":1023,"split_key":138997,"timestamp":"2026-05-13T15:00:00.000Z"} +{"doc_count":728,"split_key":16509,"timestamp":"2026-05-13T15:00:00.000Z"} +{"doc_count":61021,"split_key":23470,"timestamp":"2026-05-13T16:00:00.000Z"} +{"doc_count":11995,"split_key":206264,"timestamp":"2026-05-13T16:00:00.000Z"} +{"doc_count":3571,"split_key":14061,"timestamp":"2026-05-13T16:00:00.000Z"} +{"doc_count":805,"split_key":16509,"timestamp":"2026-05-13T16:00:00.000Z"} +{"doc_count":618,"split_key":209334,"timestamp":"2026-05-13T16:00:00.000Z"} +{"doc_count":12839,"split_key":206264,"timestamp":"2026-05-13T17:00:00.000Z"} +{"doc_count":9635,"split_key":209334,"timestamp":"2026-05-13T17:00:00.000Z"} +{"doc_count":3588,"split_key":14061,"timestamp":"2026-05-13T17:00:00.000Z"} +{"doc_count":1099,"split_key":51396,"timestamp":"2026-05-13T17:00:00.000Z"} +{"doc_count":940,"split_key":16509,"timestamp":"2026-05-13T17:00:00.000Z"} +{"doc_count":12816,"split_key":206264,"timestamp":"2026-05-13T18:00:00.000Z"} +{"doc_count":3674,"split_key":14061,"timestamp":"2026-05-13T18:00:00.000Z"} +{"doc_count":1818,"split_key":209334,"timestamp":"2026-05-13T18:00:00.000Z"} +{"doc_count":1332,"split_key":16509,"timestamp":"2026-05-13T18:00:00.000Z"} +{"doc_count":609,"split_key":37963,"timestamp":"2026-05-13T18:00:00.000Z"} +{"doc_count":12255,"split_key":206264,"timestamp":"2026-05-13T19:00:00.000Z"} +{"doc_count":10778,"split_key":209334,"timestamp":"2026-05-13T19:00:00.000Z"} +{"doc_count":3458,"split_key":14061,"timestamp":"2026-05-13T19:00:00.000Z"} +{"doc_count":1659,"split_key":18501,"timestamp":"2026-05-13T19:00:00.000Z"} +{"doc_count":743,"split_key":16509,"timestamp":"2026-05-13T19:00:00.000Z"} +{"doc_count":17555,"split_key":209334,"timestamp":"2026-05-13T20:00:00.000Z"} +{"doc_count":12864,"split_key":206264,"timestamp":"2026-05-13T20:00:00.000Z"} +{"doc_count":3374,"split_key":14061,"timestamp":"2026-05-13T20:00:00.000Z"} +{"doc_count":2230,"split_key":18501,"timestamp":"2026-05-13T20:00:00.000Z"} +{"doc_count":802,"split_key":201401,"timestamp":"2026-05-13T20:00:00.000Z"} +{"doc_count":12717,"split_key":206264,"timestamp":"2026-05-13T21:00:00.000Z"} +{"doc_count":3275,"split_key":14061,"timestamp":"2026-05-13T21:00:00.000Z"} +{"doc_count":1050,"split_key":18501,"timestamp":"2026-05-13T21:00:00.000Z"} +{"doc_count":1031,"split_key":16509,"timestamp":"2026-05-13T21:00:00.000Z"} +{"doc_count":359,"split_key":396982,"timestamp":"2026-05-13T21:00:00.000Z"} +{"doc_count":13085,"split_key":206264,"timestamp":"2026-05-13T22:00:00.000Z"} +{"doc_count":3204,"split_key":14061,"timestamp":"2026-05-13T22:00:00.000Z"} +{"doc_count":872,"split_key":51396,"timestamp":"2026-05-13T22:00:00.000Z"} +{"doc_count":547,"split_key":16509,"timestamp":"2026-05-13T22:00:00.000Z"} +{"doc_count":246,"split_key":396982,"timestamp":"2026-05-13T22:00:00.000Z"} +{"doc_count":12953,"split_key":206264,"timestamp":"2026-05-13T23:00:00.000Z"} +{"doc_count":3138,"split_key":14061,"timestamp":"2026-05-13T23:00:00.000Z"} +{"doc_count":736,"split_key":16509,"timestamp":"2026-05-13T23:00:00.000Z"} +{"doc_count":510,"split_key":396982,"timestamp":"2026-05-13T23:00:00.000Z"} +{"doc_count":279,"split_key":135377,"timestamp":"2026-05-13T23:00:00.000Z"} +{"doc_count":13248,"split_key":206264,"timestamp":"2026-05-14T00:00:00.000Z"} +{"doc_count":3146,"split_key":14061,"timestamp":"2026-05-14T00:00:00.000Z"} +{"doc_count":700,"split_key":16509,"timestamp":"2026-05-14T00:00:00.000Z"} +{"doc_count":486,"split_key":396982,"timestamp":"2026-05-14T00:00:00.000Z"} +{"doc_count":446,"split_key":14618,"timestamp":"2026-05-14T00:00:00.000Z"} +{"doc_count":13362,"split_key":206264,"timestamp":"2026-05-14T01:00:00.000Z"} +{"doc_count":3155,"split_key":14061,"timestamp":"2026-05-14T01:00:00.000Z"} +{"doc_count":559,"split_key":16509,"timestamp":"2026-05-14T01:00:00.000Z"} +{"doc_count":535,"split_key":396982,"timestamp":"2026-05-14T01:00:00.000Z"} +{"doc_count":260,"split_key":135377,"timestamp":"2026-05-14T01:00:00.000Z"} +{"doc_count":13626,"split_key":206264,"timestamp":"2026-05-14T02:00:00.000Z"} +{"doc_count":3119,"split_key":14061,"timestamp":"2026-05-14T02:00:00.000Z"} +{"doc_count":610,"split_key":16509,"timestamp":"2026-05-14T02:00:00.000Z"} +{"doc_count":469,"split_key":396982,"timestamp":"2026-05-14T02:00:00.000Z"} +{"doc_count":271,"split_key":265463,"timestamp":"2026-05-14T02:00:00.000Z"} +{"doc_count":13627,"split_key":206264,"timestamp":"2026-05-14T03:00:00.000Z"} +{"doc_count":3002,"split_key":14061,"timestamp":"2026-05-14T03:00:00.000Z"} +{"doc_count":514,"split_key":396982,"timestamp":"2026-05-14T03:00:00.000Z"} +{"doc_count":432,"split_key":16509,"timestamp":"2026-05-14T03:00:00.000Z"} +{"doc_count":331,"split_key":53667,"timestamp":"2026-05-14T03:00:00.000Z"} +{"doc_count":14003,"split_key":206264,"timestamp":"2026-05-14T04:00:00.000Z"} +{"doc_count":4565,"split_key":62068,"timestamp":"2026-05-14T04:00:00.000Z"} +{"doc_count":3017,"split_key":14061,"timestamp":"2026-05-14T04:00:00.000Z"} +{"doc_count":1500,"split_key":398101,"timestamp":"2026-05-14T04:00:00.000Z"} +{"doc_count":657,"split_key":396982,"timestamp":"2026-05-14T04:00:00.000Z"} +{"doc_count":14245,"split_key":206264,"timestamp":"2026-05-14T05:00:00.000Z"} +{"doc_count":3938,"split_key":14061,"timestamp":"2026-05-14T05:00:00.000Z"} +{"doc_count":1106,"split_key":51396,"timestamp":"2026-05-14T05:00:00.000Z"} +{"doc_count":573,"split_key":396982,"timestamp":"2026-05-14T05:00:00.000Z"} +{"doc_count":525,"split_key":16509,"timestamp":"2026-05-14T05:00:00.000Z"} +{"doc_count":14505,"split_key":206264,"timestamp":"2026-05-14T06:00:00.000Z"} +{"doc_count":5048,"split_key":14061,"timestamp":"2026-05-14T06:00:00.000Z"} +{"doc_count":583,"split_key":396982,"timestamp":"2026-05-14T06:00:00.000Z"} +{"doc_count":480,"split_key":16509,"timestamp":"2026-05-14T06:00:00.000Z"} +{"doc_count":339,"split_key":138997,"timestamp":"2026-05-14T06:00:00.000Z"} +{"doc_count":14692,"split_key":206264,"timestamp":"2026-05-14T07:00:00.000Z"} +{"doc_count":4725,"split_key":14061,"timestamp":"2026-05-14T07:00:00.000Z"} +{"doc_count":588,"split_key":16509,"timestamp":"2026-05-14T07:00:00.000Z"} +{"doc_count":566,"split_key":396982,"timestamp":"2026-05-14T07:00:00.000Z"} +{"doc_count":264,"split_key":213412,"timestamp":"2026-05-14T07:00:00.000Z"} +{"doc_count":14883,"split_key":206264,"timestamp":"2026-05-14T08:00:00.000Z"} +{"doc_count":4124,"split_key":14061,"timestamp":"2026-05-14T08:00:00.000Z"} +{"doc_count":584,"split_key":16509,"timestamp":"2026-05-14T08:00:00.000Z"} +{"doc_count":457,"split_key":396982,"timestamp":"2026-05-14T08:00:00.000Z"} +{"doc_count":273,"split_key":53667,"timestamp":"2026-05-14T08:00:00.000Z"} +{"doc_count":14630,"split_key":206264,"timestamp":"2026-05-14T09:00:00.000Z"} +{"doc_count":7851,"split_key":209334,"timestamp":"2026-05-14T09:00:00.000Z"} +{"doc_count":3333,"split_key":14061,"timestamp":"2026-05-14T09:00:00.000Z"} +{"doc_count":536,"split_key":396982,"timestamp":"2026-05-14T09:00:00.000Z"} +{"doc_count":471,"split_key":16509,"timestamp":"2026-05-14T09:00:00.000Z"} +{"doc_count":24913,"split_key":209334,"timestamp":"2026-05-14T10:00:00.000Z"} +{"doc_count":14995,"split_key":206264,"timestamp":"2026-05-14T10:00:00.000Z"} +{"doc_count":2909,"split_key":14061,"timestamp":"2026-05-14T10:00:00.000Z"} +{"doc_count":752,"split_key":201401,"timestamp":"2026-05-14T10:00:00.000Z"} +{"doc_count":459,"split_key":51396,"timestamp":"2026-05-14T10:00:00.000Z"} +{"doc_count":21057,"split_key":209334,"timestamp":"2026-05-14T11:00:00.000Z"} +{"doc_count":15251,"split_key":206264,"timestamp":"2026-05-14T11:00:00.000Z"} +{"doc_count":2862,"split_key":14061,"timestamp":"2026-05-14T11:00:00.000Z"} +{"doc_count":1268,"split_key":25369,"timestamp":"2026-05-14T11:00:00.000Z"} +{"doc_count":754,"split_key":201401,"timestamp":"2026-05-14T11:00:00.000Z"} +{"doc_count":15446,"split_key":206264,"timestamp":"2026-05-14T12:00:00.000Z"} +{"doc_count":13912,"split_key":209334,"timestamp":"2026-05-14T12:00:00.000Z"} +{"doc_count":2842,"split_key":14061,"timestamp":"2026-05-14T12:00:00.000Z"} +{"doc_count":785,"split_key":49870,"timestamp":"2026-05-14T12:00:00.000Z"} +{"doc_count":543,"split_key":201401,"timestamp":"2026-05-14T12:00:00.000Z"} +{"doc_count":19441,"split_key":209334,"timestamp":"2026-05-14T13:00:00.000Z"} +{"doc_count":15637,"split_key":206264,"timestamp":"2026-05-14T13:00:00.000Z"} +{"doc_count":2935,"split_key":14061,"timestamp":"2026-05-14T13:00:00.000Z"} +{"doc_count":540,"split_key":396982,"timestamp":"2026-05-14T13:00:00.000Z"} +{"doc_count":537,"split_key":49870,"timestamp":"2026-05-14T13:00:00.000Z"} +{"doc_count":15738,"split_key":206264,"timestamp":"2026-05-14T14:00:00.000Z"} +{"doc_count":2945,"split_key":14061,"timestamp":"2026-05-14T14:00:00.000Z"} +{"doc_count":2495,"split_key":209334,"timestamp":"2026-05-14T14:00:00.000Z"} +{"doc_count":544,"split_key":49870,"timestamp":"2026-05-14T14:00:00.000Z"} +{"doc_count":533,"split_key":16509,"timestamp":"2026-05-14T14:00:00.000Z"} +{"doc_count":15839,"split_key":206264,"timestamp":"2026-05-14T15:00:00.000Z"} +{"doc_count":5398,"split_key":209334,"timestamp":"2026-05-14T15:00:00.000Z"} +{"doc_count":2824,"split_key":14061,"timestamp":"2026-05-14T15:00:00.000Z"} +{"doc_count":479,"split_key":51396,"timestamp":"2026-05-14T15:00:00.000Z"} +{"doc_count":322,"split_key":49870,"timestamp":"2026-05-14T15:00:00.000Z"} +{"doc_count":15931,"split_key":206264,"timestamp":"2026-05-14T16:00:00.000Z"} +{"doc_count":2943,"split_key":14061,"timestamp":"2026-05-14T16:00:00.000Z"} +{"doc_count":742,"split_key":398101,"timestamp":"2026-05-14T16:00:00.000Z"} +{"doc_count":628,"split_key":209334,"timestamp":"2026-05-14T16:00:00.000Z"} +{"doc_count":472,"split_key":16509,"timestamp":"2026-05-14T16:00:00.000Z"} +{"doc_count":18803,"split_key":206264,"timestamp":"2026-05-14T17:00:00.000Z"} +{"doc_count":8729,"split_key":209334,"timestamp":"2026-05-14T17:00:00.000Z"} +{"doc_count":2986,"split_key":14061,"timestamp":"2026-05-14T17:00:00.000Z"} +{"doc_count":855,"split_key":50360,"timestamp":"2026-05-14T17:00:00.000Z"} +{"doc_count":681,"split_key":47890,"timestamp":"2026-05-14T17:00:00.000Z"} +{"doc_count":20339,"split_key":206264,"timestamp":"2026-05-14T18:00:00.000Z"} +{"doc_count":4097,"split_key":14061,"timestamp":"2026-05-14T18:00:00.000Z"} +{"doc_count":2482,"split_key":209334,"timestamp":"2026-05-14T18:00:00.000Z"} +{"doc_count":1251,"split_key":50360,"timestamp":"2026-05-14T18:00:00.000Z"} +{"doc_count":1053,"split_key":396982,"timestamp":"2026-05-14T18:00:00.000Z"} +{"doc_count":20430,"split_key":206264,"timestamp":"2026-05-14T19:00:00.000Z"} +{"doc_count":14036,"split_key":209334,"timestamp":"2026-05-14T19:00:00.000Z"} +{"doc_count":8487,"split_key":14061,"timestamp":"2026-05-14T19:00:00.000Z"} +{"doc_count":1215,"split_key":50360,"timestamp":"2026-05-14T19:00:00.000Z"} +{"doc_count":1067,"split_key":47890,"timestamp":"2026-05-14T19:00:00.000Z"} +{"doc_count":21200,"split_key":206264,"timestamp":"2026-05-14T20:00:00.000Z"} +{"doc_count":14744,"split_key":209334,"timestamp":"2026-05-14T20:00:00.000Z"} +{"doc_count":8230,"split_key":14061,"timestamp":"2026-05-14T20:00:00.000Z"} +{"doc_count":961,"split_key":16509,"timestamp":"2026-05-14T20:00:00.000Z"} +{"doc_count":846,"split_key":24940,"timestamp":"2026-05-14T20:00:00.000Z"} +{"doc_count":21338,"split_key":206264,"timestamp":"2026-05-14T21:00:00.000Z"} +{"doc_count":6534,"split_key":14061,"timestamp":"2026-05-14T21:00:00.000Z"} +{"doc_count":2074,"split_key":16509,"timestamp":"2026-05-14T21:00:00.000Z"} +{"doc_count":856,"split_key":47890,"timestamp":"2026-05-14T21:00:00.000Z"} +{"doc_count":832,"split_key":24940,"timestamp":"2026-05-14T21:00:00.000Z"} +{"doc_count":21665,"split_key":206264,"timestamp":"2026-05-14T22:00:00.000Z"} +{"doc_count":7208,"split_key":14061,"timestamp":"2026-05-14T22:00:00.000Z"} +{"doc_count":1374,"split_key":396982,"timestamp":"2026-05-14T22:00:00.000Z"} +{"doc_count":1212,"split_key":50360,"timestamp":"2026-05-14T22:00:00.000Z"} +{"doc_count":1101,"split_key":47890,"timestamp":"2026-05-14T22:00:00.000Z"} +{"doc_count":21845,"split_key":206264,"timestamp":"2026-05-14T23:00:00.000Z"} +{"doc_count":7464,"split_key":14061,"timestamp":"2026-05-14T23:00:00.000Z"} +{"doc_count":1620,"split_key":16509,"timestamp":"2026-05-14T23:00:00.000Z"} +{"doc_count":1180,"split_key":50360,"timestamp":"2026-05-14T23:00:00.000Z"} +{"doc_count":988,"split_key":47890,"timestamp":"2026-05-14T23:00:00.000Z"} +{"doc_count":22133,"split_key":206264,"timestamp":"2026-05-15T00:00:00.000Z"} +{"doc_count":8021,"split_key":14061,"timestamp":"2026-05-15T00:00:00.000Z"} +{"doc_count":1664,"split_key":16509,"timestamp":"2026-05-15T00:00:00.000Z"} +{"doc_count":1250,"split_key":50360,"timestamp":"2026-05-15T00:00:00.000Z"} +{"doc_count":1166,"split_key":47890,"timestamp":"2026-05-15T00:00:00.000Z"} +{"doc_count":23149,"split_key":206264,"timestamp":"2026-05-15T01:00:00.000Z"} +{"doc_count":8044,"split_key":14061,"timestamp":"2026-05-15T01:00:00.000Z"} +{"doc_count":1243,"split_key":47890,"timestamp":"2026-05-15T01:00:00.000Z"} +{"doc_count":1213,"split_key":50360,"timestamp":"2026-05-15T01:00:00.000Z"} +{"doc_count":1150,"split_key":51396,"timestamp":"2026-05-15T01:00:00.000Z"} +{"doc_count":23040,"split_key":206264,"timestamp":"2026-05-15T02:00:00.000Z"} +{"doc_count":7421,"split_key":14061,"timestamp":"2026-05-15T02:00:00.000Z"} +{"doc_count":1198,"split_key":50360,"timestamp":"2026-05-15T02:00:00.000Z"} +{"doc_count":1125,"split_key":51396,"timestamp":"2026-05-15T02:00:00.000Z"} +{"doc_count":1110,"split_key":47890,"timestamp":"2026-05-15T02:00:00.000Z"} +{"doc_count":23257,"split_key":206264,"timestamp":"2026-05-15T03:00:00.000Z"} +{"doc_count":6925,"split_key":14061,"timestamp":"2026-05-15T03:00:00.000Z"} +{"doc_count":3102,"split_key":211590,"timestamp":"2026-05-15T03:00:00.000Z"} +{"doc_count":2432,"split_key":16509,"timestamp":"2026-05-15T03:00:00.000Z"} +{"doc_count":1244,"split_key":50360,"timestamp":"2026-05-15T03:00:00.000Z"} +{"doc_count":23614,"split_key":206264,"timestamp":"2026-05-15T04:00:00.000Z"} +{"doc_count":6722,"split_key":14061,"timestamp":"2026-05-15T04:00:00.000Z"} +{"doc_count":3005,"split_key":211590,"timestamp":"2026-05-15T04:00:00.000Z"} +{"doc_count":2206,"split_key":16509,"timestamp":"2026-05-15T04:00:00.000Z"} +{"doc_count":1282,"split_key":50360,"timestamp":"2026-05-15T04:00:00.000Z"} +{"doc_count":23710,"split_key":206264,"timestamp":"2026-05-15T05:00:00.000Z"} +{"doc_count":3934,"split_key":14061,"timestamp":"2026-05-15T05:00:00.000Z"} +{"doc_count":1854,"split_key":16509,"timestamp":"2026-05-15T05:00:00.000Z"} +{"doc_count":1355,"split_key":47890,"timestamp":"2026-05-15T05:00:00.000Z"} +{"doc_count":1240,"split_key":50360,"timestamp":"2026-05-15T05:00:00.000Z"} +{"doc_count":23913,"split_key":206264,"timestamp":"2026-05-15T06:00:00.000Z"} +{"doc_count":15173,"split_key":211590,"timestamp":"2026-05-15T06:00:00.000Z"} +{"doc_count":3132,"split_key":14061,"timestamp":"2026-05-15T06:00:00.000Z"} +{"doc_count":1816,"split_key":16509,"timestamp":"2026-05-15T06:00:00.000Z"} +{"doc_count":1336,"split_key":25369,"timestamp":"2026-05-15T06:00:00.000Z"} +{"doc_count":24119,"split_key":206264,"timestamp":"2026-05-15T07:00:00.000Z"} +{"doc_count":6129,"split_key":211590,"timestamp":"2026-05-15T07:00:00.000Z"} +{"doc_count":2958,"split_key":14061,"timestamp":"2026-05-15T07:00:00.000Z"} +{"doc_count":1697,"split_key":208137,"timestamp":"2026-05-15T07:00:00.000Z"} +{"doc_count":1510,"split_key":25369,"timestamp":"2026-05-15T07:00:00.000Z"} +{"doc_count":24319,"split_key":206264,"timestamp":"2026-05-15T08:00:00.000Z"} +{"doc_count":6102,"split_key":211590,"timestamp":"2026-05-15T08:00:00.000Z"} +{"doc_count":3166,"split_key":208137,"timestamp":"2026-05-15T08:00:00.000Z"} +{"doc_count":2858,"split_key":14061,"timestamp":"2026-05-15T08:00:00.000Z"} +{"doc_count":2457,"split_key":49870,"timestamp":"2026-05-15T08:00:00.000Z"} +{"doc_count":24528,"split_key":206264,"timestamp":"2026-05-15T09:00:00.000Z"} +{"doc_count":8707,"split_key":209334,"timestamp":"2026-05-15T09:00:00.000Z"} +{"doc_count":2922,"split_key":14061,"timestamp":"2026-05-15T09:00:00.000Z"} +{"doc_count":1682,"split_key":49870,"timestamp":"2026-05-15T09:00:00.000Z"} +{"doc_count":1640,"split_key":40065,"timestamp":"2026-05-15T09:00:00.000Z"} +{"doc_count":24696,"split_key":206264,"timestamp":"2026-05-15T10:00:00.000Z"} +{"doc_count":15021,"split_key":209334,"timestamp":"2026-05-15T10:00:00.000Z"} +{"doc_count":4069,"split_key":211590,"timestamp":"2026-05-15T10:00:00.000Z"} +{"doc_count":2930,"split_key":14061,"timestamp":"2026-05-15T10:00:00.000Z"} +{"doc_count":1523,"split_key":49870,"timestamp":"2026-05-15T10:00:00.000Z"} +{"doc_count":25324,"split_key":206264,"timestamp":"2026-05-15T11:00:00.000Z"} +{"doc_count":16879,"split_key":209334,"timestamp":"2026-05-15T11:00:00.000Z"} +{"doc_count":5827,"split_key":396982,"timestamp":"2026-05-15T11:00:00.000Z"} +{"doc_count":3040,"split_key":14061,"timestamp":"2026-05-15T11:00:00.000Z"} +{"doc_count":2889,"split_key":211590,"timestamp":"2026-05-15T11:00:00.000Z"} +{"doc_count":25405,"split_key":206264,"timestamp":"2026-05-15T12:00:00.000Z"} +{"doc_count":16832,"split_key":209334,"timestamp":"2026-05-15T12:00:00.000Z"} +{"doc_count":4215,"split_key":396982,"timestamp":"2026-05-15T12:00:00.000Z"} +{"doc_count":3993,"split_key":62068,"timestamp":"2026-05-15T12:00:00.000Z"} +{"doc_count":3130,"split_key":211590,"timestamp":"2026-05-15T12:00:00.000Z"} +{"doc_count":24857,"split_key":206264,"timestamp":"2026-05-15T13:00:00.000Z"} +{"doc_count":15045,"split_key":209334,"timestamp":"2026-05-15T13:00:00.000Z"} +{"doc_count":2889,"split_key":14061,"timestamp":"2026-05-15T13:00:00.000Z"} +{"doc_count":1204,"split_key":16509,"timestamp":"2026-05-15T13:00:00.000Z"} +{"doc_count":1106,"split_key":396982,"timestamp":"2026-05-15T13:00:00.000Z"} +{"doc_count":25403,"split_key":206264,"timestamp":"2026-05-15T14:00:00.000Z"} +{"doc_count":14638,"split_key":209334,"timestamp":"2026-05-15T14:00:00.000Z"} +{"doc_count":2987,"split_key":25369,"timestamp":"2026-05-15T14:00:00.000Z"} +{"doc_count":2917,"split_key":14061,"timestamp":"2026-05-15T14:00:00.000Z"} +{"doc_count":2738,"split_key":45090,"timestamp":"2026-05-15T14:00:00.000Z"} +{"doc_count":25767,"split_key":206264,"timestamp":"2026-05-15T15:00:00.000Z"} +{"doc_count":12038,"split_key":209334,"timestamp":"2026-05-15T15:00:00.000Z"} +{"doc_count":4240,"split_key":211590,"timestamp":"2026-05-15T15:00:00.000Z"} +{"doc_count":3741,"split_key":45090,"timestamp":"2026-05-15T15:00:00.000Z"} +{"doc_count":3433,"split_key":14061,"timestamp":"2026-05-15T15:00:00.000Z"} +{"doc_count":26168,"split_key":206264,"timestamp":"2026-05-15T16:00:00.000Z"} +{"doc_count":3002,"split_key":211590,"timestamp":"2026-05-15T16:00:00.000Z"} +{"doc_count":2990,"split_key":14061,"timestamp":"2026-05-15T16:00:00.000Z"} +{"doc_count":2083,"split_key":35320,"timestamp":"2026-05-15T16:00:00.000Z"} +{"doc_count":1785,"split_key":55229,"timestamp":"2026-05-15T16:00:00.000Z"} +{"doc_count":26547,"split_key":206264,"timestamp":"2026-05-15T17:00:00.000Z"} +{"doc_count":10306,"split_key":209334,"timestamp":"2026-05-15T17:00:00.000Z"} +{"doc_count":3781,"split_key":14061,"timestamp":"2026-05-15T17:00:00.000Z"} +{"doc_count":3375,"split_key":211590,"timestamp":"2026-05-15T17:00:00.000Z"} +{"doc_count":1457,"split_key":55229,"timestamp":"2026-05-15T17:00:00.000Z"} +{"doc_count":26682,"split_key":206264,"timestamp":"2026-05-15T18:00:00.000Z"} +{"doc_count":2741,"split_key":50926,"timestamp":"2026-05-15T18:00:00.000Z"} +{"doc_count":2529,"split_key":14061,"timestamp":"2026-05-15T18:00:00.000Z"} +{"doc_count":1705,"split_key":209334,"timestamp":"2026-05-15T18:00:00.000Z"} +{"doc_count":1179,"split_key":211590,"timestamp":"2026-05-15T18:00:00.000Z"} +{"doc_count":26830,"split_key":206264,"timestamp":"2026-05-15T19:00:00.000Z"} +{"doc_count":4348,"split_key":209334,"timestamp":"2026-05-15T19:00:00.000Z"} +{"doc_count":1759,"split_key":14061,"timestamp":"2026-05-15T19:00:00.000Z"} +{"doc_count":1459,"split_key":51396,"timestamp":"2026-05-15T19:00:00.000Z"} +{"doc_count":1104,"split_key":35320,"timestamp":"2026-05-15T19:00:00.000Z"} +{"doc_count":27200,"split_key":206264,"timestamp":"2026-05-15T20:00:00.000Z"} +{"doc_count":13209,"split_key":209334,"timestamp":"2026-05-15T20:00:00.000Z"} +{"doc_count":6801,"split_key":211590,"timestamp":"2026-05-15T20:00:00.000Z"} +{"doc_count":2185,"split_key":14061,"timestamp":"2026-05-15T20:00:00.000Z"} +{"doc_count":1107,"split_key":35320,"timestamp":"2026-05-15T20:00:00.000Z"} +{"doc_count":27442,"split_key":206264,"timestamp":"2026-05-15T21:00:00.000Z"} +{"doc_count":12140,"split_key":209334,"timestamp":"2026-05-15T21:00:00.000Z"} +{"doc_count":8169,"split_key":16509,"timestamp":"2026-05-15T21:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-05-15T21:00:00.000Z"} +{"doc_count":2145,"split_key":14061,"timestamp":"2026-05-15T21:00:00.000Z"} +{"doc_count":27616,"split_key":206264,"timestamp":"2026-05-15T22:00:00.000Z"} +{"doc_count":7507,"split_key":16509,"timestamp":"2026-05-15T22:00:00.000Z"} +{"doc_count":3083,"split_key":14061,"timestamp":"2026-05-15T22:00:00.000Z"} +{"doc_count":1288,"split_key":16276,"timestamp":"2026-05-15T22:00:00.000Z"} +{"doc_count":1171,"split_key":211590,"timestamp":"2026-05-15T22:00:00.000Z"} +{"doc_count":27946,"split_key":206264,"timestamp":"2026-05-15T23:00:00.000Z"} +{"doc_count":7598,"split_key":16509,"timestamp":"2026-05-15T23:00:00.000Z"} +{"doc_count":4390,"split_key":211590,"timestamp":"2026-05-15T23:00:00.000Z"} +{"doc_count":3041,"split_key":14061,"timestamp":"2026-05-15T23:00:00.000Z"} +{"doc_count":990,"split_key":24940,"timestamp":"2026-05-15T23:00:00.000Z"} +{"doc_count":28205,"split_key":206264,"timestamp":"2026-05-16T00:00:00.000Z"} +{"doc_count":18495,"split_key":14061,"timestamp":"2026-05-16T00:00:00.000Z"} +{"doc_count":7597,"split_key":16509,"timestamp":"2026-05-16T00:00:00.000Z"} +{"doc_count":5979,"split_key":211590,"timestamp":"2026-05-16T00:00:00.000Z"} +{"doc_count":1055,"split_key":24940,"timestamp":"2026-05-16T00:00:00.000Z"} +{"doc_count":28434,"split_key":206264,"timestamp":"2026-05-16T01:00:00.000Z"} +{"doc_count":9486,"split_key":14061,"timestamp":"2026-05-16T01:00:00.000Z"} +{"doc_count":7334,"split_key":16509,"timestamp":"2026-05-16T01:00:00.000Z"} +{"doc_count":3436,"split_key":211590,"timestamp":"2026-05-16T01:00:00.000Z"} +{"doc_count":965,"split_key":24940,"timestamp":"2026-05-16T01:00:00.000Z"} +{"doc_count":28640,"split_key":206264,"timestamp":"2026-05-16T02:00:00.000Z"} +{"doc_count":7150,"split_key":211590,"timestamp":"2026-05-16T02:00:00.000Z"} +{"doc_count":6956,"split_key":16509,"timestamp":"2026-05-16T02:00:00.000Z"} +{"doc_count":3113,"split_key":14061,"timestamp":"2026-05-16T02:00:00.000Z"} +{"doc_count":1195,"split_key":396982,"timestamp":"2026-05-16T02:00:00.000Z"} +{"doc_count":28732,"split_key":206264,"timestamp":"2026-05-16T03:00:00.000Z"} +{"doc_count":5123,"split_key":16509,"timestamp":"2026-05-16T03:00:00.000Z"} +{"doc_count":3083,"split_key":211590,"timestamp":"2026-05-16T03:00:00.000Z"} +{"doc_count":3049,"split_key":14061,"timestamp":"2026-05-16T03:00:00.000Z"} +{"doc_count":2001,"split_key":396982,"timestamp":"2026-05-16T03:00:00.000Z"} +{"doc_count":28430,"split_key":206264,"timestamp":"2026-05-16T04:00:00.000Z"} +{"doc_count":3156,"split_key":14061,"timestamp":"2026-05-16T04:00:00.000Z"} +{"doc_count":1824,"split_key":396982,"timestamp":"2026-05-16T04:00:00.000Z"} +{"doc_count":1452,"split_key":32181,"timestamp":"2026-05-16T04:00:00.000Z"} +{"doc_count":1069,"split_key":24940,"timestamp":"2026-05-16T04:00:00.000Z"} +{"doc_count":28597,"split_key":206264,"timestamp":"2026-05-16T05:00:00.000Z"} +{"doc_count":5998,"split_key":211590,"timestamp":"2026-05-16T05:00:00.000Z"} +{"doc_count":2937,"split_key":14061,"timestamp":"2026-05-16T05:00:00.000Z"} +{"doc_count":1656,"split_key":396982,"timestamp":"2026-05-16T05:00:00.000Z"} +{"doc_count":1035,"split_key":24940,"timestamp":"2026-05-16T05:00:00.000Z"} +{"doc_count":28712,"split_key":206264,"timestamp":"2026-05-16T06:00:00.000Z"} +{"doc_count":6108,"split_key":211590,"timestamp":"2026-05-16T06:00:00.000Z"} +{"doc_count":3023,"split_key":14061,"timestamp":"2026-05-16T06:00:00.000Z"} +{"doc_count":1709,"split_key":51396,"timestamp":"2026-05-16T06:00:00.000Z"} +{"doc_count":1339,"split_key":396982,"timestamp":"2026-05-16T06:00:00.000Z"} +{"doc_count":28843,"split_key":206264,"timestamp":"2026-05-16T07:00:00.000Z"} +{"doc_count":4747,"split_key":211590,"timestamp":"2026-05-16T07:00:00.000Z"} +{"doc_count":3030,"split_key":14061,"timestamp":"2026-05-16T07:00:00.000Z"} +{"doc_count":1545,"split_key":51396,"timestamp":"2026-05-16T07:00:00.000Z"} +{"doc_count":1140,"split_key":396982,"timestamp":"2026-05-16T07:00:00.000Z"} +{"doc_count":29405,"split_key":206264,"timestamp":"2026-05-16T08:00:00.000Z"} +{"doc_count":6054,"split_key":16509,"timestamp":"2026-05-16T08:00:00.000Z"} +{"doc_count":5708,"split_key":211590,"timestamp":"2026-05-16T08:00:00.000Z"} +{"doc_count":2988,"split_key":14061,"timestamp":"2026-05-16T08:00:00.000Z"} +{"doc_count":1036,"split_key":24940,"timestamp":"2026-05-16T08:00:00.000Z"} +{"doc_count":29861,"split_key":206264,"timestamp":"2026-05-16T09:00:00.000Z"} +{"doc_count":7206,"split_key":211590,"timestamp":"2026-05-16T09:00:00.000Z"} +{"doc_count":4346,"split_key":38142,"timestamp":"2026-05-16T09:00:00.000Z"} +{"doc_count":4028,"split_key":209334,"timestamp":"2026-05-16T09:00:00.000Z"} +{"doc_count":3036,"split_key":14061,"timestamp":"2026-05-16T09:00:00.000Z"} +{"doc_count":30337,"split_key":206264,"timestamp":"2026-05-16T10:00:00.000Z"} +{"doc_count":19330,"split_key":209334,"timestamp":"2026-05-16T10:00:00.000Z"} +{"doc_count":2912,"split_key":14061,"timestamp":"2026-05-16T10:00:00.000Z"} +{"doc_count":2414,"split_key":38142,"timestamp":"2026-05-16T10:00:00.000Z"} +{"doc_count":985,"split_key":24940,"timestamp":"2026-05-16T10:00:00.000Z"} +{"doc_count":30542,"split_key":206264,"timestamp":"2026-05-16T11:00:00.000Z"} +{"doc_count":16227,"split_key":209334,"timestamp":"2026-05-16T11:00:00.000Z"} +{"doc_count":5010,"split_key":211590,"timestamp":"2026-05-16T11:00:00.000Z"} +{"doc_count":2911,"split_key":14061,"timestamp":"2026-05-16T11:00:00.000Z"} +{"doc_count":1102,"split_key":141995,"timestamp":"2026-05-16T11:00:00.000Z"} +{"doc_count":30766,"split_key":206264,"timestamp":"2026-05-16T12:00:00.000Z"} +{"doc_count":24961,"split_key":209334,"timestamp":"2026-05-16T12:00:00.000Z"} +{"doc_count":3014,"split_key":14061,"timestamp":"2026-05-16T12:00:00.000Z"} +{"doc_count":1674,"split_key":51396,"timestamp":"2026-05-16T12:00:00.000Z"} +{"doc_count":1018,"split_key":24940,"timestamp":"2026-05-16T12:00:00.000Z"} +{"doc_count":31339,"split_key":206264,"timestamp":"2026-05-16T13:00:00.000Z"} +{"doc_count":17538,"split_key":209334,"timestamp":"2026-05-16T13:00:00.000Z"} +{"doc_count":2967,"split_key":14061,"timestamp":"2026-05-16T13:00:00.000Z"} +{"doc_count":2741,"split_key":50360,"timestamp":"2026-05-16T13:00:00.000Z"} +{"doc_count":1341,"split_key":51396,"timestamp":"2026-05-16T13:00:00.000Z"} +{"doc_count":31847,"split_key":206264,"timestamp":"2026-05-16T14:00:00.000Z"} +{"doc_count":11694,"split_key":209334,"timestamp":"2026-05-16T14:00:00.000Z"} +{"doc_count":3016,"split_key":14061,"timestamp":"2026-05-16T14:00:00.000Z"} +{"doc_count":1105,"split_key":51396,"timestamp":"2026-05-16T14:00:00.000Z"} +{"doc_count":1046,"split_key":24940,"timestamp":"2026-05-16T14:00:00.000Z"} +{"doc_count":32465,"split_key":206264,"timestamp":"2026-05-16T15:00:00.000Z"} +{"doc_count":7634,"split_key":209334,"timestamp":"2026-05-16T15:00:00.000Z"} +{"doc_count":3226,"split_key":14061,"timestamp":"2026-05-16T15:00:00.000Z"} +{"doc_count":1105,"split_key":24961,"timestamp":"2026-05-16T15:00:00.000Z"} +{"doc_count":1092,"split_key":24940,"timestamp":"2026-05-16T15:00:00.000Z"} +{"doc_count":33039,"split_key":206264,"timestamp":"2026-05-16T16:00:00.000Z"} +{"doc_count":8091,"split_key":50360,"timestamp":"2026-05-16T16:00:00.000Z"} +{"doc_count":3357,"split_key":14061,"timestamp":"2026-05-16T16:00:00.000Z"} +{"doc_count":2157,"split_key":16509,"timestamp":"2026-05-16T16:00:00.000Z"} +{"doc_count":1334,"split_key":24961,"timestamp":"2026-05-16T16:00:00.000Z"} +{"doc_count":33769,"split_key":206264,"timestamp":"2026-05-16T17:00:00.000Z"} +{"doc_count":23944,"split_key":63949,"timestamp":"2026-05-16T17:00:00.000Z"} +{"doc_count":8272,"split_key":209334,"timestamp":"2026-05-16T17:00:00.000Z"} +{"doc_count":3388,"split_key":14061,"timestamp":"2026-05-16T17:00:00.000Z"} +{"doc_count":2148,"split_key":16509,"timestamp":"2026-05-16T17:00:00.000Z"} +{"doc_count":35507,"split_key":206264,"timestamp":"2026-05-16T18:00:00.000Z"} +{"doc_count":6491,"split_key":63949,"timestamp":"2026-05-16T18:00:00.000Z"} +{"doc_count":3950,"split_key":209334,"timestamp":"2026-05-16T18:00:00.000Z"} +{"doc_count":3687,"split_key":14061,"timestamp":"2026-05-16T18:00:00.000Z"} +{"doc_count":1367,"split_key":24961,"timestamp":"2026-05-16T18:00:00.000Z"} +{"doc_count":35006,"split_key":206264,"timestamp":"2026-05-16T19:00:00.000Z"} +{"doc_count":12512,"split_key":209334,"timestamp":"2026-05-16T19:00:00.000Z"} +{"doc_count":4432,"split_key":63949,"timestamp":"2026-05-16T19:00:00.000Z"} +{"doc_count":3549,"split_key":14061,"timestamp":"2026-05-16T19:00:00.000Z"} +{"doc_count":2802,"split_key":16509,"timestamp":"2026-05-16T19:00:00.000Z"} +{"doc_count":35607,"split_key":206264,"timestamp":"2026-05-16T20:00:00.000Z"} +{"doc_count":16030,"split_key":209334,"timestamp":"2026-05-16T20:00:00.000Z"} +{"doc_count":4515,"split_key":63949,"timestamp":"2026-05-16T20:00:00.000Z"} +{"doc_count":3833,"split_key":14061,"timestamp":"2026-05-16T20:00:00.000Z"} +{"doc_count":3276,"split_key":3257,"timestamp":"2026-05-16T20:00:00.000Z"} +{"doc_count":35977,"split_key":206264,"timestamp":"2026-05-16T21:00:00.000Z"} +{"doc_count":3357,"split_key":14061,"timestamp":"2026-05-16T21:00:00.000Z"} +{"doc_count":3101,"split_key":16509,"timestamp":"2026-05-16T21:00:00.000Z"} +{"doc_count":2381,"split_key":3257,"timestamp":"2026-05-16T21:00:00.000Z"} +{"doc_count":1923,"split_key":209334,"timestamp":"2026-05-16T21:00:00.000Z"} +{"doc_count":36493,"split_key":206264,"timestamp":"2026-05-16T22:00:00.000Z"} +{"doc_count":4019,"split_key":50360,"timestamp":"2026-05-16T22:00:00.000Z"} +{"doc_count":3332,"split_key":14061,"timestamp":"2026-05-16T22:00:00.000Z"} +{"doc_count":2150,"split_key":37963,"timestamp":"2026-05-16T22:00:00.000Z"} +{"doc_count":1177,"split_key":24961,"timestamp":"2026-05-16T22:00:00.000Z"} +{"doc_count":36673,"split_key":206264,"timestamp":"2026-05-16T23:00:00.000Z"} +{"doc_count":6166,"split_key":50360,"timestamp":"2026-05-16T23:00:00.000Z"} +{"doc_count":3249,"split_key":14061,"timestamp":"2026-05-16T23:00:00.000Z"} +{"doc_count":2300,"split_key":37963,"timestamp":"2026-05-16T23:00:00.000Z"} +{"doc_count":1023,"split_key":24940,"timestamp":"2026-05-16T23:00:00.000Z"} +{"doc_count":38049,"split_key":206264,"timestamp":"2026-05-17T00:00:00.000Z"} +{"doc_count":3142,"split_key":14061,"timestamp":"2026-05-17T00:00:00.000Z"} +{"doc_count":2115,"split_key":16509,"timestamp":"2026-05-17T00:00:00.000Z"} +{"doc_count":1214,"split_key":24961,"timestamp":"2026-05-17T00:00:00.000Z"} +{"doc_count":996,"split_key":24940,"timestamp":"2026-05-17T00:00:00.000Z"} +{"doc_count":38355,"split_key":206264,"timestamp":"2026-05-17T01:00:00.000Z"} +{"doc_count":9436,"split_key":50360,"timestamp":"2026-05-17T01:00:00.000Z"} +{"doc_count":2988,"split_key":14061,"timestamp":"2026-05-17T01:00:00.000Z"} +{"doc_count":1818,"split_key":16509,"timestamp":"2026-05-17T01:00:00.000Z"} +{"doc_count":1411,"split_key":396982,"timestamp":"2026-05-17T01:00:00.000Z"} +{"doc_count":38614,"split_key":206264,"timestamp":"2026-05-17T02:00:00.000Z"} +{"doc_count":10733,"split_key":50360,"timestamp":"2026-05-17T02:00:00.000Z"} +{"doc_count":3340,"split_key":14061,"timestamp":"2026-05-17T02:00:00.000Z"} +{"doc_count":1140,"split_key":213373,"timestamp":"2026-05-17T02:00:00.000Z"} +{"doc_count":1108,"split_key":396982,"timestamp":"2026-05-17T02:00:00.000Z"} +{"doc_count":39504,"split_key":206264,"timestamp":"2026-05-17T03:00:00.000Z"} +{"doc_count":2878,"split_key":14061,"timestamp":"2026-05-17T03:00:00.000Z"} +{"doc_count":1121,"split_key":24940,"timestamp":"2026-05-17T03:00:00.000Z"} +{"doc_count":1115,"split_key":213373,"timestamp":"2026-05-17T03:00:00.000Z"} +{"doc_count":711,"split_key":328854,"timestamp":"2026-05-17T03:00:00.000Z"} +{"doc_count":40196,"split_key":206264,"timestamp":"2026-05-17T04:00:00.000Z"} +{"doc_count":3046,"split_key":14061,"timestamp":"2026-05-17T04:00:00.000Z"} +{"doc_count":1119,"split_key":24940,"timestamp":"2026-05-17T04:00:00.000Z"} +{"doc_count":842,"split_key":47890,"timestamp":"2026-05-17T04:00:00.000Z"} +{"doc_count":791,"split_key":396982,"timestamp":"2026-05-17T04:00:00.000Z"} +{"doc_count":41074,"split_key":206264,"timestamp":"2026-05-17T05:00:00.000Z"} +{"doc_count":3060,"split_key":14061,"timestamp":"2026-05-17T05:00:00.000Z"} +{"doc_count":1124,"split_key":24940,"timestamp":"2026-05-17T05:00:00.000Z"} +{"doc_count":796,"split_key":396982,"timestamp":"2026-05-17T05:00:00.000Z"} +{"doc_count":794,"split_key":47890,"timestamp":"2026-05-17T05:00:00.000Z"} +{"doc_count":41838,"split_key":206264,"timestamp":"2026-05-17T06:00:00.000Z"} +{"doc_count":3026,"split_key":14061,"timestamp":"2026-05-17T06:00:00.000Z"} +{"doc_count":1119,"split_key":24940,"timestamp":"2026-05-17T06:00:00.000Z"} +{"doc_count":912,"split_key":396982,"timestamp":"2026-05-17T06:00:00.000Z"} +{"doc_count":871,"split_key":51396,"timestamp":"2026-05-17T06:00:00.000Z"} +{"doc_count":41927,"split_key":206264,"timestamp":"2026-05-17T07:00:00.000Z"} +{"doc_count":2968,"split_key":14061,"timestamp":"2026-05-17T07:00:00.000Z"} +{"doc_count":1074,"split_key":24940,"timestamp":"2026-05-17T07:00:00.000Z"} +{"doc_count":838,"split_key":47890,"timestamp":"2026-05-17T07:00:00.000Z"} +{"doc_count":665,"split_key":396982,"timestamp":"2026-05-17T07:00:00.000Z"} +{"doc_count":42151,"split_key":206264,"timestamp":"2026-05-17T08:00:00.000Z"} +{"doc_count":3099,"split_key":14061,"timestamp":"2026-05-17T08:00:00.000Z"} +{"doc_count":1194,"split_key":24940,"timestamp":"2026-05-17T08:00:00.000Z"} +{"doc_count":976,"split_key":51396,"timestamp":"2026-05-17T08:00:00.000Z"} +{"doc_count":832,"split_key":47890,"timestamp":"2026-05-17T08:00:00.000Z"} +{"doc_count":42344,"split_key":206264,"timestamp":"2026-05-17T09:00:00.000Z"} +{"doc_count":5535,"split_key":209334,"timestamp":"2026-05-17T09:00:00.000Z"} +{"doc_count":3627,"split_key":14061,"timestamp":"2026-05-17T09:00:00.000Z"} +{"doc_count":1174,"split_key":24940,"timestamp":"2026-05-17T09:00:00.000Z"} +{"doc_count":774,"split_key":16509,"timestamp":"2026-05-17T09:00:00.000Z"} +{"doc_count":42774,"split_key":206264,"timestamp":"2026-05-17T10:00:00.000Z"} +{"doc_count":16582,"split_key":209334,"timestamp":"2026-05-17T10:00:00.000Z"} +{"doc_count":3782,"split_key":14061,"timestamp":"2026-05-17T10:00:00.000Z"} +{"doc_count":1105,"split_key":24940,"timestamp":"2026-05-17T10:00:00.000Z"} +{"doc_count":903,"split_key":201401,"timestamp":"2026-05-17T10:00:00.000Z"} +{"doc_count":43079,"split_key":206264,"timestamp":"2026-05-17T11:00:00.000Z"} +{"doc_count":25310,"split_key":209334,"timestamp":"2026-05-17T11:00:00.000Z"} +{"doc_count":3247,"split_key":14061,"timestamp":"2026-05-17T11:00:00.000Z"} +{"doc_count":1168,"split_key":37963,"timestamp":"2026-05-17T11:00:00.000Z"} +{"doc_count":1141,"split_key":24940,"timestamp":"2026-05-17T11:00:00.000Z"} +{"doc_count":43422,"split_key":206264,"timestamp":"2026-05-17T12:00:00.000Z"} +{"doc_count":25142,"split_key":209334,"timestamp":"2026-05-17T12:00:00.000Z"} +{"doc_count":3027,"split_key":14061,"timestamp":"2026-05-17T12:00:00.000Z"} +{"doc_count":1112,"split_key":24940,"timestamp":"2026-05-17T12:00:00.000Z"} +{"doc_count":1015,"split_key":201401,"timestamp":"2026-05-17T12:00:00.000Z"} +{"doc_count":43584,"split_key":206264,"timestamp":"2026-05-17T13:00:00.000Z"} +{"doc_count":15306,"split_key":209334,"timestamp":"2026-05-17T13:00:00.000Z"} +{"doc_count":2986,"split_key":14061,"timestamp":"2026-05-17T13:00:00.000Z"} +{"doc_count":1258,"split_key":51396,"timestamp":"2026-05-17T13:00:00.000Z"} +{"doc_count":1182,"split_key":24940,"timestamp":"2026-05-17T13:00:00.000Z"} +{"doc_count":43810,"split_key":206264,"timestamp":"2026-05-17T14:00:00.000Z"} +{"doc_count":3235,"split_key":209334,"timestamp":"2026-05-17T14:00:00.000Z"} +{"doc_count":3193,"split_key":14061,"timestamp":"2026-05-17T14:00:00.000Z"} +{"doc_count":1141,"split_key":398101,"timestamp":"2026-05-17T14:00:00.000Z"} +{"doc_count":1080,"split_key":24940,"timestamp":"2026-05-17T14:00:00.000Z"} +{"doc_count":44115,"split_key":206264,"timestamp":"2026-05-17T15:00:00.000Z"} +{"doc_count":4240,"split_key":209334,"timestamp":"2026-05-17T15:00:00.000Z"} +{"doc_count":3133,"split_key":14061,"timestamp":"2026-05-17T15:00:00.000Z"} +{"doc_count":2302,"split_key":16276,"timestamp":"2026-05-17T15:00:00.000Z"} +{"doc_count":1080,"split_key":24940,"timestamp":"2026-05-17T15:00:00.000Z"} +{"doc_count":44443,"split_key":206264,"timestamp":"2026-05-17T16:00:00.000Z"} +{"doc_count":2912,"split_key":14061,"timestamp":"2026-05-17T16:00:00.000Z"} +{"doc_count":1782,"split_key":209334,"timestamp":"2026-05-17T16:00:00.000Z"} +{"doc_count":1696,"split_key":16276,"timestamp":"2026-05-17T16:00:00.000Z"} +{"doc_count":1363,"split_key":24940,"timestamp":"2026-05-17T16:00:00.000Z"} +{"doc_count":44474,"split_key":206264,"timestamp":"2026-05-17T17:00:00.000Z"} +{"doc_count":8204,"split_key":209334,"timestamp":"2026-05-17T17:00:00.000Z"} +{"doc_count":2196,"split_key":16509,"timestamp":"2026-05-17T17:00:00.000Z"} +{"doc_count":2104,"split_key":14061,"timestamp":"2026-05-17T17:00:00.000Z"} +{"doc_count":1248,"split_key":24940,"timestamp":"2026-05-17T17:00:00.000Z"} +{"doc_count":44403,"split_key":206264,"timestamp":"2026-05-17T18:00:00.000Z"} +{"doc_count":2990,"split_key":209334,"timestamp":"2026-05-17T18:00:00.000Z"} +{"doc_count":2375,"split_key":16509,"timestamp":"2026-05-17T18:00:00.000Z"} +{"doc_count":2119,"split_key":14061,"timestamp":"2026-05-17T18:00:00.000Z"} +{"doc_count":1156,"split_key":24940,"timestamp":"2026-05-17T18:00:00.000Z"} +{"doc_count":43434,"split_key":206264,"timestamp":"2026-05-17T19:00:00.000Z"} +{"doc_count":5494,"split_key":209334,"timestamp":"2026-05-17T19:00:00.000Z"} +{"doc_count":2340,"split_key":14061,"timestamp":"2026-05-17T19:00:00.000Z"} +{"doc_count":1199,"split_key":24940,"timestamp":"2026-05-17T19:00:00.000Z"} +{"doc_count":928,"split_key":47890,"timestamp":"2026-05-17T19:00:00.000Z"} +{"doc_count":44462,"split_key":206264,"timestamp":"2026-05-17T20:00:00.000Z"} +{"doc_count":22042,"split_key":209334,"timestamp":"2026-05-17T20:00:00.000Z"} +{"doc_count":2681,"split_key":14061,"timestamp":"2026-05-17T20:00:00.000Z"} +{"doc_count":1753,"split_key":25369,"timestamp":"2026-05-17T20:00:00.000Z"} +{"doc_count":1169,"split_key":24940,"timestamp":"2026-05-17T20:00:00.000Z"} +{"doc_count":45351,"split_key":206264,"timestamp":"2026-05-17T21:00:00.000Z"} +{"doc_count":2201,"split_key":14061,"timestamp":"2026-05-17T21:00:00.000Z"} +{"doc_count":1318,"split_key":25369,"timestamp":"2026-05-17T21:00:00.000Z"} +{"doc_count":1214,"split_key":24940,"timestamp":"2026-05-17T21:00:00.000Z"} +{"doc_count":798,"split_key":47890,"timestamp":"2026-05-17T21:00:00.000Z"} +{"doc_count":64523,"split_key":23470,"timestamp":"2026-05-17T22:00:00.000Z"} +{"doc_count":44780,"split_key":206264,"timestamp":"2026-05-17T22:00:00.000Z"} +{"doc_count":2089,"split_key":14061,"timestamp":"2026-05-17T22:00:00.000Z"} +{"doc_count":1243,"split_key":24940,"timestamp":"2026-05-17T22:00:00.000Z"} +{"doc_count":1111,"split_key":398101,"timestamp":"2026-05-17T22:00:00.000Z"} +{"doc_count":45924,"split_key":206264,"timestamp":"2026-05-17T23:00:00.000Z"} +{"doc_count":10073,"split_key":50360,"timestamp":"2026-05-17T23:00:00.000Z"} +{"doc_count":2024,"split_key":14061,"timestamp":"2026-05-17T23:00:00.000Z"} +{"doc_count":1280,"split_key":24940,"timestamp":"2026-05-17T23:00:00.000Z"} +{"doc_count":805,"split_key":25369,"timestamp":"2026-05-17T23:00:00.000Z"} +{"doc_count":45875,"split_key":206264,"timestamp":"2026-05-18T00:00:00.000Z"} +{"doc_count":8130,"split_key":50360,"timestamp":"2026-05-18T00:00:00.000Z"} +{"doc_count":2129,"split_key":14061,"timestamp":"2026-05-18T00:00:00.000Z"} +{"doc_count":1301,"split_key":24940,"timestamp":"2026-05-18T00:00:00.000Z"} +{"doc_count":966,"split_key":25369,"timestamp":"2026-05-18T00:00:00.000Z"} +{"doc_count":46773,"split_key":206264,"timestamp":"2026-05-18T01:00:00.000Z"} +{"doc_count":11496,"split_key":50360,"timestamp":"2026-05-18T01:00:00.000Z"} +{"doc_count":2004,"split_key":14061,"timestamp":"2026-05-18T01:00:00.000Z"} +{"doc_count":1207,"split_key":24940,"timestamp":"2026-05-18T01:00:00.000Z"} +{"doc_count":832,"split_key":47890,"timestamp":"2026-05-18T01:00:00.000Z"} +{"doc_count":46218,"split_key":206264,"timestamp":"2026-05-18T02:00:00.000Z"} +{"doc_count":2127,"split_key":51396,"timestamp":"2026-05-18T02:00:00.000Z"} +{"doc_count":1949,"split_key":14061,"timestamp":"2026-05-18T02:00:00.000Z"} +{"doc_count":1487,"split_key":16276,"timestamp":"2026-05-18T02:00:00.000Z"} +{"doc_count":1303,"split_key":24940,"timestamp":"2026-05-18T02:00:00.000Z"} +{"doc_count":46869,"split_key":206264,"timestamp":"2026-05-18T03:00:00.000Z"} +{"doc_count":9946,"split_key":63949,"timestamp":"2026-05-18T03:00:00.000Z"} +{"doc_count":2033,"split_key":14061,"timestamp":"2026-05-18T03:00:00.000Z"} +{"doc_count":1543,"split_key":16276,"timestamp":"2026-05-18T03:00:00.000Z"} +{"doc_count":1264,"split_key":24940,"timestamp":"2026-05-18T03:00:00.000Z"} +{"doc_count":46948,"split_key":206264,"timestamp":"2026-05-18T04:00:00.000Z"} +{"doc_count":20454,"split_key":63949,"timestamp":"2026-05-18T04:00:00.000Z"} +{"doc_count":2607,"split_key":16276,"timestamp":"2026-05-18T04:00:00.000Z"} +{"doc_count":1973,"split_key":14061,"timestamp":"2026-05-18T04:00:00.000Z"} +{"doc_count":1231,"split_key":24940,"timestamp":"2026-05-18T04:00:00.000Z"} +{"doc_count":47033,"split_key":206264,"timestamp":"2026-05-18T05:00:00.000Z"} +{"doc_count":2907,"split_key":16276,"timestamp":"2026-05-18T05:00:00.000Z"} +{"doc_count":2103,"split_key":14061,"timestamp":"2026-05-18T05:00:00.000Z"} +{"doc_count":1310,"split_key":24940,"timestamp":"2026-05-18T05:00:00.000Z"} +{"doc_count":935,"split_key":47890,"timestamp":"2026-05-18T05:00:00.000Z"} +{"doc_count":47296,"split_key":206264,"timestamp":"2026-05-18T06:00:00.000Z"} +{"doc_count":4010,"split_key":16276,"timestamp":"2026-05-18T06:00:00.000Z"} +{"doc_count":2078,"split_key":14061,"timestamp":"2026-05-18T06:00:00.000Z"} +{"doc_count":1349,"split_key":24940,"timestamp":"2026-05-18T06:00:00.000Z"} +{"doc_count":964,"split_key":37963,"timestamp":"2026-05-18T06:00:00.000Z"} +{"doc_count":47225,"split_key":206264,"timestamp":"2026-05-18T07:00:00.000Z"} +{"doc_count":2041,"split_key":14061,"timestamp":"2026-05-18T07:00:00.000Z"} +{"doc_count":1574,"split_key":16276,"timestamp":"2026-05-18T07:00:00.000Z"} +{"doc_count":1283,"split_key":24940,"timestamp":"2026-05-18T07:00:00.000Z"} +{"doc_count":1226,"split_key":54163,"timestamp":"2026-05-18T07:00:00.000Z"} +{"doc_count":47513,"split_key":206264,"timestamp":"2026-05-18T08:00:00.000Z"} +{"doc_count":2040,"split_key":14061,"timestamp":"2026-05-18T08:00:00.000Z"} +{"doc_count":1303,"split_key":24940,"timestamp":"2026-05-18T08:00:00.000Z"} +{"doc_count":943,"split_key":37963,"timestamp":"2026-05-18T08:00:00.000Z"} +{"doc_count":872,"split_key":47890,"timestamp":"2026-05-18T08:00:00.000Z"} +{"doc_count":47164,"split_key":206264,"timestamp":"2026-05-18T09:00:00.000Z"} +{"doc_count":9186,"split_key":209334,"timestamp":"2026-05-18T09:00:00.000Z"} +{"doc_count":2087,"split_key":14061,"timestamp":"2026-05-18T09:00:00.000Z"} +{"doc_count":1294,"split_key":24940,"timestamp":"2026-05-18T09:00:00.000Z"} +{"doc_count":871,"split_key":47890,"timestamp":"2026-05-18T09:00:00.000Z"} +{"doc_count":48553,"split_key":206264,"timestamp":"2026-05-18T10:00:00.000Z"} +{"doc_count":22822,"split_key":209334,"timestamp":"2026-05-18T10:00:00.000Z"} +{"doc_count":2017,"split_key":14061,"timestamp":"2026-05-18T10:00:00.000Z"} +{"doc_count":1569,"split_key":24940,"timestamp":"2026-05-18T10:00:00.000Z"} +{"doc_count":862,"split_key":47890,"timestamp":"2026-05-18T10:00:00.000Z"} +{"doc_count":60373,"split_key":23470,"timestamp":"2026-05-18T11:00:00.000Z"} +{"doc_count":48521,"split_key":206264,"timestamp":"2026-05-18T11:00:00.000Z"} +{"doc_count":17042,"split_key":209334,"timestamp":"2026-05-18T11:00:00.000Z"} +{"doc_count":8480,"split_key":50360,"timestamp":"2026-05-18T11:00:00.000Z"} +{"doc_count":4031,"split_key":4134,"timestamp":"2026-05-18T11:00:00.000Z"} +{"doc_count":48820,"split_key":206264,"timestamp":"2026-05-18T12:00:00.000Z"} +{"doc_count":17562,"split_key":209334,"timestamp":"2026-05-18T12:00:00.000Z"} +{"doc_count":11600,"split_key":50360,"timestamp":"2026-05-18T12:00:00.000Z"} +{"doc_count":2283,"split_key":14061,"timestamp":"2026-05-18T12:00:00.000Z"} +{"doc_count":1353,"split_key":24940,"timestamp":"2026-05-18T12:00:00.000Z"} +{"doc_count":47967,"split_key":206264,"timestamp":"2026-05-18T13:00:00.000Z"} +{"doc_count":12887,"split_key":209334,"timestamp":"2026-05-18T13:00:00.000Z"} +{"doc_count":2178,"split_key":14061,"timestamp":"2026-05-18T13:00:00.000Z"} +{"doc_count":1460,"split_key":24940,"timestamp":"2026-05-18T13:00:00.000Z"} +{"doc_count":851,"split_key":45102,"timestamp":"2026-05-18T13:00:00.000Z"} +{"doc_count":49083,"split_key":206264,"timestamp":"2026-05-18T14:00:00.000Z"} +{"doc_count":10140,"split_key":209334,"timestamp":"2026-05-18T14:00:00.000Z"} +{"doc_count":2025,"split_key":14061,"timestamp":"2026-05-18T14:00:00.000Z"} +{"doc_count":1339,"split_key":24940,"timestamp":"2026-05-18T14:00:00.000Z"} +{"doc_count":875,"split_key":51396,"timestamp":"2026-05-18T14:00:00.000Z"} +{"doc_count":48494,"split_key":206264,"timestamp":"2026-05-18T15:00:00.000Z"} +{"doc_count":5841,"split_key":209334,"timestamp":"2026-05-18T15:00:00.000Z"} +{"doc_count":2660,"split_key":4538,"timestamp":"2026-05-18T15:00:00.000Z"} +{"doc_count":2026,"split_key":14061,"timestamp":"2026-05-18T15:00:00.000Z"} +{"doc_count":1356,"split_key":24940,"timestamp":"2026-05-18T15:00:00.000Z"} +{"doc_count":48820,"split_key":206264,"timestamp":"2026-05-18T16:00:00.000Z"} +{"doc_count":1936,"split_key":14061,"timestamp":"2026-05-18T16:00:00.000Z"} +{"doc_count":1264,"split_key":24940,"timestamp":"2026-05-18T16:00:00.000Z"} +{"doc_count":882,"split_key":7552,"timestamp":"2026-05-18T16:00:00.000Z"} +{"doc_count":681,"split_key":209334,"timestamp":"2026-05-18T16:00:00.000Z"} +{"doc_count":48647,"split_key":206264,"timestamp":"2026-05-18T17:00:00.000Z"} +{"doc_count":9530,"split_key":209334,"timestamp":"2026-05-18T17:00:00.000Z"} +{"doc_count":1803,"split_key":14061,"timestamp":"2026-05-18T17:00:00.000Z"} +{"doc_count":1361,"split_key":24940,"timestamp":"2026-05-18T17:00:00.000Z"} +{"doc_count":1044,"split_key":51396,"timestamp":"2026-05-18T17:00:00.000Z"} +{"doc_count":49036,"split_key":206264,"timestamp":"2026-05-18T18:00:00.000Z"} +{"doc_count":1683,"split_key":209334,"timestamp":"2026-05-18T18:00:00.000Z"} +{"doc_count":1525,"split_key":24940,"timestamp":"2026-05-18T18:00:00.000Z"} +{"doc_count":1442,"split_key":14061,"timestamp":"2026-05-18T18:00:00.000Z"} +{"doc_count":739,"split_key":7552,"timestamp":"2026-05-18T18:00:00.000Z"} +{"doc_count":49780,"split_key":206264,"timestamp":"2026-05-18T19:00:00.000Z"} +{"doc_count":14107,"split_key":209334,"timestamp":"2026-05-18T19:00:00.000Z"} +{"doc_count":1701,"split_key":14061,"timestamp":"2026-05-18T19:00:00.000Z"} +{"doc_count":1445,"split_key":24940,"timestamp":"2026-05-18T19:00:00.000Z"} +{"doc_count":840,"split_key":47890,"timestamp":"2026-05-18T19:00:00.000Z"} +{"doc_count":49038,"split_key":206264,"timestamp":"2026-05-18T20:00:00.000Z"} +{"doc_count":14235,"split_key":209334,"timestamp":"2026-05-18T20:00:00.000Z"} +{"doc_count":1603,"split_key":45102,"timestamp":"2026-05-18T20:00:00.000Z"} +{"doc_count":1475,"split_key":24940,"timestamp":"2026-05-18T20:00:00.000Z"} +{"doc_count":1440,"split_key":14061,"timestamp":"2026-05-18T20:00:00.000Z"} +{"doc_count":49648,"split_key":206264,"timestamp":"2026-05-18T21:00:00.000Z"} +{"doc_count":1533,"split_key":45102,"timestamp":"2026-05-18T21:00:00.000Z"} +{"doc_count":1487,"split_key":24940,"timestamp":"2026-05-18T21:00:00.000Z"} +{"doc_count":1215,"split_key":14061,"timestamp":"2026-05-18T21:00:00.000Z"} +{"doc_count":861,"split_key":396982,"timestamp":"2026-05-18T21:00:00.000Z"} +{"doc_count":49486,"split_key":206264,"timestamp":"2026-05-18T22:00:00.000Z"} +{"doc_count":1582,"split_key":45102,"timestamp":"2026-05-18T22:00:00.000Z"} +{"doc_count":1472,"split_key":24940,"timestamp":"2026-05-18T22:00:00.000Z"} +{"doc_count":1157,"split_key":14061,"timestamp":"2026-05-18T22:00:00.000Z"} +{"doc_count":1135,"split_key":24961,"timestamp":"2026-05-18T22:00:00.000Z"} +{"doc_count":48282,"split_key":206264,"timestamp":"2026-05-18T23:00:00.000Z"} +{"doc_count":7872,"split_key":396982,"timestamp":"2026-05-18T23:00:00.000Z"} +{"doc_count":1664,"split_key":24940,"timestamp":"2026-05-18T23:00:00.000Z"} +{"doc_count":1131,"split_key":14061,"timestamp":"2026-05-18T23:00:00.000Z"} +{"doc_count":1039,"split_key":25369,"timestamp":"2026-05-18T23:00:00.000Z"} +{"doc_count":50349,"split_key":206264,"timestamp":"2026-05-19T00:00:00.000Z"} +{"doc_count":1488,"split_key":24940,"timestamp":"2026-05-19T00:00:00.000Z"} +{"doc_count":1294,"split_key":14061,"timestamp":"2026-05-19T00:00:00.000Z"} +{"doc_count":1116,"split_key":24961,"timestamp":"2026-05-19T00:00:00.000Z"} +{"doc_count":1115,"split_key":396982,"timestamp":"2026-05-19T00:00:00.000Z"} +{"doc_count":49446,"split_key":206264,"timestamp":"2026-05-19T01:00:00.000Z"} +{"doc_count":1441,"split_key":24940,"timestamp":"2026-05-19T01:00:00.000Z"} +{"doc_count":1253,"split_key":14061,"timestamp":"2026-05-19T01:00:00.000Z"} +{"doc_count":1200,"split_key":24961,"timestamp":"2026-05-19T01:00:00.000Z"} +{"doc_count":1027,"split_key":396982,"timestamp":"2026-05-19T01:00:00.000Z"} +{"doc_count":51003,"split_key":206264,"timestamp":"2026-05-19T02:00:00.000Z"} +{"doc_count":1462,"split_key":24940,"timestamp":"2026-05-19T02:00:00.000Z"} +{"doc_count":1256,"split_key":14061,"timestamp":"2026-05-19T02:00:00.000Z"} +{"doc_count":1092,"split_key":24961,"timestamp":"2026-05-19T02:00:00.000Z"} +{"doc_count":863,"split_key":47890,"timestamp":"2026-05-19T02:00:00.000Z"} +{"doc_count":49290,"split_key":206264,"timestamp":"2026-05-19T03:00:00.000Z"} +{"doc_count":1489,"split_key":24940,"timestamp":"2026-05-19T03:00:00.000Z"} +{"doc_count":1211,"split_key":14061,"timestamp":"2026-05-19T03:00:00.000Z"} +{"doc_count":1171,"split_key":24961,"timestamp":"2026-05-19T03:00:00.000Z"} +{"doc_count":908,"split_key":47890,"timestamp":"2026-05-19T03:00:00.000Z"} +{"doc_count":51738,"split_key":206264,"timestamp":"2026-05-19T04:00:00.000Z"} +{"doc_count":7156,"split_key":50360,"timestamp":"2026-05-19T04:00:00.000Z"} +{"doc_count":1658,"split_key":24940,"timestamp":"2026-05-19T04:00:00.000Z"} +{"doc_count":1377,"split_key":398101,"timestamp":"2026-05-19T04:00:00.000Z"} +{"doc_count":1279,"split_key":24961,"timestamp":"2026-05-19T04:00:00.000Z"} +{"doc_count":43992,"split_key":206264,"timestamp":"2026-05-19T05:00:00.000Z"} +{"doc_count":12109,"split_key":50360,"timestamp":"2026-05-19T05:00:00.000Z"} +{"doc_count":1587,"split_key":24940,"timestamp":"2026-05-19T05:00:00.000Z"} +{"doc_count":958,"split_key":25369,"timestamp":"2026-05-19T05:00:00.000Z"} +{"doc_count":914,"split_key":37963,"timestamp":"2026-05-19T05:00:00.000Z"} +{"doc_count":38536,"split_key":206264,"timestamp":"2026-05-19T06:00:00.000Z"} +{"doc_count":1373,"split_key":24940,"timestamp":"2026-05-19T06:00:00.000Z"} +{"doc_count":857,"split_key":50360,"timestamp":"2026-05-19T06:00:00.000Z"} +{"doc_count":669,"split_key":47890,"timestamp":"2026-05-19T06:00:00.000Z"} +{"doc_count":594,"split_key":25369,"timestamp":"2026-05-19T06:00:00.000Z"} +{"doc_count":38148,"split_key":206264,"timestamp":"2026-05-19T07:00:00.000Z"} +{"doc_count":4376,"split_key":211590,"timestamp":"2026-05-19T07:00:00.000Z"} +{"doc_count":2172,"split_key":19318,"timestamp":"2026-05-19T07:00:00.000Z"} +{"doc_count":1480,"split_key":24940,"timestamp":"2026-05-19T07:00:00.000Z"} +{"doc_count":982,"split_key":14061,"timestamp":"2026-05-19T07:00:00.000Z"} +{"doc_count":24848,"split_key":206264,"timestamp":"2026-05-19T08:00:00.000Z"} +{"doc_count":4458,"split_key":19318,"timestamp":"2026-05-19T08:00:00.000Z"} +{"doc_count":849,"split_key":14061,"timestamp":"2026-05-19T08:00:00.000Z"} +{"doc_count":520,"split_key":141995,"timestamp":"2026-05-19T08:00:00.000Z"} +{"doc_count":459,"split_key":16509,"timestamp":"2026-05-19T08:00:00.000Z"} +{"doc_count":15547,"split_key":206264,"timestamp":"2026-05-19T09:00:00.000Z"} +{"doc_count":4587,"split_key":19318,"timestamp":"2026-05-19T09:00:00.000Z"} +{"doc_count":3213,"split_key":209334,"timestamp":"2026-05-19T09:00:00.000Z"} +{"doc_count":2135,"split_key":209101,"timestamp":"2026-05-19T09:00:00.000Z"} +{"doc_count":840,"split_key":51396,"timestamp":"2026-05-19T09:00:00.000Z"} +{"doc_count":15546,"split_key":206264,"timestamp":"2026-05-19T10:00:00.000Z"} +{"doc_count":13827,"split_key":209334,"timestamp":"2026-05-19T10:00:00.000Z"} +{"doc_count":3657,"split_key":19318,"timestamp":"2026-05-19T10:00:00.000Z"} +{"doc_count":1063,"split_key":51396,"timestamp":"2026-05-19T10:00:00.000Z"} +{"doc_count":469,"split_key":201401,"timestamp":"2026-05-19T10:00:00.000Z"} +{"doc_count":14488,"split_key":206264,"timestamp":"2026-05-19T11:00:00.000Z"} +{"doc_count":2939,"split_key":19318,"timestamp":"2026-05-19T11:00:00.000Z"} +{"doc_count":1076,"split_key":209334,"timestamp":"2026-05-19T11:00:00.000Z"} +{"doc_count":755,"split_key":51396,"timestamp":"2026-05-19T11:00:00.000Z"} +{"doc_count":294,"split_key":141995,"timestamp":"2026-05-19T11:00:00.000Z"} +{"doc_count":16071,"split_key":206264,"timestamp":"2026-05-19T12:00:00.000Z"} +{"doc_count":2033,"split_key":19318,"timestamp":"2026-05-19T12:00:00.000Z"} +{"doc_count":882,"split_key":51396,"timestamp":"2026-05-19T12:00:00.000Z"} +{"doc_count":500,"split_key":16509,"timestamp":"2026-05-19T12:00:00.000Z"} +{"doc_count":291,"split_key":141995,"timestamp":"2026-05-19T12:00:00.000Z"} +{"doc_count":7648,"split_key":206264,"timestamp":"2026-05-19T13:00:00.000Z"} +{"doc_count":603,"split_key":19318,"timestamp":"2026-05-19T13:00:00.000Z"} +{"doc_count":486,"split_key":51396,"timestamp":"2026-05-19T13:00:00.000Z"} +{"doc_count":318,"split_key":16509,"timestamp":"2026-05-19T13:00:00.000Z"} +{"doc_count":194,"split_key":209605,"timestamp":"2026-05-19T13:00:00.000Z"} +{"doc_count":136,"split_key":138915,"timestamp":"2026-05-19T15:00:00.000Z"} +{"doc_count":68,"split_key":209605,"timestamp":"2026-05-19T15:00:00.000Z"} +{"doc_count":57,"split_key":202105,"timestamp":"2026-05-19T15:00:00.000Z"} +{"doc_count":41,"split_key":206264,"timestamp":"2026-05-19T15:00:00.000Z"} +{"doc_count":26,"split_key":213412,"timestamp":"2026-05-19T15:00:00.000Z"} +{"doc_count":12933,"split_key":206264,"timestamp":"2026-05-19T16:00:00.000Z"} +{"doc_count":787,"split_key":24961,"timestamp":"2026-05-19T16:00:00.000Z"} +{"doc_count":427,"split_key":4837,"timestamp":"2026-05-19T16:00:00.000Z"} +{"doc_count":391,"split_key":14061,"timestamp":"2026-05-19T16:00:00.000Z"} +{"doc_count":327,"split_key":53667,"timestamp":"2026-05-19T16:00:00.000Z"} +{"doc_count":10271,"split_key":206264,"timestamp":"2026-05-19T17:00:00.000Z"} +{"doc_count":841,"split_key":14061,"timestamp":"2026-05-19T17:00:00.000Z"} +{"doc_count":466,"split_key":24961,"timestamp":"2026-05-19T17:00:00.000Z"} +{"doc_count":354,"split_key":51396,"timestamp":"2026-05-19T17:00:00.000Z"} +{"doc_count":352,"split_key":4837,"timestamp":"2026-05-19T17:00:00.000Z"} +{"doc_count":6450,"split_key":206264,"timestamp":"2026-05-19T19:00:00.000Z"} +{"doc_count":813,"split_key":37963,"timestamp":"2026-05-19T19:00:00.000Z"} +{"doc_count":161,"split_key":28635,"timestamp":"2026-05-19T19:00:00.000Z"} +{"doc_count":104,"split_key":197540,"timestamp":"2026-05-19T19:00:00.000Z"} +{"doc_count":66,"split_key":8452,"timestamp":"2026-05-19T19:00:00.000Z"} +{"doc_count":149,"split_key":215590,"timestamp":"2026-05-19T20:00:00.000Z"} +{"doc_count":47,"split_key":7506,"timestamp":"2026-05-19T20:00:00.000Z"} +{"doc_count":47,"split_key":16509,"timestamp":"2026-05-19T20:00:00.000Z"} +{"doc_count":27,"split_key":48090,"timestamp":"2026-05-19T20:00:00.000Z"} +{"doc_count":16,"split_key":63949,"timestamp":"2026-05-19T20:00:00.000Z"} +{"doc_count":6032,"split_key":206264,"timestamp":"2026-05-20T00:00:00.000Z"} +{"doc_count":153,"split_key":14061,"timestamp":"2026-05-20T00:00:00.000Z"} +{"doc_count":121,"split_key":197540,"timestamp":"2026-05-20T00:00:00.000Z"} +{"doc_count":88,"split_key":8048,"timestamp":"2026-05-20T00:00:00.000Z"} +{"doc_count":85,"split_key":37963,"timestamp":"2026-05-20T00:00:00.000Z"} +{"doc_count":4917,"split_key":206264,"timestamp":"2026-05-20T01:00:00.000Z"} +{"doc_count":108,"split_key":51396,"timestamp":"2026-05-20T01:00:00.000Z"} +{"doc_count":86,"split_key":209605,"timestamp":"2026-05-20T01:00:00.000Z"} +{"doc_count":75,"split_key":138915,"timestamp":"2026-05-20T01:00:00.000Z"} +{"doc_count":63,"split_key":37963,"timestamp":"2026-05-20T01:00:00.000Z"} +{"doc_count":15085,"split_key":206264,"timestamp":"2026-05-20T07:00:00.000Z"} +{"doc_count":850,"split_key":51396,"timestamp":"2026-05-20T07:00:00.000Z"} +{"doc_count":270,"split_key":141995,"timestamp":"2026-05-20T07:00:00.000Z"} +{"doc_count":210,"split_key":63949,"timestamp":"2026-05-20T07:00:00.000Z"} +{"doc_count":150,"split_key":398324,"timestamp":"2026-05-20T07:00:00.000Z"} +{"doc_count":38661,"split_key":206264,"timestamp":"2026-05-20T08:00:00.000Z"} +{"doc_count":1013,"split_key":14061,"timestamp":"2026-05-20T08:00:00.000Z"} +{"doc_count":827,"split_key":24940,"timestamp":"2026-05-20T08:00:00.000Z"} +{"doc_count":608,"split_key":51396,"timestamp":"2026-05-20T08:00:00.000Z"} +{"doc_count":588,"split_key":47890,"timestamp":"2026-05-20T08:00:00.000Z"} +{"doc_count":64009,"split_key":206264,"timestamp":"2026-05-20T09:00:00.000Z"} +{"doc_count":1489,"split_key":14061,"timestamp":"2026-05-20T09:00:00.000Z"} +{"doc_count":1096,"split_key":24940,"timestamp":"2026-05-20T09:00:00.000Z"} +{"doc_count":952,"split_key":209605,"timestamp":"2026-05-20T09:00:00.000Z"} +{"doc_count":870,"split_key":47890,"timestamp":"2026-05-20T09:00:00.000Z"} +{"doc_count":63428,"split_key":206264,"timestamp":"2026-05-20T10:00:00.000Z"} +{"doc_count":1544,"split_key":14061,"timestamp":"2026-05-20T10:00:00.000Z"} +{"doc_count":1314,"split_key":24940,"timestamp":"2026-05-20T10:00:00.000Z"} +{"doc_count":1035,"split_key":51396,"timestamp":"2026-05-20T10:00:00.000Z"} +{"doc_count":958,"split_key":209605,"timestamp":"2026-05-20T10:00:00.000Z"} +{"doc_count":63913,"split_key":206264,"timestamp":"2026-05-20T11:00:00.000Z"} +{"doc_count":2061,"split_key":14061,"timestamp":"2026-05-20T11:00:00.000Z"} +{"doc_count":1338,"split_key":208137,"timestamp":"2026-05-20T11:00:00.000Z"} +{"doc_count":1234,"split_key":24940,"timestamp":"2026-05-20T11:00:00.000Z"} +{"doc_count":980,"split_key":16509,"timestamp":"2026-05-20T11:00:00.000Z"} +{"doc_count":63893,"split_key":206264,"timestamp":"2026-05-20T12:00:00.000Z"} +{"doc_count":3966,"split_key":14061,"timestamp":"2026-05-20T12:00:00.000Z"} +{"doc_count":1128,"split_key":51396,"timestamp":"2026-05-20T12:00:00.000Z"} +{"doc_count":1054,"split_key":24940,"timestamp":"2026-05-20T12:00:00.000Z"} +{"doc_count":960,"split_key":209605,"timestamp":"2026-05-20T12:00:00.000Z"} +{"doc_count":64006,"split_key":206264,"timestamp":"2026-05-20T13:00:00.000Z"} +{"doc_count":3937,"split_key":14061,"timestamp":"2026-05-20T13:00:00.000Z"} +{"doc_count":2777,"split_key":9009,"timestamp":"2026-05-20T13:00:00.000Z"} +{"doc_count":1245,"split_key":24940,"timestamp":"2026-05-20T13:00:00.000Z"} +{"doc_count":998,"split_key":51396,"timestamp":"2026-05-20T13:00:00.000Z"} +{"doc_count":64268,"split_key":206264,"timestamp":"2026-05-20T14:00:00.000Z"} +{"doc_count":3365,"split_key":14061,"timestamp":"2026-05-20T14:00:00.000Z"} +{"doc_count":1385,"split_key":60754,"timestamp":"2026-05-20T14:00:00.000Z"} +{"doc_count":1098,"split_key":24940,"timestamp":"2026-05-20T14:00:00.000Z"} +{"doc_count":1053,"split_key":209334,"timestamp":"2026-05-20T14:00:00.000Z"} +{"doc_count":64309,"split_key":206264,"timestamp":"2026-05-20T15:00:00.000Z"} +{"doc_count":2299,"split_key":14061,"timestamp":"2026-05-20T15:00:00.000Z"} +{"doc_count":1456,"split_key":51396,"timestamp":"2026-05-20T15:00:00.000Z"} +{"doc_count":1296,"split_key":24940,"timestamp":"2026-05-20T15:00:00.000Z"} +{"doc_count":939,"split_key":209605,"timestamp":"2026-05-20T15:00:00.000Z"} +{"doc_count":64593,"split_key":206264,"timestamp":"2026-05-20T16:00:00.000Z"} +{"doc_count":1953,"split_key":14061,"timestamp":"2026-05-20T16:00:00.000Z"} +{"doc_count":1121,"split_key":24940,"timestamp":"2026-05-20T16:00:00.000Z"} +{"doc_count":890,"split_key":47890,"timestamp":"2026-05-20T16:00:00.000Z"} +{"doc_count":876,"split_key":209605,"timestamp":"2026-05-20T16:00:00.000Z"} +{"doc_count":64589,"split_key":206264,"timestamp":"2026-05-20T17:00:00.000Z"} +{"doc_count":4548,"split_key":209334,"timestamp":"2026-05-20T17:00:00.000Z"} +{"doc_count":1815,"split_key":14061,"timestamp":"2026-05-20T17:00:00.000Z"} +{"doc_count":1162,"split_key":24940,"timestamp":"2026-05-20T17:00:00.000Z"} +{"doc_count":856,"split_key":209605,"timestamp":"2026-05-20T17:00:00.000Z"} +{"doc_count":64846,"split_key":206264,"timestamp":"2026-05-20T18:00:00.000Z"} +{"doc_count":7302,"split_key":209334,"timestamp":"2026-05-20T18:00:00.000Z"} +{"doc_count":1777,"split_key":14061,"timestamp":"2026-05-20T18:00:00.000Z"} +{"doc_count":1265,"split_key":24940,"timestamp":"2026-05-20T18:00:00.000Z"} +{"doc_count":1090,"split_key":16509,"timestamp":"2026-05-20T18:00:00.000Z"} +{"doc_count":64948,"split_key":206264,"timestamp":"2026-05-20T19:00:00.000Z"} +{"doc_count":15718,"split_key":209334,"timestamp":"2026-05-20T19:00:00.000Z"} +{"doc_count":3921,"split_key":51852,"timestamp":"2026-05-20T19:00:00.000Z"} +{"doc_count":2124,"split_key":14061,"timestamp":"2026-05-20T19:00:00.000Z"} +{"doc_count":1084,"split_key":24940,"timestamp":"2026-05-20T19:00:00.000Z"} +{"doc_count":65139,"split_key":206264,"timestamp":"2026-05-20T20:00:00.000Z"} +{"doc_count":17634,"split_key":209334,"timestamp":"2026-05-20T20:00:00.000Z"} +{"doc_count":13673,"split_key":51852,"timestamp":"2026-05-20T20:00:00.000Z"} +{"doc_count":2440,"split_key":14061,"timestamp":"2026-05-20T20:00:00.000Z"} +{"doc_count":1145,"split_key":24940,"timestamp":"2026-05-20T20:00:00.000Z"} +{"doc_count":65078,"split_key":206264,"timestamp":"2026-05-20T21:00:00.000Z"} +{"doc_count":40171,"split_key":209334,"timestamp":"2026-05-20T21:00:00.000Z"} +{"doc_count":2200,"split_key":14061,"timestamp":"2026-05-20T21:00:00.000Z"} +{"doc_count":1110,"split_key":24940,"timestamp":"2026-05-20T21:00:00.000Z"} +{"doc_count":1081,"split_key":201401,"timestamp":"2026-05-20T21:00:00.000Z"} +{"doc_count":65520,"split_key":206264,"timestamp":"2026-05-20T22:00:00.000Z"} +{"doc_count":40716,"split_key":209334,"timestamp":"2026-05-20T22:00:00.000Z"} +{"doc_count":2054,"split_key":14061,"timestamp":"2026-05-20T22:00:00.000Z"} +{"doc_count":1087,"split_key":201401,"timestamp":"2026-05-20T22:00:00.000Z"} +{"doc_count":1048,"split_key":24940,"timestamp":"2026-05-20T22:00:00.000Z"} +{"doc_count":65829,"split_key":206264,"timestamp":"2026-05-20T23:00:00.000Z"} +{"doc_count":18663,"split_key":209334,"timestamp":"2026-05-20T23:00:00.000Z"} +{"doc_count":4494,"split_key":45102,"timestamp":"2026-05-20T23:00:00.000Z"} +{"doc_count":2142,"split_key":14061,"timestamp":"2026-05-20T23:00:00.000Z"} +{"doc_count":1263,"split_key":37963,"timestamp":"2026-05-20T23:00:00.000Z"} +{"doc_count":65888,"split_key":206264,"timestamp":"2026-05-21T00:00:00.000Z"} +{"doc_count":21605,"split_key":209334,"timestamp":"2026-05-21T00:00:00.000Z"} +{"doc_count":2430,"split_key":37963,"timestamp":"2026-05-21T00:00:00.000Z"} +{"doc_count":2018,"split_key":14061,"timestamp":"2026-05-21T00:00:00.000Z"} +{"doc_count":1760,"split_key":45102,"timestamp":"2026-05-21T00:00:00.000Z"} +{"doc_count":66063,"split_key":206264,"timestamp":"2026-05-21T01:00:00.000Z"} +{"doc_count":9542,"split_key":209334,"timestamp":"2026-05-21T01:00:00.000Z"} +{"doc_count":2296,"split_key":37963,"timestamp":"2026-05-21T01:00:00.000Z"} +{"doc_count":2103,"split_key":14061,"timestamp":"2026-05-21T01:00:00.000Z"} +{"doc_count":2059,"split_key":25369,"timestamp":"2026-05-21T01:00:00.000Z"} +{"doc_count":66261,"split_key":206264,"timestamp":"2026-05-21T02:00:00.000Z"} +{"doc_count":6894,"split_key":209334,"timestamp":"2026-05-21T02:00:00.000Z"} +{"doc_count":2281,"split_key":14061,"timestamp":"2026-05-21T02:00:00.000Z"} +{"doc_count":1724,"split_key":25369,"timestamp":"2026-05-21T02:00:00.000Z"} +{"doc_count":1326,"split_key":37963,"timestamp":"2026-05-21T02:00:00.000Z"} +{"doc_count":66498,"split_key":206264,"timestamp":"2026-05-21T03:00:00.000Z"} +{"doc_count":1479,"split_key":14061,"timestamp":"2026-05-21T03:00:00.000Z"} +{"doc_count":1445,"split_key":25369,"timestamp":"2026-05-21T03:00:00.000Z"} +{"doc_count":1070,"split_key":24940,"timestamp":"2026-05-21T03:00:00.000Z"} +{"doc_count":1050,"split_key":16509,"timestamp":"2026-05-21T03:00:00.000Z"} +{"doc_count":66943,"split_key":206264,"timestamp":"2026-05-21T04:00:00.000Z"} +{"doc_count":1663,"split_key":14061,"timestamp":"2026-05-21T04:00:00.000Z"} +{"doc_count":1400,"split_key":25369,"timestamp":"2026-05-21T04:00:00.000Z"} +{"doc_count":1099,"split_key":24940,"timestamp":"2026-05-21T04:00:00.000Z"} +{"doc_count":991,"split_key":16509,"timestamp":"2026-05-21T04:00:00.000Z"} +{"doc_count":67273,"split_key":206264,"timestamp":"2026-05-21T05:00:00.000Z"} +{"doc_count":1638,"split_key":14061,"timestamp":"2026-05-21T05:00:00.000Z"} +{"doc_count":1160,"split_key":25369,"timestamp":"2026-05-21T05:00:00.000Z"} +{"doc_count":1100,"split_key":24940,"timestamp":"2026-05-21T05:00:00.000Z"} +{"doc_count":1032,"split_key":396982,"timestamp":"2026-05-21T05:00:00.000Z"} +{"doc_count":67281,"split_key":206264,"timestamp":"2026-05-21T06:00:00.000Z"} +{"doc_count":2010,"split_key":14061,"timestamp":"2026-05-21T06:00:00.000Z"} +{"doc_count":1584,"split_key":24940,"timestamp":"2026-05-21T06:00:00.000Z"} +{"doc_count":1189,"split_key":396982,"timestamp":"2026-05-21T06:00:00.000Z"} +{"doc_count":1095,"split_key":9031,"timestamp":"2026-05-21T06:00:00.000Z"} +{"doc_count":67397,"split_key":206264,"timestamp":"2026-05-21T07:00:00.000Z"} +{"doc_count":8815,"split_key":209334,"timestamp":"2026-05-21T07:00:00.000Z"} +{"doc_count":1828,"split_key":14061,"timestamp":"2026-05-21T07:00:00.000Z"} +{"doc_count":1368,"split_key":16509,"timestamp":"2026-05-21T07:00:00.000Z"} +{"doc_count":1073,"split_key":24940,"timestamp":"2026-05-21T07:00:00.000Z"} +{"doc_count":67947,"split_key":206264,"timestamp":"2026-05-21T08:00:00.000Z"} +{"doc_count":5554,"split_key":209334,"timestamp":"2026-05-21T08:00:00.000Z"} +{"doc_count":1585,"split_key":14061,"timestamp":"2026-05-21T08:00:00.000Z"} +{"doc_count":1419,"split_key":24940,"timestamp":"2026-05-21T08:00:00.000Z"} +{"doc_count":1062,"split_key":9031,"timestamp":"2026-05-21T08:00:00.000Z"} +{"doc_count":67587,"split_key":206264,"timestamp":"2026-05-21T09:00:00.000Z"} +{"doc_count":3489,"split_key":209334,"timestamp":"2026-05-21T09:00:00.000Z"} +{"doc_count":2024,"split_key":14061,"timestamp":"2026-05-21T09:00:00.000Z"} +{"doc_count":1453,"split_key":51396,"timestamp":"2026-05-21T09:00:00.000Z"} +{"doc_count":1267,"split_key":24940,"timestamp":"2026-05-21T09:00:00.000Z"} +{"doc_count":67624,"split_key":206264,"timestamp":"2026-05-21T10:00:00.000Z"} +{"doc_count":25620,"split_key":209334,"timestamp":"2026-05-21T10:00:00.000Z"} +{"doc_count":1821,"split_key":14061,"timestamp":"2026-05-21T10:00:00.000Z"} +{"doc_count":1140,"split_key":24940,"timestamp":"2026-05-21T10:00:00.000Z"} +{"doc_count":1109,"split_key":51396,"timestamp":"2026-05-21T10:00:00.000Z"} +{"doc_count":67853,"split_key":206264,"timestamp":"2026-05-21T11:00:00.000Z"} +{"doc_count":24294,"split_key":209334,"timestamp":"2026-05-21T11:00:00.000Z"} +{"doc_count":1418,"split_key":14061,"timestamp":"2026-05-21T11:00:00.000Z"} +{"doc_count":1225,"split_key":16509,"timestamp":"2026-05-21T11:00:00.000Z"} +{"doc_count":1178,"split_key":24940,"timestamp":"2026-05-21T11:00:00.000Z"} +{"doc_count":53741,"split_key":209334,"timestamp":"2026-05-21T12:00:00.000Z"} +{"doc_count":36468,"split_key":206264,"timestamp":"2026-05-21T12:00:00.000Z"} +{"doc_count":1391,"split_key":14061,"timestamp":"2026-05-21T12:00:00.000Z"} +{"doc_count":1145,"split_key":201401,"timestamp":"2026-05-21T12:00:00.000Z"} +{"doc_count":1106,"split_key":24940,"timestamp":"2026-05-21T12:00:00.000Z"} +{"doc_count":20654,"split_key":209334,"timestamp":"2026-05-21T13:00:00.000Z"} +{"doc_count":1397,"split_key":14061,"timestamp":"2026-05-21T13:00:00.000Z"} +{"doc_count":1171,"split_key":24940,"timestamp":"2026-05-21T13:00:00.000Z"} +{"doc_count":861,"split_key":16509,"timestamp":"2026-05-21T13:00:00.000Z"} +{"doc_count":843,"split_key":47890,"timestamp":"2026-05-21T13:00:00.000Z"} +{"doc_count":43431,"split_key":209334,"timestamp":"2026-05-21T14:00:00.000Z"} +{"doc_count":1451,"split_key":14061,"timestamp":"2026-05-21T14:00:00.000Z"} +{"doc_count":1339,"split_key":24940,"timestamp":"2026-05-21T14:00:00.000Z"} +{"doc_count":983,"split_key":201401,"timestamp":"2026-05-21T14:00:00.000Z"} +{"doc_count":832,"split_key":16509,"timestamp":"2026-05-21T14:00:00.000Z"} +{"doc_count":1434,"split_key":14061,"timestamp":"2026-05-21T15:00:00.000Z"} +{"doc_count":1213,"split_key":24940,"timestamp":"2026-05-21T15:00:00.000Z"} +{"doc_count":1116,"split_key":16509,"timestamp":"2026-05-21T15:00:00.000Z"} +{"doc_count":896,"split_key":47890,"timestamp":"2026-05-21T15:00:00.000Z"} +{"doc_count":751,"split_key":7552,"timestamp":"2026-05-21T15:00:00.000Z"} +{"doc_count":1364,"split_key":14061,"timestamp":"2026-05-21T16:00:00.000Z"} +{"doc_count":1136,"split_key":215930,"timestamp":"2026-05-21T16:00:00.000Z"} +{"doc_count":1124,"split_key":24940,"timestamp":"2026-05-21T16:00:00.000Z"} +{"doc_count":991,"split_key":209605,"timestamp":"2026-05-21T16:00:00.000Z"} +{"doc_count":924,"split_key":37963,"timestamp":"2026-05-21T16:00:00.000Z"} +{"doc_count":1564,"split_key":14061,"timestamp":"2026-05-21T17:00:00.000Z"} +{"doc_count":1155,"split_key":24940,"timestamp":"2026-05-21T17:00:00.000Z"} +{"doc_count":1125,"split_key":37963,"timestamp":"2026-05-21T17:00:00.000Z"} +{"doc_count":1114,"split_key":215930,"timestamp":"2026-05-21T17:00:00.000Z"} +{"doc_count":1001,"split_key":209605,"timestamp":"2026-05-21T17:00:00.000Z"} +{"doc_count":1609,"split_key":14061,"timestamp":"2026-05-21T18:00:00.000Z"} +{"doc_count":1471,"split_key":24940,"timestamp":"2026-05-21T18:00:00.000Z"} +{"doc_count":1146,"split_key":37963,"timestamp":"2026-05-21T18:00:00.000Z"} +{"doc_count":1143,"split_key":215930,"timestamp":"2026-05-21T18:00:00.000Z"} +{"doc_count":1047,"split_key":16509,"timestamp":"2026-05-21T18:00:00.000Z"} +{"doc_count":1922,"split_key":14061,"timestamp":"2026-05-21T19:00:00.000Z"} +{"doc_count":1261,"split_key":16509,"timestamp":"2026-05-21T19:00:00.000Z"} +{"doc_count":1185,"split_key":24940,"timestamp":"2026-05-21T19:00:00.000Z"} +{"doc_count":1118,"split_key":215930,"timestamp":"2026-05-21T19:00:00.000Z"} +{"doc_count":1058,"split_key":209605,"timestamp":"2026-05-21T19:00:00.000Z"} +{"doc_count":1742,"split_key":14061,"timestamp":"2026-05-21T20:00:00.000Z"} +{"doc_count":1241,"split_key":24940,"timestamp":"2026-05-21T20:00:00.000Z"} +{"doc_count":1137,"split_key":215930,"timestamp":"2026-05-21T20:00:00.000Z"} +{"doc_count":1109,"split_key":16509,"timestamp":"2026-05-21T20:00:00.000Z"} +{"doc_count":1060,"split_key":209605,"timestamp":"2026-05-21T20:00:00.000Z"} +{"doc_count":1539,"split_key":14061,"timestamp":"2026-05-21T21:00:00.000Z"} +{"doc_count":1290,"split_key":396982,"timestamp":"2026-05-21T21:00:00.000Z"} +{"doc_count":1126,"split_key":215930,"timestamp":"2026-05-21T21:00:00.000Z"} +{"doc_count":1050,"split_key":209605,"timestamp":"2026-05-21T21:00:00.000Z"} +{"doc_count":1033,"split_key":24940,"timestamp":"2026-05-21T21:00:00.000Z"} +{"doc_count":1462,"split_key":14061,"timestamp":"2026-05-21T22:00:00.000Z"} +{"doc_count":1125,"split_key":215930,"timestamp":"2026-05-21T22:00:00.000Z"} +{"doc_count":1050,"split_key":209605,"timestamp":"2026-05-21T22:00:00.000Z"} +{"doc_count":975,"split_key":24940,"timestamp":"2026-05-21T22:00:00.000Z"} +{"doc_count":931,"split_key":47890,"timestamp":"2026-05-21T22:00:00.000Z"} +{"doc_count":1605,"split_key":49870,"timestamp":"2026-05-21T23:00:00.000Z"} +{"doc_count":1368,"split_key":14061,"timestamp":"2026-05-21T23:00:00.000Z"} +{"doc_count":1158,"split_key":24940,"timestamp":"2026-05-21T23:00:00.000Z"} +{"doc_count":1128,"split_key":215930,"timestamp":"2026-05-21T23:00:00.000Z"} +{"doc_count":1048,"split_key":209605,"timestamp":"2026-05-21T23:00:00.000Z"} +{"doc_count":1985,"split_key":45102,"timestamp":"2026-05-22T00:00:00.000Z"} +{"doc_count":1449,"split_key":14061,"timestamp":"2026-05-22T00:00:00.000Z"} +{"doc_count":1131,"split_key":215930,"timestamp":"2026-05-22T00:00:00.000Z"} +{"doc_count":1087,"split_key":136646,"timestamp":"2026-05-22T00:00:00.000Z"} +{"doc_count":1050,"split_key":209605,"timestamp":"2026-05-22T00:00:00.000Z"} +{"doc_count":2064,"split_key":45102,"timestamp":"2026-05-22T01:00:00.000Z"} +{"doc_count":1476,"split_key":14061,"timestamp":"2026-05-22T01:00:00.000Z"} +{"doc_count":1289,"split_key":47890,"timestamp":"2026-05-22T01:00:00.000Z"} +{"doc_count":1128,"split_key":215930,"timestamp":"2026-05-22T01:00:00.000Z"} +{"doc_count":1072,"split_key":396982,"timestamp":"2026-05-22T01:00:00.000Z"} +{"doc_count":1444,"split_key":14061,"timestamp":"2026-05-22T02:00:00.000Z"} +{"doc_count":1110,"split_key":215930,"timestamp":"2026-05-22T02:00:00.000Z"} +{"doc_count":1074,"split_key":24940,"timestamp":"2026-05-22T02:00:00.000Z"} +{"doc_count":1044,"split_key":209605,"timestamp":"2026-05-22T02:00:00.000Z"} +{"doc_count":1030,"split_key":16509,"timestamp":"2026-05-22T02:00:00.000Z"} +{"doc_count":2220,"split_key":137899,"timestamp":"2026-05-22T03:00:00.000Z"} +{"doc_count":1577,"split_key":14061,"timestamp":"2026-05-22T03:00:00.000Z"} +{"doc_count":1482,"split_key":25369,"timestamp":"2026-05-22T03:00:00.000Z"} +{"doc_count":1141,"split_key":24940,"timestamp":"2026-05-22T03:00:00.000Z"} +{"doc_count":1120,"split_key":215930,"timestamp":"2026-05-22T03:00:00.000Z"} +{"doc_count":1676,"split_key":14061,"timestamp":"2026-05-22T04:00:00.000Z"} +{"doc_count":1535,"split_key":25369,"timestamp":"2026-05-22T04:00:00.000Z"} +{"doc_count":1494,"split_key":62068,"timestamp":"2026-05-22T04:00:00.000Z"} +{"doc_count":1197,"split_key":24940,"timestamp":"2026-05-22T04:00:00.000Z"} +{"doc_count":1103,"split_key":215930,"timestamp":"2026-05-22T04:00:00.000Z"} +{"doc_count":1861,"split_key":62068,"timestamp":"2026-05-22T05:00:00.000Z"} +{"doc_count":1689,"split_key":45102,"timestamp":"2026-05-22T05:00:00.000Z"} +{"doc_count":1621,"split_key":14061,"timestamp":"2026-05-22T05:00:00.000Z"} +{"doc_count":1542,"split_key":25369,"timestamp":"2026-05-22T05:00:00.000Z"} +{"doc_count":1146,"split_key":16509,"timestamp":"2026-05-22T05:00:00.000Z"} +{"doc_count":3157,"split_key":45102,"timestamp":"2026-05-22T06:00:00.000Z"} +{"doc_count":1734,"split_key":37963,"timestamp":"2026-05-22T06:00:00.000Z"} +{"doc_count":1553,"split_key":14061,"timestamp":"2026-05-22T06:00:00.000Z"} +{"doc_count":1536,"split_key":62068,"timestamp":"2026-05-22T06:00:00.000Z"} +{"doc_count":1289,"split_key":25369,"timestamp":"2026-05-22T06:00:00.000Z"} +{"doc_count":19860,"split_key":209334,"timestamp":"2026-05-22T07:00:00.000Z"} +{"doc_count":2711,"split_key":45102,"timestamp":"2026-05-22T07:00:00.000Z"} +{"doc_count":1683,"split_key":14061,"timestamp":"2026-05-22T07:00:00.000Z"} +{"doc_count":1510,"split_key":201401,"timestamp":"2026-05-22T07:00:00.000Z"} +{"doc_count":1272,"split_key":25369,"timestamp":"2026-05-22T07:00:00.000Z"} +{"doc_count":22510,"split_key":209334,"timestamp":"2026-05-22T08:00:00.000Z"} +{"doc_count":1632,"split_key":37963,"timestamp":"2026-05-22T08:00:00.000Z"} +{"doc_count":1628,"split_key":45102,"timestamp":"2026-05-22T08:00:00.000Z"} +{"doc_count":1586,"split_key":14061,"timestamp":"2026-05-22T08:00:00.000Z"} +{"doc_count":1379,"split_key":201401,"timestamp":"2026-05-22T08:00:00.000Z"} +{"doc_count":18583,"split_key":209334,"timestamp":"2026-05-22T09:00:00.000Z"} +{"doc_count":1662,"split_key":37963,"timestamp":"2026-05-22T09:00:00.000Z"} +{"doc_count":1509,"split_key":14061,"timestamp":"2026-05-22T09:00:00.000Z"} +{"doc_count":1106,"split_key":215930,"timestamp":"2026-05-22T09:00:00.000Z"} +{"doc_count":1074,"split_key":47890,"timestamp":"2026-05-22T09:00:00.000Z"} +{"doc_count":18757,"split_key":209334,"timestamp":"2026-05-22T10:00:00.000Z"} +{"doc_count":1622,"split_key":14061,"timestamp":"2026-05-22T10:00:00.000Z"} +{"doc_count":1485,"split_key":37963,"timestamp":"2026-05-22T10:00:00.000Z"} +{"doc_count":1099,"split_key":215930,"timestamp":"2026-05-22T10:00:00.000Z"} +{"doc_count":1089,"split_key":47890,"timestamp":"2026-05-22T10:00:00.000Z"} +{"doc_count":21824,"split_key":209334,"timestamp":"2026-05-22T11:00:00.000Z"} +{"doc_count":1620,"split_key":14061,"timestamp":"2026-05-22T11:00:00.000Z"} +{"doc_count":1387,"split_key":37963,"timestamp":"2026-05-22T11:00:00.000Z"} +{"doc_count":1097,"split_key":215930,"timestamp":"2026-05-22T11:00:00.000Z"} +{"doc_count":1032,"split_key":209605,"timestamp":"2026-05-22T11:00:00.000Z"} +{"doc_count":15033,"split_key":209334,"timestamp":"2026-05-22T12:00:00.000Z"} +{"doc_count":1454,"split_key":14061,"timestamp":"2026-05-22T12:00:00.000Z"} +{"doc_count":1373,"split_key":37963,"timestamp":"2026-05-22T12:00:00.000Z"} +{"doc_count":1086,"split_key":215930,"timestamp":"2026-05-22T12:00:00.000Z"} +{"doc_count":1033,"split_key":209605,"timestamp":"2026-05-22T12:00:00.000Z"} +{"doc_count":16202,"split_key":209334,"timestamp":"2026-05-22T13:00:00.000Z"} +{"doc_count":1760,"split_key":63949,"timestamp":"2026-05-22T13:00:00.000Z"} +{"doc_count":1494,"split_key":14061,"timestamp":"2026-05-22T13:00:00.000Z"} +{"doc_count":1123,"split_key":37963,"timestamp":"2026-05-22T13:00:00.000Z"} +{"doc_count":1070,"split_key":215930,"timestamp":"2026-05-22T13:00:00.000Z"} +{"doc_count":18107,"split_key":209334,"timestamp":"2026-05-22T14:00:00.000Z"} +{"doc_count":1547,"split_key":14061,"timestamp":"2026-05-22T14:00:00.000Z"} +{"doc_count":1183,"split_key":201401,"timestamp":"2026-05-22T14:00:00.000Z"} +{"doc_count":1079,"split_key":215930,"timestamp":"2026-05-22T14:00:00.000Z"} +{"doc_count":1014,"split_key":209605,"timestamp":"2026-05-22T14:00:00.000Z"} +{"doc_count":23135,"split_key":209334,"timestamp":"2026-05-22T15:00:00.000Z"} +{"doc_count":1418,"split_key":14061,"timestamp":"2026-05-22T15:00:00.000Z"} +{"doc_count":1331,"split_key":16509,"timestamp":"2026-05-22T15:00:00.000Z"} +{"doc_count":1202,"split_key":201401,"timestamp":"2026-05-22T15:00:00.000Z"} +{"doc_count":1082,"split_key":215930,"timestamp":"2026-05-22T15:00:00.000Z"} +{"doc_count":6942,"split_key":209334,"timestamp":"2026-05-22T16:00:00.000Z"} +{"doc_count":1841,"split_key":14061,"timestamp":"2026-05-22T16:00:00.000Z"} +{"doc_count":1079,"split_key":215930,"timestamp":"2026-05-22T16:00:00.000Z"} +{"doc_count":996,"split_key":209605,"timestamp":"2026-05-22T16:00:00.000Z"} +{"doc_count":893,"split_key":47890,"timestamp":"2026-05-22T16:00:00.000Z"} +{"doc_count":1688,"split_key":14061,"timestamp":"2026-05-22T17:00:00.000Z"} +{"doc_count":1108,"split_key":215930,"timestamp":"2026-05-22T17:00:00.000Z"} +{"doc_count":1027,"split_key":16509,"timestamp":"2026-05-22T17:00:00.000Z"} +{"doc_count":1015,"split_key":209605,"timestamp":"2026-05-22T17:00:00.000Z"} +{"doc_count":1008,"split_key":47890,"timestamp":"2026-05-22T17:00:00.000Z"} +{"doc_count":4897,"split_key":53158,"timestamp":"2026-05-22T18:00:00.000Z"} +{"doc_count":3467,"split_key":14061,"timestamp":"2026-05-22T18:00:00.000Z"} +{"doc_count":1271,"split_key":16509,"timestamp":"2026-05-22T18:00:00.000Z"} +{"doc_count":1117,"split_key":215930,"timestamp":"2026-05-22T18:00:00.000Z"} +{"doc_count":1030,"split_key":209605,"timestamp":"2026-05-22T18:00:00.000Z"} +{"doc_count":1205,"split_key":14061,"timestamp":"2026-05-22T19:00:00.000Z"} +{"doc_count":1118,"split_key":215930,"timestamp":"2026-05-22T19:00:00.000Z"} +{"doc_count":1030,"split_key":209605,"timestamp":"2026-05-22T19:00:00.000Z"} +{"doc_count":926,"split_key":47890,"timestamp":"2026-05-22T19:00:00.000Z"} +{"doc_count":761,"split_key":16509,"timestamp":"2026-05-22T19:00:00.000Z"} +{"doc_count":1662,"split_key":14061,"timestamp":"2026-05-22T20:00:00.000Z"} +{"doc_count":1115,"split_key":215930,"timestamp":"2026-05-22T20:00:00.000Z"} +{"doc_count":1083,"split_key":51396,"timestamp":"2026-05-22T20:00:00.000Z"} +{"doc_count":1031,"split_key":209605,"timestamp":"2026-05-22T20:00:00.000Z"} +{"doc_count":1023,"split_key":47890,"timestamp":"2026-05-22T20:00:00.000Z"} +{"doc_count":2655,"split_key":14061,"timestamp":"2026-05-22T21:00:00.000Z"} +{"doc_count":1115,"split_key":215930,"timestamp":"2026-05-22T21:00:00.000Z"} +{"doc_count":1029,"split_key":209605,"timestamp":"2026-05-22T21:00:00.000Z"} +{"doc_count":991,"split_key":47890,"timestamp":"2026-05-22T21:00:00.000Z"} +{"doc_count":968,"split_key":16509,"timestamp":"2026-05-22T21:00:00.000Z"} +{"doc_count":1342,"split_key":14061,"timestamp":"2026-05-22T22:00:00.000Z"} +{"doc_count":1216,"split_key":205759,"timestamp":"2026-05-22T22:00:00.000Z"} +{"doc_count":1107,"split_key":215930,"timestamp":"2026-05-22T22:00:00.000Z"} +{"doc_count":1094,"split_key":396982,"timestamp":"2026-05-22T22:00:00.000Z"} +{"doc_count":1024,"split_key":209605,"timestamp":"2026-05-22T22:00:00.000Z"} +{"doc_count":1114,"split_key":215930,"timestamp":"2026-05-22T23:00:00.000Z"} +{"doc_count":1098,"split_key":205759,"timestamp":"2026-05-22T23:00:00.000Z"} +{"doc_count":1030,"split_key":14061,"timestamp":"2026-05-22T23:00:00.000Z"} +{"doc_count":1026,"split_key":209605,"timestamp":"2026-05-22T23:00:00.000Z"} +{"doc_count":990,"split_key":37963,"timestamp":"2026-05-22T23:00:00.000Z"} +{"doc_count":1495,"split_key":205759,"timestamp":"2026-05-23T00:00:00.000Z"} +{"doc_count":1187,"split_key":37963,"timestamp":"2026-05-23T00:00:00.000Z"} +{"doc_count":1120,"split_key":14061,"timestamp":"2026-05-23T00:00:00.000Z"} +{"doc_count":1103,"split_key":215930,"timestamp":"2026-05-23T00:00:00.000Z"} +{"doc_count":1025,"split_key":209605,"timestamp":"2026-05-23T00:00:00.000Z"} +{"doc_count":1513,"split_key":205759,"timestamp":"2026-05-23T01:00:00.000Z"} +{"doc_count":1112,"split_key":215930,"timestamp":"2026-05-23T01:00:00.000Z"} +{"doc_count":1029,"split_key":14061,"timestamp":"2026-05-23T01:00:00.000Z"} +{"doc_count":1027,"split_key":209605,"timestamp":"2026-05-23T01:00:00.000Z"} +{"doc_count":944,"split_key":47890,"timestamp":"2026-05-23T01:00:00.000Z"} +{"doc_count":1364,"split_key":14061,"timestamp":"2026-05-23T02:00:00.000Z"} +{"doc_count":1097,"split_key":215930,"timestamp":"2026-05-23T02:00:00.000Z"} +{"doc_count":1018,"split_key":209605,"timestamp":"2026-05-23T02:00:00.000Z"} +{"doc_count":1013,"split_key":205759,"timestamp":"2026-05-23T02:00:00.000Z"} +{"doc_count":927,"split_key":47890,"timestamp":"2026-05-23T02:00:00.000Z"} +{"doc_count":1241,"split_key":14061,"timestamp":"2026-05-23T03:00:00.000Z"} +{"doc_count":1237,"split_key":37963,"timestamp":"2026-05-23T03:00:00.000Z"} +{"doc_count":1100,"split_key":215930,"timestamp":"2026-05-23T03:00:00.000Z"} +{"doc_count":1022,"split_key":209605,"timestamp":"2026-05-23T03:00:00.000Z"} +{"doc_count":768,"split_key":47890,"timestamp":"2026-05-23T03:00:00.000Z"} +{"doc_count":2305,"split_key":49870,"timestamp":"2026-05-23T04:00:00.000Z"} +{"doc_count":1176,"split_key":37963,"timestamp":"2026-05-23T04:00:00.000Z"} +{"doc_count":1095,"split_key":215930,"timestamp":"2026-05-23T04:00:00.000Z"} +{"doc_count":1050,"split_key":14061,"timestamp":"2026-05-23T04:00:00.000Z"} +{"doc_count":1006,"split_key":209605,"timestamp":"2026-05-23T04:00:00.000Z"} +{"doc_count":1720,"split_key":49870,"timestamp":"2026-05-23T05:00:00.000Z"} +{"doc_count":1243,"split_key":16509,"timestamp":"2026-05-23T05:00:00.000Z"} +{"doc_count":1090,"split_key":37963,"timestamp":"2026-05-23T05:00:00.000Z"} +{"doc_count":1014,"split_key":14061,"timestamp":"2026-05-23T05:00:00.000Z"} +{"doc_count":1009,"split_key":209605,"timestamp":"2026-05-23T05:00:00.000Z"} +{"doc_count":1817,"split_key":49870,"timestamp":"2026-05-23T06:00:00.000Z"} +{"doc_count":1423,"split_key":25369,"timestamp":"2026-05-23T06:00:00.000Z"} +{"doc_count":1058,"split_key":14061,"timestamp":"2026-05-23T06:00:00.000Z"} +{"doc_count":1018,"split_key":209605,"timestamp":"2026-05-23T06:00:00.000Z"} +{"doc_count":988,"split_key":47890,"timestamp":"2026-05-23T06:00:00.000Z"} +{"doc_count":19184,"split_key":209334,"timestamp":"2026-05-23T07:00:00.000Z"} +{"doc_count":3328,"split_key":49870,"timestamp":"2026-05-23T07:00:00.000Z"} +{"doc_count":1519,"split_key":25369,"timestamp":"2026-05-23T07:00:00.000Z"} +{"doc_count":1356,"split_key":201401,"timestamp":"2026-05-23T07:00:00.000Z"} +{"doc_count":1236,"split_key":16509,"timestamp":"2026-05-23T07:00:00.000Z"} +{"doc_count":10388,"split_key":211590,"timestamp":"2026-05-23T08:00:00.000Z"} +{"doc_count":9646,"split_key":209334,"timestamp":"2026-05-23T08:00:00.000Z"} +{"doc_count":1650,"split_key":141995,"timestamp":"2026-05-23T08:00:00.000Z"} +{"doc_count":1370,"split_key":25369,"timestamp":"2026-05-23T08:00:00.000Z"} +{"doc_count":1091,"split_key":49870,"timestamp":"2026-05-23T08:00:00.000Z"} +{"doc_count":3742,"split_key":211590,"timestamp":"2026-05-23T09:00:00.000Z"} +{"doc_count":2078,"split_key":209334,"timestamp":"2026-05-23T09:00:00.000Z"} +{"doc_count":1426,"split_key":25369,"timestamp":"2026-05-23T09:00:00.000Z"} +{"doc_count":1088,"split_key":215930,"timestamp":"2026-05-23T09:00:00.000Z"} +{"doc_count":1070,"split_key":37963,"timestamp":"2026-05-23T09:00:00.000Z"} +{"doc_count":57351,"split_key":209334,"timestamp":"2026-05-23T10:00:00.000Z"} +{"doc_count":1522,"split_key":201401,"timestamp":"2026-05-23T10:00:00.000Z"} +{"doc_count":1475,"split_key":25369,"timestamp":"2026-05-23T10:00:00.000Z"} +{"doc_count":1051,"split_key":215930,"timestamp":"2026-05-23T10:00:00.000Z"} +{"doc_count":1024,"split_key":37963,"timestamp":"2026-05-23T10:00:00.000Z"} +{"doc_count":25410,"split_key":209334,"timestamp":"2026-05-23T11:00:00.000Z"} +{"doc_count":1364,"split_key":201401,"timestamp":"2026-05-23T11:00:00.000Z"} +{"doc_count":1086,"split_key":215930,"timestamp":"2026-05-23T11:00:00.000Z"} +{"doc_count":1012,"split_key":37963,"timestamp":"2026-05-23T11:00:00.000Z"} +{"doc_count":997,"split_key":209605,"timestamp":"2026-05-23T11:00:00.000Z"} +{"doc_count":29724,"split_key":209334,"timestamp":"2026-05-23T12:00:00.000Z"} +{"doc_count":1688,"split_key":201401,"timestamp":"2026-05-23T12:00:00.000Z"} +{"doc_count":1329,"split_key":16509,"timestamp":"2026-05-23T12:00:00.000Z"} +{"doc_count":1161,"split_key":14061,"timestamp":"2026-05-23T12:00:00.000Z"} +{"doc_count":1076,"split_key":215930,"timestamp":"2026-05-23T12:00:00.000Z"} +{"doc_count":30775,"split_key":209334,"timestamp":"2026-05-23T13:00:00.000Z"} +{"doc_count":1847,"split_key":201401,"timestamp":"2026-05-23T13:00:00.000Z"} +{"doc_count":1076,"split_key":215930,"timestamp":"2026-05-23T13:00:00.000Z"} +{"doc_count":995,"split_key":14061,"timestamp":"2026-05-23T13:00:00.000Z"} +{"doc_count":992,"split_key":209605,"timestamp":"2026-05-23T13:00:00.000Z"} +{"doc_count":19092,"split_key":209334,"timestamp":"2026-05-23T14:00:00.000Z"} +{"doc_count":1067,"split_key":215930,"timestamp":"2026-05-23T14:00:00.000Z"} +{"doc_count":1053,"split_key":14061,"timestamp":"2026-05-23T14:00:00.000Z"} +{"doc_count":1027,"split_key":201401,"timestamp":"2026-05-23T14:00:00.000Z"} +{"doc_count":1012,"split_key":24940,"timestamp":"2026-05-23T14:00:00.000Z"} +{"doc_count":1723,"split_key":215930,"timestamp":"2026-05-23T15:00:00.000Z"} +{"doc_count":1585,"split_key":209605,"timestamp":"2026-05-23T15:00:00.000Z"} +{"doc_count":1418,"split_key":14061,"timestamp":"2026-05-23T15:00:00.000Z"} +{"doc_count":1212,"split_key":45102,"timestamp":"2026-05-23T15:00:00.000Z"} +{"doc_count":1108,"split_key":25369,"timestamp":"2026-05-23T15:00:00.000Z"} +{"doc_count":2335,"split_key":215930,"timestamp":"2026-05-23T16:00:00.000Z"} +{"doc_count":1933,"split_key":209605,"timestamp":"2026-05-23T16:00:00.000Z"} +{"doc_count":1192,"split_key":51396,"timestamp":"2026-05-23T16:00:00.000Z"} +{"doc_count":1043,"split_key":24940,"timestamp":"2026-05-23T16:00:00.000Z"} +{"doc_count":966,"split_key":14061,"timestamp":"2026-05-23T16:00:00.000Z"} +{"doc_count":2386,"split_key":215930,"timestamp":"2026-05-23T17:00:00.000Z"} +{"doc_count":1440,"split_key":209605,"timestamp":"2026-05-23T17:00:00.000Z"} +{"doc_count":1077,"split_key":24940,"timestamp":"2026-05-23T17:00:00.000Z"} +{"doc_count":1006,"split_key":47890,"timestamp":"2026-05-23T17:00:00.000Z"} +{"doc_count":946,"split_key":37963,"timestamp":"2026-05-23T17:00:00.000Z"} +{"doc_count":2425,"split_key":215930,"timestamp":"2026-05-23T18:00:00.000Z"} +{"doc_count":1435,"split_key":209605,"timestamp":"2026-05-23T18:00:00.000Z"} +{"doc_count":1062,"split_key":37963,"timestamp":"2026-05-23T18:00:00.000Z"} +{"doc_count":1017,"split_key":47890,"timestamp":"2026-05-23T18:00:00.000Z"} +{"doc_count":997,"split_key":14061,"timestamp":"2026-05-23T18:00:00.000Z"} +{"doc_count":2434,"split_key":215930,"timestamp":"2026-05-23T19:00:00.000Z"} +{"doc_count":1683,"split_key":37963,"timestamp":"2026-05-23T19:00:00.000Z"} +{"doc_count":1436,"split_key":209605,"timestamp":"2026-05-23T19:00:00.000Z"} +{"doc_count":1426,"split_key":14061,"timestamp":"2026-05-23T19:00:00.000Z"} +{"doc_count":1095,"split_key":24940,"timestamp":"2026-05-23T19:00:00.000Z"} +{"doc_count":2456,"split_key":215930,"timestamp":"2026-05-23T20:00:00.000Z"} +{"doc_count":1414,"split_key":209605,"timestamp":"2026-05-23T20:00:00.000Z"} +{"doc_count":1182,"split_key":14061,"timestamp":"2026-05-23T20:00:00.000Z"} +{"doc_count":1016,"split_key":47890,"timestamp":"2026-05-23T20:00:00.000Z"} +{"doc_count":1009,"split_key":24940,"timestamp":"2026-05-23T20:00:00.000Z"} +{"doc_count":4032,"split_key":211590,"timestamp":"2026-05-23T21:00:00.000Z"} +{"doc_count":2492,"split_key":215930,"timestamp":"2026-05-23T21:00:00.000Z"} +{"doc_count":1443,"split_key":209605,"timestamp":"2026-05-23T21:00:00.000Z"} +{"doc_count":1198,"split_key":45102,"timestamp":"2026-05-23T21:00:00.000Z"} +{"doc_count":1009,"split_key":24940,"timestamp":"2026-05-23T21:00:00.000Z"} +{"doc_count":2572,"split_key":45102,"timestamp":"2026-05-23T22:00:00.000Z"} +{"doc_count":2495,"split_key":215930,"timestamp":"2026-05-23T22:00:00.000Z"} +{"doc_count":1447,"split_key":209605,"timestamp":"2026-05-23T22:00:00.000Z"} +{"doc_count":1135,"split_key":24940,"timestamp":"2026-05-23T22:00:00.000Z"} +{"doc_count":1083,"split_key":14061,"timestamp":"2026-05-23T22:00:00.000Z"} +{"doc_count":2577,"split_key":45102,"timestamp":"2026-05-23T23:00:00.000Z"} +{"doc_count":2492,"split_key":215930,"timestamp":"2026-05-23T23:00:00.000Z"} +{"doc_count":1438,"split_key":209605,"timestamp":"2026-05-23T23:00:00.000Z"} +{"doc_count":1042,"split_key":47890,"timestamp":"2026-05-23T23:00:00.000Z"} +{"doc_count":961,"split_key":37963,"timestamp":"2026-05-23T23:00:00.000Z"} +{"doc_count":2500,"split_key":215930,"timestamp":"2026-05-24T00:00:00.000Z"} +{"doc_count":1927,"split_key":45102,"timestamp":"2026-05-24T00:00:00.000Z"} +{"doc_count":1405,"split_key":209605,"timestamp":"2026-05-24T00:00:00.000Z"} +{"doc_count":1117,"split_key":14061,"timestamp":"2026-05-24T00:00:00.000Z"} +{"doc_count":1101,"split_key":24940,"timestamp":"2026-05-24T00:00:00.000Z"} +{"doc_count":2485,"split_key":215930,"timestamp":"2026-05-24T01:00:00.000Z"} +{"doc_count":1532,"split_key":396982,"timestamp":"2026-05-24T01:00:00.000Z"} +{"doc_count":1443,"split_key":209605,"timestamp":"2026-05-24T01:00:00.000Z"} +{"doc_count":1163,"split_key":14061,"timestamp":"2026-05-24T01:00:00.000Z"} +{"doc_count":1126,"split_key":24940,"timestamp":"2026-05-24T01:00:00.000Z"} +{"doc_count":2481,"split_key":215930,"timestamp":"2026-05-24T02:00:00.000Z"} +{"doc_count":1431,"split_key":209605,"timestamp":"2026-05-24T02:00:00.000Z"} +{"doc_count":1196,"split_key":396982,"timestamp":"2026-05-24T02:00:00.000Z"} +{"doc_count":1142,"split_key":14061,"timestamp":"2026-05-24T02:00:00.000Z"} +{"doc_count":1111,"split_key":24940,"timestamp":"2026-05-24T02:00:00.000Z"} +{"doc_count":2473,"split_key":215930,"timestamp":"2026-05-24T03:00:00.000Z"} +{"doc_count":1432,"split_key":209605,"timestamp":"2026-05-24T03:00:00.000Z"} +{"doc_count":1415,"split_key":16509,"timestamp":"2026-05-24T03:00:00.000Z"} +{"doc_count":1377,"split_key":45102,"timestamp":"2026-05-24T03:00:00.000Z"} +{"doc_count":1284,"split_key":14061,"timestamp":"2026-05-24T03:00:00.000Z"} +{"doc_count":11469,"split_key":211590,"timestamp":"2026-05-24T04:00:00.000Z"} +{"doc_count":3398,"split_key":45102,"timestamp":"2026-05-24T04:00:00.000Z"} +{"doc_count":1673,"split_key":51396,"timestamp":"2026-05-24T04:00:00.000Z"} +{"doc_count":1607,"split_key":215930,"timestamp":"2026-05-24T04:00:00.000Z"} +{"doc_count":1482,"split_key":14061,"timestamp":"2026-05-24T04:00:00.000Z"} +{"doc_count":3384,"split_key":45102,"timestamp":"2026-05-24T05:00:00.000Z"} +{"doc_count":3016,"split_key":211590,"timestamp":"2026-05-24T05:00:00.000Z"} +{"doc_count":1388,"split_key":209605,"timestamp":"2026-05-24T05:00:00.000Z"} +{"doc_count":1306,"split_key":16509,"timestamp":"2026-05-24T05:00:00.000Z"} +{"doc_count":1191,"split_key":14061,"timestamp":"2026-05-24T05:00:00.000Z"} +{"doc_count":1390,"split_key":209605,"timestamp":"2026-05-24T06:00:00.000Z"} +{"doc_count":1285,"split_key":14061,"timestamp":"2026-05-24T06:00:00.000Z"} +{"doc_count":1251,"split_key":37963,"timestamp":"2026-05-24T06:00:00.000Z"} +{"doc_count":1166,"split_key":24940,"timestamp":"2026-05-24T06:00:00.000Z"} +{"doc_count":1076,"split_key":215930,"timestamp":"2026-05-24T06:00:00.000Z"} +{"doc_count":17510,"split_key":209334,"timestamp":"2026-05-24T07:00:00.000Z"} +{"doc_count":1684,"split_key":209605,"timestamp":"2026-05-24T07:00:00.000Z"} +{"doc_count":1393,"split_key":201401,"timestamp":"2026-05-24T07:00:00.000Z"} +{"doc_count":1280,"split_key":37963,"timestamp":"2026-05-24T07:00:00.000Z"} +{"doc_count":1226,"split_key":14061,"timestamp":"2026-05-24T07:00:00.000Z"} +{"doc_count":24872,"split_key":209334,"timestamp":"2026-05-24T08:00:00.000Z"} +{"doc_count":2096,"split_key":209605,"timestamp":"2026-05-24T08:00:00.000Z"} +{"doc_count":1433,"split_key":201401,"timestamp":"2026-05-24T08:00:00.000Z"} +{"doc_count":1365,"split_key":16509,"timestamp":"2026-05-24T08:00:00.000Z"} +{"doc_count":1361,"split_key":14061,"timestamp":"2026-05-24T08:00:00.000Z"} +{"doc_count":23893,"split_key":209334,"timestamp":"2026-05-24T09:00:00.000Z"} +{"doc_count":2079,"split_key":209605,"timestamp":"2026-05-24T09:00:00.000Z"} +{"doc_count":1642,"split_key":16509,"timestamp":"2026-05-24T09:00:00.000Z"} +{"doc_count":1463,"split_key":201401,"timestamp":"2026-05-24T09:00:00.000Z"} +{"doc_count":1440,"split_key":25369,"timestamp":"2026-05-24T09:00:00.000Z"} +{"doc_count":23397,"split_key":209334,"timestamp":"2026-05-24T10:00:00.000Z"} +{"doc_count":18785,"split_key":1218,"timestamp":"2026-05-24T10:00:00.000Z"} +{"doc_count":2123,"split_key":209605,"timestamp":"2026-05-24T10:00:00.000Z"} +{"doc_count":1317,"split_key":201401,"timestamp":"2026-05-24T10:00:00.000Z"} +{"doc_count":1174,"split_key":16509,"timestamp":"2026-05-24T10:00:00.000Z"} +{"doc_count":25747,"split_key":209334,"timestamp":"2026-05-24T11:00:00.000Z"} +{"doc_count":21708,"split_key":1218,"timestamp":"2026-05-24T11:00:00.000Z"} +{"doc_count":2020,"split_key":209605,"timestamp":"2026-05-24T11:00:00.000Z"} +{"doc_count":1737,"split_key":398101,"timestamp":"2026-05-24T11:00:00.000Z"} +{"doc_count":1401,"split_key":201401,"timestamp":"2026-05-24T11:00:00.000Z"} +{"doc_count":26469,"split_key":209334,"timestamp":"2026-05-24T12:00:00.000Z"} +{"doc_count":11363,"split_key":1218,"timestamp":"2026-05-24T12:00:00.000Z"} +{"doc_count":2101,"split_key":209605,"timestamp":"2026-05-24T12:00:00.000Z"} +{"doc_count":1457,"split_key":201401,"timestamp":"2026-05-24T12:00:00.000Z"} +{"doc_count":1226,"split_key":398101,"timestamp":"2026-05-24T12:00:00.000Z"} +{"doc_count":30687,"split_key":209334,"timestamp":"2026-05-24T13:00:00.000Z"} +{"doc_count":7987,"split_key":1218,"timestamp":"2026-05-24T13:00:00.000Z"} +{"doc_count":2107,"split_key":209605,"timestamp":"2026-05-24T13:00:00.000Z"} +{"doc_count":1697,"split_key":201401,"timestamp":"2026-05-24T13:00:00.000Z"} +{"doc_count":1487,"split_key":16509,"timestamp":"2026-05-24T13:00:00.000Z"} +{"doc_count":11178,"split_key":209334,"timestamp":"2026-05-24T14:00:00.000Z"} +{"doc_count":6942,"split_key":1218,"timestamp":"2026-05-24T14:00:00.000Z"} +{"doc_count":2064,"split_key":209605,"timestamp":"2026-05-24T14:00:00.000Z"} +{"doc_count":1386,"split_key":45102,"timestamp":"2026-05-24T14:00:00.000Z"} +{"doc_count":1230,"split_key":51396,"timestamp":"2026-05-24T14:00:00.000Z"} +{"doc_count":9982,"split_key":211590,"timestamp":"2026-05-24T15:00:00.000Z"} +{"doc_count":6692,"split_key":1218,"timestamp":"2026-05-24T15:00:00.000Z"} +{"doc_count":2025,"split_key":209605,"timestamp":"2026-05-24T15:00:00.000Z"} +{"doc_count":1450,"split_key":14061,"timestamp":"2026-05-24T15:00:00.000Z"} +{"doc_count":1253,"split_key":45102,"timestamp":"2026-05-24T15:00:00.000Z"} +{"doc_count":6456,"split_key":1218,"timestamp":"2026-05-24T16:00:00.000Z"} +{"doc_count":3058,"split_key":211590,"timestamp":"2026-05-24T16:00:00.000Z"} +{"doc_count":2851,"split_key":202412,"timestamp":"2026-05-24T16:00:00.000Z"} +{"doc_count":2098,"split_key":209605,"timestamp":"2026-05-24T16:00:00.000Z"} +{"doc_count":1747,"split_key":16509,"timestamp":"2026-05-24T16:00:00.000Z"} +{"doc_count":6423,"split_key":1218,"timestamp":"2026-05-24T17:00:00.000Z"} +{"doc_count":2101,"split_key":209605,"timestamp":"2026-05-24T17:00:00.000Z"} +{"doc_count":1393,"split_key":14061,"timestamp":"2026-05-24T17:00:00.000Z"} +{"doc_count":1172,"split_key":47890,"timestamp":"2026-05-24T17:00:00.000Z"} +{"doc_count":1142,"split_key":16509,"timestamp":"2026-05-24T17:00:00.000Z"} +{"doc_count":6579,"split_key":1218,"timestamp":"2026-05-24T18:00:00.000Z"} +{"doc_count":2022,"split_key":209605,"timestamp":"2026-05-24T18:00:00.000Z"} +{"doc_count":1358,"split_key":14061,"timestamp":"2026-05-24T18:00:00.000Z"} +{"doc_count":1017,"split_key":47890,"timestamp":"2026-05-24T18:00:00.000Z"} +{"doc_count":1016,"split_key":16509,"timestamp":"2026-05-24T18:00:00.000Z"} +{"doc_count":6405,"split_key":1218,"timestamp":"2026-05-24T19:00:00.000Z"} +{"doc_count":2030,"split_key":209605,"timestamp":"2026-05-24T19:00:00.000Z"} +{"doc_count":1616,"split_key":14061,"timestamp":"2026-05-24T19:00:00.000Z"} +{"doc_count":1284,"split_key":16509,"timestamp":"2026-05-24T19:00:00.000Z"} +{"doc_count":791,"split_key":47890,"timestamp":"2026-05-24T19:00:00.000Z"} +{"doc_count":6415,"split_key":1218,"timestamp":"2026-05-24T20:00:00.000Z"} +{"doc_count":2090,"split_key":209605,"timestamp":"2026-05-24T20:00:00.000Z"} +{"doc_count":1238,"split_key":14061,"timestamp":"2026-05-24T20:00:00.000Z"} +{"doc_count":1211,"split_key":16509,"timestamp":"2026-05-24T20:00:00.000Z"} +{"doc_count":863,"split_key":47890,"timestamp":"2026-05-24T20:00:00.000Z"} +{"doc_count":6390,"split_key":1218,"timestamp":"2026-05-24T21:00:00.000Z"} +{"doc_count":2107,"split_key":209605,"timestamp":"2026-05-24T21:00:00.000Z"} +{"doc_count":1263,"split_key":45102,"timestamp":"2026-05-24T21:00:00.000Z"} +{"doc_count":1252,"split_key":16509,"timestamp":"2026-05-24T21:00:00.000Z"} +{"doc_count":1058,"split_key":14061,"timestamp":"2026-05-24T21:00:00.000Z"} +{"doc_count":6598,"split_key":1218,"timestamp":"2026-05-24T22:00:00.000Z"} +{"doc_count":2032,"split_key":209605,"timestamp":"2026-05-24T22:00:00.000Z"} +{"doc_count":1260,"split_key":45102,"timestamp":"2026-05-24T22:00:00.000Z"} +{"doc_count":1060,"split_key":16509,"timestamp":"2026-05-24T22:00:00.000Z"} +{"doc_count":1033,"split_key":14061,"timestamp":"2026-05-24T22:00:00.000Z"} +{"doc_count":13503,"split_key":63949,"timestamp":"2026-05-24T23:00:00.000Z"} +{"doc_count":6364,"split_key":1218,"timestamp":"2026-05-24T23:00:00.000Z"} +{"doc_count":4106,"split_key":211590,"timestamp":"2026-05-24T23:00:00.000Z"} +{"doc_count":2091,"split_key":209605,"timestamp":"2026-05-24T23:00:00.000Z"} +{"doc_count":1274,"split_key":45102,"timestamp":"2026-05-24T23:00:00.000Z"} +{"doc_count":31665,"split_key":63949,"timestamp":"2026-05-25T00:00:00.000Z"} +{"doc_count":11072,"split_key":1218,"timestamp":"2026-05-25T00:00:00.000Z"} +{"doc_count":10008,"split_key":14987,"timestamp":"2026-05-25T00:00:00.000Z"} +{"doc_count":2091,"split_key":209605,"timestamp":"2026-05-25T00:00:00.000Z"} +{"doc_count":1246,"split_key":45102,"timestamp":"2026-05-25T00:00:00.000Z"} +{"doc_count":39077,"split_key":1218,"timestamp":"2026-05-25T01:00:00.000Z"} +{"doc_count":15601,"split_key":63949,"timestamp":"2026-05-25T01:00:00.000Z"} +{"doc_count":2680,"split_key":14987,"timestamp":"2026-05-25T01:00:00.000Z"} +{"doc_count":2098,"split_key":209605,"timestamp":"2026-05-25T01:00:00.000Z"} +{"doc_count":1314,"split_key":45102,"timestamp":"2026-05-25T01:00:00.000Z"} +{"doc_count":2086,"split_key":209605,"timestamp":"2026-05-25T02:00:00.000Z"} +{"doc_count":1268,"split_key":14061,"timestamp":"2026-05-25T02:00:00.000Z"} +{"doc_count":1046,"split_key":25369,"timestamp":"2026-05-25T02:00:00.000Z"} +{"doc_count":671,"split_key":47890,"timestamp":"2026-05-25T02:00:00.000Z"} +{"doc_count":630,"split_key":24323,"timestamp":"2026-05-25T02:00:00.000Z"} +{"doc_count":2012,"split_key":209605,"timestamp":"2026-05-25T03:00:00.000Z"} +{"doc_count":1155,"split_key":14061,"timestamp":"2026-05-25T03:00:00.000Z"} +{"doc_count":964,"split_key":47890,"timestamp":"2026-05-25T03:00:00.000Z"} +{"doc_count":617,"split_key":24323,"timestamp":"2026-05-25T03:00:00.000Z"} +{"doc_count":558,"split_key":25369,"timestamp":"2026-05-25T03:00:00.000Z"} +{"doc_count":2054,"split_key":209605,"timestamp":"2026-05-25T04:00:00.000Z"} +{"doc_count":1236,"split_key":14061,"timestamp":"2026-05-25T04:00:00.000Z"} +{"doc_count":939,"split_key":47890,"timestamp":"2026-05-25T04:00:00.000Z"} +{"doc_count":763,"split_key":16509,"timestamp":"2026-05-25T04:00:00.000Z"} +{"doc_count":706,"split_key":396982,"timestamp":"2026-05-25T04:00:00.000Z"} +{"doc_count":2089,"split_key":209605,"timestamp":"2026-05-25T05:00:00.000Z"} +{"doc_count":1081,"split_key":14061,"timestamp":"2026-05-25T05:00:00.000Z"} +{"doc_count":878,"split_key":396982,"timestamp":"2026-05-25T05:00:00.000Z"} +{"doc_count":817,"split_key":47890,"timestamp":"2026-05-25T05:00:00.000Z"} +{"doc_count":576,"split_key":24323,"timestamp":"2026-05-25T05:00:00.000Z"} +{"doc_count":2070,"split_key":209605,"timestamp":"2026-05-25T06:00:00.000Z"} +{"doc_count":1178,"split_key":215930,"timestamp":"2026-05-25T06:00:00.000Z"} +{"doc_count":1006,"split_key":14061,"timestamp":"2026-05-25T06:00:00.000Z"} +{"doc_count":963,"split_key":47890,"timestamp":"2026-05-25T06:00:00.000Z"} +{"doc_count":558,"split_key":24323,"timestamp":"2026-05-25T06:00:00.000Z"} +{"doc_count":20543,"split_key":209334,"timestamp":"2026-05-25T07:00:00.000Z"} +{"doc_count":2851,"split_key":4134,"timestamp":"2026-05-25T07:00:00.000Z"} +{"doc_count":2072,"split_key":209605,"timestamp":"2026-05-25T07:00:00.000Z"} +{"doc_count":2064,"split_key":215930,"timestamp":"2026-05-25T07:00:00.000Z"} +{"doc_count":1420,"split_key":201401,"timestamp":"2026-05-25T07:00:00.000Z"} +{"doc_count":11898,"split_key":209334,"timestamp":"2026-05-25T08:00:00.000Z"} +{"doc_count":7977,"split_key":4134,"timestamp":"2026-05-25T08:00:00.000Z"} +{"doc_count":2089,"split_key":209605,"timestamp":"2026-05-25T08:00:00.000Z"} +{"doc_count":1476,"split_key":215930,"timestamp":"2026-05-25T08:00:00.000Z"} +{"doc_count":1158,"split_key":51396,"timestamp":"2026-05-25T08:00:00.000Z"} +{"doc_count":3137,"split_key":211590,"timestamp":"2026-05-25T09:00:00.000Z"} +{"doc_count":2074,"split_key":209605,"timestamp":"2026-05-25T09:00:00.000Z"} +{"doc_count":1933,"split_key":209334,"timestamp":"2026-05-25T09:00:00.000Z"} +{"doc_count":1095,"split_key":51396,"timestamp":"2026-05-25T09:00:00.000Z"} +{"doc_count":1090,"split_key":14061,"timestamp":"2026-05-25T09:00:00.000Z"} +{"doc_count":2056,"split_key":209605,"timestamp":"2026-05-25T10:00:00.000Z"} +{"doc_count":1263,"split_key":209334,"timestamp":"2026-05-25T10:00:00.000Z"} +{"doc_count":1236,"split_key":14061,"timestamp":"2026-05-25T10:00:00.000Z"} +{"doc_count":956,"split_key":47890,"timestamp":"2026-05-25T10:00:00.000Z"} +{"doc_count":567,"split_key":16509,"timestamp":"2026-05-25T10:00:00.000Z"} +{"doc_count":2377,"split_key":209334,"timestamp":"2026-05-25T11:00:00.000Z"} +{"doc_count":2053,"split_key":209605,"timestamp":"2026-05-25T11:00:00.000Z"} +{"doc_count":1345,"split_key":14061,"timestamp":"2026-05-25T11:00:00.000Z"} +{"doc_count":902,"split_key":37963,"timestamp":"2026-05-25T11:00:00.000Z"} +{"doc_count":841,"split_key":47890,"timestamp":"2026-05-25T11:00:00.000Z"} +{"doc_count":2029,"split_key":209605,"timestamp":"2026-05-25T12:00:00.000Z"} +{"doc_count":1940,"split_key":209334,"timestamp":"2026-05-25T12:00:00.000Z"} +{"doc_count":1411,"split_key":37963,"timestamp":"2026-05-25T12:00:00.000Z"} +{"doc_count":1373,"split_key":14061,"timestamp":"2026-05-25T12:00:00.000Z"} +{"doc_count":938,"split_key":47890,"timestamp":"2026-05-25T12:00:00.000Z"} +{"doc_count":2100,"split_key":209334,"timestamp":"2026-05-25T13:00:00.000Z"} +{"doc_count":2048,"split_key":209605,"timestamp":"2026-05-25T13:00:00.000Z"} +{"doc_count":1913,"split_key":138746,"timestamp":"2026-05-25T13:00:00.000Z"} +{"doc_count":1367,"split_key":14061,"timestamp":"2026-05-25T13:00:00.000Z"} +{"doc_count":1255,"split_key":37963,"timestamp":"2026-05-25T13:00:00.000Z"} +{"doc_count":6355,"split_key":211590,"timestamp":"2026-05-25T14:00:00.000Z"} +{"doc_count":4596,"split_key":209334,"timestamp":"2026-05-25T14:00:00.000Z"} +{"doc_count":2045,"split_key":209605,"timestamp":"2026-05-25T14:00:00.000Z"} +{"doc_count":1195,"split_key":138746,"timestamp":"2026-05-25T14:00:00.000Z"} +{"doc_count":964,"split_key":37963,"timestamp":"2026-05-25T14:00:00.000Z"} +{"doc_count":5664,"split_key":211590,"timestamp":"2026-05-25T15:00:00.000Z"} +{"doc_count":3643,"split_key":209334,"timestamp":"2026-05-25T15:00:00.000Z"} +{"doc_count":905,"split_key":209605,"timestamp":"2026-05-25T15:00:00.000Z"} +{"doc_count":789,"split_key":47890,"timestamp":"2026-05-25T15:00:00.000Z"} +{"doc_count":787,"split_key":138746,"timestamp":"2026-05-25T15:00:00.000Z"} +{"doc_count":2153,"split_key":209334,"timestamp":"2026-05-25T16:00:00.000Z"} +{"doc_count":834,"split_key":47890,"timestamp":"2026-05-25T16:00:00.000Z"} +{"doc_count":623,"split_key":16509,"timestamp":"2026-05-25T16:00:00.000Z"} +{"doc_count":544,"split_key":14061,"timestamp":"2026-05-25T16:00:00.000Z"} +{"doc_count":463,"split_key":24323,"timestamp":"2026-05-25T16:00:00.000Z"} +{"doc_count":5426,"split_key":209334,"timestamp":"2026-05-25T17:00:00.000Z"} +{"doc_count":879,"split_key":47890,"timestamp":"2026-05-25T17:00:00.000Z"} +{"doc_count":737,"split_key":51396,"timestamp":"2026-05-25T17:00:00.000Z"} +{"doc_count":716,"split_key":16509,"timestamp":"2026-05-25T17:00:00.000Z"} +{"doc_count":524,"split_key":396982,"timestamp":"2026-05-25T17:00:00.000Z"} +{"doc_count":884,"split_key":51396,"timestamp":"2026-05-25T18:00:00.000Z"} +{"doc_count":765,"split_key":47890,"timestamp":"2026-05-25T18:00:00.000Z"} +{"doc_count":613,"split_key":396982,"timestamp":"2026-05-25T18:00:00.000Z"} +{"doc_count":577,"split_key":16509,"timestamp":"2026-05-25T18:00:00.000Z"} +{"doc_count":498,"split_key":23724,"timestamp":"2026-05-25T18:00:00.000Z"} +{"doc_count":7688,"split_key":211590,"timestamp":"2026-05-25T19:00:00.000Z"} +{"doc_count":2820,"split_key":28260,"timestamp":"2026-05-25T19:00:00.000Z"} +{"doc_count":921,"split_key":14061,"timestamp":"2026-05-25T19:00:00.000Z"} +{"doc_count":893,"split_key":47890,"timestamp":"2026-05-25T19:00:00.000Z"} +{"doc_count":869,"split_key":209334,"timestamp":"2026-05-25T19:00:00.000Z"} +{"doc_count":11624,"split_key":211590,"timestamp":"2026-05-25T20:00:00.000Z"} +{"doc_count":1122,"split_key":141995,"timestamp":"2026-05-25T20:00:00.000Z"} +{"doc_count":856,"split_key":47890,"timestamp":"2026-05-25T20:00:00.000Z"} +{"doc_count":834,"split_key":396982,"timestamp":"2026-05-25T20:00:00.000Z"} +{"doc_count":533,"split_key":16509,"timestamp":"2026-05-25T20:00:00.000Z"} +{"doc_count":1517,"split_key":209334,"timestamp":"2026-05-25T21:00:00.000Z"} +{"doc_count":1185,"split_key":211590,"timestamp":"2026-05-25T21:00:00.000Z"} +{"doc_count":852,"split_key":47890,"timestamp":"2026-05-25T21:00:00.000Z"} +{"doc_count":804,"split_key":396982,"timestamp":"2026-05-25T21:00:00.000Z"} +{"doc_count":566,"split_key":63949,"timestamp":"2026-05-25T21:00:00.000Z"} +{"doc_count":20440,"split_key":14061,"timestamp":"2026-05-25T22:00:00.000Z"} +{"doc_count":5995,"split_key":211590,"timestamp":"2026-05-25T22:00:00.000Z"} +{"doc_count":4904,"split_key":209334,"timestamp":"2026-05-25T22:00:00.000Z"} +{"doc_count":1325,"split_key":141995,"timestamp":"2026-05-25T22:00:00.000Z"} +{"doc_count":873,"split_key":47890,"timestamp":"2026-05-25T22:00:00.000Z"} +{"doc_count":5089,"split_key":209334,"timestamp":"2026-05-25T23:00:00.000Z"} +{"doc_count":719,"split_key":47890,"timestamp":"2026-05-25T23:00:00.000Z"} +{"doc_count":604,"split_key":396982,"timestamp":"2026-05-25T23:00:00.000Z"} +{"doc_count":524,"split_key":24323,"timestamp":"2026-05-25T23:00:00.000Z"} +{"doc_count":490,"split_key":4134,"timestamp":"2026-05-25T23:00:00.000Z"} +{"doc_count":7390,"split_key":209334,"timestamp":"2026-05-26T00:00:00.000Z"} +{"doc_count":834,"split_key":47890,"timestamp":"2026-05-26T00:00:00.000Z"} +{"doc_count":728,"split_key":16509,"timestamp":"2026-05-26T00:00:00.000Z"} +{"doc_count":620,"split_key":396982,"timestamp":"2026-05-26T00:00:00.000Z"} +{"doc_count":569,"split_key":8075,"timestamp":"2026-05-26T00:00:00.000Z"} +{"doc_count":7059,"split_key":209334,"timestamp":"2026-05-26T01:00:00.000Z"} +{"doc_count":1387,"split_key":14061,"timestamp":"2026-05-26T01:00:00.000Z"} +{"doc_count":888,"split_key":396982,"timestamp":"2026-05-26T01:00:00.000Z"} +{"doc_count":858,"split_key":47890,"timestamp":"2026-05-26T01:00:00.000Z"} +{"doc_count":431,"split_key":6939,"timestamp":"2026-05-26T01:00:00.000Z"} +{"doc_count":6646,"split_key":209334,"timestamp":"2026-05-26T02:00:00.000Z"} +{"doc_count":3133,"split_key":14061,"timestamp":"2026-05-26T02:00:00.000Z"} +{"doc_count":1081,"split_key":16509,"timestamp":"2026-05-26T02:00:00.000Z"} +{"doc_count":968,"split_key":396982,"timestamp":"2026-05-26T02:00:00.000Z"} +{"doc_count":854,"split_key":47890,"timestamp":"2026-05-26T02:00:00.000Z"} +{"doc_count":11238,"split_key":209334,"timestamp":"2026-05-26T03:00:00.000Z"} +{"doc_count":3028,"split_key":14061,"timestamp":"2026-05-26T03:00:00.000Z"} +{"doc_count":1709,"split_key":63949,"timestamp":"2026-05-26T03:00:00.000Z"} +{"doc_count":1575,"split_key":16509,"timestamp":"2026-05-26T03:00:00.000Z"} +{"doc_count":684,"split_key":396982,"timestamp":"2026-05-26T03:00:00.000Z"} +{"doc_count":14169,"split_key":209334,"timestamp":"2026-05-26T04:00:00.000Z"} +{"doc_count":3494,"split_key":211590,"timestamp":"2026-05-26T04:00:00.000Z"} +{"doc_count":2203,"split_key":14061,"timestamp":"2026-05-26T04:00:00.000Z"} +{"doc_count":1464,"split_key":16509,"timestamp":"2026-05-26T04:00:00.000Z"} +{"doc_count":1128,"split_key":51396,"timestamp":"2026-05-26T04:00:00.000Z"} +{"doc_count":29477,"split_key":209334,"timestamp":"2026-05-26T05:00:00.000Z"} +{"doc_count":7239,"split_key":211590,"timestamp":"2026-05-26T05:00:00.000Z"} +{"doc_count":1671,"split_key":16509,"timestamp":"2026-05-26T05:00:00.000Z"} +{"doc_count":1355,"split_key":14061,"timestamp":"2026-05-26T05:00:00.000Z"} +{"doc_count":1337,"split_key":51396,"timestamp":"2026-05-26T05:00:00.000Z"} +{"doc_count":23926,"split_key":209334,"timestamp":"2026-05-26T06:00:00.000Z"} +{"doc_count":1478,"split_key":16509,"timestamp":"2026-05-26T06:00:00.000Z"} +{"doc_count":1329,"split_key":51396,"timestamp":"2026-05-26T06:00:00.000Z"} +{"doc_count":1173,"split_key":396982,"timestamp":"2026-05-26T06:00:00.000Z"} +{"doc_count":1157,"split_key":201401,"timestamp":"2026-05-26T06:00:00.000Z"} +{"doc_count":22960,"split_key":209334,"timestamp":"2026-05-26T07:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-05-26T07:00:00.000Z"} +{"doc_count":1644,"split_key":16509,"timestamp":"2026-05-26T07:00:00.000Z"} +{"doc_count":1579,"split_key":51396,"timestamp":"2026-05-26T07:00:00.000Z"} +{"doc_count":965,"split_key":201401,"timestamp":"2026-05-26T07:00:00.000Z"} +{"doc_count":27108,"split_key":209334,"timestamp":"2026-05-26T08:00:00.000Z"} +{"doc_count":2257,"split_key":51396,"timestamp":"2026-05-26T08:00:00.000Z"} +{"doc_count":1449,"split_key":201401,"timestamp":"2026-05-26T08:00:00.000Z"} +{"doc_count":1222,"split_key":16509,"timestamp":"2026-05-26T08:00:00.000Z"} +{"doc_count":1077,"split_key":398101,"timestamp":"2026-05-26T08:00:00.000Z"} +{"doc_count":29515,"split_key":209334,"timestamp":"2026-05-26T09:00:00.000Z"} +{"doc_count":1556,"split_key":14061,"timestamp":"2026-05-26T09:00:00.000Z"} +{"doc_count":1490,"split_key":201401,"timestamp":"2026-05-26T09:00:00.000Z"} +{"doc_count":1325,"split_key":51396,"timestamp":"2026-05-26T09:00:00.000Z"} +{"doc_count":1045,"split_key":16509,"timestamp":"2026-05-26T09:00:00.000Z"} +{"doc_count":30572,"split_key":209334,"timestamp":"2026-05-26T10:00:00.000Z"} +{"doc_count":1529,"split_key":16509,"timestamp":"2026-05-26T10:00:00.000Z"} +{"doc_count":1529,"split_key":201401,"timestamp":"2026-05-26T10:00:00.000Z"} +{"doc_count":1333,"split_key":51396,"timestamp":"2026-05-26T10:00:00.000Z"} +{"doc_count":825,"split_key":14061,"timestamp":"2026-05-26T10:00:00.000Z"} +{"doc_count":26492,"split_key":209334,"timestamp":"2026-05-26T11:00:00.000Z"} +{"doc_count":1734,"split_key":16509,"timestamp":"2026-05-26T11:00:00.000Z"} +{"doc_count":1383,"split_key":201401,"timestamp":"2026-05-26T11:00:00.000Z"} +{"doc_count":1318,"split_key":51396,"timestamp":"2026-05-26T11:00:00.000Z"} +{"doc_count":782,"split_key":47890,"timestamp":"2026-05-26T11:00:00.000Z"} +{"doc_count":25753,"split_key":209334,"timestamp":"2026-05-26T12:00:00.000Z"} +{"doc_count":2039,"split_key":16509,"timestamp":"2026-05-26T12:00:00.000Z"} +{"doc_count":1626,"split_key":45102,"timestamp":"2026-05-26T12:00:00.000Z"} +{"doc_count":1368,"split_key":201401,"timestamp":"2026-05-26T12:00:00.000Z"} +{"doc_count":1319,"split_key":51396,"timestamp":"2026-05-26T12:00:00.000Z"} +{"doc_count":36891,"split_key":209334,"timestamp":"2026-05-26T13:00:00.000Z"} +{"doc_count":1364,"split_key":51396,"timestamp":"2026-05-26T13:00:00.000Z"} +{"doc_count":1181,"split_key":201401,"timestamp":"2026-05-26T13:00:00.000Z"} +{"doc_count":1103,"split_key":45102,"timestamp":"2026-05-26T13:00:00.000Z"} +{"doc_count":1089,"split_key":16509,"timestamp":"2026-05-26T13:00:00.000Z"} +{"doc_count":3690,"split_key":209334,"timestamp":"2026-05-26T14:00:00.000Z"} +{"doc_count":1458,"split_key":16509,"timestamp":"2026-05-26T14:00:00.000Z"} +{"doc_count":1332,"split_key":51396,"timestamp":"2026-05-26T14:00:00.000Z"} +{"doc_count":1061,"split_key":45102,"timestamp":"2026-05-26T14:00:00.000Z"} +{"doc_count":1025,"split_key":24940,"timestamp":"2026-05-26T14:00:00.000Z"} +{"doc_count":1512,"split_key":51396,"timestamp":"2026-05-26T15:00:00.000Z"} +{"doc_count":1089,"split_key":211590,"timestamp":"2026-05-26T15:00:00.000Z"} +{"doc_count":999,"split_key":24940,"timestamp":"2026-05-26T15:00:00.000Z"} +{"doc_count":926,"split_key":14061,"timestamp":"2026-05-26T15:00:00.000Z"} +{"doc_count":907,"split_key":16509,"timestamp":"2026-05-26T15:00:00.000Z"} +{"doc_count":9099,"split_key":211590,"timestamp":"2026-05-26T16:00:00.000Z"} +{"doc_count":1260,"split_key":141995,"timestamp":"2026-05-26T16:00:00.000Z"} +{"doc_count":1222,"split_key":51396,"timestamp":"2026-05-26T16:00:00.000Z"} +{"doc_count":1073,"split_key":24940,"timestamp":"2026-05-26T16:00:00.000Z"} +{"doc_count":1045,"split_key":16509,"timestamp":"2026-05-26T16:00:00.000Z"} +{"doc_count":1425,"split_key":16509,"timestamp":"2026-05-26T17:00:00.000Z"} +{"doc_count":1252,"split_key":51396,"timestamp":"2026-05-26T17:00:00.000Z"} +{"doc_count":1100,"split_key":24940,"timestamp":"2026-05-26T17:00:00.000Z"} +{"doc_count":905,"split_key":396982,"timestamp":"2026-05-26T17:00:00.000Z"} +{"doc_count":844,"split_key":14061,"timestamp":"2026-05-26T17:00:00.000Z"} +{"doc_count":1514,"split_key":16509,"timestamp":"2026-05-26T18:00:00.000Z"} +{"doc_count":1195,"split_key":51396,"timestamp":"2026-05-26T18:00:00.000Z"} +{"doc_count":1119,"split_key":138296,"timestamp":"2026-05-26T18:00:00.000Z"} +{"doc_count":1080,"split_key":24940,"timestamp":"2026-05-26T18:00:00.000Z"} +{"doc_count":982,"split_key":14061,"timestamp":"2026-05-26T18:00:00.000Z"} +{"doc_count":1877,"split_key":16509,"timestamp":"2026-05-26T19:00:00.000Z"} +{"doc_count":1504,"split_key":51396,"timestamp":"2026-05-26T19:00:00.000Z"} +{"doc_count":1444,"split_key":14061,"timestamp":"2026-05-26T19:00:00.000Z"} +{"doc_count":1391,"split_key":138296,"timestamp":"2026-05-26T19:00:00.000Z"} +{"doc_count":1029,"split_key":24940,"timestamp":"2026-05-26T19:00:00.000Z"} +{"doc_count":1218,"split_key":51396,"timestamp":"2026-05-26T20:00:00.000Z"} +{"doc_count":1082,"split_key":14061,"timestamp":"2026-05-26T20:00:00.000Z"} +{"doc_count":1031,"split_key":16509,"timestamp":"2026-05-26T20:00:00.000Z"} +{"doc_count":1021,"split_key":24940,"timestamp":"2026-05-26T20:00:00.000Z"} +{"doc_count":798,"split_key":45634,"timestamp":"2026-05-26T20:00:00.000Z"} +{"doc_count":1100,"split_key":51396,"timestamp":"2026-05-26T21:00:00.000Z"} +{"doc_count":1049,"split_key":16509,"timestamp":"2026-05-26T21:00:00.000Z"} +{"doc_count":1042,"split_key":396982,"timestamp":"2026-05-26T21:00:00.000Z"} +{"doc_count":928,"split_key":24940,"timestamp":"2026-05-26T21:00:00.000Z"} +{"doc_count":816,"split_key":14061,"timestamp":"2026-05-26T21:00:00.000Z"} +{"doc_count":1256,"split_key":16509,"timestamp":"2026-05-26T22:00:00.000Z"} +{"doc_count":1146,"split_key":14061,"timestamp":"2026-05-26T22:00:00.000Z"} +{"doc_count":1064,"split_key":24940,"timestamp":"2026-05-26T22:00:00.000Z"} +{"doc_count":739,"split_key":47890,"timestamp":"2026-05-26T22:00:00.000Z"} +{"doc_count":679,"split_key":24323,"timestamp":"2026-05-26T22:00:00.000Z"} +{"doc_count":1019,"split_key":16509,"timestamp":"2026-05-26T23:00:00.000Z"} +{"doc_count":988,"split_key":24940,"timestamp":"2026-05-26T23:00:00.000Z"} +{"doc_count":774,"split_key":24323,"timestamp":"2026-05-26T23:00:00.000Z"} +{"doc_count":727,"split_key":37517,"timestamp":"2026-05-26T23:00:00.000Z"} +{"doc_count":606,"split_key":396982,"timestamp":"2026-05-26T23:00:00.000Z"} +{"doc_count":1365,"split_key":16509,"timestamp":"2026-05-27T00:00:00.000Z"} +{"doc_count":994,"split_key":24940,"timestamp":"2026-05-27T00:00:00.000Z"} +{"doc_count":785,"split_key":24323,"timestamp":"2026-05-27T00:00:00.000Z"} +{"doc_count":777,"split_key":47890,"timestamp":"2026-05-27T00:00:00.000Z"} +{"doc_count":588,"split_key":50360,"timestamp":"2026-05-27T00:00:00.000Z"} +{"doc_count":1283,"split_key":16509,"timestamp":"2026-05-27T01:00:00.000Z"} +{"doc_count":1093,"split_key":396982,"timestamp":"2026-05-27T01:00:00.000Z"} +{"doc_count":1042,"split_key":24940,"timestamp":"2026-05-27T01:00:00.000Z"} +{"doc_count":849,"split_key":47890,"timestamp":"2026-05-27T01:00:00.000Z"} +{"doc_count":632,"split_key":50360,"timestamp":"2026-05-27T01:00:00.000Z"} +{"doc_count":1973,"split_key":51396,"timestamp":"2026-05-27T02:00:00.000Z"} +{"doc_count":945,"split_key":24940,"timestamp":"2026-05-27T02:00:00.000Z"} +{"doc_count":881,"split_key":396982,"timestamp":"2026-05-27T02:00:00.000Z"} +{"doc_count":837,"split_key":47890,"timestamp":"2026-05-27T02:00:00.000Z"} +{"doc_count":825,"split_key":16509,"timestamp":"2026-05-27T02:00:00.000Z"} +{"doc_count":1023,"split_key":24940,"timestamp":"2026-05-27T03:00:00.000Z"} +{"doc_count":1017,"split_key":16509,"timestamp":"2026-05-27T03:00:00.000Z"} +{"doc_count":864,"split_key":47890,"timestamp":"2026-05-27T03:00:00.000Z"} +{"doc_count":860,"split_key":14061,"timestamp":"2026-05-27T03:00:00.000Z"} +{"doc_count":745,"split_key":396982,"timestamp":"2026-05-27T03:00:00.000Z"} +{"doc_count":1421,"split_key":16509,"timestamp":"2026-05-27T04:00:00.000Z"} +{"doc_count":1125,"split_key":51396,"timestamp":"2026-05-27T04:00:00.000Z"} +{"doc_count":990,"split_key":24940,"timestamp":"2026-05-27T04:00:00.000Z"} +{"doc_count":955,"split_key":396982,"timestamp":"2026-05-27T04:00:00.000Z"} +{"doc_count":899,"split_key":14061,"timestamp":"2026-05-27T04:00:00.000Z"} +{"doc_count":1135,"split_key":16509,"timestamp":"2026-05-27T05:00:00.000Z"} +{"doc_count":1004,"split_key":51396,"timestamp":"2026-05-27T05:00:00.000Z"} +{"doc_count":1003,"split_key":14061,"timestamp":"2026-05-27T05:00:00.000Z"} +{"doc_count":1000,"split_key":24940,"timestamp":"2026-05-27T05:00:00.000Z"} +{"doc_count":859,"split_key":47890,"timestamp":"2026-05-27T05:00:00.000Z"} +{"doc_count":2722,"split_key":63949,"timestamp":"2026-05-27T06:00:00.000Z"} +{"doc_count":1057,"split_key":24940,"timestamp":"2026-05-27T06:00:00.000Z"} +{"doc_count":925,"split_key":14061,"timestamp":"2026-05-27T06:00:00.000Z"} +{"doc_count":899,"split_key":16509,"timestamp":"2026-05-27T06:00:00.000Z"} +{"doc_count":853,"split_key":47890,"timestamp":"2026-05-27T06:00:00.000Z"} +{"doc_count":38203,"split_key":209334,"timestamp":"2026-05-27T07:00:00.000Z"} +{"doc_count":25104,"split_key":63949,"timestamp":"2026-05-27T07:00:00.000Z"} +{"doc_count":1080,"split_key":16509,"timestamp":"2026-05-27T07:00:00.000Z"} +{"doc_count":1003,"split_key":24940,"timestamp":"2026-05-27T07:00:00.000Z"} +{"doc_count":810,"split_key":47890,"timestamp":"2026-05-27T07:00:00.000Z"} +{"doc_count":26638,"split_key":63949,"timestamp":"2026-05-27T08:00:00.000Z"} +{"doc_count":22201,"split_key":209334,"timestamp":"2026-05-27T08:00:00.000Z"} +{"doc_count":1205,"split_key":37963,"timestamp":"2026-05-27T08:00:00.000Z"} +{"doc_count":1174,"split_key":16509,"timestamp":"2026-05-27T08:00:00.000Z"} +{"doc_count":1043,"split_key":201401,"timestamp":"2026-05-27T08:00:00.000Z"} +{"doc_count":21432,"split_key":209334,"timestamp":"2026-05-27T09:00:00.000Z"} +{"doc_count":6599,"split_key":63949,"timestamp":"2026-05-27T09:00:00.000Z"} +{"doc_count":1791,"split_key":37963,"timestamp":"2026-05-27T09:00:00.000Z"} +{"doc_count":1131,"split_key":49870,"timestamp":"2026-05-27T09:00:00.000Z"} +{"doc_count":1116,"split_key":201401,"timestamp":"2026-05-27T09:00:00.000Z"} +{"doc_count":17782,"split_key":209334,"timestamp":"2026-05-27T10:00:00.000Z"} +{"doc_count":1818,"split_key":37963,"timestamp":"2026-05-27T10:00:00.000Z"} +{"doc_count":1546,"split_key":51396,"timestamp":"2026-05-27T10:00:00.000Z"} +{"doc_count":972,"split_key":201401,"timestamp":"2026-05-27T10:00:00.000Z"} +{"doc_count":876,"split_key":49870,"timestamp":"2026-05-27T10:00:00.000Z"} +{"doc_count":18910,"split_key":209334,"timestamp":"2026-05-27T11:00:00.000Z"} +{"doc_count":2423,"split_key":211590,"timestamp":"2026-05-27T11:00:00.000Z"} +{"doc_count":1783,"split_key":37963,"timestamp":"2026-05-27T11:00:00.000Z"} +{"doc_count":1083,"split_key":201401,"timestamp":"2026-05-27T11:00:00.000Z"} +{"doc_count":1012,"split_key":16509,"timestamp":"2026-05-27T11:00:00.000Z"} +{"doc_count":15987,"split_key":209334,"timestamp":"2026-05-27T12:00:00.000Z"} +{"doc_count":1684,"split_key":37963,"timestamp":"2026-05-27T12:00:00.000Z"} +{"doc_count":1142,"split_key":16509,"timestamp":"2026-05-27T12:00:00.000Z"} +{"doc_count":1084,"split_key":201401,"timestamp":"2026-05-27T12:00:00.000Z"} +{"doc_count":867,"split_key":47890,"timestamp":"2026-05-27T12:00:00.000Z"} +{"doc_count":4823,"split_key":209334,"timestamp":"2026-05-27T13:00:00.000Z"} +{"doc_count":2195,"split_key":37963,"timestamp":"2026-05-27T13:00:00.000Z"} +{"doc_count":879,"split_key":47890,"timestamp":"2026-05-27T13:00:00.000Z"} +{"doc_count":875,"split_key":16509,"timestamp":"2026-05-27T13:00:00.000Z"} +{"doc_count":634,"split_key":396982,"timestamp":"2026-05-27T13:00:00.000Z"} +{"doc_count":2190,"split_key":37963,"timestamp":"2026-05-27T14:00:00.000Z"} +{"doc_count":1164,"split_key":209334,"timestamp":"2026-05-27T14:00:00.000Z"} +{"doc_count":1147,"split_key":16509,"timestamp":"2026-05-27T14:00:00.000Z"} +{"doc_count":782,"split_key":47890,"timestamp":"2026-05-27T14:00:00.000Z"} +{"doc_count":586,"split_key":50360,"timestamp":"2026-05-27T14:00:00.000Z"} +{"doc_count":2050,"split_key":37963,"timestamp":"2026-05-27T15:00:00.000Z"} +{"doc_count":1493,"split_key":209334,"timestamp":"2026-05-27T15:00:00.000Z"} +{"doc_count":1102,"split_key":16509,"timestamp":"2026-05-27T15:00:00.000Z"} +{"doc_count":775,"split_key":47890,"timestamp":"2026-05-27T15:00:00.000Z"} +{"doc_count":713,"split_key":14061,"timestamp":"2026-05-27T15:00:00.000Z"} +{"doc_count":1780,"split_key":37963,"timestamp":"2026-05-27T16:00:00.000Z"} +{"doc_count":1164,"split_key":209334,"timestamp":"2026-05-27T16:00:00.000Z"} +{"doc_count":988,"split_key":16509,"timestamp":"2026-05-27T16:00:00.000Z"} +{"doc_count":986,"split_key":47890,"timestamp":"2026-05-27T16:00:00.000Z"} +{"doc_count":581,"split_key":50360,"timestamp":"2026-05-27T16:00:00.000Z"} +{"doc_count":1296,"split_key":16509,"timestamp":"2026-05-27T17:00:00.000Z"} +{"doc_count":797,"split_key":47890,"timestamp":"2026-05-27T17:00:00.000Z"} +{"doc_count":741,"split_key":14061,"timestamp":"2026-05-27T17:00:00.000Z"} +{"doc_count":583,"split_key":50360,"timestamp":"2026-05-27T17:00:00.000Z"} +{"doc_count":541,"split_key":209334,"timestamp":"2026-05-27T17:00:00.000Z"} +{"doc_count":973,"split_key":16509,"timestamp":"2026-05-27T18:00:00.000Z"} +{"doc_count":822,"split_key":47890,"timestamp":"2026-05-27T18:00:00.000Z"} +{"doc_count":731,"split_key":209334,"timestamp":"2026-05-27T18:00:00.000Z"} +{"doc_count":606,"split_key":50360,"timestamp":"2026-05-27T18:00:00.000Z"} +{"doc_count":490,"split_key":14061,"timestamp":"2026-05-27T18:00:00.000Z"} +{"doc_count":840,"split_key":16509,"timestamp":"2026-05-27T19:00:00.000Z"} +{"doc_count":828,"split_key":47890,"timestamp":"2026-05-27T19:00:00.000Z"} +{"doc_count":641,"split_key":14061,"timestamp":"2026-05-27T19:00:00.000Z"} +{"doc_count":496,"split_key":50360,"timestamp":"2026-05-27T19:00:00.000Z"} +{"doc_count":435,"split_key":209334,"timestamp":"2026-05-27T19:00:00.000Z"} +{"doc_count":1027,"split_key":47890,"timestamp":"2026-05-27T20:00:00.000Z"} +{"doc_count":705,"split_key":16509,"timestamp":"2026-05-27T20:00:00.000Z"} +{"doc_count":522,"split_key":37963,"timestamp":"2026-05-27T20:00:00.000Z"} +{"doc_count":512,"split_key":396982,"timestamp":"2026-05-27T20:00:00.000Z"} +{"doc_count":459,"split_key":138915,"timestamp":"2026-05-27T20:00:00.000Z"} +{"doc_count":1976,"split_key":37963,"timestamp":"2026-05-27T21:00:00.000Z"} +{"doc_count":949,"split_key":47890,"timestamp":"2026-05-27T21:00:00.000Z"} +{"doc_count":751,"split_key":396982,"timestamp":"2026-05-27T21:00:00.000Z"} +{"doc_count":712,"split_key":16509,"timestamp":"2026-05-27T21:00:00.000Z"} +{"doc_count":559,"split_key":49800,"timestamp":"2026-05-27T21:00:00.000Z"} +{"doc_count":3236,"split_key":37963,"timestamp":"2026-05-27T22:00:00.000Z"} +{"doc_count":820,"split_key":47890,"timestamp":"2026-05-27T22:00:00.000Z"} +{"doc_count":607,"split_key":16509,"timestamp":"2026-05-27T22:00:00.000Z"} +{"doc_count":558,"split_key":49800,"timestamp":"2026-05-27T22:00:00.000Z"} +{"doc_count":456,"split_key":24940,"timestamp":"2026-05-27T22:00:00.000Z"} +{"doc_count":3420,"split_key":37963,"timestamp":"2026-05-27T23:00:00.000Z"} +{"doc_count":1214,"split_key":16509,"timestamp":"2026-05-27T23:00:00.000Z"} +{"doc_count":828,"split_key":47890,"timestamp":"2026-05-27T23:00:00.000Z"} +{"doc_count":741,"split_key":396982,"timestamp":"2026-05-27T23:00:00.000Z"} +{"doc_count":576,"split_key":49800,"timestamp":"2026-05-27T23:00:00.000Z"} +{"doc_count":2322,"split_key":37963,"timestamp":"2026-05-28T00:00:00.000Z"} +{"doc_count":1988,"split_key":396982,"timestamp":"2026-05-28T00:00:00.000Z"} +{"doc_count":1140,"split_key":16509,"timestamp":"2026-05-28T00:00:00.000Z"} +{"doc_count":644,"split_key":47890,"timestamp":"2026-05-28T00:00:00.000Z"} +{"doc_count":588,"split_key":49800,"timestamp":"2026-05-28T00:00:00.000Z"} +{"doc_count":3631,"split_key":396982,"timestamp":"2026-05-28T01:00:00.000Z"} +{"doc_count":815,"split_key":47890,"timestamp":"2026-05-28T01:00:00.000Z"} +{"doc_count":776,"split_key":16509,"timestamp":"2026-05-28T01:00:00.000Z"} +{"doc_count":547,"split_key":51396,"timestamp":"2026-05-28T01:00:00.000Z"} +{"doc_count":491,"split_key":37963,"timestamp":"2026-05-28T01:00:00.000Z"} +{"doc_count":1309,"split_key":16509,"timestamp":"2026-05-28T02:00:00.000Z"} +{"doc_count":1207,"split_key":396982,"timestamp":"2026-05-28T02:00:00.000Z"} +{"doc_count":647,"split_key":47890,"timestamp":"2026-05-28T02:00:00.000Z"} +{"doc_count":452,"split_key":37963,"timestamp":"2026-05-28T02:00:00.000Z"} +{"doc_count":391,"split_key":24940,"timestamp":"2026-05-28T02:00:00.000Z"} +{"doc_count":1188,"split_key":16509,"timestamp":"2026-05-28T03:00:00.000Z"} +{"doc_count":885,"split_key":47890,"timestamp":"2026-05-28T03:00:00.000Z"} +{"doc_count":839,"split_key":396982,"timestamp":"2026-05-28T03:00:00.000Z"} +{"doc_count":453,"split_key":37963,"timestamp":"2026-05-28T03:00:00.000Z"} +{"doc_count":399,"split_key":138915,"timestamp":"2026-05-28T03:00:00.000Z"} +{"doc_count":1320,"split_key":396982,"timestamp":"2026-05-28T04:00:00.000Z"} +{"doc_count":1026,"split_key":16509,"timestamp":"2026-05-28T04:00:00.000Z"} +{"doc_count":898,"split_key":47890,"timestamp":"2026-05-28T04:00:00.000Z"} +{"doc_count":589,"split_key":211590,"timestamp":"2026-05-28T04:00:00.000Z"} +{"doc_count":473,"split_key":135377,"timestamp":"2026-05-28T04:00:00.000Z"} +{"doc_count":7985,"split_key":211590,"timestamp":"2026-05-28T05:00:00.000Z"} +{"doc_count":1248,"split_key":396982,"timestamp":"2026-05-28T05:00:00.000Z"} +{"doc_count":1095,"split_key":141995,"timestamp":"2026-05-28T05:00:00.000Z"} +{"doc_count":934,"split_key":16509,"timestamp":"2026-05-28T05:00:00.000Z"} +{"doc_count":915,"split_key":47890,"timestamp":"2026-05-28T05:00:00.000Z"} +{"doc_count":6366,"split_key":209334,"timestamp":"2026-05-28T06:00:00.000Z"} +{"doc_count":1362,"split_key":51396,"timestamp":"2026-05-28T06:00:00.000Z"} +{"doc_count":1166,"split_key":16509,"timestamp":"2026-05-28T06:00:00.000Z"} +{"doc_count":1011,"split_key":396982,"timestamp":"2026-05-28T06:00:00.000Z"} +{"doc_count":910,"split_key":211590,"timestamp":"2026-05-28T06:00:00.000Z"} +{"doc_count":5372,"split_key":209334,"timestamp":"2026-05-28T07:00:00.000Z"} +{"doc_count":3380,"split_key":396982,"timestamp":"2026-05-28T07:00:00.000Z"} +{"doc_count":1077,"split_key":16509,"timestamp":"2026-05-28T07:00:00.000Z"} +{"doc_count":790,"split_key":47890,"timestamp":"2026-05-28T07:00:00.000Z"} +{"doc_count":514,"split_key":50360,"timestamp":"2026-05-28T07:00:00.000Z"} +{"doc_count":4625,"split_key":209334,"timestamp":"2026-05-28T08:00:00.000Z"} +{"doc_count":1494,"split_key":396982,"timestamp":"2026-05-28T08:00:00.000Z"} +{"doc_count":1062,"split_key":16509,"timestamp":"2026-05-28T08:00:00.000Z"} +{"doc_count":780,"split_key":47890,"timestamp":"2026-05-28T08:00:00.000Z"} +{"doc_count":628,"split_key":14061,"timestamp":"2026-05-28T08:00:00.000Z"} +{"doc_count":39639,"split_key":209334,"timestamp":"2026-05-28T09:00:00.000Z"} +{"doc_count":3245,"split_key":396982,"timestamp":"2026-05-28T09:00:00.000Z"} +{"doc_count":1348,"split_key":137899,"timestamp":"2026-05-28T09:00:00.000Z"} +{"doc_count":1209,"split_key":16509,"timestamp":"2026-05-28T09:00:00.000Z"} +{"doc_count":993,"split_key":201401,"timestamp":"2026-05-28T09:00:00.000Z"} +{"doc_count":62279,"split_key":209334,"timestamp":"2026-05-28T10:00:00.000Z"} +{"doc_count":1428,"split_key":201401,"timestamp":"2026-05-28T10:00:00.000Z"} +{"doc_count":1278,"split_key":16509,"timestamp":"2026-05-28T10:00:00.000Z"} +{"doc_count":788,"split_key":47890,"timestamp":"2026-05-28T10:00:00.000Z"} +{"doc_count":690,"split_key":14061,"timestamp":"2026-05-28T10:00:00.000Z"} +{"doc_count":82685,"split_key":209334,"timestamp":"2026-05-28T11:00:00.000Z"} +{"doc_count":2153,"split_key":16276,"timestamp":"2026-05-28T11:00:00.000Z"} +{"doc_count":1636,"split_key":201401,"timestamp":"2026-05-28T11:00:00.000Z"} +{"doc_count":1176,"split_key":14061,"timestamp":"2026-05-28T11:00:00.000Z"} +{"doc_count":1079,"split_key":16509,"timestamp":"2026-05-28T11:00:00.000Z"} +{"doc_count":26373,"split_key":209334,"timestamp":"2026-05-28T12:00:00.000Z"} +{"doc_count":3148,"split_key":211590,"timestamp":"2026-05-28T12:00:00.000Z"} +{"doc_count":1040,"split_key":135901,"timestamp":"2026-05-28T12:00:00.000Z"} +{"doc_count":879,"split_key":16509,"timestamp":"2026-05-28T12:00:00.000Z"} +{"doc_count":808,"split_key":47890,"timestamp":"2026-05-28T12:00:00.000Z"} +{"doc_count":7428,"split_key":211590,"timestamp":"2026-05-28T13:00:00.000Z"} +{"doc_count":1137,"split_key":16509,"timestamp":"2026-05-28T13:00:00.000Z"} +{"doc_count":1083,"split_key":141995,"timestamp":"2026-05-28T13:00:00.000Z"} +{"doc_count":890,"split_key":47890,"timestamp":"2026-05-28T13:00:00.000Z"} +{"doc_count":697,"split_key":209334,"timestamp":"2026-05-28T13:00:00.000Z"} +{"doc_count":3465,"split_key":24757,"timestamp":"2026-05-28T14:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-05-28T14:00:00.000Z"} +{"doc_count":1086,"split_key":209334,"timestamp":"2026-05-28T14:00:00.000Z"} +{"doc_count":990,"split_key":16509,"timestamp":"2026-05-28T14:00:00.000Z"} +{"doc_count":875,"split_key":24940,"timestamp":"2026-05-28T14:00:00.000Z"} +{"doc_count":6446,"split_key":211590,"timestamp":"2026-05-28T15:00:00.000Z"} +{"doc_count":1488,"split_key":16509,"timestamp":"2026-05-28T15:00:00.000Z"} +{"doc_count":1038,"split_key":209334,"timestamp":"2026-05-28T15:00:00.000Z"} +{"doc_count":1017,"split_key":51396,"timestamp":"2026-05-28T15:00:00.000Z"} +{"doc_count":915,"split_key":24940,"timestamp":"2026-05-28T15:00:00.000Z"} +{"doc_count":1053,"split_key":24940,"timestamp":"2026-05-28T16:00:00.000Z"} +{"doc_count":1013,"split_key":51396,"timestamp":"2026-05-28T16:00:00.000Z"} +{"doc_count":879,"split_key":25369,"timestamp":"2026-05-28T16:00:00.000Z"} +{"doc_count":850,"split_key":47890,"timestamp":"2026-05-28T16:00:00.000Z"} +{"doc_count":657,"split_key":396982,"timestamp":"2026-05-28T16:00:00.000Z"} +{"doc_count":1661,"split_key":25369,"timestamp":"2026-05-28T17:00:00.000Z"} +{"doc_count":1048,"split_key":24940,"timestamp":"2026-05-28T17:00:00.000Z"} +{"doc_count":964,"split_key":209334,"timestamp":"2026-05-28T17:00:00.000Z"} +{"doc_count":907,"split_key":396982,"timestamp":"2026-05-28T17:00:00.000Z"} +{"doc_count":873,"split_key":16509,"timestamp":"2026-05-28T17:00:00.000Z"} +{"doc_count":1506,"split_key":25369,"timestamp":"2026-05-28T18:00:00.000Z"} +{"doc_count":1062,"split_key":24940,"timestamp":"2026-05-28T18:00:00.000Z"} +{"doc_count":913,"split_key":209334,"timestamp":"2026-05-28T18:00:00.000Z"} +{"doc_count":894,"split_key":51396,"timestamp":"2026-05-28T18:00:00.000Z"} +{"doc_count":772,"split_key":16509,"timestamp":"2026-05-28T18:00:00.000Z"} +{"doc_count":1550,"split_key":25369,"timestamp":"2026-05-28T19:00:00.000Z"} +{"doc_count":1070,"split_key":24940,"timestamp":"2026-05-28T19:00:00.000Z"} +{"doc_count":1035,"split_key":16509,"timestamp":"2026-05-28T19:00:00.000Z"} +{"doc_count":1024,"split_key":396982,"timestamp":"2026-05-28T19:00:00.000Z"} +{"doc_count":1003,"split_key":14061,"timestamp":"2026-05-28T19:00:00.000Z"} +{"doc_count":1530,"split_key":25369,"timestamp":"2026-05-28T20:00:00.000Z"} +{"doc_count":1357,"split_key":16509,"timestamp":"2026-05-28T20:00:00.000Z"} +{"doc_count":1162,"split_key":24940,"timestamp":"2026-05-28T20:00:00.000Z"} +{"doc_count":1102,"split_key":396982,"timestamp":"2026-05-28T20:00:00.000Z"} +{"doc_count":860,"split_key":14061,"timestamp":"2026-05-28T20:00:00.000Z"} +{"doc_count":10585,"split_key":396982,"timestamp":"2026-05-28T21:00:00.000Z"} +{"doc_count":1237,"split_key":24940,"timestamp":"2026-05-28T21:00:00.000Z"} +{"doc_count":876,"split_key":209334,"timestamp":"2026-05-28T21:00:00.000Z"} +{"doc_count":834,"split_key":16509,"timestamp":"2026-05-28T21:00:00.000Z"} +{"doc_count":744,"split_key":47890,"timestamp":"2026-05-28T21:00:00.000Z"} +{"doc_count":12493,"split_key":396982,"timestamp":"2026-05-28T22:00:00.000Z"} +{"doc_count":1225,"split_key":24940,"timestamp":"2026-05-28T22:00:00.000Z"} +{"doc_count":965,"split_key":16509,"timestamp":"2026-05-28T22:00:00.000Z"} +{"doc_count":607,"split_key":47890,"timestamp":"2026-05-28T22:00:00.000Z"} +{"doc_count":553,"split_key":37963,"timestamp":"2026-05-28T22:00:00.000Z"} +{"doc_count":14595,"split_key":396982,"timestamp":"2026-05-28T23:00:00.000Z"} +{"doc_count":1111,"split_key":24940,"timestamp":"2026-05-28T23:00:00.000Z"} +{"doc_count":785,"split_key":47890,"timestamp":"2026-05-28T23:00:00.000Z"} +{"doc_count":603,"split_key":17557,"timestamp":"2026-05-28T23:00:00.000Z"} +{"doc_count":560,"split_key":50360,"timestamp":"2026-05-28T23:00:00.000Z"} +{"doc_count":11745,"split_key":396982,"timestamp":"2026-05-29T00:00:00.000Z"} +{"doc_count":971,"split_key":24940,"timestamp":"2026-05-29T00:00:00.000Z"} +{"doc_count":926,"split_key":16509,"timestamp":"2026-05-29T00:00:00.000Z"} +{"doc_count":716,"split_key":47890,"timestamp":"2026-05-29T00:00:00.000Z"} +{"doc_count":636,"split_key":17557,"timestamp":"2026-05-29T00:00:00.000Z"} +{"doc_count":6675,"split_key":396982,"timestamp":"2026-05-29T01:00:00.000Z"} +{"doc_count":4720,"split_key":211590,"timestamp":"2026-05-29T01:00:00.000Z"} +{"doc_count":780,"split_key":24323,"timestamp":"2026-05-29T01:00:00.000Z"} +{"doc_count":673,"split_key":141995,"timestamp":"2026-05-29T01:00:00.000Z"} +{"doc_count":608,"split_key":50360,"timestamp":"2026-05-29T01:00:00.000Z"} +{"doc_count":10381,"split_key":211590,"timestamp":"2026-05-29T02:00:00.000Z"} +{"doc_count":9417,"split_key":396982,"timestamp":"2026-05-29T02:00:00.000Z"} +{"doc_count":1840,"split_key":37963,"timestamp":"2026-05-29T02:00:00.000Z"} +{"doc_count":1413,"split_key":141995,"timestamp":"2026-05-29T02:00:00.000Z"} +{"doc_count":909,"split_key":24323,"timestamp":"2026-05-29T02:00:00.000Z"} +{"doc_count":12961,"split_key":396982,"timestamp":"2026-05-29T03:00:00.000Z"} +{"doc_count":2178,"split_key":37963,"timestamp":"2026-05-29T03:00:00.000Z"} +{"doc_count":914,"split_key":24323,"timestamp":"2026-05-29T03:00:00.000Z"} +{"doc_count":578,"split_key":50360,"timestamp":"2026-05-29T03:00:00.000Z"} +{"doc_count":518,"split_key":16509,"timestamp":"2026-05-29T03:00:00.000Z"} +{"doc_count":4024,"split_key":396982,"timestamp":"2026-05-29T04:00:00.000Z"} +{"doc_count":3053,"split_key":37963,"timestamp":"2026-05-29T04:00:00.000Z"} +{"doc_count":954,"split_key":24323,"timestamp":"2026-05-29T04:00:00.000Z"} +{"doc_count":824,"split_key":14061,"timestamp":"2026-05-29T04:00:00.000Z"} +{"doc_count":533,"split_key":16509,"timestamp":"2026-05-29T04:00:00.000Z"} +{"doc_count":1555,"split_key":396982,"timestamp":"2026-05-29T05:00:00.000Z"} +{"doc_count":935,"split_key":24323,"timestamp":"2026-05-29T05:00:00.000Z"} +{"doc_count":649,"split_key":17995,"timestamp":"2026-05-29T05:00:00.000Z"} +{"doc_count":565,"split_key":135377,"timestamp":"2026-05-29T05:00:00.000Z"} +{"doc_count":517,"split_key":50360,"timestamp":"2026-05-29T05:00:00.000Z"} +{"doc_count":1877,"split_key":396982,"timestamp":"2026-05-29T06:00:00.000Z"} +{"doc_count":1016,"split_key":24323,"timestamp":"2026-05-29T06:00:00.000Z"} +{"doc_count":875,"split_key":16509,"timestamp":"2026-05-29T06:00:00.000Z"} +{"doc_count":557,"split_key":50360,"timestamp":"2026-05-29T06:00:00.000Z"} +{"doc_count":427,"split_key":17995,"timestamp":"2026-05-29T06:00:00.000Z"} +{"doc_count":2860,"split_key":396982,"timestamp":"2026-05-29T07:00:00.000Z"} +{"doc_count":1044,"split_key":24323,"timestamp":"2026-05-29T07:00:00.000Z"} +{"doc_count":842,"split_key":209334,"timestamp":"2026-05-29T07:00:00.000Z"} +{"doc_count":696,"split_key":16509,"timestamp":"2026-05-29T07:00:00.000Z"} +{"doc_count":638,"split_key":14061,"timestamp":"2026-05-29T07:00:00.000Z"} +{"doc_count":1659,"split_key":396982,"timestamp":"2026-05-29T08:00:00.000Z"} +{"doc_count":1011,"split_key":24323,"timestamp":"2026-05-29T08:00:00.000Z"} +{"doc_count":909,"split_key":16509,"timestamp":"2026-05-29T08:00:00.000Z"} +{"doc_count":898,"split_key":49870,"timestamp":"2026-05-29T08:00:00.000Z"} +{"doc_count":686,"split_key":51396,"timestamp":"2026-05-29T08:00:00.000Z"} +{"doc_count":1883,"split_key":396982,"timestamp":"2026-05-29T09:00:00.000Z"} +{"doc_count":1067,"split_key":211590,"timestamp":"2026-05-29T09:00:00.000Z"} +{"doc_count":977,"split_key":24323,"timestamp":"2026-05-29T09:00:00.000Z"} +{"doc_count":908,"split_key":209334,"timestamp":"2026-05-29T09:00:00.000Z"} +{"doc_count":842,"split_key":16509,"timestamp":"2026-05-29T09:00:00.000Z"} +{"doc_count":2018,"split_key":211590,"timestamp":"2026-05-29T10:00:00.000Z"} +{"doc_count":1700,"split_key":209334,"timestamp":"2026-05-29T10:00:00.000Z"} +{"doc_count":573,"split_key":49870,"timestamp":"2026-05-29T10:00:00.000Z"} +{"doc_count":539,"split_key":50360,"timestamp":"2026-05-29T10:00:00.000Z"} +{"doc_count":538,"split_key":24323,"timestamp":"2026-05-29T10:00:00.000Z"} +{"doc_count":4469,"split_key":211590,"timestamp":"2026-05-29T11:00:00.000Z"} +{"doc_count":999,"split_key":396982,"timestamp":"2026-05-29T11:00:00.000Z"} +{"doc_count":954,"split_key":16509,"timestamp":"2026-05-29T11:00:00.000Z"} +{"doc_count":905,"split_key":209334,"timestamp":"2026-05-29T11:00:00.000Z"} +{"doc_count":879,"split_key":141995,"timestamp":"2026-05-29T11:00:00.000Z"} +{"doc_count":4044,"split_key":211590,"timestamp":"2026-05-29T12:00:00.000Z"} +{"doc_count":1650,"split_key":209334,"timestamp":"2026-05-29T12:00:00.000Z"} +{"doc_count":1154,"split_key":396982,"timestamp":"2026-05-29T12:00:00.000Z"} +{"doc_count":890,"split_key":141995,"timestamp":"2026-05-29T12:00:00.000Z"} +{"doc_count":615,"split_key":16509,"timestamp":"2026-05-29T12:00:00.000Z"} +{"doc_count":9238,"split_key":211590,"timestamp":"2026-05-29T13:00:00.000Z"} +{"doc_count":1922,"split_key":209334,"timestamp":"2026-05-29T13:00:00.000Z"} +{"doc_count":1549,"split_key":141995,"timestamp":"2026-05-29T13:00:00.000Z"} +{"doc_count":1308,"split_key":396982,"timestamp":"2026-05-29T13:00:00.000Z"} +{"doc_count":965,"split_key":8075,"timestamp":"2026-05-29T13:00:00.000Z"} +{"doc_count":4172,"split_key":208137,"timestamp":"2026-05-29T14:00:00.000Z"} +{"doc_count":3438,"split_key":211590,"timestamp":"2026-05-29T14:00:00.000Z"} +{"doc_count":1212,"split_key":209334,"timestamp":"2026-05-29T14:00:00.000Z"} +{"doc_count":939,"split_key":8075,"timestamp":"2026-05-29T14:00:00.000Z"} +{"doc_count":907,"split_key":16509,"timestamp":"2026-05-29T14:00:00.000Z"} +{"doc_count":6033,"split_key":211590,"timestamp":"2026-05-29T15:00:00.000Z"} +{"doc_count":4075,"split_key":208137,"timestamp":"2026-05-29T15:00:00.000Z"} +{"doc_count":4074,"split_key":209334,"timestamp":"2026-05-29T15:00:00.000Z"} +{"doc_count":1435,"split_key":16509,"timestamp":"2026-05-29T15:00:00.000Z"} +{"doc_count":1083,"split_key":396982,"timestamp":"2026-05-29T15:00:00.000Z"} +{"doc_count":4883,"split_key":209334,"timestamp":"2026-05-29T16:00:00.000Z"} +{"doc_count":4264,"split_key":208137,"timestamp":"2026-05-29T16:00:00.000Z"} +{"doc_count":2121,"split_key":396982,"timestamp":"2026-05-29T16:00:00.000Z"} +{"doc_count":1240,"split_key":25369,"timestamp":"2026-05-29T16:00:00.000Z"} +{"doc_count":755,"split_key":16509,"timestamp":"2026-05-29T16:00:00.000Z"} +{"doc_count":4656,"split_key":209334,"timestamp":"2026-05-29T17:00:00.000Z"} +{"doc_count":1179,"split_key":25369,"timestamp":"2026-05-29T17:00:00.000Z"} +{"doc_count":878,"split_key":396982,"timestamp":"2026-05-29T17:00:00.000Z"} +{"doc_count":720,"split_key":16509,"timestamp":"2026-05-29T17:00:00.000Z"} +{"doc_count":569,"split_key":51396,"timestamp":"2026-05-29T17:00:00.000Z"} +{"doc_count":3766,"split_key":209334,"timestamp":"2026-05-29T18:00:00.000Z"} +{"doc_count":1184,"split_key":396982,"timestamp":"2026-05-29T18:00:00.000Z"} +{"doc_count":1083,"split_key":51396,"timestamp":"2026-05-29T18:00:00.000Z"} +{"doc_count":634,"split_key":25369,"timestamp":"2026-05-29T18:00:00.000Z"} +{"doc_count":580,"split_key":16509,"timestamp":"2026-05-29T18:00:00.000Z"} +{"doc_count":4620,"split_key":209334,"timestamp":"2026-05-29T19:00:00.000Z"} +{"doc_count":1572,"split_key":396982,"timestamp":"2026-05-29T19:00:00.000Z"} +{"doc_count":605,"split_key":16509,"timestamp":"2026-05-29T19:00:00.000Z"} +{"doc_count":576,"split_key":24323,"timestamp":"2026-05-29T19:00:00.000Z"} +{"doc_count":398,"split_key":138915,"timestamp":"2026-05-29T19:00:00.000Z"} +{"doc_count":2933,"split_key":209334,"timestamp":"2026-05-29T20:00:00.000Z"} +{"doc_count":1050,"split_key":45102,"timestamp":"2026-05-29T20:00:00.000Z"} +{"doc_count":597,"split_key":24323,"timestamp":"2026-05-29T20:00:00.000Z"} +{"doc_count":582,"split_key":396982,"timestamp":"2026-05-29T20:00:00.000Z"} +{"doc_count":570,"split_key":25369,"timestamp":"2026-05-29T20:00:00.000Z"} +{"doc_count":3110,"split_key":209334,"timestamp":"2026-05-29T21:00:00.000Z"} +{"doc_count":1813,"split_key":14061,"timestamp":"2026-05-29T21:00:00.000Z"} +{"doc_count":1227,"split_key":45102,"timestamp":"2026-05-29T21:00:00.000Z"} +{"doc_count":876,"split_key":25369,"timestamp":"2026-05-29T21:00:00.000Z"} +{"doc_count":754,"split_key":396982,"timestamp":"2026-05-29T21:00:00.000Z"} +{"doc_count":10751,"split_key":396982,"timestamp":"2026-05-29T22:00:00.000Z"} +{"doc_count":1306,"split_key":45102,"timestamp":"2026-05-29T22:00:00.000Z"} +{"doc_count":1218,"split_key":14061,"timestamp":"2026-05-29T22:00:00.000Z"} +{"doc_count":936,"split_key":25369,"timestamp":"2026-05-29T22:00:00.000Z"} +{"doc_count":550,"split_key":16509,"timestamp":"2026-05-29T22:00:00.000Z"} +{"doc_count":11521,"split_key":396982,"timestamp":"2026-05-29T23:00:00.000Z"} +{"doc_count":1253,"split_key":14061,"timestamp":"2026-05-29T23:00:00.000Z"} +{"doc_count":1219,"split_key":45102,"timestamp":"2026-05-29T23:00:00.000Z"} +{"doc_count":981,"split_key":25369,"timestamp":"2026-05-29T23:00:00.000Z"} +{"doc_count":571,"split_key":24323,"timestamp":"2026-05-29T23:00:00.000Z"} +{"doc_count":14484,"split_key":396982,"timestamp":"2026-05-30T00:00:00.000Z"} +{"doc_count":1386,"split_key":14061,"timestamp":"2026-05-30T00:00:00.000Z"} +{"doc_count":1013,"split_key":45102,"timestamp":"2026-05-30T00:00:00.000Z"} +{"doc_count":720,"split_key":25369,"timestamp":"2026-05-30T00:00:00.000Z"} +{"doc_count":713,"split_key":47890,"timestamp":"2026-05-30T00:00:00.000Z"} +{"doc_count":11745,"split_key":396982,"timestamp":"2026-05-30T01:00:00.000Z"} +{"doc_count":1534,"split_key":14061,"timestamp":"2026-05-30T01:00:00.000Z"} +{"doc_count":1113,"split_key":51396,"timestamp":"2026-05-30T01:00:00.000Z"} +{"doc_count":997,"split_key":4134,"timestamp":"2026-05-30T01:00:00.000Z"} +{"doc_count":598,"split_key":16509,"timestamp":"2026-05-30T01:00:00.000Z"} +{"doc_count":6604,"split_key":396982,"timestamp":"2026-05-30T02:00:00.000Z"} +{"doc_count":1495,"split_key":14061,"timestamp":"2026-05-30T02:00:00.000Z"} +{"doc_count":1331,"split_key":212238,"timestamp":"2026-05-30T02:00:00.000Z"} +{"doc_count":1045,"split_key":12989,"timestamp":"2026-05-30T02:00:00.000Z"} +{"doc_count":633,"split_key":16509,"timestamp":"2026-05-30T02:00:00.000Z"} +{"doc_count":8533,"split_key":396982,"timestamp":"2026-05-30T03:00:00.000Z"} +{"doc_count":1711,"split_key":14061,"timestamp":"2026-05-30T03:00:00.000Z"} +{"doc_count":617,"split_key":398101,"timestamp":"2026-05-30T03:00:00.000Z"} +{"doc_count":604,"split_key":51396,"timestamp":"2026-05-30T03:00:00.000Z"} +{"doc_count":375,"split_key":37963,"timestamp":"2026-05-30T03:00:00.000Z"} +{"doc_count":10729,"split_key":396982,"timestamp":"2026-05-30T04:00:00.000Z"} +{"doc_count":1665,"split_key":14061,"timestamp":"2026-05-30T04:00:00.000Z"} +{"doc_count":769,"split_key":398101,"timestamp":"2026-05-30T04:00:00.000Z"} +{"doc_count":589,"split_key":16509,"timestamp":"2026-05-30T04:00:00.000Z"} +{"doc_count":363,"split_key":37963,"timestamp":"2026-05-30T04:00:00.000Z"} +{"doc_count":6925,"split_key":396982,"timestamp":"2026-05-30T05:00:00.000Z"} +{"doc_count":4287,"split_key":13649,"timestamp":"2026-05-30T05:00:00.000Z"} +{"doc_count":2511,"split_key":14061,"timestamp":"2026-05-30T05:00:00.000Z"} +{"doc_count":1140,"split_key":51396,"timestamp":"2026-05-30T05:00:00.000Z"} +{"doc_count":675,"split_key":12332,"timestamp":"2026-05-30T05:00:00.000Z"} +{"doc_count":2021,"split_key":49870,"timestamp":"2026-05-30T06:00:00.000Z"} +{"doc_count":1665,"split_key":14061,"timestamp":"2026-05-30T06:00:00.000Z"} +{"doc_count":1198,"split_key":396982,"timestamp":"2026-05-30T06:00:00.000Z"} +{"doc_count":683,"split_key":137899,"timestamp":"2026-05-30T06:00:00.000Z"} +{"doc_count":489,"split_key":16509,"timestamp":"2026-05-30T06:00:00.000Z"} +{"doc_count":2664,"split_key":14061,"timestamp":"2026-05-30T07:00:00.000Z"} +{"doc_count":1711,"split_key":49870,"timestamp":"2026-05-30T07:00:00.000Z"} +{"doc_count":582,"split_key":396982,"timestamp":"2026-05-30T07:00:00.000Z"} +{"doc_count":551,"split_key":51396,"timestamp":"2026-05-30T07:00:00.000Z"} +{"doc_count":377,"split_key":37963,"timestamp":"2026-05-30T07:00:00.000Z"} +{"doc_count":3213,"split_key":14061,"timestamp":"2026-05-30T08:00:00.000Z"} +{"doc_count":2882,"split_key":208137,"timestamp":"2026-05-30T08:00:00.000Z"} +{"doc_count":1622,"split_key":49870,"timestamp":"2026-05-30T08:00:00.000Z"} +{"doc_count":461,"split_key":396982,"timestamp":"2026-05-30T08:00:00.000Z"} +{"doc_count":320,"split_key":138915,"timestamp":"2026-05-30T08:00:00.000Z"} +{"doc_count":12774,"split_key":209334,"timestamp":"2026-05-30T09:00:00.000Z"} +{"doc_count":3525,"split_key":208137,"timestamp":"2026-05-30T09:00:00.000Z"} +{"doc_count":3064,"split_key":14061,"timestamp":"2026-05-30T09:00:00.000Z"} +{"doc_count":1312,"split_key":49870,"timestamp":"2026-05-30T09:00:00.000Z"} +{"doc_count":696,"split_key":137899,"timestamp":"2026-05-30T09:00:00.000Z"} +{"doc_count":5271,"split_key":209334,"timestamp":"2026-05-30T10:00:00.000Z"} +{"doc_count":3210,"split_key":14061,"timestamp":"2026-05-30T10:00:00.000Z"} +{"doc_count":454,"split_key":201401,"timestamp":"2026-05-30T10:00:00.000Z"} +{"doc_count":448,"split_key":49870,"timestamp":"2026-05-30T10:00:00.000Z"} +{"doc_count":431,"split_key":396982,"timestamp":"2026-05-30T10:00:00.000Z"} +{"doc_count":2963,"split_key":14061,"timestamp":"2026-05-30T11:00:00.000Z"} +{"doc_count":700,"split_key":209334,"timestamp":"2026-05-30T11:00:00.000Z"} +{"doc_count":610,"split_key":137899,"timestamp":"2026-05-30T11:00:00.000Z"} +{"doc_count":457,"split_key":201401,"timestamp":"2026-05-30T11:00:00.000Z"} +{"doc_count":430,"split_key":396982,"timestamp":"2026-05-30T11:00:00.000Z"} +{"doc_count":3039,"split_key":14061,"timestamp":"2026-05-30T12:00:00.000Z"} +{"doc_count":909,"split_key":209334,"timestamp":"2026-05-30T12:00:00.000Z"} +{"doc_count":672,"split_key":398101,"timestamp":"2026-05-30T12:00:00.000Z"} +{"doc_count":576,"split_key":16509,"timestamp":"2026-05-30T12:00:00.000Z"} +{"doc_count":523,"split_key":211590,"timestamp":"2026-05-30T12:00:00.000Z"} +{"doc_count":4150,"split_key":211590,"timestamp":"2026-05-30T13:00:00.000Z"} +{"doc_count":3946,"split_key":209334,"timestamp":"2026-05-30T13:00:00.000Z"} +{"doc_count":2841,"split_key":14061,"timestamp":"2026-05-30T13:00:00.000Z"} +{"doc_count":976,"split_key":141995,"timestamp":"2026-05-30T13:00:00.000Z"} +{"doc_count":791,"split_key":51396,"timestamp":"2026-05-30T13:00:00.000Z"} +{"doc_count":2412,"split_key":209334,"timestamp":"2026-05-30T14:00:00.000Z"} +{"doc_count":1816,"split_key":14061,"timestamp":"2026-05-30T14:00:00.000Z"} +{"doc_count":411,"split_key":396982,"timestamp":"2026-05-30T14:00:00.000Z"} +{"doc_count":352,"split_key":138915,"timestamp":"2026-05-30T14:00:00.000Z"} +{"doc_count":322,"split_key":51396,"timestamp":"2026-05-30T14:00:00.000Z"} +{"doc_count":1924,"split_key":14061,"timestamp":"2026-05-30T15:00:00.000Z"} +{"doc_count":1009,"split_key":137899,"timestamp":"2026-05-30T15:00:00.000Z"} +{"doc_count":471,"split_key":398101,"timestamp":"2026-05-30T15:00:00.000Z"} +{"doc_count":366,"split_key":138915,"timestamp":"2026-05-30T15:00:00.000Z"} +{"doc_count":327,"split_key":198953,"timestamp":"2026-05-30T15:00:00.000Z"} +{"doc_count":2179,"split_key":14061,"timestamp":"2026-05-30T16:00:00.000Z"} +{"doc_count":1880,"split_key":209334,"timestamp":"2026-05-30T16:00:00.000Z"} +{"doc_count":495,"split_key":51396,"timestamp":"2026-05-30T16:00:00.000Z"} +{"doc_count":370,"split_key":138915,"timestamp":"2026-05-30T16:00:00.000Z"} +{"doc_count":366,"split_key":16509,"timestamp":"2026-05-30T16:00:00.000Z"} +{"doc_count":2256,"split_key":14061,"timestamp":"2026-05-30T17:00:00.000Z"} +{"doc_count":1648,"split_key":209334,"timestamp":"2026-05-30T17:00:00.000Z"} +{"doc_count":556,"split_key":396982,"timestamp":"2026-05-30T17:00:00.000Z"} +{"doc_count":376,"split_key":138915,"timestamp":"2026-05-30T17:00:00.000Z"} +{"doc_count":368,"split_key":51396,"timestamp":"2026-05-30T17:00:00.000Z"} +{"doc_count":2142,"split_key":14061,"timestamp":"2026-05-30T18:00:00.000Z"} +{"doc_count":1352,"split_key":51396,"timestamp":"2026-05-30T18:00:00.000Z"} +{"doc_count":503,"split_key":37963,"timestamp":"2026-05-30T18:00:00.000Z"} +{"doc_count":478,"split_key":396982,"timestamp":"2026-05-30T18:00:00.000Z"} +{"doc_count":384,"split_key":23140,"timestamp":"2026-05-30T18:00:00.000Z"} +{"doc_count":3581,"split_key":209334,"timestamp":"2026-05-30T19:00:00.000Z"} +{"doc_count":2227,"split_key":14061,"timestamp":"2026-05-30T19:00:00.000Z"} +{"doc_count":659,"split_key":37963,"timestamp":"2026-05-30T19:00:00.000Z"} +{"doc_count":650,"split_key":51396,"timestamp":"2026-05-30T19:00:00.000Z"} +{"doc_count":564,"split_key":396982,"timestamp":"2026-05-30T19:00:00.000Z"} +{"doc_count":3069,"split_key":211590,"timestamp":"2026-05-30T20:00:00.000Z"} +{"doc_count":2223,"split_key":14061,"timestamp":"2026-05-30T20:00:00.000Z"} +{"doc_count":1229,"split_key":25369,"timestamp":"2026-05-30T20:00:00.000Z"} +{"doc_count":911,"split_key":209334,"timestamp":"2026-05-30T20:00:00.000Z"} +{"doc_count":886,"split_key":37963,"timestamp":"2026-05-30T20:00:00.000Z"} +{"doc_count":8949,"split_key":211590,"timestamp":"2026-05-30T21:00:00.000Z"} +{"doc_count":3658,"split_key":209334,"timestamp":"2026-05-30T21:00:00.000Z"} +{"doc_count":2422,"split_key":14061,"timestamp":"2026-05-30T21:00:00.000Z"} +{"doc_count":1124,"split_key":25369,"timestamp":"2026-05-30T21:00:00.000Z"} +{"doc_count":1117,"split_key":37963,"timestamp":"2026-05-30T21:00:00.000Z"} +{"doc_count":3579,"split_key":14061,"timestamp":"2026-05-30T22:00:00.000Z"} +{"doc_count":1764,"split_key":209334,"timestamp":"2026-05-30T22:00:00.000Z"} +{"doc_count":1160,"split_key":37963,"timestamp":"2026-05-30T22:00:00.000Z"} +{"doc_count":831,"split_key":396982,"timestamp":"2026-05-30T22:00:00.000Z"} +{"doc_count":605,"split_key":25369,"timestamp":"2026-05-30T22:00:00.000Z"} +{"doc_count":8477,"split_key":209334,"timestamp":"2026-05-30T23:00:00.000Z"} +{"doc_count":3488,"split_key":14061,"timestamp":"2026-05-30T23:00:00.000Z"} +{"doc_count":1110,"split_key":37963,"timestamp":"2026-05-30T23:00:00.000Z"} +{"doc_count":939,"split_key":201401,"timestamp":"2026-05-30T23:00:00.000Z"} +{"doc_count":695,"split_key":396982,"timestamp":"2026-05-30T23:00:00.000Z"} +{"doc_count":5188,"split_key":14061,"timestamp":"2026-05-31T00:00:00.000Z"} +{"doc_count":3689,"split_key":209334,"timestamp":"2026-05-31T00:00:00.000Z"} +{"doc_count":1110,"split_key":37963,"timestamp":"2026-05-31T00:00:00.000Z"} +{"doc_count":997,"split_key":25369,"timestamp":"2026-05-31T00:00:00.000Z"} +{"doc_count":966,"split_key":201401,"timestamp":"2026-05-31T00:00:00.000Z"} +{"doc_count":6505,"split_key":14061,"timestamp":"2026-05-31T01:00:00.000Z"} +{"doc_count":2396,"split_key":209334,"timestamp":"2026-05-31T01:00:00.000Z"} +{"doc_count":1292,"split_key":396982,"timestamp":"2026-05-31T01:00:00.000Z"} +{"doc_count":1128,"split_key":25369,"timestamp":"2026-05-31T01:00:00.000Z"} +{"doc_count":1107,"split_key":37963,"timestamp":"2026-05-31T01:00:00.000Z"} +{"doc_count":6386,"split_key":14061,"timestamp":"2026-05-31T02:00:00.000Z"} +{"doc_count":3409,"split_key":209334,"timestamp":"2026-05-31T02:00:00.000Z"} +{"doc_count":2372,"split_key":3462,"timestamp":"2026-05-31T02:00:00.000Z"} +{"doc_count":1423,"split_key":396982,"timestamp":"2026-05-31T02:00:00.000Z"} +{"doc_count":1110,"split_key":37963,"timestamp":"2026-05-31T02:00:00.000Z"} +{"doc_count":7320,"split_key":14061,"timestamp":"2026-05-31T03:00:00.000Z"} +{"doc_count":6793,"split_key":209334,"timestamp":"2026-05-31T03:00:00.000Z"} +{"doc_count":3908,"split_key":211590,"timestamp":"2026-05-31T03:00:00.000Z"} +{"doc_count":2421,"split_key":3462,"timestamp":"2026-05-31T03:00:00.000Z"} +{"doc_count":1100,"split_key":37963,"timestamp":"2026-05-31T03:00:00.000Z"} +{"doc_count":7496,"split_key":14061,"timestamp":"2026-05-31T04:00:00.000Z"} +{"doc_count":5204,"split_key":211590,"timestamp":"2026-05-31T04:00:00.000Z"} +{"doc_count":2864,"split_key":209334,"timestamp":"2026-05-31T04:00:00.000Z"} +{"doc_count":2420,"split_key":3462,"timestamp":"2026-05-31T04:00:00.000Z"} +{"doc_count":1133,"split_key":37963,"timestamp":"2026-05-31T04:00:00.000Z"} +{"doc_count":7777,"split_key":14061,"timestamp":"2026-05-31T05:00:00.000Z"} +{"doc_count":6017,"split_key":211590,"timestamp":"2026-05-31T05:00:00.000Z"} +{"doc_count":4009,"split_key":209334,"timestamp":"2026-05-31T05:00:00.000Z"} +{"doc_count":2385,"split_key":3462,"timestamp":"2026-05-31T05:00:00.000Z"} +{"doc_count":1363,"split_key":38731,"timestamp":"2026-05-31T05:00:00.000Z"} +{"doc_count":7352,"split_key":14061,"timestamp":"2026-05-31T06:00:00.000Z"} +{"doc_count":5141,"split_key":209334,"timestamp":"2026-05-31T06:00:00.000Z"} +{"doc_count":2388,"split_key":3462,"timestamp":"2026-05-31T06:00:00.000Z"} +{"doc_count":1050,"split_key":37963,"timestamp":"2026-05-31T06:00:00.000Z"} +{"doc_count":885,"split_key":16509,"timestamp":"2026-05-31T06:00:00.000Z"} +{"doc_count":7293,"split_key":14061,"timestamp":"2026-05-31T07:00:00.000Z"} +{"doc_count":3453,"split_key":209334,"timestamp":"2026-05-31T07:00:00.000Z"} +{"doc_count":2389,"split_key":3462,"timestamp":"2026-05-31T07:00:00.000Z"} +{"doc_count":1072,"split_key":37963,"timestamp":"2026-05-31T07:00:00.000Z"} +{"doc_count":753,"split_key":396982,"timestamp":"2026-05-31T07:00:00.000Z"} +{"doc_count":6950,"split_key":14061,"timestamp":"2026-05-31T08:00:00.000Z"} +{"doc_count":2449,"split_key":3462,"timestamp":"2026-05-31T08:00:00.000Z"} +{"doc_count":2257,"split_key":37963,"timestamp":"2026-05-31T08:00:00.000Z"} +{"doc_count":2042,"split_key":209334,"timestamp":"2026-05-31T08:00:00.000Z"} +{"doc_count":739,"split_key":16509,"timestamp":"2026-05-31T08:00:00.000Z"} +{"doc_count":6811,"split_key":14061,"timestamp":"2026-05-31T09:00:00.000Z"} +{"doc_count":4175,"split_key":209334,"timestamp":"2026-05-31T09:00:00.000Z"} +{"doc_count":2359,"split_key":3462,"timestamp":"2026-05-31T09:00:00.000Z"} +{"doc_count":1927,"split_key":37963,"timestamp":"2026-05-31T09:00:00.000Z"} +{"doc_count":1069,"split_key":16509,"timestamp":"2026-05-31T09:00:00.000Z"} +{"doc_count":9309,"split_key":63949,"timestamp":"2026-05-31T10:00:00.000Z"} +{"doc_count":6825,"split_key":14061,"timestamp":"2026-05-31T10:00:00.000Z"} +{"doc_count":2371,"split_key":3462,"timestamp":"2026-05-31T10:00:00.000Z"} +{"doc_count":1900,"split_key":209334,"timestamp":"2026-05-31T10:00:00.000Z"} +{"doc_count":1840,"split_key":37963,"timestamp":"2026-05-31T10:00:00.000Z"} +{"doc_count":21126,"split_key":63949,"timestamp":"2026-05-31T11:00:00.000Z"} +{"doc_count":6901,"split_key":14061,"timestamp":"2026-05-31T11:00:00.000Z"} +{"doc_count":3253,"split_key":209334,"timestamp":"2026-05-31T11:00:00.000Z"} +{"doc_count":2371,"split_key":3462,"timestamp":"2026-05-31T11:00:00.000Z"} +{"doc_count":1275,"split_key":834,"timestamp":"2026-05-31T11:00:00.000Z"} +{"doc_count":6958,"split_key":14061,"timestamp":"2026-05-31T12:00:00.000Z"} +{"doc_count":2382,"split_key":3462,"timestamp":"2026-05-31T12:00:00.000Z"} +{"doc_count":2292,"split_key":25211,"timestamp":"2026-05-31T12:00:00.000Z"} +{"doc_count":1360,"split_key":209334,"timestamp":"2026-05-31T12:00:00.000Z"} +{"doc_count":831,"split_key":16509,"timestamp":"2026-05-31T12:00:00.000Z"} +{"doc_count":6812,"split_key":14061,"timestamp":"2026-05-31T13:00:00.000Z"} +{"doc_count":2096,"split_key":3462,"timestamp":"2026-05-31T13:00:00.000Z"} +{"doc_count":943,"split_key":16509,"timestamp":"2026-05-31T13:00:00.000Z"} +{"doc_count":633,"split_key":51396,"timestamp":"2026-05-31T13:00:00.000Z"} +{"doc_count":609,"split_key":209334,"timestamp":"2026-05-31T13:00:00.000Z"} +{"doc_count":6474,"split_key":14061,"timestamp":"2026-05-31T14:00:00.000Z"} +{"doc_count":2583,"split_key":209334,"timestamp":"2026-05-31T14:00:00.000Z"} +{"doc_count":2050,"split_key":211590,"timestamp":"2026-05-31T14:00:00.000Z"} +{"doc_count":2046,"split_key":3462,"timestamp":"2026-05-31T14:00:00.000Z"} +{"doc_count":686,"split_key":51396,"timestamp":"2026-05-31T14:00:00.000Z"} +{"doc_count":6291,"split_key":14061,"timestamp":"2026-05-31T15:00:00.000Z"} +{"doc_count":2402,"split_key":3462,"timestamp":"2026-05-31T15:00:00.000Z"} +{"doc_count":1290,"split_key":63949,"timestamp":"2026-05-31T15:00:00.000Z"} +{"doc_count":795,"split_key":209334,"timestamp":"2026-05-31T15:00:00.000Z"} +{"doc_count":524,"split_key":23969,"timestamp":"2026-05-31T15:00:00.000Z"} +{"doc_count":30921,"split_key":63949,"timestamp":"2026-05-31T16:00:00.000Z"} +{"doc_count":6086,"split_key":14061,"timestamp":"2026-05-31T16:00:00.000Z"} +{"doc_count":3696,"split_key":209334,"timestamp":"2026-05-31T16:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-05-31T16:00:00.000Z"} +{"doc_count":2392,"split_key":3462,"timestamp":"2026-05-31T16:00:00.000Z"} +{"doc_count":20887,"split_key":63949,"timestamp":"2026-05-31T17:00:00.000Z"} +{"doc_count":16478,"split_key":25211,"timestamp":"2026-05-31T17:00:00.000Z"} +{"doc_count":5807,"split_key":14061,"timestamp":"2026-05-31T17:00:00.000Z"} +{"doc_count":3838,"split_key":209334,"timestamp":"2026-05-31T17:00:00.000Z"} +{"doc_count":1008,"split_key":3462,"timestamp":"2026-05-31T17:00:00.000Z"} +{"doc_count":22322,"split_key":25211,"timestamp":"2026-05-31T18:00:00.000Z"} +{"doc_count":7923,"split_key":63949,"timestamp":"2026-05-31T18:00:00.000Z"} +{"doc_count":5695,"split_key":14061,"timestamp":"2026-05-31T18:00:00.000Z"} +{"doc_count":1302,"split_key":209334,"timestamp":"2026-05-31T18:00:00.000Z"} +{"doc_count":986,"split_key":51396,"timestamp":"2026-05-31T18:00:00.000Z"} +{"doc_count":6273,"split_key":25211,"timestamp":"2026-05-31T19:00:00.000Z"} +{"doc_count":5291,"split_key":14061,"timestamp":"2026-05-31T19:00:00.000Z"} +{"doc_count":634,"split_key":51396,"timestamp":"2026-05-31T19:00:00.000Z"} +{"doc_count":609,"split_key":25369,"timestamp":"2026-05-31T19:00:00.000Z"} +{"doc_count":408,"split_key":23969,"timestamp":"2026-05-31T19:00:00.000Z"} +{"doc_count":4946,"split_key":14061,"timestamp":"2026-05-31T20:00:00.000Z"} +{"doc_count":3189,"split_key":209334,"timestamp":"2026-05-31T20:00:00.000Z"} +{"doc_count":879,"split_key":16509,"timestamp":"2026-05-31T20:00:00.000Z"} +{"doc_count":522,"split_key":25369,"timestamp":"2026-05-31T20:00:00.000Z"} +{"doc_count":493,"split_key":37963,"timestamp":"2026-05-31T20:00:00.000Z"} +{"doc_count":5248,"split_key":14061,"timestamp":"2026-05-31T21:00:00.000Z"} +{"doc_count":1979,"split_key":209334,"timestamp":"2026-05-31T21:00:00.000Z"} +{"doc_count":645,"split_key":37963,"timestamp":"2026-05-31T21:00:00.000Z"} +{"doc_count":630,"split_key":25369,"timestamp":"2026-05-31T21:00:00.000Z"} +{"doc_count":571,"split_key":396982,"timestamp":"2026-05-31T21:00:00.000Z"} +{"doc_count":8293,"split_key":48090,"timestamp":"2026-05-31T22:00:00.000Z"} +{"doc_count":5858,"split_key":209334,"timestamp":"2026-05-31T22:00:00.000Z"} +{"doc_count":4848,"split_key":14061,"timestamp":"2026-05-31T22:00:00.000Z"} +{"doc_count":777,"split_key":16509,"timestamp":"2026-05-31T22:00:00.000Z"} +{"doc_count":718,"split_key":25369,"timestamp":"2026-05-31T22:00:00.000Z"} +{"doc_count":10033,"split_key":14987,"timestamp":"2026-05-31T23:00:00.000Z"} +{"doc_count":5797,"split_key":209334,"timestamp":"2026-05-31T23:00:00.000Z"} +{"doc_count":4375,"split_key":14061,"timestamp":"2026-05-31T23:00:00.000Z"} +{"doc_count":967,"split_key":25369,"timestamp":"2026-05-31T23:00:00.000Z"} +{"doc_count":690,"split_key":51396,"timestamp":"2026-05-31T23:00:00.000Z"} +{"doc_count":4319,"split_key":14061,"timestamp":"2026-06-01T00:00:00.000Z"} +{"doc_count":1780,"split_key":209334,"timestamp":"2026-06-01T00:00:00.000Z"} +{"doc_count":1443,"split_key":37963,"timestamp":"2026-06-01T00:00:00.000Z"} +{"doc_count":917,"split_key":25369,"timestamp":"2026-06-01T00:00:00.000Z"} +{"doc_count":830,"split_key":16509,"timestamp":"2026-06-01T00:00:00.000Z"} +{"doc_count":4329,"split_key":209334,"timestamp":"2026-06-01T01:00:00.000Z"} +{"doc_count":4297,"split_key":14061,"timestamp":"2026-06-01T01:00:00.000Z"} +{"doc_count":1561,"split_key":37963,"timestamp":"2026-06-01T01:00:00.000Z"} +{"doc_count":819,"split_key":51396,"timestamp":"2026-06-01T01:00:00.000Z"} +{"doc_count":610,"split_key":25369,"timestamp":"2026-06-01T01:00:00.000Z"} +{"doc_count":4145,"split_key":14061,"timestamp":"2026-06-01T02:00:00.000Z"} +{"doc_count":2801,"split_key":209334,"timestamp":"2026-06-01T02:00:00.000Z"} +{"doc_count":1687,"split_key":37963,"timestamp":"2026-06-01T02:00:00.000Z"} +{"doc_count":802,"split_key":25369,"timestamp":"2026-06-01T02:00:00.000Z"} +{"doc_count":612,"split_key":16509,"timestamp":"2026-06-01T02:00:00.000Z"} +{"doc_count":4504,"split_key":14061,"timestamp":"2026-06-01T03:00:00.000Z"} +{"doc_count":1611,"split_key":37963,"timestamp":"2026-06-01T03:00:00.000Z"} +{"doc_count":1049,"split_key":209334,"timestamp":"2026-06-01T03:00:00.000Z"} +{"doc_count":969,"split_key":25369,"timestamp":"2026-06-01T03:00:00.000Z"} +{"doc_count":698,"split_key":16509,"timestamp":"2026-06-01T03:00:00.000Z"} +{"doc_count":4584,"split_key":14061,"timestamp":"2026-06-01T04:00:00.000Z"} +{"doc_count":1955,"split_key":37963,"timestamp":"2026-06-01T04:00:00.000Z"} +{"doc_count":962,"split_key":25369,"timestamp":"2026-06-01T04:00:00.000Z"} +{"doc_count":962,"split_key":51396,"timestamp":"2026-06-01T04:00:00.000Z"} +{"doc_count":477,"split_key":396982,"timestamp":"2026-06-01T04:00:00.000Z"} +{"doc_count":4004,"split_key":14061,"timestamp":"2026-06-01T05:00:00.000Z"} +{"doc_count":980,"split_key":37963,"timestamp":"2026-06-01T05:00:00.000Z"} +{"doc_count":814,"split_key":396982,"timestamp":"2026-06-01T05:00:00.000Z"} +{"doc_count":754,"split_key":5606,"timestamp":"2026-06-01T05:00:00.000Z"} +{"doc_count":588,"split_key":137899,"timestamp":"2026-06-01T05:00:00.000Z"} +{"doc_count":3680,"split_key":14061,"timestamp":"2026-06-01T06:00:00.000Z"} +{"doc_count":1062,"split_key":209334,"timestamp":"2026-06-01T06:00:00.000Z"} +{"doc_count":786,"split_key":37963,"timestamp":"2026-06-01T06:00:00.000Z"} +{"doc_count":550,"split_key":16509,"timestamp":"2026-06-01T06:00:00.000Z"} +{"doc_count":539,"split_key":25369,"timestamp":"2026-06-01T06:00:00.000Z"} +{"doc_count":4739,"split_key":209334,"timestamp":"2026-06-01T07:00:00.000Z"} +{"doc_count":3483,"split_key":14061,"timestamp":"2026-06-01T07:00:00.000Z"} +{"doc_count":562,"split_key":16509,"timestamp":"2026-06-01T07:00:00.000Z"} +{"doc_count":551,"split_key":25369,"timestamp":"2026-06-01T07:00:00.000Z"} +{"doc_count":526,"split_key":37963,"timestamp":"2026-06-01T07:00:00.000Z"} +{"doc_count":4160,"split_key":209334,"timestamp":"2026-06-01T08:00:00.000Z"} +{"doc_count":3271,"split_key":14061,"timestamp":"2026-06-01T08:00:00.000Z"} +{"doc_count":1083,"split_key":137899,"timestamp":"2026-06-01T08:00:00.000Z"} +{"doc_count":970,"split_key":37963,"timestamp":"2026-06-01T08:00:00.000Z"} +{"doc_count":533,"split_key":24323,"timestamp":"2026-06-01T08:00:00.000Z"} +{"doc_count":3031,"split_key":14061,"timestamp":"2026-06-01T09:00:00.000Z"} +{"doc_count":1549,"split_key":37963,"timestamp":"2026-06-01T09:00:00.000Z"} +{"doc_count":568,"split_key":25369,"timestamp":"2026-06-01T09:00:00.000Z"} +{"doc_count":504,"split_key":24323,"timestamp":"2026-06-01T09:00:00.000Z"} +{"doc_count":504,"split_key":48090,"timestamp":"2026-06-01T09:00:00.000Z"} +{"doc_count":2944,"split_key":14061,"timestamp":"2026-06-01T10:00:00.000Z"} +{"doc_count":2243,"split_key":209334,"timestamp":"2026-06-01T10:00:00.000Z"} +{"doc_count":1031,"split_key":45102,"timestamp":"2026-06-01T10:00:00.000Z"} +{"doc_count":620,"split_key":48090,"timestamp":"2026-06-01T10:00:00.000Z"} +{"doc_count":590,"split_key":37963,"timestamp":"2026-06-01T10:00:00.000Z"} +{"doc_count":6689,"split_key":209334,"timestamp":"2026-06-01T11:00:00.000Z"} +{"doc_count":4000,"split_key":14061,"timestamp":"2026-06-01T11:00:00.000Z"} +{"doc_count":1934,"split_key":37963,"timestamp":"2026-06-01T11:00:00.000Z"} +{"doc_count":1787,"split_key":45102,"timestamp":"2026-06-01T11:00:00.000Z"} +{"doc_count":802,"split_key":51396,"timestamp":"2026-06-01T11:00:00.000Z"} +{"doc_count":8383,"split_key":11878,"timestamp":"2026-06-01T12:00:00.000Z"} +{"doc_count":3929,"split_key":14061,"timestamp":"2026-06-01T12:00:00.000Z"} +{"doc_count":1315,"split_key":51396,"timestamp":"2026-06-01T12:00:00.000Z"} +{"doc_count":1279,"split_key":211590,"timestamp":"2026-06-01T12:00:00.000Z"} +{"doc_count":1269,"split_key":209334,"timestamp":"2026-06-01T12:00:00.000Z"} +{"doc_count":95383,"split_key":48090,"timestamp":"2026-06-01T13:00:00.000Z"} +{"doc_count":12022,"split_key":25211,"timestamp":"2026-06-01T13:00:00.000Z"} +{"doc_count":3845,"split_key":14061,"timestamp":"2026-06-01T13:00:00.000Z"} +{"doc_count":2035,"split_key":209334,"timestamp":"2026-06-01T13:00:00.000Z"} +{"doc_count":1905,"split_key":37963,"timestamp":"2026-06-01T13:00:00.000Z"} +{"doc_count":20559,"split_key":25211,"timestamp":"2026-06-01T14:00:00.000Z"} +{"doc_count":13885,"split_key":209334,"timestamp":"2026-06-01T14:00:00.000Z"} +{"doc_count":3619,"split_key":211590,"timestamp":"2026-06-01T14:00:00.000Z"} +{"doc_count":2865,"split_key":14061,"timestamp":"2026-06-01T14:00:00.000Z"} +{"doc_count":573,"split_key":201401,"timestamp":"2026-06-01T14:00:00.000Z"} +{"doc_count":20553,"split_key":25211,"timestamp":"2026-06-01T15:00:00.000Z"} +{"doc_count":4782,"split_key":209334,"timestamp":"2026-06-01T15:00:00.000Z"} +{"doc_count":2411,"split_key":14061,"timestamp":"2026-06-01T15:00:00.000Z"} +{"doc_count":1795,"split_key":14987,"timestamp":"2026-06-01T15:00:00.000Z"} +{"doc_count":553,"split_key":25369,"timestamp":"2026-06-01T15:00:00.000Z"} +{"doc_count":20655,"split_key":25211,"timestamp":"2026-06-01T16:00:00.000Z"} +{"doc_count":2339,"split_key":14061,"timestamp":"2026-06-01T16:00:00.000Z"} +{"doc_count":935,"split_key":37963,"timestamp":"2026-06-01T16:00:00.000Z"} +{"doc_count":556,"split_key":45102,"timestamp":"2026-06-01T16:00:00.000Z"} +{"doc_count":523,"split_key":48090,"timestamp":"2026-06-01T16:00:00.000Z"} +{"doc_count":20697,"split_key":25211,"timestamp":"2026-06-01T17:00:00.000Z"} +{"doc_count":5414,"split_key":209334,"timestamp":"2026-06-01T17:00:00.000Z"} +{"doc_count":2258,"split_key":14061,"timestamp":"2026-06-01T17:00:00.000Z"} +{"doc_count":1057,"split_key":37963,"timestamp":"2026-06-01T17:00:00.000Z"} +{"doc_count":583,"split_key":48090,"timestamp":"2026-06-01T17:00:00.000Z"} +{"doc_count":20599,"split_key":25211,"timestamp":"2026-06-01T18:00:00.000Z"} +{"doc_count":9069,"split_key":209334,"timestamp":"2026-06-01T18:00:00.000Z"} +{"doc_count":2336,"split_key":14061,"timestamp":"2026-06-01T18:00:00.000Z"} +{"doc_count":1153,"split_key":37963,"timestamp":"2026-06-01T18:00:00.000Z"} +{"doc_count":804,"split_key":23969,"timestamp":"2026-06-01T18:00:00.000Z"} +{"doc_count":20427,"split_key":25211,"timestamp":"2026-06-01T19:00:00.000Z"} +{"doc_count":13236,"split_key":47890,"timestamp":"2026-06-01T19:00:00.000Z"} +{"doc_count":2635,"split_key":14061,"timestamp":"2026-06-01T19:00:00.000Z"} +{"doc_count":2339,"split_key":209334,"timestamp":"2026-06-01T19:00:00.000Z"} +{"doc_count":1890,"split_key":37963,"timestamp":"2026-06-01T19:00:00.000Z"} +{"doc_count":20795,"split_key":25211,"timestamp":"2026-06-01T20:00:00.000Z"} +{"doc_count":3280,"split_key":14061,"timestamp":"2026-06-01T20:00:00.000Z"} +{"doc_count":2173,"split_key":47890,"timestamp":"2026-06-01T20:00:00.000Z"} +{"doc_count":1113,"split_key":37963,"timestamp":"2026-06-01T20:00:00.000Z"} +{"doc_count":897,"split_key":209334,"timestamp":"2026-06-01T20:00:00.000Z"} +{"doc_count":20784,"split_key":25211,"timestamp":"2026-06-01T21:00:00.000Z"} +{"doc_count":7654,"split_key":209334,"timestamp":"2026-06-01T21:00:00.000Z"} +{"doc_count":4904,"split_key":211590,"timestamp":"2026-06-01T21:00:00.000Z"} +{"doc_count":3624,"split_key":14061,"timestamp":"2026-06-01T21:00:00.000Z"} +{"doc_count":2294,"split_key":37963,"timestamp":"2026-06-01T21:00:00.000Z"} +{"doc_count":20945,"split_key":25211,"timestamp":"2026-06-01T22:00:00.000Z"} +{"doc_count":2534,"split_key":14061,"timestamp":"2026-06-01T22:00:00.000Z"} +{"doc_count":1260,"split_key":37963,"timestamp":"2026-06-01T22:00:00.000Z"} +{"doc_count":820,"split_key":51396,"timestamp":"2026-06-01T22:00:00.000Z"} +{"doc_count":540,"split_key":209334,"timestamp":"2026-06-01T22:00:00.000Z"} +{"doc_count":20787,"split_key":25211,"timestamp":"2026-06-01T23:00:00.000Z"} +{"doc_count":2291,"split_key":14061,"timestamp":"2026-06-01T23:00:00.000Z"} +{"doc_count":1336,"split_key":51396,"timestamp":"2026-06-01T23:00:00.000Z"} +{"doc_count":1210,"split_key":37963,"timestamp":"2026-06-01T23:00:00.000Z"} +{"doc_count":787,"split_key":209334,"timestamp":"2026-06-01T23:00:00.000Z"} +{"doc_count":20870,"split_key":25211,"timestamp":"2026-06-02T00:00:00.000Z"} +{"doc_count":5529,"split_key":211590,"timestamp":"2026-06-02T00:00:00.000Z"} +{"doc_count":2368,"split_key":14061,"timestamp":"2026-06-02T00:00:00.000Z"} +{"doc_count":2350,"split_key":209334,"timestamp":"2026-06-02T00:00:00.000Z"} +{"doc_count":1063,"split_key":4134,"timestamp":"2026-06-02T00:00:00.000Z"} +{"doc_count":20932,"split_key":25211,"timestamp":"2026-06-02T01:00:00.000Z"} +{"doc_count":4260,"split_key":209334,"timestamp":"2026-06-02T01:00:00.000Z"} +{"doc_count":3812,"split_key":211590,"timestamp":"2026-06-02T01:00:00.000Z"} +{"doc_count":2326,"split_key":14061,"timestamp":"2026-06-02T01:00:00.000Z"} +{"doc_count":1732,"split_key":45102,"timestamp":"2026-06-02T01:00:00.000Z"} +{"doc_count":20923,"split_key":25211,"timestamp":"2026-06-02T02:00:00.000Z"} +{"doc_count":2372,"split_key":14061,"timestamp":"2026-06-02T02:00:00.000Z"} +{"doc_count":1423,"split_key":45102,"timestamp":"2026-06-02T02:00:00.000Z"} +{"doc_count":1029,"split_key":25369,"timestamp":"2026-06-02T02:00:00.000Z"} +{"doc_count":990,"split_key":4134,"timestamp":"2026-06-02T02:00:00.000Z"} +{"doc_count":20924,"split_key":25211,"timestamp":"2026-06-02T03:00:00.000Z"} +{"doc_count":2353,"split_key":14061,"timestamp":"2026-06-02T03:00:00.000Z"} +{"doc_count":1535,"split_key":209334,"timestamp":"2026-06-02T03:00:00.000Z"} +{"doc_count":1423,"split_key":45102,"timestamp":"2026-06-02T03:00:00.000Z"} +{"doc_count":1226,"split_key":25369,"timestamp":"2026-06-02T03:00:00.000Z"} +{"doc_count":20698,"split_key":25211,"timestamp":"2026-06-02T04:00:00.000Z"} +{"doc_count":6784,"split_key":209334,"timestamp":"2026-06-02T04:00:00.000Z"} +{"doc_count":2500,"split_key":14061,"timestamp":"2026-06-02T04:00:00.000Z"} +{"doc_count":620,"split_key":396982,"timestamp":"2026-06-02T04:00:00.000Z"} +{"doc_count":615,"split_key":45102,"timestamp":"2026-06-02T04:00:00.000Z"} +{"doc_count":20846,"split_key":25211,"timestamp":"2026-06-02T05:00:00.000Z"} +{"doc_count":2499,"split_key":14061,"timestamp":"2026-06-02T05:00:00.000Z"} +{"doc_count":989,"split_key":396982,"timestamp":"2026-06-02T05:00:00.000Z"} +{"doc_count":964,"split_key":25369,"timestamp":"2026-06-02T05:00:00.000Z"} +{"doc_count":635,"split_key":14618,"timestamp":"2026-06-02T05:00:00.000Z"} +{"doc_count":20950,"split_key":25211,"timestamp":"2026-06-02T06:00:00.000Z"} +{"doc_count":2792,"split_key":209334,"timestamp":"2026-06-02T06:00:00.000Z"} +{"doc_count":2338,"split_key":14061,"timestamp":"2026-06-02T06:00:00.000Z"} +{"doc_count":2083,"split_key":49870,"timestamp":"2026-06-02T06:00:00.000Z"} +{"doc_count":1122,"split_key":25369,"timestamp":"2026-06-02T06:00:00.000Z"} +{"doc_count":20869,"split_key":25211,"timestamp":"2026-06-02T07:00:00.000Z"} +{"doc_count":2287,"split_key":14061,"timestamp":"2026-06-02T07:00:00.000Z"} +{"doc_count":1502,"split_key":16509,"timestamp":"2026-06-02T07:00:00.000Z"} +{"doc_count":1466,"split_key":209334,"timestamp":"2026-06-02T07:00:00.000Z"} +{"doc_count":1028,"split_key":25369,"timestamp":"2026-06-02T07:00:00.000Z"} +{"doc_count":21046,"split_key":25211,"timestamp":"2026-06-02T08:00:00.000Z"} +{"doc_count":2277,"split_key":14061,"timestamp":"2026-06-02T08:00:00.000Z"} +{"doc_count":1756,"split_key":16509,"timestamp":"2026-06-02T08:00:00.000Z"} +{"doc_count":876,"split_key":49870,"timestamp":"2026-06-02T08:00:00.000Z"} +{"doc_count":568,"split_key":48090,"timestamp":"2026-06-02T08:00:00.000Z"} +{"doc_count":21057,"split_key":25211,"timestamp":"2026-06-02T09:00:00.000Z"} +{"doc_count":2408,"split_key":14061,"timestamp":"2026-06-02T09:00:00.000Z"} +{"doc_count":1666,"split_key":16509,"timestamp":"2026-06-02T09:00:00.000Z"} +{"doc_count":1043,"split_key":51396,"timestamp":"2026-06-02T09:00:00.000Z"} +{"doc_count":574,"split_key":25369,"timestamp":"2026-06-02T09:00:00.000Z"} +{"doc_count":20894,"split_key":25211,"timestamp":"2026-06-02T10:00:00.000Z"} +{"doc_count":5372,"split_key":209334,"timestamp":"2026-06-02T10:00:00.000Z"} +{"doc_count":2315,"split_key":14061,"timestamp":"2026-06-02T10:00:00.000Z"} +{"doc_count":1444,"split_key":51396,"timestamp":"2026-06-02T10:00:00.000Z"} +{"doc_count":1191,"split_key":16509,"timestamp":"2026-06-02T10:00:00.000Z"} +{"doc_count":9784,"split_key":25211,"timestamp":"2026-06-02T11:00:00.000Z"} +{"doc_count":2334,"split_key":14061,"timestamp":"2026-06-02T11:00:00.000Z"} +{"doc_count":1504,"split_key":209334,"timestamp":"2026-06-02T11:00:00.000Z"} +{"doc_count":686,"split_key":16509,"timestamp":"2026-06-02T11:00:00.000Z"} +{"doc_count":569,"split_key":398101,"timestamp":"2026-06-02T11:00:00.000Z"} +{"doc_count":11644,"split_key":25211,"timestamp":"2026-06-02T12:00:00.000Z"} +{"doc_count":2258,"split_key":14061,"timestamp":"2026-06-02T12:00:00.000Z"} +{"doc_count":1839,"split_key":211590,"timestamp":"2026-06-02T12:00:00.000Z"} +{"doc_count":1639,"split_key":209334,"timestamp":"2026-06-02T12:00:00.000Z"} +{"doc_count":1136,"split_key":16509,"timestamp":"2026-06-02T12:00:00.000Z"} +{"doc_count":21462,"split_key":25211,"timestamp":"2026-06-02T13:00:00.000Z"} +{"doc_count":3266,"split_key":14061,"timestamp":"2026-06-02T13:00:00.000Z"} +{"doc_count":1109,"split_key":51396,"timestamp":"2026-06-02T13:00:00.000Z"} +{"doc_count":915,"split_key":209334,"timestamp":"2026-06-02T13:00:00.000Z"} +{"doc_count":579,"split_key":63949,"timestamp":"2026-06-02T13:00:00.000Z"} +{"doc_count":21594,"split_key":25211,"timestamp":"2026-06-02T14:00:00.000Z"} +{"doc_count":4742,"split_key":209334,"timestamp":"2026-06-02T14:00:00.000Z"} +{"doc_count":3269,"split_key":14061,"timestamp":"2026-06-02T14:00:00.000Z"} +{"doc_count":777,"split_key":16509,"timestamp":"2026-06-02T14:00:00.000Z"} +{"doc_count":560,"split_key":25369,"timestamp":"2026-06-02T14:00:00.000Z"} +{"doc_count":21379,"split_key":25211,"timestamp":"2026-06-02T15:00:00.000Z"} +{"doc_count":3329,"split_key":14061,"timestamp":"2026-06-02T15:00:00.000Z"} +{"doc_count":3126,"split_key":211590,"timestamp":"2026-06-02T15:00:00.000Z"} +{"doc_count":2066,"split_key":209334,"timestamp":"2026-06-02T15:00:00.000Z"} +{"doc_count":743,"split_key":141995,"timestamp":"2026-06-02T15:00:00.000Z"} +{"doc_count":21272,"split_key":25211,"timestamp":"2026-06-02T16:00:00.000Z"} +{"doc_count":3559,"split_key":209334,"timestamp":"2026-06-02T16:00:00.000Z"} +{"doc_count":3449,"split_key":14061,"timestamp":"2026-06-02T16:00:00.000Z"} +{"doc_count":1025,"split_key":51396,"timestamp":"2026-06-02T16:00:00.000Z"} +{"doc_count":702,"split_key":16509,"timestamp":"2026-06-02T16:00:00.000Z"} +{"doc_count":19041,"split_key":25211,"timestamp":"2026-06-02T17:00:00.000Z"} +{"doc_count":3804,"split_key":14061,"timestamp":"2026-06-02T17:00:00.000Z"} +{"doc_count":3612,"split_key":137899,"timestamp":"2026-06-02T17:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-02T17:00:00.000Z"} +{"doc_count":2754,"split_key":209334,"timestamp":"2026-06-02T17:00:00.000Z"} +{"doc_count":16731,"split_key":25211,"timestamp":"2026-06-02T18:00:00.000Z"} +{"doc_count":4147,"split_key":14061,"timestamp":"2026-06-02T18:00:00.000Z"} +{"doc_count":2028,"split_key":37963,"timestamp":"2026-06-02T18:00:00.000Z"} +{"doc_count":1707,"split_key":209334,"timestamp":"2026-06-02T18:00:00.000Z"} +{"doc_count":1432,"split_key":398101,"timestamp":"2026-06-02T18:00:00.000Z"} +{"doc_count":64532,"split_key":23470,"timestamp":"2026-06-02T19:00:00.000Z"} +{"doc_count":16270,"split_key":25211,"timestamp":"2026-06-02T19:00:00.000Z"} +{"doc_count":5673,"split_key":209334,"timestamp":"2026-06-02T19:00:00.000Z"} +{"doc_count":4092,"split_key":14061,"timestamp":"2026-06-02T19:00:00.000Z"} +{"doc_count":1978,"split_key":37963,"timestamp":"2026-06-02T19:00:00.000Z"} +{"doc_count":17853,"split_key":25211,"timestamp":"2026-06-02T20:00:00.000Z"} +{"doc_count":8047,"split_key":209334,"timestamp":"2026-06-02T20:00:00.000Z"} +{"doc_count":3793,"split_key":137899,"timestamp":"2026-06-02T20:00:00.000Z"} +{"doc_count":3225,"split_key":14061,"timestamp":"2026-06-02T20:00:00.000Z"} +{"doc_count":588,"split_key":37963,"timestamp":"2026-06-02T20:00:00.000Z"} +{"doc_count":18759,"split_key":25211,"timestamp":"2026-06-02T21:00:00.000Z"} +{"doc_count":6280,"split_key":209334,"timestamp":"2026-06-02T21:00:00.000Z"} +{"doc_count":2560,"split_key":14061,"timestamp":"2026-06-02T21:00:00.000Z"} +{"doc_count":832,"split_key":396982,"timestamp":"2026-06-02T21:00:00.000Z"} +{"doc_count":613,"split_key":8075,"timestamp":"2026-06-02T21:00:00.000Z"} +{"doc_count":19761,"split_key":25211,"timestamp":"2026-06-02T22:00:00.000Z"} +{"doc_count":2967,"split_key":14061,"timestamp":"2026-06-02T22:00:00.000Z"} +{"doc_count":925,"split_key":209334,"timestamp":"2026-06-02T22:00:00.000Z"} +{"doc_count":618,"split_key":51396,"timestamp":"2026-06-02T22:00:00.000Z"} +{"doc_count":578,"split_key":25369,"timestamp":"2026-06-02T22:00:00.000Z"} +{"doc_count":13936,"split_key":25211,"timestamp":"2026-06-02T23:00:00.000Z"} +{"doc_count":2664,"split_key":14061,"timestamp":"2026-06-02T23:00:00.000Z"} +{"doc_count":1266,"split_key":209334,"timestamp":"2026-06-02T23:00:00.000Z"} +{"doc_count":603,"split_key":16509,"timestamp":"2026-06-02T23:00:00.000Z"} +{"doc_count":572,"split_key":50360,"timestamp":"2026-06-02T23:00:00.000Z"} +{"doc_count":7038,"split_key":25211,"timestamp":"2026-06-03T00:00:00.000Z"} +{"doc_count":5029,"split_key":209334,"timestamp":"2026-06-03T00:00:00.000Z"} +{"doc_count":2400,"split_key":14061,"timestamp":"2026-06-03T00:00:00.000Z"} +{"doc_count":576,"split_key":37963,"timestamp":"2026-06-03T00:00:00.000Z"} +{"doc_count":575,"split_key":50360,"timestamp":"2026-06-03T00:00:00.000Z"} +{"doc_count":6007,"split_key":25211,"timestamp":"2026-06-03T01:00:00.000Z"} +{"doc_count":2851,"split_key":209334,"timestamp":"2026-06-03T01:00:00.000Z"} +{"doc_count":2403,"split_key":14061,"timestamp":"2026-06-03T01:00:00.000Z"} +{"doc_count":1033,"split_key":396982,"timestamp":"2026-06-03T01:00:00.000Z"} +{"doc_count":714,"split_key":16509,"timestamp":"2026-06-03T01:00:00.000Z"} +{"doc_count":6121,"split_key":209334,"timestamp":"2026-06-03T02:00:00.000Z"} +{"doc_count":2416,"split_key":14061,"timestamp":"2026-06-03T02:00:00.000Z"} +{"doc_count":1666,"split_key":8560,"timestamp":"2026-06-03T02:00:00.000Z"} +{"doc_count":960,"split_key":16509,"timestamp":"2026-06-03T02:00:00.000Z"} +{"doc_count":587,"split_key":396982,"timestamp":"2026-06-03T02:00:00.000Z"} +{"doc_count":2479,"split_key":209334,"timestamp":"2026-06-03T03:00:00.000Z"} +{"doc_count":2322,"split_key":14061,"timestamp":"2026-06-03T03:00:00.000Z"} +{"doc_count":1716,"split_key":8560,"timestamp":"2026-06-03T03:00:00.000Z"} +{"doc_count":1690,"split_key":137899,"timestamp":"2026-06-03T03:00:00.000Z"} +{"doc_count":608,"split_key":396982,"timestamp":"2026-06-03T03:00:00.000Z"} +{"doc_count":3137,"split_key":209334,"timestamp":"2026-06-03T04:00:00.000Z"} +{"doc_count":2465,"split_key":14061,"timestamp":"2026-06-03T04:00:00.000Z"} +{"doc_count":1679,"split_key":8560,"timestamp":"2026-06-03T04:00:00.000Z"} +{"doc_count":1051,"split_key":51852,"timestamp":"2026-06-03T04:00:00.000Z"} +{"doc_count":931,"split_key":25369,"timestamp":"2026-06-03T04:00:00.000Z"} +{"doc_count":5472,"split_key":209334,"timestamp":"2026-06-03T05:00:00.000Z"} +{"doc_count":2399,"split_key":14061,"timestamp":"2026-06-03T05:00:00.000Z"} +{"doc_count":1694,"split_key":8560,"timestamp":"2026-06-03T05:00:00.000Z"} +{"doc_count":1629,"split_key":51396,"timestamp":"2026-06-03T05:00:00.000Z"} +{"doc_count":1158,"split_key":37963,"timestamp":"2026-06-03T05:00:00.000Z"} +{"doc_count":2594,"split_key":137899,"timestamp":"2026-06-03T06:00:00.000Z"} +{"doc_count":2433,"split_key":14061,"timestamp":"2026-06-03T06:00:00.000Z"} +{"doc_count":1741,"split_key":8560,"timestamp":"2026-06-03T06:00:00.000Z"} +{"doc_count":1597,"split_key":209334,"timestamp":"2026-06-03T06:00:00.000Z"} +{"doc_count":1494,"split_key":265919,"timestamp":"2026-06-03T06:00:00.000Z"} +{"doc_count":2194,"split_key":14061,"timestamp":"2026-06-03T07:00:00.000Z"} +{"doc_count":1720,"split_key":8560,"timestamp":"2026-06-03T07:00:00.000Z"} +{"doc_count":1171,"split_key":37963,"timestamp":"2026-06-03T07:00:00.000Z"} +{"doc_count":786,"split_key":16509,"timestamp":"2026-06-03T07:00:00.000Z"} +{"doc_count":586,"split_key":209334,"timestamp":"2026-06-03T07:00:00.000Z"} +{"doc_count":6942,"split_key":209334,"timestamp":"2026-06-03T08:00:00.000Z"} +{"doc_count":2273,"split_key":14061,"timestamp":"2026-06-03T08:00:00.000Z"} +{"doc_count":1238,"split_key":37963,"timestamp":"2026-06-03T08:00:00.000Z"} +{"doc_count":1115,"split_key":8560,"timestamp":"2026-06-03T08:00:00.000Z"} +{"doc_count":1065,"split_key":25369,"timestamp":"2026-06-03T08:00:00.000Z"} +{"doc_count":3354,"split_key":209334,"timestamp":"2026-06-03T09:00:00.000Z"} +{"doc_count":2637,"split_key":14061,"timestamp":"2026-06-03T09:00:00.000Z"} +{"doc_count":1149,"split_key":37963,"timestamp":"2026-06-03T09:00:00.000Z"} +{"doc_count":947,"split_key":25369,"timestamp":"2026-06-03T09:00:00.000Z"} +{"doc_count":775,"split_key":8560,"timestamp":"2026-06-03T09:00:00.000Z"} +{"doc_count":2850,"split_key":209334,"timestamp":"2026-06-03T10:00:00.000Z"} +{"doc_count":2446,"split_key":14061,"timestamp":"2026-06-03T10:00:00.000Z"} +{"doc_count":1853,"split_key":265919,"timestamp":"2026-06-03T10:00:00.000Z"} +{"doc_count":1106,"split_key":37963,"timestamp":"2026-06-03T10:00:00.000Z"} +{"doc_count":781,"split_key":25369,"timestamp":"2026-06-03T10:00:00.000Z"} +{"doc_count":5032,"split_key":211590,"timestamp":"2026-06-03T11:00:00.000Z"} +{"doc_count":3874,"split_key":209334,"timestamp":"2026-06-03T11:00:00.000Z"} +{"doc_count":2624,"split_key":14061,"timestamp":"2026-06-03T11:00:00.000Z"} +{"doc_count":877,"split_key":37963,"timestamp":"2026-06-03T11:00:00.000Z"} +{"doc_count":627,"split_key":201401,"timestamp":"2026-06-03T11:00:00.000Z"} +{"doc_count":7070,"split_key":211590,"timestamp":"2026-06-03T12:00:00.000Z"} +{"doc_count":3837,"split_key":14061,"timestamp":"2026-06-03T12:00:00.000Z"} +{"doc_count":1960,"split_key":209334,"timestamp":"2026-06-03T12:00:00.000Z"} +{"doc_count":616,"split_key":50360,"timestamp":"2026-06-03T12:00:00.000Z"} +{"doc_count":520,"split_key":209630,"timestamp":"2026-06-03T12:00:00.000Z"} +{"doc_count":2216,"split_key":14061,"timestamp":"2026-06-03T13:00:00.000Z"} +{"doc_count":1523,"split_key":209334,"timestamp":"2026-06-03T13:00:00.000Z"} +{"doc_count":1286,"split_key":51396,"timestamp":"2026-06-03T13:00:00.000Z"} +{"doc_count":546,"split_key":50360,"timestamp":"2026-06-03T13:00:00.000Z"} +{"doc_count":542,"split_key":48090,"timestamp":"2026-06-03T13:00:00.000Z"} +{"doc_count":8110,"split_key":209334,"timestamp":"2026-06-03T14:00:00.000Z"} +{"doc_count":1217,"split_key":14061,"timestamp":"2026-06-03T14:00:00.000Z"} +{"doc_count":888,"split_key":16509,"timestamp":"2026-06-03T14:00:00.000Z"} +{"doc_count":736,"split_key":37963,"timestamp":"2026-06-03T14:00:00.000Z"} +{"doc_count":609,"split_key":50360,"timestamp":"2026-06-03T14:00:00.000Z"} +{"doc_count":1522,"split_key":209334,"timestamp":"2026-06-03T15:00:00.000Z"} +{"doc_count":1193,"split_key":14061,"timestamp":"2026-06-03T15:00:00.000Z"} +{"doc_count":1050,"split_key":37963,"timestamp":"2026-06-03T15:00:00.000Z"} +{"doc_count":755,"split_key":16509,"timestamp":"2026-06-03T15:00:00.000Z"} +{"doc_count":715,"split_key":25369,"timestamp":"2026-06-03T15:00:00.000Z"} +{"doc_count":1599,"split_key":209334,"timestamp":"2026-06-03T16:00:00.000Z"} +{"doc_count":1293,"split_key":14061,"timestamp":"2026-06-03T16:00:00.000Z"} +{"doc_count":1182,"split_key":211590,"timestamp":"2026-06-03T16:00:00.000Z"} +{"doc_count":907,"split_key":51396,"timestamp":"2026-06-03T16:00:00.000Z"} +{"doc_count":797,"split_key":37963,"timestamp":"2026-06-03T16:00:00.000Z"} +{"doc_count":1642,"split_key":37963,"timestamp":"2026-06-03T17:00:00.000Z"} +{"doc_count":1564,"split_key":14061,"timestamp":"2026-06-03T17:00:00.000Z"} +{"doc_count":1335,"split_key":209334,"timestamp":"2026-06-03T17:00:00.000Z"} +{"doc_count":1235,"split_key":51396,"timestamp":"2026-06-03T17:00:00.000Z"} +{"doc_count":1150,"split_key":211590,"timestamp":"2026-06-03T17:00:00.000Z"} +{"doc_count":19748,"split_key":209334,"timestamp":"2026-06-03T18:00:00.000Z"} +{"doc_count":11255,"split_key":211590,"timestamp":"2026-06-03T18:00:00.000Z"} +{"doc_count":1974,"split_key":37963,"timestamp":"2026-06-03T18:00:00.000Z"} +{"doc_count":1716,"split_key":25369,"timestamp":"2026-06-03T18:00:00.000Z"} +{"doc_count":1321,"split_key":14061,"timestamp":"2026-06-03T18:00:00.000Z"} +{"doc_count":4418,"split_key":211590,"timestamp":"2026-06-03T19:00:00.000Z"} +{"doc_count":1520,"split_key":37963,"timestamp":"2026-06-03T19:00:00.000Z"} +{"doc_count":1309,"split_key":14061,"timestamp":"2026-06-03T19:00:00.000Z"} +{"doc_count":804,"split_key":25369,"timestamp":"2026-06-03T19:00:00.000Z"} +{"doc_count":535,"split_key":51396,"timestamp":"2026-06-03T19:00:00.000Z"} +{"doc_count":6304,"split_key":48090,"timestamp":"2026-06-03T20:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-03T20:00:00.000Z"} +{"doc_count":1774,"split_key":37963,"timestamp":"2026-06-03T20:00:00.000Z"} +{"doc_count":1508,"split_key":209334,"timestamp":"2026-06-03T20:00:00.000Z"} +{"doc_count":1372,"split_key":14061,"timestamp":"2026-06-03T20:00:00.000Z"} +{"doc_count":4328,"split_key":209334,"timestamp":"2026-06-03T21:00:00.000Z"} +{"doc_count":1797,"split_key":37963,"timestamp":"2026-06-03T21:00:00.000Z"} +{"doc_count":1424,"split_key":14061,"timestamp":"2026-06-03T21:00:00.000Z"} +{"doc_count":759,"split_key":25369,"timestamp":"2026-06-03T21:00:00.000Z"} +{"doc_count":665,"split_key":396982,"timestamp":"2026-06-03T21:00:00.000Z"} +{"doc_count":1646,"split_key":37963,"timestamp":"2026-06-03T22:00:00.000Z"} +{"doc_count":1472,"split_key":209334,"timestamp":"2026-06-03T22:00:00.000Z"} +{"doc_count":1458,"split_key":14061,"timestamp":"2026-06-03T22:00:00.000Z"} +{"doc_count":560,"split_key":51396,"timestamp":"2026-06-03T22:00:00.000Z"} +{"doc_count":525,"split_key":48090,"timestamp":"2026-06-03T22:00:00.000Z"} +{"doc_count":1355,"split_key":14061,"timestamp":"2026-06-03T23:00:00.000Z"} +{"doc_count":1065,"split_key":37963,"timestamp":"2026-06-03T23:00:00.000Z"} +{"doc_count":924,"split_key":51396,"timestamp":"2026-06-03T23:00:00.000Z"} +{"doc_count":800,"split_key":209334,"timestamp":"2026-06-03T23:00:00.000Z"} +{"doc_count":642,"split_key":396982,"timestamp":"2026-06-03T23:00:00.000Z"} +{"doc_count":5975,"split_key":211590,"timestamp":"2026-06-04T00:00:00.000Z"} +{"doc_count":4185,"split_key":209334,"timestamp":"2026-06-04T00:00:00.000Z"} +{"doc_count":1585,"split_key":51396,"timestamp":"2026-06-04T00:00:00.000Z"} +{"doc_count":1397,"split_key":14061,"timestamp":"2026-06-04T00:00:00.000Z"} +{"doc_count":997,"split_key":37963,"timestamp":"2026-06-04T00:00:00.000Z"} +{"doc_count":6015,"split_key":211590,"timestamp":"2026-06-04T01:00:00.000Z"} +{"doc_count":1260,"split_key":14061,"timestamp":"2026-06-04T01:00:00.000Z"} +{"doc_count":1201,"split_key":209334,"timestamp":"2026-06-04T01:00:00.000Z"} +{"doc_count":789,"split_key":37963,"timestamp":"2026-06-04T01:00:00.000Z"} +{"doc_count":751,"split_key":396982,"timestamp":"2026-06-04T01:00:00.000Z"} +{"doc_count":2091,"split_key":209334,"timestamp":"2026-06-04T02:00:00.000Z"} +{"doc_count":1975,"split_key":14061,"timestamp":"2026-06-04T02:00:00.000Z"} +{"doc_count":794,"split_key":37963,"timestamp":"2026-06-04T02:00:00.000Z"} +{"doc_count":649,"split_key":396982,"timestamp":"2026-06-04T02:00:00.000Z"} +{"doc_count":541,"split_key":138915,"timestamp":"2026-06-04T02:00:00.000Z"} +{"doc_count":4035,"split_key":209334,"timestamp":"2026-06-04T03:00:00.000Z"} +{"doc_count":3503,"split_key":137899,"timestamp":"2026-06-04T03:00:00.000Z"} +{"doc_count":2686,"split_key":14061,"timestamp":"2026-06-04T03:00:00.000Z"} +{"doc_count":799,"split_key":37963,"timestamp":"2026-06-04T03:00:00.000Z"} +{"doc_count":766,"split_key":396982,"timestamp":"2026-06-04T03:00:00.000Z"} +{"doc_count":2591,"split_key":14061,"timestamp":"2026-06-04T04:00:00.000Z"} +{"doc_count":826,"split_key":37963,"timestamp":"2026-06-04T04:00:00.000Z"} +{"doc_count":814,"split_key":209334,"timestamp":"2026-06-04T04:00:00.000Z"} +{"doc_count":685,"split_key":396982,"timestamp":"2026-06-04T04:00:00.000Z"} +{"doc_count":528,"split_key":138915,"timestamp":"2026-06-04T04:00:00.000Z"} +{"doc_count":2792,"split_key":14061,"timestamp":"2026-06-04T05:00:00.000Z"} +{"doc_count":989,"split_key":396982,"timestamp":"2026-06-04T05:00:00.000Z"} +{"doc_count":790,"split_key":37963,"timestamp":"2026-06-04T05:00:00.000Z"} +{"doc_count":506,"split_key":48090,"timestamp":"2026-06-04T05:00:00.000Z"} +{"doc_count":498,"split_key":138915,"timestamp":"2026-06-04T05:00:00.000Z"} +{"doc_count":5507,"split_key":209334,"timestamp":"2026-06-04T06:00:00.000Z"} +{"doc_count":2820,"split_key":14061,"timestamp":"2026-06-04T06:00:00.000Z"} +{"doc_count":1174,"split_key":201401,"timestamp":"2026-06-04T06:00:00.000Z"} +{"doc_count":841,"split_key":396982,"timestamp":"2026-06-04T06:00:00.000Z"} +{"doc_count":748,"split_key":37963,"timestamp":"2026-06-04T06:00:00.000Z"} +{"doc_count":2884,"split_key":14061,"timestamp":"2026-06-04T07:00:00.000Z"} +{"doc_count":2324,"split_key":209334,"timestamp":"2026-06-04T07:00:00.000Z"} +{"doc_count":1006,"split_key":51396,"timestamp":"2026-06-04T07:00:00.000Z"} +{"doc_count":751,"split_key":37963,"timestamp":"2026-06-04T07:00:00.000Z"} +{"doc_count":564,"split_key":201401,"timestamp":"2026-06-04T07:00:00.000Z"} +{"doc_count":7094,"split_key":209334,"timestamp":"2026-06-04T08:00:00.000Z"} +{"doc_count":3837,"split_key":14061,"timestamp":"2026-06-04T08:00:00.000Z"} +{"doc_count":776,"split_key":37963,"timestamp":"2026-06-04T08:00:00.000Z"} +{"doc_count":524,"split_key":51396,"timestamp":"2026-06-04T08:00:00.000Z"} +{"doc_count":518,"split_key":48090,"timestamp":"2026-06-04T08:00:00.000Z"} +{"doc_count":4716,"split_key":209334,"timestamp":"2026-06-04T09:00:00.000Z"} +{"doc_count":3961,"split_key":14061,"timestamp":"2026-06-04T09:00:00.000Z"} +{"doc_count":1573,"split_key":396982,"timestamp":"2026-06-04T09:00:00.000Z"} +{"doc_count":799,"split_key":37963,"timestamp":"2026-06-04T09:00:00.000Z"} +{"doc_count":571,"split_key":16509,"timestamp":"2026-06-04T09:00:00.000Z"} +{"doc_count":6609,"split_key":396982,"timestamp":"2026-06-04T10:00:00.000Z"} +{"doc_count":6026,"split_key":209334,"timestamp":"2026-06-04T10:00:00.000Z"} +{"doc_count":3845,"split_key":14061,"timestamp":"2026-06-04T10:00:00.000Z"} +{"doc_count":1931,"split_key":199052,"timestamp":"2026-06-04T10:00:00.000Z"} +{"doc_count":1749,"split_key":63949,"timestamp":"2026-06-04T10:00:00.000Z"} +{"doc_count":31692,"split_key":396982,"timestamp":"2026-06-04T11:00:00.000Z"} +{"doc_count":12717,"split_key":209334,"timestamp":"2026-06-04T11:00:00.000Z"} +{"doc_count":3934,"split_key":14061,"timestamp":"2026-06-04T11:00:00.000Z"} +{"doc_count":2001,"split_key":199052,"timestamp":"2026-06-04T11:00:00.000Z"} +{"doc_count":1033,"split_key":25369,"timestamp":"2026-06-04T11:00:00.000Z"} +{"doc_count":22045,"split_key":396982,"timestamp":"2026-06-04T12:00:00.000Z"} +{"doc_count":4203,"split_key":209334,"timestamp":"2026-06-04T12:00:00.000Z"} +{"doc_count":3836,"split_key":14061,"timestamp":"2026-06-04T12:00:00.000Z"} +{"doc_count":3437,"split_key":211590,"timestamp":"2026-06-04T12:00:00.000Z"} +{"doc_count":1893,"split_key":199052,"timestamp":"2026-06-04T12:00:00.000Z"} +{"doc_count":24859,"split_key":396982,"timestamp":"2026-06-04T13:00:00.000Z"} +{"doc_count":3602,"split_key":14061,"timestamp":"2026-06-04T13:00:00.000Z"} +{"doc_count":2564,"split_key":211590,"timestamp":"2026-06-04T13:00:00.000Z"} +{"doc_count":1974,"split_key":199052,"timestamp":"2026-06-04T13:00:00.000Z"} +{"doc_count":1048,"split_key":51396,"timestamp":"2026-06-04T13:00:00.000Z"} +{"doc_count":26893,"split_key":396982,"timestamp":"2026-06-04T14:00:00.000Z"} +{"doc_count":7265,"split_key":14061,"timestamp":"2026-06-04T14:00:00.000Z"} +{"doc_count":3951,"split_key":209334,"timestamp":"2026-06-04T14:00:00.000Z"} +{"doc_count":3043,"split_key":211590,"timestamp":"2026-06-04T14:00:00.000Z"} +{"doc_count":1943,"split_key":199052,"timestamp":"2026-06-04T14:00:00.000Z"} +{"doc_count":26983,"split_key":396982,"timestamp":"2026-06-04T15:00:00.000Z"} +{"doc_count":4620,"split_key":209334,"timestamp":"2026-06-04T15:00:00.000Z"} +{"doc_count":3214,"split_key":14061,"timestamp":"2026-06-04T15:00:00.000Z"} +{"doc_count":1991,"split_key":199052,"timestamp":"2026-06-04T15:00:00.000Z"} +{"doc_count":1011,"split_key":51396,"timestamp":"2026-06-04T15:00:00.000Z"} +{"doc_count":24541,"split_key":396982,"timestamp":"2026-06-04T16:00:00.000Z"} +{"doc_count":2790,"split_key":209334,"timestamp":"2026-06-04T16:00:00.000Z"} +{"doc_count":2431,"split_key":14061,"timestamp":"2026-06-04T16:00:00.000Z"} +{"doc_count":2039,"split_key":199052,"timestamp":"2026-06-04T16:00:00.000Z"} +{"doc_count":707,"split_key":14618,"timestamp":"2026-06-04T16:00:00.000Z"} +{"doc_count":18031,"split_key":396982,"timestamp":"2026-06-04T17:00:00.000Z"} +{"doc_count":3118,"split_key":211590,"timestamp":"2026-06-04T17:00:00.000Z"} +{"doc_count":2755,"split_key":209334,"timestamp":"2026-06-04T17:00:00.000Z"} +{"doc_count":2598,"split_key":14061,"timestamp":"2026-06-04T17:00:00.000Z"} +{"doc_count":1975,"split_key":199052,"timestamp":"2026-06-04T17:00:00.000Z"} +{"doc_count":18198,"split_key":396982,"timestamp":"2026-06-04T18:00:00.000Z"} +{"doc_count":2558,"split_key":14061,"timestamp":"2026-06-04T18:00:00.000Z"} +{"doc_count":2174,"split_key":209334,"timestamp":"2026-06-04T18:00:00.000Z"} +{"doc_count":2031,"split_key":199052,"timestamp":"2026-06-04T18:00:00.000Z"} +{"doc_count":861,"split_key":211590,"timestamp":"2026-06-04T18:00:00.000Z"} +{"doc_count":22651,"split_key":396982,"timestamp":"2026-06-04T19:00:00.000Z"} +{"doc_count":3079,"split_key":211590,"timestamp":"2026-06-04T19:00:00.000Z"} +{"doc_count":2516,"split_key":14061,"timestamp":"2026-06-04T19:00:00.000Z"} +{"doc_count":2017,"split_key":199052,"timestamp":"2026-06-04T19:00:00.000Z"} +{"doc_count":1233,"split_key":209334,"timestamp":"2026-06-04T19:00:00.000Z"} +{"doc_count":18744,"split_key":396982,"timestamp":"2026-06-04T20:00:00.000Z"} +{"doc_count":17538,"split_key":63949,"timestamp":"2026-06-04T20:00:00.000Z"} +{"doc_count":3875,"split_key":209334,"timestamp":"2026-06-04T20:00:00.000Z"} +{"doc_count":2795,"split_key":14061,"timestamp":"2026-06-04T20:00:00.000Z"} +{"doc_count":2678,"split_key":211590,"timestamp":"2026-06-04T20:00:00.000Z"} +{"doc_count":42998,"split_key":63949,"timestamp":"2026-06-04T21:00:00.000Z"} +{"doc_count":23090,"split_key":396982,"timestamp":"2026-06-04T21:00:00.000Z"} +{"doc_count":4263,"split_key":211590,"timestamp":"2026-06-04T21:00:00.000Z"} +{"doc_count":2684,"split_key":14061,"timestamp":"2026-06-04T21:00:00.000Z"} +{"doc_count":2580,"split_key":209334,"timestamp":"2026-06-04T21:00:00.000Z"} +{"doc_count":8915,"split_key":396982,"timestamp":"2026-06-04T22:00:00.000Z"} +{"doc_count":5153,"split_key":211590,"timestamp":"2026-06-04T22:00:00.000Z"} +{"doc_count":2486,"split_key":14061,"timestamp":"2026-06-04T22:00:00.000Z"} +{"doc_count":1991,"split_key":199052,"timestamp":"2026-06-04T22:00:00.000Z"} +{"doc_count":1229,"split_key":209334,"timestamp":"2026-06-04T22:00:00.000Z"} +{"doc_count":5485,"split_key":396982,"timestamp":"2026-06-04T23:00:00.000Z"} +{"doc_count":2562,"split_key":209334,"timestamp":"2026-06-04T23:00:00.000Z"} +{"doc_count":2480,"split_key":14061,"timestamp":"2026-06-04T23:00:00.000Z"} +{"doc_count":1960,"split_key":199052,"timestamp":"2026-06-04T23:00:00.000Z"} +{"doc_count":804,"split_key":37963,"timestamp":"2026-06-04T23:00:00.000Z"} +{"doc_count":3166,"split_key":396982,"timestamp":"2026-06-05T00:00:00.000Z"} +{"doc_count":2381,"split_key":14061,"timestamp":"2026-06-05T00:00:00.000Z"} +{"doc_count":2013,"split_key":199052,"timestamp":"2026-06-05T00:00:00.000Z"} +{"doc_count":1663,"split_key":211590,"timestamp":"2026-06-05T00:00:00.000Z"} +{"doc_count":867,"split_key":201401,"timestamp":"2026-06-05T00:00:00.000Z"} +{"doc_count":6447,"split_key":396982,"timestamp":"2026-06-05T01:00:00.000Z"} +{"doc_count":3172,"split_key":209334,"timestamp":"2026-06-05T01:00:00.000Z"} +{"doc_count":2292,"split_key":14061,"timestamp":"2026-06-05T01:00:00.000Z"} +{"doc_count":2045,"split_key":199052,"timestamp":"2026-06-05T01:00:00.000Z"} +{"doc_count":1342,"split_key":51396,"timestamp":"2026-06-05T01:00:00.000Z"} +{"doc_count":7955,"split_key":209334,"timestamp":"2026-06-05T02:00:00.000Z"} +{"doc_count":3265,"split_key":396982,"timestamp":"2026-06-05T02:00:00.000Z"} +{"doc_count":2287,"split_key":14061,"timestamp":"2026-06-05T02:00:00.000Z"} +{"doc_count":2007,"split_key":199052,"timestamp":"2026-06-05T02:00:00.000Z"} +{"doc_count":963,"split_key":37963,"timestamp":"2026-06-05T02:00:00.000Z"} +{"doc_count":6147,"split_key":209334,"timestamp":"2026-06-05T03:00:00.000Z"} +{"doc_count":2358,"split_key":14061,"timestamp":"2026-06-05T03:00:00.000Z"} +{"doc_count":1902,"split_key":199052,"timestamp":"2026-06-05T03:00:00.000Z"} +{"doc_count":821,"split_key":201401,"timestamp":"2026-06-05T03:00:00.000Z"} +{"doc_count":775,"split_key":16509,"timestamp":"2026-06-05T03:00:00.000Z"} +{"doc_count":4190,"split_key":209334,"timestamp":"2026-06-05T04:00:00.000Z"} +{"doc_count":2531,"split_key":14061,"timestamp":"2026-06-05T04:00:00.000Z"} +{"doc_count":2007,"split_key":199052,"timestamp":"2026-06-05T04:00:00.000Z"} +{"doc_count":760,"split_key":37963,"timestamp":"2026-06-05T04:00:00.000Z"} +{"doc_count":682,"split_key":16509,"timestamp":"2026-06-05T04:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-05T05:00:00.000Z"} +{"doc_count":2737,"split_key":14061,"timestamp":"2026-06-05T05:00:00.000Z"} +{"doc_count":1996,"split_key":199052,"timestamp":"2026-06-05T05:00:00.000Z"} +{"doc_count":972,"split_key":396982,"timestamp":"2026-06-05T05:00:00.000Z"} +{"doc_count":717,"split_key":37963,"timestamp":"2026-06-05T05:00:00.000Z"} +{"doc_count":3234,"split_key":48090,"timestamp":"2026-06-05T06:00:00.000Z"} +{"doc_count":2283,"split_key":14061,"timestamp":"2026-06-05T06:00:00.000Z"} +{"doc_count":2048,"split_key":199052,"timestamp":"2026-06-05T06:00:00.000Z"} +{"doc_count":1401,"split_key":209334,"timestamp":"2026-06-05T06:00:00.000Z"} +{"doc_count":976,"split_key":201401,"timestamp":"2026-06-05T06:00:00.000Z"} +{"doc_count":4402,"split_key":209334,"timestamp":"2026-06-05T07:00:00.000Z"} +{"doc_count":2226,"split_key":37963,"timestamp":"2026-06-05T07:00:00.000Z"} +{"doc_count":2179,"split_key":14061,"timestamp":"2026-06-05T07:00:00.000Z"} +{"doc_count":2003,"split_key":199052,"timestamp":"2026-06-05T07:00:00.000Z"} +{"doc_count":1763,"split_key":25211,"timestamp":"2026-06-05T07:00:00.000Z"} +{"doc_count":4908,"split_key":25211,"timestamp":"2026-06-05T08:00:00.000Z"} +{"doc_count":4103,"split_key":137899,"timestamp":"2026-06-05T08:00:00.000Z"} +{"doc_count":3629,"split_key":209334,"timestamp":"2026-06-05T08:00:00.000Z"} +{"doc_count":3464,"split_key":14061,"timestamp":"2026-06-05T08:00:00.000Z"} +{"doc_count":2099,"split_key":199052,"timestamp":"2026-06-05T08:00:00.000Z"} +{"doc_count":5697,"split_key":25211,"timestamp":"2026-06-05T09:00:00.000Z"} +{"doc_count":4094,"split_key":137899,"timestamp":"2026-06-05T09:00:00.000Z"} +{"doc_count":3720,"split_key":14061,"timestamp":"2026-06-05T09:00:00.000Z"} +{"doc_count":2110,"split_key":199052,"timestamp":"2026-06-05T09:00:00.000Z"} +{"doc_count":823,"split_key":51396,"timestamp":"2026-06-05T09:00:00.000Z"} +{"doc_count":5848,"split_key":25211,"timestamp":"2026-06-05T10:00:00.000Z"} +{"doc_count":3713,"split_key":14061,"timestamp":"2026-06-05T10:00:00.000Z"} +{"doc_count":2249,"split_key":199052,"timestamp":"2026-06-05T10:00:00.000Z"} +{"doc_count":824,"split_key":396982,"timestamp":"2026-06-05T10:00:00.000Z"} +{"doc_count":656,"split_key":16509,"timestamp":"2026-06-05T10:00:00.000Z"} +{"doc_count":5742,"split_key":25211,"timestamp":"2026-06-05T11:00:00.000Z"} +{"doc_count":2799,"split_key":211590,"timestamp":"2026-06-05T11:00:00.000Z"} +{"doc_count":2343,"split_key":14061,"timestamp":"2026-06-05T11:00:00.000Z"} +{"doc_count":2236,"split_key":199052,"timestamp":"2026-06-05T11:00:00.000Z"} +{"doc_count":1470,"split_key":209334,"timestamp":"2026-06-05T11:00:00.000Z"} +{"doc_count":4560,"split_key":209334,"timestamp":"2026-06-05T12:00:00.000Z"} +{"doc_count":4368,"split_key":211590,"timestamp":"2026-06-05T12:00:00.000Z"} +{"doc_count":4259,"split_key":25211,"timestamp":"2026-06-05T12:00:00.000Z"} +{"doc_count":3005,"split_key":14061,"timestamp":"2026-06-05T12:00:00.000Z"} +{"doc_count":2159,"split_key":199052,"timestamp":"2026-06-05T12:00:00.000Z"} +{"doc_count":6464,"split_key":211590,"timestamp":"2026-06-05T13:00:00.000Z"} +{"doc_count":5270,"split_key":209334,"timestamp":"2026-06-05T13:00:00.000Z"} +{"doc_count":3673,"split_key":14061,"timestamp":"2026-06-05T13:00:00.000Z"} +{"doc_count":2303,"split_key":199052,"timestamp":"2026-06-05T13:00:00.000Z"} +{"doc_count":1792,"split_key":63949,"timestamp":"2026-06-05T13:00:00.000Z"} +{"doc_count":6203,"split_key":209334,"timestamp":"2026-06-05T14:00:00.000Z"} +{"doc_count":6016,"split_key":211590,"timestamp":"2026-06-05T14:00:00.000Z"} +{"doc_count":3757,"split_key":14061,"timestamp":"2026-06-05T14:00:00.000Z"} +{"doc_count":2285,"split_key":199052,"timestamp":"2026-06-05T14:00:00.000Z"} +{"doc_count":1633,"split_key":201401,"timestamp":"2026-06-05T14:00:00.000Z"} +{"doc_count":6044,"split_key":211590,"timestamp":"2026-06-05T15:00:00.000Z"} +{"doc_count":3442,"split_key":14061,"timestamp":"2026-06-05T15:00:00.000Z"} +{"doc_count":3395,"split_key":209334,"timestamp":"2026-06-05T15:00:00.000Z"} +{"doc_count":2133,"split_key":199052,"timestamp":"2026-06-05T15:00:00.000Z"} +{"doc_count":831,"split_key":16509,"timestamp":"2026-06-05T15:00:00.000Z"} +{"doc_count":6017,"split_key":211590,"timestamp":"2026-06-05T16:00:00.000Z"} +{"doc_count":3480,"split_key":14061,"timestamp":"2026-06-05T16:00:00.000Z"} +{"doc_count":2120,"split_key":209334,"timestamp":"2026-06-05T16:00:00.000Z"} +{"doc_count":2042,"split_key":199052,"timestamp":"2026-06-05T16:00:00.000Z"} +{"doc_count":854,"split_key":16509,"timestamp":"2026-06-05T16:00:00.000Z"} +{"doc_count":3540,"split_key":14061,"timestamp":"2026-06-05T17:00:00.000Z"} +{"doc_count":3295,"split_key":209334,"timestamp":"2026-06-05T17:00:00.000Z"} +{"doc_count":2033,"split_key":199052,"timestamp":"2026-06-05T17:00:00.000Z"} +{"doc_count":899,"split_key":49870,"timestamp":"2026-06-05T17:00:00.000Z"} +{"doc_count":776,"split_key":16509,"timestamp":"2026-06-05T17:00:00.000Z"} +{"doc_count":40083,"split_key":209334,"timestamp":"2026-06-05T18:00:00.000Z"} +{"doc_count":3518,"split_key":14061,"timestamp":"2026-06-05T18:00:00.000Z"} +{"doc_count":1553,"split_key":199052,"timestamp":"2026-06-05T18:00:00.000Z"} +{"doc_count":981,"split_key":201401,"timestamp":"2026-06-05T18:00:00.000Z"} +{"doc_count":949,"split_key":49870,"timestamp":"2026-06-05T18:00:00.000Z"} +{"doc_count":62868,"split_key":209334,"timestamp":"2026-06-05T19:00:00.000Z"} +{"doc_count":3547,"split_key":14061,"timestamp":"2026-06-05T19:00:00.000Z"} +{"doc_count":1354,"split_key":201401,"timestamp":"2026-06-05T19:00:00.000Z"} +{"doc_count":786,"split_key":49870,"timestamp":"2026-06-05T19:00:00.000Z"} +{"doc_count":653,"split_key":16509,"timestamp":"2026-06-05T19:00:00.000Z"} +{"doc_count":78089,"split_key":209334,"timestamp":"2026-06-05T20:00:00.000Z"} +{"doc_count":3071,"split_key":14061,"timestamp":"2026-06-05T20:00:00.000Z"} +{"doc_count":1556,"split_key":201401,"timestamp":"2026-06-05T20:00:00.000Z"} +{"doc_count":634,"split_key":396982,"timestamp":"2026-06-05T20:00:00.000Z"} +{"doc_count":607,"split_key":16509,"timestamp":"2026-06-05T20:00:00.000Z"} +{"doc_count":75620,"split_key":209334,"timestamp":"2026-06-05T21:00:00.000Z"} +{"doc_count":2183,"split_key":14061,"timestamp":"2026-06-05T21:00:00.000Z"} +{"doc_count":1426,"split_key":201401,"timestamp":"2026-06-05T21:00:00.000Z"} +{"doc_count":802,"split_key":16509,"timestamp":"2026-06-05T21:00:00.000Z"} +{"doc_count":606,"split_key":396982,"timestamp":"2026-06-05T21:00:00.000Z"} +{"doc_count":47027,"split_key":209334,"timestamp":"2026-06-05T22:00:00.000Z"} +{"doc_count":2095,"split_key":14061,"timestamp":"2026-06-05T22:00:00.000Z"} +{"doc_count":1828,"split_key":49870,"timestamp":"2026-06-05T22:00:00.000Z"} +{"doc_count":1040,"split_key":201401,"timestamp":"2026-06-05T22:00:00.000Z"} +{"doc_count":983,"split_key":396982,"timestamp":"2026-06-05T22:00:00.000Z"} +{"doc_count":2694,"split_key":209334,"timestamp":"2026-06-05T23:00:00.000Z"} +{"doc_count":2481,"split_key":49870,"timestamp":"2026-06-05T23:00:00.000Z"} +{"doc_count":2096,"split_key":14061,"timestamp":"2026-06-05T23:00:00.000Z"} +{"doc_count":1240,"split_key":37963,"timestamp":"2026-06-05T23:00:00.000Z"} +{"doc_count":927,"split_key":25369,"timestamp":"2026-06-05T23:00:00.000Z"} +{"doc_count":10005,"split_key":14987,"timestamp":"2026-06-06T00:00:00.000Z"} +{"doc_count":2442,"split_key":49870,"timestamp":"2026-06-06T00:00:00.000Z"} +{"doc_count":2146,"split_key":14061,"timestamp":"2026-06-06T00:00:00.000Z"} +{"doc_count":972,"split_key":209334,"timestamp":"2026-06-06T00:00:00.000Z"} +{"doc_count":814,"split_key":37963,"timestamp":"2026-06-06T00:00:00.000Z"} +{"doc_count":3608,"split_key":209334,"timestamp":"2026-06-06T01:00:00.000Z"} +{"doc_count":2490,"split_key":49870,"timestamp":"2026-06-06T01:00:00.000Z"} +{"doc_count":2382,"split_key":14061,"timestamp":"2026-06-06T01:00:00.000Z"} +{"doc_count":1535,"split_key":37963,"timestamp":"2026-06-06T01:00:00.000Z"} +{"doc_count":729,"split_key":396982,"timestamp":"2026-06-06T01:00:00.000Z"} +{"doc_count":8273,"split_key":209334,"timestamp":"2026-06-06T02:00:00.000Z"} +{"doc_count":2333,"split_key":49870,"timestamp":"2026-06-06T02:00:00.000Z"} +{"doc_count":2282,"split_key":14061,"timestamp":"2026-06-06T02:00:00.000Z"} +{"doc_count":789,"split_key":37963,"timestamp":"2026-06-06T02:00:00.000Z"} +{"doc_count":736,"split_key":396982,"timestamp":"2026-06-06T02:00:00.000Z"} +{"doc_count":13390,"split_key":211590,"timestamp":"2026-06-06T03:00:00.000Z"} +{"doc_count":6679,"split_key":209334,"timestamp":"2026-06-06T03:00:00.000Z"} +{"doc_count":2613,"split_key":49870,"timestamp":"2026-06-06T03:00:00.000Z"} +{"doc_count":2541,"split_key":14061,"timestamp":"2026-06-06T03:00:00.000Z"} +{"doc_count":1449,"split_key":3462,"timestamp":"2026-06-06T03:00:00.000Z"} +{"doc_count":4609,"split_key":209334,"timestamp":"2026-06-06T04:00:00.000Z"} +{"doc_count":4413,"split_key":211590,"timestamp":"2026-06-06T04:00:00.000Z"} +{"doc_count":2582,"split_key":49870,"timestamp":"2026-06-06T04:00:00.000Z"} +{"doc_count":2159,"split_key":14061,"timestamp":"2026-06-06T04:00:00.000Z"} +{"doc_count":1125,"split_key":3462,"timestamp":"2026-06-06T04:00:00.000Z"} +{"doc_count":2182,"split_key":14061,"timestamp":"2026-06-06T05:00:00.000Z"} +{"doc_count":2027,"split_key":49870,"timestamp":"2026-06-06T05:00:00.000Z"} +{"doc_count":1886,"split_key":37963,"timestamp":"2026-06-06T05:00:00.000Z"} +{"doc_count":1834,"split_key":211590,"timestamp":"2026-06-06T05:00:00.000Z"} +{"doc_count":1062,"split_key":3462,"timestamp":"2026-06-06T05:00:00.000Z"} +{"doc_count":2667,"split_key":37963,"timestamp":"2026-06-06T06:00:00.000Z"} +{"doc_count":2339,"split_key":14061,"timestamp":"2026-06-06T06:00:00.000Z"} +{"doc_count":2022,"split_key":209334,"timestamp":"2026-06-06T06:00:00.000Z"} +{"doc_count":1056,"split_key":45102,"timestamp":"2026-06-06T06:00:00.000Z"} +{"doc_count":646,"split_key":396982,"timestamp":"2026-06-06T06:00:00.000Z"} +{"doc_count":5605,"split_key":209334,"timestamp":"2026-06-06T07:00:00.000Z"} +{"doc_count":2753,"split_key":37963,"timestamp":"2026-06-06T07:00:00.000Z"} +{"doc_count":2290,"split_key":14061,"timestamp":"2026-06-06T07:00:00.000Z"} +{"doc_count":1087,"split_key":45102,"timestamp":"2026-06-06T07:00:00.000Z"} +{"doc_count":576,"split_key":48090,"timestamp":"2026-06-06T07:00:00.000Z"} +{"doc_count":3529,"split_key":209334,"timestamp":"2026-06-06T08:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-06T08:00:00.000Z"} +{"doc_count":2405,"split_key":14061,"timestamp":"2026-06-06T08:00:00.000Z"} +{"doc_count":1377,"split_key":37963,"timestamp":"2026-06-06T08:00:00.000Z"} +{"doc_count":1145,"split_key":45102,"timestamp":"2026-06-06T08:00:00.000Z"} +{"doc_count":3615,"split_key":45102,"timestamp":"2026-06-06T09:00:00.000Z"} +{"doc_count":3025,"split_key":48090,"timestamp":"2026-06-06T09:00:00.000Z"} +{"doc_count":2461,"split_key":14061,"timestamp":"2026-06-06T09:00:00.000Z"} +{"doc_count":2048,"split_key":37963,"timestamp":"2026-06-06T09:00:00.000Z"} +{"doc_count":1514,"split_key":16509,"timestamp":"2026-06-06T09:00:00.000Z"} +{"doc_count":2919,"split_key":45102,"timestamp":"2026-06-06T10:00:00.000Z"} +{"doc_count":2400,"split_key":49870,"timestamp":"2026-06-06T10:00:00.000Z"} +{"doc_count":2314,"split_key":14061,"timestamp":"2026-06-06T10:00:00.000Z"} +{"doc_count":2093,"split_key":37963,"timestamp":"2026-06-06T10:00:00.000Z"} +{"doc_count":1201,"split_key":51396,"timestamp":"2026-06-06T10:00:00.000Z"} +{"doc_count":2994,"split_key":211590,"timestamp":"2026-06-06T11:00:00.000Z"} +{"doc_count":2391,"split_key":49870,"timestamp":"2026-06-06T11:00:00.000Z"} +{"doc_count":2315,"split_key":14061,"timestamp":"2026-06-06T11:00:00.000Z"} +{"doc_count":1197,"split_key":37963,"timestamp":"2026-06-06T11:00:00.000Z"} +{"doc_count":1128,"split_key":209334,"timestamp":"2026-06-06T11:00:00.000Z"} +{"doc_count":12925,"split_key":14987,"timestamp":"2026-06-06T12:00:00.000Z"} +{"doc_count":6188,"split_key":211590,"timestamp":"2026-06-06T12:00:00.000Z"} +{"doc_count":3828,"split_key":209334,"timestamp":"2026-06-06T12:00:00.000Z"} +{"doc_count":2407,"split_key":49870,"timestamp":"2026-06-06T12:00:00.000Z"} +{"doc_count":2266,"split_key":14061,"timestamp":"2026-06-06T12:00:00.000Z"} +{"doc_count":5079,"split_key":209334,"timestamp":"2026-06-06T13:00:00.000Z"} +{"doc_count":2444,"split_key":49870,"timestamp":"2026-06-06T13:00:00.000Z"} +{"doc_count":2269,"split_key":14061,"timestamp":"2026-06-06T13:00:00.000Z"} +{"doc_count":854,"split_key":211590,"timestamp":"2026-06-06T13:00:00.000Z"} +{"doc_count":796,"split_key":51396,"timestamp":"2026-06-06T13:00:00.000Z"} +{"doc_count":6574,"split_key":211590,"timestamp":"2026-06-06T14:00:00.000Z"} +{"doc_count":5151,"split_key":51167,"timestamp":"2026-06-06T14:00:00.000Z"} +{"doc_count":3377,"split_key":209334,"timestamp":"2026-06-06T14:00:00.000Z"} +{"doc_count":2272,"split_key":49870,"timestamp":"2026-06-06T14:00:00.000Z"} +{"doc_count":2214,"split_key":14061,"timestamp":"2026-06-06T14:00:00.000Z"} +{"doc_count":3192,"split_key":211590,"timestamp":"2026-06-06T15:00:00.000Z"} +{"doc_count":2198,"split_key":14061,"timestamp":"2026-06-06T15:00:00.000Z"} +{"doc_count":2076,"split_key":209334,"timestamp":"2026-06-06T15:00:00.000Z"} +{"doc_count":1155,"split_key":45102,"timestamp":"2026-06-06T15:00:00.000Z"} +{"doc_count":1068,"split_key":51396,"timestamp":"2026-06-06T15:00:00.000Z"} +{"doc_count":8493,"split_key":48090,"timestamp":"2026-06-06T16:00:00.000Z"} +{"doc_count":5928,"split_key":216246,"timestamp":"2026-06-06T16:00:00.000Z"} +{"doc_count":3740,"split_key":14061,"timestamp":"2026-06-06T16:00:00.000Z"} +{"doc_count":2369,"split_key":209334,"timestamp":"2026-06-06T16:00:00.000Z"} +{"doc_count":1053,"split_key":45102,"timestamp":"2026-06-06T16:00:00.000Z"} +{"doc_count":4041,"split_key":209334,"timestamp":"2026-06-06T17:00:00.000Z"} +{"doc_count":2279,"split_key":14061,"timestamp":"2026-06-06T17:00:00.000Z"} +{"doc_count":1032,"split_key":45102,"timestamp":"2026-06-06T17:00:00.000Z"} +{"doc_count":884,"split_key":37963,"timestamp":"2026-06-06T17:00:00.000Z"} +{"doc_count":737,"split_key":25369,"timestamp":"2026-06-06T17:00:00.000Z"} +{"doc_count":11363,"split_key":216246,"timestamp":"2026-06-06T18:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-06T18:00:00.000Z"} +{"doc_count":2639,"split_key":14061,"timestamp":"2026-06-06T18:00:00.000Z"} +{"doc_count":1536,"split_key":45102,"timestamp":"2026-06-06T18:00:00.000Z"} +{"doc_count":766,"split_key":37963,"timestamp":"2026-06-06T18:00:00.000Z"} +{"doc_count":10612,"split_key":60223,"timestamp":"2026-06-06T19:00:00.000Z"} +{"doc_count":2247,"split_key":14061,"timestamp":"2026-06-06T19:00:00.000Z"} +{"doc_count":2127,"split_key":45102,"timestamp":"2026-06-06T19:00:00.000Z"} +{"doc_count":1979,"split_key":209334,"timestamp":"2026-06-06T19:00:00.000Z"} +{"doc_count":672,"split_key":51396,"timestamp":"2026-06-06T19:00:00.000Z"} +{"doc_count":17613,"split_key":60223,"timestamp":"2026-06-06T20:00:00.000Z"} +{"doc_count":5118,"split_key":211590,"timestamp":"2026-06-06T20:00:00.000Z"} +{"doc_count":2540,"split_key":209334,"timestamp":"2026-06-06T20:00:00.000Z"} +{"doc_count":2242,"split_key":14061,"timestamp":"2026-06-06T20:00:00.000Z"} +{"doc_count":1279,"split_key":45102,"timestamp":"2026-06-06T20:00:00.000Z"} +{"doc_count":10175,"split_key":60223,"timestamp":"2026-06-06T21:00:00.000Z"} +{"doc_count":10065,"split_key":137899,"timestamp":"2026-06-06T21:00:00.000Z"} +{"doc_count":5796,"split_key":211590,"timestamp":"2026-06-06T21:00:00.000Z"} +{"doc_count":4611,"split_key":51396,"timestamp":"2026-06-06T21:00:00.000Z"} +{"doc_count":2631,"split_key":209334,"timestamp":"2026-06-06T21:00:00.000Z"} +{"doc_count":11899,"split_key":60223,"timestamp":"2026-06-06T22:00:00.000Z"} +{"doc_count":10147,"split_key":211590,"timestamp":"2026-06-06T22:00:00.000Z"} +{"doc_count":5477,"split_key":137899,"timestamp":"2026-06-06T22:00:00.000Z"} +{"doc_count":2896,"split_key":209334,"timestamp":"2026-06-06T22:00:00.000Z"} +{"doc_count":2151,"split_key":14061,"timestamp":"2026-06-06T22:00:00.000Z"} +{"doc_count":13994,"split_key":60223,"timestamp":"2026-06-06T23:00:00.000Z"} +{"doc_count":10924,"split_key":14987,"timestamp":"2026-06-06T23:00:00.000Z"} +{"doc_count":7540,"split_key":211590,"timestamp":"2026-06-06T23:00:00.000Z"} +{"doc_count":2447,"split_key":209334,"timestamp":"2026-06-06T23:00:00.000Z"} +{"doc_count":2261,"split_key":14061,"timestamp":"2026-06-06T23:00:00.000Z"} +{"doc_count":15019,"split_key":211590,"timestamp":"2026-06-07T00:00:00.000Z"} +{"doc_count":3290,"split_key":209334,"timestamp":"2026-06-07T00:00:00.000Z"} +{"doc_count":2186,"split_key":60223,"timestamp":"2026-06-07T00:00:00.000Z"} +{"doc_count":2173,"split_key":14061,"timestamp":"2026-06-07T00:00:00.000Z"} +{"doc_count":999,"split_key":51396,"timestamp":"2026-06-07T00:00:00.000Z"} +{"doc_count":19411,"split_key":211590,"timestamp":"2026-06-07T01:00:00.000Z"} +{"doc_count":12924,"split_key":209334,"timestamp":"2026-06-07T01:00:00.000Z"} +{"doc_count":2340,"split_key":14061,"timestamp":"2026-06-07T01:00:00.000Z"} +{"doc_count":1189,"split_key":396982,"timestamp":"2026-06-07T01:00:00.000Z"} +{"doc_count":914,"split_key":37963,"timestamp":"2026-06-07T01:00:00.000Z"} +{"doc_count":20098,"split_key":211590,"timestamp":"2026-06-07T02:00:00.000Z"} +{"doc_count":2539,"split_key":209334,"timestamp":"2026-06-07T02:00:00.000Z"} +{"doc_count":2253,"split_key":14061,"timestamp":"2026-06-07T02:00:00.000Z"} +{"doc_count":1073,"split_key":396982,"timestamp":"2026-06-07T02:00:00.000Z"} +{"doc_count":981,"split_key":37963,"timestamp":"2026-06-07T02:00:00.000Z"} +{"doc_count":4126,"split_key":211590,"timestamp":"2026-06-07T03:00:00.000Z"} +{"doc_count":2605,"split_key":209334,"timestamp":"2026-06-07T03:00:00.000Z"} +{"doc_count":2274,"split_key":14061,"timestamp":"2026-06-07T03:00:00.000Z"} +{"doc_count":1227,"split_key":198953,"timestamp":"2026-06-07T03:00:00.000Z"} +{"doc_count":1225,"split_key":37963,"timestamp":"2026-06-07T03:00:00.000Z"} +{"doc_count":7893,"split_key":211590,"timestamp":"2026-06-07T04:00:00.000Z"} +{"doc_count":5531,"split_key":209334,"timestamp":"2026-06-07T04:00:00.000Z"} +{"doc_count":2486,"split_key":37963,"timestamp":"2026-06-07T04:00:00.000Z"} +{"doc_count":2322,"split_key":14061,"timestamp":"2026-06-07T04:00:00.000Z"} +{"doc_count":2279,"split_key":198953,"timestamp":"2026-06-07T04:00:00.000Z"} +{"doc_count":2407,"split_key":198953,"timestamp":"2026-06-07T05:00:00.000Z"} +{"doc_count":2335,"split_key":14061,"timestamp":"2026-06-07T05:00:00.000Z"} +{"doc_count":2245,"split_key":37963,"timestamp":"2026-06-07T05:00:00.000Z"} +{"doc_count":1433,"split_key":45102,"timestamp":"2026-06-07T05:00:00.000Z"} +{"doc_count":1118,"split_key":209334,"timestamp":"2026-06-07T05:00:00.000Z"} +{"doc_count":3542,"split_key":209334,"timestamp":"2026-06-07T06:00:00.000Z"} +{"doc_count":2922,"split_key":37963,"timestamp":"2026-06-07T06:00:00.000Z"} +{"doc_count":2452,"split_key":198953,"timestamp":"2026-06-07T06:00:00.000Z"} +{"doc_count":2273,"split_key":14061,"timestamp":"2026-06-07T06:00:00.000Z"} +{"doc_count":1080,"split_key":45102,"timestamp":"2026-06-07T06:00:00.000Z"} +{"doc_count":3918,"split_key":209334,"timestamp":"2026-06-07T07:00:00.000Z"} +{"doc_count":2554,"split_key":198953,"timestamp":"2026-06-07T07:00:00.000Z"} +{"doc_count":2342,"split_key":14061,"timestamp":"2026-06-07T07:00:00.000Z"} +{"doc_count":1710,"split_key":37963,"timestamp":"2026-06-07T07:00:00.000Z"} +{"doc_count":987,"split_key":45102,"timestamp":"2026-06-07T07:00:00.000Z"} +{"doc_count":5336,"split_key":209334,"timestamp":"2026-06-07T08:00:00.000Z"} +{"doc_count":2569,"split_key":198953,"timestamp":"2026-06-07T08:00:00.000Z"} +{"doc_count":2339,"split_key":14061,"timestamp":"2026-06-07T08:00:00.000Z"} +{"doc_count":1467,"split_key":37963,"timestamp":"2026-06-07T08:00:00.000Z"} +{"doc_count":976,"split_key":45102,"timestamp":"2026-06-07T08:00:00.000Z"} +{"doc_count":9198,"split_key":211590,"timestamp":"2026-06-07T09:00:00.000Z"} +{"doc_count":2603,"split_key":198953,"timestamp":"2026-06-07T09:00:00.000Z"} +{"doc_count":2214,"split_key":14061,"timestamp":"2026-06-07T09:00:00.000Z"} +{"doc_count":1397,"split_key":209334,"timestamp":"2026-06-07T09:00:00.000Z"} +{"doc_count":1086,"split_key":37963,"timestamp":"2026-06-07T09:00:00.000Z"} +{"doc_count":10815,"split_key":14987,"timestamp":"2026-06-07T10:00:00.000Z"} +{"doc_count":2821,"split_key":211590,"timestamp":"2026-06-07T10:00:00.000Z"} +{"doc_count":2663,"split_key":198953,"timestamp":"2026-06-07T10:00:00.000Z"} +{"doc_count":2350,"split_key":14061,"timestamp":"2026-06-07T10:00:00.000Z"} +{"doc_count":1617,"split_key":37963,"timestamp":"2026-06-07T10:00:00.000Z"} +{"doc_count":3277,"split_key":209334,"timestamp":"2026-06-07T11:00:00.000Z"} +{"doc_count":2662,"split_key":198953,"timestamp":"2026-06-07T11:00:00.000Z"} +{"doc_count":2263,"split_key":14061,"timestamp":"2026-06-07T11:00:00.000Z"} +{"doc_count":1602,"split_key":37963,"timestamp":"2026-06-07T11:00:00.000Z"} +{"doc_count":831,"split_key":45102,"timestamp":"2026-06-07T11:00:00.000Z"} +{"doc_count":7878,"split_key":211590,"timestamp":"2026-06-07T12:00:00.000Z"} +{"doc_count":3169,"split_key":209334,"timestamp":"2026-06-07T12:00:00.000Z"} +{"doc_count":2555,"split_key":198953,"timestamp":"2026-06-07T12:00:00.000Z"} +{"doc_count":2236,"split_key":14061,"timestamp":"2026-06-07T12:00:00.000Z"} +{"doc_count":2011,"split_key":37963,"timestamp":"2026-06-07T12:00:00.000Z"} +{"doc_count":5390,"split_key":211590,"timestamp":"2026-06-07T13:00:00.000Z"} +{"doc_count":2576,"split_key":198953,"timestamp":"2026-06-07T13:00:00.000Z"} +{"doc_count":2330,"split_key":14061,"timestamp":"2026-06-07T13:00:00.000Z"} +{"doc_count":2128,"split_key":209334,"timestamp":"2026-06-07T13:00:00.000Z"} +{"doc_count":1420,"split_key":37963,"timestamp":"2026-06-07T13:00:00.000Z"} +{"doc_count":46747,"split_key":209334,"timestamp":"2026-06-07T14:00:00.000Z"} +{"doc_count":2777,"split_key":198953,"timestamp":"2026-06-07T14:00:00.000Z"} +{"doc_count":2182,"split_key":14061,"timestamp":"2026-06-07T14:00:00.000Z"} +{"doc_count":1720,"split_key":265919,"timestamp":"2026-06-07T14:00:00.000Z"} +{"doc_count":1594,"split_key":201401,"timestamp":"2026-06-07T14:00:00.000Z"} +{"doc_count":4471,"split_key":209334,"timestamp":"2026-06-07T15:00:00.000Z"} +{"doc_count":2721,"split_key":198953,"timestamp":"2026-06-07T15:00:00.000Z"} +{"doc_count":2235,"split_key":14061,"timestamp":"2026-06-07T15:00:00.000Z"} +{"doc_count":961,"split_key":23470,"timestamp":"2026-06-07T15:00:00.000Z"} +{"doc_count":834,"split_key":45102,"timestamp":"2026-06-07T15:00:00.000Z"} +{"doc_count":2483,"split_key":198953,"timestamp":"2026-06-07T16:00:00.000Z"} +{"doc_count":2227,"split_key":209334,"timestamp":"2026-06-07T16:00:00.000Z"} +{"doc_count":2190,"split_key":14061,"timestamp":"2026-06-07T16:00:00.000Z"} +{"doc_count":1410,"split_key":23470,"timestamp":"2026-06-07T16:00:00.000Z"} +{"doc_count":784,"split_key":45102,"timestamp":"2026-06-07T16:00:00.000Z"} +{"doc_count":7269,"split_key":211590,"timestamp":"2026-06-07T17:00:00.000Z"} +{"doc_count":6368,"split_key":209334,"timestamp":"2026-06-07T17:00:00.000Z"} +{"doc_count":2353,"split_key":198953,"timestamp":"2026-06-07T17:00:00.000Z"} +{"doc_count":2172,"split_key":14061,"timestamp":"2026-06-07T17:00:00.000Z"} +{"doc_count":1008,"split_key":49870,"timestamp":"2026-06-07T17:00:00.000Z"} +{"doc_count":4426,"split_key":209334,"timestamp":"2026-06-07T18:00:00.000Z"} +{"doc_count":2287,"split_key":14061,"timestamp":"2026-06-07T18:00:00.000Z"} +{"doc_count":1987,"split_key":198953,"timestamp":"2026-06-07T18:00:00.000Z"} +{"doc_count":1113,"split_key":37963,"timestamp":"2026-06-07T18:00:00.000Z"} +{"doc_count":830,"split_key":45102,"timestamp":"2026-06-07T18:00:00.000Z"} +{"doc_count":7362,"split_key":209334,"timestamp":"2026-06-07T19:00:00.000Z"} +{"doc_count":2402,"split_key":14061,"timestamp":"2026-06-07T19:00:00.000Z"} +{"doc_count":1598,"split_key":51396,"timestamp":"2026-06-07T19:00:00.000Z"} +{"doc_count":1430,"split_key":37963,"timestamp":"2026-06-07T19:00:00.000Z"} +{"doc_count":976,"split_key":25369,"timestamp":"2026-06-07T19:00:00.000Z"} +{"doc_count":28237,"split_key":209334,"timestamp":"2026-06-07T20:00:00.000Z"} +{"doc_count":8928,"split_key":39351,"timestamp":"2026-06-07T20:00:00.000Z"} +{"doc_count":2456,"split_key":14061,"timestamp":"2026-06-07T20:00:00.000Z"} +{"doc_count":1748,"split_key":51396,"timestamp":"2026-06-07T20:00:00.000Z"} +{"doc_count":1449,"split_key":37963,"timestamp":"2026-06-07T20:00:00.000Z"} +{"doc_count":35006,"split_key":209334,"timestamp":"2026-06-07T21:00:00.000Z"} +{"doc_count":24662,"split_key":63949,"timestamp":"2026-06-07T21:00:00.000Z"} +{"doc_count":18074,"split_key":14061,"timestamp":"2026-06-07T21:00:00.000Z"} +{"doc_count":1249,"split_key":45102,"timestamp":"2026-06-07T21:00:00.000Z"} +{"doc_count":871,"split_key":201401,"timestamp":"2026-06-07T21:00:00.000Z"} +{"doc_count":16596,"split_key":14061,"timestamp":"2026-06-07T22:00:00.000Z"} +{"doc_count":5721,"split_key":63949,"timestamp":"2026-06-07T22:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-07T22:00:00.000Z"} +{"doc_count":2340,"split_key":209334,"timestamp":"2026-06-07T22:00:00.000Z"} +{"doc_count":807,"split_key":23470,"timestamp":"2026-06-07T22:00:00.000Z"} +{"doc_count":5524,"split_key":211590,"timestamp":"2026-06-07T23:00:00.000Z"} +{"doc_count":3504,"split_key":209334,"timestamp":"2026-06-07T23:00:00.000Z"} +{"doc_count":2375,"split_key":14061,"timestamp":"2026-06-07T23:00:00.000Z"} +{"doc_count":2217,"split_key":216047,"timestamp":"2026-06-07T23:00:00.000Z"} +{"doc_count":1055,"split_key":23470,"timestamp":"2026-06-07T23:00:00.000Z"} +{"doc_count":10045,"split_key":14987,"timestamp":"2026-06-08T00:00:00.000Z"} +{"doc_count":5637,"split_key":209334,"timestamp":"2026-06-08T00:00:00.000Z"} +{"doc_count":4061,"split_key":211590,"timestamp":"2026-06-08T00:00:00.000Z"} +{"doc_count":3651,"split_key":396982,"timestamp":"2026-06-08T00:00:00.000Z"} +{"doc_count":2286,"split_key":14061,"timestamp":"2026-06-08T00:00:00.000Z"} +{"doc_count":3319,"split_key":209334,"timestamp":"2026-06-08T01:00:00.000Z"} +{"doc_count":2351,"split_key":14061,"timestamp":"2026-06-08T01:00:00.000Z"} +{"doc_count":1695,"split_key":396982,"timestamp":"2026-06-08T01:00:00.000Z"} +{"doc_count":1173,"split_key":398101,"timestamp":"2026-06-08T01:00:00.000Z"} +{"doc_count":995,"split_key":23470,"timestamp":"2026-06-08T01:00:00.000Z"} +{"doc_count":7729,"split_key":211590,"timestamp":"2026-06-08T02:00:00.000Z"} +{"doc_count":3785,"split_key":396982,"timestamp":"2026-06-08T02:00:00.000Z"} +{"doc_count":2608,"split_key":14061,"timestamp":"2026-06-08T02:00:00.000Z"} +{"doc_count":2066,"split_key":209334,"timestamp":"2026-06-08T02:00:00.000Z"} +{"doc_count":1073,"split_key":16509,"timestamp":"2026-06-08T02:00:00.000Z"} +{"doc_count":21230,"split_key":209334,"timestamp":"2026-06-08T03:00:00.000Z"} +{"doc_count":4620,"split_key":211590,"timestamp":"2026-06-08T03:00:00.000Z"} +{"doc_count":2442,"split_key":14061,"timestamp":"2026-06-08T03:00:00.000Z"} +{"doc_count":1539,"split_key":396982,"timestamp":"2026-06-08T03:00:00.000Z"} +{"doc_count":929,"split_key":201401,"timestamp":"2026-06-08T03:00:00.000Z"} +{"doc_count":6703,"split_key":209334,"timestamp":"2026-06-08T04:00:00.000Z"} +{"doc_count":4864,"split_key":396982,"timestamp":"2026-06-08T04:00:00.000Z"} +{"doc_count":3109,"split_key":14061,"timestamp":"2026-06-08T04:00:00.000Z"} +{"doc_count":1242,"split_key":37963,"timestamp":"2026-06-08T04:00:00.000Z"} +{"doc_count":1024,"split_key":25369,"timestamp":"2026-06-08T04:00:00.000Z"} +{"doc_count":6192,"split_key":396982,"timestamp":"2026-06-08T05:00:00.000Z"} +{"doc_count":6002,"split_key":211590,"timestamp":"2026-06-08T05:00:00.000Z"} +{"doc_count":5341,"split_key":14061,"timestamp":"2026-06-08T05:00:00.000Z"} +{"doc_count":2558,"split_key":37963,"timestamp":"2026-06-08T05:00:00.000Z"} +{"doc_count":1349,"split_key":209334,"timestamp":"2026-06-08T05:00:00.000Z"} +{"doc_count":12018,"split_key":211590,"timestamp":"2026-06-08T06:00:00.000Z"} +{"doc_count":10009,"split_key":209334,"timestamp":"2026-06-08T06:00:00.000Z"} +{"doc_count":2630,"split_key":14061,"timestamp":"2026-06-08T06:00:00.000Z"} +{"doc_count":2595,"split_key":396982,"timestamp":"2026-06-08T06:00:00.000Z"} +{"doc_count":1896,"split_key":37963,"timestamp":"2026-06-08T06:00:00.000Z"} +{"doc_count":6017,"split_key":211590,"timestamp":"2026-06-08T07:00:00.000Z"} +{"doc_count":4424,"split_key":209334,"timestamp":"2026-06-08T07:00:00.000Z"} +{"doc_count":2564,"split_key":14061,"timestamp":"2026-06-08T07:00:00.000Z"} +{"doc_count":1981,"split_key":398101,"timestamp":"2026-06-08T07:00:00.000Z"} +{"doc_count":1772,"split_key":37963,"timestamp":"2026-06-08T07:00:00.000Z"} +{"doc_count":3786,"split_key":209334,"timestamp":"2026-06-08T08:00:00.000Z"} +{"doc_count":3358,"split_key":14061,"timestamp":"2026-06-08T08:00:00.000Z"} +{"doc_count":2073,"split_key":396982,"timestamp":"2026-06-08T08:00:00.000Z"} +{"doc_count":1163,"split_key":398101,"timestamp":"2026-06-08T08:00:00.000Z"} +{"doc_count":864,"split_key":49870,"timestamp":"2026-06-08T08:00:00.000Z"} +{"doc_count":3837,"split_key":396982,"timestamp":"2026-06-08T09:00:00.000Z"} +{"doc_count":3244,"split_key":14061,"timestamp":"2026-06-08T09:00:00.000Z"} +{"doc_count":2319,"split_key":209334,"timestamp":"2026-06-08T09:00:00.000Z"} +{"doc_count":1696,"split_key":398101,"timestamp":"2026-06-08T09:00:00.000Z"} +{"doc_count":852,"split_key":16509,"timestamp":"2026-06-08T09:00:00.000Z"} +{"doc_count":5209,"split_key":209334,"timestamp":"2026-06-08T10:00:00.000Z"} +{"doc_count":2808,"split_key":14061,"timestamp":"2026-06-08T10:00:00.000Z"} +{"doc_count":2617,"split_key":211590,"timestamp":"2026-06-08T10:00:00.000Z"} +{"doc_count":2005,"split_key":396982,"timestamp":"2026-06-08T10:00:00.000Z"} +{"doc_count":776,"split_key":45102,"timestamp":"2026-06-08T10:00:00.000Z"} +{"doc_count":2748,"split_key":14061,"timestamp":"2026-06-08T11:00:00.000Z"} +{"doc_count":2373,"split_key":396982,"timestamp":"2026-06-08T11:00:00.000Z"} +{"doc_count":1340,"split_key":211590,"timestamp":"2026-06-08T11:00:00.000Z"} +{"doc_count":760,"split_key":45102,"timestamp":"2026-06-08T11:00:00.000Z"} +{"doc_count":755,"split_key":37963,"timestamp":"2026-06-08T11:00:00.000Z"} +{"doc_count":4553,"split_key":396982,"timestamp":"2026-06-08T12:00:00.000Z"} +{"doc_count":4143,"split_key":209334,"timestamp":"2026-06-08T12:00:00.000Z"} +{"doc_count":2583,"split_key":23470,"timestamp":"2026-06-08T12:00:00.000Z"} +{"doc_count":2555,"split_key":14061,"timestamp":"2026-06-08T12:00:00.000Z"} +{"doc_count":1909,"split_key":211590,"timestamp":"2026-06-08T12:00:00.000Z"} +{"doc_count":12725,"split_key":209334,"timestamp":"2026-06-08T13:00:00.000Z"} +{"doc_count":3269,"split_key":396982,"timestamp":"2026-06-08T13:00:00.000Z"} +{"doc_count":2575,"split_key":14061,"timestamp":"2026-06-08T13:00:00.000Z"} +{"doc_count":1523,"split_key":45102,"timestamp":"2026-06-08T13:00:00.000Z"} +{"doc_count":1363,"split_key":211590,"timestamp":"2026-06-08T13:00:00.000Z"} +{"doc_count":38524,"split_key":209334,"timestamp":"2026-06-08T14:00:00.000Z"} +{"doc_count":3808,"split_key":48090,"timestamp":"2026-06-08T14:00:00.000Z"} +{"doc_count":2616,"split_key":14061,"timestamp":"2026-06-08T14:00:00.000Z"} +{"doc_count":1625,"split_key":45102,"timestamp":"2026-06-08T14:00:00.000Z"} +{"doc_count":1583,"split_key":396982,"timestamp":"2026-06-08T14:00:00.000Z"} +{"doc_count":12521,"split_key":209334,"timestamp":"2026-06-08T15:00:00.000Z"} +{"doc_count":3365,"split_key":396982,"timestamp":"2026-06-08T15:00:00.000Z"} +{"doc_count":2600,"split_key":14061,"timestamp":"2026-06-08T15:00:00.000Z"} +{"doc_count":2434,"split_key":45102,"timestamp":"2026-06-08T15:00:00.000Z"} +{"doc_count":1543,"split_key":49870,"timestamp":"2026-06-08T15:00:00.000Z"} +{"doc_count":4796,"split_key":209334,"timestamp":"2026-06-08T16:00:00.000Z"} +{"doc_count":4320,"split_key":396982,"timestamp":"2026-06-08T16:00:00.000Z"} +{"doc_count":3963,"split_key":45102,"timestamp":"2026-06-08T16:00:00.000Z"} +{"doc_count":1941,"split_key":49870,"timestamp":"2026-06-08T16:00:00.000Z"} +{"doc_count":1889,"split_key":14061,"timestamp":"2026-06-08T16:00:00.000Z"} +{"doc_count":5790,"split_key":209334,"timestamp":"2026-06-08T17:00:00.000Z"} +{"doc_count":3694,"split_key":396982,"timestamp":"2026-06-08T17:00:00.000Z"} +{"doc_count":1706,"split_key":14061,"timestamp":"2026-06-08T17:00:00.000Z"} +{"doc_count":1653,"split_key":49870,"timestamp":"2026-06-08T17:00:00.000Z"} +{"doc_count":775,"split_key":16509,"timestamp":"2026-06-08T17:00:00.000Z"} +{"doc_count":6394,"split_key":211590,"timestamp":"2026-06-08T18:00:00.000Z"} +{"doc_count":4051,"split_key":209334,"timestamp":"2026-06-08T18:00:00.000Z"} +{"doc_count":1651,"split_key":14061,"timestamp":"2026-06-08T18:00:00.000Z"} +{"doc_count":1610,"split_key":45102,"timestamp":"2026-06-08T18:00:00.000Z"} +{"doc_count":1538,"split_key":141995,"timestamp":"2026-06-08T18:00:00.000Z"} +{"doc_count":14690,"split_key":209334,"timestamp":"2026-06-08T19:00:00.000Z"} +{"doc_count":6978,"split_key":211590,"timestamp":"2026-06-08T19:00:00.000Z"} +{"doc_count":1642,"split_key":14061,"timestamp":"2026-06-08T19:00:00.000Z"} +{"doc_count":972,"split_key":396982,"timestamp":"2026-06-08T19:00:00.000Z"} +{"doc_count":915,"split_key":141995,"timestamp":"2026-06-08T19:00:00.000Z"} +{"doc_count":5207,"split_key":209334,"timestamp":"2026-06-08T20:00:00.000Z"} +{"doc_count":3937,"split_key":211590,"timestamp":"2026-06-08T20:00:00.000Z"} +{"doc_count":1661,"split_key":14061,"timestamp":"2026-06-08T20:00:00.000Z"} +{"doc_count":1099,"split_key":51396,"timestamp":"2026-06-08T20:00:00.000Z"} +{"doc_count":914,"split_key":396982,"timestamp":"2026-06-08T20:00:00.000Z"} +{"doc_count":7159,"split_key":211590,"timestamp":"2026-06-08T21:00:00.000Z"} +{"doc_count":2424,"split_key":209334,"timestamp":"2026-06-08T21:00:00.000Z"} +{"doc_count":1937,"split_key":14061,"timestamp":"2026-06-08T21:00:00.000Z"} +{"doc_count":1733,"split_key":396982,"timestamp":"2026-06-08T21:00:00.000Z"} +{"doc_count":1516,"split_key":37963,"timestamp":"2026-06-08T21:00:00.000Z"} +{"doc_count":20433,"split_key":209334,"timestamp":"2026-06-08T22:00:00.000Z"} +{"doc_count":6016,"split_key":211590,"timestamp":"2026-06-08T22:00:00.000Z"} +{"doc_count":2368,"split_key":14061,"timestamp":"2026-06-08T22:00:00.000Z"} +{"doc_count":1403,"split_key":396982,"timestamp":"2026-06-08T22:00:00.000Z"} +{"doc_count":1009,"split_key":25369,"timestamp":"2026-06-08T22:00:00.000Z"} +{"doc_count":67776,"split_key":209334,"timestamp":"2026-06-08T23:00:00.000Z"} +{"doc_count":2430,"split_key":14061,"timestamp":"2026-06-08T23:00:00.000Z"} +{"doc_count":1522,"split_key":201401,"timestamp":"2026-06-08T23:00:00.000Z"} +{"doc_count":908,"split_key":396982,"timestamp":"2026-06-08T23:00:00.000Z"} +{"doc_count":697,"split_key":25369,"timestamp":"2026-06-08T23:00:00.000Z"} +{"doc_count":10000,"split_key":14987,"timestamp":"2026-06-09T00:00:00.000Z"} +{"doc_count":2532,"split_key":14061,"timestamp":"2026-06-09T00:00:00.000Z"} +{"doc_count":1990,"split_key":209334,"timestamp":"2026-06-09T00:00:00.000Z"} +{"doc_count":1110,"split_key":37963,"timestamp":"2026-06-09T00:00:00.000Z"} +{"doc_count":494,"split_key":16509,"timestamp":"2026-06-09T00:00:00.000Z"} +{"doc_count":3943,"split_key":209334,"timestamp":"2026-06-09T01:00:00.000Z"} +{"doc_count":2582,"split_key":14061,"timestamp":"2026-06-09T01:00:00.000Z"} +{"doc_count":934,"split_key":37963,"timestamp":"2026-06-09T01:00:00.000Z"} +{"doc_count":827,"split_key":396982,"timestamp":"2026-06-09T01:00:00.000Z"} +{"doc_count":428,"split_key":138915,"timestamp":"2026-06-09T01:00:00.000Z"} +{"doc_count":6091,"split_key":209334,"timestamp":"2026-06-09T02:00:00.000Z"} +{"doc_count":2514,"split_key":14061,"timestamp":"2026-06-09T02:00:00.000Z"} +{"doc_count":1043,"split_key":16509,"timestamp":"2026-06-09T02:00:00.000Z"} +{"doc_count":624,"split_key":14618,"timestamp":"2026-06-09T02:00:00.000Z"} +{"doc_count":500,"split_key":37963,"timestamp":"2026-06-09T02:00:00.000Z"} +{"doc_count":2531,"split_key":14061,"timestamp":"2026-06-09T03:00:00.000Z"} +{"doc_count":1962,"split_key":209334,"timestamp":"2026-06-09T03:00:00.000Z"} +{"doc_count":1047,"split_key":16509,"timestamp":"2026-06-09T03:00:00.000Z"} +{"doc_count":559,"split_key":396982,"timestamp":"2026-06-09T03:00:00.000Z"} +{"doc_count":533,"split_key":37963,"timestamp":"2026-06-09T03:00:00.000Z"} +{"doc_count":6682,"split_key":209334,"timestamp":"2026-06-09T04:00:00.000Z"} +{"doc_count":6002,"split_key":211590,"timestamp":"2026-06-09T04:00:00.000Z"} +{"doc_count":2526,"split_key":14061,"timestamp":"2026-06-09T04:00:00.000Z"} +{"doc_count":1467,"split_key":37963,"timestamp":"2026-06-09T04:00:00.000Z"} +{"doc_count":1079,"split_key":51396,"timestamp":"2026-06-09T04:00:00.000Z"} +{"doc_count":13543,"split_key":209334,"timestamp":"2026-06-09T05:00:00.000Z"} +{"doc_count":3436,"split_key":211590,"timestamp":"2026-06-09T05:00:00.000Z"} +{"doc_count":2339,"split_key":14061,"timestamp":"2026-06-09T05:00:00.000Z"} +{"doc_count":1136,"split_key":201401,"timestamp":"2026-06-09T05:00:00.000Z"} +{"doc_count":919,"split_key":396982,"timestamp":"2026-06-09T05:00:00.000Z"} +{"doc_count":4867,"split_key":209334,"timestamp":"2026-06-09T06:00:00.000Z"} +{"doc_count":2466,"split_key":14061,"timestamp":"2026-06-09T06:00:00.000Z"} +{"doc_count":1127,"split_key":201401,"timestamp":"2026-06-09T06:00:00.000Z"} +{"doc_count":986,"split_key":25369,"timestamp":"2026-06-09T06:00:00.000Z"} +{"doc_count":673,"split_key":16509,"timestamp":"2026-06-09T06:00:00.000Z"} +{"doc_count":2473,"split_key":14061,"timestamp":"2026-06-09T07:00:00.000Z"} +{"doc_count":1925,"split_key":209334,"timestamp":"2026-06-09T07:00:00.000Z"} +{"doc_count":950,"split_key":25369,"timestamp":"2026-06-09T07:00:00.000Z"} +{"doc_count":542,"split_key":16509,"timestamp":"2026-06-09T07:00:00.000Z"} +{"doc_count":528,"split_key":396982,"timestamp":"2026-06-09T07:00:00.000Z"} +{"doc_count":10404,"split_key":209334,"timestamp":"2026-06-09T08:00:00.000Z"} +{"doc_count":5781,"split_key":211590,"timestamp":"2026-06-09T08:00:00.000Z"} +{"doc_count":2344,"split_key":14061,"timestamp":"2026-06-09T08:00:00.000Z"} +{"doc_count":997,"split_key":16509,"timestamp":"2026-06-09T08:00:00.000Z"} +{"doc_count":759,"split_key":201401,"timestamp":"2026-06-09T08:00:00.000Z"} +{"doc_count":12019,"split_key":211590,"timestamp":"2026-06-09T09:00:00.000Z"} +{"doc_count":8271,"split_key":209334,"timestamp":"2026-06-09T09:00:00.000Z"} +{"doc_count":2379,"split_key":14061,"timestamp":"2026-06-09T09:00:00.000Z"} +{"doc_count":905,"split_key":16509,"timestamp":"2026-06-09T09:00:00.000Z"} +{"doc_count":904,"split_key":396982,"timestamp":"2026-06-09T09:00:00.000Z"} +{"doc_count":20571,"split_key":63949,"timestamp":"2026-06-09T10:00:00.000Z"} +{"doc_count":6017,"split_key":211590,"timestamp":"2026-06-09T10:00:00.000Z"} +{"doc_count":2891,"split_key":209334,"timestamp":"2026-06-09T10:00:00.000Z"} +{"doc_count":2281,"split_key":14061,"timestamp":"2026-06-09T10:00:00.000Z"} +{"doc_count":769,"split_key":16509,"timestamp":"2026-06-09T10:00:00.000Z"} +{"doc_count":9878,"split_key":63949,"timestamp":"2026-06-09T11:00:00.000Z"} +{"doc_count":5223,"split_key":209334,"timestamp":"2026-06-09T11:00:00.000Z"} +{"doc_count":2221,"split_key":14061,"timestamp":"2026-06-09T11:00:00.000Z"} +{"doc_count":904,"split_key":16509,"timestamp":"2026-06-09T11:00:00.000Z"} +{"doc_count":824,"split_key":51396,"timestamp":"2026-06-09T11:00:00.000Z"} +{"doc_count":21070,"split_key":209334,"timestamp":"2026-06-09T12:00:00.000Z"} +{"doc_count":2575,"split_key":14061,"timestamp":"2026-06-09T12:00:00.000Z"} +{"doc_count":2229,"split_key":211590,"timestamp":"2026-06-09T12:00:00.000Z"} +{"doc_count":930,"split_key":201401,"timestamp":"2026-06-09T12:00:00.000Z"} +{"doc_count":821,"split_key":16509,"timestamp":"2026-06-09T12:00:00.000Z"} +{"doc_count":4812,"split_key":209334,"timestamp":"2026-06-09T13:00:00.000Z"} +{"doc_count":1577,"split_key":14061,"timestamp":"2026-06-09T13:00:00.000Z"} +{"doc_count":939,"split_key":16509,"timestamp":"2026-06-09T13:00:00.000Z"} +{"doc_count":815,"split_key":211590,"timestamp":"2026-06-09T13:00:00.000Z"} +{"doc_count":763,"split_key":396982,"timestamp":"2026-06-09T13:00:00.000Z"} +{"doc_count":3112,"split_key":209334,"timestamp":"2026-06-09T14:00:00.000Z"} +{"doc_count":1344,"split_key":16509,"timestamp":"2026-06-09T14:00:00.000Z"} +{"doc_count":1337,"split_key":14061,"timestamp":"2026-06-09T14:00:00.000Z"} +{"doc_count":586,"split_key":51396,"timestamp":"2026-06-09T14:00:00.000Z"} +{"doc_count":546,"split_key":138915,"timestamp":"2026-06-09T14:00:00.000Z"} +{"doc_count":8844,"split_key":209334,"timestamp":"2026-06-09T15:00:00.000Z"} +{"doc_count":1487,"split_key":51396,"timestamp":"2026-06-09T15:00:00.000Z"} +{"doc_count":1428,"split_key":25369,"timestamp":"2026-06-09T15:00:00.000Z"} +{"doc_count":1410,"split_key":14061,"timestamp":"2026-06-09T15:00:00.000Z"} +{"doc_count":994,"split_key":201401,"timestamp":"2026-06-09T15:00:00.000Z"} +{"doc_count":2699,"split_key":209334,"timestamp":"2026-06-09T16:00:00.000Z"} +{"doc_count":2578,"split_key":45102,"timestamp":"2026-06-09T16:00:00.000Z"} +{"doc_count":1174,"split_key":14061,"timestamp":"2026-06-09T16:00:00.000Z"} +{"doc_count":757,"split_key":16509,"timestamp":"2026-06-09T16:00:00.000Z"} +{"doc_count":505,"split_key":25369,"timestamp":"2026-06-09T16:00:00.000Z"} +{"doc_count":1870,"split_key":45102,"timestamp":"2026-06-09T17:00:00.000Z"} +{"doc_count":1644,"split_key":209334,"timestamp":"2026-06-09T17:00:00.000Z"} +{"doc_count":1184,"split_key":14061,"timestamp":"2026-06-09T17:00:00.000Z"} +{"doc_count":962,"split_key":16509,"timestamp":"2026-06-09T17:00:00.000Z"} +{"doc_count":852,"split_key":211590,"timestamp":"2026-06-09T17:00:00.000Z"} +{"doc_count":7953,"split_key":209334,"timestamp":"2026-06-09T18:00:00.000Z"} +{"doc_count":2288,"split_key":211590,"timestamp":"2026-06-09T18:00:00.000Z"} +{"doc_count":1170,"split_key":14061,"timestamp":"2026-06-09T18:00:00.000Z"} +{"doc_count":797,"split_key":201401,"timestamp":"2026-06-09T18:00:00.000Z"} +{"doc_count":680,"split_key":16509,"timestamp":"2026-06-09T18:00:00.000Z"} +{"doc_count":70061,"split_key":209334,"timestamp":"2026-06-09T19:00:00.000Z"} +{"doc_count":20079,"split_key":14061,"timestamp":"2026-06-09T19:00:00.000Z"} +{"doc_count":1692,"split_key":201401,"timestamp":"2026-06-09T19:00:00.000Z"} +{"doc_count":966,"split_key":16509,"timestamp":"2026-06-09T19:00:00.000Z"} +{"doc_count":736,"split_key":51396,"timestamp":"2026-06-09T19:00:00.000Z"} +{"doc_count":55849,"split_key":209334,"timestamp":"2026-06-09T20:00:00.000Z"} +{"doc_count":1369,"split_key":201401,"timestamp":"2026-06-09T20:00:00.000Z"} +{"doc_count":1361,"split_key":51396,"timestamp":"2026-06-09T20:00:00.000Z"} +{"doc_count":1229,"split_key":14061,"timestamp":"2026-06-09T20:00:00.000Z"} +{"doc_count":998,"split_key":398101,"timestamp":"2026-06-09T20:00:00.000Z"} +{"doc_count":11995,"split_key":209334,"timestamp":"2026-06-09T21:00:00.000Z"} +{"doc_count":1410,"split_key":9808,"timestamp":"2026-06-09T21:00:00.000Z"} +{"doc_count":1219,"split_key":14061,"timestamp":"2026-06-09T21:00:00.000Z"} +{"doc_count":965,"split_key":25369,"timestamp":"2026-06-09T21:00:00.000Z"} +{"doc_count":866,"split_key":396982,"timestamp":"2026-06-09T21:00:00.000Z"} +{"doc_count":20460,"split_key":14061,"timestamp":"2026-06-09T22:00:00.000Z"} +{"doc_count":10324,"split_key":209334,"timestamp":"2026-06-09T22:00:00.000Z"} +{"doc_count":863,"split_key":25369,"timestamp":"2026-06-09T22:00:00.000Z"} +{"doc_count":584,"split_key":201401,"timestamp":"2026-06-09T22:00:00.000Z"} +{"doc_count":578,"split_key":16509,"timestamp":"2026-06-09T22:00:00.000Z"} +{"doc_count":10443,"split_key":209334,"timestamp":"2026-06-09T23:00:00.000Z"} +{"doc_count":6002,"split_key":211590,"timestamp":"2026-06-09T23:00:00.000Z"} +{"doc_count":2178,"split_key":14061,"timestamp":"2026-06-09T23:00:00.000Z"} +{"doc_count":699,"split_key":16509,"timestamp":"2026-06-09T23:00:00.000Z"} +{"doc_count":567,"split_key":396982,"timestamp":"2026-06-09T23:00:00.000Z"} +{"doc_count":12259,"split_key":14987,"timestamp":"2026-06-10T00:00:00.000Z"} +{"doc_count":10192,"split_key":209334,"timestamp":"2026-06-10T00:00:00.000Z"} +{"doc_count":5755,"split_key":211590,"timestamp":"2026-06-10T00:00:00.000Z"} +{"doc_count":2192,"split_key":14061,"timestamp":"2026-06-10T00:00:00.000Z"} +{"doc_count":597,"split_key":138915,"timestamp":"2026-06-10T00:00:00.000Z"} +{"doc_count":10463,"split_key":209334,"timestamp":"2026-06-10T01:00:00.000Z"} +{"doc_count":2184,"split_key":14061,"timestamp":"2026-06-10T01:00:00.000Z"} +{"doc_count":1586,"split_key":63949,"timestamp":"2026-06-10T01:00:00.000Z"} +{"doc_count":962,"split_key":396982,"timestamp":"2026-06-10T01:00:00.000Z"} +{"doc_count":533,"split_key":197540,"timestamp":"2026-06-10T01:00:00.000Z"} +{"doc_count":24468,"split_key":63949,"timestamp":"2026-06-10T02:00:00.000Z"} +{"doc_count":11398,"split_key":209334,"timestamp":"2026-06-10T02:00:00.000Z"} +{"doc_count":2417,"split_key":14061,"timestamp":"2026-06-10T02:00:00.000Z"} +{"doc_count":675,"split_key":396982,"timestamp":"2026-06-10T02:00:00.000Z"} +{"doc_count":621,"split_key":138915,"timestamp":"2026-06-10T02:00:00.000Z"} +{"doc_count":10303,"split_key":209334,"timestamp":"2026-06-10T03:00:00.000Z"} +{"doc_count":4274,"split_key":211590,"timestamp":"2026-06-10T03:00:00.000Z"} +{"doc_count":4132,"split_key":63949,"timestamp":"2026-06-10T03:00:00.000Z"} +{"doc_count":2042,"split_key":14061,"timestamp":"2026-06-10T03:00:00.000Z"} +{"doc_count":989,"split_key":16509,"timestamp":"2026-06-10T03:00:00.000Z"} +{"doc_count":10426,"split_key":209334,"timestamp":"2026-06-10T04:00:00.000Z"} +{"doc_count":5113,"split_key":211590,"timestamp":"2026-06-10T04:00:00.000Z"} +{"doc_count":2133,"split_key":14061,"timestamp":"2026-06-10T04:00:00.000Z"} +{"doc_count":778,"split_key":16509,"timestamp":"2026-06-10T04:00:00.000Z"} +{"doc_count":568,"split_key":396982,"timestamp":"2026-06-10T04:00:00.000Z"} +{"doc_count":11087,"split_key":209334,"timestamp":"2026-06-10T05:00:00.000Z"} +{"doc_count":2151,"split_key":14061,"timestamp":"2026-06-10T05:00:00.000Z"} +{"doc_count":1116,"split_key":396982,"timestamp":"2026-06-10T05:00:00.000Z"} +{"doc_count":1090,"split_key":211590,"timestamp":"2026-06-10T05:00:00.000Z"} +{"doc_count":815,"split_key":16509,"timestamp":"2026-06-10T05:00:00.000Z"} +{"doc_count":8710,"split_key":14061,"timestamp":"2026-06-10T06:00:00.000Z"} +{"doc_count":6833,"split_key":209334,"timestamp":"2026-06-10T06:00:00.000Z"} +{"doc_count":924,"split_key":45102,"timestamp":"2026-06-10T06:00:00.000Z"} +{"doc_count":831,"split_key":16509,"timestamp":"2026-06-10T06:00:00.000Z"} +{"doc_count":701,"split_key":396982,"timestamp":"2026-06-10T06:00:00.000Z"} +{"doc_count":2203,"split_key":14061,"timestamp":"2026-06-10T07:00:00.000Z"} +{"doc_count":848,"split_key":45102,"timestamp":"2026-06-10T07:00:00.000Z"} +{"doc_count":676,"split_key":398101,"timestamp":"2026-06-10T07:00:00.000Z"} +{"doc_count":670,"split_key":209334,"timestamp":"2026-06-10T07:00:00.000Z"} +{"doc_count":599,"split_key":197540,"timestamp":"2026-06-10T07:00:00.000Z"} +{"doc_count":2178,"split_key":14061,"timestamp":"2026-06-10T08:00:00.000Z"} +{"doc_count":993,"split_key":45102,"timestamp":"2026-06-10T08:00:00.000Z"} +{"doc_count":774,"split_key":16509,"timestamp":"2026-06-10T08:00:00.000Z"} +{"doc_count":667,"split_key":209334,"timestamp":"2026-06-10T08:00:00.000Z"} +{"doc_count":631,"split_key":138915,"timestamp":"2026-06-10T08:00:00.000Z"} +{"doc_count":26258,"split_key":14061,"timestamp":"2026-06-10T09:00:00.000Z"} +{"doc_count":907,"split_key":45102,"timestamp":"2026-06-10T09:00:00.000Z"} +{"doc_count":880,"split_key":398101,"timestamp":"2026-06-10T09:00:00.000Z"} +{"doc_count":857,"split_key":16509,"timestamp":"2026-06-10T09:00:00.000Z"} +{"doc_count":711,"split_key":138915,"timestamp":"2026-06-10T09:00:00.000Z"} +{"doc_count":2303,"split_key":14061,"timestamp":"2026-06-10T10:00:00.000Z"} +{"doc_count":948,"split_key":398101,"timestamp":"2026-06-10T10:00:00.000Z"} +{"doc_count":657,"split_key":45102,"timestamp":"2026-06-10T10:00:00.000Z"} +{"doc_count":651,"split_key":209334,"timestamp":"2026-06-10T10:00:00.000Z"} +{"doc_count":643,"split_key":51167,"timestamp":"2026-06-10T10:00:00.000Z"} +{"doc_count":2213,"split_key":14061,"timestamp":"2026-06-10T11:00:00.000Z"} +{"doc_count":1054,"split_key":398101,"timestamp":"2026-06-10T11:00:00.000Z"} +{"doc_count":997,"split_key":16509,"timestamp":"2026-06-10T11:00:00.000Z"} +{"doc_count":961,"split_key":209334,"timestamp":"2026-06-10T11:00:00.000Z"} +{"doc_count":637,"split_key":138915,"timestamp":"2026-06-10T11:00:00.000Z"} +{"doc_count":10673,"split_key":211590,"timestamp":"2026-06-10T12:00:00.000Z"} +{"doc_count":2261,"split_key":14061,"timestamp":"2026-06-10T12:00:00.000Z"} +{"doc_count":1029,"split_key":398101,"timestamp":"2026-06-10T12:00:00.000Z"} +{"doc_count":738,"split_key":16509,"timestamp":"2026-06-10T12:00:00.000Z"} +{"doc_count":652,"split_key":141995,"timestamp":"2026-06-10T12:00:00.000Z"} +{"doc_count":16537,"split_key":211590,"timestamp":"2026-06-10T13:00:00.000Z"} +{"doc_count":2225,"split_key":14061,"timestamp":"2026-06-10T13:00:00.000Z"} +{"doc_count":866,"split_key":141995,"timestamp":"2026-06-10T13:00:00.000Z"} +{"doc_count":860,"split_key":16509,"timestamp":"2026-06-10T13:00:00.000Z"} +{"doc_count":632,"split_key":45102,"timestamp":"2026-06-10T13:00:00.000Z"} +{"doc_count":20870,"split_key":14061,"timestamp":"2026-06-10T14:00:00.000Z"} +{"doc_count":8430,"split_key":211590,"timestamp":"2026-06-10T14:00:00.000Z"} +{"doc_count":896,"split_key":45102,"timestamp":"2026-06-10T14:00:00.000Z"} +{"doc_count":562,"split_key":138915,"timestamp":"2026-06-10T14:00:00.000Z"} +{"doc_count":562,"split_key":141995,"timestamp":"2026-06-10T14:00:00.000Z"} +{"doc_count":6016,"split_key":211590,"timestamp":"2026-06-10T15:00:00.000Z"} +{"doc_count":4113,"split_key":209334,"timestamp":"2026-06-10T15:00:00.000Z"} +{"doc_count":2300,"split_key":14061,"timestamp":"2026-06-10T15:00:00.000Z"} +{"doc_count":1984,"split_key":45102,"timestamp":"2026-06-10T15:00:00.000Z"} +{"doc_count":782,"split_key":51396,"timestamp":"2026-06-10T15:00:00.000Z"} +{"doc_count":5459,"split_key":209334,"timestamp":"2026-06-10T16:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-10T16:00:00.000Z"} +{"doc_count":2348,"split_key":14061,"timestamp":"2026-06-10T16:00:00.000Z"} +{"doc_count":1953,"split_key":45102,"timestamp":"2026-06-10T16:00:00.000Z"} +{"doc_count":1730,"split_key":398101,"timestamp":"2026-06-10T16:00:00.000Z"} +{"doc_count":2247,"split_key":14061,"timestamp":"2026-06-10T17:00:00.000Z"} +{"doc_count":2029,"split_key":45102,"timestamp":"2026-06-10T17:00:00.000Z"} +{"doc_count":1184,"split_key":209334,"timestamp":"2026-06-10T17:00:00.000Z"} +{"doc_count":447,"split_key":398101,"timestamp":"2026-06-10T17:00:00.000Z"} +{"doc_count":436,"split_key":138915,"timestamp":"2026-06-10T17:00:00.000Z"} +{"doc_count":4178,"split_key":209334,"timestamp":"2026-06-10T18:00:00.000Z"} +{"doc_count":2311,"split_key":211590,"timestamp":"2026-06-10T18:00:00.000Z"} +{"doc_count":2187,"split_key":14061,"timestamp":"2026-06-10T18:00:00.000Z"} +{"doc_count":1241,"split_key":45102,"timestamp":"2026-06-10T18:00:00.000Z"} +{"doc_count":650,"split_key":16509,"timestamp":"2026-06-10T18:00:00.000Z"} +{"doc_count":2135,"split_key":14061,"timestamp":"2026-06-10T19:00:00.000Z"} +{"doc_count":716,"split_key":45102,"timestamp":"2026-06-10T19:00:00.000Z"} +{"doc_count":506,"split_key":138915,"timestamp":"2026-06-10T19:00:00.000Z"} +{"doc_count":474,"split_key":37963,"timestamp":"2026-06-10T19:00:00.000Z"} +{"doc_count":468,"split_key":398101,"timestamp":"2026-06-10T19:00:00.000Z"} +{"doc_count":18623,"split_key":209334,"timestamp":"2026-06-10T20:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-10T20:00:00.000Z"} +{"doc_count":2111,"split_key":14061,"timestamp":"2026-06-10T20:00:00.000Z"} +{"doc_count":727,"split_key":45102,"timestamp":"2026-06-10T20:00:00.000Z"} +{"doc_count":653,"split_key":201401,"timestamp":"2026-06-10T20:00:00.000Z"} +{"doc_count":2281,"split_key":14061,"timestamp":"2026-06-10T21:00:00.000Z"} +{"doc_count":1985,"split_key":209334,"timestamp":"2026-06-10T21:00:00.000Z"} +{"doc_count":725,"split_key":45102,"timestamp":"2026-06-10T21:00:00.000Z"} +{"doc_count":603,"split_key":50360,"timestamp":"2026-06-10T21:00:00.000Z"} +{"doc_count":586,"split_key":396982,"timestamp":"2026-06-10T21:00:00.000Z"} +{"doc_count":6144,"split_key":211590,"timestamp":"2026-06-10T22:00:00.000Z"} +{"doc_count":2252,"split_key":14061,"timestamp":"2026-06-10T22:00:00.000Z"} +{"doc_count":791,"split_key":398101,"timestamp":"2026-06-10T22:00:00.000Z"} +{"doc_count":693,"split_key":45102,"timestamp":"2026-06-10T22:00:00.000Z"} +{"doc_count":556,"split_key":138915,"timestamp":"2026-06-10T22:00:00.000Z"} +{"doc_count":3127,"split_key":211590,"timestamp":"2026-06-10T23:00:00.000Z"} +{"doc_count":2362,"split_key":14061,"timestamp":"2026-06-10T23:00:00.000Z"} +{"doc_count":875,"split_key":37963,"timestamp":"2026-06-10T23:00:00.000Z"} +{"doc_count":874,"split_key":398101,"timestamp":"2026-06-10T23:00:00.000Z"} +{"doc_count":872,"split_key":23470,"timestamp":"2026-06-10T23:00:00.000Z"} +{"doc_count":9982,"split_key":14987,"timestamp":"2026-06-11T00:00:00.000Z"} +{"doc_count":6001,"split_key":211590,"timestamp":"2026-06-11T00:00:00.000Z"} +{"doc_count":2217,"split_key":14061,"timestamp":"2026-06-11T00:00:00.000Z"} +{"doc_count":681,"split_key":396982,"timestamp":"2026-06-11T00:00:00.000Z"} +{"doc_count":617,"split_key":45102,"timestamp":"2026-06-11T00:00:00.000Z"} +{"doc_count":6017,"split_key":211590,"timestamp":"2026-06-11T01:00:00.000Z"} +{"doc_count":2231,"split_key":14061,"timestamp":"2026-06-11T01:00:00.000Z"} +{"doc_count":1158,"split_key":37963,"timestamp":"2026-06-11T01:00:00.000Z"} +{"doc_count":964,"split_key":45102,"timestamp":"2026-06-11T01:00:00.000Z"} +{"doc_count":900,"split_key":25369,"timestamp":"2026-06-11T01:00:00.000Z"} +{"doc_count":2496,"split_key":37963,"timestamp":"2026-06-11T02:00:00.000Z"} +{"doc_count":2197,"split_key":14061,"timestamp":"2026-06-11T02:00:00.000Z"} +{"doc_count":1614,"split_key":45102,"timestamp":"2026-06-11T02:00:00.000Z"} +{"doc_count":1402,"split_key":211590,"timestamp":"2026-06-11T02:00:00.000Z"} +{"doc_count":1160,"split_key":16509,"timestamp":"2026-06-11T02:00:00.000Z"} +{"doc_count":2291,"split_key":37963,"timestamp":"2026-06-11T03:00:00.000Z"} +{"doc_count":2039,"split_key":14061,"timestamp":"2026-06-11T03:00:00.000Z"} +{"doc_count":1599,"split_key":211590,"timestamp":"2026-06-11T03:00:00.000Z"} +{"doc_count":1386,"split_key":45102,"timestamp":"2026-06-11T03:00:00.000Z"} +{"doc_count":718,"split_key":396982,"timestamp":"2026-06-11T03:00:00.000Z"} +{"doc_count":1989,"split_key":14061,"timestamp":"2026-06-11T04:00:00.000Z"} +{"doc_count":1446,"split_key":45102,"timestamp":"2026-06-11T04:00:00.000Z"} +{"doc_count":949,"split_key":135377,"timestamp":"2026-06-11T04:00:00.000Z"} +{"doc_count":774,"split_key":396982,"timestamp":"2026-06-11T04:00:00.000Z"} +{"doc_count":662,"split_key":51396,"timestamp":"2026-06-11T04:00:00.000Z"} +{"doc_count":2017,"split_key":14061,"timestamp":"2026-06-11T05:00:00.000Z"} +{"doc_count":1425,"split_key":45102,"timestamp":"2026-06-11T05:00:00.000Z"} +{"doc_count":853,"split_key":396982,"timestamp":"2026-06-11T05:00:00.000Z"} +{"doc_count":679,"split_key":16509,"timestamp":"2026-06-11T05:00:00.000Z"} +{"doc_count":592,"split_key":25369,"timestamp":"2026-06-11T05:00:00.000Z"} +{"doc_count":10246,"split_key":209334,"timestamp":"2026-06-11T06:00:00.000Z"} +{"doc_count":2048,"split_key":14061,"timestamp":"2026-06-11T06:00:00.000Z"} +{"doc_count":1652,"split_key":45102,"timestamp":"2026-06-11T06:00:00.000Z"} +{"doc_count":946,"split_key":396982,"timestamp":"2026-06-11T06:00:00.000Z"} +{"doc_count":810,"split_key":16509,"timestamp":"2026-06-11T06:00:00.000Z"} +{"doc_count":4975,"split_key":209334,"timestamp":"2026-06-11T07:00:00.000Z"} +{"doc_count":2060,"split_key":14061,"timestamp":"2026-06-11T07:00:00.000Z"} +{"doc_count":1818,"split_key":45102,"timestamp":"2026-06-11T07:00:00.000Z"} +{"doc_count":666,"split_key":16509,"timestamp":"2026-06-11T07:00:00.000Z"} +{"doc_count":610,"split_key":396982,"timestamp":"2026-06-11T07:00:00.000Z"} +{"doc_count":22318,"split_key":209334,"timestamp":"2026-06-11T08:00:00.000Z"} +{"doc_count":3875,"split_key":211736,"timestamp":"2026-06-11T08:00:00.000Z"} +{"doc_count":2090,"split_key":14061,"timestamp":"2026-06-11T08:00:00.000Z"} +{"doc_count":1577,"split_key":137899,"timestamp":"2026-06-11T08:00:00.000Z"} +{"doc_count":1262,"split_key":60404,"timestamp":"2026-06-11T08:00:00.000Z"} +{"doc_count":45371,"split_key":209334,"timestamp":"2026-06-11T09:00:00.000Z"} +{"doc_count":2029,"split_key":14061,"timestamp":"2026-06-11T09:00:00.000Z"} +{"doc_count":1442,"split_key":201401,"timestamp":"2026-06-11T09:00:00.000Z"} +{"doc_count":915,"split_key":51396,"timestamp":"2026-06-11T09:00:00.000Z"} +{"doc_count":763,"split_key":137899,"timestamp":"2026-06-11T09:00:00.000Z"} +{"doc_count":18668,"split_key":209334,"timestamp":"2026-06-11T10:00:00.000Z"} +{"doc_count":2032,"split_key":14061,"timestamp":"2026-06-11T10:00:00.000Z"} +{"doc_count":852,"split_key":201401,"timestamp":"2026-06-11T10:00:00.000Z"} +{"doc_count":772,"split_key":45102,"timestamp":"2026-06-11T10:00:00.000Z"} +{"doc_count":698,"split_key":16509,"timestamp":"2026-06-11T10:00:00.000Z"} +{"doc_count":57721,"split_key":209334,"timestamp":"2026-06-11T11:00:00.000Z"} +{"doc_count":2108,"split_key":14061,"timestamp":"2026-06-11T11:00:00.000Z"} +{"doc_count":1657,"split_key":201401,"timestamp":"2026-06-11T11:00:00.000Z"} +{"doc_count":898,"split_key":45102,"timestamp":"2026-06-11T11:00:00.000Z"} +{"doc_count":824,"split_key":40676,"timestamp":"2026-06-11T11:00:00.000Z"} +{"doc_count":58896,"split_key":209334,"timestamp":"2026-06-11T12:00:00.000Z"} +{"doc_count":5969,"split_key":211590,"timestamp":"2026-06-11T12:00:00.000Z"} +{"doc_count":2153,"split_key":14061,"timestamp":"2026-06-11T12:00:00.000Z"} +{"doc_count":1695,"split_key":201401,"timestamp":"2026-06-11T12:00:00.000Z"} +{"doc_count":1098,"split_key":45102,"timestamp":"2026-06-11T12:00:00.000Z"} +{"doc_count":7436,"split_key":209334,"timestamp":"2026-06-11T13:00:00.000Z"} +{"doc_count":2947,"split_key":211590,"timestamp":"2026-06-11T13:00:00.000Z"} +{"doc_count":2138,"split_key":45102,"timestamp":"2026-06-11T13:00:00.000Z"} +{"doc_count":1452,"split_key":14061,"timestamp":"2026-06-11T13:00:00.000Z"} +{"doc_count":845,"split_key":40676,"timestamp":"2026-06-11T13:00:00.000Z"} +{"doc_count":5658,"split_key":211590,"timestamp":"2026-06-11T14:00:00.000Z"} +{"doc_count":2125,"split_key":45102,"timestamp":"2026-06-11T14:00:00.000Z"} +{"doc_count":1217,"split_key":14061,"timestamp":"2026-06-11T14:00:00.000Z"} +{"doc_count":838,"split_key":40676,"timestamp":"2026-06-11T14:00:00.000Z"} +{"doc_count":606,"split_key":7040,"timestamp":"2026-06-11T14:00:00.000Z"} +{"doc_count":4042,"split_key":209334,"timestamp":"2026-06-11T15:00:00.000Z"} +{"doc_count":1506,"split_key":45102,"timestamp":"2026-06-11T15:00:00.000Z"} +{"doc_count":1268,"split_key":14061,"timestamp":"2026-06-11T15:00:00.000Z"} +{"doc_count":888,"split_key":40676,"timestamp":"2026-06-11T15:00:00.000Z"} +{"doc_count":671,"split_key":7040,"timestamp":"2026-06-11T15:00:00.000Z"} +{"doc_count":5695,"split_key":209334,"timestamp":"2026-06-11T16:00:00.000Z"} +{"doc_count":1224,"split_key":51852,"timestamp":"2026-06-11T16:00:00.000Z"} +{"doc_count":1147,"split_key":14061,"timestamp":"2026-06-11T16:00:00.000Z"} +{"doc_count":896,"split_key":40676,"timestamp":"2026-06-11T16:00:00.000Z"} +{"doc_count":692,"split_key":45102,"timestamp":"2026-06-11T16:00:00.000Z"} +{"doc_count":1230,"split_key":14061,"timestamp":"2026-06-11T17:00:00.000Z"} +{"doc_count":1190,"split_key":209334,"timestamp":"2026-06-11T17:00:00.000Z"} +{"doc_count":881,"split_key":45102,"timestamp":"2026-06-11T17:00:00.000Z"} +{"doc_count":865,"split_key":40676,"timestamp":"2026-06-11T17:00:00.000Z"} +{"doc_count":756,"split_key":396982,"timestamp":"2026-06-11T17:00:00.000Z"} +{"doc_count":4125,"split_key":209334,"timestamp":"2026-06-11T18:00:00.000Z"} +{"doc_count":3521,"split_key":211590,"timestamp":"2026-06-11T18:00:00.000Z"} +{"doc_count":1508,"split_key":51396,"timestamp":"2026-06-11T18:00:00.000Z"} +{"doc_count":1297,"split_key":14061,"timestamp":"2026-06-11T18:00:00.000Z"} +{"doc_count":895,"split_key":40676,"timestamp":"2026-06-11T18:00:00.000Z"} +{"doc_count":2399,"split_key":211590,"timestamp":"2026-06-11T19:00:00.000Z"} +{"doc_count":1753,"split_key":209334,"timestamp":"2026-06-11T19:00:00.000Z"} +{"doc_count":1157,"split_key":14061,"timestamp":"2026-06-11T19:00:00.000Z"} +{"doc_count":1063,"split_key":49870,"timestamp":"2026-06-11T19:00:00.000Z"} +{"doc_count":862,"split_key":40676,"timestamp":"2026-06-11T19:00:00.000Z"} +{"doc_count":5056,"split_key":209334,"timestamp":"2026-06-11T20:00:00.000Z"} +{"doc_count":3111,"split_key":211590,"timestamp":"2026-06-11T20:00:00.000Z"} +{"doc_count":1234,"split_key":14061,"timestamp":"2026-06-11T20:00:00.000Z"} +{"doc_count":889,"split_key":40676,"timestamp":"2026-06-11T20:00:00.000Z"} +{"doc_count":755,"split_key":49870,"timestamp":"2026-06-11T20:00:00.000Z"} +{"doc_count":1407,"split_key":14061,"timestamp":"2026-06-11T21:00:00.000Z"} +{"doc_count":911,"split_key":396982,"timestamp":"2026-06-11T21:00:00.000Z"} +{"doc_count":845,"split_key":40676,"timestamp":"2026-06-11T21:00:00.000Z"} +{"doc_count":777,"split_key":45102,"timestamp":"2026-06-11T21:00:00.000Z"} +{"doc_count":752,"split_key":49870,"timestamp":"2026-06-11T21:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-06-11T22:00:00.000Z"} +{"doc_count":2125,"split_key":14061,"timestamp":"2026-06-11T22:00:00.000Z"} +{"doc_count":936,"split_key":45102,"timestamp":"2026-06-11T22:00:00.000Z"} +{"doc_count":867,"split_key":40676,"timestamp":"2026-06-11T22:00:00.000Z"} +{"doc_count":697,"split_key":396982,"timestamp":"2026-06-11T22:00:00.000Z"} +{"doc_count":2163,"split_key":14061,"timestamp":"2026-06-11T23:00:00.000Z"} +{"doc_count":972,"split_key":211590,"timestamp":"2026-06-11T23:00:00.000Z"} +{"doc_count":887,"split_key":40676,"timestamp":"2026-06-11T23:00:00.000Z"} +{"doc_count":876,"split_key":45102,"timestamp":"2026-06-11T23:00:00.000Z"} +{"doc_count":649,"split_key":396982,"timestamp":"2026-06-11T23:00:00.000Z"} +{"doc_count":9976,"split_key":14987,"timestamp":"2026-06-12T00:00:00.000Z"} +{"doc_count":2093,"split_key":14061,"timestamp":"2026-06-12T00:00:00.000Z"} +{"doc_count":1588,"split_key":45102,"timestamp":"2026-06-12T00:00:00.000Z"} +{"doc_count":913,"split_key":40676,"timestamp":"2026-06-12T00:00:00.000Z"} +{"doc_count":685,"split_key":7040,"timestamp":"2026-06-12T00:00:00.000Z"} +{"doc_count":2437,"split_key":14061,"timestamp":"2026-06-12T01:00:00.000Z"} +{"doc_count":1977,"split_key":14987,"timestamp":"2026-06-12T01:00:00.000Z"} +{"doc_count":1506,"split_key":45102,"timestamp":"2026-06-12T01:00:00.000Z"} +{"doc_count":957,"split_key":396982,"timestamp":"2026-06-12T01:00:00.000Z"} +{"doc_count":879,"split_key":40676,"timestamp":"2026-06-12T01:00:00.000Z"} +{"doc_count":2192,"split_key":14061,"timestamp":"2026-06-12T02:00:00.000Z"} +{"doc_count":1760,"split_key":211590,"timestamp":"2026-06-12T02:00:00.000Z"} +{"doc_count":1031,"split_key":16509,"timestamp":"2026-06-12T02:00:00.000Z"} +{"doc_count":960,"split_key":45102,"timestamp":"2026-06-12T02:00:00.000Z"} +{"doc_count":827,"split_key":40676,"timestamp":"2026-06-12T02:00:00.000Z"} +{"doc_count":4241,"split_key":211590,"timestamp":"2026-06-12T03:00:00.000Z"} +{"doc_count":2291,"split_key":14061,"timestamp":"2026-06-12T03:00:00.000Z"} +{"doc_count":999,"split_key":45102,"timestamp":"2026-06-12T03:00:00.000Z"} +{"doc_count":906,"split_key":16509,"timestamp":"2026-06-12T03:00:00.000Z"} +{"doc_count":873,"split_key":40676,"timestamp":"2026-06-12T03:00:00.000Z"} +{"doc_count":5380,"split_key":211590,"timestamp":"2026-06-12T04:00:00.000Z"} +{"doc_count":2282,"split_key":14061,"timestamp":"2026-06-12T04:00:00.000Z"} +{"doc_count":1237,"split_key":16509,"timestamp":"2026-06-12T04:00:00.000Z"} +{"doc_count":916,"split_key":25369,"timestamp":"2026-06-12T04:00:00.000Z"} +{"doc_count":904,"split_key":40676,"timestamp":"2026-06-12T04:00:00.000Z"} +{"doc_count":2268,"split_key":14061,"timestamp":"2026-06-12T05:00:00.000Z"} +{"doc_count":1028,"split_key":51396,"timestamp":"2026-06-12T05:00:00.000Z"} +{"doc_count":949,"split_key":25369,"timestamp":"2026-06-12T05:00:00.000Z"} +{"doc_count":931,"split_key":40676,"timestamp":"2026-06-12T05:00:00.000Z"} +{"doc_count":727,"split_key":396982,"timestamp":"2026-06-12T05:00:00.000Z"} +{"doc_count":9636,"split_key":209334,"timestamp":"2026-06-12T06:00:00.000Z"} +{"doc_count":2379,"split_key":14061,"timestamp":"2026-06-12T06:00:00.000Z"} +{"doc_count":893,"split_key":16509,"timestamp":"2026-06-12T06:00:00.000Z"} +{"doc_count":858,"split_key":40676,"timestamp":"2026-06-12T06:00:00.000Z"} +{"doc_count":836,"split_key":25369,"timestamp":"2026-06-12T06:00:00.000Z"} +{"doc_count":5657,"split_key":209334,"timestamp":"2026-06-12T07:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-12T07:00:00.000Z"} +{"doc_count":2235,"split_key":14061,"timestamp":"2026-06-12T07:00:00.000Z"} +{"doc_count":949,"split_key":25369,"timestamp":"2026-06-12T07:00:00.000Z"} +{"doc_count":944,"split_key":40676,"timestamp":"2026-06-12T07:00:00.000Z"} +{"doc_count":22878,"split_key":209334,"timestamp":"2026-06-12T08:00:00.000Z"} +{"doc_count":6002,"split_key":211590,"timestamp":"2026-06-12T08:00:00.000Z"} +{"doc_count":2360,"split_key":14061,"timestamp":"2026-06-12T08:00:00.000Z"} +{"doc_count":1408,"split_key":137899,"timestamp":"2026-06-12T08:00:00.000Z"} +{"doc_count":906,"split_key":40676,"timestamp":"2026-06-12T08:00:00.000Z"} +{"doc_count":41342,"split_key":209334,"timestamp":"2026-06-12T09:00:00.000Z"} +{"doc_count":3015,"split_key":211590,"timestamp":"2026-06-12T09:00:00.000Z"} +{"doc_count":1873,"split_key":133385,"timestamp":"2026-06-12T09:00:00.000Z"} +{"doc_count":1845,"split_key":14061,"timestamp":"2026-06-12T09:00:00.000Z"} +{"doc_count":1740,"split_key":201401,"timestamp":"2026-06-12T09:00:00.000Z"} +{"doc_count":22521,"split_key":209334,"timestamp":"2026-06-12T10:00:00.000Z"} +{"doc_count":4467,"split_key":133385,"timestamp":"2026-06-12T10:00:00.000Z"} +{"doc_count":3013,"split_key":140171,"timestamp":"2026-06-12T10:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-12T10:00:00.000Z"} +{"doc_count":1629,"split_key":14061,"timestamp":"2026-06-12T10:00:00.000Z"} +{"doc_count":26786,"split_key":209334,"timestamp":"2026-06-12T11:00:00.000Z"} +{"doc_count":5674,"split_key":135780,"timestamp":"2026-06-12T11:00:00.000Z"} +{"doc_count":5411,"split_key":140171,"timestamp":"2026-06-12T11:00:00.000Z"} +{"doc_count":4486,"split_key":133385,"timestamp":"2026-06-12T11:00:00.000Z"} +{"doc_count":1684,"split_key":37963,"timestamp":"2026-06-12T11:00:00.000Z"} +{"doc_count":87684,"split_key":209334,"timestamp":"2026-06-12T12:00:00.000Z"} +{"doc_count":5653,"split_key":135780,"timestamp":"2026-06-12T12:00:00.000Z"} +{"doc_count":5338,"split_key":140171,"timestamp":"2026-06-12T12:00:00.000Z"} +{"doc_count":5097,"split_key":51167,"timestamp":"2026-06-12T12:00:00.000Z"} +{"doc_count":4453,"split_key":133385,"timestamp":"2026-06-12T12:00:00.000Z"} +{"doc_count":18123,"split_key":209334,"timestamp":"2026-06-12T13:00:00.000Z"} +{"doc_count":5622,"split_key":135780,"timestamp":"2026-06-12T13:00:00.000Z"} +{"doc_count":5293,"split_key":140171,"timestamp":"2026-06-12T13:00:00.000Z"} +{"doc_count":4423,"split_key":133385,"timestamp":"2026-06-12T13:00:00.000Z"} +{"doc_count":1632,"split_key":14061,"timestamp":"2026-06-12T13:00:00.000Z"} +{"doc_count":5611,"split_key":135780,"timestamp":"2026-06-12T14:00:00.000Z"} +{"doc_count":5205,"split_key":140171,"timestamp":"2026-06-12T14:00:00.000Z"} +{"doc_count":4413,"split_key":133385,"timestamp":"2026-06-12T14:00:00.000Z"} +{"doc_count":1512,"split_key":14061,"timestamp":"2026-06-12T14:00:00.000Z"} +{"doc_count":1015,"split_key":16509,"timestamp":"2026-06-12T14:00:00.000Z"} +{"doc_count":5560,"split_key":135780,"timestamp":"2026-06-12T15:00:00.000Z"} +{"doc_count":5237,"split_key":140171,"timestamp":"2026-06-12T15:00:00.000Z"} +{"doc_count":4531,"split_key":209334,"timestamp":"2026-06-12T15:00:00.000Z"} +{"doc_count":4408,"split_key":133385,"timestamp":"2026-06-12T15:00:00.000Z"} +{"doc_count":1563,"split_key":14061,"timestamp":"2026-06-12T15:00:00.000Z"} +{"doc_count":6310,"split_key":209334,"timestamp":"2026-06-12T16:00:00.000Z"} +{"doc_count":6045,"split_key":211590,"timestamp":"2026-06-12T16:00:00.000Z"} +{"doc_count":5566,"split_key":135780,"timestamp":"2026-06-12T16:00:00.000Z"} +{"doc_count":5227,"split_key":140171,"timestamp":"2026-06-12T16:00:00.000Z"} +{"doc_count":4435,"split_key":133385,"timestamp":"2026-06-12T16:00:00.000Z"} +{"doc_count":5482,"split_key":135780,"timestamp":"2026-06-12T17:00:00.000Z"} +{"doc_count":5284,"split_key":140171,"timestamp":"2026-06-12T17:00:00.000Z"} +{"doc_count":4420,"split_key":133385,"timestamp":"2026-06-12T17:00:00.000Z"} +{"doc_count":3016,"split_key":211590,"timestamp":"2026-06-12T17:00:00.000Z"} +{"doc_count":1561,"split_key":14061,"timestamp":"2026-06-12T17:00:00.000Z"} +{"doc_count":5471,"split_key":135780,"timestamp":"2026-06-12T18:00:00.000Z"} +{"doc_count":5286,"split_key":140171,"timestamp":"2026-06-12T18:00:00.000Z"} +{"doc_count":4812,"split_key":209334,"timestamp":"2026-06-12T18:00:00.000Z"} +{"doc_count":4391,"split_key":133385,"timestamp":"2026-06-12T18:00:00.000Z"} +{"doc_count":4244,"split_key":211590,"timestamp":"2026-06-12T18:00:00.000Z"} +{"doc_count":6001,"split_key":211590,"timestamp":"2026-06-12T19:00:00.000Z"} +{"doc_count":5457,"split_key":135780,"timestamp":"2026-06-12T19:00:00.000Z"} +{"doc_count":5190,"split_key":140171,"timestamp":"2026-06-12T19:00:00.000Z"} +{"doc_count":4381,"split_key":133385,"timestamp":"2026-06-12T19:00:00.000Z"} +{"doc_count":1842,"split_key":14061,"timestamp":"2026-06-12T19:00:00.000Z"} +{"doc_count":6482,"split_key":209334,"timestamp":"2026-06-12T20:00:00.000Z"} +{"doc_count":6017,"split_key":211590,"timestamp":"2026-06-12T20:00:00.000Z"} +{"doc_count":4268,"split_key":133385,"timestamp":"2026-06-12T20:00:00.000Z"} +{"doc_count":2702,"split_key":135780,"timestamp":"2026-06-12T20:00:00.000Z"} +{"doc_count":1786,"split_key":14061,"timestamp":"2026-06-12T20:00:00.000Z"} +{"doc_count":4259,"split_key":133385,"timestamp":"2026-06-12T21:00:00.000Z"} +{"doc_count":1827,"split_key":14061,"timestamp":"2026-06-12T21:00:00.000Z"} +{"doc_count":900,"split_key":45102,"timestamp":"2026-06-12T21:00:00.000Z"} +{"doc_count":867,"split_key":40676,"timestamp":"2026-06-12T21:00:00.000Z"} +{"doc_count":760,"split_key":16509,"timestamp":"2026-06-12T21:00:00.000Z"} +{"doc_count":4781,"split_key":211590,"timestamp":"2026-06-12T22:00:00.000Z"} +{"doc_count":4254,"split_key":133385,"timestamp":"2026-06-12T22:00:00.000Z"} +{"doc_count":3126,"split_key":45102,"timestamp":"2026-06-12T22:00:00.000Z"} +{"doc_count":1644,"split_key":14061,"timestamp":"2026-06-12T22:00:00.000Z"} +{"doc_count":906,"split_key":37963,"timestamp":"2026-06-12T22:00:00.000Z"} +{"doc_count":4252,"split_key":133385,"timestamp":"2026-06-12T23:00:00.000Z"} +{"doc_count":3097,"split_key":211590,"timestamp":"2026-06-12T23:00:00.000Z"} +{"doc_count":1612,"split_key":37963,"timestamp":"2026-06-12T23:00:00.000Z"} +{"doc_count":1577,"split_key":14061,"timestamp":"2026-06-12T23:00:00.000Z"} +{"doc_count":898,"split_key":40676,"timestamp":"2026-06-12T23:00:00.000Z"} +{"doc_count":10015,"split_key":14987,"timestamp":"2026-06-13T00:00:00.000Z"} +{"doc_count":4273,"split_key":133385,"timestamp":"2026-06-13T00:00:00.000Z"} +{"doc_count":3076,"split_key":211590,"timestamp":"2026-06-13T00:00:00.000Z"} +{"doc_count":1715,"split_key":14061,"timestamp":"2026-06-13T00:00:00.000Z"} +{"doc_count":1410,"split_key":37963,"timestamp":"2026-06-13T00:00:00.000Z"} +{"doc_count":4269,"split_key":133385,"timestamp":"2026-06-13T01:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-13T01:00:00.000Z"} +{"doc_count":1810,"split_key":14061,"timestamp":"2026-06-13T01:00:00.000Z"} +{"doc_count":1193,"split_key":37963,"timestamp":"2026-06-13T01:00:00.000Z"} +{"doc_count":1099,"split_key":51396,"timestamp":"2026-06-13T01:00:00.000Z"} +{"doc_count":4291,"split_key":133385,"timestamp":"2026-06-13T02:00:00.000Z"} +{"doc_count":1699,"split_key":14061,"timestamp":"2026-06-13T02:00:00.000Z"} +{"doc_count":1194,"split_key":37963,"timestamp":"2026-06-13T02:00:00.000Z"} +{"doc_count":1125,"split_key":51396,"timestamp":"2026-06-13T02:00:00.000Z"} +{"doc_count":1001,"split_key":137899,"timestamp":"2026-06-13T02:00:00.000Z"} +{"doc_count":4218,"split_key":133385,"timestamp":"2026-06-13T03:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-13T03:00:00.000Z"} +{"doc_count":1687,"split_key":14061,"timestamp":"2026-06-13T03:00:00.000Z"} +{"doc_count":1217,"split_key":37963,"timestamp":"2026-06-13T03:00:00.000Z"} +{"doc_count":959,"split_key":40676,"timestamp":"2026-06-13T03:00:00.000Z"} +{"doc_count":4254,"split_key":133385,"timestamp":"2026-06-13T04:00:00.000Z"} +{"doc_count":1729,"split_key":14061,"timestamp":"2026-06-13T04:00:00.000Z"} +{"doc_count":1093,"split_key":37963,"timestamp":"2026-06-13T04:00:00.000Z"} +{"doc_count":884,"split_key":40676,"timestamp":"2026-06-13T04:00:00.000Z"} +{"doc_count":744,"split_key":396982,"timestamp":"2026-06-13T04:00:00.000Z"} +{"doc_count":9496,"split_key":9009,"timestamp":"2026-06-13T05:00:00.000Z"} +{"doc_count":4276,"split_key":133385,"timestamp":"2026-06-13T05:00:00.000Z"} +{"doc_count":1805,"split_key":14061,"timestamp":"2026-06-13T05:00:00.000Z"} +{"doc_count":896,"split_key":40676,"timestamp":"2026-06-13T05:00:00.000Z"} +{"doc_count":892,"split_key":396982,"timestamp":"2026-06-13T05:00:00.000Z"} +{"doc_count":11947,"split_key":209334,"timestamp":"2026-06-13T06:00:00.000Z"} +{"doc_count":4268,"split_key":133385,"timestamp":"2026-06-13T06:00:00.000Z"} +{"doc_count":1756,"split_key":14061,"timestamp":"2026-06-13T06:00:00.000Z"} +{"doc_count":866,"split_key":40676,"timestamp":"2026-06-13T06:00:00.000Z"} +{"doc_count":671,"split_key":7040,"timestamp":"2026-06-13T06:00:00.000Z"} +{"doc_count":5999,"split_key":209334,"timestamp":"2026-06-13T07:00:00.000Z"} +{"doc_count":4261,"split_key":133385,"timestamp":"2026-06-13T07:00:00.000Z"} +{"doc_count":1682,"split_key":14061,"timestamp":"2026-06-13T07:00:00.000Z"} +{"doc_count":876,"split_key":40676,"timestamp":"2026-06-13T07:00:00.000Z"} +{"doc_count":629,"split_key":7040,"timestamp":"2026-06-13T07:00:00.000Z"} +{"doc_count":22936,"split_key":209334,"timestamp":"2026-06-13T08:00:00.000Z"} +{"doc_count":4204,"split_key":133385,"timestamp":"2026-06-13T08:00:00.000Z"} +{"doc_count":1791,"split_key":14061,"timestamp":"2026-06-13T08:00:00.000Z"} +{"doc_count":887,"split_key":40676,"timestamp":"2026-06-13T08:00:00.000Z"} +{"doc_count":654,"split_key":7040,"timestamp":"2026-06-13T08:00:00.000Z"} +{"doc_count":41559,"split_key":209334,"timestamp":"2026-06-13T09:00:00.000Z"} +{"doc_count":4267,"split_key":133385,"timestamp":"2026-06-13T09:00:00.000Z"} +{"doc_count":1794,"split_key":14061,"timestamp":"2026-06-13T09:00:00.000Z"} +{"doc_count":1507,"split_key":201401,"timestamp":"2026-06-13T09:00:00.000Z"} +{"doc_count":879,"split_key":40676,"timestamp":"2026-06-13T09:00:00.000Z"} +{"doc_count":21598,"split_key":209334,"timestamp":"2026-06-13T10:00:00.000Z"} +{"doc_count":4253,"split_key":133385,"timestamp":"2026-06-13T10:00:00.000Z"} +{"doc_count":1809,"split_key":14061,"timestamp":"2026-06-13T10:00:00.000Z"} +{"doc_count":1237,"split_key":14618,"timestamp":"2026-06-13T10:00:00.000Z"} +{"doc_count":901,"split_key":40676,"timestamp":"2026-06-13T10:00:00.000Z"} +{"doc_count":14714,"split_key":209334,"timestamp":"2026-06-13T11:00:00.000Z"} +{"doc_count":4227,"split_key":133385,"timestamp":"2026-06-13T11:00:00.000Z"} +{"doc_count":1853,"split_key":14061,"timestamp":"2026-06-13T11:00:00.000Z"} +{"doc_count":1589,"split_key":211590,"timestamp":"2026-06-13T11:00:00.000Z"} +{"doc_count":952,"split_key":51396,"timestamp":"2026-06-13T11:00:00.000Z"} +{"doc_count":68047,"split_key":209334,"timestamp":"2026-06-13T12:00:00.000Z"} +{"doc_count":4207,"split_key":133385,"timestamp":"2026-06-13T12:00:00.000Z"} +{"doc_count":1885,"split_key":201401,"timestamp":"2026-06-13T12:00:00.000Z"} +{"doc_count":1761,"split_key":14061,"timestamp":"2026-06-13T12:00:00.000Z"} +{"doc_count":1245,"split_key":137899,"timestamp":"2026-06-13T12:00:00.000Z"} +{"doc_count":43508,"split_key":209334,"timestamp":"2026-06-13T13:00:00.000Z"} +{"doc_count":4200,"split_key":133385,"timestamp":"2026-06-13T13:00:00.000Z"} +{"doc_count":1920,"split_key":14061,"timestamp":"2026-06-13T13:00:00.000Z"} +{"doc_count":1020,"split_key":201401,"timestamp":"2026-06-13T13:00:00.000Z"} +{"doc_count":918,"split_key":40676,"timestamp":"2026-06-13T13:00:00.000Z"} +{"doc_count":4216,"split_key":133385,"timestamp":"2026-06-13T14:00:00.000Z"} +{"doc_count":1976,"split_key":14061,"timestamp":"2026-06-13T14:00:00.000Z"} +{"doc_count":852,"split_key":40676,"timestamp":"2026-06-13T14:00:00.000Z"} +{"doc_count":667,"split_key":7040,"timestamp":"2026-06-13T14:00:00.000Z"} +{"doc_count":552,"split_key":3216,"timestamp":"2026-06-13T14:00:00.000Z"} +{"doc_count":9493,"split_key":9009,"timestamp":"2026-06-13T15:00:00.000Z"} +{"doc_count":7379,"split_key":16276,"timestamp":"2026-06-13T15:00:00.000Z"} +{"doc_count":4578,"split_key":209334,"timestamp":"2026-06-13T15:00:00.000Z"} +{"doc_count":4193,"split_key":133385,"timestamp":"2026-06-13T15:00:00.000Z"} +{"doc_count":1855,"split_key":14061,"timestamp":"2026-06-13T15:00:00.000Z"} +{"doc_count":6593,"split_key":209334,"timestamp":"2026-06-13T16:00:00.000Z"} +{"doc_count":4205,"split_key":133385,"timestamp":"2026-06-13T16:00:00.000Z"} +{"doc_count":1880,"split_key":14061,"timestamp":"2026-06-13T16:00:00.000Z"} +{"doc_count":871,"split_key":40676,"timestamp":"2026-06-13T16:00:00.000Z"} +{"doc_count":632,"split_key":7040,"timestamp":"2026-06-13T16:00:00.000Z"} +{"doc_count":4202,"split_key":133385,"timestamp":"2026-06-13T17:00:00.000Z"} +{"doc_count":1951,"split_key":14061,"timestamp":"2026-06-13T17:00:00.000Z"} +{"doc_count":1487,"split_key":209334,"timestamp":"2026-06-13T17:00:00.000Z"} +{"doc_count":1234,"split_key":136557,"timestamp":"2026-06-13T17:00:00.000Z"} +{"doc_count":838,"split_key":40676,"timestamp":"2026-06-13T17:00:00.000Z"} +{"doc_count":4724,"split_key":209334,"timestamp":"2026-06-13T18:00:00.000Z"} +{"doc_count":2720,"split_key":16276,"timestamp":"2026-06-13T18:00:00.000Z"} +{"doc_count":2414,"split_key":133385,"timestamp":"2026-06-13T18:00:00.000Z"} +{"doc_count":1670,"split_key":14061,"timestamp":"2026-06-13T18:00:00.000Z"} +{"doc_count":842,"split_key":40676,"timestamp":"2026-06-13T18:00:00.000Z"} +{"doc_count":3714,"split_key":396982,"timestamp":"2026-06-13T19:00:00.000Z"} +{"doc_count":2250,"split_key":9009,"timestamp":"2026-06-13T19:00:00.000Z"} +{"doc_count":1884,"split_key":14061,"timestamp":"2026-06-13T19:00:00.000Z"} +{"doc_count":1123,"split_key":209334,"timestamp":"2026-06-13T19:00:00.000Z"} +{"doc_count":915,"split_key":40676,"timestamp":"2026-06-13T19:00:00.000Z"} +{"doc_count":8527,"split_key":16276,"timestamp":"2026-06-13T20:00:00.000Z"} +{"doc_count":6944,"split_key":209334,"timestamp":"2026-06-13T20:00:00.000Z"} +{"doc_count":4042,"split_key":53667,"timestamp":"2026-06-13T20:00:00.000Z"} +{"doc_count":2129,"split_key":14061,"timestamp":"2026-06-13T20:00:00.000Z"} +{"doc_count":1200,"split_key":51396,"timestamp":"2026-06-13T20:00:00.000Z"} +{"doc_count":1780,"split_key":14061,"timestamp":"2026-06-13T21:00:00.000Z"} +{"doc_count":1411,"split_key":137899,"timestamp":"2026-06-13T21:00:00.000Z"} +{"doc_count":951,"split_key":396982,"timestamp":"2026-06-13T21:00:00.000Z"} +{"doc_count":930,"split_key":40676,"timestamp":"2026-06-13T21:00:00.000Z"} +{"doc_count":607,"split_key":7040,"timestamp":"2026-06-13T21:00:00.000Z"} +{"doc_count":18773,"split_key":396982,"timestamp":"2026-06-13T22:00:00.000Z"} +{"doc_count":1714,"split_key":14061,"timestamp":"2026-06-13T22:00:00.000Z"} +{"doc_count":876,"split_key":40676,"timestamp":"2026-06-13T22:00:00.000Z"} +{"doc_count":656,"split_key":7040,"timestamp":"2026-06-13T22:00:00.000Z"} +{"doc_count":580,"split_key":138915,"timestamp":"2026-06-13T22:00:00.000Z"} +{"doc_count":2511,"split_key":14061,"timestamp":"2026-06-13T23:00:00.000Z"} +{"doc_count":2323,"split_key":396982,"timestamp":"2026-06-13T23:00:00.000Z"} +{"doc_count":949,"split_key":40676,"timestamp":"2026-06-13T23:00:00.000Z"} +{"doc_count":883,"split_key":266213,"timestamp":"2026-06-13T23:00:00.000Z"} +{"doc_count":674,"split_key":7040,"timestamp":"2026-06-13T23:00:00.000Z"} +{"doc_count":13489,"split_key":14061,"timestamp":"2026-06-14T00:00:00.000Z"} +{"doc_count":11916,"split_key":14987,"timestamp":"2026-06-14T00:00:00.000Z"} +{"doc_count":11550,"split_key":396982,"timestamp":"2026-06-14T00:00:00.000Z"} +{"doc_count":988,"split_key":266213,"timestamp":"2026-06-14T00:00:00.000Z"} +{"doc_count":915,"split_key":40676,"timestamp":"2026-06-14T00:00:00.000Z"} +{"doc_count":13368,"split_key":14061,"timestamp":"2026-06-14T01:00:00.000Z"} +{"doc_count":1279,"split_key":396982,"timestamp":"2026-06-14T01:00:00.000Z"} +{"doc_count":964,"split_key":37963,"timestamp":"2026-06-14T01:00:00.000Z"} +{"doc_count":814,"split_key":40676,"timestamp":"2026-06-14T01:00:00.000Z"} +{"doc_count":643,"split_key":7040,"timestamp":"2026-06-14T01:00:00.000Z"} +{"doc_count":7737,"split_key":14061,"timestamp":"2026-06-14T02:00:00.000Z"} +{"doc_count":3068,"split_key":211590,"timestamp":"2026-06-14T02:00:00.000Z"} +{"doc_count":2277,"split_key":37963,"timestamp":"2026-06-14T02:00:00.000Z"} +{"doc_count":1188,"split_key":396982,"timestamp":"2026-06-14T02:00:00.000Z"} +{"doc_count":884,"split_key":40676,"timestamp":"2026-06-14T02:00:00.000Z"} +{"doc_count":2264,"split_key":37963,"timestamp":"2026-06-14T03:00:00.000Z"} +{"doc_count":1835,"split_key":14061,"timestamp":"2026-06-14T03:00:00.000Z"} +{"doc_count":965,"split_key":40676,"timestamp":"2026-06-14T03:00:00.000Z"} +{"doc_count":859,"split_key":396982,"timestamp":"2026-06-14T03:00:00.000Z"} +{"doc_count":613,"split_key":7040,"timestamp":"2026-06-14T03:00:00.000Z"} +{"doc_count":1855,"split_key":14061,"timestamp":"2026-06-14T04:00:00.000Z"} +{"doc_count":1672,"split_key":37963,"timestamp":"2026-06-14T04:00:00.000Z"} +{"doc_count":922,"split_key":40676,"timestamp":"2026-06-14T04:00:00.000Z"} +{"doc_count":653,"split_key":7040,"timestamp":"2026-06-14T04:00:00.000Z"} +{"doc_count":587,"split_key":396982,"timestamp":"2026-06-14T04:00:00.000Z"} +{"doc_count":4326,"split_key":211590,"timestamp":"2026-06-14T05:00:00.000Z"} +{"doc_count":1740,"split_key":14061,"timestamp":"2026-06-14T05:00:00.000Z"} +{"doc_count":1512,"split_key":37963,"timestamp":"2026-06-14T05:00:00.000Z"} +{"doc_count":949,"split_key":396982,"timestamp":"2026-06-14T05:00:00.000Z"} +{"doc_count":891,"split_key":40676,"timestamp":"2026-06-14T05:00:00.000Z"} +{"doc_count":12329,"split_key":211590,"timestamp":"2026-06-14T06:00:00.000Z"} +{"doc_count":9029,"split_key":209334,"timestamp":"2026-06-14T06:00:00.000Z"} +{"doc_count":1814,"split_key":14061,"timestamp":"2026-06-14T06:00:00.000Z"} +{"doc_count":1758,"split_key":37963,"timestamp":"2026-06-14T06:00:00.000Z"} +{"doc_count":1412,"split_key":137899,"timestamp":"2026-06-14T06:00:00.000Z"} +{"doc_count":6322,"split_key":209334,"timestamp":"2026-06-14T07:00:00.000Z"} +{"doc_count":1782,"split_key":14061,"timestamp":"2026-06-14T07:00:00.000Z"} +{"doc_count":1658,"split_key":37963,"timestamp":"2026-06-14T07:00:00.000Z"} +{"doc_count":871,"split_key":40676,"timestamp":"2026-06-14T07:00:00.000Z"} +{"doc_count":732,"split_key":51396,"timestamp":"2026-06-14T07:00:00.000Z"} +{"doc_count":13980,"split_key":209334,"timestamp":"2026-06-14T08:00:00.000Z"} +{"doc_count":1736,"split_key":14061,"timestamp":"2026-06-14T08:00:00.000Z"} +{"doc_count":1671,"split_key":37963,"timestamp":"2026-06-14T08:00:00.000Z"} +{"doc_count":876,"split_key":51396,"timestamp":"2026-06-14T08:00:00.000Z"} +{"doc_count":858,"split_key":40676,"timestamp":"2026-06-14T08:00:00.000Z"} +{"doc_count":43524,"split_key":209334,"timestamp":"2026-06-14T09:00:00.000Z"} +{"doc_count":1732,"split_key":14061,"timestamp":"2026-06-14T09:00:00.000Z"} +{"doc_count":1730,"split_key":37963,"timestamp":"2026-06-14T09:00:00.000Z"} +{"doc_count":1098,"split_key":201401,"timestamp":"2026-06-14T09:00:00.000Z"} +{"doc_count":868,"split_key":40676,"timestamp":"2026-06-14T09:00:00.000Z"} +{"doc_count":28890,"split_key":209334,"timestamp":"2026-06-14T10:00:00.000Z"} +{"doc_count":14228,"split_key":396982,"timestamp":"2026-06-14T10:00:00.000Z"} +{"doc_count":1781,"split_key":14061,"timestamp":"2026-06-14T10:00:00.000Z"} +{"doc_count":1501,"split_key":37963,"timestamp":"2026-06-14T10:00:00.000Z"} +{"doc_count":1311,"split_key":201401,"timestamp":"2026-06-14T10:00:00.000Z"} +{"doc_count":77015,"split_key":396982,"timestamp":"2026-06-14T11:00:00.000Z"} +{"doc_count":15537,"split_key":209334,"timestamp":"2026-06-14T11:00:00.000Z"} +{"doc_count":1820,"split_key":14061,"timestamp":"2026-06-14T11:00:00.000Z"} +{"doc_count":1788,"split_key":37963,"timestamp":"2026-06-14T11:00:00.000Z"} +{"doc_count":839,"split_key":40676,"timestamp":"2026-06-14T11:00:00.000Z"} +{"doc_count":89570,"split_key":396982,"timestamp":"2026-06-14T12:00:00.000Z"} +{"doc_count":43914,"split_key":209334,"timestamp":"2026-06-14T12:00:00.000Z"} +{"doc_count":6160,"split_key":211590,"timestamp":"2026-06-14T12:00:00.000Z"} +{"doc_count":1888,"split_key":14061,"timestamp":"2026-06-14T12:00:00.000Z"} +{"doc_count":1422,"split_key":37963,"timestamp":"2026-06-14T12:00:00.000Z"} +{"doc_count":80444,"split_key":396982,"timestamp":"2026-06-14T13:00:00.000Z"} +{"doc_count":60766,"split_key":209334,"timestamp":"2026-06-14T13:00:00.000Z"} +{"doc_count":3949,"split_key":211590,"timestamp":"2026-06-14T13:00:00.000Z"} +{"doc_count":1886,"split_key":14061,"timestamp":"2026-06-14T13:00:00.000Z"} +{"doc_count":1874,"split_key":201401,"timestamp":"2026-06-14T13:00:00.000Z"} +{"doc_count":71618,"split_key":396982,"timestamp":"2026-06-14T14:00:00.000Z"} +{"doc_count":7416,"split_key":209334,"timestamp":"2026-06-14T14:00:00.000Z"} +{"doc_count":2022,"split_key":14061,"timestamp":"2026-06-14T14:00:00.000Z"} +{"doc_count":1273,"split_key":37963,"timestamp":"2026-06-14T14:00:00.000Z"} +{"doc_count":903,"split_key":40676,"timestamp":"2026-06-14T14:00:00.000Z"} +{"doc_count":66979,"split_key":396982,"timestamp":"2026-06-14T15:00:00.000Z"} +{"doc_count":4394,"split_key":209334,"timestamp":"2026-06-14T15:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-14T15:00:00.000Z"} +{"doc_count":2116,"split_key":14061,"timestamp":"2026-06-14T15:00:00.000Z"} +{"doc_count":1289,"split_key":37963,"timestamp":"2026-06-14T15:00:00.000Z"} +{"doc_count":67623,"split_key":396982,"timestamp":"2026-06-14T16:00:00.000Z"} +{"doc_count":7941,"split_key":16276,"timestamp":"2026-06-14T16:00:00.000Z"} +{"doc_count":6231,"split_key":209334,"timestamp":"2026-06-14T16:00:00.000Z"} +{"doc_count":2189,"split_key":14061,"timestamp":"2026-06-14T16:00:00.000Z"} +{"doc_count":1758,"split_key":37963,"timestamp":"2026-06-14T16:00:00.000Z"} +{"doc_count":68631,"split_key":396982,"timestamp":"2026-06-14T17:00:00.000Z"} +{"doc_count":4765,"split_key":135780,"timestamp":"2026-06-14T17:00:00.000Z"} +{"doc_count":4656,"split_key":140171,"timestamp":"2026-06-14T17:00:00.000Z"} +{"doc_count":4004,"split_key":133385,"timestamp":"2026-06-14T17:00:00.000Z"} +{"doc_count":2304,"split_key":14061,"timestamp":"2026-06-14T17:00:00.000Z"} +{"doc_count":69758,"split_key":396982,"timestamp":"2026-06-14T18:00:00.000Z"} +{"doc_count":4888,"split_key":135780,"timestamp":"2026-06-14T18:00:00.000Z"} +{"doc_count":4784,"split_key":209334,"timestamp":"2026-06-14T18:00:00.000Z"} +{"doc_count":4683,"split_key":140171,"timestamp":"2026-06-14T18:00:00.000Z"} +{"doc_count":4002,"split_key":133385,"timestamp":"2026-06-14T18:00:00.000Z"} +{"doc_count":64462,"split_key":396982,"timestamp":"2026-06-14T19:00:00.000Z"} +{"doc_count":4827,"split_key":135780,"timestamp":"2026-06-14T19:00:00.000Z"} +{"doc_count":4669,"split_key":140171,"timestamp":"2026-06-14T19:00:00.000Z"} +{"doc_count":3991,"split_key":133385,"timestamp":"2026-06-14T19:00:00.000Z"} +{"doc_count":2539,"split_key":14061,"timestamp":"2026-06-14T19:00:00.000Z"} +{"doc_count":23217,"split_key":396982,"timestamp":"2026-06-14T20:00:00.000Z"} +{"doc_count":6847,"split_key":209334,"timestamp":"2026-06-14T20:00:00.000Z"} +{"doc_count":4658,"split_key":140171,"timestamp":"2026-06-14T20:00:00.000Z"} +{"doc_count":4032,"split_key":135780,"timestamp":"2026-06-14T20:00:00.000Z"} +{"doc_count":4005,"split_key":133385,"timestamp":"2026-06-14T20:00:00.000Z"} +{"doc_count":4642,"split_key":140171,"timestamp":"2026-06-14T21:00:00.000Z"} +{"doc_count":4000,"split_key":133385,"timestamp":"2026-06-14T21:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-14T21:00:00.000Z"} +{"doc_count":2366,"split_key":135780,"timestamp":"2026-06-14T21:00:00.000Z"} +{"doc_count":1723,"split_key":14061,"timestamp":"2026-06-14T21:00:00.000Z"} +{"doc_count":4677,"split_key":140171,"timestamp":"2026-06-14T22:00:00.000Z"} +{"doc_count":4019,"split_key":133385,"timestamp":"2026-06-14T22:00:00.000Z"} +{"doc_count":2386,"split_key":135780,"timestamp":"2026-06-14T22:00:00.000Z"} +{"doc_count":1924,"split_key":14061,"timestamp":"2026-06-14T22:00:00.000Z"} +{"doc_count":1359,"split_key":49870,"timestamp":"2026-06-14T22:00:00.000Z"} +{"doc_count":4691,"split_key":140171,"timestamp":"2026-06-14T23:00:00.000Z"} +{"doc_count":4028,"split_key":133385,"timestamp":"2026-06-14T23:00:00.000Z"} +{"doc_count":2388,"split_key":135780,"timestamp":"2026-06-14T23:00:00.000Z"} +{"doc_count":1761,"split_key":14061,"timestamp":"2026-06-14T23:00:00.000Z"} +{"doc_count":708,"split_key":131562,"timestamp":"2026-06-14T23:00:00.000Z"} +{"doc_count":9987,"split_key":14987,"timestamp":"2026-06-15T00:00:00.000Z"} +{"doc_count":6001,"split_key":211590,"timestamp":"2026-06-15T00:00:00.000Z"} +{"doc_count":4686,"split_key":140171,"timestamp":"2026-06-15T00:00:00.000Z"} +{"doc_count":4011,"split_key":133385,"timestamp":"2026-06-15T00:00:00.000Z"} +{"doc_count":2389,"split_key":135780,"timestamp":"2026-06-15T00:00:00.000Z"} +{"doc_count":4687,"split_key":140171,"timestamp":"2026-06-15T01:00:00.000Z"} +{"doc_count":4019,"split_key":133385,"timestamp":"2026-06-15T01:00:00.000Z"} +{"doc_count":3836,"split_key":211590,"timestamp":"2026-06-15T01:00:00.000Z"} +{"doc_count":2850,"split_key":16276,"timestamp":"2026-06-15T01:00:00.000Z"} +{"doc_count":2389,"split_key":135780,"timestamp":"2026-06-15T01:00:00.000Z"} +{"doc_count":8347,"split_key":211590,"timestamp":"2026-06-15T02:00:00.000Z"} +{"doc_count":4681,"split_key":140171,"timestamp":"2026-06-15T02:00:00.000Z"} +{"doc_count":4017,"split_key":133385,"timestamp":"2026-06-15T02:00:00.000Z"} +{"doc_count":2605,"split_key":37963,"timestamp":"2026-06-15T02:00:00.000Z"} +{"doc_count":2388,"split_key":135780,"timestamp":"2026-06-15T02:00:00.000Z"} +{"doc_count":6190,"split_key":211590,"timestamp":"2026-06-15T03:00:00.000Z"} +{"doc_count":4580,"split_key":140171,"timestamp":"2026-06-15T03:00:00.000Z"} +{"doc_count":3962,"split_key":133385,"timestamp":"2026-06-15T03:00:00.000Z"} +{"doc_count":2332,"split_key":135780,"timestamp":"2026-06-15T03:00:00.000Z"} +{"doc_count":2252,"split_key":37963,"timestamp":"2026-06-15T03:00:00.000Z"} +{"doc_count":4640,"split_key":140171,"timestamp":"2026-06-15T04:00:00.000Z"} +{"doc_count":3648,"split_key":133385,"timestamp":"2026-06-15T04:00:00.000Z"} +{"doc_count":2731,"split_key":37963,"timestamp":"2026-06-15T04:00:00.000Z"} +{"doc_count":2368,"split_key":135780,"timestamp":"2026-06-15T04:00:00.000Z"} +{"doc_count":1801,"split_key":14061,"timestamp":"2026-06-15T04:00:00.000Z"} +{"doc_count":3396,"split_key":37963,"timestamp":"2026-06-15T05:00:00.000Z"} +{"doc_count":3132,"split_key":140171,"timestamp":"2026-06-15T05:00:00.000Z"} +{"doc_count":2382,"split_key":135780,"timestamp":"2026-06-15T05:00:00.000Z"} +{"doc_count":1961,"split_key":133385,"timestamp":"2026-06-15T05:00:00.000Z"} +{"doc_count":1427,"split_key":14061,"timestamp":"2026-06-15T05:00:00.000Z"} +{"doc_count":7825,"split_key":209334,"timestamp":"2026-06-15T06:00:00.000Z"} +{"doc_count":2358,"split_key":135780,"timestamp":"2026-06-15T06:00:00.000Z"} +{"doc_count":1955,"split_key":133385,"timestamp":"2026-06-15T06:00:00.000Z"} +{"doc_count":1531,"split_key":14061,"timestamp":"2026-06-15T06:00:00.000Z"} +{"doc_count":953,"split_key":214295,"timestamp":"2026-06-15T06:00:00.000Z"} +{"doc_count":7709,"split_key":209334,"timestamp":"2026-06-15T07:00:00.000Z"} +{"doc_count":2356,"split_key":135780,"timestamp":"2026-06-15T07:00:00.000Z"} +{"doc_count":1949,"split_key":133385,"timestamp":"2026-06-15T07:00:00.000Z"} +{"doc_count":1403,"split_key":14061,"timestamp":"2026-06-15T07:00:00.000Z"} +{"doc_count":1090,"split_key":131562,"timestamp":"2026-06-15T07:00:00.000Z"} +{"doc_count":14143,"split_key":209334,"timestamp":"2026-06-15T08:00:00.000Z"} +{"doc_count":6001,"split_key":211590,"timestamp":"2026-06-15T08:00:00.000Z"} +{"doc_count":2377,"split_key":135780,"timestamp":"2026-06-15T08:00:00.000Z"} +{"doc_count":1953,"split_key":133385,"timestamp":"2026-06-15T08:00:00.000Z"} +{"doc_count":1393,"split_key":14061,"timestamp":"2026-06-15T08:00:00.000Z"} +{"doc_count":37136,"split_key":209334,"timestamp":"2026-06-15T09:00:00.000Z"} +{"doc_count":3015,"split_key":211590,"timestamp":"2026-06-15T09:00:00.000Z"} +{"doc_count":2368,"split_key":135780,"timestamp":"2026-06-15T09:00:00.000Z"} +{"doc_count":1328,"split_key":14061,"timestamp":"2026-06-15T09:00:00.000Z"} +{"doc_count":1284,"split_key":133385,"timestamp":"2026-06-15T09:00:00.000Z"} +{"doc_count":35315,"split_key":209334,"timestamp":"2026-06-15T10:00:00.000Z"} +{"doc_count":9123,"split_key":396982,"timestamp":"2026-06-15T10:00:00.000Z"} +{"doc_count":4421,"split_key":51396,"timestamp":"2026-06-15T10:00:00.000Z"} +{"doc_count":2360,"split_key":135780,"timestamp":"2026-06-15T10:00:00.000Z"} +{"doc_count":1392,"split_key":201401,"timestamp":"2026-06-15T10:00:00.000Z"} +{"doc_count":30461,"split_key":396982,"timestamp":"2026-06-15T11:00:00.000Z"} +{"doc_count":14638,"split_key":209334,"timestamp":"2026-06-15T11:00:00.000Z"} +{"doc_count":2361,"split_key":135780,"timestamp":"2026-06-15T11:00:00.000Z"} +{"doc_count":1233,"split_key":14061,"timestamp":"2026-06-15T11:00:00.000Z"} +{"doc_count":1028,"split_key":214295,"timestamp":"2026-06-15T11:00:00.000Z"} +{"doc_count":33611,"split_key":209334,"timestamp":"2026-06-15T12:00:00.000Z"} +{"doc_count":29165,"split_key":396982,"timestamp":"2026-06-15T12:00:00.000Z"} +{"doc_count":2356,"split_key":135780,"timestamp":"2026-06-15T12:00:00.000Z"} +{"doc_count":1202,"split_key":14061,"timestamp":"2026-06-15T12:00:00.000Z"} +{"doc_count":1117,"split_key":31898,"timestamp":"2026-06-15T12:00:00.000Z"} +{"doc_count":46462,"split_key":209334,"timestamp":"2026-06-15T13:00:00.000Z"} +{"doc_count":34393,"split_key":396982,"timestamp":"2026-06-15T13:00:00.000Z"} +{"doc_count":2323,"split_key":135780,"timestamp":"2026-06-15T13:00:00.000Z"} +{"doc_count":1705,"split_key":31898,"timestamp":"2026-06-15T13:00:00.000Z"} +{"doc_count":1441,"split_key":201401,"timestamp":"2026-06-15T13:00:00.000Z"} +{"doc_count":42049,"split_key":396982,"timestamp":"2026-06-15T14:00:00.000Z"} +{"doc_count":32011,"split_key":209334,"timestamp":"2026-06-15T14:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-15T14:00:00.000Z"} +{"doc_count":1996,"split_key":135780,"timestamp":"2026-06-15T14:00:00.000Z"} +{"doc_count":1826,"split_key":31898,"timestamp":"2026-06-15T14:00:00.000Z"} +{"doc_count":31178,"split_key":396982,"timestamp":"2026-06-15T15:00:00.000Z"} +{"doc_count":4051,"split_key":209334,"timestamp":"2026-06-15T15:00:00.000Z"} +{"doc_count":2338,"split_key":31898,"timestamp":"2026-06-15T15:00:00.000Z"} +{"doc_count":1294,"split_key":45102,"timestamp":"2026-06-15T15:00:00.000Z"} +{"doc_count":1181,"split_key":14061,"timestamp":"2026-06-15T15:00:00.000Z"} +{"doc_count":5788,"split_key":209334,"timestamp":"2026-06-15T16:00:00.000Z"} +{"doc_count":3538,"split_key":211590,"timestamp":"2026-06-15T16:00:00.000Z"} +{"doc_count":1968,"split_key":31898,"timestamp":"2026-06-15T16:00:00.000Z"} +{"doc_count":1350,"split_key":45102,"timestamp":"2026-06-15T16:00:00.000Z"} +{"doc_count":1024,"split_key":214295,"timestamp":"2026-06-15T16:00:00.000Z"} +{"doc_count":7666,"split_key":211590,"timestamp":"2026-06-15T17:00:00.000Z"} +{"doc_count":1822,"split_key":31898,"timestamp":"2026-06-15T17:00:00.000Z"} +{"doc_count":1679,"split_key":141995,"timestamp":"2026-06-15T17:00:00.000Z"} +{"doc_count":1391,"split_key":45102,"timestamp":"2026-06-15T17:00:00.000Z"} +{"doc_count":1253,"split_key":209334,"timestamp":"2026-06-15T17:00:00.000Z"} +{"doc_count":4565,"split_key":211590,"timestamp":"2026-06-15T18:00:00.000Z"} +{"doc_count":4556,"split_key":209334,"timestamp":"2026-06-15T18:00:00.000Z"} +{"doc_count":1158,"split_key":141995,"timestamp":"2026-06-15T18:00:00.000Z"} +{"doc_count":1099,"split_key":31898,"timestamp":"2026-06-15T18:00:00.000Z"} +{"doc_count":1064,"split_key":45102,"timestamp":"2026-06-15T18:00:00.000Z"} +{"doc_count":8541,"split_key":211590,"timestamp":"2026-06-15T19:00:00.000Z"} +{"doc_count":1842,"split_key":141995,"timestamp":"2026-06-15T19:00:00.000Z"} +{"doc_count":1165,"split_key":209334,"timestamp":"2026-06-15T19:00:00.000Z"} +{"doc_count":1103,"split_key":214295,"timestamp":"2026-06-15T19:00:00.000Z"} +{"doc_count":662,"split_key":31898,"timestamp":"2026-06-15T19:00:00.000Z"} +{"doc_count":6756,"split_key":209334,"timestamp":"2026-06-15T20:00:00.000Z"} +{"doc_count":3126,"split_key":211590,"timestamp":"2026-06-15T20:00:00.000Z"} +{"doc_count":1027,"split_key":214295,"timestamp":"2026-06-15T20:00:00.000Z"} +{"doc_count":754,"split_key":141995,"timestamp":"2026-06-15T20:00:00.000Z"} +{"doc_count":749,"split_key":396982,"timestamp":"2026-06-15T20:00:00.000Z"} +{"doc_count":74017,"split_key":396982,"timestamp":"2026-06-15T21:00:00.000Z"} +{"doc_count":1115,"split_key":214295,"timestamp":"2026-06-15T21:00:00.000Z"} +{"doc_count":767,"split_key":45102,"timestamp":"2026-06-15T21:00:00.000Z"} +{"doc_count":607,"split_key":7040,"timestamp":"2026-06-15T21:00:00.000Z"} +{"doc_count":552,"split_key":23470,"timestamp":"2026-06-15T21:00:00.000Z"} +{"doc_count":31607,"split_key":396982,"timestamp":"2026-06-15T22:00:00.000Z"} +{"doc_count":2400,"split_key":37963,"timestamp":"2026-06-15T22:00:00.000Z"} +{"doc_count":1835,"split_key":23470,"timestamp":"2026-06-15T22:00:00.000Z"} +{"doc_count":1684,"split_key":45102,"timestamp":"2026-06-15T22:00:00.000Z"} +{"doc_count":1367,"split_key":51396,"timestamp":"2026-06-15T22:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-06-15T23:00:00.000Z"} +{"doc_count":1409,"split_key":137899,"timestamp":"2026-06-15T23:00:00.000Z"} +{"doc_count":1400,"split_key":45102,"timestamp":"2026-06-15T23:00:00.000Z"} +{"doc_count":1270,"split_key":14061,"timestamp":"2026-06-15T23:00:00.000Z"} +{"doc_count":1076,"split_key":37963,"timestamp":"2026-06-15T23:00:00.000Z"} +{"doc_count":11781,"split_key":14987,"timestamp":"2026-06-16T00:00:00.000Z"} +{"doc_count":4308,"split_key":211590,"timestamp":"2026-06-16T00:00:00.000Z"} +{"doc_count":1945,"split_key":37963,"timestamp":"2026-06-16T00:00:00.000Z"} +{"doc_count":1495,"split_key":45102,"timestamp":"2026-06-16T00:00:00.000Z"} +{"doc_count":1290,"split_key":14061,"timestamp":"2026-06-16T00:00:00.000Z"} +{"doc_count":10851,"split_key":211590,"timestamp":"2026-06-16T01:00:00.000Z"} +{"doc_count":1435,"split_key":14061,"timestamp":"2026-06-16T01:00:00.000Z"} +{"doc_count":1033,"split_key":214295,"timestamp":"2026-06-16T01:00:00.000Z"} +{"doc_count":986,"split_key":45102,"timestamp":"2026-06-16T01:00:00.000Z"} +{"doc_count":919,"split_key":51852,"timestamp":"2026-06-16T01:00:00.000Z"} +{"doc_count":7964,"split_key":211590,"timestamp":"2026-06-16T02:00:00.000Z"} +{"doc_count":1567,"split_key":45102,"timestamp":"2026-06-16T02:00:00.000Z"} +{"doc_count":1388,"split_key":14061,"timestamp":"2026-06-16T02:00:00.000Z"} +{"doc_count":1369,"split_key":37963,"timestamp":"2026-06-16T02:00:00.000Z"} +{"doc_count":1015,"split_key":214295,"timestamp":"2026-06-16T02:00:00.000Z"} +{"doc_count":7225,"split_key":211590,"timestamp":"2026-06-16T03:00:00.000Z"} +{"doc_count":1597,"split_key":37963,"timestamp":"2026-06-16T03:00:00.000Z"} +{"doc_count":1284,"split_key":14061,"timestamp":"2026-06-16T03:00:00.000Z"} +{"doc_count":1248,"split_key":45102,"timestamp":"2026-06-16T03:00:00.000Z"} +{"doc_count":1078,"split_key":214295,"timestamp":"2026-06-16T03:00:00.000Z"} +{"doc_count":2953,"split_key":8615,"timestamp":"2026-06-16T04:00:00.000Z"} +{"doc_count":1680,"split_key":37963,"timestamp":"2026-06-16T04:00:00.000Z"} +{"doc_count":1295,"split_key":14061,"timestamp":"2026-06-16T04:00:00.000Z"} +{"doc_count":1014,"split_key":214295,"timestamp":"2026-06-16T04:00:00.000Z"} +{"doc_count":1008,"split_key":51396,"timestamp":"2026-06-16T04:00:00.000Z"} +{"doc_count":7046,"split_key":8615,"timestamp":"2026-06-16T05:00:00.000Z"} +{"doc_count":1333,"split_key":37963,"timestamp":"2026-06-16T05:00:00.000Z"} +{"doc_count":1230,"split_key":14061,"timestamp":"2026-06-16T05:00:00.000Z"} +{"doc_count":1016,"split_key":396982,"timestamp":"2026-06-16T05:00:00.000Z"} +{"doc_count":1002,"split_key":214295,"timestamp":"2026-06-16T05:00:00.000Z"} +{"doc_count":7294,"split_key":209334,"timestamp":"2026-06-16T06:00:00.000Z"} +{"doc_count":1326,"split_key":37963,"timestamp":"2026-06-16T06:00:00.000Z"} +{"doc_count":1287,"split_key":14061,"timestamp":"2026-06-16T06:00:00.000Z"} +{"doc_count":969,"split_key":214295,"timestamp":"2026-06-16T06:00:00.000Z"} +{"doc_count":944,"split_key":16509,"timestamp":"2026-06-16T06:00:00.000Z"} +{"doc_count":8163,"split_key":209334,"timestamp":"2026-06-16T07:00:00.000Z"} +{"doc_count":1961,"split_key":45102,"timestamp":"2026-06-16T07:00:00.000Z"} +{"doc_count":1324,"split_key":37963,"timestamp":"2026-06-16T07:00:00.000Z"} +{"doc_count":1313,"split_key":14061,"timestamp":"2026-06-16T07:00:00.000Z"} +{"doc_count":1027,"split_key":214295,"timestamp":"2026-06-16T07:00:00.000Z"} +{"doc_count":14094,"split_key":209334,"timestamp":"2026-06-16T08:00:00.000Z"} +{"doc_count":10001,"split_key":8615,"timestamp":"2026-06-16T08:00:00.000Z"} +{"doc_count":2932,"split_key":45102,"timestamp":"2026-06-16T08:00:00.000Z"} +{"doc_count":1411,"split_key":137899,"timestamp":"2026-06-16T08:00:00.000Z"} +{"doc_count":1347,"split_key":37963,"timestamp":"2026-06-16T08:00:00.000Z"} +{"doc_count":37096,"split_key":209334,"timestamp":"2026-06-16T09:00:00.000Z"} +{"doc_count":2272,"split_key":45102,"timestamp":"2026-06-16T09:00:00.000Z"} +{"doc_count":1160,"split_key":14061,"timestamp":"2026-06-16T09:00:00.000Z"} +{"doc_count":1051,"split_key":201401,"timestamp":"2026-06-16T09:00:00.000Z"} +{"doc_count":1005,"split_key":214295,"timestamp":"2026-06-16T09:00:00.000Z"} +{"doc_count":35427,"split_key":209334,"timestamp":"2026-06-16T10:00:00.000Z"} +{"doc_count":1711,"split_key":45102,"timestamp":"2026-06-16T10:00:00.000Z"} +{"doc_count":1246,"split_key":201401,"timestamp":"2026-06-16T10:00:00.000Z"} +{"doc_count":1215,"split_key":14061,"timestamp":"2026-06-16T10:00:00.000Z"} +{"doc_count":1050,"split_key":214295,"timestamp":"2026-06-16T10:00:00.000Z"} +{"doc_count":14105,"split_key":209334,"timestamp":"2026-06-16T11:00:00.000Z"} +{"doc_count":2176,"split_key":37963,"timestamp":"2026-06-16T11:00:00.000Z"} +{"doc_count":1739,"split_key":45102,"timestamp":"2026-06-16T11:00:00.000Z"} +{"doc_count":1313,"split_key":25369,"timestamp":"2026-06-16T11:00:00.000Z"} +{"doc_count":1166,"split_key":14061,"timestamp":"2026-06-16T11:00:00.000Z"} +{"doc_count":33486,"split_key":209334,"timestamp":"2026-06-16T12:00:00.000Z"} +{"doc_count":2373,"split_key":37963,"timestamp":"2026-06-16T12:00:00.000Z"} +{"doc_count":2090,"split_key":14061,"timestamp":"2026-06-16T12:00:00.000Z"} +{"doc_count":1761,"split_key":45102,"timestamp":"2026-06-16T12:00:00.000Z"} +{"doc_count":1174,"split_key":201401,"timestamp":"2026-06-16T12:00:00.000Z"} +{"doc_count":42909,"split_key":209334,"timestamp":"2026-06-16T13:00:00.000Z"} +{"doc_count":13765,"split_key":14061,"timestamp":"2026-06-16T13:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-06-16T13:00:00.000Z"} +{"doc_count":2008,"split_key":45102,"timestamp":"2026-06-16T13:00:00.000Z"} +{"doc_count":1679,"split_key":37963,"timestamp":"2026-06-16T13:00:00.000Z"} +{"doc_count":35211,"split_key":209334,"timestamp":"2026-06-16T14:00:00.000Z"} +{"doc_count":13527,"split_key":14061,"timestamp":"2026-06-16T14:00:00.000Z"} +{"doc_count":5261,"split_key":211590,"timestamp":"2026-06-16T14:00:00.000Z"} +{"doc_count":1161,"split_key":45102,"timestamp":"2026-06-16T14:00:00.000Z"} +{"doc_count":1068,"split_key":201401,"timestamp":"2026-06-16T14:00:00.000Z"} +{"doc_count":5650,"split_key":14061,"timestamp":"2026-06-16T15:00:00.000Z"} +{"doc_count":4249,"split_key":209334,"timestamp":"2026-06-16T15:00:00.000Z"} +{"doc_count":3757,"split_key":211590,"timestamp":"2026-06-16T15:00:00.000Z"} +{"doc_count":3260,"split_key":45102,"timestamp":"2026-06-16T15:00:00.000Z"} +{"doc_count":1023,"split_key":214295,"timestamp":"2026-06-16T15:00:00.000Z"} +{"doc_count":6031,"split_key":209334,"timestamp":"2026-06-16T16:00:00.000Z"} +{"doc_count":4835,"split_key":14061,"timestamp":"2026-06-16T16:00:00.000Z"} +{"doc_count":3169,"split_key":45102,"timestamp":"2026-06-16T16:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-06-16T16:00:00.000Z"} +{"doc_count":1028,"split_key":23470,"timestamp":"2026-06-16T16:00:00.000Z"} +{"doc_count":6000,"split_key":211590,"timestamp":"2026-06-16T17:00:00.000Z"} +{"doc_count":3731,"split_key":14061,"timestamp":"2026-06-16T17:00:00.000Z"} +{"doc_count":1575,"split_key":16509,"timestamp":"2026-06-16T17:00:00.000Z"} +{"doc_count":1410,"split_key":137899,"timestamp":"2026-06-16T17:00:00.000Z"} +{"doc_count":1354,"split_key":51396,"timestamp":"2026-06-16T17:00:00.000Z"} +{"doc_count":4481,"split_key":209334,"timestamp":"2026-06-16T18:00:00.000Z"} +{"doc_count":3204,"split_key":211590,"timestamp":"2026-06-16T18:00:00.000Z"} +{"doc_count":1586,"split_key":14061,"timestamp":"2026-06-16T18:00:00.000Z"} +{"doc_count":1129,"split_key":45102,"timestamp":"2026-06-16T18:00:00.000Z"} +{"doc_count":987,"split_key":16509,"timestamp":"2026-06-16T18:00:00.000Z"} +{"doc_count":1693,"split_key":37963,"timestamp":"2026-06-16T19:00:00.000Z"} +{"doc_count":1208,"split_key":14061,"timestamp":"2026-06-16T19:00:00.000Z"} +{"doc_count":1152,"split_key":45102,"timestamp":"2026-06-16T19:00:00.000Z"} +{"doc_count":1046,"split_key":214295,"timestamp":"2026-06-16T19:00:00.000Z"} +{"doc_count":962,"split_key":14618,"timestamp":"2026-06-16T19:00:00.000Z"} +{"doc_count":6346,"split_key":209334,"timestamp":"2026-06-16T20:00:00.000Z"} +{"doc_count":2137,"split_key":37963,"timestamp":"2026-06-16T20:00:00.000Z"} +{"doc_count":1308,"split_key":14061,"timestamp":"2026-06-16T20:00:00.000Z"} +{"doc_count":1189,"split_key":51396,"timestamp":"2026-06-16T20:00:00.000Z"} +{"doc_count":1054,"split_key":214295,"timestamp":"2026-06-16T20:00:00.000Z"} +{"doc_count":1789,"split_key":51396,"timestamp":"2026-06-16T21:00:00.000Z"} +{"doc_count":1727,"split_key":37963,"timestamp":"2026-06-16T21:00:00.000Z"} +{"doc_count":1293,"split_key":14061,"timestamp":"2026-06-16T21:00:00.000Z"} +{"doc_count":1042,"split_key":214295,"timestamp":"2026-06-16T21:00:00.000Z"} +{"doc_count":1015,"split_key":14618,"timestamp":"2026-06-16T21:00:00.000Z"} +{"doc_count":4888,"split_key":211590,"timestamp":"2026-06-16T22:00:00.000Z"} +{"doc_count":1372,"split_key":14061,"timestamp":"2026-06-16T22:00:00.000Z"} +{"doc_count":1225,"split_key":37963,"timestamp":"2026-06-16T22:00:00.000Z"} +{"doc_count":981,"split_key":214295,"timestamp":"2026-06-16T22:00:00.000Z"} +{"doc_count":746,"split_key":51396,"timestamp":"2026-06-16T22:00:00.000Z"} +{"doc_count":5872,"split_key":211590,"timestamp":"2026-06-16T23:00:00.000Z"} +{"doc_count":1377,"split_key":14061,"timestamp":"2026-06-16T23:00:00.000Z"} +{"doc_count":990,"split_key":214295,"timestamp":"2026-06-16T23:00:00.000Z"} +{"doc_count":741,"split_key":37963,"timestamp":"2026-06-16T23:00:00.000Z"} +{"doc_count":644,"split_key":7040,"timestamp":"2026-06-16T23:00:00.000Z"} +{"doc_count":10534,"split_key":14987,"timestamp":"2026-06-17T00:00:00.000Z"} +{"doc_count":4786,"split_key":211590,"timestamp":"2026-06-17T00:00:00.000Z"} +{"doc_count":1523,"split_key":14061,"timestamp":"2026-06-17T00:00:00.000Z"} +{"doc_count":994,"split_key":214295,"timestamp":"2026-06-17T00:00:00.000Z"} +{"doc_count":826,"split_key":31898,"timestamp":"2026-06-17T00:00:00.000Z"} +{"doc_count":4217,"split_key":211590,"timestamp":"2026-06-17T01:00:00.000Z"} +{"doc_count":1408,"split_key":14061,"timestamp":"2026-06-17T01:00:00.000Z"} +{"doc_count":944,"split_key":214295,"timestamp":"2026-06-17T01:00:00.000Z"} +{"doc_count":767,"split_key":396982,"timestamp":"2026-06-17T01:00:00.000Z"} +{"doc_count":650,"split_key":31898,"timestamp":"2026-06-17T01:00:00.000Z"} +{"doc_count":3016,"split_key":211590,"timestamp":"2026-06-17T02:00:00.000Z"} +{"doc_count":1413,"split_key":137899,"timestamp":"2026-06-17T02:00:00.000Z"} +{"doc_count":1301,"split_key":14061,"timestamp":"2026-06-17T02:00:00.000Z"} +{"doc_count":1039,"split_key":214295,"timestamp":"2026-06-17T02:00:00.000Z"} +{"doc_count":869,"split_key":51396,"timestamp":"2026-06-17T02:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-17T03:00:00.000Z"} +{"doc_count":1216,"split_key":14061,"timestamp":"2026-06-17T03:00:00.000Z"} +{"doc_count":1039,"split_key":55720,"timestamp":"2026-06-17T03:00:00.000Z"} +{"doc_count":980,"split_key":214295,"timestamp":"2026-06-17T03:00:00.000Z"} +{"doc_count":687,"split_key":37963,"timestamp":"2026-06-17T03:00:00.000Z"} +{"doc_count":1340,"split_key":51396,"timestamp":"2026-06-17T04:00:00.000Z"} +{"doc_count":1277,"split_key":14061,"timestamp":"2026-06-17T04:00:00.000Z"} +{"doc_count":1045,"split_key":55720,"timestamp":"2026-06-17T04:00:00.000Z"} +{"doc_count":1008,"split_key":214295,"timestamp":"2026-06-17T04:00:00.000Z"} +{"doc_count":762,"split_key":138915,"timestamp":"2026-06-17T04:00:00.000Z"} +{"doc_count":1260,"split_key":14061,"timestamp":"2026-06-17T05:00:00.000Z"} +{"doc_count":1020,"split_key":214295,"timestamp":"2026-06-17T05:00:00.000Z"} +{"doc_count":866,"split_key":396982,"timestamp":"2026-06-17T05:00:00.000Z"} +{"doc_count":799,"split_key":55720,"timestamp":"2026-06-17T05:00:00.000Z"} +{"doc_count":656,"split_key":7040,"timestamp":"2026-06-17T05:00:00.000Z"} +{"doc_count":7095,"split_key":209334,"timestamp":"2026-06-17T06:00:00.000Z"} +{"doc_count":1178,"split_key":14061,"timestamp":"2026-06-17T06:00:00.000Z"} +{"doc_count":993,"split_key":214295,"timestamp":"2026-06-17T06:00:00.000Z"} +{"doc_count":629,"split_key":7040,"timestamp":"2026-06-17T06:00:00.000Z"} +{"doc_count":588,"split_key":138915,"timestamp":"2026-06-17T06:00:00.000Z"} +{"doc_count":7954,"split_key":209334,"timestamp":"2026-06-17T07:00:00.000Z"} +{"doc_count":1354,"split_key":14061,"timestamp":"2026-06-17T07:00:00.000Z"} +{"doc_count":989,"split_key":214295,"timestamp":"2026-06-17T07:00:00.000Z"} +{"doc_count":874,"split_key":45102,"timestamp":"2026-06-17T07:00:00.000Z"} +{"doc_count":644,"split_key":7040,"timestamp":"2026-06-17T07:00:00.000Z"} +{"doc_count":13708,"split_key":209334,"timestamp":"2026-06-17T08:00:00.000Z"} +{"doc_count":1487,"split_key":45102,"timestamp":"2026-06-17T08:00:00.000Z"} +{"doc_count":1427,"split_key":14061,"timestamp":"2026-06-17T08:00:00.000Z"} +{"doc_count":991,"split_key":214295,"timestamp":"2026-06-17T08:00:00.000Z"} +{"doc_count":620,"split_key":7040,"timestamp":"2026-06-17T08:00:00.000Z"} +{"doc_count":31548,"split_key":209334,"timestamp":"2026-06-17T09:00:00.000Z"} +{"doc_count":3750,"split_key":211590,"timestamp":"2026-06-17T09:00:00.000Z"} +{"doc_count":1537,"split_key":201401,"timestamp":"2026-06-17T09:00:00.000Z"} +{"doc_count":1392,"split_key":45102,"timestamp":"2026-06-17T09:00:00.000Z"} +{"doc_count":1229,"split_key":14061,"timestamp":"2026-06-17T09:00:00.000Z"} +{"doc_count":40023,"split_key":209334,"timestamp":"2026-06-17T10:00:00.000Z"} +{"doc_count":1802,"split_key":211590,"timestamp":"2026-06-17T10:00:00.000Z"} +{"doc_count":1529,"split_key":45102,"timestamp":"2026-06-17T10:00:00.000Z"} +{"doc_count":1478,"split_key":14061,"timestamp":"2026-06-17T10:00:00.000Z"} +{"doc_count":1377,"split_key":201401,"timestamp":"2026-06-17T10:00:00.000Z"} +{"doc_count":14886,"split_key":209334,"timestamp":"2026-06-17T11:00:00.000Z"} +{"doc_count":3748,"split_key":211590,"timestamp":"2026-06-17T11:00:00.000Z"} +{"doc_count":1454,"split_key":14061,"timestamp":"2026-06-17T11:00:00.000Z"} +{"doc_count":1069,"split_key":37963,"timestamp":"2026-06-17T11:00:00.000Z"} +{"doc_count":998,"split_key":214295,"timestamp":"2026-06-17T11:00:00.000Z"} +{"doc_count":29816,"split_key":209334,"timestamp":"2026-06-17T12:00:00.000Z"} +{"doc_count":2644,"split_key":211590,"timestamp":"2026-06-17T12:00:00.000Z"} +{"doc_count":1925,"split_key":37963,"timestamp":"2026-06-17T12:00:00.000Z"} +{"doc_count":1642,"split_key":14061,"timestamp":"2026-06-17T12:00:00.000Z"} +{"doc_count":1335,"split_key":25369,"timestamp":"2026-06-17T12:00:00.000Z"} +{"doc_count":44072,"split_key":209334,"timestamp":"2026-06-17T13:00:00.000Z"} +{"doc_count":3358,"split_key":211590,"timestamp":"2026-06-17T13:00:00.000Z"} +{"doc_count":1604,"split_key":14061,"timestamp":"2026-06-17T13:00:00.000Z"} +{"doc_count":1469,"split_key":37963,"timestamp":"2026-06-17T13:00:00.000Z"} +{"doc_count":1228,"split_key":25369,"timestamp":"2026-06-17T13:00:00.000Z"} +{"doc_count":38083,"split_key":209334,"timestamp":"2026-06-17T14:00:00.000Z"} +{"doc_count":3015,"split_key":211590,"timestamp":"2026-06-17T14:00:00.000Z"} +{"doc_count":2078,"split_key":37963,"timestamp":"2026-06-17T14:00:00.000Z"} +{"doc_count":1649,"split_key":14061,"timestamp":"2026-06-17T14:00:00.000Z"} +{"doc_count":1128,"split_key":201401,"timestamp":"2026-06-17T14:00:00.000Z"} +{"doc_count":4257,"split_key":209334,"timestamp":"2026-06-17T15:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-06-17T15:00:00.000Z"} +{"doc_count":2617,"split_key":49870,"timestamp":"2026-06-17T15:00:00.000Z"} +{"doc_count":1949,"split_key":37963,"timestamp":"2026-06-17T15:00:00.000Z"} +{"doc_count":1570,"split_key":14061,"timestamp":"2026-06-17T15:00:00.000Z"} +{"doc_count":6482,"split_key":209334,"timestamp":"2026-06-17T16:00:00.000Z"} +{"doc_count":1978,"split_key":37963,"timestamp":"2026-06-17T16:00:00.000Z"} +{"doc_count":1725,"split_key":14061,"timestamp":"2026-06-17T16:00:00.000Z"} +{"doc_count":981,"split_key":214295,"timestamp":"2026-06-17T16:00:00.000Z"} +{"doc_count":637,"split_key":49870,"timestamp":"2026-06-17T16:00:00.000Z"} +{"doc_count":12823,"split_key":30456,"timestamp":"2026-06-17T17:00:00.000Z"} +{"doc_count":3200,"split_key":26863,"timestamp":"2026-06-17T17:00:00.000Z"} +{"doc_count":2795,"split_key":211590,"timestamp":"2026-06-17T17:00:00.000Z"} +{"doc_count":1985,"split_key":37963,"timestamp":"2026-06-17T17:00:00.000Z"} +{"doc_count":1776,"split_key":14061,"timestamp":"2026-06-17T17:00:00.000Z"} +{"doc_count":4291,"split_key":209334,"timestamp":"2026-06-17T18:00:00.000Z"} +{"doc_count":2235,"split_key":30456,"timestamp":"2026-06-17T18:00:00.000Z"} +{"doc_count":1956,"split_key":37963,"timestamp":"2026-06-17T18:00:00.000Z"} +{"doc_count":1833,"split_key":14061,"timestamp":"2026-06-17T18:00:00.000Z"} +{"doc_count":1434,"split_key":211590,"timestamp":"2026-06-17T18:00:00.000Z"} +{"doc_count":3125,"split_key":211590,"timestamp":"2026-06-17T19:00:00.000Z"} +{"doc_count":2124,"split_key":37963,"timestamp":"2026-06-17T19:00:00.000Z"} +{"doc_count":2084,"split_key":21003,"timestamp":"2026-06-17T19:00:00.000Z"} +{"doc_count":1675,"split_key":14061,"timestamp":"2026-06-17T19:00:00.000Z"} +{"doc_count":1396,"split_key":137899,"timestamp":"2026-06-17T19:00:00.000Z"} +{"doc_count":6368,"split_key":209334,"timestamp":"2026-06-17T20:00:00.000Z"} +{"doc_count":1699,"split_key":14061,"timestamp":"2026-06-17T20:00:00.000Z"} +{"doc_count":1125,"split_key":21003,"timestamp":"2026-06-17T20:00:00.000Z"} +{"doc_count":1120,"split_key":37963,"timestamp":"2026-06-17T20:00:00.000Z"} +{"doc_count":1064,"split_key":211590,"timestamp":"2026-06-17T20:00:00.000Z"} +{"doc_count":1839,"split_key":14061,"timestamp":"2026-06-17T21:00:00.000Z"} +{"doc_count":983,"split_key":8615,"timestamp":"2026-06-17T21:00:00.000Z"} +{"doc_count":973,"split_key":214295,"timestamp":"2026-06-17T21:00:00.000Z"} +{"doc_count":716,"split_key":396982,"timestamp":"2026-06-17T21:00:00.000Z"} +{"doc_count":658,"split_key":7040,"timestamp":"2026-06-17T21:00:00.000Z"} +{"doc_count":3123,"split_key":8615,"timestamp":"2026-06-17T22:00:00.000Z"} +{"doc_count":2303,"split_key":14061,"timestamp":"2026-06-17T22:00:00.000Z"} +{"doc_count":1103,"split_key":51396,"timestamp":"2026-06-17T22:00:00.000Z"} +{"doc_count":990,"split_key":214295,"timestamp":"2026-06-17T22:00:00.000Z"} +{"doc_count":674,"split_key":7040,"timestamp":"2026-06-17T22:00:00.000Z"} +{"doc_count":2220,"split_key":14061,"timestamp":"2026-06-17T23:00:00.000Z"} +{"doc_count":1079,"split_key":51396,"timestamp":"2026-06-17T23:00:00.000Z"} +{"doc_count":939,"split_key":214295,"timestamp":"2026-06-17T23:00:00.000Z"} +{"doc_count":679,"split_key":16509,"timestamp":"2026-06-17T23:00:00.000Z"} +{"doc_count":659,"split_key":7040,"timestamp":"2026-06-17T23:00:00.000Z"} +{"doc_count":10052,"split_key":14987,"timestamp":"2026-06-18T00:00:00.000Z"} +{"doc_count":2180,"split_key":14061,"timestamp":"2026-06-18T00:00:00.000Z"} +{"doc_count":1029,"split_key":214295,"timestamp":"2026-06-18T00:00:00.000Z"} +{"doc_count":692,"split_key":396982,"timestamp":"2026-06-18T00:00:00.000Z"} +{"doc_count":612,"split_key":7040,"timestamp":"2026-06-18T00:00:00.000Z"} +{"doc_count":2141,"split_key":14061,"timestamp":"2026-06-18T01:00:00.000Z"} +{"doc_count":1031,"split_key":214295,"timestamp":"2026-06-18T01:00:00.000Z"} +{"doc_count":731,"split_key":396982,"timestamp":"2026-06-18T01:00:00.000Z"} +{"doc_count":725,"split_key":16509,"timestamp":"2026-06-18T01:00:00.000Z"} +{"doc_count":671,"split_key":7040,"timestamp":"2026-06-18T01:00:00.000Z"} +{"doc_count":2268,"split_key":45102,"timestamp":"2026-06-18T02:00:00.000Z"} +{"doc_count":2085,"split_key":14061,"timestamp":"2026-06-18T02:00:00.000Z"} +{"doc_count":923,"split_key":214295,"timestamp":"2026-06-18T02:00:00.000Z"} +{"doc_count":657,"split_key":7040,"timestamp":"2026-06-18T02:00:00.000Z"} +{"doc_count":629,"split_key":396982,"timestamp":"2026-06-18T02:00:00.000Z"} +{"doc_count":2094,"split_key":45102,"timestamp":"2026-06-18T03:00:00.000Z"} +{"doc_count":1503,"split_key":14061,"timestamp":"2026-06-18T03:00:00.000Z"} +{"doc_count":980,"split_key":214295,"timestamp":"2026-06-18T03:00:00.000Z"} +{"doc_count":713,"split_key":396982,"timestamp":"2026-06-18T03:00:00.000Z"} +{"doc_count":608,"split_key":7040,"timestamp":"2026-06-18T03:00:00.000Z"} +{"doc_count":1558,"split_key":14061,"timestamp":"2026-06-18T04:00:00.000Z"} +{"doc_count":1422,"split_key":137899,"timestamp":"2026-06-18T04:00:00.000Z"} +{"doc_count":1007,"split_key":214295,"timestamp":"2026-06-18T04:00:00.000Z"} +{"doc_count":973,"split_key":16509,"timestamp":"2026-06-18T04:00:00.000Z"} +{"doc_count":724,"split_key":396982,"timestamp":"2026-06-18T04:00:00.000Z"} +{"doc_count":6044,"split_key":211590,"timestamp":"2026-06-18T05:00:00.000Z"} +{"doc_count":1744,"split_key":14061,"timestamp":"2026-06-18T05:00:00.000Z"} +{"doc_count":1228,"split_key":396982,"timestamp":"2026-06-18T05:00:00.000Z"} +{"doc_count":984,"split_key":214295,"timestamp":"2026-06-18T05:00:00.000Z"} +{"doc_count":634,"split_key":7040,"timestamp":"2026-06-18T05:00:00.000Z"} +{"doc_count":6884,"split_key":209334,"timestamp":"2026-06-18T06:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-06-18T06:00:00.000Z"} +{"doc_count":1442,"split_key":14061,"timestamp":"2026-06-18T06:00:00.000Z"} +{"doc_count":1014,"split_key":214295,"timestamp":"2026-06-18T06:00:00.000Z"} +{"doc_count":895,"split_key":57724,"timestamp":"2026-06-18T06:00:00.000Z"} +{"doc_count":8013,"split_key":209334,"timestamp":"2026-06-18T07:00:00.000Z"} +{"doc_count":1641,"split_key":14061,"timestamp":"2026-06-18T07:00:00.000Z"} +{"doc_count":1270,"split_key":211590,"timestamp":"2026-06-18T07:00:00.000Z"} +{"doc_count":1014,"split_key":214295,"timestamp":"2026-06-18T07:00:00.000Z"} +{"doc_count":727,"split_key":51396,"timestamp":"2026-06-18T07:00:00.000Z"} +{"doc_count":13667,"split_key":209334,"timestamp":"2026-06-18T08:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-18T08:00:00.000Z"} +{"doc_count":1949,"split_key":14061,"timestamp":"2026-06-18T08:00:00.000Z"} +{"doc_count":1020,"split_key":37963,"timestamp":"2026-06-18T08:00:00.000Z"} +{"doc_count":980,"split_key":214295,"timestamp":"2026-06-18T08:00:00.000Z"} +{"doc_count":27202,"split_key":209334,"timestamp":"2026-06-18T09:00:00.000Z"} +{"doc_count":2357,"split_key":14061,"timestamp":"2026-06-18T09:00:00.000Z"} +{"doc_count":1759,"split_key":37963,"timestamp":"2026-06-18T09:00:00.000Z"} +{"doc_count":1154,"split_key":28502,"timestamp":"2026-06-18T09:00:00.000Z"} +{"doc_count":968,"split_key":45102,"timestamp":"2026-06-18T09:00:00.000Z"} +{"doc_count":44908,"split_key":209334,"timestamp":"2026-06-18T10:00:00.000Z"} +{"doc_count":2096,"split_key":28502,"timestamp":"2026-06-18T10:00:00.000Z"} +{"doc_count":1890,"split_key":37963,"timestamp":"2026-06-18T10:00:00.000Z"} +{"doc_count":1676,"split_key":201401,"timestamp":"2026-06-18T10:00:00.000Z"} +{"doc_count":1420,"split_key":14061,"timestamp":"2026-06-18T10:00:00.000Z"} +{"doc_count":13969,"split_key":209334,"timestamp":"2026-06-18T11:00:00.000Z"} +{"doc_count":1420,"split_key":14061,"timestamp":"2026-06-18T11:00:00.000Z"} +{"doc_count":1203,"split_key":45102,"timestamp":"2026-06-18T11:00:00.000Z"} +{"doc_count":1054,"split_key":37963,"timestamp":"2026-06-18T11:00:00.000Z"} +{"doc_count":989,"split_key":214295,"timestamp":"2026-06-18T11:00:00.000Z"} +{"doc_count":27542,"split_key":209334,"timestamp":"2026-06-18T12:00:00.000Z"} +{"doc_count":1397,"split_key":14061,"timestamp":"2026-06-18T12:00:00.000Z"} +{"doc_count":1194,"split_key":45102,"timestamp":"2026-06-18T12:00:00.000Z"} +{"doc_count":987,"split_key":214295,"timestamp":"2026-06-18T12:00:00.000Z"} +{"doc_count":646,"split_key":8151,"timestamp":"2026-06-18T12:00:00.000Z"} +{"doc_count":41721,"split_key":209334,"timestamp":"2026-06-18T13:00:00.000Z"} +{"doc_count":1718,"split_key":201401,"timestamp":"2026-06-18T13:00:00.000Z"} +{"doc_count":1404,"split_key":137899,"timestamp":"2026-06-18T13:00:00.000Z"} +{"doc_count":1346,"split_key":14061,"timestamp":"2026-06-18T13:00:00.000Z"} +{"doc_count":1045,"split_key":214295,"timestamp":"2026-06-18T13:00:00.000Z"} +{"doc_count":42298,"split_key":209334,"timestamp":"2026-06-18T14:00:00.000Z"} +{"doc_count":1151,"split_key":201401,"timestamp":"2026-06-18T14:00:00.000Z"} +{"doc_count":1049,"split_key":51396,"timestamp":"2026-06-18T14:00:00.000Z"} +{"doc_count":997,"split_key":214295,"timestamp":"2026-06-18T14:00:00.000Z"} +{"doc_count":697,"split_key":14061,"timestamp":"2026-06-18T14:00:00.000Z"} +{"doc_count":4235,"split_key":209334,"timestamp":"2026-06-18T15:00:00.000Z"} +{"doc_count":3135,"split_key":211590,"timestamp":"2026-06-18T15:00:00.000Z"} +{"doc_count":1069,"split_key":214295,"timestamp":"2026-06-18T15:00:00.000Z"} +{"doc_count":615,"split_key":7040,"timestamp":"2026-06-18T15:00:00.000Z"} +{"doc_count":568,"split_key":141995,"timestamp":"2026-06-18T15:00:00.000Z"} +{"doc_count":6013,"split_key":209334,"timestamp":"2026-06-18T16:00:00.000Z"} +{"doc_count":973,"split_key":214295,"timestamp":"2026-06-18T16:00:00.000Z"} +{"doc_count":681,"split_key":7040,"timestamp":"2026-06-18T16:00:00.000Z"} +{"doc_count":652,"split_key":16509,"timestamp":"2026-06-18T16:00:00.000Z"} +{"doc_count":612,"split_key":51396,"timestamp":"2026-06-18T16:00:00.000Z"} +{"doc_count":1168,"split_key":209334,"timestamp":"2026-06-18T17:00:00.000Z"} +{"doc_count":983,"split_key":214295,"timestamp":"2026-06-18T17:00:00.000Z"} +{"doc_count":865,"split_key":51396,"timestamp":"2026-06-18T17:00:00.000Z"} +{"doc_count":664,"split_key":396982,"timestamp":"2026-06-18T17:00:00.000Z"} +{"doc_count":637,"split_key":7040,"timestamp":"2026-06-18T17:00:00.000Z"} +{"doc_count":4228,"split_key":209334,"timestamp":"2026-06-18T18:00:00.000Z"} +{"doc_count":1295,"split_key":51396,"timestamp":"2026-06-18T18:00:00.000Z"} +{"doc_count":1016,"split_key":214295,"timestamp":"2026-06-18T18:00:00.000Z"} +{"doc_count":560,"split_key":7040,"timestamp":"2026-06-18T18:00:00.000Z"} +{"doc_count":528,"split_key":396982,"timestamp":"2026-06-18T18:00:00.000Z"} +{"doc_count":1052,"split_key":214295,"timestamp":"2026-06-18T19:00:00.000Z"} +{"doc_count":696,"split_key":7040,"timestamp":"2026-06-18T19:00:00.000Z"} +{"doc_count":609,"split_key":209334,"timestamp":"2026-06-18T19:00:00.000Z"} +{"doc_count":576,"split_key":396982,"timestamp":"2026-06-18T19:00:00.000Z"} +{"doc_count":511,"split_key":16509,"timestamp":"2026-06-18T19:00:00.000Z"} +{"doc_count":6291,"split_key":209334,"timestamp":"2026-06-18T20:00:00.000Z"} +{"doc_count":1471,"split_key":14061,"timestamp":"2026-06-18T20:00:00.000Z"} +{"doc_count":1022,"split_key":214295,"timestamp":"2026-06-18T20:00:00.000Z"} +{"doc_count":643,"split_key":396982,"timestamp":"2026-06-18T20:00:00.000Z"} +{"doc_count":626,"split_key":7040,"timestamp":"2026-06-18T20:00:00.000Z"} +{"doc_count":1433,"split_key":14061,"timestamp":"2026-06-18T21:00:00.000Z"} +{"doc_count":1076,"split_key":396982,"timestamp":"2026-06-18T21:00:00.000Z"} +{"doc_count":1014,"split_key":214295,"timestamp":"2026-06-18T21:00:00.000Z"} +{"doc_count":765,"split_key":44382,"timestamp":"2026-06-18T21:00:00.000Z"} +{"doc_count":711,"split_key":51396,"timestamp":"2026-06-18T21:00:00.000Z"} +{"doc_count":1554,"split_key":14061,"timestamp":"2026-06-18T22:00:00.000Z"} +{"doc_count":1415,"split_key":137899,"timestamp":"2026-06-18T22:00:00.000Z"} +{"doc_count":972,"split_key":214295,"timestamp":"2026-06-18T22:00:00.000Z"} +{"doc_count":823,"split_key":51396,"timestamp":"2026-06-18T22:00:00.000Z"} +{"doc_count":646,"split_key":7040,"timestamp":"2026-06-18T22:00:00.000Z"} +{"doc_count":1342,"split_key":14061,"timestamp":"2026-06-18T23:00:00.000Z"} +{"doc_count":912,"split_key":214295,"timestamp":"2026-06-18T23:00:00.000Z"} +{"doc_count":811,"split_key":51396,"timestamp":"2026-06-18T23:00:00.000Z"} +{"doc_count":702,"split_key":7040,"timestamp":"2026-06-18T23:00:00.000Z"} +{"doc_count":577,"split_key":215762,"timestamp":"2026-06-18T23:00:00.000Z"} +{"doc_count":10037,"split_key":14987,"timestamp":"2026-06-19T00:00:00.000Z"} +{"doc_count":9634,"split_key":9009,"timestamp":"2026-06-19T00:00:00.000Z"} +{"doc_count":1510,"split_key":51396,"timestamp":"2026-06-19T00:00:00.000Z"} +{"doc_count":1190,"split_key":14061,"timestamp":"2026-06-19T00:00:00.000Z"} +{"doc_count":989,"split_key":214295,"timestamp":"2026-06-19T00:00:00.000Z"} +{"doc_count":1439,"split_key":51396,"timestamp":"2026-06-19T01:00:00.000Z"} +{"doc_count":1223,"split_key":14061,"timestamp":"2026-06-19T01:00:00.000Z"} +{"doc_count":939,"split_key":396982,"timestamp":"2026-06-19T01:00:00.000Z"} +{"doc_count":909,"split_key":214295,"timestamp":"2026-06-19T01:00:00.000Z"} +{"doc_count":682,"split_key":7040,"timestamp":"2026-06-19T01:00:00.000Z"} +{"doc_count":1603,"split_key":51396,"timestamp":"2026-06-19T02:00:00.000Z"} +{"doc_count":1485,"split_key":25369,"timestamp":"2026-06-19T02:00:00.000Z"} +{"doc_count":1181,"split_key":14061,"timestamp":"2026-06-19T02:00:00.000Z"} +{"doc_count":1022,"split_key":214295,"timestamp":"2026-06-19T02:00:00.000Z"} +{"doc_count":676,"split_key":396982,"timestamp":"2026-06-19T02:00:00.000Z"} +{"doc_count":1410,"split_key":25369,"timestamp":"2026-06-19T03:00:00.000Z"} +{"doc_count":1141,"split_key":14061,"timestamp":"2026-06-19T03:00:00.000Z"} +{"doc_count":703,"split_key":396982,"timestamp":"2026-06-19T03:00:00.000Z"} +{"doc_count":517,"split_key":51396,"timestamp":"2026-06-19T03:00:00.000Z"} +{"doc_count":510,"split_key":16509,"timestamp":"2026-06-19T03:00:00.000Z"} +{"doc_count":1299,"split_key":25369,"timestamp":"2026-06-19T04:00:00.000Z"} +{"doc_count":1165,"split_key":14061,"timestamp":"2026-06-19T04:00:00.000Z"} +{"doc_count":660,"split_key":396982,"timestamp":"2026-06-19T04:00:00.000Z"} +{"doc_count":623,"split_key":63949,"timestamp":"2026-06-19T04:00:00.000Z"} +{"doc_count":515,"split_key":16509,"timestamp":"2026-06-19T04:00:00.000Z"} +{"doc_count":1416,"split_key":25369,"timestamp":"2026-06-19T05:00:00.000Z"} +{"doc_count":1221,"split_key":14061,"timestamp":"2026-06-19T05:00:00.000Z"} +{"doc_count":1052,"split_key":396982,"timestamp":"2026-06-19T05:00:00.000Z"} +{"doc_count":630,"split_key":16509,"timestamp":"2026-06-19T05:00:00.000Z"} +{"doc_count":591,"split_key":51396,"timestamp":"2026-06-19T05:00:00.000Z"} +{"doc_count":6931,"split_key":209334,"timestamp":"2026-06-19T06:00:00.000Z"} +{"doc_count":1221,"split_key":14061,"timestamp":"2026-06-19T06:00:00.000Z"} +{"doc_count":935,"split_key":25369,"timestamp":"2026-06-19T06:00:00.000Z"} +{"doc_count":677,"split_key":51396,"timestamp":"2026-06-19T06:00:00.000Z"} +{"doc_count":588,"split_key":396982,"timestamp":"2026-06-19T06:00:00.000Z"} +{"doc_count":8170,"split_key":209334,"timestamp":"2026-06-19T07:00:00.000Z"} +{"doc_count":1410,"split_key":137899,"timestamp":"2026-06-19T07:00:00.000Z"} +{"doc_count":1199,"split_key":14061,"timestamp":"2026-06-19T07:00:00.000Z"} +{"doc_count":432,"split_key":396982,"timestamp":"2026-06-19T07:00:00.000Z"} +{"doc_count":407,"split_key":138915,"timestamp":"2026-06-19T07:00:00.000Z"} +{"doc_count":13624,"split_key":209334,"timestamp":"2026-06-19T08:00:00.000Z"} +{"doc_count":1330,"split_key":14061,"timestamp":"2026-06-19T08:00:00.000Z"} +{"doc_count":510,"split_key":138915,"timestamp":"2026-06-19T08:00:00.000Z"} +{"doc_count":480,"split_key":396982,"timestamp":"2026-06-19T08:00:00.000Z"} +{"doc_count":452,"split_key":16509,"timestamp":"2026-06-19T08:00:00.000Z"} +{"doc_count":26811,"split_key":209334,"timestamp":"2026-06-19T09:00:00.000Z"} +{"doc_count":1197,"split_key":14061,"timestamp":"2026-06-19T09:00:00.000Z"} +{"doc_count":1032,"split_key":201401,"timestamp":"2026-06-19T09:00:00.000Z"} +{"doc_count":645,"split_key":51396,"timestamp":"2026-06-19T09:00:00.000Z"} +{"doc_count":612,"split_key":37963,"timestamp":"2026-06-19T09:00:00.000Z"} +{"doc_count":34032,"split_key":209334,"timestamp":"2026-06-19T10:00:00.000Z"} +{"doc_count":1515,"split_key":201401,"timestamp":"2026-06-19T10:00:00.000Z"} +{"doc_count":1114,"split_key":14061,"timestamp":"2026-06-19T10:00:00.000Z"} +{"doc_count":872,"split_key":51396,"timestamp":"2026-06-19T10:00:00.000Z"} +{"doc_count":725,"split_key":37963,"timestamp":"2026-06-19T10:00:00.000Z"} +{"doc_count":25601,"split_key":209334,"timestamp":"2026-06-19T11:00:00.000Z"} +{"doc_count":1253,"split_key":14061,"timestamp":"2026-06-19T11:00:00.000Z"} +{"doc_count":851,"split_key":201401,"timestamp":"2026-06-19T11:00:00.000Z"} +{"doc_count":742,"split_key":37963,"timestamp":"2026-06-19T11:00:00.000Z"} +{"doc_count":475,"split_key":396982,"timestamp":"2026-06-19T11:00:00.000Z"} +{"doc_count":27290,"split_key":209334,"timestamp":"2026-06-19T12:00:00.000Z"} +{"doc_count":1387,"split_key":45102,"timestamp":"2026-06-19T12:00:00.000Z"} +{"doc_count":1173,"split_key":14061,"timestamp":"2026-06-19T12:00:00.000Z"} +{"doc_count":920,"split_key":201401,"timestamp":"2026-06-19T12:00:00.000Z"} +{"doc_count":709,"split_key":37963,"timestamp":"2026-06-19T12:00:00.000Z"} +{"doc_count":38461,"split_key":209334,"timestamp":"2026-06-19T13:00:00.000Z"} +{"doc_count":1734,"split_key":45102,"timestamp":"2026-06-19T13:00:00.000Z"} +{"doc_count":1482,"split_key":201401,"timestamp":"2026-06-19T13:00:00.000Z"} +{"doc_count":1195,"split_key":14061,"timestamp":"2026-06-19T13:00:00.000Z"} +{"doc_count":709,"split_key":37963,"timestamp":"2026-06-19T13:00:00.000Z"} +{"doc_count":43236,"split_key":209334,"timestamp":"2026-06-19T14:00:00.000Z"} +{"doc_count":1642,"split_key":45102,"timestamp":"2026-06-19T14:00:00.000Z"} +{"doc_count":1322,"split_key":201401,"timestamp":"2026-06-19T14:00:00.000Z"} +{"doc_count":1131,"split_key":14061,"timestamp":"2026-06-19T14:00:00.000Z"} +{"doc_count":753,"split_key":44382,"timestamp":"2026-06-19T14:00:00.000Z"} +{"doc_count":6254,"split_key":209334,"timestamp":"2026-06-19T15:00:00.000Z"} +{"doc_count":1193,"split_key":14061,"timestamp":"2026-06-19T15:00:00.000Z"} +{"doc_count":1105,"split_key":51396,"timestamp":"2026-06-19T15:00:00.000Z"} +{"doc_count":527,"split_key":37963,"timestamp":"2026-06-19T15:00:00.000Z"} +{"doc_count":431,"split_key":396982,"timestamp":"2026-06-19T15:00:00.000Z"} +{"doc_count":6083,"split_key":209334,"timestamp":"2026-06-19T16:00:00.000Z"} +{"doc_count":1424,"split_key":137899,"timestamp":"2026-06-19T16:00:00.000Z"} +{"doc_count":1396,"split_key":14061,"timestamp":"2026-06-19T16:00:00.000Z"} +{"doc_count":1313,"split_key":51396,"timestamp":"2026-06-19T16:00:00.000Z"} +{"doc_count":663,"split_key":37963,"timestamp":"2026-06-19T16:00:00.000Z"} +{"doc_count":1299,"split_key":14061,"timestamp":"2026-06-19T17:00:00.000Z"} +{"doc_count":1280,"split_key":209334,"timestamp":"2026-06-19T17:00:00.000Z"} +{"doc_count":964,"split_key":37963,"timestamp":"2026-06-19T17:00:00.000Z"} +{"doc_count":829,"split_key":51396,"timestamp":"2026-06-19T17:00:00.000Z"} +{"doc_count":627,"split_key":16509,"timestamp":"2026-06-19T17:00:00.000Z"} +{"doc_count":4433,"split_key":209334,"timestamp":"2026-06-19T18:00:00.000Z"} +{"doc_count":1276,"split_key":51396,"timestamp":"2026-06-19T18:00:00.000Z"} +{"doc_count":1155,"split_key":14061,"timestamp":"2026-06-19T18:00:00.000Z"} +{"doc_count":938,"split_key":37963,"timestamp":"2026-06-19T18:00:00.000Z"} +{"doc_count":568,"split_key":396982,"timestamp":"2026-06-19T18:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-19T19:00:00.000Z"} +{"doc_count":1165,"split_key":14061,"timestamp":"2026-06-19T19:00:00.000Z"} +{"doc_count":995,"split_key":45102,"timestamp":"2026-06-19T19:00:00.000Z"} +{"doc_count":878,"split_key":51396,"timestamp":"2026-06-19T19:00:00.000Z"} +{"doc_count":874,"split_key":37963,"timestamp":"2026-06-19T19:00:00.000Z"} +{"doc_count":6422,"split_key":209334,"timestamp":"2026-06-19T20:00:00.000Z"} +{"doc_count":1563,"split_key":45102,"timestamp":"2026-06-19T20:00:00.000Z"} +{"doc_count":1377,"split_key":37963,"timestamp":"2026-06-19T20:00:00.000Z"} +{"doc_count":1348,"split_key":14061,"timestamp":"2026-06-19T20:00:00.000Z"} +{"doc_count":675,"split_key":396982,"timestamp":"2026-06-19T20:00:00.000Z"} +{"doc_count":1660,"split_key":45102,"timestamp":"2026-06-19T21:00:00.000Z"} +{"doc_count":1512,"split_key":14061,"timestamp":"2026-06-19T21:00:00.000Z"} +{"doc_count":1316,"split_key":37963,"timestamp":"2026-06-19T21:00:00.000Z"} +{"doc_count":761,"split_key":396982,"timestamp":"2026-06-19T21:00:00.000Z"} +{"doc_count":454,"split_key":16509,"timestamp":"2026-06-19T21:00:00.000Z"} +{"doc_count":1176,"split_key":14061,"timestamp":"2026-06-19T22:00:00.000Z"} +{"doc_count":870,"split_key":37963,"timestamp":"2026-06-19T22:00:00.000Z"} +{"doc_count":546,"split_key":396982,"timestamp":"2026-06-19T22:00:00.000Z"} +{"doc_count":540,"split_key":138915,"timestamp":"2026-06-19T22:00:00.000Z"} +{"doc_count":497,"split_key":45102,"timestamp":"2026-06-19T22:00:00.000Z"} +{"doc_count":1162,"split_key":14061,"timestamp":"2026-06-19T23:00:00.000Z"} +{"doc_count":736,"split_key":37963,"timestamp":"2026-06-19T23:00:00.000Z"} +{"doc_count":621,"split_key":396982,"timestamp":"2026-06-19T23:00:00.000Z"} +{"doc_count":544,"split_key":51396,"timestamp":"2026-06-19T23:00:00.000Z"} +{"doc_count":538,"split_key":215762,"timestamp":"2026-06-19T23:00:00.000Z"} +{"doc_count":10896,"split_key":14987,"timestamp":"2026-06-20T00:00:00.000Z"} +{"doc_count":1175,"split_key":51396,"timestamp":"2026-06-20T00:00:00.000Z"} +{"doc_count":1116,"split_key":14061,"timestamp":"2026-06-20T00:00:00.000Z"} +{"doc_count":705,"split_key":37963,"timestamp":"2026-06-20T00:00:00.000Z"} +{"doc_count":575,"split_key":396982,"timestamp":"2026-06-20T00:00:00.000Z"} +{"doc_count":1407,"split_key":137899,"timestamp":"2026-06-20T01:00:00.000Z"} +{"doc_count":1143,"split_key":14061,"timestamp":"2026-06-20T01:00:00.000Z"} +{"doc_count":724,"split_key":37963,"timestamp":"2026-06-20T01:00:00.000Z"} +{"doc_count":679,"split_key":396982,"timestamp":"2026-06-20T01:00:00.000Z"} +{"doc_count":640,"split_key":16509,"timestamp":"2026-06-20T01:00:00.000Z"} +{"doc_count":1242,"split_key":14061,"timestamp":"2026-06-20T02:00:00.000Z"} +{"doc_count":1043,"split_key":51396,"timestamp":"2026-06-20T02:00:00.000Z"} +{"doc_count":867,"split_key":396982,"timestamp":"2026-06-20T02:00:00.000Z"} +{"doc_count":750,"split_key":16509,"timestamp":"2026-06-20T02:00:00.000Z"} +{"doc_count":698,"split_key":24940,"timestamp":"2026-06-20T02:00:00.000Z"} +{"doc_count":26522,"split_key":14061,"timestamp":"2026-06-20T03:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-20T03:00:00.000Z"} +{"doc_count":1019,"split_key":16509,"timestamp":"2026-06-20T03:00:00.000Z"} +{"doc_count":833,"split_key":396982,"timestamp":"2026-06-20T03:00:00.000Z"} +{"doc_count":763,"split_key":37963,"timestamp":"2026-06-20T03:00:00.000Z"} +{"doc_count":1196,"split_key":14061,"timestamp":"2026-06-20T04:00:00.000Z"} +{"doc_count":1183,"split_key":25369,"timestamp":"2026-06-20T04:00:00.000Z"} +{"doc_count":995,"split_key":16509,"timestamp":"2026-06-20T04:00:00.000Z"} +{"doc_count":775,"split_key":396982,"timestamp":"2026-06-20T04:00:00.000Z"} +{"doc_count":743,"split_key":37963,"timestamp":"2026-06-20T04:00:00.000Z"} +{"doc_count":1431,"split_key":25369,"timestamp":"2026-06-20T05:00:00.000Z"} +{"doc_count":1261,"split_key":14061,"timestamp":"2026-06-20T05:00:00.000Z"} +{"doc_count":1135,"split_key":16509,"timestamp":"2026-06-20T05:00:00.000Z"} +{"doc_count":970,"split_key":396982,"timestamp":"2026-06-20T05:00:00.000Z"} +{"doc_count":830,"split_key":37963,"timestamp":"2026-06-20T05:00:00.000Z"} +{"doc_count":6786,"split_key":209334,"timestamp":"2026-06-20T06:00:00.000Z"} +{"doc_count":3002,"split_key":211590,"timestamp":"2026-06-20T06:00:00.000Z"} +{"doc_count":1297,"split_key":14061,"timestamp":"2026-06-20T06:00:00.000Z"} +{"doc_count":963,"split_key":25369,"timestamp":"2026-06-20T06:00:00.000Z"} +{"doc_count":793,"split_key":16509,"timestamp":"2026-06-20T06:00:00.000Z"} +{"doc_count":8147,"split_key":209334,"timestamp":"2026-06-20T07:00:00.000Z"} +{"doc_count":1471,"split_key":51396,"timestamp":"2026-06-20T07:00:00.000Z"} +{"doc_count":1346,"split_key":14061,"timestamp":"2026-06-20T07:00:00.000Z"} +{"doc_count":1023,"split_key":16509,"timestamp":"2026-06-20T07:00:00.000Z"} +{"doc_count":872,"split_key":37963,"timestamp":"2026-06-20T07:00:00.000Z"} +{"doc_count":12756,"split_key":209334,"timestamp":"2026-06-20T08:00:00.000Z"} +{"doc_count":1500,"split_key":45102,"timestamp":"2026-06-20T08:00:00.000Z"} +{"doc_count":1223,"split_key":16509,"timestamp":"2026-06-20T08:00:00.000Z"} +{"doc_count":1222,"split_key":14061,"timestamp":"2026-06-20T08:00:00.000Z"} +{"doc_count":1007,"split_key":201401,"timestamp":"2026-06-20T08:00:00.000Z"} +{"doc_count":26102,"split_key":209334,"timestamp":"2026-06-20T09:00:00.000Z"} +{"doc_count":4227,"split_key":138296,"timestamp":"2026-06-20T09:00:00.000Z"} +{"doc_count":1251,"split_key":14061,"timestamp":"2026-06-20T09:00:00.000Z"} +{"doc_count":1220,"split_key":201401,"timestamp":"2026-06-20T09:00:00.000Z"} +{"doc_count":1172,"split_key":16509,"timestamp":"2026-06-20T09:00:00.000Z"} +{"doc_count":34040,"split_key":209334,"timestamp":"2026-06-20T10:00:00.000Z"} +{"doc_count":3137,"split_key":211590,"timestamp":"2026-06-20T10:00:00.000Z"} +{"doc_count":1400,"split_key":201401,"timestamp":"2026-06-20T10:00:00.000Z"} +{"doc_count":1115,"split_key":14061,"timestamp":"2026-06-20T10:00:00.000Z"} +{"doc_count":1075,"split_key":16509,"timestamp":"2026-06-20T10:00:00.000Z"} +{"doc_count":25308,"split_key":209334,"timestamp":"2026-06-20T11:00:00.000Z"} +{"doc_count":1347,"split_key":201401,"timestamp":"2026-06-20T11:00:00.000Z"} +{"doc_count":1095,"split_key":14061,"timestamp":"2026-06-20T11:00:00.000Z"} +{"doc_count":1080,"split_key":45102,"timestamp":"2026-06-20T11:00:00.000Z"} +{"doc_count":943,"split_key":16509,"timestamp":"2026-06-20T11:00:00.000Z"} +{"doc_count":26942,"split_key":209334,"timestamp":"2026-06-20T12:00:00.000Z"} +{"doc_count":1213,"split_key":14061,"timestamp":"2026-06-20T12:00:00.000Z"} +{"doc_count":1076,"split_key":201401,"timestamp":"2026-06-20T12:00:00.000Z"} +{"doc_count":1070,"split_key":45102,"timestamp":"2026-06-20T12:00:00.000Z"} +{"doc_count":643,"split_key":16509,"timestamp":"2026-06-20T12:00:00.000Z"} +{"doc_count":38374,"split_key":209334,"timestamp":"2026-06-20T13:00:00.000Z"} +{"doc_count":1642,"split_key":49870,"timestamp":"2026-06-20T13:00:00.000Z"} +{"doc_count":1447,"split_key":201401,"timestamp":"2026-06-20T13:00:00.000Z"} +{"doc_count":1181,"split_key":14061,"timestamp":"2026-06-20T13:00:00.000Z"} +{"doc_count":1040,"split_key":45102,"timestamp":"2026-06-20T13:00:00.000Z"} +{"doc_count":43193,"split_key":209334,"timestamp":"2026-06-20T14:00:00.000Z"} +{"doc_count":9840,"split_key":39351,"timestamp":"2026-06-20T14:00:00.000Z"} +{"doc_count":1797,"split_key":49870,"timestamp":"2026-06-20T14:00:00.000Z"} +{"doc_count":1574,"split_key":201401,"timestamp":"2026-06-20T14:00:00.000Z"} +{"doc_count":1145,"split_key":14061,"timestamp":"2026-06-20T14:00:00.000Z"} +{"doc_count":6418,"split_key":209334,"timestamp":"2026-06-20T15:00:00.000Z"} +{"doc_count":1535,"split_key":49870,"timestamp":"2026-06-20T15:00:00.000Z"} +{"doc_count":1194,"split_key":14061,"timestamp":"2026-06-20T15:00:00.000Z"} +{"doc_count":579,"split_key":16509,"timestamp":"2026-06-20T15:00:00.000Z"} +{"doc_count":570,"split_key":37963,"timestamp":"2026-06-20T15:00:00.000Z"} +{"doc_count":5786,"split_key":209334,"timestamp":"2026-06-20T16:00:00.000Z"} +{"doc_count":1559,"split_key":37963,"timestamp":"2026-06-20T16:00:00.000Z"} +{"doc_count":1539,"split_key":49870,"timestamp":"2026-06-20T16:00:00.000Z"} +{"doc_count":1132,"split_key":14061,"timestamp":"2026-06-20T16:00:00.000Z"} +{"doc_count":945,"split_key":16509,"timestamp":"2026-06-20T16:00:00.000Z"} +{"doc_count":1571,"split_key":37963,"timestamp":"2026-06-20T17:00:00.000Z"} +{"doc_count":1168,"split_key":209334,"timestamp":"2026-06-20T17:00:00.000Z"} +{"doc_count":1151,"split_key":14061,"timestamp":"2026-06-20T17:00:00.000Z"} +{"doc_count":690,"split_key":49870,"timestamp":"2026-06-20T17:00:00.000Z"} +{"doc_count":641,"split_key":396982,"timestamp":"2026-06-20T17:00:00.000Z"} +{"doc_count":4240,"split_key":209334,"timestamp":"2026-06-20T18:00:00.000Z"} +{"doc_count":2402,"split_key":40676,"timestamp":"2026-06-20T18:00:00.000Z"} +{"doc_count":2261,"split_key":45102,"timestamp":"2026-06-20T18:00:00.000Z"} +{"doc_count":1575,"split_key":37963,"timestamp":"2026-06-20T18:00:00.000Z"} +{"doc_count":1267,"split_key":137899,"timestamp":"2026-06-20T18:00:00.000Z"} +{"doc_count":7723,"split_key":211590,"timestamp":"2026-06-20T19:00:00.000Z"} +{"doc_count":2140,"split_key":45102,"timestamp":"2026-06-20T19:00:00.000Z"} +{"doc_count":1605,"split_key":209334,"timestamp":"2026-06-20T19:00:00.000Z"} +{"doc_count":1549,"split_key":40676,"timestamp":"2026-06-20T19:00:00.000Z"} +{"doc_count":1230,"split_key":37963,"timestamp":"2026-06-20T19:00:00.000Z"} +{"doc_count":6420,"split_key":211590,"timestamp":"2026-06-20T20:00:00.000Z"} +{"doc_count":6137,"split_key":209334,"timestamp":"2026-06-20T20:00:00.000Z"} +{"doc_count":1927,"split_key":37963,"timestamp":"2026-06-20T20:00:00.000Z"} +{"doc_count":1797,"split_key":40676,"timestamp":"2026-06-20T20:00:00.000Z"} +{"doc_count":1313,"split_key":14061,"timestamp":"2026-06-20T20:00:00.000Z"} +{"doc_count":3274,"split_key":37963,"timestamp":"2026-06-20T21:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-20T21:00:00.000Z"} +{"doc_count":1735,"split_key":40676,"timestamp":"2026-06-20T21:00:00.000Z"} +{"doc_count":1376,"split_key":45102,"timestamp":"2026-06-20T21:00:00.000Z"} +{"doc_count":1199,"split_key":14061,"timestamp":"2026-06-20T21:00:00.000Z"} +{"doc_count":14774,"split_key":202412,"timestamp":"2026-06-20T22:00:00.000Z"} +{"doc_count":3509,"split_key":37963,"timestamp":"2026-06-20T22:00:00.000Z"} +{"doc_count":2493,"split_key":45102,"timestamp":"2026-06-20T22:00:00.000Z"} +{"doc_count":1332,"split_key":14061,"timestamp":"2026-06-20T22:00:00.000Z"} +{"doc_count":857,"split_key":396982,"timestamp":"2026-06-20T22:00:00.000Z"} +{"doc_count":3009,"split_key":37963,"timestamp":"2026-06-20T23:00:00.000Z"} +{"doc_count":1231,"split_key":14061,"timestamp":"2026-06-20T23:00:00.000Z"} +{"doc_count":847,"split_key":45102,"timestamp":"2026-06-20T23:00:00.000Z"} +{"doc_count":623,"split_key":396982,"timestamp":"2026-06-20T23:00:00.000Z"} +{"doc_count":619,"split_key":16509,"timestamp":"2026-06-20T23:00:00.000Z"} +{"doc_count":10044,"split_key":14987,"timestamp":"2026-06-21T00:00:00.000Z"} +{"doc_count":2577,"split_key":37963,"timestamp":"2026-06-21T00:00:00.000Z"} +{"doc_count":1987,"split_key":14061,"timestamp":"2026-06-21T00:00:00.000Z"} +{"doc_count":1624,"split_key":211590,"timestamp":"2026-06-21T00:00:00.000Z"} +{"doc_count":953,"split_key":396982,"timestamp":"2026-06-21T00:00:00.000Z"} +{"doc_count":4684,"split_key":211590,"timestamp":"2026-06-21T01:00:00.000Z"} +{"doc_count":2342,"split_key":14987,"timestamp":"2026-06-21T01:00:00.000Z"} +{"doc_count":2039,"split_key":14061,"timestamp":"2026-06-21T01:00:00.000Z"} +{"doc_count":1520,"split_key":37963,"timestamp":"2026-06-21T01:00:00.000Z"} +{"doc_count":1285,"split_key":396982,"timestamp":"2026-06-21T01:00:00.000Z"} +{"doc_count":3228,"split_key":211590,"timestamp":"2026-06-21T02:00:00.000Z"} +{"doc_count":1346,"split_key":14061,"timestamp":"2026-06-21T02:00:00.000Z"} +{"doc_count":1325,"split_key":37963,"timestamp":"2026-06-21T02:00:00.000Z"} +{"doc_count":1194,"split_key":396982,"timestamp":"2026-06-21T02:00:00.000Z"} +{"doc_count":637,"split_key":51396,"timestamp":"2026-06-21T02:00:00.000Z"} +{"doc_count":2035,"split_key":37963,"timestamp":"2026-06-21T03:00:00.000Z"} +{"doc_count":1414,"split_key":14061,"timestamp":"2026-06-21T03:00:00.000Z"} +{"doc_count":1410,"split_key":137899,"timestamp":"2026-06-21T03:00:00.000Z"} +{"doc_count":899,"split_key":396982,"timestamp":"2026-06-21T03:00:00.000Z"} +{"doc_count":424,"split_key":138915,"timestamp":"2026-06-21T03:00:00.000Z"} +{"doc_count":2070,"split_key":37963,"timestamp":"2026-06-21T04:00:00.000Z"} +{"doc_count":1364,"split_key":25369,"timestamp":"2026-06-21T04:00:00.000Z"} +{"doc_count":1276,"split_key":14061,"timestamp":"2026-06-21T04:00:00.000Z"} +{"doc_count":617,"split_key":396982,"timestamp":"2026-06-21T04:00:00.000Z"} +{"doc_count":459,"split_key":138915,"timestamp":"2026-06-21T04:00:00.000Z"} +{"doc_count":1692,"split_key":37963,"timestamp":"2026-06-21T05:00:00.000Z"} +{"doc_count":1454,"split_key":14061,"timestamp":"2026-06-21T05:00:00.000Z"} +{"doc_count":1404,"split_key":25369,"timestamp":"2026-06-21T05:00:00.000Z"} +{"doc_count":935,"split_key":396982,"timestamp":"2026-06-21T05:00:00.000Z"} +{"doc_count":494,"split_key":138915,"timestamp":"2026-06-21T05:00:00.000Z"} +{"doc_count":6345,"split_key":209334,"timestamp":"2026-06-21T06:00:00.000Z"} +{"doc_count":2076,"split_key":150303,"timestamp":"2026-06-21T06:00:00.000Z"} +{"doc_count":1690,"split_key":37963,"timestamp":"2026-06-21T06:00:00.000Z"} +{"doc_count":1353,"split_key":14061,"timestamp":"2026-06-21T06:00:00.000Z"} +{"doc_count":945,"split_key":25369,"timestamp":"2026-06-21T06:00:00.000Z"} +{"doc_count":8224,"split_key":209334,"timestamp":"2026-06-21T07:00:00.000Z"} +{"doc_count":3088,"split_key":211590,"timestamp":"2026-06-21T07:00:00.000Z"} +{"doc_count":1505,"split_key":37963,"timestamp":"2026-06-21T07:00:00.000Z"} +{"doc_count":1202,"split_key":14061,"timestamp":"2026-06-21T07:00:00.000Z"} +{"doc_count":788,"split_key":63949,"timestamp":"2026-06-21T07:00:00.000Z"} +{"doc_count":12951,"split_key":209334,"timestamp":"2026-06-21T08:00:00.000Z"} +{"doc_count":6058,"split_key":211590,"timestamp":"2026-06-21T08:00:00.000Z"} +{"doc_count":1496,"split_key":37963,"timestamp":"2026-06-21T08:00:00.000Z"} +{"doc_count":1219,"split_key":14061,"timestamp":"2026-06-21T08:00:00.000Z"} +{"doc_count":946,"split_key":201401,"timestamp":"2026-06-21T08:00:00.000Z"} +{"doc_count":25607,"split_key":209334,"timestamp":"2026-06-21T09:00:00.000Z"} +{"doc_count":2311,"split_key":37963,"timestamp":"2026-06-21T09:00:00.000Z"} +{"doc_count":1641,"split_key":211590,"timestamp":"2026-06-21T09:00:00.000Z"} +{"doc_count":1448,"split_key":201401,"timestamp":"2026-06-21T09:00:00.000Z"} +{"doc_count":1301,"split_key":14061,"timestamp":"2026-06-21T09:00:00.000Z"} +{"doc_count":34136,"split_key":209334,"timestamp":"2026-06-21T10:00:00.000Z"} +{"doc_count":2705,"split_key":37963,"timestamp":"2026-06-21T10:00:00.000Z"} +{"doc_count":1379,"split_key":201401,"timestamp":"2026-06-21T10:00:00.000Z"} +{"doc_count":1215,"split_key":14061,"timestamp":"2026-06-21T10:00:00.000Z"} +{"doc_count":411,"split_key":138915,"timestamp":"2026-06-21T10:00:00.000Z"} +{"doc_count":25313,"split_key":209334,"timestamp":"2026-06-21T11:00:00.000Z"} +{"doc_count":3105,"split_key":14061,"timestamp":"2026-06-21T11:00:00.000Z"} +{"doc_count":2028,"split_key":37963,"timestamp":"2026-06-21T11:00:00.000Z"} +{"doc_count":1434,"split_key":201401,"timestamp":"2026-06-21T11:00:00.000Z"} +{"doc_count":424,"split_key":138915,"timestamp":"2026-06-21T11:00:00.000Z"} +{"doc_count":24185,"split_key":209334,"timestamp":"2026-06-21T12:00:00.000Z"} +{"doc_count":1417,"split_key":137899,"timestamp":"2026-06-21T12:00:00.000Z"} +{"doc_count":1378,"split_key":37963,"timestamp":"2026-06-21T12:00:00.000Z"} +{"doc_count":1362,"split_key":14061,"timestamp":"2026-06-21T12:00:00.000Z"} +{"doc_count":1333,"split_key":201401,"timestamp":"2026-06-21T12:00:00.000Z"} +{"doc_count":5901,"split_key":5650,"timestamp":"2026-06-21T13:00:00.000Z"} +{"doc_count":1397,"split_key":14061,"timestamp":"2026-06-21T13:00:00.000Z"} +{"doc_count":1120,"split_key":51396,"timestamp":"2026-06-21T13:00:00.000Z"} +{"doc_count":943,"split_key":37963,"timestamp":"2026-06-21T13:00:00.000Z"} +{"doc_count":545,"split_key":396982,"timestamp":"2026-06-21T13:00:00.000Z"} +{"doc_count":1512,"split_key":14061,"timestamp":"2026-06-21T14:00:00.000Z"} +{"doc_count":1445,"split_key":51396,"timestamp":"2026-06-21T14:00:00.000Z"} +{"doc_count":548,"split_key":37963,"timestamp":"2026-06-21T14:00:00.000Z"} +{"doc_count":477,"split_key":138915,"timestamp":"2026-06-21T14:00:00.000Z"} +{"doc_count":434,"split_key":16509,"timestamp":"2026-06-21T14:00:00.000Z"} +{"doc_count":1901,"split_key":51396,"timestamp":"2026-06-21T15:00:00.000Z"} +{"doc_count":1312,"split_key":14061,"timestamp":"2026-06-21T15:00:00.000Z"} +{"doc_count":651,"split_key":37963,"timestamp":"2026-06-21T15:00:00.000Z"} +{"doc_count":431,"split_key":138915,"timestamp":"2026-06-21T15:00:00.000Z"} +{"doc_count":268,"split_key":16509,"timestamp":"2026-06-21T15:00:00.000Z"} +{"doc_count":1494,"split_key":14061,"timestamp":"2026-06-21T16:00:00.000Z"} +{"doc_count":1262,"split_key":51396,"timestamp":"2026-06-21T16:00:00.000Z"} +{"doc_count":1209,"split_key":37963,"timestamp":"2026-06-21T16:00:00.000Z"} +{"doc_count":571,"split_key":215762,"timestamp":"2026-06-21T16:00:00.000Z"} +{"doc_count":567,"split_key":138915,"timestamp":"2026-06-21T16:00:00.000Z"} +{"doc_count":4884,"split_key":211590,"timestamp":"2026-06-21T17:00:00.000Z"} +{"doc_count":1219,"split_key":14061,"timestamp":"2026-06-21T17:00:00.000Z"} +{"doc_count":1107,"split_key":45102,"timestamp":"2026-06-21T17:00:00.000Z"} +{"doc_count":1049,"split_key":37963,"timestamp":"2026-06-21T17:00:00.000Z"} +{"doc_count":971,"split_key":141995,"timestamp":"2026-06-21T17:00:00.000Z"} +{"doc_count":19022,"split_key":209334,"timestamp":"2026-06-21T18:00:00.000Z"} +{"doc_count":3347,"split_key":211590,"timestamp":"2026-06-21T18:00:00.000Z"} +{"doc_count":2200,"split_key":45102,"timestamp":"2026-06-21T18:00:00.000Z"} +{"doc_count":1398,"split_key":14061,"timestamp":"2026-06-21T18:00:00.000Z"} +{"doc_count":1213,"split_key":37963,"timestamp":"2026-06-21T18:00:00.000Z"} +{"doc_count":30882,"split_key":209334,"timestamp":"2026-06-21T19:00:00.000Z"} +{"doc_count":1909,"split_key":45102,"timestamp":"2026-06-21T19:00:00.000Z"} +{"doc_count":1499,"split_key":37963,"timestamp":"2026-06-21T19:00:00.000Z"} +{"doc_count":1469,"split_key":14061,"timestamp":"2026-06-21T19:00:00.000Z"} +{"doc_count":1075,"split_key":201401,"timestamp":"2026-06-21T19:00:00.000Z"} +{"doc_count":59474,"split_key":209334,"timestamp":"2026-06-21T20:00:00.000Z"} +{"doc_count":4491,"split_key":211590,"timestamp":"2026-06-21T20:00:00.000Z"} +{"doc_count":2181,"split_key":37963,"timestamp":"2026-06-21T20:00:00.000Z"} +{"doc_count":1560,"split_key":201401,"timestamp":"2026-06-21T20:00:00.000Z"} +{"doc_count":1424,"split_key":51396,"timestamp":"2026-06-21T20:00:00.000Z"} +{"doc_count":1566,"split_key":14061,"timestamp":"2026-06-21T21:00:00.000Z"} +{"doc_count":1536,"split_key":37963,"timestamp":"2026-06-21T21:00:00.000Z"} +{"doc_count":1416,"split_key":137899,"timestamp":"2026-06-21T21:00:00.000Z"} +{"doc_count":688,"split_key":51396,"timestamp":"2026-06-21T21:00:00.000Z"} +{"doc_count":587,"split_key":135392,"timestamp":"2026-06-21T21:00:00.000Z"} +{"doc_count":1575,"split_key":37963,"timestamp":"2026-06-21T22:00:00.000Z"} +{"doc_count":1377,"split_key":14061,"timestamp":"2026-06-21T22:00:00.000Z"} +{"doc_count":615,"split_key":398101,"timestamp":"2026-06-21T22:00:00.000Z"} +{"doc_count":588,"split_key":135392,"timestamp":"2026-06-21T22:00:00.000Z"} +{"doc_count":498,"split_key":138915,"timestamp":"2026-06-21T22:00:00.000Z"} +{"doc_count":2826,"split_key":211590,"timestamp":"2026-06-21T23:00:00.000Z"} +{"doc_count":1708,"split_key":37963,"timestamp":"2026-06-21T23:00:00.000Z"} +{"doc_count":1551,"split_key":51396,"timestamp":"2026-06-21T23:00:00.000Z"} +{"doc_count":1350,"split_key":14061,"timestamp":"2026-06-21T23:00:00.000Z"} +{"doc_count":1267,"split_key":398101,"timestamp":"2026-06-21T23:00:00.000Z"} +{"doc_count":10034,"split_key":14987,"timestamp":"2026-06-22T00:00:00.000Z"} +{"doc_count":1560,"split_key":37963,"timestamp":"2026-06-22T00:00:00.000Z"} +{"doc_count":1383,"split_key":14061,"timestamp":"2026-06-22T00:00:00.000Z"} +{"doc_count":848,"split_key":51396,"timestamp":"2026-06-22T00:00:00.000Z"} +{"doc_count":591,"split_key":135392,"timestamp":"2026-06-22T00:00:00.000Z"} +{"doc_count":1634,"split_key":37963,"timestamp":"2026-06-22T01:00:00.000Z"} +{"doc_count":1374,"split_key":14061,"timestamp":"2026-06-22T01:00:00.000Z"} +{"doc_count":1294,"split_key":51396,"timestamp":"2026-06-22T01:00:00.000Z"} +{"doc_count":729,"split_key":396982,"timestamp":"2026-06-22T01:00:00.000Z"} +{"doc_count":564,"split_key":135392,"timestamp":"2026-06-22T01:00:00.000Z"} +{"doc_count":1414,"split_key":14061,"timestamp":"2026-06-22T02:00:00.000Z"} +{"doc_count":650,"split_key":37963,"timestamp":"2026-06-22T02:00:00.000Z"} +{"doc_count":576,"split_key":135392,"timestamp":"2026-06-22T02:00:00.000Z"} +{"doc_count":515,"split_key":396982,"timestamp":"2026-06-22T02:00:00.000Z"} +{"doc_count":494,"split_key":51396,"timestamp":"2026-06-22T02:00:00.000Z"} +{"doc_count":1485,"split_key":14061,"timestamp":"2026-06-22T03:00:00.000Z"} +{"doc_count":847,"split_key":51396,"timestamp":"2026-06-22T03:00:00.000Z"} +{"doc_count":605,"split_key":37963,"timestamp":"2026-06-22T03:00:00.000Z"} +{"doc_count":567,"split_key":135392,"timestamp":"2026-06-22T03:00:00.000Z"} +{"doc_count":516,"split_key":138915,"timestamp":"2026-06-22T03:00:00.000Z"} +{"doc_count":7633,"split_key":211590,"timestamp":"2026-06-22T04:00:00.000Z"} +{"doc_count":1419,"split_key":14061,"timestamp":"2026-06-22T04:00:00.000Z"} +{"doc_count":1334,"split_key":51396,"timestamp":"2026-06-22T04:00:00.000Z"} +{"doc_count":1199,"split_key":25369,"timestamp":"2026-06-22T04:00:00.000Z"} +{"doc_count":727,"split_key":48090,"timestamp":"2026-06-22T04:00:00.000Z"} +{"doc_count":4385,"split_key":211590,"timestamp":"2026-06-22T05:00:00.000Z"} +{"doc_count":1420,"split_key":14061,"timestamp":"2026-06-22T05:00:00.000Z"} +{"doc_count":1393,"split_key":25369,"timestamp":"2026-06-22T05:00:00.000Z"} +{"doc_count":990,"split_key":51396,"timestamp":"2026-06-22T05:00:00.000Z"} +{"doc_count":608,"split_key":37963,"timestamp":"2026-06-22T05:00:00.000Z"} +{"doc_count":5915,"split_key":209334,"timestamp":"2026-06-22T06:00:00.000Z"} +{"doc_count":1476,"split_key":14061,"timestamp":"2026-06-22T06:00:00.000Z"} +{"doc_count":1423,"split_key":137899,"timestamp":"2026-06-22T06:00:00.000Z"} +{"doc_count":888,"split_key":51396,"timestamp":"2026-06-22T06:00:00.000Z"} +{"doc_count":841,"split_key":25369,"timestamp":"2026-06-22T06:00:00.000Z"} +{"doc_count":8891,"split_key":209334,"timestamp":"2026-06-22T07:00:00.000Z"} +{"doc_count":8520,"split_key":211590,"timestamp":"2026-06-22T07:00:00.000Z"} +{"doc_count":1623,"split_key":14061,"timestamp":"2026-06-22T07:00:00.000Z"} +{"doc_count":1286,"split_key":37963,"timestamp":"2026-06-22T07:00:00.000Z"} +{"doc_count":1149,"split_key":141995,"timestamp":"2026-06-22T07:00:00.000Z"} +{"doc_count":13092,"split_key":209334,"timestamp":"2026-06-22T08:00:00.000Z"} +{"doc_count":11882,"split_key":211590,"timestamp":"2026-06-22T08:00:00.000Z"} +{"doc_count":1371,"split_key":14061,"timestamp":"2026-06-22T08:00:00.000Z"} +{"doc_count":1268,"split_key":37963,"timestamp":"2026-06-22T08:00:00.000Z"} +{"doc_count":784,"split_key":141995,"timestamp":"2026-06-22T08:00:00.000Z"} +{"doc_count":9022,"split_key":209334,"timestamp":"2026-06-22T09:00:00.000Z"} +{"doc_count":8556,"split_key":211590,"timestamp":"2026-06-22T09:00:00.000Z"} +{"doc_count":1565,"split_key":14061,"timestamp":"2026-06-22T09:00:00.000Z"} +{"doc_count":1506,"split_key":37963,"timestamp":"2026-06-22T09:00:00.000Z"} +{"doc_count":971,"split_key":8400,"timestamp":"2026-06-22T09:00:00.000Z"} +{"doc_count":7605,"split_key":211590,"timestamp":"2026-06-22T10:00:00.000Z"} +{"doc_count":1441,"split_key":14061,"timestamp":"2026-06-22T10:00:00.000Z"} +{"doc_count":1279,"split_key":37963,"timestamp":"2026-06-22T10:00:00.000Z"} +{"doc_count":1263,"split_key":8400,"timestamp":"2026-06-22T10:00:00.000Z"} +{"doc_count":645,"split_key":51396,"timestamp":"2026-06-22T10:00:00.000Z"} +{"doc_count":1555,"split_key":14061,"timestamp":"2026-06-22T11:00:00.000Z"} +{"doc_count":1361,"split_key":37963,"timestamp":"2026-06-22T11:00:00.000Z"} +{"doc_count":1047,"split_key":8400,"timestamp":"2026-06-22T11:00:00.000Z"} +{"doc_count":621,"split_key":12389,"timestamp":"2026-06-22T11:00:00.000Z"} +{"doc_count":590,"split_key":135392,"timestamp":"2026-06-22T11:00:00.000Z"} +{"doc_count":42851,"split_key":209334,"timestamp":"2026-06-22T12:00:00.000Z"} +{"doc_count":1404,"split_key":14061,"timestamp":"2026-06-22T12:00:00.000Z"} +{"doc_count":1118,"split_key":201401,"timestamp":"2026-06-22T12:00:00.000Z"} +{"doc_count":685,"split_key":12389,"timestamp":"2026-06-22T12:00:00.000Z"} +{"doc_count":595,"split_key":8400,"timestamp":"2026-06-22T12:00:00.000Z"} +{"doc_count":36488,"split_key":209334,"timestamp":"2026-06-22T13:00:00.000Z"} +{"doc_count":1577,"split_key":14061,"timestamp":"2026-06-22T13:00:00.000Z"} +{"doc_count":1466,"split_key":201401,"timestamp":"2026-06-22T13:00:00.000Z"} +{"doc_count":706,"split_key":12389,"timestamp":"2026-06-22T13:00:00.000Z"} +{"doc_count":634,"split_key":51167,"timestamp":"2026-06-22T13:00:00.000Z"} +{"doc_count":18816,"split_key":209334,"timestamp":"2026-06-22T14:00:00.000Z"} +{"doc_count":1317,"split_key":14061,"timestamp":"2026-06-22T14:00:00.000Z"} +{"doc_count":777,"split_key":12389,"timestamp":"2026-06-22T14:00:00.000Z"} +{"doc_count":720,"split_key":398101,"timestamp":"2026-06-22T14:00:00.000Z"} +{"doc_count":636,"split_key":8400,"timestamp":"2026-06-22T14:00:00.000Z"} +{"doc_count":2408,"split_key":137899,"timestamp":"2026-06-22T15:00:00.000Z"} +{"doc_count":1351,"split_key":14061,"timestamp":"2026-06-22T15:00:00.000Z"} +{"doc_count":649,"split_key":8400,"timestamp":"2026-06-22T15:00:00.000Z"} +{"doc_count":649,"split_key":16509,"timestamp":"2026-06-22T15:00:00.000Z"} +{"doc_count":615,"split_key":209334,"timestamp":"2026-06-22T15:00:00.000Z"} +{"doc_count":2140,"split_key":45102,"timestamp":"2026-06-22T16:00:00.000Z"} +{"doc_count":2015,"split_key":14061,"timestamp":"2026-06-22T16:00:00.000Z"} +{"doc_count":1290,"split_key":51396,"timestamp":"2026-06-22T16:00:00.000Z"} +{"doc_count":695,"split_key":8400,"timestamp":"2026-06-22T16:00:00.000Z"} +{"doc_count":580,"split_key":16509,"timestamp":"2026-06-22T16:00:00.000Z"} +{"doc_count":2270,"split_key":14061,"timestamp":"2026-06-22T17:00:00.000Z"} +{"doc_count":817,"split_key":51396,"timestamp":"2026-06-22T17:00:00.000Z"} +{"doc_count":621,"split_key":37963,"timestamp":"2026-06-22T17:00:00.000Z"} +{"doc_count":487,"split_key":396982,"timestamp":"2026-06-22T17:00:00.000Z"} +{"doc_count":412,"split_key":138915,"timestamp":"2026-06-22T17:00:00.000Z"} +{"doc_count":88032,"split_key":14061,"timestamp":"2026-06-22T18:00:00.000Z"} +{"doc_count":19185,"split_key":209334,"timestamp":"2026-06-22T18:00:00.000Z"} +{"doc_count":773,"split_key":37963,"timestamp":"2026-06-22T18:00:00.000Z"} +{"doc_count":679,"split_key":396982,"timestamp":"2026-06-22T18:00:00.000Z"} +{"doc_count":593,"split_key":201401,"timestamp":"2026-06-22T18:00:00.000Z"} +{"doc_count":31433,"split_key":209334,"timestamp":"2026-06-22T19:00:00.000Z"} +{"doc_count":18993,"split_key":14061,"timestamp":"2026-06-22T19:00:00.000Z"} +{"doc_count":2011,"split_key":40676,"timestamp":"2026-06-22T19:00:00.000Z"} +{"doc_count":856,"split_key":201401,"timestamp":"2026-06-22T19:00:00.000Z"} +{"doc_count":441,"split_key":138915,"timestamp":"2026-06-22T19:00:00.000Z"} +{"doc_count":59980,"split_key":209334,"timestamp":"2026-06-22T20:00:00.000Z"} +{"doc_count":1903,"split_key":14061,"timestamp":"2026-06-22T20:00:00.000Z"} +{"doc_count":1729,"split_key":40676,"timestamp":"2026-06-22T20:00:00.000Z"} +{"doc_count":1278,"split_key":201401,"timestamp":"2026-06-22T20:00:00.000Z"} +{"doc_count":682,"split_key":37963,"timestamp":"2026-06-22T20:00:00.000Z"} +{"doc_count":2188,"split_key":14061,"timestamp":"2026-06-22T21:00:00.000Z"} +{"doc_count":2181,"split_key":211590,"timestamp":"2026-06-22T21:00:00.000Z"} +{"doc_count":923,"split_key":396982,"timestamp":"2026-06-22T21:00:00.000Z"} +{"doc_count":781,"split_key":37963,"timestamp":"2026-06-22T21:00:00.000Z"} +{"doc_count":502,"split_key":141995,"timestamp":"2026-06-22T21:00:00.000Z"} +{"doc_count":12563,"split_key":211590,"timestamp":"2026-06-22T22:00:00.000Z"} +{"doc_count":2258,"split_key":14061,"timestamp":"2026-06-22T22:00:00.000Z"} +{"doc_count":932,"split_key":141995,"timestamp":"2026-06-22T22:00:00.000Z"} +{"doc_count":824,"split_key":396982,"timestamp":"2026-06-22T22:00:00.000Z"} +{"doc_count":810,"split_key":51396,"timestamp":"2026-06-22T22:00:00.000Z"} +{"doc_count":6659,"split_key":211590,"timestamp":"2026-06-22T23:00:00.000Z"} +{"doc_count":2971,"split_key":45102,"timestamp":"2026-06-22T23:00:00.000Z"} +{"doc_count":2310,"split_key":14061,"timestamp":"2026-06-22T23:00:00.000Z"} +{"doc_count":1100,"split_key":137899,"timestamp":"2026-06-22T23:00:00.000Z"} +{"doc_count":719,"split_key":14618,"timestamp":"2026-06-22T23:00:00.000Z"} +{"doc_count":10006,"split_key":14987,"timestamp":"2026-06-23T00:00:00.000Z"} +{"doc_count":4079,"split_key":45102,"timestamp":"2026-06-23T00:00:00.000Z"} +{"doc_count":1457,"split_key":14061,"timestamp":"2026-06-23T00:00:00.000Z"} +{"doc_count":487,"split_key":396982,"timestamp":"2026-06-23T00:00:00.000Z"} +{"doc_count":479,"split_key":138915,"timestamp":"2026-06-23T00:00:00.000Z"} +{"doc_count":3113,"split_key":211590,"timestamp":"2026-06-23T01:00:00.000Z"} +{"doc_count":1476,"split_key":14061,"timestamp":"2026-06-23T01:00:00.000Z"} +{"doc_count":1409,"split_key":45102,"timestamp":"2026-06-23T01:00:00.000Z"} +{"doc_count":727,"split_key":396982,"timestamp":"2026-06-23T01:00:00.000Z"} +{"doc_count":478,"split_key":138915,"timestamp":"2026-06-23T01:00:00.000Z"} +{"doc_count":6257,"split_key":14061,"timestamp":"2026-06-23T02:00:00.000Z"} +{"doc_count":826,"split_key":45090,"timestamp":"2026-06-23T02:00:00.000Z"} +{"doc_count":771,"split_key":45102,"timestamp":"2026-06-23T02:00:00.000Z"} +{"doc_count":490,"split_key":138915,"timestamp":"2026-06-23T02:00:00.000Z"} +{"doc_count":442,"split_key":396982,"timestamp":"2026-06-23T02:00:00.000Z"} +{"doc_count":28915,"split_key":14061,"timestamp":"2026-06-23T03:00:00.000Z"} +{"doc_count":609,"split_key":138915,"timestamp":"2026-06-23T03:00:00.000Z"} +{"doc_count":520,"split_key":209413,"timestamp":"2026-06-23T03:00:00.000Z"} +{"doc_count":481,"split_key":51396,"timestamp":"2026-06-23T03:00:00.000Z"} +{"doc_count":475,"split_key":396982,"timestamp":"2026-06-23T03:00:00.000Z"} +{"doc_count":27882,"split_key":14061,"timestamp":"2026-06-23T04:00:00.000Z"} +{"doc_count":7285,"split_key":211590,"timestamp":"2026-06-23T04:00:00.000Z"} +{"doc_count":1338,"split_key":25369,"timestamp":"2026-06-23T04:00:00.000Z"} +{"doc_count":641,"split_key":16509,"timestamp":"2026-06-23T04:00:00.000Z"} +{"doc_count":523,"split_key":138915,"timestamp":"2026-06-23T04:00:00.000Z"} +{"doc_count":4732,"split_key":211590,"timestamp":"2026-06-23T05:00:00.000Z"} +{"doc_count":2568,"split_key":14061,"timestamp":"2026-06-23T05:00:00.000Z"} +{"doc_count":1224,"split_key":51396,"timestamp":"2026-06-23T05:00:00.000Z"} +{"doc_count":1140,"split_key":25369,"timestamp":"2026-06-23T05:00:00.000Z"} +{"doc_count":487,"split_key":138915,"timestamp":"2026-06-23T05:00:00.000Z"} +{"doc_count":5574,"split_key":209334,"timestamp":"2026-06-23T06:00:00.000Z"} +{"doc_count":1402,"split_key":14061,"timestamp":"2026-06-23T06:00:00.000Z"} +{"doc_count":809,"split_key":25369,"timestamp":"2026-06-23T06:00:00.000Z"} +{"doc_count":711,"split_key":16509,"timestamp":"2026-06-23T06:00:00.000Z"} +{"doc_count":570,"split_key":37963,"timestamp":"2026-06-23T06:00:00.000Z"} +{"doc_count":9576,"split_key":209334,"timestamp":"2026-06-23T07:00:00.000Z"} +{"doc_count":2006,"split_key":45102,"timestamp":"2026-06-23T07:00:00.000Z"} +{"doc_count":1204,"split_key":14061,"timestamp":"2026-06-23T07:00:00.000Z"} +{"doc_count":960,"split_key":396982,"timestamp":"2026-06-23T07:00:00.000Z"} +{"doc_count":916,"split_key":16509,"timestamp":"2026-06-23T07:00:00.000Z"} +{"doc_count":10509,"split_key":209334,"timestamp":"2026-06-23T08:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-06-23T08:00:00.000Z"} +{"doc_count":1433,"split_key":14061,"timestamp":"2026-06-23T08:00:00.000Z"} +{"doc_count":1406,"split_key":137899,"timestamp":"2026-06-23T08:00:00.000Z"} +{"doc_count":1090,"split_key":16509,"timestamp":"2026-06-23T08:00:00.000Z"} +{"doc_count":16111,"split_key":209334,"timestamp":"2026-06-23T09:00:00.000Z"} +{"doc_count":1355,"split_key":14061,"timestamp":"2026-06-23T09:00:00.000Z"} +{"doc_count":1261,"split_key":51396,"timestamp":"2026-06-23T09:00:00.000Z"} +{"doc_count":897,"split_key":37963,"timestamp":"2026-06-23T09:00:00.000Z"} +{"doc_count":767,"split_key":201401,"timestamp":"2026-06-23T09:00:00.000Z"} +{"doc_count":1418,"split_key":14061,"timestamp":"2026-06-23T10:00:00.000Z"} +{"doc_count":1165,"split_key":396982,"timestamp":"2026-06-23T10:00:00.000Z"} +{"doc_count":846,"split_key":37963,"timestamp":"2026-06-23T10:00:00.000Z"} +{"doc_count":844,"split_key":51396,"timestamp":"2026-06-23T10:00:00.000Z"} +{"doc_count":681,"split_key":16509,"timestamp":"2026-06-23T10:00:00.000Z"} +{"doc_count":7447,"split_key":211590,"timestamp":"2026-06-23T11:00:00.000Z"} +{"doc_count":5103,"split_key":209334,"timestamp":"2026-06-23T11:00:00.000Z"} +{"doc_count":1257,"split_key":141995,"timestamp":"2026-06-23T11:00:00.000Z"} +{"doc_count":1247,"split_key":14061,"timestamp":"2026-06-23T11:00:00.000Z"} +{"doc_count":1097,"split_key":51396,"timestamp":"2026-06-23T11:00:00.000Z"} +{"doc_count":19443,"split_key":209334,"timestamp":"2026-06-23T12:00:00.000Z"} +{"doc_count":6705,"split_key":211590,"timestamp":"2026-06-23T12:00:00.000Z"} +{"doc_count":1276,"split_key":14061,"timestamp":"2026-06-23T12:00:00.000Z"} +{"doc_count":1074,"split_key":141995,"timestamp":"2026-06-23T12:00:00.000Z"} +{"doc_count":815,"split_key":51396,"timestamp":"2026-06-23T12:00:00.000Z"} +{"doc_count":56357,"split_key":209334,"timestamp":"2026-06-23T13:00:00.000Z"} +{"doc_count":8621,"split_key":211590,"timestamp":"2026-06-23T13:00:00.000Z"} +{"doc_count":1771,"split_key":201401,"timestamp":"2026-06-23T13:00:00.000Z"} +{"doc_count":1454,"split_key":37963,"timestamp":"2026-06-23T13:00:00.000Z"} +{"doc_count":1329,"split_key":141995,"timestamp":"2026-06-23T13:00:00.000Z"} +{"doc_count":20285,"split_key":209334,"timestamp":"2026-06-23T14:00:00.000Z"} +{"doc_count":1532,"split_key":37963,"timestamp":"2026-06-23T14:00:00.000Z"} +{"doc_count":1252,"split_key":14061,"timestamp":"2026-06-23T14:00:00.000Z"} +{"doc_count":981,"split_key":51396,"timestamp":"2026-06-23T14:00:00.000Z"} +{"doc_count":710,"split_key":16509,"timestamp":"2026-06-23T14:00:00.000Z"} +{"doc_count":1551,"split_key":37963,"timestamp":"2026-06-23T15:00:00.000Z"} +{"doc_count":1159,"split_key":14061,"timestamp":"2026-06-23T15:00:00.000Z"} +{"doc_count":1036,"split_key":16509,"timestamp":"2026-06-23T15:00:00.000Z"} +{"doc_count":593,"split_key":142403,"timestamp":"2026-06-23T15:00:00.000Z"} +{"doc_count":520,"split_key":14618,"timestamp":"2026-06-23T15:00:00.000Z"} +{"doc_count":682,"split_key":16509,"timestamp":"2026-06-23T16:00:00.000Z"} +{"doc_count":650,"split_key":14061,"timestamp":"2026-06-23T16:00:00.000Z"} +{"doc_count":584,"split_key":398101,"timestamp":"2026-06-23T16:00:00.000Z"} +{"doc_count":515,"split_key":138915,"timestamp":"2026-06-23T16:00:00.000Z"} +{"doc_count":414,"split_key":51396,"timestamp":"2026-06-23T16:00:00.000Z"} +{"doc_count":5601,"split_key":201814,"timestamp":"2026-06-23T17:00:00.000Z"} +{"doc_count":3094,"split_key":211590,"timestamp":"2026-06-23T17:00:00.000Z"} +{"doc_count":1417,"split_key":137899,"timestamp":"2026-06-23T17:00:00.000Z"} +{"doc_count":788,"split_key":396982,"timestamp":"2026-06-23T17:00:00.000Z"} +{"doc_count":654,"split_key":141995,"timestamp":"2026-06-23T17:00:00.000Z"} +{"doc_count":19543,"split_key":209334,"timestamp":"2026-06-23T18:00:00.000Z"} +{"doc_count":7456,"split_key":201814,"timestamp":"2026-06-23T18:00:00.000Z"} +{"doc_count":1632,"split_key":211590,"timestamp":"2026-06-23T18:00:00.000Z"} +{"doc_count":731,"split_key":16509,"timestamp":"2026-06-23T18:00:00.000Z"} +{"doc_count":509,"split_key":201401,"timestamp":"2026-06-23T18:00:00.000Z"} +{"doc_count":31568,"split_key":209334,"timestamp":"2026-06-23T19:00:00.000Z"} +{"doc_count":7414,"split_key":201814,"timestamp":"2026-06-23T19:00:00.000Z"} +{"doc_count":1627,"split_key":211590,"timestamp":"2026-06-23T19:00:00.000Z"} +{"doc_count":1006,"split_key":201401,"timestamp":"2026-06-23T19:00:00.000Z"} +{"doc_count":618,"split_key":16509,"timestamp":"2026-06-23T19:00:00.000Z"} +{"doc_count":49351,"split_key":209334,"timestamp":"2026-06-23T20:00:00.000Z"} +{"doc_count":7381,"split_key":201814,"timestamp":"2026-06-23T20:00:00.000Z"} +{"doc_count":1448,"split_key":201401,"timestamp":"2026-06-23T20:00:00.000Z"} +{"doc_count":641,"split_key":51396,"timestamp":"2026-06-23T20:00:00.000Z"} +{"doc_count":602,"split_key":16509,"timestamp":"2026-06-23T20:00:00.000Z"} +{"doc_count":11428,"split_key":209334,"timestamp":"2026-06-23T21:00:00.000Z"} +{"doc_count":7350,"split_key":201814,"timestamp":"2026-06-23T21:00:00.000Z"} +{"doc_count":826,"split_key":396982,"timestamp":"2026-06-23T21:00:00.000Z"} +{"doc_count":797,"split_key":201401,"timestamp":"2026-06-23T21:00:00.000Z"} +{"doc_count":493,"split_key":138915,"timestamp":"2026-06-23T21:00:00.000Z"} +{"doc_count":7314,"split_key":201814,"timestamp":"2026-06-23T22:00:00.000Z"} +{"doc_count":5184,"split_key":211590,"timestamp":"2026-06-23T22:00:00.000Z"} +{"doc_count":874,"split_key":141995,"timestamp":"2026-06-23T22:00:00.000Z"} +{"doc_count":824,"split_key":37963,"timestamp":"2026-06-23T22:00:00.000Z"} +{"doc_count":668,"split_key":51396,"timestamp":"2026-06-23T22:00:00.000Z"} +{"doc_count":7322,"split_key":201814,"timestamp":"2026-06-23T23:00:00.000Z"} +{"doc_count":7288,"split_key":211590,"timestamp":"2026-06-23T23:00:00.000Z"} +{"doc_count":1654,"split_key":37963,"timestamp":"2026-06-23T23:00:00.000Z"} +{"doc_count":1000,"split_key":141995,"timestamp":"2026-06-23T23:00:00.000Z"} +{"doc_count":829,"split_key":51396,"timestamp":"2026-06-23T23:00:00.000Z"} +{"doc_count":10012,"split_key":14987,"timestamp":"2026-06-24T00:00:00.000Z"} +{"doc_count":7309,"split_key":201814,"timestamp":"2026-06-24T00:00:00.000Z"} +{"doc_count":2036,"split_key":45102,"timestamp":"2026-06-24T00:00:00.000Z"} +{"doc_count":1740,"split_key":37963,"timestamp":"2026-06-24T00:00:00.000Z"} +{"doc_count":1320,"split_key":51396,"timestamp":"2026-06-24T00:00:00.000Z"} +{"doc_count":7319,"split_key":201814,"timestamp":"2026-06-24T01:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-06-24T01:00:00.000Z"} +{"doc_count":1464,"split_key":37963,"timestamp":"2026-06-24T01:00:00.000Z"} +{"doc_count":1411,"split_key":45102,"timestamp":"2026-06-24T01:00:00.000Z"} +{"doc_count":872,"split_key":396982,"timestamp":"2026-06-24T01:00:00.000Z"} +{"doc_count":7317,"split_key":201814,"timestamp":"2026-06-24T02:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-24T02:00:00.000Z"} +{"doc_count":1412,"split_key":137899,"timestamp":"2026-06-24T02:00:00.000Z"} +{"doc_count":1106,"split_key":45102,"timestamp":"2026-06-24T02:00:00.000Z"} +{"doc_count":667,"split_key":396982,"timestamp":"2026-06-24T02:00:00.000Z"} +{"doc_count":7302,"split_key":201814,"timestamp":"2026-06-24T03:00:00.000Z"} +{"doc_count":3063,"split_key":211590,"timestamp":"2026-06-24T03:00:00.000Z"} +{"doc_count":1060,"split_key":45102,"timestamp":"2026-06-24T03:00:00.000Z"} +{"doc_count":963,"split_key":51396,"timestamp":"2026-06-24T03:00:00.000Z"} +{"doc_count":731,"split_key":396982,"timestamp":"2026-06-24T03:00:00.000Z"} +{"doc_count":11013,"split_key":211590,"timestamp":"2026-06-24T04:00:00.000Z"} +{"doc_count":7300,"split_key":201814,"timestamp":"2026-06-24T04:00:00.000Z"} +{"doc_count":1348,"split_key":25369,"timestamp":"2026-06-24T04:00:00.000Z"} +{"doc_count":1280,"split_key":51396,"timestamp":"2026-06-24T04:00:00.000Z"} +{"doc_count":1254,"split_key":37963,"timestamp":"2026-06-24T04:00:00.000Z"} +{"doc_count":7963,"split_key":211590,"timestamp":"2026-06-24T05:00:00.000Z"} +{"doc_count":7267,"split_key":201814,"timestamp":"2026-06-24T05:00:00.000Z"} +{"doc_count":1447,"split_key":37963,"timestamp":"2026-06-24T05:00:00.000Z"} +{"doc_count":1098,"split_key":25369,"timestamp":"2026-06-24T05:00:00.000Z"} +{"doc_count":1054,"split_key":45102,"timestamp":"2026-06-24T05:00:00.000Z"} +{"doc_count":7276,"split_key":201814,"timestamp":"2026-06-24T06:00:00.000Z"} +{"doc_count":4801,"split_key":209334,"timestamp":"2026-06-24T06:00:00.000Z"} +{"doc_count":1673,"split_key":45102,"timestamp":"2026-06-24T06:00:00.000Z"} +{"doc_count":1606,"split_key":37963,"timestamp":"2026-06-24T06:00:00.000Z"} +{"doc_count":919,"split_key":25369,"timestamp":"2026-06-24T06:00:00.000Z"} +{"doc_count":10234,"split_key":209334,"timestamp":"2026-06-24T07:00:00.000Z"} +{"doc_count":7301,"split_key":201814,"timestamp":"2026-06-24T07:00:00.000Z"} +{"doc_count":1948,"split_key":45102,"timestamp":"2026-06-24T07:00:00.000Z"} +{"doc_count":1654,"split_key":37963,"timestamp":"2026-06-24T07:00:00.000Z"} +{"doc_count":709,"split_key":12389,"timestamp":"2026-06-24T07:00:00.000Z"} +{"doc_count":10941,"split_key":209334,"timestamp":"2026-06-24T08:00:00.000Z"} +{"doc_count":7284,"split_key":201814,"timestamp":"2026-06-24T08:00:00.000Z"} +{"doc_count":1930,"split_key":45102,"timestamp":"2026-06-24T08:00:00.000Z"} +{"doc_count":874,"split_key":37642,"timestamp":"2026-06-24T08:00:00.000Z"} +{"doc_count":742,"split_key":12389,"timestamp":"2026-06-24T08:00:00.000Z"} +{"doc_count":16111,"split_key":209334,"timestamp":"2026-06-24T09:00:00.000Z"} +{"doc_count":7289,"split_key":201814,"timestamp":"2026-06-24T09:00:00.000Z"} +{"doc_count":1634,"split_key":45102,"timestamp":"2026-06-24T09:00:00.000Z"} +{"doc_count":933,"split_key":51396,"timestamp":"2026-06-24T09:00:00.000Z"} +{"doc_count":764,"split_key":37642,"timestamp":"2026-06-24T09:00:00.000Z"} +{"doc_count":7275,"split_key":201814,"timestamp":"2026-06-24T10:00:00.000Z"} +{"doc_count":1065,"split_key":45102,"timestamp":"2026-06-24T10:00:00.000Z"} +{"doc_count":775,"split_key":37642,"timestamp":"2026-06-24T10:00:00.000Z"} +{"doc_count":626,"split_key":51396,"timestamp":"2026-06-24T10:00:00.000Z"} +{"doc_count":520,"split_key":138915,"timestamp":"2026-06-24T10:00:00.000Z"} +{"doc_count":5008,"split_key":209334,"timestamp":"2026-06-24T11:00:00.000Z"} +{"doc_count":2274,"split_key":45102,"timestamp":"2026-06-24T11:00:00.000Z"} +{"doc_count":1412,"split_key":137899,"timestamp":"2026-06-24T11:00:00.000Z"} +{"doc_count":1279,"split_key":51396,"timestamp":"2026-06-24T11:00:00.000Z"} +{"doc_count":748,"split_key":16509,"timestamp":"2026-06-24T11:00:00.000Z"} +{"doc_count":16479,"split_key":209334,"timestamp":"2026-06-24T12:00:00.000Z"} +{"doc_count":1721,"split_key":51396,"timestamp":"2026-06-24T12:00:00.000Z"} +{"doc_count":1618,"split_key":45102,"timestamp":"2026-06-24T12:00:00.000Z"} +{"doc_count":682,"split_key":201401,"timestamp":"2026-06-24T12:00:00.000Z"} +{"doc_count":633,"split_key":16509,"timestamp":"2026-06-24T12:00:00.000Z"} +{"doc_count":60838,"split_key":209334,"timestamp":"2026-06-24T13:00:00.000Z"} +{"doc_count":6878,"split_key":211590,"timestamp":"2026-06-24T13:00:00.000Z"} +{"doc_count":1770,"split_key":201401,"timestamp":"2026-06-24T13:00:00.000Z"} +{"doc_count":796,"split_key":141995,"timestamp":"2026-06-24T13:00:00.000Z"} +{"doc_count":794,"split_key":45102,"timestamp":"2026-06-24T13:00:00.000Z"} +{"doc_count":21002,"split_key":209334,"timestamp":"2026-06-24T14:00:00.000Z"} +{"doc_count":7771,"split_key":211590,"timestamp":"2026-06-24T14:00:00.000Z"} +{"doc_count":1314,"split_key":141995,"timestamp":"2026-06-24T14:00:00.000Z"} +{"doc_count":895,"split_key":51396,"timestamp":"2026-06-24T14:00:00.000Z"} +{"doc_count":864,"split_key":45102,"timestamp":"2026-06-24T14:00:00.000Z"} +{"doc_count":1383,"split_key":201814,"timestamp":"2026-06-24T15:00:00.000Z"} +{"doc_count":795,"split_key":45102,"timestamp":"2026-06-24T15:00:00.000Z"} +{"doc_count":512,"split_key":16509,"timestamp":"2026-06-24T15:00:00.000Z"} +{"doc_count":512,"split_key":138915,"timestamp":"2026-06-24T15:00:00.000Z"} +{"doc_count":474,"split_key":37963,"timestamp":"2026-06-24T15:00:00.000Z"} +{"doc_count":7250,"split_key":201814,"timestamp":"2026-06-24T16:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-24T16:00:00.000Z"} +{"doc_count":1586,"split_key":45102,"timestamp":"2026-06-24T16:00:00.000Z"} +{"doc_count":642,"split_key":51396,"timestamp":"2026-06-24T16:00:00.000Z"} +{"doc_count":591,"split_key":215762,"timestamp":"2026-06-24T16:00:00.000Z"} +{"doc_count":7239,"split_key":201814,"timestamp":"2026-06-24T17:00:00.000Z"} +{"doc_count":1609,"split_key":45102,"timestamp":"2026-06-24T17:00:00.000Z"} +{"doc_count":704,"split_key":16509,"timestamp":"2026-06-24T17:00:00.000Z"} +{"doc_count":634,"split_key":396982,"timestamp":"2026-06-24T17:00:00.000Z"} +{"doc_count":582,"split_key":4134,"timestamp":"2026-06-24T17:00:00.000Z"} +{"doc_count":19031,"split_key":209334,"timestamp":"2026-06-24T18:00:00.000Z"} +{"doc_count":3664,"split_key":201814,"timestamp":"2026-06-24T18:00:00.000Z"} +{"doc_count":1578,"split_key":45102,"timestamp":"2026-06-24T18:00:00.000Z"} +{"doc_count":719,"split_key":4134,"timestamp":"2026-06-24T18:00:00.000Z"} +{"doc_count":624,"split_key":201401,"timestamp":"2026-06-24T18:00:00.000Z"} +{"doc_count":40090,"split_key":14061,"timestamp":"2026-06-24T19:00:00.000Z"} +{"doc_count":30837,"split_key":209334,"timestamp":"2026-06-24T19:00:00.000Z"} +{"doc_count":3958,"split_key":211590,"timestamp":"2026-06-24T19:00:00.000Z"} +{"doc_count":3876,"split_key":45102,"timestamp":"2026-06-24T19:00:00.000Z"} +{"doc_count":1019,"split_key":201401,"timestamp":"2026-06-24T19:00:00.000Z"} +{"doc_count":48133,"split_key":209334,"timestamp":"2026-06-24T20:00:00.000Z"} +{"doc_count":4573,"split_key":31898,"timestamp":"2026-06-24T20:00:00.000Z"} +{"doc_count":4018,"split_key":211590,"timestamp":"2026-06-24T20:00:00.000Z"} +{"doc_count":1649,"split_key":45102,"timestamp":"2026-06-24T20:00:00.000Z"} +{"doc_count":1427,"split_key":137899,"timestamp":"2026-06-24T20:00:00.000Z"} +{"doc_count":11633,"split_key":209334,"timestamp":"2026-06-24T21:00:00.000Z"} +{"doc_count":5071,"split_key":211590,"timestamp":"2026-06-24T21:00:00.000Z"} +{"doc_count":1571,"split_key":45102,"timestamp":"2026-06-24T21:00:00.000Z"} +{"doc_count":727,"split_key":14061,"timestamp":"2026-06-24T21:00:00.000Z"} +{"doc_count":625,"split_key":37963,"timestamp":"2026-06-24T21:00:00.000Z"} +{"doc_count":6060,"split_key":211590,"timestamp":"2026-06-24T22:00:00.000Z"} +{"doc_count":2427,"split_key":31898,"timestamp":"2026-06-24T22:00:00.000Z"} +{"doc_count":1581,"split_key":45102,"timestamp":"2026-06-24T22:00:00.000Z"} +{"doc_count":1351,"split_key":24940,"timestamp":"2026-06-24T22:00:00.000Z"} +{"doc_count":668,"split_key":14061,"timestamp":"2026-06-24T22:00:00.000Z"} +{"doc_count":3993,"split_key":24940,"timestamp":"2026-06-24T23:00:00.000Z"} +{"doc_count":898,"split_key":45102,"timestamp":"2026-06-24T23:00:00.000Z"} +{"doc_count":746,"split_key":14061,"timestamp":"2026-06-24T23:00:00.000Z"} +{"doc_count":636,"split_key":4134,"timestamp":"2026-06-24T23:00:00.000Z"} +{"doc_count":620,"split_key":37963,"timestamp":"2026-06-24T23:00:00.000Z"} +{"doc_count":12038,"split_key":14987,"timestamp":"2026-06-25T00:00:00.000Z"} +{"doc_count":3983,"split_key":24940,"timestamp":"2026-06-25T00:00:00.000Z"} +{"doc_count":916,"split_key":45102,"timestamp":"2026-06-25T00:00:00.000Z"} +{"doc_count":915,"split_key":14061,"timestamp":"2026-06-25T00:00:00.000Z"} +{"doc_count":635,"split_key":396982,"timestamp":"2026-06-25T00:00:00.000Z"} +{"doc_count":3992,"split_key":24940,"timestamp":"2026-06-25T01:00:00.000Z"} +{"doc_count":1118,"split_key":45102,"timestamp":"2026-06-25T01:00:00.000Z"} +{"doc_count":905,"split_key":14061,"timestamp":"2026-06-25T01:00:00.000Z"} +{"doc_count":797,"split_key":396982,"timestamp":"2026-06-25T01:00:00.000Z"} +{"doc_count":571,"split_key":4134,"timestamp":"2026-06-25T01:00:00.000Z"} +{"doc_count":3962,"split_key":24940,"timestamp":"2026-06-25T02:00:00.000Z"} +{"doc_count":1023,"split_key":396982,"timestamp":"2026-06-25T02:00:00.000Z"} +{"doc_count":924,"split_key":45102,"timestamp":"2026-06-25T02:00:00.000Z"} +{"doc_count":847,"split_key":51396,"timestamp":"2026-06-25T02:00:00.000Z"} +{"doc_count":814,"split_key":14061,"timestamp":"2026-06-25T02:00:00.000Z"} +{"doc_count":6706,"split_key":211590,"timestamp":"2026-06-25T03:00:00.000Z"} +{"doc_count":3961,"split_key":24940,"timestamp":"2026-06-25T03:00:00.000Z"} +{"doc_count":2406,"split_key":31898,"timestamp":"2026-06-25T03:00:00.000Z"} +{"doc_count":1179,"split_key":14061,"timestamp":"2026-06-25T03:00:00.000Z"} +{"doc_count":921,"split_key":45102,"timestamp":"2026-06-25T03:00:00.000Z"} +{"doc_count":4403,"split_key":211590,"timestamp":"2026-06-25T04:00:00.000Z"} +{"doc_count":3891,"split_key":24940,"timestamp":"2026-06-25T04:00:00.000Z"} +{"doc_count":1080,"split_key":25369,"timestamp":"2026-06-25T04:00:00.000Z"} +{"doc_count":947,"split_key":45102,"timestamp":"2026-06-25T04:00:00.000Z"} +{"doc_count":671,"split_key":14061,"timestamp":"2026-06-25T04:00:00.000Z"} +{"doc_count":3881,"split_key":24940,"timestamp":"2026-06-25T05:00:00.000Z"} +{"doc_count":1407,"split_key":137899,"timestamp":"2026-06-25T05:00:00.000Z"} +{"doc_count":1138,"split_key":25369,"timestamp":"2026-06-25T05:00:00.000Z"} +{"doc_count":961,"split_key":396982,"timestamp":"2026-06-25T05:00:00.000Z"} +{"doc_count":938,"split_key":45102,"timestamp":"2026-06-25T05:00:00.000Z"} +{"doc_count":10485,"split_key":211590,"timestamp":"2026-06-25T06:00:00.000Z"} +{"doc_count":4883,"split_key":209334,"timestamp":"2026-06-25T06:00:00.000Z"} +{"doc_count":3889,"split_key":24940,"timestamp":"2026-06-25T06:00:00.000Z"} +{"doc_count":1630,"split_key":14061,"timestamp":"2026-06-25T06:00:00.000Z"} +{"doc_count":897,"split_key":45102,"timestamp":"2026-06-25T06:00:00.000Z"} +{"doc_count":10354,"split_key":209334,"timestamp":"2026-06-25T07:00:00.000Z"} +{"doc_count":4634,"split_key":211590,"timestamp":"2026-06-25T07:00:00.000Z"} +{"doc_count":3892,"split_key":24940,"timestamp":"2026-06-25T07:00:00.000Z"} +{"doc_count":862,"split_key":45102,"timestamp":"2026-06-25T07:00:00.000Z"} +{"doc_count":740,"split_key":37963,"timestamp":"2026-06-25T07:00:00.000Z"} +{"doc_count":10348,"split_key":209334,"timestamp":"2026-06-25T08:00:00.000Z"} +{"doc_count":2380,"split_key":24940,"timestamp":"2026-06-25T08:00:00.000Z"} +{"doc_count":1084,"split_key":14061,"timestamp":"2026-06-25T08:00:00.000Z"} +{"doc_count":1012,"split_key":37963,"timestamp":"2026-06-25T08:00:00.000Z"} +{"doc_count":839,"split_key":45102,"timestamp":"2026-06-25T08:00:00.000Z"} +{"doc_count":15695,"split_key":209334,"timestamp":"2026-06-25T09:00:00.000Z"} +{"doc_count":3707,"split_key":24940,"timestamp":"2026-06-25T09:00:00.000Z"} +{"doc_count":3103,"split_key":211590,"timestamp":"2026-06-25T09:00:00.000Z"} +{"doc_count":1020,"split_key":37963,"timestamp":"2026-06-25T09:00:00.000Z"} +{"doc_count":918,"split_key":45102,"timestamp":"2026-06-25T09:00:00.000Z"} +{"doc_count":3750,"split_key":24940,"timestamp":"2026-06-25T10:00:00.000Z"} +{"doc_count":973,"split_key":45102,"timestamp":"2026-06-25T10:00:00.000Z"} +{"doc_count":595,"split_key":14061,"timestamp":"2026-06-25T10:00:00.000Z"} +{"doc_count":570,"split_key":4134,"timestamp":"2026-06-25T10:00:00.000Z"} +{"doc_count":569,"split_key":197540,"timestamp":"2026-06-25T10:00:00.000Z"} +{"doc_count":50355,"split_key":396982,"timestamp":"2026-06-25T11:00:00.000Z"} +{"doc_count":4689,"split_key":209334,"timestamp":"2026-06-25T11:00:00.000Z"} +{"doc_count":3705,"split_key":24940,"timestamp":"2026-06-25T11:00:00.000Z"} +{"doc_count":941,"split_key":45102,"timestamp":"2026-06-25T11:00:00.000Z"} +{"doc_count":721,"split_key":51396,"timestamp":"2026-06-25T11:00:00.000Z"} +{"doc_count":65787,"split_key":396982,"timestamp":"2026-06-25T12:00:00.000Z"} +{"doc_count":15129,"split_key":209334,"timestamp":"2026-06-25T12:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-25T12:00:00.000Z"} +{"doc_count":1598,"split_key":24940,"timestamp":"2026-06-25T12:00:00.000Z"} +{"doc_count":914,"split_key":45102,"timestamp":"2026-06-25T12:00:00.000Z"} +{"doc_count":62758,"split_key":396982,"timestamp":"2026-06-25T13:00:00.000Z"} +{"doc_count":55867,"split_key":209334,"timestamp":"2026-06-25T13:00:00.000Z"} +{"doc_count":1604,"split_key":201401,"timestamp":"2026-06-25T13:00:00.000Z"} +{"doc_count":1227,"split_key":137899,"timestamp":"2026-06-25T13:00:00.000Z"} +{"doc_count":901,"split_key":45102,"timestamp":"2026-06-25T13:00:00.000Z"} +{"doc_count":50968,"split_key":396982,"timestamp":"2026-06-25T14:00:00.000Z"} +{"doc_count":22710,"split_key":209334,"timestamp":"2026-06-25T14:00:00.000Z"} +{"doc_count":3713,"split_key":14061,"timestamp":"2026-06-25T14:00:00.000Z"} +{"doc_count":1319,"split_key":45102,"timestamp":"2026-06-25T14:00:00.000Z"} +{"doc_count":908,"split_key":51396,"timestamp":"2026-06-25T14:00:00.000Z"} +{"doc_count":58631,"split_key":396982,"timestamp":"2026-06-25T15:00:00.000Z"} +{"doc_count":2254,"split_key":14061,"timestamp":"2026-06-25T15:00:00.000Z"} +{"doc_count":1513,"split_key":45102,"timestamp":"2026-06-25T15:00:00.000Z"} +{"doc_count":588,"split_key":215762,"timestamp":"2026-06-25T15:00:00.000Z"} +{"doc_count":559,"split_key":4134,"timestamp":"2026-06-25T15:00:00.000Z"} +{"doc_count":47969,"split_key":396982,"timestamp":"2026-06-25T16:00:00.000Z"} +{"doc_count":777,"split_key":51167,"timestamp":"2026-06-25T16:00:00.000Z"} +{"doc_count":727,"split_key":45102,"timestamp":"2026-06-25T16:00:00.000Z"} +{"doc_count":561,"split_key":4134,"timestamp":"2026-06-25T16:00:00.000Z"} +{"doc_count":519,"split_key":138915,"timestamp":"2026-06-25T16:00:00.000Z"} +{"doc_count":49851,"split_key":396982,"timestamp":"2026-06-25T17:00:00.000Z"} +{"doc_count":647,"split_key":4134,"timestamp":"2026-06-25T17:00:00.000Z"} +{"doc_count":628,"split_key":51396,"timestamp":"2026-06-25T17:00:00.000Z"} +{"doc_count":603,"split_key":14061,"timestamp":"2026-06-25T17:00:00.000Z"} +{"doc_count":573,"split_key":138915,"timestamp":"2026-06-25T17:00:00.000Z"} +{"doc_count":57185,"split_key":396982,"timestamp":"2026-06-25T18:00:00.000Z"} +{"doc_count":19032,"split_key":209334,"timestamp":"2026-06-25T18:00:00.000Z"} +{"doc_count":1986,"split_key":37963,"timestamp":"2026-06-25T18:00:00.000Z"} +{"doc_count":938,"split_key":51396,"timestamp":"2026-06-25T18:00:00.000Z"} +{"doc_count":827,"split_key":4134,"timestamp":"2026-06-25T18:00:00.000Z"} +{"doc_count":32694,"split_key":396982,"timestamp":"2026-06-25T19:00:00.000Z"} +{"doc_count":31165,"split_key":209334,"timestamp":"2026-06-25T19:00:00.000Z"} +{"doc_count":926,"split_key":201401,"timestamp":"2026-06-25T19:00:00.000Z"} +{"doc_count":845,"split_key":4134,"timestamp":"2026-06-25T19:00:00.000Z"} +{"doc_count":640,"split_key":51396,"timestamp":"2026-06-25T19:00:00.000Z"} +{"doc_count":54071,"split_key":396982,"timestamp":"2026-06-25T20:00:00.000Z"} +{"doc_count":48211,"split_key":209334,"timestamp":"2026-06-25T20:00:00.000Z"} +{"doc_count":2521,"split_key":834,"timestamp":"2026-06-25T20:00:00.000Z"} +{"doc_count":1575,"split_key":201401,"timestamp":"2026-06-25T20:00:00.000Z"} +{"doc_count":1435,"split_key":37963,"timestamp":"2026-06-25T20:00:00.000Z"} +{"doc_count":11675,"split_key":209334,"timestamp":"2026-06-25T21:00:00.000Z"} +{"doc_count":5222,"split_key":396982,"timestamp":"2026-06-25T21:00:00.000Z"} +{"doc_count":2956,"split_key":834,"timestamp":"2026-06-25T21:00:00.000Z"} +{"doc_count":1894,"split_key":37963,"timestamp":"2026-06-25T21:00:00.000Z"} +{"doc_count":1354,"split_key":137899,"timestamp":"2026-06-25T21:00:00.000Z"} +{"doc_count":2974,"split_key":834,"timestamp":"2026-06-25T22:00:00.000Z"} +{"doc_count":1666,"split_key":37963,"timestamp":"2026-06-25T22:00:00.000Z"} +{"doc_count":1170,"split_key":396982,"timestamp":"2026-06-25T22:00:00.000Z"} +{"doc_count":927,"split_key":45102,"timestamp":"2026-06-25T22:00:00.000Z"} +{"doc_count":630,"split_key":23470,"timestamp":"2026-06-25T22:00:00.000Z"} +{"doc_count":2946,"split_key":834,"timestamp":"2026-06-25T23:00:00.000Z"} +{"doc_count":1816,"split_key":37963,"timestamp":"2026-06-25T23:00:00.000Z"} +{"doc_count":1252,"split_key":45102,"timestamp":"2026-06-25T23:00:00.000Z"} +{"doc_count":996,"split_key":396982,"timestamp":"2026-06-25T23:00:00.000Z"} +{"doc_count":764,"split_key":51396,"timestamp":"2026-06-25T23:00:00.000Z"} +{"doc_count":64544,"split_key":23470,"timestamp":"2026-06-26T00:00:00.000Z"} +{"doc_count":10022,"split_key":14987,"timestamp":"2026-06-26T00:00:00.000Z"} +{"doc_count":2888,"split_key":834,"timestamp":"2026-06-26T00:00:00.000Z"} +{"doc_count":1316,"split_key":45102,"timestamp":"2026-06-26T00:00:00.000Z"} +{"doc_count":1232,"split_key":37963,"timestamp":"2026-06-26T00:00:00.000Z"} +{"doc_count":4040,"split_key":211590,"timestamp":"2026-06-26T01:00:00.000Z"} +{"doc_count":2942,"split_key":834,"timestamp":"2026-06-26T01:00:00.000Z"} +{"doc_count":1368,"split_key":45102,"timestamp":"2026-06-26T01:00:00.000Z"} +{"doc_count":1290,"split_key":37963,"timestamp":"2026-06-26T01:00:00.000Z"} +{"doc_count":1030,"split_key":396982,"timestamp":"2026-06-26T01:00:00.000Z"} +{"doc_count":2934,"split_key":834,"timestamp":"2026-06-26T02:00:00.000Z"} +{"doc_count":1263,"split_key":37963,"timestamp":"2026-06-26T02:00:00.000Z"} +{"doc_count":930,"split_key":396982,"timestamp":"2026-06-26T02:00:00.000Z"} +{"doc_count":919,"split_key":14618,"timestamp":"2026-06-26T02:00:00.000Z"} +{"doc_count":636,"split_key":14061,"timestamp":"2026-06-26T02:00:00.000Z"} +{"doc_count":2982,"split_key":834,"timestamp":"2026-06-26T03:00:00.000Z"} +{"doc_count":1784,"split_key":45102,"timestamp":"2026-06-26T03:00:00.000Z"} +{"doc_count":1530,"split_key":8560,"timestamp":"2026-06-26T03:00:00.000Z"} +{"doc_count":1231,"split_key":16509,"timestamp":"2026-06-26T03:00:00.000Z"} +{"doc_count":1196,"split_key":37963,"timestamp":"2026-06-26T03:00:00.000Z"} +{"doc_count":2970,"split_key":834,"timestamp":"2026-06-26T04:00:00.000Z"} +{"doc_count":2258,"split_key":45102,"timestamp":"2026-06-26T04:00:00.000Z"} +{"doc_count":1570,"split_key":37963,"timestamp":"2026-06-26T04:00:00.000Z"} +{"doc_count":1420,"split_key":25369,"timestamp":"2026-06-26T04:00:00.000Z"} +{"doc_count":1056,"split_key":396982,"timestamp":"2026-06-26T04:00:00.000Z"} +{"doc_count":2975,"split_key":834,"timestamp":"2026-06-26T05:00:00.000Z"} +{"doc_count":1393,"split_key":137899,"timestamp":"2026-06-26T05:00:00.000Z"} +{"doc_count":1376,"split_key":37963,"timestamp":"2026-06-26T05:00:00.000Z"} +{"doc_count":1276,"split_key":25369,"timestamp":"2026-06-26T05:00:00.000Z"} +{"doc_count":1117,"split_key":45102,"timestamp":"2026-06-26T05:00:00.000Z"} +{"doc_count":4607,"split_key":209334,"timestamp":"2026-06-26T06:00:00.000Z"} +{"doc_count":2961,"split_key":834,"timestamp":"2026-06-26T06:00:00.000Z"} +{"doc_count":1284,"split_key":37963,"timestamp":"2026-06-26T06:00:00.000Z"} +{"doc_count":1065,"split_key":396982,"timestamp":"2026-06-26T06:00:00.000Z"} +{"doc_count":775,"split_key":25369,"timestamp":"2026-06-26T06:00:00.000Z"} +{"doc_count":10057,"split_key":209334,"timestamp":"2026-06-26T07:00:00.000Z"} +{"doc_count":2931,"split_key":834,"timestamp":"2026-06-26T07:00:00.000Z"} +{"doc_count":1519,"split_key":37963,"timestamp":"2026-06-26T07:00:00.000Z"} +{"doc_count":806,"split_key":396982,"timestamp":"2026-06-26T07:00:00.000Z"} +{"doc_count":642,"split_key":16509,"timestamp":"2026-06-26T07:00:00.000Z"} +{"doc_count":10531,"split_key":209334,"timestamp":"2026-06-26T08:00:00.000Z"} +{"doc_count":2906,"split_key":834,"timestamp":"2026-06-26T08:00:00.000Z"} +{"doc_count":1200,"split_key":37963,"timestamp":"2026-06-26T08:00:00.000Z"} +{"doc_count":849,"split_key":16509,"timestamp":"2026-06-26T08:00:00.000Z"} +{"doc_count":566,"split_key":396982,"timestamp":"2026-06-26T08:00:00.000Z"} +{"doc_count":15390,"split_key":209334,"timestamp":"2026-06-26T09:00:00.000Z"} +{"doc_count":2929,"split_key":834,"timestamp":"2026-06-26T09:00:00.000Z"} +{"doc_count":1006,"split_key":37963,"timestamp":"2026-06-26T09:00:00.000Z"} +{"doc_count":967,"split_key":16509,"timestamp":"2026-06-26T09:00:00.000Z"} +{"doc_count":802,"split_key":201401,"timestamp":"2026-06-26T09:00:00.000Z"} +{"doc_count":2903,"split_key":834,"timestamp":"2026-06-26T10:00:00.000Z"} +{"doc_count":2462,"split_key":45102,"timestamp":"2026-06-26T10:00:00.000Z"} +{"doc_count":1276,"split_key":16509,"timestamp":"2026-06-26T10:00:00.000Z"} +{"doc_count":1150,"split_key":37963,"timestamp":"2026-06-26T10:00:00.000Z"} +{"doc_count":732,"split_key":14618,"timestamp":"2026-06-26T10:00:00.000Z"} +{"doc_count":4788,"split_key":209334,"timestamp":"2026-06-26T11:00:00.000Z"} +{"doc_count":2975,"split_key":834,"timestamp":"2026-06-26T11:00:00.000Z"} +{"doc_count":2080,"split_key":45102,"timestamp":"2026-06-26T11:00:00.000Z"} +{"doc_count":1401,"split_key":37963,"timestamp":"2026-06-26T11:00:00.000Z"} +{"doc_count":1039,"split_key":16509,"timestamp":"2026-06-26T11:00:00.000Z"} +{"doc_count":14836,"split_key":209334,"timestamp":"2026-06-26T12:00:00.000Z"} +{"doc_count":2897,"split_key":834,"timestamp":"2026-06-26T12:00:00.000Z"} +{"doc_count":1236,"split_key":37963,"timestamp":"2026-06-26T12:00:00.000Z"} +{"doc_count":1119,"split_key":16509,"timestamp":"2026-06-26T12:00:00.000Z"} +{"doc_count":803,"split_key":211590,"timestamp":"2026-06-26T12:00:00.000Z"} +{"doc_count":46394,"split_key":209334,"timestamp":"2026-06-26T13:00:00.000Z"} +{"doc_count":2922,"split_key":834,"timestamp":"2026-06-26T13:00:00.000Z"} +{"doc_count":2694,"split_key":211590,"timestamp":"2026-06-26T13:00:00.000Z"} +{"doc_count":1530,"split_key":201401,"timestamp":"2026-06-26T13:00:00.000Z"} +{"doc_count":1375,"split_key":37963,"timestamp":"2026-06-26T13:00:00.000Z"} +{"doc_count":32225,"split_key":209334,"timestamp":"2026-06-26T14:00:00.000Z"} +{"doc_count":2933,"split_key":834,"timestamp":"2026-06-26T14:00:00.000Z"} +{"doc_count":1418,"split_key":137899,"timestamp":"2026-06-26T14:00:00.000Z"} +{"doc_count":1292,"split_key":16509,"timestamp":"2026-06-26T14:00:00.000Z"} +{"doc_count":1166,"split_key":37963,"timestamp":"2026-06-26T14:00:00.000Z"} +{"doc_count":2993,"split_key":834,"timestamp":"2026-06-26T15:00:00.000Z"} +{"doc_count":1244,"split_key":51396,"timestamp":"2026-06-26T15:00:00.000Z"} +{"doc_count":1199,"split_key":16509,"timestamp":"2026-06-26T15:00:00.000Z"} +{"doc_count":851,"split_key":45102,"timestamp":"2026-06-26T15:00:00.000Z"} +{"doc_count":646,"split_key":396982,"timestamp":"2026-06-26T15:00:00.000Z"} +{"doc_count":2986,"split_key":834,"timestamp":"2026-06-26T16:00:00.000Z"} +{"doc_count":900,"split_key":45102,"timestamp":"2026-06-26T16:00:00.000Z"} +{"doc_count":864,"split_key":51396,"timestamp":"2026-06-26T16:00:00.000Z"} +{"doc_count":789,"split_key":396982,"timestamp":"2026-06-26T16:00:00.000Z"} +{"doc_count":674,"split_key":16509,"timestamp":"2026-06-26T16:00:00.000Z"} +{"doc_count":2965,"split_key":834,"timestamp":"2026-06-26T17:00:00.000Z"} +{"doc_count":839,"split_key":396982,"timestamp":"2026-06-26T17:00:00.000Z"} +{"doc_count":782,"split_key":16509,"timestamp":"2026-06-26T17:00:00.000Z"} +{"doc_count":548,"split_key":14061,"timestamp":"2026-06-26T17:00:00.000Z"} +{"doc_count":536,"split_key":37963,"timestamp":"2026-06-26T17:00:00.000Z"} +{"doc_count":18517,"split_key":209334,"timestamp":"2026-06-26T18:00:00.000Z"} +{"doc_count":2914,"split_key":834,"timestamp":"2026-06-26T18:00:00.000Z"} +{"doc_count":1019,"split_key":396982,"timestamp":"2026-06-26T18:00:00.000Z"} +{"doc_count":1005,"split_key":201401,"timestamp":"2026-06-26T18:00:00.000Z"} +{"doc_count":750,"split_key":16509,"timestamp":"2026-06-26T18:00:00.000Z"} +{"doc_count":29716,"split_key":209334,"timestamp":"2026-06-26T19:00:00.000Z"} +{"doc_count":2917,"split_key":834,"timestamp":"2026-06-26T19:00:00.000Z"} +{"doc_count":1276,"split_key":201401,"timestamp":"2026-06-26T19:00:00.000Z"} +{"doc_count":1036,"split_key":51167,"timestamp":"2026-06-26T19:00:00.000Z"} +{"doc_count":903,"split_key":396982,"timestamp":"2026-06-26T19:00:00.000Z"} +{"doc_count":48951,"split_key":209334,"timestamp":"2026-06-26T20:00:00.000Z"} +{"doc_count":2880,"split_key":834,"timestamp":"2026-06-26T20:00:00.000Z"} +{"doc_count":1571,"split_key":201401,"timestamp":"2026-06-26T20:00:00.000Z"} +{"doc_count":1183,"split_key":270824,"timestamp":"2026-06-26T20:00:00.000Z"} +{"doc_count":975,"split_key":396982,"timestamp":"2026-06-26T20:00:00.000Z"} +{"doc_count":10973,"split_key":209334,"timestamp":"2026-06-26T21:00:00.000Z"} +{"doc_count":2900,"split_key":834,"timestamp":"2026-06-26T21:00:00.000Z"} +{"doc_count":1121,"split_key":396982,"timestamp":"2026-06-26T21:00:00.000Z"} +{"doc_count":728,"split_key":201401,"timestamp":"2026-06-26T21:00:00.000Z"} +{"doc_count":600,"split_key":16509,"timestamp":"2026-06-26T21:00:00.000Z"} +{"doc_count":2895,"split_key":834,"timestamp":"2026-06-26T22:00:00.000Z"} +{"doc_count":2163,"split_key":51167,"timestamp":"2026-06-26T22:00:00.000Z"} +{"doc_count":972,"split_key":396982,"timestamp":"2026-06-26T22:00:00.000Z"} +{"doc_count":507,"split_key":37963,"timestamp":"2026-06-26T22:00:00.000Z"} +{"doc_count":447,"split_key":16509,"timestamp":"2026-06-26T22:00:00.000Z"} +{"doc_count":3195,"split_key":51167,"timestamp":"2026-06-26T23:00:00.000Z"} +{"doc_count":2978,"split_key":834,"timestamp":"2026-06-26T23:00:00.000Z"} +{"doc_count":1415,"split_key":137899,"timestamp":"2026-06-26T23:00:00.000Z"} +{"doc_count":1016,"split_key":396982,"timestamp":"2026-06-26T23:00:00.000Z"} +{"doc_count":723,"split_key":37963,"timestamp":"2026-06-26T23:00:00.000Z"} +{"doc_count":10038,"split_key":14987,"timestamp":"2026-06-27T00:00:00.000Z"} +{"doc_count":3277,"split_key":51167,"timestamp":"2026-06-27T00:00:00.000Z"} +{"doc_count":3000,"split_key":834,"timestamp":"2026-06-27T00:00:00.000Z"} +{"doc_count":908,"split_key":396982,"timestamp":"2026-06-27T00:00:00.000Z"} +{"doc_count":697,"split_key":37963,"timestamp":"2026-06-27T00:00:00.000Z"} +{"doc_count":3323,"split_key":51167,"timestamp":"2026-06-27T01:00:00.000Z"} +{"doc_count":2953,"split_key":834,"timestamp":"2026-06-27T01:00:00.000Z"} +{"doc_count":1138,"split_key":396982,"timestamp":"2026-06-27T01:00:00.000Z"} +{"doc_count":671,"split_key":16509,"timestamp":"2026-06-27T01:00:00.000Z"} +{"doc_count":522,"split_key":51396,"timestamp":"2026-06-27T01:00:00.000Z"} +{"doc_count":3445,"split_key":51167,"timestamp":"2026-06-27T02:00:00.000Z"} +{"doc_count":2982,"split_key":834,"timestamp":"2026-06-27T02:00:00.000Z"} +{"doc_count":1163,"split_key":396982,"timestamp":"2026-06-27T02:00:00.000Z"} +{"doc_count":1003,"split_key":51396,"timestamp":"2026-06-27T02:00:00.000Z"} +{"doc_count":671,"split_key":16509,"timestamp":"2026-06-27T02:00:00.000Z"} +{"doc_count":3434,"split_key":51167,"timestamp":"2026-06-27T03:00:00.000Z"} +{"doc_count":2971,"split_key":834,"timestamp":"2026-06-27T03:00:00.000Z"} +{"doc_count":1087,"split_key":396982,"timestamp":"2026-06-27T03:00:00.000Z"} +{"doc_count":622,"split_key":16509,"timestamp":"2026-06-27T03:00:00.000Z"} +{"doc_count":528,"split_key":37963,"timestamp":"2026-06-27T03:00:00.000Z"} +{"doc_count":6868,"split_key":211590,"timestamp":"2026-06-27T04:00:00.000Z"} +{"doc_count":3381,"split_key":51167,"timestamp":"2026-06-27T04:00:00.000Z"} +{"doc_count":2986,"split_key":834,"timestamp":"2026-06-27T04:00:00.000Z"} +{"doc_count":1273,"split_key":63949,"timestamp":"2026-06-27T04:00:00.000Z"} +{"doc_count":1201,"split_key":25369,"timestamp":"2026-06-27T04:00:00.000Z"} +{"doc_count":3341,"split_key":51167,"timestamp":"2026-06-27T05:00:00.000Z"} +{"doc_count":1967,"split_key":834,"timestamp":"2026-06-27T05:00:00.000Z"} +{"doc_count":1292,"split_key":25369,"timestamp":"2026-06-27T05:00:00.000Z"} +{"doc_count":1276,"split_key":396982,"timestamp":"2026-06-27T05:00:00.000Z"} +{"doc_count":670,"split_key":51396,"timestamp":"2026-06-27T05:00:00.000Z"} +{"doc_count":4674,"split_key":209334,"timestamp":"2026-06-27T06:00:00.000Z"} +{"doc_count":3384,"split_key":51167,"timestamp":"2026-06-27T06:00:00.000Z"} +{"doc_count":1434,"split_key":51396,"timestamp":"2026-06-27T06:00:00.000Z"} +{"doc_count":1004,"split_key":396982,"timestamp":"2026-06-27T06:00:00.000Z"} +{"doc_count":875,"split_key":25369,"timestamp":"2026-06-27T06:00:00.000Z"} +{"doc_count":10272,"split_key":209334,"timestamp":"2026-06-27T07:00:00.000Z"} +{"doc_count":3254,"split_key":51167,"timestamp":"2026-06-27T07:00:00.000Z"} +{"doc_count":682,"split_key":16509,"timestamp":"2026-06-27T07:00:00.000Z"} +{"doc_count":646,"split_key":396982,"timestamp":"2026-06-27T07:00:00.000Z"} +{"doc_count":590,"split_key":37963,"timestamp":"2026-06-27T07:00:00.000Z"} +{"doc_count":10690,"split_key":209334,"timestamp":"2026-06-27T08:00:00.000Z"} +{"doc_count":5390,"split_key":211590,"timestamp":"2026-06-27T08:00:00.000Z"} +{"doc_count":3395,"split_key":51167,"timestamp":"2026-06-27T08:00:00.000Z"} +{"doc_count":1405,"split_key":137899,"timestamp":"2026-06-27T08:00:00.000Z"} +{"doc_count":842,"split_key":141995,"timestamp":"2026-06-27T08:00:00.000Z"} +{"doc_count":15737,"split_key":209334,"timestamp":"2026-06-27T09:00:00.000Z"} +{"doc_count":3327,"split_key":51167,"timestamp":"2026-06-27T09:00:00.000Z"} +{"doc_count":1389,"split_key":211590,"timestamp":"2026-06-27T09:00:00.000Z"} +{"doc_count":937,"split_key":396982,"timestamp":"2026-06-27T09:00:00.000Z"} +{"doc_count":733,"split_key":16509,"timestamp":"2026-06-27T09:00:00.000Z"} +{"doc_count":3290,"split_key":51167,"timestamp":"2026-06-27T10:00:00.000Z"} +{"doc_count":796,"split_key":396982,"timestamp":"2026-06-27T10:00:00.000Z"} +{"doc_count":665,"split_key":16509,"timestamp":"2026-06-27T10:00:00.000Z"} +{"doc_count":608,"split_key":37963,"timestamp":"2026-06-27T10:00:00.000Z"} +{"doc_count":585,"split_key":20011,"timestamp":"2026-06-27T10:00:00.000Z"} +{"doc_count":4919,"split_key":209334,"timestamp":"2026-06-27T11:00:00.000Z"} +{"doc_count":3955,"split_key":211590,"timestamp":"2026-06-27T11:00:00.000Z"} +{"doc_count":3243,"split_key":51167,"timestamp":"2026-06-27T11:00:00.000Z"} +{"doc_count":1847,"split_key":45102,"timestamp":"2026-06-27T11:00:00.000Z"} +{"doc_count":755,"split_key":141995,"timestamp":"2026-06-27T11:00:00.000Z"} +{"doc_count":14295,"split_key":209334,"timestamp":"2026-06-27T12:00:00.000Z"} +{"doc_count":3273,"split_key":51167,"timestamp":"2026-06-27T12:00:00.000Z"} +{"doc_count":3138,"split_key":211590,"timestamp":"2026-06-27T12:00:00.000Z"} +{"doc_count":2469,"split_key":45102,"timestamp":"2026-06-27T12:00:00.000Z"} +{"doc_count":826,"split_key":16509,"timestamp":"2026-06-27T12:00:00.000Z"} +{"doc_count":44938,"split_key":209334,"timestamp":"2026-06-27T13:00:00.000Z"} +{"doc_count":3306,"split_key":51167,"timestamp":"2026-06-27T13:00:00.000Z"} +{"doc_count":1580,"split_key":201401,"timestamp":"2026-06-27T13:00:00.000Z"} +{"doc_count":1028,"split_key":45102,"timestamp":"2026-06-27T13:00:00.000Z"} +{"doc_count":897,"split_key":396982,"timestamp":"2026-06-27T13:00:00.000Z"} +{"doc_count":34303,"split_key":209334,"timestamp":"2026-06-27T14:00:00.000Z"} +{"doc_count":3331,"split_key":51167,"timestamp":"2026-06-27T14:00:00.000Z"} +{"doc_count":978,"split_key":201401,"timestamp":"2026-06-27T14:00:00.000Z"} +{"doc_count":907,"split_key":16509,"timestamp":"2026-06-27T14:00:00.000Z"} +{"doc_count":654,"split_key":396982,"timestamp":"2026-06-27T14:00:00.000Z"} +{"doc_count":3218,"split_key":51167,"timestamp":"2026-06-27T15:00:00.000Z"} +{"doc_count":2601,"split_key":150303,"timestamp":"2026-06-27T15:00:00.000Z"} +{"doc_count":1650,"split_key":202412,"timestamp":"2026-06-27T15:00:00.000Z"} +{"doc_count":1081,"split_key":16509,"timestamp":"2026-06-27T15:00:00.000Z"} +{"doc_count":618,"split_key":20011,"timestamp":"2026-06-27T15:00:00.000Z"} +{"doc_count":3265,"split_key":51167,"timestamp":"2026-06-27T16:00:00.000Z"} +{"doc_count":1147,"split_key":51396,"timestamp":"2026-06-27T16:00:00.000Z"} +{"doc_count":885,"split_key":45102,"timestamp":"2026-06-27T16:00:00.000Z"} +{"doc_count":779,"split_key":396982,"timestamp":"2026-06-27T16:00:00.000Z"} +{"doc_count":566,"split_key":211590,"timestamp":"2026-06-27T16:00:00.000Z"} +{"doc_count":3191,"split_key":51167,"timestamp":"2026-06-27T17:00:00.000Z"} +{"doc_count":2032,"split_key":51396,"timestamp":"2026-06-27T17:00:00.000Z"} +{"doc_count":1407,"split_key":137899,"timestamp":"2026-06-27T17:00:00.000Z"} +{"doc_count":820,"split_key":396982,"timestamp":"2026-06-27T17:00:00.000Z"} +{"doc_count":753,"split_key":16509,"timestamp":"2026-06-27T17:00:00.000Z"} +{"doc_count":19005,"split_key":209334,"timestamp":"2026-06-27T18:00:00.000Z"} +{"doc_count":3883,"split_key":51167,"timestamp":"2026-06-27T18:00:00.000Z"} +{"doc_count":1685,"split_key":51396,"timestamp":"2026-06-27T18:00:00.000Z"} +{"doc_count":885,"split_key":16509,"timestamp":"2026-06-27T18:00:00.000Z"} +{"doc_count":862,"split_key":396982,"timestamp":"2026-06-27T18:00:00.000Z"} +{"doc_count":29010,"split_key":209334,"timestamp":"2026-06-27T19:00:00.000Z"} +{"doc_count":1118,"split_key":51396,"timestamp":"2026-06-27T19:00:00.000Z"} +{"doc_count":975,"split_key":201401,"timestamp":"2026-06-27T19:00:00.000Z"} +{"doc_count":903,"split_key":396982,"timestamp":"2026-06-27T19:00:00.000Z"} +{"doc_count":883,"split_key":45102,"timestamp":"2026-06-27T19:00:00.000Z"} +{"doc_count":50062,"split_key":209334,"timestamp":"2026-06-27T20:00:00.000Z"} +{"doc_count":1298,"split_key":201401,"timestamp":"2026-06-27T20:00:00.000Z"} +{"doc_count":1094,"split_key":396982,"timestamp":"2026-06-27T20:00:00.000Z"} +{"doc_count":1005,"split_key":45102,"timestamp":"2026-06-27T20:00:00.000Z"} +{"doc_count":685,"split_key":16509,"timestamp":"2026-06-27T20:00:00.000Z"} +{"doc_count":11378,"split_key":209334,"timestamp":"2026-06-27T21:00:00.000Z"} +{"doc_count":2412,"split_key":31898,"timestamp":"2026-06-27T21:00:00.000Z"} +{"doc_count":966,"split_key":396982,"timestamp":"2026-06-27T21:00:00.000Z"} +{"doc_count":798,"split_key":45102,"timestamp":"2026-06-27T21:00:00.000Z"} +{"doc_count":518,"split_key":16509,"timestamp":"2026-06-27T21:00:00.000Z"} +{"doc_count":912,"split_key":396982,"timestamp":"2026-06-27T22:00:00.000Z"} +{"doc_count":604,"split_key":45102,"timestamp":"2026-06-27T22:00:00.000Z"} +{"doc_count":551,"split_key":16509,"timestamp":"2026-06-27T22:00:00.000Z"} +{"doc_count":522,"split_key":138915,"timestamp":"2026-06-27T22:00:00.000Z"} +{"doc_count":308,"split_key":51396,"timestamp":"2026-06-27T22:00:00.000Z"} +{"doc_count":2977,"split_key":211590,"timestamp":"2026-06-27T23:00:00.000Z"} +{"doc_count":929,"split_key":396982,"timestamp":"2026-06-27T23:00:00.000Z"} +{"doc_count":665,"split_key":45102,"timestamp":"2026-06-27T23:00:00.000Z"} +{"doc_count":612,"split_key":16509,"timestamp":"2026-06-27T23:00:00.000Z"} +{"doc_count":519,"split_key":141995,"timestamp":"2026-06-27T23:00:00.000Z"} +{"doc_count":10020,"split_key":14987,"timestamp":"2026-06-28T00:00:00.000Z"} +{"doc_count":1290,"split_key":396982,"timestamp":"2026-06-28T00:00:00.000Z"} +{"doc_count":1219,"split_key":264217,"timestamp":"2026-06-28T00:00:00.000Z"} +{"doc_count":773,"split_key":16509,"timestamp":"2026-06-28T00:00:00.000Z"} +{"doc_count":684,"split_key":45102,"timestamp":"2026-06-28T00:00:00.000Z"} +{"doc_count":3339,"split_key":264217,"timestamp":"2026-06-28T01:00:00.000Z"} +{"doc_count":1328,"split_key":396982,"timestamp":"2026-06-28T01:00:00.000Z"} +{"doc_count":726,"split_key":2856,"timestamp":"2026-06-28T01:00:00.000Z"} +{"doc_count":725,"split_key":45102,"timestamp":"2026-06-28T01:00:00.000Z"} +{"doc_count":594,"split_key":51396,"timestamp":"2026-06-28T01:00:00.000Z"} +{"doc_count":5473,"split_key":264217,"timestamp":"2026-06-28T02:00:00.000Z"} +{"doc_count":1997,"split_key":396982,"timestamp":"2026-06-28T02:00:00.000Z"} +{"doc_count":1509,"split_key":2856,"timestamp":"2026-06-28T02:00:00.000Z"} +{"doc_count":1399,"split_key":137899,"timestamp":"2026-06-28T02:00:00.000Z"} +{"doc_count":754,"split_key":45102,"timestamp":"2026-06-28T02:00:00.000Z"} +{"doc_count":5518,"split_key":264217,"timestamp":"2026-06-28T03:00:00.000Z"} +{"doc_count":3074,"split_key":211590,"timestamp":"2026-06-28T03:00:00.000Z"} +{"doc_count":1355,"split_key":396982,"timestamp":"2026-06-28T03:00:00.000Z"} +{"doc_count":714,"split_key":45102,"timestamp":"2026-06-28T03:00:00.000Z"} +{"doc_count":594,"split_key":16509,"timestamp":"2026-06-28T03:00:00.000Z"} +{"doc_count":5416,"split_key":264217,"timestamp":"2026-06-28T04:00:00.000Z"} +{"doc_count":1177,"split_key":25369,"timestamp":"2026-06-28T04:00:00.000Z"} +{"doc_count":1043,"split_key":396982,"timestamp":"2026-06-28T04:00:00.000Z"} +{"doc_count":521,"split_key":45102,"timestamp":"2026-06-28T04:00:00.000Z"} +{"doc_count":519,"split_key":51396,"timestamp":"2026-06-28T04:00:00.000Z"} +{"doc_count":5371,"split_key":264217,"timestamp":"2026-06-28T05:00:00.000Z"} +{"doc_count":1263,"split_key":25369,"timestamp":"2026-06-28T05:00:00.000Z"} +{"doc_count":1177,"split_key":16276,"timestamp":"2026-06-28T05:00:00.000Z"} +{"doc_count":1040,"split_key":396982,"timestamp":"2026-06-28T05:00:00.000Z"} +{"doc_count":690,"split_key":45102,"timestamp":"2026-06-28T05:00:00.000Z"} +{"doc_count":8110,"split_key":211590,"timestamp":"2026-06-28T06:00:00.000Z"} +{"doc_count":4917,"split_key":264217,"timestamp":"2026-06-28T06:00:00.000Z"} +{"doc_count":4587,"split_key":209334,"timestamp":"2026-06-28T06:00:00.000Z"} +{"doc_count":1149,"split_key":396982,"timestamp":"2026-06-28T06:00:00.000Z"} +{"doc_count":1047,"split_key":16276,"timestamp":"2026-06-28T06:00:00.000Z"} +{"doc_count":10131,"split_key":209334,"timestamp":"2026-06-28T07:00:00.000Z"} +{"doc_count":8221,"split_key":211590,"timestamp":"2026-06-28T07:00:00.000Z"} +{"doc_count":5300,"split_key":264217,"timestamp":"2026-06-28T07:00:00.000Z"} +{"doc_count":954,"split_key":51396,"timestamp":"2026-06-28T07:00:00.000Z"} +{"doc_count":896,"split_key":14061,"timestamp":"2026-06-28T07:00:00.000Z"} +{"doc_count":10540,"split_key":209334,"timestamp":"2026-06-28T08:00:00.000Z"} +{"doc_count":5427,"split_key":264217,"timestamp":"2026-06-28T08:00:00.000Z"} +{"doc_count":1118,"split_key":211590,"timestamp":"2026-06-28T08:00:00.000Z"} +{"doc_count":847,"split_key":45102,"timestamp":"2026-06-28T08:00:00.000Z"} +{"doc_count":781,"split_key":16509,"timestamp":"2026-06-28T08:00:00.000Z"} +{"doc_count":15869,"split_key":209334,"timestamp":"2026-06-28T09:00:00.000Z"} +{"doc_count":5256,"split_key":264217,"timestamp":"2026-06-28T09:00:00.000Z"} +{"doc_count":4483,"split_key":2856,"timestamp":"2026-06-28T09:00:00.000Z"} +{"doc_count":2143,"split_key":31898,"timestamp":"2026-06-28T09:00:00.000Z"} +{"doc_count":1857,"split_key":45102,"timestamp":"2026-06-28T09:00:00.000Z"} +{"doc_count":5293,"split_key":264217,"timestamp":"2026-06-28T10:00:00.000Z"} +{"doc_count":4086,"split_key":211590,"timestamp":"2026-06-28T10:00:00.000Z"} +{"doc_count":1835,"split_key":45102,"timestamp":"2026-06-28T10:00:00.000Z"} +{"doc_count":913,"split_key":50926,"timestamp":"2026-06-28T10:00:00.000Z"} +{"doc_count":810,"split_key":2856,"timestamp":"2026-06-28T10:00:00.000Z"} +{"doc_count":8947,"split_key":211590,"timestamp":"2026-06-28T11:00:00.000Z"} +{"doc_count":4946,"split_key":209334,"timestamp":"2026-06-28T11:00:00.000Z"} +{"doc_count":2501,"split_key":264217,"timestamp":"2026-06-28T11:00:00.000Z"} +{"doc_count":1845,"split_key":45102,"timestamp":"2026-06-28T11:00:00.000Z"} +{"doc_count":1446,"split_key":2856,"timestamp":"2026-06-28T11:00:00.000Z"} +{"doc_count":13713,"split_key":209334,"timestamp":"2026-06-28T12:00:00.000Z"} +{"doc_count":4098,"split_key":211590,"timestamp":"2026-06-28T12:00:00.000Z"} +{"doc_count":1627,"split_key":2856,"timestamp":"2026-06-28T12:00:00.000Z"} +{"doc_count":1475,"split_key":51396,"timestamp":"2026-06-28T12:00:00.000Z"} +{"doc_count":761,"split_key":45102,"timestamp":"2026-06-28T12:00:00.000Z"} +{"doc_count":45383,"split_key":209334,"timestamp":"2026-06-28T13:00:00.000Z"} +{"doc_count":1467,"split_key":201401,"timestamp":"2026-06-28T13:00:00.000Z"} +{"doc_count":1377,"split_key":51396,"timestamp":"2026-06-28T13:00:00.000Z"} +{"doc_count":636,"split_key":396982,"timestamp":"2026-06-28T13:00:00.000Z"} +{"doc_count":564,"split_key":2856,"timestamp":"2026-06-28T13:00:00.000Z"} +{"doc_count":35860,"split_key":209334,"timestamp":"2026-06-28T14:00:00.000Z"} +{"doc_count":1216,"split_key":201401,"timestamp":"2026-06-28T14:00:00.000Z"} +{"doc_count":998,"split_key":271412,"timestamp":"2026-06-28T14:00:00.000Z"} +{"doc_count":934,"split_key":52904,"timestamp":"2026-06-28T14:00:00.000Z"} +{"doc_count":525,"split_key":138915,"timestamp":"2026-06-28T14:00:00.000Z"} +{"doc_count":2838,"split_key":52904,"timestamp":"2026-06-28T15:00:00.000Z"} +{"doc_count":2508,"split_key":47329,"timestamp":"2026-06-28T15:00:00.000Z"} +{"doc_count":2436,"split_key":271412,"timestamp":"2026-06-28T15:00:00.000Z"} +{"doc_count":1037,"split_key":48090,"timestamp":"2026-06-28T15:00:00.000Z"} +{"doc_count":767,"split_key":16509,"timestamp":"2026-06-28T15:00:00.000Z"} +{"doc_count":4073,"split_key":47329,"timestamp":"2026-06-28T16:00:00.000Z"} +{"doc_count":2846,"split_key":52904,"timestamp":"2026-06-28T16:00:00.000Z"} +{"doc_count":2264,"split_key":271412,"timestamp":"2026-06-28T16:00:00.000Z"} +{"doc_count":1197,"split_key":51396,"timestamp":"2026-06-28T16:00:00.000Z"} +{"doc_count":907,"split_key":45102,"timestamp":"2026-06-28T16:00:00.000Z"} +{"doc_count":2907,"split_key":271412,"timestamp":"2026-06-28T17:00:00.000Z"} +{"doc_count":2867,"split_key":52904,"timestamp":"2026-06-28T17:00:00.000Z"} +{"doc_count":709,"split_key":45102,"timestamp":"2026-06-28T17:00:00.000Z"} +{"doc_count":613,"split_key":51396,"timestamp":"2026-06-28T17:00:00.000Z"} +{"doc_count":605,"split_key":47329,"timestamp":"2026-06-28T17:00:00.000Z"} +{"doc_count":18766,"split_key":209334,"timestamp":"2026-06-28T18:00:00.000Z"} +{"doc_count":6023,"split_key":211590,"timestamp":"2026-06-28T18:00:00.000Z"} +{"doc_count":2907,"split_key":52904,"timestamp":"2026-06-28T18:00:00.000Z"} +{"doc_count":2892,"split_key":271412,"timestamp":"2026-06-28T18:00:00.000Z"} +{"doc_count":728,"split_key":201401,"timestamp":"2026-06-28T18:00:00.000Z"} +{"doc_count":29176,"split_key":209334,"timestamp":"2026-06-28T19:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-28T19:00:00.000Z"} +{"doc_count":1517,"split_key":52904,"timestamp":"2026-06-28T19:00:00.000Z"} +{"doc_count":1470,"split_key":264217,"timestamp":"2026-06-28T19:00:00.000Z"} +{"doc_count":1466,"split_key":271412,"timestamp":"2026-06-28T19:00:00.000Z"} +{"doc_count":47961,"split_key":209334,"timestamp":"2026-06-28T20:00:00.000Z"} +{"doc_count":1274,"split_key":137899,"timestamp":"2026-06-28T20:00:00.000Z"} +{"doc_count":1263,"split_key":201401,"timestamp":"2026-06-28T20:00:00.000Z"} +{"doc_count":1029,"split_key":264217,"timestamp":"2026-06-28T20:00:00.000Z"} +{"doc_count":969,"split_key":48090,"timestamp":"2026-06-28T20:00:00.000Z"} +{"doc_count":13502,"split_key":209334,"timestamp":"2026-06-28T21:00:00.000Z"} +{"doc_count":1627,"split_key":202412,"timestamp":"2026-06-28T21:00:00.000Z"} +{"doc_count":1017,"split_key":210819,"timestamp":"2026-06-28T21:00:00.000Z"} +{"doc_count":619,"split_key":396982,"timestamp":"2026-06-28T21:00:00.000Z"} +{"doc_count":449,"split_key":138915,"timestamp":"2026-06-28T21:00:00.000Z"} +{"doc_count":2409,"split_key":31898,"timestamp":"2026-06-28T22:00:00.000Z"} +{"doc_count":2091,"split_key":210819,"timestamp":"2026-06-28T22:00:00.000Z"} +{"doc_count":668,"split_key":51396,"timestamp":"2026-06-28T22:00:00.000Z"} +{"doc_count":561,"split_key":45102,"timestamp":"2026-06-28T22:00:00.000Z"} +{"doc_count":467,"split_key":138915,"timestamp":"2026-06-28T22:00:00.000Z"} +{"doc_count":10263,"split_key":14061,"timestamp":"2026-06-28T23:00:00.000Z"} +{"doc_count":1183,"split_key":51396,"timestamp":"2026-06-28T23:00:00.000Z"} +{"doc_count":1046,"split_key":210819,"timestamp":"2026-06-28T23:00:00.000Z"} +{"doc_count":452,"split_key":138915,"timestamp":"2026-06-28T23:00:00.000Z"} +{"doc_count":307,"split_key":396982,"timestamp":"2026-06-28T23:00:00.000Z"} +{"doc_count":10036,"split_key":14987,"timestamp":"2026-06-29T00:00:00.000Z"} +{"doc_count":4021,"split_key":211590,"timestamp":"2026-06-29T00:00:00.000Z"} +{"doc_count":1143,"split_key":210819,"timestamp":"2026-06-29T00:00:00.000Z"} +{"doc_count":907,"split_key":51396,"timestamp":"2026-06-29T00:00:00.000Z"} +{"doc_count":627,"split_key":141995,"timestamp":"2026-06-29T00:00:00.000Z"} +{"doc_count":42564,"split_key":396982,"timestamp":"2026-06-29T01:00:00.000Z"} +{"doc_count":8042,"split_key":211590,"timestamp":"2026-06-29T01:00:00.000Z"} +{"doc_count":1181,"split_key":210819,"timestamp":"2026-06-29T01:00:00.000Z"} +{"doc_count":870,"split_key":37963,"timestamp":"2026-06-29T01:00:00.000Z"} +{"doc_count":631,"split_key":141995,"timestamp":"2026-06-29T01:00:00.000Z"} +{"doc_count":31350,"split_key":396982,"timestamp":"2026-06-29T02:00:00.000Z"} +{"doc_count":18289,"split_key":14061,"timestamp":"2026-06-29T02:00:00.000Z"} +{"doc_count":10457,"split_key":39351,"timestamp":"2026-06-29T02:00:00.000Z"} +{"doc_count":6070,"split_key":211590,"timestamp":"2026-06-29T02:00:00.000Z"} +{"doc_count":760,"split_key":16509,"timestamp":"2026-06-29T02:00:00.000Z"} +{"doc_count":41616,"split_key":14061,"timestamp":"2026-06-29T03:00:00.000Z"} +{"doc_count":8136,"split_key":396982,"timestamp":"2026-06-29T03:00:00.000Z"} +{"doc_count":1768,"split_key":210819,"timestamp":"2026-06-29T03:00:00.000Z"} +{"doc_count":1036,"split_key":16509,"timestamp":"2026-06-29T03:00:00.000Z"} +{"doc_count":957,"split_key":211590,"timestamp":"2026-06-29T03:00:00.000Z"} +{"doc_count":43813,"split_key":14061,"timestamp":"2026-06-29T04:00:00.000Z"} +{"doc_count":1317,"split_key":25369,"timestamp":"2026-06-29T04:00:00.000Z"} +{"doc_count":1164,"split_key":210819,"timestamp":"2026-06-29T04:00:00.000Z"} +{"doc_count":855,"split_key":137899,"timestamp":"2026-06-29T04:00:00.000Z"} +{"doc_count":797,"split_key":2856,"timestamp":"2026-06-29T04:00:00.000Z"} +{"doc_count":2083,"split_key":48090,"timestamp":"2026-06-29T05:00:00.000Z"} +{"doc_count":1479,"split_key":51396,"timestamp":"2026-06-29T05:00:00.000Z"} +{"doc_count":1412,"split_key":25369,"timestamp":"2026-06-29T05:00:00.000Z"} +{"doc_count":1164,"split_key":210819,"timestamp":"2026-06-29T05:00:00.000Z"} +{"doc_count":811,"split_key":396982,"timestamp":"2026-06-29T05:00:00.000Z"} +{"doc_count":4105,"split_key":209334,"timestamp":"2026-06-29T06:00:00.000Z"} +{"doc_count":1623,"split_key":2856,"timestamp":"2026-06-29T06:00:00.000Z"} +{"doc_count":1170,"split_key":210819,"timestamp":"2026-06-29T06:00:00.000Z"} +{"doc_count":849,"split_key":25369,"timestamp":"2026-06-29T06:00:00.000Z"} +{"doc_count":743,"split_key":51396,"timestamp":"2026-06-29T06:00:00.000Z"} +{"doc_count":10919,"split_key":209334,"timestamp":"2026-06-29T07:00:00.000Z"} +{"doc_count":1165,"split_key":210819,"timestamp":"2026-06-29T07:00:00.000Z"} +{"doc_count":781,"split_key":2856,"timestamp":"2026-06-29T07:00:00.000Z"} +{"doc_count":649,"split_key":16509,"timestamp":"2026-06-29T07:00:00.000Z"} +{"doc_count":458,"split_key":138915,"timestamp":"2026-06-29T07:00:00.000Z"} +{"doc_count":10442,"split_key":209334,"timestamp":"2026-06-29T08:00:00.000Z"} +{"doc_count":2668,"split_key":2856,"timestamp":"2026-06-29T08:00:00.000Z"} +{"doc_count":1425,"split_key":51396,"timestamp":"2026-06-29T08:00:00.000Z"} +{"doc_count":764,"split_key":210819,"timestamp":"2026-06-29T08:00:00.000Z"} +{"doc_count":688,"split_key":16509,"timestamp":"2026-06-29T08:00:00.000Z"} +{"doc_count":15905,"split_key":209334,"timestamp":"2026-06-29T09:00:00.000Z"} +{"doc_count":1128,"split_key":2856,"timestamp":"2026-06-29T09:00:00.000Z"} +{"doc_count":947,"split_key":51396,"timestamp":"2026-06-29T09:00:00.000Z"} +{"doc_count":721,"split_key":16509,"timestamp":"2026-06-29T09:00:00.000Z"} +{"doc_count":558,"split_key":23470,"timestamp":"2026-06-29T09:00:00.000Z"} +{"doc_count":803,"split_key":396982,"timestamp":"2026-06-29T10:00:00.000Z"} +{"doc_count":634,"split_key":51396,"timestamp":"2026-06-29T10:00:00.000Z"} +{"doc_count":472,"split_key":138915,"timestamp":"2026-06-29T10:00:00.000Z"} +{"doc_count":404,"split_key":210819,"timestamp":"2026-06-29T10:00:00.000Z"} +{"doc_count":401,"split_key":16509,"timestamp":"2026-06-29T10:00:00.000Z"} +{"doc_count":4947,"split_key":209334,"timestamp":"2026-06-29T11:00:00.000Z"} +{"doc_count":3896,"split_key":211590,"timestamp":"2026-06-29T11:00:00.000Z"} +{"doc_count":1087,"split_key":51396,"timestamp":"2026-06-29T11:00:00.000Z"} +{"doc_count":696,"split_key":14061,"timestamp":"2026-06-29T11:00:00.000Z"} +{"doc_count":620,"split_key":16509,"timestamp":"2026-06-29T11:00:00.000Z"} +{"doc_count":13525,"split_key":209334,"timestamp":"2026-06-29T12:00:00.000Z"} +{"doc_count":1097,"split_key":37963,"timestamp":"2026-06-29T12:00:00.000Z"} +{"doc_count":995,"split_key":14061,"timestamp":"2026-06-29T12:00:00.000Z"} +{"doc_count":766,"split_key":398101,"timestamp":"2026-06-29T12:00:00.000Z"} +{"doc_count":744,"split_key":16509,"timestamp":"2026-06-29T12:00:00.000Z"} +{"doc_count":45635,"split_key":209334,"timestamp":"2026-06-29T13:00:00.000Z"} +{"doc_count":10448,"split_key":11878,"timestamp":"2026-06-29T13:00:00.000Z"} +{"doc_count":2407,"split_key":31898,"timestamp":"2026-06-29T13:00:00.000Z"} +{"doc_count":2179,"split_key":37963,"timestamp":"2026-06-29T13:00:00.000Z"} +{"doc_count":1407,"split_key":201401,"timestamp":"2026-06-29T13:00:00.000Z"} +{"doc_count":34262,"split_key":209334,"timestamp":"2026-06-29T14:00:00.000Z"} +{"doc_count":2408,"split_key":31898,"timestamp":"2026-06-29T14:00:00.000Z"} +{"doc_count":2274,"split_key":37963,"timestamp":"2026-06-29T14:00:00.000Z"} +{"doc_count":1121,"split_key":201401,"timestamp":"2026-06-29T14:00:00.000Z"} +{"doc_count":1086,"split_key":14061,"timestamp":"2026-06-29T14:00:00.000Z"} +{"doc_count":1524,"split_key":37963,"timestamp":"2026-06-29T15:00:00.000Z"} +{"doc_count":1115,"split_key":14061,"timestamp":"2026-06-29T15:00:00.000Z"} +{"doc_count":644,"split_key":16509,"timestamp":"2026-06-29T15:00:00.000Z"} +{"doc_count":480,"split_key":138915,"timestamp":"2026-06-29T15:00:00.000Z"} +{"doc_count":370,"split_key":55960,"timestamp":"2026-06-29T15:00:00.000Z"} +{"doc_count":1536,"split_key":37963,"timestamp":"2026-06-29T16:00:00.000Z"} +{"doc_count":1195,"split_key":14061,"timestamp":"2026-06-29T16:00:00.000Z"} +{"doc_count":524,"split_key":138915,"timestamp":"2026-06-29T16:00:00.000Z"} +{"doc_count":459,"split_key":48090,"timestamp":"2026-06-29T16:00:00.000Z"} +{"doc_count":447,"split_key":396982,"timestamp":"2026-06-29T16:00:00.000Z"} +{"doc_count":5660,"split_key":211590,"timestamp":"2026-06-29T17:00:00.000Z"} +{"doc_count":1968,"split_key":48090,"timestamp":"2026-06-29T17:00:00.000Z"} +{"doc_count":1416,"split_key":37963,"timestamp":"2026-06-29T17:00:00.000Z"} +{"doc_count":1044,"split_key":14061,"timestamp":"2026-06-29T17:00:00.000Z"} +{"doc_count":990,"split_key":141995,"timestamp":"2026-06-29T17:00:00.000Z"} +{"doc_count":19395,"split_key":209334,"timestamp":"2026-06-29T18:00:00.000Z"} +{"doc_count":6365,"split_key":211590,"timestamp":"2026-06-29T18:00:00.000Z"} +{"doc_count":1798,"split_key":47329,"timestamp":"2026-06-29T18:00:00.000Z"} +{"doc_count":1505,"split_key":37963,"timestamp":"2026-06-29T18:00:00.000Z"} +{"doc_count":1077,"split_key":14061,"timestamp":"2026-06-29T18:00:00.000Z"} +{"doc_count":29064,"split_key":209334,"timestamp":"2026-06-29T19:00:00.000Z"} +{"doc_count":2688,"split_key":211590,"timestamp":"2026-06-29T19:00:00.000Z"} +{"doc_count":1391,"split_key":37963,"timestamp":"2026-06-29T19:00:00.000Z"} +{"doc_count":1015,"split_key":14061,"timestamp":"2026-06-29T19:00:00.000Z"} +{"doc_count":940,"split_key":201401,"timestamp":"2026-06-29T19:00:00.000Z"} +{"doc_count":47779,"split_key":209334,"timestamp":"2026-06-29T20:00:00.000Z"} +{"doc_count":1578,"split_key":37963,"timestamp":"2026-06-29T20:00:00.000Z"} +{"doc_count":1544,"split_key":201401,"timestamp":"2026-06-29T20:00:00.000Z"} +{"doc_count":1062,"split_key":14061,"timestamp":"2026-06-29T20:00:00.000Z"} +{"doc_count":805,"split_key":396982,"timestamp":"2026-06-29T20:00:00.000Z"} +{"doc_count":13744,"split_key":209334,"timestamp":"2026-06-29T21:00:00.000Z"} +{"doc_count":3516,"split_key":31898,"timestamp":"2026-06-29T21:00:00.000Z"} +{"doc_count":1466,"split_key":51396,"timestamp":"2026-06-29T21:00:00.000Z"} +{"doc_count":1441,"split_key":37963,"timestamp":"2026-06-29T21:00:00.000Z"} +{"doc_count":846,"split_key":396982,"timestamp":"2026-06-29T21:00:00.000Z"} +{"doc_count":1452,"split_key":37963,"timestamp":"2026-06-29T22:00:00.000Z"} +{"doc_count":990,"split_key":51396,"timestamp":"2026-06-29T22:00:00.000Z"} +{"doc_count":825,"split_key":16509,"timestamp":"2026-06-29T22:00:00.000Z"} +{"doc_count":599,"split_key":45102,"timestamp":"2026-06-29T22:00:00.000Z"} +{"doc_count":535,"split_key":138915,"timestamp":"2026-06-29T22:00:00.000Z"} +{"doc_count":2299,"split_key":396982,"timestamp":"2026-06-29T23:00:00.000Z"} +{"doc_count":1393,"split_key":37963,"timestamp":"2026-06-29T23:00:00.000Z"} +{"doc_count":866,"split_key":51396,"timestamp":"2026-06-29T23:00:00.000Z"} +{"doc_count":681,"split_key":16509,"timestamp":"2026-06-29T23:00:00.000Z"} +{"doc_count":502,"split_key":138915,"timestamp":"2026-06-29T23:00:00.000Z"} +{"doc_count":32875,"split_key":396982,"timestamp":"2026-06-30T00:00:00.000Z"} +{"doc_count":12855,"split_key":14987,"timestamp":"2026-06-30T00:00:00.000Z"} +{"doc_count":1571,"split_key":37963,"timestamp":"2026-06-30T00:00:00.000Z"} +{"doc_count":871,"split_key":16509,"timestamp":"2026-06-30T00:00:00.000Z"} +{"doc_count":847,"split_key":51396,"timestamp":"2026-06-30T00:00:00.000Z"} +{"doc_count":29625,"split_key":396982,"timestamp":"2026-06-30T01:00:00.000Z"} +{"doc_count":1729,"split_key":211590,"timestamp":"2026-06-30T01:00:00.000Z"} +{"doc_count":1479,"split_key":37963,"timestamp":"2026-06-30T01:00:00.000Z"} +{"doc_count":1042,"split_key":51396,"timestamp":"2026-06-30T01:00:00.000Z"} +{"doc_count":681,"split_key":16509,"timestamp":"2026-06-30T01:00:00.000Z"} +{"doc_count":31056,"split_key":396982,"timestamp":"2026-06-30T02:00:00.000Z"} +{"doc_count":6744,"split_key":211590,"timestamp":"2026-06-30T02:00:00.000Z"} +{"doc_count":1364,"split_key":37963,"timestamp":"2026-06-30T02:00:00.000Z"} +{"doc_count":1064,"split_key":6698,"timestamp":"2026-06-30T02:00:00.000Z"} +{"doc_count":743,"split_key":16509,"timestamp":"2026-06-30T02:00:00.000Z"} +{"doc_count":22091,"split_key":396982,"timestamp":"2026-06-30T03:00:00.000Z"} +{"doc_count":1549,"split_key":51396,"timestamp":"2026-06-30T03:00:00.000Z"} +{"doc_count":1410,"split_key":37963,"timestamp":"2026-06-30T03:00:00.000Z"} +{"doc_count":1372,"split_key":270268,"timestamp":"2026-06-30T03:00:00.000Z"} +{"doc_count":1243,"split_key":16509,"timestamp":"2026-06-30T03:00:00.000Z"} +{"doc_count":30930,"split_key":396982,"timestamp":"2026-06-30T04:00:00.000Z"} +{"doc_count":3002,"split_key":270268,"timestamp":"2026-06-30T04:00:00.000Z"} +{"doc_count":1366,"split_key":37963,"timestamp":"2026-06-30T04:00:00.000Z"} +{"doc_count":1240,"split_key":16509,"timestamp":"2026-06-30T04:00:00.000Z"} +{"doc_count":1179,"split_key":25369,"timestamp":"2026-06-30T04:00:00.000Z"} +{"doc_count":21192,"split_key":396982,"timestamp":"2026-06-30T05:00:00.000Z"} +{"doc_count":2992,"split_key":270268,"timestamp":"2026-06-30T05:00:00.000Z"} +{"doc_count":2114,"split_key":37963,"timestamp":"2026-06-30T05:00:00.000Z"} +{"doc_count":1196,"split_key":25369,"timestamp":"2026-06-30T05:00:00.000Z"} +{"doc_count":1180,"split_key":51396,"timestamp":"2026-06-30T05:00:00.000Z"} +{"doc_count":34590,"split_key":396982,"timestamp":"2026-06-30T06:00:00.000Z"} +{"doc_count":3917,"split_key":209334,"timestamp":"2026-06-30T06:00:00.000Z"} +{"doc_count":3050,"split_key":270268,"timestamp":"2026-06-30T06:00:00.000Z"} +{"doc_count":3004,"split_key":211590,"timestamp":"2026-06-30T06:00:00.000Z"} +{"doc_count":1604,"split_key":37963,"timestamp":"2026-06-30T06:00:00.000Z"} +{"doc_count":23713,"split_key":396982,"timestamp":"2026-06-30T07:00:00.000Z"} +{"doc_count":10580,"split_key":209334,"timestamp":"2026-06-30T07:00:00.000Z"} +{"doc_count":3145,"split_key":270268,"timestamp":"2026-06-30T07:00:00.000Z"} +{"doc_count":3019,"split_key":211590,"timestamp":"2026-06-30T07:00:00.000Z"} +{"doc_count":1848,"split_key":51396,"timestamp":"2026-06-30T07:00:00.000Z"} +{"doc_count":23116,"split_key":396982,"timestamp":"2026-06-30T08:00:00.000Z"} +{"doc_count":10505,"split_key":209334,"timestamp":"2026-06-30T08:00:00.000Z"} +{"doc_count":3003,"split_key":270268,"timestamp":"2026-06-30T08:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-06-30T08:00:00.000Z"} +{"doc_count":992,"split_key":16509,"timestamp":"2026-06-30T08:00:00.000Z"} +{"doc_count":38794,"split_key":396982,"timestamp":"2026-06-30T09:00:00.000Z"} +{"doc_count":15953,"split_key":209334,"timestamp":"2026-06-30T09:00:00.000Z"} +{"doc_count":3006,"split_key":270268,"timestamp":"2026-06-30T09:00:00.000Z"} +{"doc_count":1094,"split_key":16509,"timestamp":"2026-06-30T09:00:00.000Z"} +{"doc_count":617,"split_key":51396,"timestamp":"2026-06-30T09:00:00.000Z"} +{"doc_count":32973,"split_key":396982,"timestamp":"2026-06-30T10:00:00.000Z"} +{"doc_count":2916,"split_key":270268,"timestamp":"2026-06-30T10:00:00.000Z"} +{"doc_count":810,"split_key":16509,"timestamp":"2026-06-30T10:00:00.000Z"} +{"doc_count":797,"split_key":51396,"timestamp":"2026-06-30T10:00:00.000Z"} +{"doc_count":715,"split_key":213438,"timestamp":"2026-06-30T10:00:00.000Z"} +{"doc_count":12218,"split_key":396982,"timestamp":"2026-06-30T11:00:00.000Z"} +{"doc_count":4764,"split_key":209334,"timestamp":"2026-06-30T11:00:00.000Z"} +{"doc_count":2975,"split_key":270268,"timestamp":"2026-06-30T11:00:00.000Z"} +{"doc_count":1103,"split_key":14061,"timestamp":"2026-06-30T11:00:00.000Z"} +{"doc_count":870,"split_key":16509,"timestamp":"2026-06-30T11:00:00.000Z"} +{"doc_count":13264,"split_key":209334,"timestamp":"2026-06-30T12:00:00.000Z"} +{"doc_count":3022,"split_key":270268,"timestamp":"2026-06-30T12:00:00.000Z"} +{"doc_count":1226,"split_key":37963,"timestamp":"2026-06-30T12:00:00.000Z"} +{"doc_count":932,"split_key":14061,"timestamp":"2026-06-30T12:00:00.000Z"} +{"doc_count":886,"split_key":16509,"timestamp":"2026-06-30T12:00:00.000Z"} +{"doc_count":45249,"split_key":209334,"timestamp":"2026-06-30T13:00:00.000Z"} +{"doc_count":4252,"split_key":211590,"timestamp":"2026-06-30T13:00:00.000Z"} +{"doc_count":3019,"split_key":270268,"timestamp":"2026-06-30T13:00:00.000Z"} +{"doc_count":1399,"split_key":201401,"timestamp":"2026-06-30T13:00:00.000Z"} +{"doc_count":1195,"split_key":14061,"timestamp":"2026-06-30T13:00:00.000Z"} +{"doc_count":35197,"split_key":209334,"timestamp":"2026-06-30T14:00:00.000Z"} +{"doc_count":4772,"split_key":211590,"timestamp":"2026-06-30T14:00:00.000Z"} +{"doc_count":2934,"split_key":270268,"timestamp":"2026-06-30T14:00:00.000Z"} +{"doc_count":1243,"split_key":14061,"timestamp":"2026-06-30T14:00:00.000Z"} +{"doc_count":1092,"split_key":37963,"timestamp":"2026-06-30T14:00:00.000Z"} +{"doc_count":6336,"split_key":211590,"timestamp":"2026-06-30T15:00:00.000Z"} +{"doc_count":3036,"split_key":270268,"timestamp":"2026-06-30T15:00:00.000Z"} +{"doc_count":1210,"split_key":141995,"timestamp":"2026-06-30T15:00:00.000Z"} +{"doc_count":1124,"split_key":2856,"timestamp":"2026-06-30T15:00:00.000Z"} +{"doc_count":1040,"split_key":37963,"timestamp":"2026-06-30T15:00:00.000Z"} +{"doc_count":9946,"split_key":211590,"timestamp":"2026-06-30T16:00:00.000Z"} +{"doc_count":2834,"split_key":270268,"timestamp":"2026-06-30T16:00:00.000Z"} +{"doc_count":1110,"split_key":37963,"timestamp":"2026-06-30T16:00:00.000Z"} +{"doc_count":1050,"split_key":141995,"timestamp":"2026-06-30T16:00:00.000Z"} +{"doc_count":973,"split_key":14061,"timestamp":"2026-06-30T16:00:00.000Z"} +{"doc_count":1800,"split_key":211590,"timestamp":"2026-06-30T17:00:00.000Z"} +{"doc_count":1124,"split_key":37963,"timestamp":"2026-06-30T17:00:00.000Z"} +{"doc_count":933,"split_key":14061,"timestamp":"2026-06-30T17:00:00.000Z"} +{"doc_count":886,"split_key":51396,"timestamp":"2026-06-30T17:00:00.000Z"} +{"doc_count":826,"split_key":213438,"timestamp":"2026-06-30T17:00:00.000Z"} +{"doc_count":18916,"split_key":209334,"timestamp":"2026-06-30T18:00:00.000Z"} +{"doc_count":2178,"split_key":45102,"timestamp":"2026-06-30T18:00:00.000Z"} +{"doc_count":1060,"split_key":37963,"timestamp":"2026-06-30T18:00:00.000Z"} +{"doc_count":966,"split_key":48090,"timestamp":"2026-06-30T18:00:00.000Z"} +{"doc_count":914,"split_key":14061,"timestamp":"2026-06-30T18:00:00.000Z"} +{"doc_count":27594,"split_key":209334,"timestamp":"2026-06-30T19:00:00.000Z"} +{"doc_count":1153,"split_key":37963,"timestamp":"2026-06-30T19:00:00.000Z"} +{"doc_count":1065,"split_key":14061,"timestamp":"2026-06-30T19:00:00.000Z"} +{"doc_count":927,"split_key":201401,"timestamp":"2026-06-30T19:00:00.000Z"} +{"doc_count":851,"split_key":213438,"timestamp":"2026-06-30T19:00:00.000Z"} +{"doc_count":53424,"split_key":209334,"timestamp":"2026-06-30T20:00:00.000Z"} +{"doc_count":1835,"split_key":197207,"timestamp":"2026-06-30T20:00:00.000Z"} +{"doc_count":1616,"split_key":201401,"timestamp":"2026-06-30T20:00:00.000Z"} +{"doc_count":1128,"split_key":37963,"timestamp":"2026-06-30T20:00:00.000Z"} +{"doc_count":972,"split_key":58224,"timestamp":"2026-06-30T20:00:00.000Z"} +{"doc_count":13533,"split_key":209334,"timestamp":"2026-06-30T21:00:00.000Z"} +{"doc_count":1050,"split_key":37963,"timestamp":"2026-06-30T21:00:00.000Z"} +{"doc_count":1044,"split_key":396982,"timestamp":"2026-06-30T21:00:00.000Z"} +{"doc_count":788,"split_key":213438,"timestamp":"2026-06-30T21:00:00.000Z"} +{"doc_count":707,"split_key":14061,"timestamp":"2026-06-30T21:00:00.000Z"} +{"doc_count":1441,"split_key":37963,"timestamp":"2026-06-30T22:00:00.000Z"} +{"doc_count":822,"split_key":213438,"timestamp":"2026-06-30T22:00:00.000Z"} +{"doc_count":606,"split_key":396982,"timestamp":"2026-06-30T22:00:00.000Z"} +{"doc_count":565,"split_key":16509,"timestamp":"2026-06-30T22:00:00.000Z"} +{"doc_count":478,"split_key":138915,"timestamp":"2026-06-30T22:00:00.000Z"} +{"doc_count":2041,"split_key":37963,"timestamp":"2026-06-30T23:00:00.000Z"} +{"doc_count":777,"split_key":264217,"timestamp":"2026-06-30T23:00:00.000Z"} +{"doc_count":758,"split_key":213438,"timestamp":"2026-06-30T23:00:00.000Z"} +{"doc_count":581,"split_key":398101,"timestamp":"2026-06-30T23:00:00.000Z"} +{"doc_count":543,"split_key":51396,"timestamp":"2026-06-30T23:00:00.000Z"} +{"doc_count":10672,"split_key":14987,"timestamp":"2026-07-01T00:00:00.000Z"} +{"doc_count":1926,"split_key":211590,"timestamp":"2026-07-01T00:00:00.000Z"} +{"doc_count":1347,"split_key":264217,"timestamp":"2026-07-01T00:00:00.000Z"} +{"doc_count":1090,"split_key":51396,"timestamp":"2026-07-01T00:00:00.000Z"} +{"doc_count":1040,"split_key":37963,"timestamp":"2026-07-01T00:00:00.000Z"} +{"doc_count":6333,"split_key":211590,"timestamp":"2026-07-01T01:00:00.000Z"} +{"doc_count":889,"split_key":396982,"timestamp":"2026-07-01T01:00:00.000Z"} +{"doc_count":762,"split_key":213438,"timestamp":"2026-07-01T01:00:00.000Z"} +{"doc_count":498,"split_key":24323,"timestamp":"2026-07-01T01:00:00.000Z"} +{"doc_count":494,"split_key":138915,"timestamp":"2026-07-01T01:00:00.000Z"} +{"doc_count":11229,"split_key":202412,"timestamp":"2026-07-01T02:00:00.000Z"} +{"doc_count":3106,"split_key":211590,"timestamp":"2026-07-01T02:00:00.000Z"} +{"doc_count":1226,"split_key":51396,"timestamp":"2026-07-01T02:00:00.000Z"} +{"doc_count":779,"split_key":16509,"timestamp":"2026-07-01T02:00:00.000Z"} +{"doc_count":715,"split_key":396982,"timestamp":"2026-07-01T02:00:00.000Z"} +{"doc_count":3806,"split_key":211590,"timestamp":"2026-07-01T03:00:00.000Z"} +{"doc_count":3029,"split_key":56630,"timestamp":"2026-07-01T03:00:00.000Z"} +{"doc_count":1467,"split_key":210656,"timestamp":"2026-07-01T03:00:00.000Z"} +{"doc_count":1280,"split_key":16509,"timestamp":"2026-07-01T03:00:00.000Z"} +{"doc_count":793,"split_key":25106,"timestamp":"2026-07-01T03:00:00.000Z"} +{"doc_count":4602,"split_key":2856,"timestamp":"2026-07-01T04:00:00.000Z"} +{"doc_count":1135,"split_key":25369,"timestamp":"2026-07-01T04:00:00.000Z"} +{"doc_count":914,"split_key":51396,"timestamp":"2026-07-01T04:00:00.000Z"} +{"doc_count":765,"split_key":213438,"timestamp":"2026-07-01T04:00:00.000Z"} +{"doc_count":613,"split_key":396982,"timestamp":"2026-07-01T04:00:00.000Z"} +{"doc_count":1595,"split_key":37963,"timestamp":"2026-07-01T05:00:00.000Z"} +{"doc_count":1016,"split_key":25369,"timestamp":"2026-07-01T05:00:00.000Z"} +{"doc_count":884,"split_key":396982,"timestamp":"2026-07-01T05:00:00.000Z"} +{"doc_count":869,"split_key":213438,"timestamp":"2026-07-01T05:00:00.000Z"} +{"doc_count":667,"split_key":398101,"timestamp":"2026-07-01T05:00:00.000Z"} +{"doc_count":3919,"split_key":209334,"timestamp":"2026-07-01T06:00:00.000Z"} +{"doc_count":2520,"split_key":37963,"timestamp":"2026-07-01T06:00:00.000Z"} +{"doc_count":916,"split_key":213438,"timestamp":"2026-07-01T06:00:00.000Z"} +{"doc_count":755,"split_key":16509,"timestamp":"2026-07-01T06:00:00.000Z"} +{"doc_count":596,"split_key":25369,"timestamp":"2026-07-01T06:00:00.000Z"} +{"doc_count":10943,"split_key":209334,"timestamp":"2026-07-01T07:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-07-01T07:00:00.000Z"} +{"doc_count":1337,"split_key":37963,"timestamp":"2026-07-01T07:00:00.000Z"} +{"doc_count":857,"split_key":213438,"timestamp":"2026-07-01T07:00:00.000Z"} +{"doc_count":697,"split_key":16509,"timestamp":"2026-07-01T07:00:00.000Z"} +{"doc_count":10579,"split_key":209334,"timestamp":"2026-07-01T08:00:00.000Z"} +{"doc_count":742,"split_key":16509,"timestamp":"2026-07-01T08:00:00.000Z"} +{"doc_count":482,"split_key":24323,"timestamp":"2026-07-01T08:00:00.000Z"} +{"doc_count":473,"split_key":201401,"timestamp":"2026-07-01T08:00:00.000Z"} +{"doc_count":458,"split_key":138915,"timestamp":"2026-07-01T08:00:00.000Z"} +{"doc_count":15576,"split_key":209334,"timestamp":"2026-07-01T09:00:00.000Z"} +{"doc_count":887,"split_key":201401,"timestamp":"2026-07-01T09:00:00.000Z"} +{"doc_count":595,"split_key":16509,"timestamp":"2026-07-01T09:00:00.000Z"} +{"doc_count":522,"split_key":51396,"timestamp":"2026-07-01T09:00:00.000Z"} +{"doc_count":486,"split_key":396982,"timestamp":"2026-07-01T09:00:00.000Z"} +{"doc_count":1793,"split_key":51396,"timestamp":"2026-07-01T10:00:00.000Z"} +{"doc_count":943,"split_key":213438,"timestamp":"2026-07-01T10:00:00.000Z"} +{"doc_count":697,"split_key":14061,"timestamp":"2026-07-01T10:00:00.000Z"} +{"doc_count":599,"split_key":16509,"timestamp":"2026-07-01T10:00:00.000Z"} +{"doc_count":472,"split_key":24323,"timestamp":"2026-07-01T10:00:00.000Z"} +{"doc_count":4913,"split_key":209334,"timestamp":"2026-07-01T11:00:00.000Z"} +{"doc_count":1121,"split_key":25369,"timestamp":"2026-07-01T11:00:00.000Z"} +{"doc_count":1020,"split_key":213438,"timestamp":"2026-07-01T11:00:00.000Z"} +{"doc_count":666,"split_key":14061,"timestamp":"2026-07-01T11:00:00.000Z"} +{"doc_count":473,"split_key":24323,"timestamp":"2026-07-01T11:00:00.000Z"} +{"doc_count":13108,"split_key":209334,"timestamp":"2026-07-01T12:00:00.000Z"} +{"doc_count":1347,"split_key":213438,"timestamp":"2026-07-01T12:00:00.000Z"} +{"doc_count":754,"split_key":14061,"timestamp":"2026-07-01T12:00:00.000Z"} +{"doc_count":679,"split_key":16509,"timestamp":"2026-07-01T12:00:00.000Z"} +{"doc_count":645,"split_key":24323,"timestamp":"2026-07-01T12:00:00.000Z"} +{"doc_count":44414,"split_key":209334,"timestamp":"2026-07-01T13:00:00.000Z"} +{"doc_count":1507,"split_key":201401,"timestamp":"2026-07-01T13:00:00.000Z"} +{"doc_count":1354,"split_key":213438,"timestamp":"2026-07-01T13:00:00.000Z"} +{"doc_count":752,"split_key":16509,"timestamp":"2026-07-01T13:00:00.000Z"} +{"doc_count":714,"split_key":14061,"timestamp":"2026-07-01T13:00:00.000Z"} +{"doc_count":36591,"split_key":209334,"timestamp":"2026-07-01T14:00:00.000Z"} +{"doc_count":1400,"split_key":63737,"timestamp":"2026-07-01T14:00:00.000Z"} +{"doc_count":1366,"split_key":213438,"timestamp":"2026-07-01T14:00:00.000Z"} +{"doc_count":1364,"split_key":204428,"timestamp":"2026-07-01T14:00:00.000Z"} +{"doc_count":1126,"split_key":201401,"timestamp":"2026-07-01T14:00:00.000Z"} +{"doc_count":1372,"split_key":51396,"timestamp":"2026-07-01T15:00:00.000Z"} +{"doc_count":1363,"split_key":213438,"timestamp":"2026-07-01T15:00:00.000Z"} +{"doc_count":1075,"split_key":204428,"timestamp":"2026-07-01T15:00:00.000Z"} +{"doc_count":828,"split_key":16509,"timestamp":"2026-07-01T15:00:00.000Z"} +{"doc_count":748,"split_key":14061,"timestamp":"2026-07-01T15:00:00.000Z"} +{"doc_count":3136,"split_key":211590,"timestamp":"2026-07-01T16:00:00.000Z"} +{"doc_count":1323,"split_key":213438,"timestamp":"2026-07-01T16:00:00.000Z"} +{"doc_count":977,"split_key":14061,"timestamp":"2026-07-01T16:00:00.000Z"} +{"doc_count":783,"split_key":51396,"timestamp":"2026-07-01T16:00:00.000Z"} +{"doc_count":761,"split_key":16509,"timestamp":"2026-07-01T16:00:00.000Z"} +{"doc_count":3772,"split_key":211590,"timestamp":"2026-07-01T17:00:00.000Z"} +{"doc_count":1324,"split_key":213438,"timestamp":"2026-07-01T17:00:00.000Z"} +{"doc_count":795,"split_key":14061,"timestamp":"2026-07-01T17:00:00.000Z"} +{"doc_count":712,"split_key":141995,"timestamp":"2026-07-01T17:00:00.000Z"} +{"doc_count":451,"split_key":396982,"timestamp":"2026-07-01T17:00:00.000Z"} +{"doc_count":18750,"split_key":209334,"timestamp":"2026-07-01T18:00:00.000Z"} +{"doc_count":1376,"split_key":213438,"timestamp":"2026-07-01T18:00:00.000Z"} +{"doc_count":1321,"split_key":37963,"timestamp":"2026-07-01T18:00:00.000Z"} +{"doc_count":729,"split_key":14061,"timestamp":"2026-07-01T18:00:00.000Z"} +{"doc_count":677,"split_key":201401,"timestamp":"2026-07-01T18:00:00.000Z"} +{"doc_count":26529,"split_key":209334,"timestamp":"2026-07-01T19:00:00.000Z"} +{"doc_count":3015,"split_key":211590,"timestamp":"2026-07-01T19:00:00.000Z"} +{"doc_count":1374,"split_key":213438,"timestamp":"2026-07-01T19:00:00.000Z"} +{"doc_count":867,"split_key":14061,"timestamp":"2026-07-01T19:00:00.000Z"} +{"doc_count":793,"split_key":51396,"timestamp":"2026-07-01T19:00:00.000Z"} +{"doc_count":48037,"split_key":209334,"timestamp":"2026-07-01T20:00:00.000Z"} +{"doc_count":3007,"split_key":211590,"timestamp":"2026-07-01T20:00:00.000Z"} +{"doc_count":1395,"split_key":201401,"timestamp":"2026-07-01T20:00:00.000Z"} +{"doc_count":1373,"split_key":213438,"timestamp":"2026-07-01T20:00:00.000Z"} +{"doc_count":788,"split_key":14061,"timestamp":"2026-07-01T20:00:00.000Z"} +{"doc_count":15966,"split_key":209334,"timestamp":"2026-07-01T21:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-07-01T21:00:00.000Z"} +{"doc_count":1070,"split_key":213438,"timestamp":"2026-07-01T21:00:00.000Z"} +{"doc_count":750,"split_key":396982,"timestamp":"2026-07-01T21:00:00.000Z"} +{"doc_count":630,"split_key":131562,"timestamp":"2026-07-01T21:00:00.000Z"} +{"doc_count":636,"split_key":131562,"timestamp":"2026-07-01T22:00:00.000Z"} +{"doc_count":560,"split_key":16509,"timestamp":"2026-07-01T22:00:00.000Z"} +{"doc_count":557,"split_key":396982,"timestamp":"2026-07-01T22:00:00.000Z"} +{"doc_count":537,"split_key":138915,"timestamp":"2026-07-01T22:00:00.000Z"} +{"doc_count":335,"split_key":213412,"timestamp":"2026-07-01T22:00:00.000Z"} +{"doc_count":1351,"split_key":37963,"timestamp":"2026-07-01T23:00:00.000Z"} +{"doc_count":748,"split_key":396982,"timestamp":"2026-07-01T23:00:00.000Z"} +{"doc_count":686,"split_key":48090,"timestamp":"2026-07-01T23:00:00.000Z"} +{"doc_count":651,"split_key":131562,"timestamp":"2026-07-01T23:00:00.000Z"} +{"doc_count":485,"split_key":51396,"timestamp":"2026-07-01T23:00:00.000Z"} +{"doc_count":10037,"split_key":14987,"timestamp":"2026-07-02T00:00:00.000Z"} +{"doc_count":655,"split_key":131562,"timestamp":"2026-07-02T00:00:00.000Z"} +{"doc_count":627,"split_key":396982,"timestamp":"2026-07-02T00:00:00.000Z"} +{"doc_count":607,"split_key":135377,"timestamp":"2026-07-02T00:00:00.000Z"} +{"doc_count":492,"split_key":16509,"timestamp":"2026-07-02T00:00:00.000Z"} +{"doc_count":5524,"split_key":211590,"timestamp":"2026-07-02T01:00:00.000Z"} +{"doc_count":993,"split_key":396982,"timestamp":"2026-07-02T01:00:00.000Z"} +{"doc_count":654,"split_key":131562,"timestamp":"2026-07-02T01:00:00.000Z"} +{"doc_count":586,"split_key":51396,"timestamp":"2026-07-02T01:00:00.000Z"} +{"doc_count":480,"split_key":16509,"timestamp":"2026-07-02T01:00:00.000Z"} +{"doc_count":774,"split_key":51396,"timestamp":"2026-07-02T02:00:00.000Z"} +{"doc_count":690,"split_key":396982,"timestamp":"2026-07-02T02:00:00.000Z"} +{"doc_count":636,"split_key":16509,"timestamp":"2026-07-02T02:00:00.000Z"} +{"doc_count":630,"split_key":131562,"timestamp":"2026-07-02T02:00:00.000Z"} +{"doc_count":487,"split_key":209334,"timestamp":"2026-07-02T02:00:00.000Z"} +{"doc_count":921,"split_key":16509,"timestamp":"2026-07-02T03:00:00.000Z"} +{"doc_count":642,"split_key":131562,"timestamp":"2026-07-02T03:00:00.000Z"} +{"doc_count":580,"split_key":396982,"timestamp":"2026-07-02T03:00:00.000Z"} +{"doc_count":439,"split_key":138915,"timestamp":"2026-07-02T03:00:00.000Z"} +{"doc_count":327,"split_key":213412,"timestamp":"2026-07-02T03:00:00.000Z"} +{"doc_count":1408,"split_key":25369,"timestamp":"2026-07-02T04:00:00.000Z"} +{"doc_count":677,"split_key":396982,"timestamp":"2026-07-02T04:00:00.000Z"} +{"doc_count":646,"split_key":131562,"timestamp":"2026-07-02T04:00:00.000Z"} +{"doc_count":444,"split_key":138915,"timestamp":"2026-07-02T04:00:00.000Z"} +{"doc_count":434,"split_key":16509,"timestamp":"2026-07-02T04:00:00.000Z"} +{"doc_count":3015,"split_key":211590,"timestamp":"2026-07-02T05:00:00.000Z"} +{"doc_count":1480,"split_key":51396,"timestamp":"2026-07-02T05:00:00.000Z"} +{"doc_count":1417,"split_key":25369,"timestamp":"2026-07-02T05:00:00.000Z"} +{"doc_count":897,"split_key":396982,"timestamp":"2026-07-02T05:00:00.000Z"} +{"doc_count":662,"split_key":131562,"timestamp":"2026-07-02T05:00:00.000Z"} +{"doc_count":3859,"split_key":211590,"timestamp":"2026-07-02T06:00:00.000Z"} +{"doc_count":3784,"split_key":209334,"timestamp":"2026-07-02T06:00:00.000Z"} +{"doc_count":799,"split_key":25369,"timestamp":"2026-07-02T06:00:00.000Z"} +{"doc_count":668,"split_key":131562,"timestamp":"2026-07-02T06:00:00.000Z"} +{"doc_count":620,"split_key":396982,"timestamp":"2026-07-02T06:00:00.000Z"} +{"doc_count":10669,"split_key":209334,"timestamp":"2026-07-02T07:00:00.000Z"} +{"doc_count":2148,"split_key":211590,"timestamp":"2026-07-02T07:00:00.000Z"} +{"doc_count":1603,"split_key":37963,"timestamp":"2026-07-02T07:00:00.000Z"} +{"doc_count":655,"split_key":131562,"timestamp":"2026-07-02T07:00:00.000Z"} +{"doc_count":615,"split_key":396982,"timestamp":"2026-07-02T07:00:00.000Z"} +{"doc_count":10308,"split_key":209334,"timestamp":"2026-07-02T08:00:00.000Z"} +{"doc_count":1720,"split_key":37963,"timestamp":"2026-07-02T08:00:00.000Z"} +{"doc_count":758,"split_key":396982,"timestamp":"2026-07-02T08:00:00.000Z"} +{"doc_count":701,"split_key":16509,"timestamp":"2026-07-02T08:00:00.000Z"} +{"doc_count":663,"split_key":131562,"timestamp":"2026-07-02T08:00:00.000Z"} +{"doc_count":15579,"split_key":209334,"timestamp":"2026-07-02T09:00:00.000Z"} +{"doc_count":1779,"split_key":63949,"timestamp":"2026-07-02T09:00:00.000Z"} +{"doc_count":1172,"split_key":37963,"timestamp":"2026-07-02T09:00:00.000Z"} +{"doc_count":1119,"split_key":213438,"timestamp":"2026-07-02T09:00:00.000Z"} +{"doc_count":1118,"split_key":45102,"timestamp":"2026-07-02T09:00:00.000Z"} +{"doc_count":3326,"split_key":45102,"timestamp":"2026-07-02T10:00:00.000Z"} +{"doc_count":3073,"split_key":211590,"timestamp":"2026-07-02T10:00:00.000Z"} +{"doc_count":1420,"split_key":213438,"timestamp":"2026-07-02T10:00:00.000Z"} +{"doc_count":1005,"split_key":37963,"timestamp":"2026-07-02T10:00:00.000Z"} +{"doc_count":654,"split_key":131562,"timestamp":"2026-07-02T10:00:00.000Z"} +{"doc_count":9001,"split_key":211590,"timestamp":"2026-07-02T11:00:00.000Z"} +{"doc_count":4839,"split_key":209334,"timestamp":"2026-07-02T11:00:00.000Z"} +{"doc_count":1387,"split_key":7922,"timestamp":"2026-07-02T11:00:00.000Z"} +{"doc_count":1360,"split_key":213438,"timestamp":"2026-07-02T11:00:00.000Z"} +{"doc_count":741,"split_key":131562,"timestamp":"2026-07-02T11:00:00.000Z"} +{"doc_count":12748,"split_key":209334,"timestamp":"2026-07-02T12:00:00.000Z"} +{"doc_count":1394,"split_key":213438,"timestamp":"2026-07-02T12:00:00.000Z"} +{"doc_count":1125,"split_key":131562,"timestamp":"2026-07-02T12:00:00.000Z"} +{"doc_count":501,"split_key":138915,"timestamp":"2026-07-02T12:00:00.000Z"} +{"doc_count":489,"split_key":396982,"timestamp":"2026-07-02T12:00:00.000Z"} +{"doc_count":44236,"split_key":209334,"timestamp":"2026-07-02T13:00:00.000Z"} +{"doc_count":1520,"split_key":201401,"timestamp":"2026-07-02T13:00:00.000Z"} +{"doc_count":1452,"split_key":213438,"timestamp":"2026-07-02T13:00:00.000Z"} +{"doc_count":1092,"split_key":131562,"timestamp":"2026-07-02T13:00:00.000Z"} +{"doc_count":796,"split_key":396982,"timestamp":"2026-07-02T13:00:00.000Z"} +{"doc_count":36635,"split_key":209334,"timestamp":"2026-07-02T14:00:00.000Z"} +{"doc_count":3669,"split_key":211590,"timestamp":"2026-07-02T14:00:00.000Z"} +{"doc_count":1399,"split_key":213438,"timestamp":"2026-07-02T14:00:00.000Z"} +{"doc_count":1202,"split_key":201401,"timestamp":"2026-07-02T14:00:00.000Z"} +{"doc_count":1180,"split_key":131562,"timestamp":"2026-07-02T14:00:00.000Z"} +{"doc_count":5354,"split_key":211590,"timestamp":"2026-07-02T15:00:00.000Z"} +{"doc_count":1399,"split_key":213438,"timestamp":"2026-07-02T15:00:00.000Z"} +{"doc_count":525,"split_key":138915,"timestamp":"2026-07-02T15:00:00.000Z"} +{"doc_count":456,"split_key":24323,"timestamp":"2026-07-02T15:00:00.000Z"} +{"doc_count":409,"split_key":16509,"timestamp":"2026-07-02T15:00:00.000Z"} +{"doc_count":6175,"split_key":211590,"timestamp":"2026-07-02T16:00:00.000Z"} +{"doc_count":1401,"split_key":213438,"timestamp":"2026-07-02T16:00:00.000Z"} +{"doc_count":986,"split_key":396982,"timestamp":"2026-07-02T16:00:00.000Z"} +{"doc_count":827,"split_key":141995,"timestamp":"2026-07-02T16:00:00.000Z"} +{"doc_count":710,"split_key":37963,"timestamp":"2026-07-02T16:00:00.000Z"} +{"doc_count":3143,"split_key":211590,"timestamp":"2026-07-02T17:00:00.000Z"} +{"doc_count":1371,"split_key":213438,"timestamp":"2026-07-02T17:00:00.000Z"} +{"doc_count":585,"split_key":396982,"timestamp":"2026-07-02T17:00:00.000Z"} +{"doc_count":575,"split_key":398101,"timestamp":"2026-07-02T17:00:00.000Z"} +{"doc_count":550,"split_key":141995,"timestamp":"2026-07-02T17:00:00.000Z"} +{"doc_count":18738,"split_key":209334,"timestamp":"2026-07-02T18:00:00.000Z"} +{"doc_count":3919,"split_key":211590,"timestamp":"2026-07-02T18:00:00.000Z"} +{"doc_count":1287,"split_key":213438,"timestamp":"2026-07-02T18:00:00.000Z"} +{"doc_count":908,"split_key":396982,"timestamp":"2026-07-02T18:00:00.000Z"} +{"doc_count":713,"split_key":201401,"timestamp":"2026-07-02T18:00:00.000Z"} +{"doc_count":26039,"split_key":209334,"timestamp":"2026-07-02T19:00:00.000Z"} +{"doc_count":3099,"split_key":211590,"timestamp":"2026-07-02T19:00:00.000Z"} +{"doc_count":1373,"split_key":213438,"timestamp":"2026-07-02T19:00:00.000Z"} +{"doc_count":1138,"split_key":201401,"timestamp":"2026-07-02T19:00:00.000Z"} +{"doc_count":827,"split_key":51396,"timestamp":"2026-07-02T19:00:00.000Z"} +{"doc_count":48044,"split_key":209334,"timestamp":"2026-07-02T20:00:00.000Z"} +{"doc_count":1385,"split_key":201401,"timestamp":"2026-07-02T20:00:00.000Z"} +{"doc_count":1229,"split_key":213438,"timestamp":"2026-07-02T20:00:00.000Z"} +{"doc_count":595,"split_key":396982,"timestamp":"2026-07-02T20:00:00.000Z"} +{"doc_count":557,"split_key":398101,"timestamp":"2026-07-02T20:00:00.000Z"} +{"doc_count":15937,"split_key":209334,"timestamp":"2026-07-02T21:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-07-02T21:00:00.000Z"} +{"doc_count":1468,"split_key":51396,"timestamp":"2026-07-02T21:00:00.000Z"} +{"doc_count":1388,"split_key":213438,"timestamp":"2026-07-02T21:00:00.000Z"} +{"doc_count":769,"split_key":396982,"timestamp":"2026-07-02T21:00:00.000Z"} +{"doc_count":5377,"split_key":211590,"timestamp":"2026-07-02T22:00:00.000Z"} +{"doc_count":1372,"split_key":213438,"timestamp":"2026-07-02T22:00:00.000Z"} +{"doc_count":790,"split_key":141995,"timestamp":"2026-07-02T22:00:00.000Z"} +{"doc_count":594,"split_key":396982,"timestamp":"2026-07-02T22:00:00.000Z"} +{"doc_count":510,"split_key":48090,"timestamp":"2026-07-02T22:00:00.000Z"} +{"doc_count":8553,"split_key":211590,"timestamp":"2026-07-02T23:00:00.000Z"} +{"doc_count":1321,"split_key":213438,"timestamp":"2026-07-02T23:00:00.000Z"} +{"doc_count":1112,"split_key":209334,"timestamp":"2026-07-02T23:00:00.000Z"} +{"doc_count":929,"split_key":141995,"timestamp":"2026-07-02T23:00:00.000Z"} +{"doc_count":604,"split_key":396982,"timestamp":"2026-07-02T23:00:00.000Z"} +{"doc_count":9986,"split_key":14987,"timestamp":"2026-07-03T00:00:00.000Z"} +{"doc_count":4687,"split_key":211590,"timestamp":"2026-07-03T00:00:00.000Z"} +{"doc_count":1624,"split_key":37963,"timestamp":"2026-07-03T00:00:00.000Z"} +{"doc_count":1266,"split_key":213438,"timestamp":"2026-07-03T00:00:00.000Z"} +{"doc_count":684,"split_key":396982,"timestamp":"2026-07-03T00:00:00.000Z"} +{"doc_count":2176,"split_key":211590,"timestamp":"2026-07-03T01:00:00.000Z"} +{"doc_count":1491,"split_key":45102,"timestamp":"2026-07-03T01:00:00.000Z"} +{"doc_count":1335,"split_key":213438,"timestamp":"2026-07-03T01:00:00.000Z"} +{"doc_count":987,"split_key":396982,"timestamp":"2026-07-03T01:00:00.000Z"} +{"doc_count":508,"split_key":138915,"timestamp":"2026-07-03T01:00:00.000Z"} +{"doc_count":1717,"split_key":45102,"timestamp":"2026-07-03T02:00:00.000Z"} +{"doc_count":1364,"split_key":213438,"timestamp":"2026-07-03T02:00:00.000Z"} +{"doc_count":580,"split_key":396982,"timestamp":"2026-07-03T02:00:00.000Z"} +{"doc_count":491,"split_key":24323,"timestamp":"2026-07-03T02:00:00.000Z"} +{"doc_count":484,"split_key":138915,"timestamp":"2026-07-03T02:00:00.000Z"} +{"doc_count":1550,"split_key":45102,"timestamp":"2026-07-03T03:00:00.000Z"} +{"doc_count":1326,"split_key":213438,"timestamp":"2026-07-03T03:00:00.000Z"} +{"doc_count":645,"split_key":396982,"timestamp":"2026-07-03T03:00:00.000Z"} +{"doc_count":600,"split_key":12975,"timestamp":"2026-07-03T03:00:00.000Z"} +{"doc_count":574,"split_key":17552,"timestamp":"2026-07-03T03:00:00.000Z"} +{"doc_count":1390,"split_key":213438,"timestamp":"2026-07-03T04:00:00.000Z"} +{"doc_count":1164,"split_key":25369,"timestamp":"2026-07-03T04:00:00.000Z"} +{"doc_count":971,"split_key":12975,"timestamp":"2026-07-03T04:00:00.000Z"} +{"doc_count":734,"split_key":396982,"timestamp":"2026-07-03T04:00:00.000Z"} +{"doc_count":619,"split_key":37963,"timestamp":"2026-07-03T04:00:00.000Z"} +{"doc_count":1359,"split_key":213438,"timestamp":"2026-07-03T05:00:00.000Z"} +{"doc_count":1215,"split_key":396982,"timestamp":"2026-07-03T05:00:00.000Z"} +{"doc_count":1007,"split_key":12975,"timestamp":"2026-07-03T05:00:00.000Z"} +{"doc_count":982,"split_key":25369,"timestamp":"2026-07-03T05:00:00.000Z"} +{"doc_count":735,"split_key":14061,"timestamp":"2026-07-03T05:00:00.000Z"} +{"doc_count":4102,"split_key":209334,"timestamp":"2026-07-03T06:00:00.000Z"} +{"doc_count":1253,"split_key":213438,"timestamp":"2026-07-03T06:00:00.000Z"} +{"doc_count":1151,"split_key":43641,"timestamp":"2026-07-03T06:00:00.000Z"} +{"doc_count":1008,"split_key":12975,"timestamp":"2026-07-03T06:00:00.000Z"} +{"doc_count":947,"split_key":138915,"timestamp":"2026-07-03T06:00:00.000Z"} +{"doc_count":10863,"split_key":209334,"timestamp":"2026-07-03T07:00:00.000Z"} +{"doc_count":1211,"split_key":51396,"timestamp":"2026-07-03T07:00:00.000Z"} +{"doc_count":1004,"split_key":12975,"timestamp":"2026-07-03T07:00:00.000Z"} +{"doc_count":860,"split_key":14061,"timestamp":"2026-07-03T07:00:00.000Z"} +{"doc_count":553,"split_key":24323,"timestamp":"2026-07-03T07:00:00.000Z"} +{"doc_count":10572,"split_key":209334,"timestamp":"2026-07-03T08:00:00.000Z"} +{"doc_count":682,"split_key":24323,"timestamp":"2026-07-03T08:00:00.000Z"} +{"doc_count":664,"split_key":51396,"timestamp":"2026-07-03T08:00:00.000Z"} +{"doc_count":621,"split_key":17552,"timestamp":"2026-07-03T08:00:00.000Z"} +{"doc_count":526,"split_key":138915,"timestamp":"2026-07-03T08:00:00.000Z"} +{"doc_count":16008,"split_key":209334,"timestamp":"2026-07-03T09:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-07-03T09:00:00.000Z"} +{"doc_count":818,"split_key":37963,"timestamp":"2026-07-03T09:00:00.000Z"} +{"doc_count":739,"split_key":24323,"timestamp":"2026-07-03T09:00:00.000Z"} +{"doc_count":666,"split_key":396982,"timestamp":"2026-07-03T09:00:00.000Z"} +{"doc_count":1249,"split_key":37963,"timestamp":"2026-07-03T10:00:00.000Z"} +{"doc_count":728,"split_key":24323,"timestamp":"2026-07-03T10:00:00.000Z"} +{"doc_count":721,"split_key":211590,"timestamp":"2026-07-03T10:00:00.000Z"} +{"doc_count":600,"split_key":17552,"timestamp":"2026-07-03T10:00:00.000Z"} +{"doc_count":558,"split_key":396982,"timestamp":"2026-07-03T10:00:00.000Z"} +{"doc_count":4806,"split_key":209334,"timestamp":"2026-07-03T11:00:00.000Z"} +{"doc_count":3238,"split_key":211590,"timestamp":"2026-07-03T11:00:00.000Z"} +{"doc_count":990,"split_key":37963,"timestamp":"2026-07-03T11:00:00.000Z"} +{"doc_count":614,"split_key":396982,"timestamp":"2026-07-03T11:00:00.000Z"} +{"doc_count":597,"split_key":17552,"timestamp":"2026-07-03T11:00:00.000Z"} +{"doc_count":12675,"split_key":209334,"timestamp":"2026-07-03T12:00:00.000Z"} +{"doc_count":2575,"split_key":211590,"timestamp":"2026-07-03T12:00:00.000Z"} +{"doc_count":1019,"split_key":37963,"timestamp":"2026-07-03T12:00:00.000Z"} +{"doc_count":621,"split_key":396982,"timestamp":"2026-07-03T12:00:00.000Z"} +{"doc_count":605,"split_key":17552,"timestamp":"2026-07-03T12:00:00.000Z"} +{"doc_count":42053,"split_key":209334,"timestamp":"2026-07-03T13:00:00.000Z"} +{"doc_count":2983,"split_key":211590,"timestamp":"2026-07-03T13:00:00.000Z"} +{"doc_count":1364,"split_key":201401,"timestamp":"2026-07-03T13:00:00.000Z"} +{"doc_count":856,"split_key":396982,"timestamp":"2026-07-03T13:00:00.000Z"} +{"doc_count":765,"split_key":51396,"timestamp":"2026-07-03T13:00:00.000Z"} +{"doc_count":39042,"split_key":209334,"timestamp":"2026-07-03T14:00:00.000Z"} +{"doc_count":1576,"split_key":211590,"timestamp":"2026-07-03T14:00:00.000Z"} +{"doc_count":1362,"split_key":201401,"timestamp":"2026-07-03T14:00:00.000Z"} +{"doc_count":1343,"split_key":51396,"timestamp":"2026-07-03T14:00:00.000Z"} +{"doc_count":616,"split_key":17552,"timestamp":"2026-07-03T14:00:00.000Z"} +{"doc_count":1755,"split_key":63949,"timestamp":"2026-07-03T15:00:00.000Z"} +{"doc_count":984,"split_key":37963,"timestamp":"2026-07-03T15:00:00.000Z"} +{"doc_count":623,"split_key":51396,"timestamp":"2026-07-03T15:00:00.000Z"} +{"doc_count":563,"split_key":17552,"timestamp":"2026-07-03T15:00:00.000Z"} +{"doc_count":461,"split_key":396982,"timestamp":"2026-07-03T15:00:00.000Z"} +{"doc_count":1081,"split_key":37963,"timestamp":"2026-07-03T16:00:00.000Z"} +{"doc_count":596,"split_key":396982,"timestamp":"2026-07-03T16:00:00.000Z"} +{"doc_count":574,"split_key":17552,"timestamp":"2026-07-03T16:00:00.000Z"} +{"doc_count":494,"split_key":138915,"timestamp":"2026-07-03T16:00:00.000Z"} +{"doc_count":397,"split_key":213412,"timestamp":"2026-07-03T16:00:00.000Z"} +{"doc_count":1211,"split_key":37963,"timestamp":"2026-07-03T17:00:00.000Z"} +{"doc_count":731,"split_key":396982,"timestamp":"2026-07-03T17:00:00.000Z"} +{"doc_count":611,"split_key":17552,"timestamp":"2026-07-03T17:00:00.000Z"} +{"doc_count":457,"split_key":138915,"timestamp":"2026-07-03T17:00:00.000Z"} +{"doc_count":418,"split_key":51396,"timestamp":"2026-07-03T17:00:00.000Z"} +{"doc_count":25643,"split_key":14061,"timestamp":"2026-07-03T18:00:00.000Z"} +{"doc_count":18842,"split_key":209334,"timestamp":"2026-07-03T18:00:00.000Z"} +{"doc_count":1279,"split_key":37963,"timestamp":"2026-07-03T18:00:00.000Z"} +{"doc_count":970,"split_key":51396,"timestamp":"2026-07-03T18:00:00.000Z"} +{"doc_count":686,"split_key":17552,"timestamp":"2026-07-03T18:00:00.000Z"} +{"doc_count":24889,"split_key":209334,"timestamp":"2026-07-03T19:00:00.000Z"} +{"doc_count":943,"split_key":201401,"timestamp":"2026-07-03T19:00:00.000Z"} +{"doc_count":934,"split_key":37963,"timestamp":"2026-07-03T19:00:00.000Z"} +{"doc_count":820,"split_key":51396,"timestamp":"2026-07-03T19:00:00.000Z"} +{"doc_count":800,"split_key":17552,"timestamp":"2026-07-03T19:00:00.000Z"} +{"doc_count":49125,"split_key":209334,"timestamp":"2026-07-03T20:00:00.000Z"} +{"doc_count":1485,"split_key":201401,"timestamp":"2026-07-03T20:00:00.000Z"} +{"doc_count":1267,"split_key":396982,"timestamp":"2026-07-03T20:00:00.000Z"} +{"doc_count":890,"split_key":37963,"timestamp":"2026-07-03T20:00:00.000Z"} +{"doc_count":609,"split_key":17552,"timestamp":"2026-07-03T20:00:00.000Z"} +{"doc_count":16065,"split_key":209334,"timestamp":"2026-07-03T21:00:00.000Z"} +{"doc_count":903,"split_key":37963,"timestamp":"2026-07-03T21:00:00.000Z"} +{"doc_count":771,"split_key":396982,"timestamp":"2026-07-03T21:00:00.000Z"} +{"doc_count":647,"split_key":17552,"timestamp":"2026-07-03T21:00:00.000Z"} +{"doc_count":513,"split_key":138915,"timestamp":"2026-07-03T21:00:00.000Z"} +{"doc_count":868,"split_key":37963,"timestamp":"2026-07-03T22:00:00.000Z"} +{"doc_count":654,"split_key":17552,"timestamp":"2026-07-03T22:00:00.000Z"} +{"doc_count":510,"split_key":396982,"timestamp":"2026-07-03T22:00:00.000Z"} +{"doc_count":479,"split_key":138915,"timestamp":"2026-07-03T22:00:00.000Z"} +{"doc_count":405,"split_key":135377,"timestamp":"2026-07-03T22:00:00.000Z"} +{"doc_count":900,"split_key":37963,"timestamp":"2026-07-03T23:00:00.000Z"} +{"doc_count":659,"split_key":17552,"timestamp":"2026-07-03T23:00:00.000Z"} +{"doc_count":603,"split_key":396982,"timestamp":"2026-07-03T23:00:00.000Z"} +{"doc_count":440,"split_key":138915,"timestamp":"2026-07-03T23:00:00.000Z"} +{"doc_count":278,"split_key":135377,"timestamp":"2026-07-03T23:00:00.000Z"} +{"doc_count":10026,"split_key":14987,"timestamp":"2026-07-04T00:00:00.000Z"} +{"doc_count":817,"split_key":37963,"timestamp":"2026-07-04T00:00:00.000Z"} +{"doc_count":678,"split_key":17552,"timestamp":"2026-07-04T00:00:00.000Z"} +{"doc_count":647,"split_key":396982,"timestamp":"2026-07-04T00:00:00.000Z"} +{"doc_count":540,"split_key":138915,"timestamp":"2026-07-04T00:00:00.000Z"} +{"doc_count":955,"split_key":37963,"timestamp":"2026-07-04T01:00:00.000Z"} +{"doc_count":868,"split_key":396982,"timestamp":"2026-07-04T01:00:00.000Z"} +{"doc_count":672,"split_key":17552,"timestamp":"2026-07-04T01:00:00.000Z"} +{"doc_count":567,"split_key":16509,"timestamp":"2026-07-04T01:00:00.000Z"} +{"doc_count":518,"split_key":138915,"timestamp":"2026-07-04T01:00:00.000Z"} +{"doc_count":1472,"split_key":37963,"timestamp":"2026-07-04T02:00:00.000Z"} +{"doc_count":737,"split_key":396982,"timestamp":"2026-07-04T02:00:00.000Z"} +{"doc_count":692,"split_key":17552,"timestamp":"2026-07-04T02:00:00.000Z"} +{"doc_count":509,"split_key":138915,"timestamp":"2026-07-04T02:00:00.000Z"} +{"doc_count":468,"split_key":197540,"timestamp":"2026-07-04T02:00:00.000Z"} +{"doc_count":758,"split_key":396982,"timestamp":"2026-07-04T03:00:00.000Z"} +{"doc_count":702,"split_key":17552,"timestamp":"2026-07-04T03:00:00.000Z"} +{"doc_count":622,"split_key":16509,"timestamp":"2026-07-04T03:00:00.000Z"} +{"doc_count":453,"split_key":51396,"timestamp":"2026-07-04T03:00:00.000Z"} +{"doc_count":436,"split_key":37963,"timestamp":"2026-07-04T03:00:00.000Z"} +{"doc_count":1049,"split_key":25369,"timestamp":"2026-07-04T04:00:00.000Z"} +{"doc_count":1009,"split_key":396982,"timestamp":"2026-07-04T04:00:00.000Z"} +{"doc_count":1008,"split_key":398101,"timestamp":"2026-07-04T04:00:00.000Z"} +{"doc_count":714,"split_key":17552,"timestamp":"2026-07-04T04:00:00.000Z"} +{"doc_count":602,"split_key":138915,"timestamp":"2026-07-04T04:00:00.000Z"} +{"doc_count":1172,"split_key":396982,"timestamp":"2026-07-04T05:00:00.000Z"} +{"doc_count":890,"split_key":25369,"timestamp":"2026-07-04T05:00:00.000Z"} +{"doc_count":800,"split_key":211590,"timestamp":"2026-07-04T05:00:00.000Z"} +{"doc_count":730,"split_key":17552,"timestamp":"2026-07-04T05:00:00.000Z"} +{"doc_count":467,"split_key":16509,"timestamp":"2026-07-04T05:00:00.000Z"} +{"doc_count":3735,"split_key":209334,"timestamp":"2026-07-04T06:00:00.000Z"} +{"doc_count":3244,"split_key":12389,"timestamp":"2026-07-04T06:00:00.000Z"} +{"doc_count":3007,"split_key":211590,"timestamp":"2026-07-04T06:00:00.000Z"} +{"doc_count":763,"split_key":63949,"timestamp":"2026-07-04T06:00:00.000Z"} +{"doc_count":683,"split_key":17552,"timestamp":"2026-07-04T06:00:00.000Z"} +{"doc_count":10788,"split_key":209334,"timestamp":"2026-07-04T07:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-07-04T07:00:00.000Z"} +{"doc_count":652,"split_key":17552,"timestamp":"2026-07-04T07:00:00.000Z"} +{"doc_count":559,"split_key":396982,"timestamp":"2026-07-04T07:00:00.000Z"} +{"doc_count":493,"split_key":51396,"timestamp":"2026-07-04T07:00:00.000Z"} +{"doc_count":10573,"split_key":209334,"timestamp":"2026-07-04T08:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-07-04T08:00:00.000Z"} +{"doc_count":870,"split_key":51396,"timestamp":"2026-07-04T08:00:00.000Z"} +{"doc_count":812,"split_key":16509,"timestamp":"2026-07-04T08:00:00.000Z"} +{"doc_count":721,"split_key":17552,"timestamp":"2026-07-04T08:00:00.000Z"} +{"doc_count":15817,"split_key":209334,"timestamp":"2026-07-04T09:00:00.000Z"} +{"doc_count":827,"split_key":17552,"timestamp":"2026-07-04T09:00:00.000Z"} +{"doc_count":720,"split_key":396982,"timestamp":"2026-07-04T09:00:00.000Z"} +{"doc_count":581,"split_key":201401,"timestamp":"2026-07-04T09:00:00.000Z"} +{"doc_count":541,"split_key":7393,"timestamp":"2026-07-04T09:00:00.000Z"} +{"doc_count":1173,"split_key":17552,"timestamp":"2026-07-04T10:00:00.000Z"} +{"doc_count":822,"split_key":138915,"timestamp":"2026-07-04T10:00:00.000Z"} +{"doc_count":622,"split_key":396982,"timestamp":"2026-07-04T10:00:00.000Z"} +{"doc_count":559,"split_key":16509,"timestamp":"2026-07-04T10:00:00.000Z"} +{"doc_count":398,"split_key":51396,"timestamp":"2026-07-04T10:00:00.000Z"} +{"doc_count":4788,"split_key":209334,"timestamp":"2026-07-04T11:00:00.000Z"} +{"doc_count":591,"split_key":16509,"timestamp":"2026-07-04T11:00:00.000Z"} +{"doc_count":416,"split_key":14061,"timestamp":"2026-07-04T11:00:00.000Z"} +{"doc_count":408,"split_key":138915,"timestamp":"2026-07-04T11:00:00.000Z"} +{"doc_count":368,"split_key":135377,"timestamp":"2026-07-04T11:00:00.000Z"} +{"doc_count":12453,"split_key":209334,"timestamp":"2026-07-04T12:00:00.000Z"} +{"doc_count":3108,"split_key":211590,"timestamp":"2026-07-04T12:00:00.000Z"} +{"doc_count":1090,"split_key":396982,"timestamp":"2026-07-04T12:00:00.000Z"} +{"doc_count":623,"split_key":14061,"timestamp":"2026-07-04T12:00:00.000Z"} +{"doc_count":538,"split_key":141995,"timestamp":"2026-07-04T12:00:00.000Z"} +{"doc_count":36874,"split_key":209334,"timestamp":"2026-07-04T13:00:00.000Z"} +{"doc_count":13496,"split_key":202412,"timestamp":"2026-07-04T13:00:00.000Z"} +{"doc_count":1422,"split_key":201401,"timestamp":"2026-07-04T13:00:00.000Z"} +{"doc_count":678,"split_key":14061,"timestamp":"2026-07-04T13:00:00.000Z"} +{"doc_count":662,"split_key":4134,"timestamp":"2026-07-04T13:00:00.000Z"} +{"doc_count":43698,"split_key":209334,"timestamp":"2026-07-04T14:00:00.000Z"} +{"doc_count":1501,"split_key":201401,"timestamp":"2026-07-04T14:00:00.000Z"} +{"doc_count":691,"split_key":4134,"timestamp":"2026-07-04T14:00:00.000Z"} +{"doc_count":601,"split_key":14061,"timestamp":"2026-07-04T14:00:00.000Z"} +{"doc_count":502,"split_key":138915,"timestamp":"2026-07-04T14:00:00.000Z"} +{"doc_count":702,"split_key":16509,"timestamp":"2026-07-04T15:00:00.000Z"} +{"doc_count":678,"split_key":4134,"timestamp":"2026-07-04T15:00:00.000Z"} +{"doc_count":671,"split_key":14061,"timestamp":"2026-07-04T15:00:00.000Z"} +{"doc_count":452,"split_key":51396,"timestamp":"2026-07-04T15:00:00.000Z"} +{"doc_count":429,"split_key":138915,"timestamp":"2026-07-04T15:00:00.000Z"} +{"doc_count":688,"split_key":396982,"timestamp":"2026-07-04T16:00:00.000Z"} +{"doc_count":668,"split_key":4134,"timestamp":"2026-07-04T16:00:00.000Z"} +{"doc_count":662,"split_key":14061,"timestamp":"2026-07-04T16:00:00.000Z"} +{"doc_count":615,"split_key":211590,"timestamp":"2026-07-04T16:00:00.000Z"} +{"doc_count":377,"split_key":37963,"timestamp":"2026-07-04T16:00:00.000Z"} +{"doc_count":1488,"split_key":211590,"timestamp":"2026-07-04T17:00:00.000Z"} +{"doc_count":716,"split_key":4134,"timestamp":"2026-07-04T17:00:00.000Z"} +{"doc_count":666,"split_key":14061,"timestamp":"2026-07-04T17:00:00.000Z"} +{"doc_count":466,"split_key":16509,"timestamp":"2026-07-04T17:00:00.000Z"} +{"doc_count":452,"split_key":202412,"timestamp":"2026-07-04T17:00:00.000Z"} +{"doc_count":18938,"split_key":209334,"timestamp":"2026-07-04T18:00:00.000Z"} +{"doc_count":805,"split_key":4134,"timestamp":"2026-07-04T18:00:00.000Z"} +{"doc_count":711,"split_key":138915,"timestamp":"2026-07-04T18:00:00.000Z"} +{"doc_count":566,"split_key":201401,"timestamp":"2026-07-04T18:00:00.000Z"} +{"doc_count":542,"split_key":14061,"timestamp":"2026-07-04T18:00:00.000Z"} +{"doc_count":25304,"split_key":209334,"timestamp":"2026-07-04T19:00:00.000Z"} +{"doc_count":906,"split_key":51396,"timestamp":"2026-07-04T19:00:00.000Z"} +{"doc_count":818,"split_key":201401,"timestamp":"2026-07-04T19:00:00.000Z"} +{"doc_count":774,"split_key":4134,"timestamp":"2026-07-04T19:00:00.000Z"} +{"doc_count":677,"split_key":138915,"timestamp":"2026-07-04T19:00:00.000Z"} +{"doc_count":46122,"split_key":209334,"timestamp":"2026-07-04T20:00:00.000Z"} +{"doc_count":1452,"split_key":201401,"timestamp":"2026-07-04T20:00:00.000Z"} +{"doc_count":1339,"split_key":211590,"timestamp":"2026-07-04T20:00:00.000Z"} +{"doc_count":739,"split_key":396982,"timestamp":"2026-07-04T20:00:00.000Z"} +{"doc_count":584,"split_key":16509,"timestamp":"2026-07-04T20:00:00.000Z"} +{"doc_count":18503,"split_key":209334,"timestamp":"2026-07-04T21:00:00.000Z"} +{"doc_count":3434,"split_key":211590,"timestamp":"2026-07-04T21:00:00.000Z"} +{"doc_count":910,"split_key":396982,"timestamp":"2026-07-04T21:00:00.000Z"} +{"doc_count":830,"split_key":51396,"timestamp":"2026-07-04T21:00:00.000Z"} +{"doc_count":771,"split_key":201401,"timestamp":"2026-07-04T21:00:00.000Z"} +{"doc_count":2574,"split_key":211590,"timestamp":"2026-07-04T22:00:00.000Z"} +{"doc_count":1131,"split_key":51396,"timestamp":"2026-07-04T22:00:00.000Z"} +{"doc_count":666,"split_key":396982,"timestamp":"2026-07-04T22:00:00.000Z"} +{"doc_count":598,"split_key":14061,"timestamp":"2026-07-04T22:00:00.000Z"} +{"doc_count":468,"split_key":138915,"timestamp":"2026-07-04T22:00:00.000Z"} +{"doc_count":8594,"split_key":8615,"timestamp":"2026-07-04T23:00:00.000Z"} +{"doc_count":605,"split_key":396982,"timestamp":"2026-07-04T23:00:00.000Z"} +{"doc_count":533,"split_key":138915,"timestamp":"2026-07-04T23:00:00.000Z"} +{"doc_count":494,"split_key":14061,"timestamp":"2026-07-04T23:00:00.000Z"} +{"doc_count":390,"split_key":37963,"timestamp":"2026-07-04T23:00:00.000Z"} +{"doc_count":10625,"split_key":14987,"timestamp":"2026-07-05T00:00:00.000Z"} +{"doc_count":6448,"split_key":8615,"timestamp":"2026-07-05T00:00:00.000Z"} +{"doc_count":1160,"split_key":396982,"timestamp":"2026-07-05T00:00:00.000Z"} +{"doc_count":572,"split_key":37963,"timestamp":"2026-07-05T00:00:00.000Z"} +{"doc_count":501,"split_key":14061,"timestamp":"2026-07-05T00:00:00.000Z"} +{"doc_count":1021,"split_key":396982,"timestamp":"2026-07-05T01:00:00.000Z"} +{"doc_count":683,"split_key":16509,"timestamp":"2026-07-05T01:00:00.000Z"} +{"doc_count":516,"split_key":14061,"timestamp":"2026-07-05T01:00:00.000Z"} +{"doc_count":481,"split_key":138915,"timestamp":"2026-07-05T01:00:00.000Z"} +{"doc_count":387,"split_key":37963,"timestamp":"2026-07-05T01:00:00.000Z"} +{"doc_count":2600,"split_key":211590,"timestamp":"2026-07-05T02:00:00.000Z"} +{"doc_count":1457,"split_key":396982,"timestamp":"2026-07-05T02:00:00.000Z"} +{"doc_count":885,"split_key":14061,"timestamp":"2026-07-05T02:00:00.000Z"} +{"doc_count":872,"split_key":16509,"timestamp":"2026-07-05T02:00:00.000Z"} +{"doc_count":616,"split_key":138915,"timestamp":"2026-07-05T02:00:00.000Z"} +{"doc_count":1004,"split_key":396982,"timestamp":"2026-07-05T03:00:00.000Z"} +{"doc_count":998,"split_key":48090,"timestamp":"2026-07-05T03:00:00.000Z"} +{"doc_count":885,"split_key":16509,"timestamp":"2026-07-05T03:00:00.000Z"} +{"doc_count":844,"split_key":51396,"timestamp":"2026-07-05T03:00:00.000Z"} +{"doc_count":497,"split_key":14618,"timestamp":"2026-07-05T03:00:00.000Z"} +{"doc_count":1268,"split_key":25369,"timestamp":"2026-07-05T04:00:00.000Z"} +{"doc_count":981,"split_key":16509,"timestamp":"2026-07-05T04:00:00.000Z"} +{"doc_count":927,"split_key":14061,"timestamp":"2026-07-05T04:00:00.000Z"} +{"doc_count":873,"split_key":48090,"timestamp":"2026-07-05T04:00:00.000Z"} +{"doc_count":692,"split_key":396982,"timestamp":"2026-07-05T04:00:00.000Z"} +{"doc_count":1225,"split_key":25369,"timestamp":"2026-07-05T05:00:00.000Z"} +{"doc_count":1192,"split_key":396982,"timestamp":"2026-07-05T05:00:00.000Z"} +{"doc_count":1148,"split_key":14061,"timestamp":"2026-07-05T05:00:00.000Z"} +{"doc_count":827,"split_key":48090,"timestamp":"2026-07-05T05:00:00.000Z"} +{"doc_count":751,"split_key":16509,"timestamp":"2026-07-05T05:00:00.000Z"} +{"doc_count":3744,"split_key":209334,"timestamp":"2026-07-05T06:00:00.000Z"} +{"doc_count":1221,"split_key":16509,"timestamp":"2026-07-05T06:00:00.000Z"} +{"doc_count":1097,"split_key":14061,"timestamp":"2026-07-05T06:00:00.000Z"} +{"doc_count":917,"split_key":396982,"timestamp":"2026-07-05T06:00:00.000Z"} +{"doc_count":858,"split_key":25369,"timestamp":"2026-07-05T06:00:00.000Z"} +{"doc_count":10767,"split_key":209334,"timestamp":"2026-07-05T07:00:00.000Z"} +{"doc_count":990,"split_key":16509,"timestamp":"2026-07-05T07:00:00.000Z"} +{"doc_count":897,"split_key":51396,"timestamp":"2026-07-05T07:00:00.000Z"} +{"doc_count":755,"split_key":48090,"timestamp":"2026-07-05T07:00:00.000Z"} +{"doc_count":635,"split_key":396982,"timestamp":"2026-07-05T07:00:00.000Z"} +{"doc_count":10367,"split_key":209334,"timestamp":"2026-07-05T08:00:00.000Z"} +{"doc_count":1290,"split_key":16509,"timestamp":"2026-07-05T08:00:00.000Z"} +{"doc_count":812,"split_key":396982,"timestamp":"2026-07-05T08:00:00.000Z"} +{"doc_count":790,"split_key":48090,"timestamp":"2026-07-05T08:00:00.000Z"} +{"doc_count":706,"split_key":51396,"timestamp":"2026-07-05T08:00:00.000Z"} +{"doc_count":15301,"split_key":209334,"timestamp":"2026-07-05T09:00:00.000Z"} +{"doc_count":1039,"split_key":201401,"timestamp":"2026-07-05T09:00:00.000Z"} +{"doc_count":916,"split_key":16509,"timestamp":"2026-07-05T09:00:00.000Z"} +{"doc_count":608,"split_key":396982,"timestamp":"2026-07-05T09:00:00.000Z"} +{"doc_count":588,"split_key":14061,"timestamp":"2026-07-05T09:00:00.000Z"} +{"doc_count":2490,"split_key":211590,"timestamp":"2026-07-05T10:00:00.000Z"} +{"doc_count":925,"split_key":16509,"timestamp":"2026-07-05T10:00:00.000Z"} +{"doc_count":616,"split_key":14061,"timestamp":"2026-07-05T10:00:00.000Z"} +{"doc_count":459,"split_key":138915,"timestamp":"2026-07-05T10:00:00.000Z"} +{"doc_count":433,"split_key":141995,"timestamp":"2026-07-05T10:00:00.000Z"} +{"doc_count":6818,"split_key":211590,"timestamp":"2026-07-05T11:00:00.000Z"} +{"doc_count":4753,"split_key":209334,"timestamp":"2026-07-05T11:00:00.000Z"} +{"doc_count":1512,"split_key":16509,"timestamp":"2026-07-05T11:00:00.000Z"} +{"doc_count":760,"split_key":141995,"timestamp":"2026-07-05T11:00:00.000Z"} +{"doc_count":649,"split_key":14061,"timestamp":"2026-07-05T11:00:00.000Z"} +{"doc_count":12113,"split_key":209334,"timestamp":"2026-07-05T12:00:00.000Z"} +{"doc_count":3117,"split_key":211590,"timestamp":"2026-07-05T12:00:00.000Z"} +{"doc_count":1341,"split_key":16509,"timestamp":"2026-07-05T12:00:00.000Z"} +{"doc_count":658,"split_key":14061,"timestamp":"2026-07-05T12:00:00.000Z"} +{"doc_count":577,"split_key":201401,"timestamp":"2026-07-05T12:00:00.000Z"} +{"doc_count":64231,"split_key":14061,"timestamp":"2026-07-05T13:00:00.000Z"} +{"doc_count":36952,"split_key":209334,"timestamp":"2026-07-05T13:00:00.000Z"} +{"doc_count":2027,"split_key":48090,"timestamp":"2026-07-05T13:00:00.000Z"} +{"doc_count":1625,"split_key":16509,"timestamp":"2026-07-05T13:00:00.000Z"} +{"doc_count":1521,"split_key":201401,"timestamp":"2026-07-05T13:00:00.000Z"} +{"doc_count":43752,"split_key":209334,"timestamp":"2026-07-05T14:00:00.000Z"} +{"doc_count":12077,"split_key":14061,"timestamp":"2026-07-05T14:00:00.000Z"} +{"doc_count":5581,"split_key":211590,"timestamp":"2026-07-05T14:00:00.000Z"} +{"doc_count":1528,"split_key":201401,"timestamp":"2026-07-05T14:00:00.000Z"} +{"doc_count":1152,"split_key":16509,"timestamp":"2026-07-05T14:00:00.000Z"} +{"doc_count":29187,"split_key":14061,"timestamp":"2026-07-05T15:00:00.000Z"} +{"doc_count":4293,"split_key":211590,"timestamp":"2026-07-05T15:00:00.000Z"} +{"doc_count":1646,"split_key":51396,"timestamp":"2026-07-05T15:00:00.000Z"} +{"doc_count":572,"split_key":16509,"timestamp":"2026-07-05T15:00:00.000Z"} +{"doc_count":545,"split_key":141995,"timestamp":"2026-07-05T15:00:00.000Z"} +{"doc_count":3871,"split_key":211590,"timestamp":"2026-07-05T16:00:00.000Z"} +{"doc_count":1232,"split_key":16509,"timestamp":"2026-07-05T16:00:00.000Z"} +{"doc_count":799,"split_key":14061,"timestamp":"2026-07-05T16:00:00.000Z"} +{"doc_count":753,"split_key":51396,"timestamp":"2026-07-05T16:00:00.000Z"} +{"doc_count":526,"split_key":135377,"timestamp":"2026-07-05T16:00:00.000Z"} +{"doc_count":972,"split_key":16509,"timestamp":"2026-07-05T17:00:00.000Z"} +{"doc_count":808,"split_key":14061,"timestamp":"2026-07-05T17:00:00.000Z"} +{"doc_count":501,"split_key":138915,"timestamp":"2026-07-05T17:00:00.000Z"} +{"doc_count":451,"split_key":51396,"timestamp":"2026-07-05T17:00:00.000Z"} +{"doc_count":421,"split_key":396982,"timestamp":"2026-07-05T17:00:00.000Z"} +{"doc_count":18716,"split_key":209334,"timestamp":"2026-07-05T18:00:00.000Z"} +{"doc_count":1363,"split_key":16509,"timestamp":"2026-07-05T18:00:00.000Z"} +{"doc_count":861,"split_key":14618,"timestamp":"2026-07-05T18:00:00.000Z"} +{"doc_count":701,"split_key":201401,"timestamp":"2026-07-05T18:00:00.000Z"} +{"doc_count":579,"split_key":14061,"timestamp":"2026-07-05T18:00:00.000Z"} +{"doc_count":49121,"split_key":197540,"timestamp":"2026-07-05T19:00:00.000Z"} +{"doc_count":25115,"split_key":209334,"timestamp":"2026-07-05T19:00:00.000Z"} +{"doc_count":1216,"split_key":211590,"timestamp":"2026-07-05T19:00:00.000Z"} +{"doc_count":875,"split_key":16509,"timestamp":"2026-07-05T19:00:00.000Z"} +{"doc_count":868,"split_key":49531,"timestamp":"2026-07-05T19:00:00.000Z"} +{"doc_count":46335,"split_key":209334,"timestamp":"2026-07-05T20:00:00.000Z"} +{"doc_count":5049,"split_key":211590,"timestamp":"2026-07-05T20:00:00.000Z"} +{"doc_count":1440,"split_key":201401,"timestamp":"2026-07-05T20:00:00.000Z"} +{"doc_count":1404,"split_key":49531,"timestamp":"2026-07-05T20:00:00.000Z"} +{"doc_count":1119,"split_key":16509,"timestamp":"2026-07-05T20:00:00.000Z"} +{"doc_count":20243,"split_key":209334,"timestamp":"2026-07-05T21:00:00.000Z"} +{"doc_count":10636,"split_key":50304,"timestamp":"2026-07-05T21:00:00.000Z"} +{"doc_count":4546,"split_key":211590,"timestamp":"2026-07-05T21:00:00.000Z"} +{"doc_count":1370,"split_key":37963,"timestamp":"2026-07-05T21:00:00.000Z"} +{"doc_count":1063,"split_key":16509,"timestamp":"2026-07-05T21:00:00.000Z"} +{"doc_count":1226,"split_key":16509,"timestamp":"2026-07-05T22:00:00.000Z"} +{"doc_count":578,"split_key":14061,"timestamp":"2026-07-05T22:00:00.000Z"} +{"doc_count":473,"split_key":37963,"timestamp":"2026-07-05T22:00:00.000Z"} +{"doc_count":450,"split_key":138915,"timestamp":"2026-07-05T22:00:00.000Z"} +{"doc_count":384,"split_key":396982,"timestamp":"2026-07-05T22:00:00.000Z"} +{"doc_count":2133,"split_key":211590,"timestamp":"2026-07-05T23:00:00.000Z"} +{"doc_count":1069,"split_key":16509,"timestamp":"2026-07-05T23:00:00.000Z"} +{"doc_count":689,"split_key":63949,"timestamp":"2026-07-05T23:00:00.000Z"} +{"doc_count":629,"split_key":14061,"timestamp":"2026-07-05T23:00:00.000Z"} +{"doc_count":552,"split_key":51396,"timestamp":"2026-07-05T23:00:00.000Z"} +{"doc_count":9980,"split_key":14987,"timestamp":"2026-07-06T00:00:00.000Z"} +{"doc_count":675,"split_key":14061,"timestamp":"2026-07-06T00:00:00.000Z"} +{"doc_count":662,"split_key":16509,"timestamp":"2026-07-06T00:00:00.000Z"} +{"doc_count":605,"split_key":15943,"timestamp":"2026-07-06T00:00:00.000Z"} +{"doc_count":587,"split_key":37963,"timestamp":"2026-07-06T00:00:00.000Z"} +{"doc_count":651,"split_key":16509,"timestamp":"2026-07-06T01:00:00.000Z"} +{"doc_count":637,"split_key":14061,"timestamp":"2026-07-06T01:00:00.000Z"} +{"doc_count":604,"split_key":396982,"timestamp":"2026-07-06T01:00:00.000Z"} +{"doc_count":497,"split_key":138915,"timestamp":"2026-07-06T01:00:00.000Z"} +{"doc_count":421,"split_key":45102,"timestamp":"2026-07-06T01:00:00.000Z"} +{"doc_count":628,"split_key":14061,"timestamp":"2026-07-06T02:00:00.000Z"} +{"doc_count":579,"split_key":398101,"timestamp":"2026-07-06T02:00:00.000Z"} +{"doc_count":510,"split_key":16509,"timestamp":"2026-07-06T02:00:00.000Z"} +{"doc_count":445,"split_key":138915,"timestamp":"2026-07-06T02:00:00.000Z"} +{"doc_count":373,"split_key":396982,"timestamp":"2026-07-06T02:00:00.000Z"} +{"doc_count":6983,"split_key":211590,"timestamp":"2026-07-06T03:00:00.000Z"} +{"doc_count":1273,"split_key":14061,"timestamp":"2026-07-06T03:00:00.000Z"} +{"doc_count":786,"split_key":37963,"timestamp":"2026-07-06T03:00:00.000Z"} +{"doc_count":565,"split_key":16509,"timestamp":"2026-07-06T03:00:00.000Z"} +{"doc_count":506,"split_key":141995,"timestamp":"2026-07-06T03:00:00.000Z"} +{"doc_count":2526,"split_key":211590,"timestamp":"2026-07-06T04:00:00.000Z"} +{"doc_count":1328,"split_key":25369,"timestamp":"2026-07-06T04:00:00.000Z"} +{"doc_count":1269,"split_key":14061,"timestamp":"2026-07-06T04:00:00.000Z"} +{"doc_count":599,"split_key":37963,"timestamp":"2026-07-06T04:00:00.000Z"} +{"doc_count":485,"split_key":16509,"timestamp":"2026-07-06T04:00:00.000Z"} +{"doc_count":5965,"split_key":211590,"timestamp":"2026-07-06T05:00:00.000Z"} +{"doc_count":1436,"split_key":25369,"timestamp":"2026-07-06T05:00:00.000Z"} +{"doc_count":1404,"split_key":14061,"timestamp":"2026-07-06T05:00:00.000Z"} +{"doc_count":926,"split_key":37963,"timestamp":"2026-07-06T05:00:00.000Z"} +{"doc_count":756,"split_key":396982,"timestamp":"2026-07-06T05:00:00.000Z"} +{"doc_count":3805,"split_key":209334,"timestamp":"2026-07-06T06:00:00.000Z"} +{"doc_count":3005,"split_key":211590,"timestamp":"2026-07-06T06:00:00.000Z"} +{"doc_count":919,"split_key":25369,"timestamp":"2026-07-06T06:00:00.000Z"} +{"doc_count":865,"split_key":37963,"timestamp":"2026-07-06T06:00:00.000Z"} +{"doc_count":747,"split_key":51396,"timestamp":"2026-07-06T06:00:00.000Z"} +{"doc_count":10922,"split_key":209334,"timestamp":"2026-07-06T07:00:00.000Z"} +{"doc_count":763,"split_key":16509,"timestamp":"2026-07-06T07:00:00.000Z"} +{"doc_count":616,"split_key":14061,"timestamp":"2026-07-06T07:00:00.000Z"} +{"doc_count":564,"split_key":24940,"timestamp":"2026-07-06T07:00:00.000Z"} +{"doc_count":490,"split_key":138915,"timestamp":"2026-07-06T07:00:00.000Z"} +{"doc_count":10586,"split_key":209334,"timestamp":"2026-07-06T08:00:00.000Z"} +{"doc_count":879,"split_key":37963,"timestamp":"2026-07-06T08:00:00.000Z"} +{"doc_count":658,"split_key":14061,"timestamp":"2026-07-06T08:00:00.000Z"} +{"doc_count":599,"split_key":138915,"timestamp":"2026-07-06T08:00:00.000Z"} +{"doc_count":470,"split_key":44382,"timestamp":"2026-07-06T08:00:00.000Z"} +{"doc_count":7861,"split_key":209334,"timestamp":"2026-07-06T09:00:00.000Z"} +{"doc_count":1597,"split_key":214041,"timestamp":"2026-07-06T09:00:00.000Z"} +{"doc_count":1225,"split_key":212238,"timestamp":"2026-07-06T09:00:00.000Z"} +{"doc_count":1160,"split_key":51396,"timestamp":"2026-07-06T09:00:00.000Z"} +{"doc_count":792,"split_key":37963,"timestamp":"2026-07-06T09:00:00.000Z"} +{"doc_count":8321,"split_key":209334,"timestamp":"2026-07-06T10:00:00.000Z"} +{"doc_count":782,"split_key":37963,"timestamp":"2026-07-06T10:00:00.000Z"} +{"doc_count":592,"split_key":138915,"timestamp":"2026-07-06T10:00:00.000Z"} +{"doc_count":414,"split_key":213412,"timestamp":"2026-07-06T10:00:00.000Z"} +{"doc_count":392,"split_key":60077,"timestamp":"2026-07-06T10:00:00.000Z"} +{"doc_count":4753,"split_key":209334,"timestamp":"2026-07-06T11:00:00.000Z"} +{"doc_count":3097,"split_key":37963,"timestamp":"2026-07-06T11:00:00.000Z"} +{"doc_count":2951,"split_key":211590,"timestamp":"2026-07-06T11:00:00.000Z"} +{"doc_count":2083,"split_key":48090,"timestamp":"2026-07-06T11:00:00.000Z"} +{"doc_count":660,"split_key":214041,"timestamp":"2026-07-06T11:00:00.000Z"} +{"doc_count":12365,"split_key":209334,"timestamp":"2026-07-06T12:00:00.000Z"} +{"doc_count":2256,"split_key":37963,"timestamp":"2026-07-06T12:00:00.000Z"} +{"doc_count":599,"split_key":138915,"timestamp":"2026-07-06T12:00:00.000Z"} +{"doc_count":454,"split_key":16509,"timestamp":"2026-07-06T12:00:00.000Z"} +{"doc_count":377,"split_key":213412,"timestamp":"2026-07-06T12:00:00.000Z"} +{"doc_count":37436,"split_key":209334,"timestamp":"2026-07-06T13:00:00.000Z"} +{"doc_count":3062,"split_key":48090,"timestamp":"2026-07-06T13:00:00.000Z"} +{"doc_count":1356,"split_key":37963,"timestamp":"2026-07-06T13:00:00.000Z"} +{"doc_count":1040,"split_key":201401,"timestamp":"2026-07-06T13:00:00.000Z"} +{"doc_count":606,"split_key":50115,"timestamp":"2026-07-06T13:00:00.000Z"} +{"doc_count":39758,"split_key":209334,"timestamp":"2026-07-06T14:00:00.000Z"} +{"doc_count":1382,"split_key":48090,"timestamp":"2026-07-06T14:00:00.000Z"} +{"doc_count":1281,"split_key":201401,"timestamp":"2026-07-06T14:00:00.000Z"} +{"doc_count":1073,"split_key":37963,"timestamp":"2026-07-06T14:00:00.000Z"} +{"doc_count":557,"split_key":16509,"timestamp":"2026-07-06T14:00:00.000Z"} +{"doc_count":6279,"split_key":209334,"timestamp":"2026-07-06T15:00:00.000Z"} +{"doc_count":721,"split_key":37963,"timestamp":"2026-07-06T15:00:00.000Z"} +{"doc_count":543,"split_key":63737,"timestamp":"2026-07-06T15:00:00.000Z"} +{"doc_count":538,"split_key":138915,"timestamp":"2026-07-06T15:00:00.000Z"} +{"doc_count":514,"split_key":16509,"timestamp":"2026-07-06T15:00:00.000Z"} +{"doc_count":2413,"split_key":202412,"timestamp":"2026-07-06T16:00:00.000Z"} +{"doc_count":2019,"split_key":211590,"timestamp":"2026-07-06T16:00:00.000Z"} +{"doc_count":1113,"split_key":14061,"timestamp":"2026-07-06T16:00:00.000Z"} +{"doc_count":552,"split_key":16509,"timestamp":"2026-07-06T16:00:00.000Z"} +{"doc_count":548,"split_key":63737,"timestamp":"2026-07-06T16:00:00.000Z"} +{"doc_count":721,"split_key":14061,"timestamp":"2026-07-06T17:00:00.000Z"} +{"doc_count":616,"split_key":396982,"timestamp":"2026-07-06T17:00:00.000Z"} +{"doc_count":578,"split_key":138915,"timestamp":"2026-07-06T17:00:00.000Z"} +{"doc_count":530,"split_key":42337,"timestamp":"2026-07-06T17:00:00.000Z"} +{"doc_count":487,"split_key":37963,"timestamp":"2026-07-06T17:00:00.000Z"} +{"doc_count":5255,"split_key":209334,"timestamp":"2026-07-06T18:00:00.000Z"} +{"doc_count":593,"split_key":16509,"timestamp":"2026-07-06T18:00:00.000Z"} +{"doc_count":545,"split_key":138915,"timestamp":"2026-07-06T18:00:00.000Z"} +{"doc_count":529,"split_key":51396,"timestamp":"2026-07-06T18:00:00.000Z"} +{"doc_count":518,"split_key":44382,"timestamp":"2026-07-06T18:00:00.000Z"} +{"doc_count":40198,"split_key":209334,"timestamp":"2026-07-06T19:00:00.000Z"} +{"doc_count":2381,"split_key":211590,"timestamp":"2026-07-06T19:00:00.000Z"} +{"doc_count":591,"split_key":51396,"timestamp":"2026-07-06T19:00:00.000Z"} +{"doc_count":548,"split_key":141995,"timestamp":"2026-07-06T19:00:00.000Z"} +{"doc_count":514,"split_key":16509,"timestamp":"2026-07-06T19:00:00.000Z"} +{"doc_count":47390,"split_key":209334,"timestamp":"2026-07-06T20:00:00.000Z"} +{"doc_count":2555,"split_key":211590,"timestamp":"2026-07-06T20:00:00.000Z"} +{"doc_count":649,"split_key":396982,"timestamp":"2026-07-06T20:00:00.000Z"} +{"doc_count":498,"split_key":141995,"timestamp":"2026-07-06T20:00:00.000Z"} +{"doc_count":481,"split_key":52263,"timestamp":"2026-07-06T20:00:00.000Z"} +{"doc_count":21051,"split_key":209334,"timestamp":"2026-07-06T21:00:00.000Z"} +{"doc_count":4608,"split_key":211590,"timestamp":"2026-07-06T21:00:00.000Z"} +{"doc_count":1328,"split_key":14061,"timestamp":"2026-07-06T21:00:00.000Z"} +{"doc_count":766,"split_key":396982,"timestamp":"2026-07-06T21:00:00.000Z"} +{"doc_count":519,"split_key":138915,"timestamp":"2026-07-06T21:00:00.000Z"} +{"doc_count":2416,"split_key":14061,"timestamp":"2026-07-06T22:00:00.000Z"} +{"doc_count":557,"split_key":135377,"timestamp":"2026-07-06T22:00:00.000Z"} +{"doc_count":508,"split_key":138915,"timestamp":"2026-07-06T22:00:00.000Z"} +{"doc_count":493,"split_key":51396,"timestamp":"2026-07-06T22:00:00.000Z"} +{"doc_count":441,"split_key":396982,"timestamp":"2026-07-06T22:00:00.000Z"} +{"doc_count":2854,"split_key":14061,"timestamp":"2026-07-06T23:00:00.000Z"} +{"doc_count":633,"split_key":37963,"timestamp":"2026-07-06T23:00:00.000Z"} +{"doc_count":547,"split_key":16509,"timestamp":"2026-07-06T23:00:00.000Z"} +{"doc_count":494,"split_key":138915,"timestamp":"2026-07-06T23:00:00.000Z"} +{"doc_count":462,"split_key":396982,"timestamp":"2026-07-06T23:00:00.000Z"} +{"doc_count":12293,"split_key":14987,"timestamp":"2026-07-07T00:00:00.000Z"} +{"doc_count":9027,"split_key":211590,"timestamp":"2026-07-07T00:00:00.000Z"} +{"doc_count":2385,"split_key":14061,"timestamp":"2026-07-07T00:00:00.000Z"} +{"doc_count":834,"split_key":141995,"timestamp":"2026-07-07T00:00:00.000Z"} +{"doc_count":832,"split_key":51396,"timestamp":"2026-07-07T00:00:00.000Z"} +{"doc_count":5991,"split_key":211590,"timestamp":"2026-07-07T01:00:00.000Z"} +{"doc_count":2612,"split_key":14061,"timestamp":"2026-07-07T01:00:00.000Z"} +{"doc_count":1037,"split_key":396982,"timestamp":"2026-07-07T01:00:00.000Z"} +{"doc_count":653,"split_key":37963,"timestamp":"2026-07-07T01:00:00.000Z"} +{"doc_count":535,"split_key":141995,"timestamp":"2026-07-07T01:00:00.000Z"} +{"doc_count":3055,"split_key":211590,"timestamp":"2026-07-07T02:00:00.000Z"} +{"doc_count":2759,"split_key":14061,"timestamp":"2026-07-07T02:00:00.000Z"} +{"doc_count":1606,"split_key":37963,"timestamp":"2026-07-07T02:00:00.000Z"} +{"doc_count":625,"split_key":396982,"timestamp":"2026-07-07T02:00:00.000Z"} +{"doc_count":505,"split_key":215762,"timestamp":"2026-07-07T02:00:00.000Z"} +{"doc_count":2354,"split_key":14061,"timestamp":"2026-07-07T03:00:00.000Z"} +{"doc_count":1518,"split_key":37963,"timestamp":"2026-07-07T03:00:00.000Z"} +{"doc_count":603,"split_key":209334,"timestamp":"2026-07-07T03:00:00.000Z"} +{"doc_count":554,"split_key":396982,"timestamp":"2026-07-07T03:00:00.000Z"} +{"doc_count":435,"split_key":138915,"timestamp":"2026-07-07T03:00:00.000Z"} +{"doc_count":3162,"split_key":211590,"timestamp":"2026-07-07T04:00:00.000Z"} +{"doc_count":2658,"split_key":14061,"timestamp":"2026-07-07T04:00:00.000Z"} +{"doc_count":1528,"split_key":37963,"timestamp":"2026-07-07T04:00:00.000Z"} +{"doc_count":881,"split_key":25369,"timestamp":"2026-07-07T04:00:00.000Z"} +{"doc_count":557,"split_key":396982,"timestamp":"2026-07-07T04:00:00.000Z"} +{"doc_count":2823,"split_key":14061,"timestamp":"2026-07-07T05:00:00.000Z"} +{"doc_count":1220,"split_key":37963,"timestamp":"2026-07-07T05:00:00.000Z"} +{"doc_count":970,"split_key":396982,"timestamp":"2026-07-07T05:00:00.000Z"} +{"doc_count":833,"split_key":25369,"timestamp":"2026-07-07T05:00:00.000Z"} +{"doc_count":479,"split_key":138915,"timestamp":"2026-07-07T05:00:00.000Z"} +{"doc_count":3733,"split_key":209334,"timestamp":"2026-07-07T06:00:00.000Z"} +{"doc_count":3128,"split_key":14061,"timestamp":"2026-07-07T06:00:00.000Z"} +{"doc_count":1482,"split_key":6698,"timestamp":"2026-07-07T06:00:00.000Z"} +{"doc_count":868,"split_key":37963,"timestamp":"2026-07-07T06:00:00.000Z"} +{"doc_count":784,"split_key":211590,"timestamp":"2026-07-07T06:00:00.000Z"} +{"doc_count":10816,"split_key":209334,"timestamp":"2026-07-07T07:00:00.000Z"} +{"doc_count":5081,"split_key":211590,"timestamp":"2026-07-07T07:00:00.000Z"} +{"doc_count":2641,"split_key":14061,"timestamp":"2026-07-07T07:00:00.000Z"} +{"doc_count":1350,"split_key":37963,"timestamp":"2026-07-07T07:00:00.000Z"} +{"doc_count":710,"split_key":141995,"timestamp":"2026-07-07T07:00:00.000Z"} +{"doc_count":10464,"split_key":209334,"timestamp":"2026-07-07T08:00:00.000Z"} +{"doc_count":2756,"split_key":14061,"timestamp":"2026-07-07T08:00:00.000Z"} +{"doc_count":1453,"split_key":51396,"timestamp":"2026-07-07T08:00:00.000Z"} +{"doc_count":1125,"split_key":37963,"timestamp":"2026-07-07T08:00:00.000Z"} +{"doc_count":903,"split_key":211590,"timestamp":"2026-07-07T08:00:00.000Z"} +{"doc_count":5863,"split_key":209334,"timestamp":"2026-07-07T09:00:00.000Z"} +{"doc_count":3097,"split_key":211590,"timestamp":"2026-07-07T09:00:00.000Z"} +{"doc_count":2247,"split_key":14061,"timestamp":"2026-07-07T09:00:00.000Z"} +{"doc_count":993,"split_key":6698,"timestamp":"2026-07-07T09:00:00.000Z"} +{"doc_count":837,"split_key":37963,"timestamp":"2026-07-07T09:00:00.000Z"} +{"doc_count":11571,"split_key":209334,"timestamp":"2026-07-07T10:00:00.000Z"} +{"doc_count":3112,"split_key":211590,"timestamp":"2026-07-07T10:00:00.000Z"} +{"doc_count":2599,"split_key":14061,"timestamp":"2026-07-07T10:00:00.000Z"} +{"doc_count":1027,"split_key":51396,"timestamp":"2026-07-07T10:00:00.000Z"} +{"doc_count":967,"split_key":37963,"timestamp":"2026-07-07T10:00:00.000Z"} +{"doc_count":8574,"split_key":50360,"timestamp":"2026-07-07T11:00:00.000Z"} +{"doc_count":6152,"split_key":211590,"timestamp":"2026-07-07T11:00:00.000Z"} +{"doc_count":4873,"split_key":209334,"timestamp":"2026-07-07T11:00:00.000Z"} +{"doc_count":2718,"split_key":14061,"timestamp":"2026-07-07T11:00:00.000Z"} +{"doc_count":1407,"split_key":37963,"timestamp":"2026-07-07T11:00:00.000Z"} +{"doc_count":9626,"split_key":50360,"timestamp":"2026-07-07T12:00:00.000Z"} +{"doc_count":8744,"split_key":209334,"timestamp":"2026-07-07T12:00:00.000Z"} +{"doc_count":2475,"split_key":14061,"timestamp":"2026-07-07T12:00:00.000Z"} +{"doc_count":1017,"split_key":37963,"timestamp":"2026-07-07T12:00:00.000Z"} +{"doc_count":475,"split_key":201401,"timestamp":"2026-07-07T12:00:00.000Z"} +{"doc_count":24253,"split_key":209334,"timestamp":"2026-07-07T13:00:00.000Z"} +{"doc_count":3116,"split_key":211590,"timestamp":"2026-07-07T13:00:00.000Z"} +{"doc_count":2694,"split_key":50360,"timestamp":"2026-07-07T13:00:00.000Z"} +{"doc_count":2476,"split_key":14061,"timestamp":"2026-07-07T13:00:00.000Z"} +{"doc_count":1239,"split_key":201401,"timestamp":"2026-07-07T13:00:00.000Z"} +{"doc_count":21729,"split_key":209334,"timestamp":"2026-07-07T14:00:00.000Z"} +{"doc_count":9744,"split_key":50360,"timestamp":"2026-07-07T14:00:00.000Z"} +{"doc_count":2590,"split_key":14061,"timestamp":"2026-07-07T14:00:00.000Z"} +{"doc_count":1047,"split_key":201401,"timestamp":"2026-07-07T14:00:00.000Z"} +{"doc_count":867,"split_key":394996,"timestamp":"2026-07-07T14:00:00.000Z"} +{"doc_count":37943,"split_key":209334,"timestamp":"2026-07-07T15:00:00.000Z"} +{"doc_count":8123,"split_key":50360,"timestamp":"2026-07-07T15:00:00.000Z"} +{"doc_count":7063,"split_key":48090,"timestamp":"2026-07-07T15:00:00.000Z"} +{"doc_count":2463,"split_key":14061,"timestamp":"2026-07-07T15:00:00.000Z"} +{"doc_count":1287,"split_key":201401,"timestamp":"2026-07-07T15:00:00.000Z"} +{"doc_count":2352,"split_key":14061,"timestamp":"2026-07-07T16:00:00.000Z"} +{"doc_count":1557,"split_key":37963,"timestamp":"2026-07-07T16:00:00.000Z"} +{"doc_count":1481,"split_key":45102,"timestamp":"2026-07-07T16:00:00.000Z"} +{"doc_count":451,"split_key":3269,"timestamp":"2026-07-07T16:00:00.000Z"} +{"doc_count":395,"split_key":138915,"timestamp":"2026-07-07T16:00:00.000Z"} +{"doc_count":2997,"split_key":45102,"timestamp":"2026-07-07T17:00:00.000Z"} +{"doc_count":2519,"split_key":60068,"timestamp":"2026-07-07T17:00:00.000Z"} +{"doc_count":2341,"split_key":14061,"timestamp":"2026-07-07T17:00:00.000Z"} +{"doc_count":956,"split_key":37963,"timestamp":"2026-07-07T17:00:00.000Z"} +{"doc_count":663,"split_key":396982,"timestamp":"2026-07-07T17:00:00.000Z"} +{"doc_count":17552,"split_key":209334,"timestamp":"2026-07-07T18:00:00.000Z"} +{"doc_count":13151,"split_key":60068,"timestamp":"2026-07-07T18:00:00.000Z"} +{"doc_count":2952,"split_key":14061,"timestamp":"2026-07-07T18:00:00.000Z"} +{"doc_count":1019,"split_key":37963,"timestamp":"2026-07-07T18:00:00.000Z"} +{"doc_count":522,"split_key":212238,"timestamp":"2026-07-07T18:00:00.000Z"} +{"doc_count":26248,"split_key":209334,"timestamp":"2026-07-07T19:00:00.000Z"} +{"doc_count":2896,"split_key":14061,"timestamp":"2026-07-07T19:00:00.000Z"} +{"doc_count":977,"split_key":50360,"timestamp":"2026-07-07T19:00:00.000Z"} +{"doc_count":862,"split_key":37963,"timestamp":"2026-07-07T19:00:00.000Z"} +{"doc_count":770,"split_key":201401,"timestamp":"2026-07-07T19:00:00.000Z"} +{"doc_count":47792,"split_key":209334,"timestamp":"2026-07-07T20:00:00.000Z"} +{"doc_count":9720,"split_key":50360,"timestamp":"2026-07-07T20:00:00.000Z"} +{"doc_count":2598,"split_key":14061,"timestamp":"2026-07-07T20:00:00.000Z"} +{"doc_count":1355,"split_key":201401,"timestamp":"2026-07-07T20:00:00.000Z"} +{"doc_count":953,"split_key":394996,"timestamp":"2026-07-07T20:00:00.000Z"} +{"doc_count":20337,"split_key":209334,"timestamp":"2026-07-07T21:00:00.000Z"} +{"doc_count":9579,"split_key":50360,"timestamp":"2026-07-07T21:00:00.000Z"} +{"doc_count":1942,"split_key":14061,"timestamp":"2026-07-07T21:00:00.000Z"} +{"doc_count":1118,"split_key":37963,"timestamp":"2026-07-07T21:00:00.000Z"} +{"doc_count":903,"split_key":211590,"timestamp":"2026-07-07T21:00:00.000Z"} +{"doc_count":9621,"split_key":50360,"timestamp":"2026-07-07T22:00:00.000Z"} +{"doc_count":4029,"split_key":211590,"timestamp":"2026-07-07T22:00:00.000Z"} +{"doc_count":1314,"split_key":14061,"timestamp":"2026-07-07T22:00:00.000Z"} +{"doc_count":1184,"split_key":51396,"timestamp":"2026-07-07T22:00:00.000Z"} +{"doc_count":1070,"split_key":57724,"timestamp":"2026-07-07T22:00:00.000Z"} +{"doc_count":9567,"split_key":50360,"timestamp":"2026-07-07T23:00:00.000Z"} +{"doc_count":3942,"split_key":211590,"timestamp":"2026-07-07T23:00:00.000Z"} +{"doc_count":1329,"split_key":14061,"timestamp":"2026-07-07T23:00:00.000Z"} +{"doc_count":650,"split_key":37963,"timestamp":"2026-07-07T23:00:00.000Z"} +{"doc_count":596,"split_key":141995,"timestamp":"2026-07-07T23:00:00.000Z"} +{"doc_count":11062,"split_key":14987,"timestamp":"2026-07-08T00:00:00.000Z"} +{"doc_count":9664,"split_key":50360,"timestamp":"2026-07-08T00:00:00.000Z"} +{"doc_count":1271,"split_key":14061,"timestamp":"2026-07-08T00:00:00.000Z"} +{"doc_count":703,"split_key":51396,"timestamp":"2026-07-08T00:00:00.000Z"} +{"doc_count":540,"split_key":3269,"timestamp":"2026-07-08T00:00:00.000Z"} +{"doc_count":9275,"split_key":50360,"timestamp":"2026-07-08T01:00:00.000Z"} +{"doc_count":1267,"split_key":14061,"timestamp":"2026-07-08T01:00:00.000Z"} +{"doc_count":890,"split_key":396982,"timestamp":"2026-07-08T01:00:00.000Z"} +{"doc_count":534,"split_key":37963,"timestamp":"2026-07-08T01:00:00.000Z"} +{"doc_count":495,"split_key":3269,"timestamp":"2026-07-08T01:00:00.000Z"} +{"doc_count":1557,"split_key":394996,"timestamp":"2026-07-08T02:00:00.000Z"} +{"doc_count":1225,"split_key":14061,"timestamp":"2026-07-08T02:00:00.000Z"} +{"doc_count":1060,"split_key":37963,"timestamp":"2026-07-08T02:00:00.000Z"} +{"doc_count":540,"split_key":50360,"timestamp":"2026-07-08T02:00:00.000Z"} +{"doc_count":529,"split_key":396982,"timestamp":"2026-07-08T02:00:00.000Z"} +{"doc_count":1483,"split_key":208137,"timestamp":"2026-07-08T03:00:00.000Z"} +{"doc_count":1208,"split_key":14061,"timestamp":"2026-07-08T03:00:00.000Z"} +{"doc_count":1035,"split_key":37963,"timestamp":"2026-07-08T03:00:00.000Z"} +{"doc_count":530,"split_key":396982,"timestamp":"2026-07-08T03:00:00.000Z"} +{"doc_count":528,"split_key":3269,"timestamp":"2026-07-08T03:00:00.000Z"} +{"doc_count":1211,"split_key":14061,"timestamp":"2026-07-08T04:00:00.000Z"} +{"doc_count":1192,"split_key":37963,"timestamp":"2026-07-08T04:00:00.000Z"} +{"doc_count":910,"split_key":25211,"timestamp":"2026-07-08T04:00:00.000Z"} +{"doc_count":876,"split_key":25369,"timestamp":"2026-07-08T04:00:00.000Z"} +{"doc_count":623,"split_key":3269,"timestamp":"2026-07-08T04:00:00.000Z"} +{"doc_count":1181,"split_key":14061,"timestamp":"2026-07-08T05:00:00.000Z"} +{"doc_count":990,"split_key":25369,"timestamp":"2026-07-08T05:00:00.000Z"} +{"doc_count":973,"split_key":396982,"timestamp":"2026-07-08T05:00:00.000Z"} +{"doc_count":563,"split_key":3269,"timestamp":"2026-07-08T05:00:00.000Z"} +{"doc_count":557,"split_key":37963,"timestamp":"2026-07-08T05:00:00.000Z"} +{"doc_count":3637,"split_key":209334,"timestamp":"2026-07-08T06:00:00.000Z"} +{"doc_count":3063,"split_key":211590,"timestamp":"2026-07-08T06:00:00.000Z"} +{"doc_count":1225,"split_key":14061,"timestamp":"2026-07-08T06:00:00.000Z"} +{"doc_count":632,"split_key":3269,"timestamp":"2026-07-08T06:00:00.000Z"} +{"doc_count":581,"split_key":64013,"timestamp":"2026-07-08T06:00:00.000Z"} +{"doc_count":11414,"split_key":209334,"timestamp":"2026-07-08T07:00:00.000Z"} +{"doc_count":2124,"split_key":265919,"timestamp":"2026-07-08T07:00:00.000Z"} +{"doc_count":1360,"split_key":37963,"timestamp":"2026-07-08T07:00:00.000Z"} +{"doc_count":1179,"split_key":14061,"timestamp":"2026-07-08T07:00:00.000Z"} +{"doc_count":861,"split_key":3269,"timestamp":"2026-07-08T07:00:00.000Z"} +{"doc_count":10841,"split_key":209334,"timestamp":"2026-07-08T08:00:00.000Z"} +{"doc_count":1249,"split_key":37963,"timestamp":"2026-07-08T08:00:00.000Z"} +{"doc_count":1142,"split_key":14061,"timestamp":"2026-07-08T08:00:00.000Z"} +{"doc_count":907,"split_key":45102,"timestamp":"2026-07-08T08:00:00.000Z"} +{"doc_count":841,"split_key":3269,"timestamp":"2026-07-08T08:00:00.000Z"} +{"doc_count":5688,"split_key":209334,"timestamp":"2026-07-08T09:00:00.000Z"} +{"doc_count":1304,"split_key":45102,"timestamp":"2026-07-08T09:00:00.000Z"} +{"doc_count":1225,"split_key":14061,"timestamp":"2026-07-08T09:00:00.000Z"} +{"doc_count":924,"split_key":3269,"timestamp":"2026-07-08T09:00:00.000Z"} +{"doc_count":754,"split_key":37963,"timestamp":"2026-07-08T09:00:00.000Z"} +{"doc_count":10938,"split_key":209334,"timestamp":"2026-07-08T10:00:00.000Z"} +{"doc_count":3382,"split_key":211590,"timestamp":"2026-07-08T10:00:00.000Z"} +{"doc_count":3140,"split_key":57724,"timestamp":"2026-07-08T10:00:00.000Z"} +{"doc_count":1230,"split_key":14061,"timestamp":"2026-07-08T10:00:00.000Z"} +{"doc_count":923,"split_key":45102,"timestamp":"2026-07-08T10:00:00.000Z"} +{"doc_count":4994,"split_key":209334,"timestamp":"2026-07-08T11:00:00.000Z"} +{"doc_count":2975,"split_key":211590,"timestamp":"2026-07-08T11:00:00.000Z"} +{"doc_count":1765,"split_key":57724,"timestamp":"2026-07-08T11:00:00.000Z"} +{"doc_count":1469,"split_key":14061,"timestamp":"2026-07-08T11:00:00.000Z"} +{"doc_count":900,"split_key":45102,"timestamp":"2026-07-08T11:00:00.000Z"} +{"doc_count":8865,"split_key":209334,"timestamp":"2026-07-08T12:00:00.000Z"} +{"doc_count":5138,"split_key":57724,"timestamp":"2026-07-08T12:00:00.000Z"} +{"doc_count":2819,"split_key":211590,"timestamp":"2026-07-08T12:00:00.000Z"} +{"doc_count":1827,"split_key":14061,"timestamp":"2026-07-08T12:00:00.000Z"} +{"doc_count":1154,"split_key":37963,"timestamp":"2026-07-08T12:00:00.000Z"} +{"doc_count":24861,"split_key":209334,"timestamp":"2026-07-08T13:00:00.000Z"} +{"doc_count":1914,"split_key":14061,"timestamp":"2026-07-08T13:00:00.000Z"} +{"doc_count":1000,"split_key":57724,"timestamp":"2026-07-08T13:00:00.000Z"} +{"doc_count":920,"split_key":396982,"timestamp":"2026-07-08T13:00:00.000Z"} +{"doc_count":821,"split_key":201401,"timestamp":"2026-07-08T13:00:00.000Z"} +{"doc_count":22427,"split_key":209334,"timestamp":"2026-07-08T14:00:00.000Z"} +{"doc_count":5375,"split_key":211590,"timestamp":"2026-07-08T14:00:00.000Z"} +{"doc_count":3463,"split_key":57724,"timestamp":"2026-07-08T14:00:00.000Z"} +{"doc_count":2105,"split_key":14061,"timestamp":"2026-07-08T14:00:00.000Z"} +{"doc_count":1557,"split_key":37963,"timestamp":"2026-07-08T14:00:00.000Z"} +{"doc_count":37992,"split_key":209334,"timestamp":"2026-07-08T15:00:00.000Z"} +{"doc_count":3403,"split_key":211590,"timestamp":"2026-07-08T15:00:00.000Z"} +{"doc_count":2399,"split_key":37963,"timestamp":"2026-07-08T15:00:00.000Z"} +{"doc_count":1967,"split_key":14061,"timestamp":"2026-07-08T15:00:00.000Z"} +{"doc_count":1135,"split_key":201401,"timestamp":"2026-07-08T15:00:00.000Z"} +{"doc_count":2605,"split_key":37963,"timestamp":"2026-07-08T16:00:00.000Z"} +{"doc_count":1885,"split_key":14061,"timestamp":"2026-07-08T16:00:00.000Z"} +{"doc_count":746,"split_key":14618,"timestamp":"2026-07-08T16:00:00.000Z"} +{"doc_count":708,"split_key":211590,"timestamp":"2026-07-08T16:00:00.000Z"} +{"doc_count":653,"split_key":51396,"timestamp":"2026-07-08T16:00:00.000Z"} +{"doc_count":1928,"split_key":14061,"timestamp":"2026-07-08T17:00:00.000Z"} +{"doc_count":713,"split_key":396982,"timestamp":"2026-07-08T17:00:00.000Z"} +{"doc_count":699,"split_key":37963,"timestamp":"2026-07-08T17:00:00.000Z"} +{"doc_count":445,"split_key":213412,"timestamp":"2026-07-08T17:00:00.000Z"} +{"doc_count":442,"split_key":138915,"timestamp":"2026-07-08T17:00:00.000Z"} +{"doc_count":17438,"split_key":209334,"timestamp":"2026-07-08T18:00:00.000Z"} +{"doc_count":1238,"split_key":14061,"timestamp":"2026-07-08T18:00:00.000Z"} +{"doc_count":529,"split_key":201401,"timestamp":"2026-07-08T18:00:00.000Z"} +{"doc_count":478,"split_key":138915,"timestamp":"2026-07-08T18:00:00.000Z"} +{"doc_count":459,"split_key":213412,"timestamp":"2026-07-08T18:00:00.000Z"} +{"doc_count":25857,"split_key":209334,"timestamp":"2026-07-08T19:00:00.000Z"} +{"doc_count":1433,"split_key":14061,"timestamp":"2026-07-08T19:00:00.000Z"} +{"doc_count":879,"split_key":37963,"timestamp":"2026-07-08T19:00:00.000Z"} +{"doc_count":663,"split_key":201401,"timestamp":"2026-07-08T19:00:00.000Z"} +{"doc_count":411,"split_key":138915,"timestamp":"2026-07-08T19:00:00.000Z"} +{"doc_count":42900,"split_key":209334,"timestamp":"2026-07-08T20:00:00.000Z"} +{"doc_count":2911,"split_key":211590,"timestamp":"2026-07-08T20:00:00.000Z"} +{"doc_count":1406,"split_key":14061,"timestamp":"2026-07-08T20:00:00.000Z"} +{"doc_count":1131,"split_key":201401,"timestamp":"2026-07-08T20:00:00.000Z"} +{"doc_count":850,"split_key":37963,"timestamp":"2026-07-08T20:00:00.000Z"} +{"doc_count":23312,"split_key":209334,"timestamp":"2026-07-08T21:00:00.000Z"} +{"doc_count":5214,"split_key":211590,"timestamp":"2026-07-08T21:00:00.000Z"} +{"doc_count":1241,"split_key":14061,"timestamp":"2026-07-08T21:00:00.000Z"} +{"doc_count":839,"split_key":141995,"timestamp":"2026-07-08T21:00:00.000Z"} +{"doc_count":761,"split_key":37963,"timestamp":"2026-07-08T21:00:00.000Z"} +{"doc_count":1274,"split_key":14061,"timestamp":"2026-07-08T22:00:00.000Z"} +{"doc_count":1009,"split_key":211590,"timestamp":"2026-07-08T22:00:00.000Z"} +{"doc_count":815,"split_key":37963,"timestamp":"2026-07-08T22:00:00.000Z"} +{"doc_count":562,"split_key":396982,"timestamp":"2026-07-08T22:00:00.000Z"} +{"doc_count":442,"split_key":138915,"timestamp":"2026-07-08T22:00:00.000Z"} +{"doc_count":1337,"split_key":14061,"timestamp":"2026-07-08T23:00:00.000Z"} +{"doc_count":1064,"split_key":142430,"timestamp":"2026-07-08T23:00:00.000Z"} +{"doc_count":826,"split_key":37963,"timestamp":"2026-07-08T23:00:00.000Z"} +{"doc_count":602,"split_key":396982,"timestamp":"2026-07-08T23:00:00.000Z"} +{"doc_count":455,"split_key":138915,"timestamp":"2026-07-08T23:00:00.000Z"} +{"doc_count":3083,"split_key":211590,"timestamp":"2026-07-09T00:00:00.000Z"} +{"doc_count":1351,"split_key":14061,"timestamp":"2026-07-09T00:00:00.000Z"} +{"doc_count":741,"split_key":37963,"timestamp":"2026-07-09T00:00:00.000Z"} +{"doc_count":711,"split_key":396982,"timestamp":"2026-07-09T00:00:00.000Z"} +{"doc_count":472,"split_key":141995,"timestamp":"2026-07-09T00:00:00.000Z"} +{"doc_count":4022,"split_key":211590,"timestamp":"2026-07-09T01:00:00.000Z"} +{"doc_count":1376,"split_key":14061,"timestamp":"2026-07-09T01:00:00.000Z"} +{"doc_count":946,"split_key":396982,"timestamp":"2026-07-09T01:00:00.000Z"} +{"doc_count":942,"split_key":45102,"timestamp":"2026-07-09T01:00:00.000Z"} +{"doc_count":936,"split_key":37963,"timestamp":"2026-07-09T01:00:00.000Z"} +{"doc_count":2115,"split_key":211590,"timestamp":"2026-07-09T02:00:00.000Z"} +{"doc_count":1274,"split_key":14061,"timestamp":"2026-07-09T02:00:00.000Z"} +{"doc_count":1156,"split_key":45102,"timestamp":"2026-07-09T02:00:00.000Z"} +{"doc_count":1093,"split_key":51396,"timestamp":"2026-07-09T02:00:00.000Z"} +{"doc_count":795,"split_key":396982,"timestamp":"2026-07-09T02:00:00.000Z"} +{"doc_count":1415,"split_key":18978,"timestamp":"2026-07-09T03:00:00.000Z"} +{"doc_count":1287,"split_key":14061,"timestamp":"2026-07-09T03:00:00.000Z"} +{"doc_count":1245,"split_key":45102,"timestamp":"2026-07-09T03:00:00.000Z"} +{"doc_count":805,"split_key":37963,"timestamp":"2026-07-09T03:00:00.000Z"} +{"doc_count":730,"split_key":16509,"timestamp":"2026-07-09T03:00:00.000Z"} +{"doc_count":1674,"split_key":37963,"timestamp":"2026-07-09T04:00:00.000Z"} +{"doc_count":1212,"split_key":45102,"timestamp":"2026-07-09T04:00:00.000Z"} +{"doc_count":1207,"split_key":14061,"timestamp":"2026-07-09T04:00:00.000Z"} +{"doc_count":997,"split_key":25369,"timestamp":"2026-07-09T04:00:00.000Z"} +{"doc_count":683,"split_key":396982,"timestamp":"2026-07-09T04:00:00.000Z"} +{"doc_count":1835,"split_key":37963,"timestamp":"2026-07-09T05:00:00.000Z"} +{"doc_count":1415,"split_key":18978,"timestamp":"2026-07-09T05:00:00.000Z"} +{"doc_count":1179,"split_key":14061,"timestamp":"2026-07-09T05:00:00.000Z"} +{"doc_count":1123,"split_key":396982,"timestamp":"2026-07-09T05:00:00.000Z"} +{"doc_count":974,"split_key":45102,"timestamp":"2026-07-09T05:00:00.000Z"} +{"doc_count":1127,"split_key":14061,"timestamp":"2026-07-09T06:00:00.000Z"} +{"doc_count":837,"split_key":37963,"timestamp":"2026-07-09T06:00:00.000Z"} +{"doc_count":726,"split_key":396982,"timestamp":"2026-07-09T06:00:00.000Z"} +{"doc_count":553,"split_key":209334,"timestamp":"2026-07-09T06:00:00.000Z"} +{"doc_count":481,"split_key":25369,"timestamp":"2026-07-09T06:00:00.000Z"} +{"doc_count":14693,"split_key":209334,"timestamp":"2026-07-09T07:00:00.000Z"} +{"doc_count":1375,"split_key":37963,"timestamp":"2026-07-09T07:00:00.000Z"} +{"doc_count":1196,"split_key":14061,"timestamp":"2026-07-09T07:00:00.000Z"} +{"doc_count":937,"split_key":6698,"timestamp":"2026-07-09T07:00:00.000Z"} +{"doc_count":910,"split_key":25211,"timestamp":"2026-07-09T07:00:00.000Z"} +{"doc_count":8997,"split_key":209334,"timestamp":"2026-07-09T08:00:00.000Z"} +{"doc_count":1220,"split_key":14061,"timestamp":"2026-07-09T08:00:00.000Z"} +{"doc_count":1059,"split_key":37963,"timestamp":"2026-07-09T08:00:00.000Z"} +{"doc_count":1008,"split_key":6821,"timestamp":"2026-07-09T08:00:00.000Z"} +{"doc_count":645,"split_key":16509,"timestamp":"2026-07-09T08:00:00.000Z"} +{"doc_count":7681,"split_key":209334,"timestamp":"2026-07-09T09:00:00.000Z"} +{"doc_count":1198,"split_key":14061,"timestamp":"2026-07-09T09:00:00.000Z"} +{"doc_count":832,"split_key":45102,"timestamp":"2026-07-09T09:00:00.000Z"} +{"doc_count":776,"split_key":37963,"timestamp":"2026-07-09T09:00:00.000Z"} +{"doc_count":663,"split_key":396982,"timestamp":"2026-07-09T09:00:00.000Z"} +{"doc_count":10659,"split_key":209334,"timestamp":"2026-07-09T10:00:00.000Z"} +{"doc_count":1132,"split_key":14061,"timestamp":"2026-07-09T10:00:00.000Z"} +{"doc_count":1102,"split_key":60068,"timestamp":"2026-07-09T10:00:00.000Z"} +{"doc_count":1073,"split_key":40065,"timestamp":"2026-07-09T10:00:00.000Z"} +{"doc_count":923,"split_key":37963,"timestamp":"2026-07-09T10:00:00.000Z"} +{"doc_count":4086,"split_key":209334,"timestamp":"2026-07-09T11:00:00.000Z"} +{"doc_count":1169,"split_key":14061,"timestamp":"2026-07-09T11:00:00.000Z"} +{"doc_count":872,"split_key":37963,"timestamp":"2026-07-09T11:00:00.000Z"} +{"doc_count":549,"split_key":45102,"timestamp":"2026-07-09T11:00:00.000Z"} +{"doc_count":501,"split_key":16509,"timestamp":"2026-07-09T11:00:00.000Z"} +{"doc_count":8002,"split_key":209334,"timestamp":"2026-07-09T12:00:00.000Z"} +{"doc_count":4282,"split_key":14061,"timestamp":"2026-07-09T12:00:00.000Z"} +{"doc_count":1100,"split_key":16276,"timestamp":"2026-07-09T12:00:00.000Z"} +{"doc_count":652,"split_key":16509,"timestamp":"2026-07-09T12:00:00.000Z"} +{"doc_count":647,"split_key":396982,"timestamp":"2026-07-09T12:00:00.000Z"} +{"doc_count":27308,"split_key":209334,"timestamp":"2026-07-09T13:00:00.000Z"} +{"doc_count":8392,"split_key":14061,"timestamp":"2026-07-09T13:00:00.000Z"} +{"doc_count":1307,"split_key":37963,"timestamp":"2026-07-09T13:00:00.000Z"} +{"doc_count":764,"split_key":16509,"timestamp":"2026-07-09T13:00:00.000Z"} +{"doc_count":638,"split_key":201401,"timestamp":"2026-07-09T13:00:00.000Z"} +{"doc_count":10881,"split_key":209334,"timestamp":"2026-07-09T14:00:00.000Z"} +{"doc_count":9265,"split_key":14061,"timestamp":"2026-07-09T14:00:00.000Z"} +{"doc_count":2656,"split_key":37963,"timestamp":"2026-07-09T14:00:00.000Z"} +{"doc_count":1437,"split_key":51396,"timestamp":"2026-07-09T14:00:00.000Z"} +{"doc_count":865,"split_key":16509,"timestamp":"2026-07-09T14:00:00.000Z"} +{"doc_count":8390,"split_key":14061,"timestamp":"2026-07-09T15:00:00.000Z"} +{"doc_count":6101,"split_key":209334,"timestamp":"2026-07-09T15:00:00.000Z"} +{"doc_count":1402,"split_key":37963,"timestamp":"2026-07-09T15:00:00.000Z"} +{"doc_count":1229,"split_key":201401,"timestamp":"2026-07-09T15:00:00.000Z"} +{"doc_count":654,"split_key":16509,"timestamp":"2026-07-09T15:00:00.000Z"} +{"doc_count":6556,"split_key":14061,"timestamp":"2026-07-09T16:00:00.000Z"} +{"doc_count":4043,"split_key":209334,"timestamp":"2026-07-09T16:00:00.000Z"} +{"doc_count":1746,"split_key":201401,"timestamp":"2026-07-09T16:00:00.000Z"} +{"doc_count":1083,"split_key":37963,"timestamp":"2026-07-09T16:00:00.000Z"} +{"doc_count":744,"split_key":16509,"timestamp":"2026-07-09T16:00:00.000Z"} +{"doc_count":5717,"split_key":211590,"timestamp":"2026-07-09T17:00:00.000Z"} +{"doc_count":3855,"split_key":209334,"timestamp":"2026-07-09T17:00:00.000Z"} +{"doc_count":2610,"split_key":14061,"timestamp":"2026-07-09T17:00:00.000Z"} +{"doc_count":1632,"split_key":201401,"timestamp":"2026-07-09T17:00:00.000Z"} +{"doc_count":1383,"split_key":37963,"timestamp":"2026-07-09T17:00:00.000Z"} +{"doc_count":3622,"split_key":209334,"timestamp":"2026-07-09T18:00:00.000Z"} +{"doc_count":2762,"split_key":14061,"timestamp":"2026-07-09T18:00:00.000Z"} +{"doc_count":2063,"split_key":211590,"timestamp":"2026-07-09T18:00:00.000Z"} +{"doc_count":1520,"split_key":201401,"timestamp":"2026-07-09T18:00:00.000Z"} +{"doc_count":1391,"split_key":37963,"timestamp":"2026-07-09T18:00:00.000Z"} +{"doc_count":3272,"split_key":209334,"timestamp":"2026-07-09T19:00:00.000Z"} +{"doc_count":2054,"split_key":14061,"timestamp":"2026-07-09T19:00:00.000Z"} +{"doc_count":1376,"split_key":201401,"timestamp":"2026-07-09T19:00:00.000Z"} +{"doc_count":1036,"split_key":37963,"timestamp":"2026-07-09T19:00:00.000Z"} +{"doc_count":546,"split_key":51396,"timestamp":"2026-07-09T19:00:00.000Z"} +{"doc_count":3370,"split_key":209334,"timestamp":"2026-07-09T20:00:00.000Z"} +{"doc_count":1233,"split_key":201401,"timestamp":"2026-07-09T20:00:00.000Z"} +{"doc_count":1195,"split_key":14061,"timestamp":"2026-07-09T20:00:00.000Z"} +{"doc_count":908,"split_key":51396,"timestamp":"2026-07-09T20:00:00.000Z"} +{"doc_count":738,"split_key":37963,"timestamp":"2026-07-09T20:00:00.000Z"} +{"doc_count":3227,"split_key":209334,"timestamp":"2026-07-09T21:00:00.000Z"} +{"doc_count":1942,"split_key":14061,"timestamp":"2026-07-09T21:00:00.000Z"} +{"doc_count":1054,"split_key":201401,"timestamp":"2026-07-09T21:00:00.000Z"} +{"doc_count":899,"split_key":37963,"timestamp":"2026-07-09T21:00:00.000Z"} +{"doc_count":886,"split_key":396982,"timestamp":"2026-07-09T21:00:00.000Z"} +{"doc_count":3118,"split_key":211590,"timestamp":"2026-07-09T22:00:00.000Z"} +{"doc_count":3073,"split_key":209334,"timestamp":"2026-07-09T22:00:00.000Z"} +{"doc_count":2662,"split_key":14061,"timestamp":"2026-07-09T22:00:00.000Z"} +{"doc_count":1640,"split_key":267837,"timestamp":"2026-07-09T22:00:00.000Z"} +{"doc_count":927,"split_key":37963,"timestamp":"2026-07-09T22:00:00.000Z"} +{"doc_count":2654,"split_key":209334,"timestamp":"2026-07-09T23:00:00.000Z"} +{"doc_count":2624,"split_key":14061,"timestamp":"2026-07-09T23:00:00.000Z"} +{"doc_count":2062,"split_key":267837,"timestamp":"2026-07-09T23:00:00.000Z"} +{"doc_count":897,"split_key":201401,"timestamp":"2026-07-09T23:00:00.000Z"} +{"doc_count":772,"split_key":37963,"timestamp":"2026-07-09T23:00:00.000Z"} +{"doc_count":3031,"split_key":14061,"timestamp":"2026-07-10T00:00:00.000Z"} +{"doc_count":2389,"split_key":209334,"timestamp":"2026-07-10T00:00:00.000Z"} +{"doc_count":908,"split_key":37963,"timestamp":"2026-07-10T00:00:00.000Z"} +{"doc_count":887,"split_key":201401,"timestamp":"2026-07-10T00:00:00.000Z"} +{"doc_count":867,"split_key":8075,"timestamp":"2026-07-10T00:00:00.000Z"} +{"doc_count":2794,"split_key":14061,"timestamp":"2026-07-10T01:00:00.000Z"} +{"doc_count":2210,"split_key":209334,"timestamp":"2026-07-10T01:00:00.000Z"} +{"doc_count":1091,"split_key":37963,"timestamp":"2026-07-10T01:00:00.000Z"} +{"doc_count":960,"split_key":396982,"timestamp":"2026-07-10T01:00:00.000Z"} +{"doc_count":877,"split_key":8075,"timestamp":"2026-07-10T01:00:00.000Z"} +{"doc_count":2483,"split_key":14061,"timestamp":"2026-07-10T02:00:00.000Z"} +{"doc_count":2245,"split_key":209334,"timestamp":"2026-07-10T02:00:00.000Z"} +{"doc_count":868,"split_key":37963,"timestamp":"2026-07-10T02:00:00.000Z"} +{"doc_count":826,"split_key":201401,"timestamp":"2026-07-10T02:00:00.000Z"} +{"doc_count":679,"split_key":396982,"timestamp":"2026-07-10T02:00:00.000Z"} +{"doc_count":2466,"split_key":14061,"timestamp":"2026-07-10T03:00:00.000Z"} +{"doc_count":2229,"split_key":209334,"timestamp":"2026-07-10T03:00:00.000Z"} +{"doc_count":860,"split_key":37963,"timestamp":"2026-07-10T03:00:00.000Z"} +{"doc_count":806,"split_key":201401,"timestamp":"2026-07-10T03:00:00.000Z"} +{"doc_count":765,"split_key":396982,"timestamp":"2026-07-10T03:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-07-10T04:00:00.000Z"} +{"doc_count":2671,"split_key":209334,"timestamp":"2026-07-10T04:00:00.000Z"} +{"doc_count":2344,"split_key":14061,"timestamp":"2026-07-10T04:00:00.000Z"} +{"doc_count":1452,"split_key":25369,"timestamp":"2026-07-10T04:00:00.000Z"} +{"doc_count":783,"split_key":201401,"timestamp":"2026-07-10T04:00:00.000Z"} +{"doc_count":2307,"split_key":14061,"timestamp":"2026-07-10T05:00:00.000Z"} +{"doc_count":1700,"split_key":209334,"timestamp":"2026-07-10T05:00:00.000Z"} +{"doc_count":1376,"split_key":25369,"timestamp":"2026-07-10T05:00:00.000Z"} +{"doc_count":933,"split_key":396982,"timestamp":"2026-07-10T05:00:00.000Z"} +{"doc_count":768,"split_key":201401,"timestamp":"2026-07-10T05:00:00.000Z"} +{"doc_count":10780,"split_key":209334,"timestamp":"2026-07-10T06:00:00.000Z"} +{"doc_count":2358,"split_key":14061,"timestamp":"2026-07-10T06:00:00.000Z"} +{"doc_count":2079,"split_key":211590,"timestamp":"2026-07-10T06:00:00.000Z"} +{"doc_count":1286,"split_key":37963,"timestamp":"2026-07-10T06:00:00.000Z"} +{"doc_count":1116,"split_key":201401,"timestamp":"2026-07-10T06:00:00.000Z"} +{"doc_count":30289,"split_key":209334,"timestamp":"2026-07-10T07:00:00.000Z"} +{"doc_count":3717,"split_key":211590,"timestamp":"2026-07-10T07:00:00.000Z"} +{"doc_count":2497,"split_key":14061,"timestamp":"2026-07-10T07:00:00.000Z"} +{"doc_count":2063,"split_key":51396,"timestamp":"2026-07-10T07:00:00.000Z"} +{"doc_count":1844,"split_key":201401,"timestamp":"2026-07-10T07:00:00.000Z"} +{"doc_count":28088,"split_key":209334,"timestamp":"2026-07-10T08:00:00.000Z"} +{"doc_count":3103,"split_key":211590,"timestamp":"2026-07-10T08:00:00.000Z"} +{"doc_count":2669,"split_key":14061,"timestamp":"2026-07-10T08:00:00.000Z"} +{"doc_count":1716,"split_key":201401,"timestamp":"2026-07-10T08:00:00.000Z"} +{"doc_count":1202,"split_key":37963,"timestamp":"2026-07-10T08:00:00.000Z"} +{"doc_count":27660,"split_key":209334,"timestamp":"2026-07-10T09:00:00.000Z"} +{"doc_count":2558,"split_key":14061,"timestamp":"2026-07-10T09:00:00.000Z"} +{"doc_count":2330,"split_key":37963,"timestamp":"2026-07-10T09:00:00.000Z"} +{"doc_count":1657,"split_key":201401,"timestamp":"2026-07-10T09:00:00.000Z"} +{"doc_count":593,"split_key":396982,"timestamp":"2026-07-10T09:00:00.000Z"} +{"doc_count":28213,"split_key":209334,"timestamp":"2026-07-10T10:00:00.000Z"} +{"doc_count":2624,"split_key":14061,"timestamp":"2026-07-10T10:00:00.000Z"} +{"doc_count":1717,"split_key":201401,"timestamp":"2026-07-10T10:00:00.000Z"} +{"doc_count":1472,"split_key":37963,"timestamp":"2026-07-10T10:00:00.000Z"} +{"doc_count":704,"split_key":51396,"timestamp":"2026-07-10T10:00:00.000Z"} +{"doc_count":15106,"split_key":209334,"timestamp":"2026-07-10T11:00:00.000Z"} +{"doc_count":2790,"split_key":14061,"timestamp":"2026-07-10T11:00:00.000Z"} +{"doc_count":1845,"split_key":51396,"timestamp":"2026-07-10T11:00:00.000Z"} +{"doc_count":1074,"split_key":37963,"timestamp":"2026-07-10T11:00:00.000Z"} +{"doc_count":997,"split_key":201401,"timestamp":"2026-07-10T11:00:00.000Z"} +{"doc_count":3016,"split_key":211590,"timestamp":"2026-07-10T12:00:00.000Z"} +{"doc_count":2860,"split_key":14061,"timestamp":"2026-07-10T12:00:00.000Z"} +{"doc_count":1853,"split_key":37963,"timestamp":"2026-07-10T12:00:00.000Z"} +{"doc_count":1361,"split_key":51396,"timestamp":"2026-07-10T12:00:00.000Z"} +{"doc_count":965,"split_key":209334,"timestamp":"2026-07-10T12:00:00.000Z"} +{"doc_count":3007,"split_key":211590,"timestamp":"2026-07-10T13:00:00.000Z"} +{"doc_count":2592,"split_key":14061,"timestamp":"2026-07-10T13:00:00.000Z"} +{"doc_count":723,"split_key":37963,"timestamp":"2026-07-10T13:00:00.000Z"} +{"doc_count":675,"split_key":396982,"timestamp":"2026-07-10T13:00:00.000Z"} +{"doc_count":428,"split_key":16509,"timestamp":"2026-07-10T13:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-07-10T14:00:00.000Z"} +{"doc_count":2644,"split_key":14061,"timestamp":"2026-07-10T14:00:00.000Z"} +{"doc_count":508,"split_key":51396,"timestamp":"2026-07-10T14:00:00.000Z"} +{"doc_count":421,"split_key":213412,"timestamp":"2026-07-10T14:00:00.000Z"} +{"doc_count":420,"split_key":396982,"timestamp":"2026-07-10T14:00:00.000Z"} +{"doc_count":27272,"split_key":209334,"timestamp":"2026-07-10T15:00:00.000Z"} +{"doc_count":2573,"split_key":14061,"timestamp":"2026-07-10T15:00:00.000Z"} +{"doc_count":1542,"split_key":201401,"timestamp":"2026-07-10T15:00:00.000Z"} +{"doc_count":1466,"split_key":211590,"timestamp":"2026-07-10T15:00:00.000Z"} +{"doc_count":405,"split_key":396982,"timestamp":"2026-07-10T15:00:00.000Z"} +{"doc_count":2661,"split_key":14061,"timestamp":"2026-07-10T16:00:00.000Z"} +{"doc_count":1667,"split_key":211590,"timestamp":"2026-07-10T16:00:00.000Z"} +{"doc_count":787,"split_key":201401,"timestamp":"2026-07-10T16:00:00.000Z"} +{"doc_count":614,"split_key":209334,"timestamp":"2026-07-10T16:00:00.000Z"} +{"doc_count":507,"split_key":16509,"timestamp":"2026-07-10T16:00:00.000Z"} +{"doc_count":9113,"split_key":209334,"timestamp":"2026-07-10T17:00:00.000Z"} +{"doc_count":2565,"split_key":14061,"timestamp":"2026-07-10T17:00:00.000Z"} +{"doc_count":672,"split_key":201401,"timestamp":"2026-07-10T17:00:00.000Z"} +{"doc_count":593,"split_key":396982,"timestamp":"2026-07-10T17:00:00.000Z"} +{"doc_count":522,"split_key":51396,"timestamp":"2026-07-10T17:00:00.000Z"} +{"doc_count":4807,"split_key":209334,"timestamp":"2026-07-10T18:00:00.000Z"} +{"doc_count":2665,"split_key":211590,"timestamp":"2026-07-10T18:00:00.000Z"} +{"doc_count":2583,"split_key":14061,"timestamp":"2026-07-10T18:00:00.000Z"} +{"doc_count":1623,"split_key":51396,"timestamp":"2026-07-10T18:00:00.000Z"} +{"doc_count":735,"split_key":37963,"timestamp":"2026-07-10T18:00:00.000Z"} +{"doc_count":4528,"split_key":209334,"timestamp":"2026-07-10T19:00:00.000Z"} +{"doc_count":2606,"split_key":14061,"timestamp":"2026-07-10T19:00:00.000Z"} +{"doc_count":1320,"split_key":37963,"timestamp":"2026-07-10T19:00:00.000Z"} +{"doc_count":757,"split_key":51396,"timestamp":"2026-07-10T19:00:00.000Z"} +{"doc_count":616,"split_key":396982,"timestamp":"2026-07-10T19:00:00.000Z"} +{"doc_count":4096,"split_key":209334,"timestamp":"2026-07-10T20:00:00.000Z"} +{"doc_count":2585,"split_key":14061,"timestamp":"2026-07-10T20:00:00.000Z"} +{"doc_count":2273,"split_key":37963,"timestamp":"2026-07-10T20:00:00.000Z"} +{"doc_count":594,"split_key":396982,"timestamp":"2026-07-10T20:00:00.000Z"} +{"doc_count":515,"split_key":16509,"timestamp":"2026-07-10T20:00:00.000Z"} +{"doc_count":3491,"split_key":209334,"timestamp":"2026-07-10T21:00:00.000Z"} +{"doc_count":2524,"split_key":14061,"timestamp":"2026-07-10T21:00:00.000Z"} +{"doc_count":2006,"split_key":37963,"timestamp":"2026-07-10T21:00:00.000Z"} +{"doc_count":789,"split_key":396982,"timestamp":"2026-07-10T21:00:00.000Z"} +{"doc_count":771,"split_key":51396,"timestamp":"2026-07-10T21:00:00.000Z"} +{"doc_count":4150,"split_key":209334,"timestamp":"2026-07-10T22:00:00.000Z"} +{"doc_count":2580,"split_key":14061,"timestamp":"2026-07-10T22:00:00.000Z"} +{"doc_count":1749,"split_key":37963,"timestamp":"2026-07-10T22:00:00.000Z"} +{"doc_count":1359,"split_key":51396,"timestamp":"2026-07-10T22:00:00.000Z"} +{"doc_count":573,"split_key":396982,"timestamp":"2026-07-10T22:00:00.000Z"} +{"doc_count":3223,"split_key":211590,"timestamp":"2026-07-10T23:00:00.000Z"} +{"doc_count":3068,"split_key":209334,"timestamp":"2026-07-10T23:00:00.000Z"} +{"doc_count":2664,"split_key":14061,"timestamp":"2026-07-10T23:00:00.000Z"} +{"doc_count":732,"split_key":37963,"timestamp":"2026-07-10T23:00:00.000Z"} +{"doc_count":688,"split_key":51396,"timestamp":"2026-07-10T23:00:00.000Z"} +{"doc_count":8755,"split_key":211590,"timestamp":"2026-07-11T00:00:00.000Z"} +{"doc_count":3014,"split_key":209334,"timestamp":"2026-07-11T00:00:00.000Z"} +{"doc_count":2614,"split_key":14061,"timestamp":"2026-07-11T00:00:00.000Z"} +{"doc_count":1046,"split_key":37963,"timestamp":"2026-07-11T00:00:00.000Z"} +{"doc_count":877,"split_key":16509,"timestamp":"2026-07-11T00:00:00.000Z"} +{"doc_count":8136,"split_key":211590,"timestamp":"2026-07-11T01:00:00.000Z"} +{"doc_count":2938,"split_key":209334,"timestamp":"2026-07-11T01:00:00.000Z"} +{"doc_count":2440,"split_key":14061,"timestamp":"2026-07-11T01:00:00.000Z"} +{"doc_count":1292,"split_key":37963,"timestamp":"2026-07-11T01:00:00.000Z"} +{"doc_count":1109,"split_key":51396,"timestamp":"2026-07-11T01:00:00.000Z"} +{"doc_count":4364,"split_key":211590,"timestamp":"2026-07-11T02:00:00.000Z"} +{"doc_count":2815,"split_key":209334,"timestamp":"2026-07-11T02:00:00.000Z"} +{"doc_count":2508,"split_key":14061,"timestamp":"2026-07-11T02:00:00.000Z"} +{"doc_count":1196,"split_key":37963,"timestamp":"2026-07-11T02:00:00.000Z"} +{"doc_count":992,"split_key":51396,"timestamp":"2026-07-11T02:00:00.000Z"} +{"doc_count":3090,"split_key":211590,"timestamp":"2026-07-11T03:00:00.000Z"} +{"doc_count":2529,"split_key":14061,"timestamp":"2026-07-11T03:00:00.000Z"} +{"doc_count":1889,"split_key":209334,"timestamp":"2026-07-11T03:00:00.000Z"} +{"doc_count":1190,"split_key":37963,"timestamp":"2026-07-11T03:00:00.000Z"} +{"doc_count":690,"split_key":396982,"timestamp":"2026-07-11T03:00:00.000Z"} +{"doc_count":3029,"split_key":211590,"timestamp":"2026-07-11T04:00:00.000Z"} +{"doc_count":2468,"split_key":209334,"timestamp":"2026-07-11T04:00:00.000Z"} +{"doc_count":2295,"split_key":14061,"timestamp":"2026-07-11T04:00:00.000Z"} +{"doc_count":1189,"split_key":37963,"timestamp":"2026-07-11T04:00:00.000Z"} +{"doc_count":1102,"split_key":48090,"timestamp":"2026-07-11T04:00:00.000Z"} +{"doc_count":6183,"split_key":211590,"timestamp":"2026-07-11T05:00:00.000Z"} +{"doc_count":2307,"split_key":209334,"timestamp":"2026-07-11T05:00:00.000Z"} +{"doc_count":2245,"split_key":14061,"timestamp":"2026-07-11T05:00:00.000Z"} +{"doc_count":1222,"split_key":37963,"timestamp":"2026-07-11T05:00:00.000Z"} +{"doc_count":998,"split_key":396982,"timestamp":"2026-07-11T05:00:00.000Z"} +{"doc_count":7425,"split_key":209334,"timestamp":"2026-07-11T06:00:00.000Z"} +{"doc_count":5131,"split_key":211590,"timestamp":"2026-07-11T06:00:00.000Z"} +{"doc_count":2288,"split_key":14061,"timestamp":"2026-07-11T06:00:00.000Z"} +{"doc_count":1796,"split_key":63949,"timestamp":"2026-07-11T06:00:00.000Z"} +{"doc_count":1167,"split_key":37963,"timestamp":"2026-07-11T06:00:00.000Z"} +{"doc_count":36704,"split_key":209334,"timestamp":"2026-07-11T07:00:00.000Z"} +{"doc_count":2273,"split_key":14061,"timestamp":"2026-07-11T07:00:00.000Z"} +{"doc_count":1309,"split_key":51396,"timestamp":"2026-07-11T07:00:00.000Z"} +{"doc_count":1298,"split_key":201401,"timestamp":"2026-07-11T07:00:00.000Z"} +{"doc_count":1090,"split_key":37963,"timestamp":"2026-07-11T07:00:00.000Z"} +{"doc_count":21452,"split_key":209334,"timestamp":"2026-07-11T08:00:00.000Z"} +{"doc_count":2283,"split_key":14061,"timestamp":"2026-07-11T08:00:00.000Z"} +{"doc_count":1108,"split_key":37963,"timestamp":"2026-07-11T08:00:00.000Z"} +{"doc_count":964,"split_key":48090,"timestamp":"2026-07-11T08:00:00.000Z"} +{"doc_count":870,"split_key":201401,"timestamp":"2026-07-11T08:00:00.000Z"} +{"doc_count":32182,"split_key":209334,"timestamp":"2026-07-11T09:00:00.000Z"} +{"doc_count":2947,"split_key":211590,"timestamp":"2026-07-11T09:00:00.000Z"} +{"doc_count":2171,"split_key":14061,"timestamp":"2026-07-11T09:00:00.000Z"} +{"doc_count":1623,"split_key":16509,"timestamp":"2026-07-11T09:00:00.000Z"} +{"doc_count":1458,"split_key":201401,"timestamp":"2026-07-11T09:00:00.000Z"} +{"doc_count":32374,"split_key":209334,"timestamp":"2026-07-11T10:00:00.000Z"} +{"doc_count":3839,"split_key":211590,"timestamp":"2026-07-11T10:00:00.000Z"} +{"doc_count":2102,"split_key":14061,"timestamp":"2026-07-11T10:00:00.000Z"} +{"doc_count":1503,"split_key":201401,"timestamp":"2026-07-11T10:00:00.000Z"} +{"doc_count":1214,"split_key":37963,"timestamp":"2026-07-11T10:00:00.000Z"} +{"doc_count":34136,"split_key":209334,"timestamp":"2026-07-11T11:00:00.000Z"} +{"doc_count":12334,"split_key":211590,"timestamp":"2026-07-11T11:00:00.000Z"} +{"doc_count":2180,"split_key":14061,"timestamp":"2026-07-11T11:00:00.000Z"} +{"doc_count":1601,"split_key":39891,"timestamp":"2026-07-11T11:00:00.000Z"} +{"doc_count":1528,"split_key":201401,"timestamp":"2026-07-11T11:00:00.000Z"} +{"doc_count":33311,"split_key":209334,"timestamp":"2026-07-11T12:00:00.000Z"} +{"doc_count":9639,"split_key":211590,"timestamp":"2026-07-11T12:00:00.000Z"} +{"doc_count":2049,"split_key":14061,"timestamp":"2026-07-11T12:00:00.000Z"} +{"doc_count":1970,"split_key":51396,"timestamp":"2026-07-11T12:00:00.000Z"} +{"doc_count":1443,"split_key":201401,"timestamp":"2026-07-11T12:00:00.000Z"} +{"doc_count":28980,"split_key":209334,"timestamp":"2026-07-11T13:00:00.000Z"} +{"doc_count":3095,"split_key":211590,"timestamp":"2026-07-11T13:00:00.000Z"} +{"doc_count":2038,"split_key":14061,"timestamp":"2026-07-11T13:00:00.000Z"} +{"doc_count":1253,"split_key":201401,"timestamp":"2026-07-11T13:00:00.000Z"} +{"doc_count":933,"split_key":45102,"timestamp":"2026-07-11T13:00:00.000Z"} +{"doc_count":19423,"split_key":209334,"timestamp":"2026-07-11T14:00:00.000Z"} +{"doc_count":2070,"split_key":14061,"timestamp":"2026-07-11T14:00:00.000Z"} +{"doc_count":1132,"split_key":48678,"timestamp":"2026-07-11T14:00:00.000Z"} +{"doc_count":892,"split_key":45102,"timestamp":"2026-07-11T14:00:00.000Z"} +{"doc_count":797,"split_key":201401,"timestamp":"2026-07-11T14:00:00.000Z"} +{"doc_count":57973,"split_key":23470,"timestamp":"2026-07-11T15:00:00.000Z"} +{"doc_count":2143,"split_key":14061,"timestamp":"2026-07-11T15:00:00.000Z"} +{"doc_count":1069,"split_key":48678,"timestamp":"2026-07-11T15:00:00.000Z"} +{"doc_count":710,"split_key":37963,"timestamp":"2026-07-11T15:00:00.000Z"} +{"doc_count":477,"split_key":135905,"timestamp":"2026-07-11T15:00:00.000Z"} +{"doc_count":2097,"split_key":14061,"timestamp":"2026-07-11T16:00:00.000Z"} +{"doc_count":1153,"split_key":48678,"timestamp":"2026-07-11T16:00:00.000Z"} +{"doc_count":729,"split_key":37963,"timestamp":"2026-07-11T16:00:00.000Z"} +{"doc_count":542,"split_key":396982,"timestamp":"2026-07-11T16:00:00.000Z"} +{"doc_count":519,"split_key":135377,"timestamp":"2026-07-11T16:00:00.000Z"} +{"doc_count":1919,"split_key":14061,"timestamp":"2026-07-11T17:00:00.000Z"} +{"doc_count":1058,"split_key":48678,"timestamp":"2026-07-11T17:00:00.000Z"} +{"doc_count":742,"split_key":37963,"timestamp":"2026-07-11T17:00:00.000Z"} +{"doc_count":742,"split_key":398101,"timestamp":"2026-07-11T17:00:00.000Z"} +{"doc_count":537,"split_key":396982,"timestamp":"2026-07-11T17:00:00.000Z"} +{"doc_count":9903,"split_key":57724,"timestamp":"2026-07-11T18:00:00.000Z"} +{"doc_count":1417,"split_key":48678,"timestamp":"2026-07-11T18:00:00.000Z"} +{"doc_count":1134,"split_key":14061,"timestamp":"2026-07-11T18:00:00.000Z"} +{"doc_count":883,"split_key":398101,"timestamp":"2026-07-11T18:00:00.000Z"} +{"doc_count":797,"split_key":37963,"timestamp":"2026-07-11T18:00:00.000Z"} +{"doc_count":5986,"split_key":211590,"timestamp":"2026-07-11T19:00:00.000Z"} +{"doc_count":2265,"split_key":57724,"timestamp":"2026-07-11T19:00:00.000Z"} +{"doc_count":1693,"split_key":48678,"timestamp":"2026-07-11T19:00:00.000Z"} +{"doc_count":1221,"split_key":14061,"timestamp":"2026-07-11T19:00:00.000Z"} +{"doc_count":1180,"split_key":37963,"timestamp":"2026-07-11T19:00:00.000Z"} +{"doc_count":1361,"split_key":37963,"timestamp":"2026-07-11T20:00:00.000Z"} +{"doc_count":1056,"split_key":48678,"timestamp":"2026-07-11T20:00:00.000Z"} +{"doc_count":868,"split_key":14061,"timestamp":"2026-07-11T20:00:00.000Z"} +{"doc_count":828,"split_key":51396,"timestamp":"2026-07-11T20:00:00.000Z"} +{"doc_count":535,"split_key":396982,"timestamp":"2026-07-11T20:00:00.000Z"} +{"doc_count":7299,"split_key":211590,"timestamp":"2026-07-11T21:00:00.000Z"} +{"doc_count":2236,"split_key":48678,"timestamp":"2026-07-11T21:00:00.000Z"} +{"doc_count":1507,"split_key":51396,"timestamp":"2026-07-11T21:00:00.000Z"} +{"doc_count":1346,"split_key":37963,"timestamp":"2026-07-11T21:00:00.000Z"} +{"doc_count":936,"split_key":141995,"timestamp":"2026-07-11T21:00:00.000Z"} +{"doc_count":1981,"split_key":48678,"timestamp":"2026-07-11T22:00:00.000Z"} +{"doc_count":1273,"split_key":37963,"timestamp":"2026-07-11T22:00:00.000Z"} +{"doc_count":782,"split_key":14061,"timestamp":"2026-07-11T22:00:00.000Z"} +{"doc_count":668,"split_key":40021,"timestamp":"2026-07-11T22:00:00.000Z"} +{"doc_count":623,"split_key":396982,"timestamp":"2026-07-11T22:00:00.000Z"} +{"doc_count":1194,"split_key":37963,"timestamp":"2026-07-11T23:00:00.000Z"} +{"doc_count":1125,"split_key":48678,"timestamp":"2026-07-11T23:00:00.000Z"} +{"doc_count":932,"split_key":51396,"timestamp":"2026-07-11T23:00:00.000Z"} +{"doc_count":707,"split_key":14061,"timestamp":"2026-07-11T23:00:00.000Z"} +{"doc_count":627,"split_key":396982,"timestamp":"2026-07-11T23:00:00.000Z"} +{"doc_count":11970,"split_key":14987,"timestamp":"2026-07-12T00:00:00.000Z"} +{"doc_count":2978,"split_key":211590,"timestamp":"2026-07-12T00:00:00.000Z"} +{"doc_count":1453,"split_key":37963,"timestamp":"2026-07-12T00:00:00.000Z"} +{"doc_count":831,"split_key":396982,"timestamp":"2026-07-12T00:00:00.000Z"} +{"doc_count":749,"split_key":14061,"timestamp":"2026-07-12T00:00:00.000Z"} +{"doc_count":3215,"split_key":211590,"timestamp":"2026-07-12T01:00:00.000Z"} +{"doc_count":1331,"split_key":37963,"timestamp":"2026-07-12T01:00:00.000Z"} +{"doc_count":1247,"split_key":396982,"timestamp":"2026-07-12T01:00:00.000Z"} +{"doc_count":840,"split_key":14061,"timestamp":"2026-07-12T01:00:00.000Z"} +{"doc_count":476,"split_key":63737,"timestamp":"2026-07-12T01:00:00.000Z"} +{"doc_count":5864,"split_key":211590,"timestamp":"2026-07-12T02:00:00.000Z"} +{"doc_count":1359,"split_key":37963,"timestamp":"2026-07-12T02:00:00.000Z"} +{"doc_count":1323,"split_key":396982,"timestamp":"2026-07-12T02:00:00.000Z"} +{"doc_count":967,"split_key":63737,"timestamp":"2026-07-12T02:00:00.000Z"} +{"doc_count":872,"split_key":14061,"timestamp":"2026-07-12T02:00:00.000Z"} +{"doc_count":3643,"split_key":211590,"timestamp":"2026-07-12T03:00:00.000Z"} +{"doc_count":1582,"split_key":37963,"timestamp":"2026-07-12T03:00:00.000Z"} +{"doc_count":1180,"split_key":396982,"timestamp":"2026-07-12T03:00:00.000Z"} +{"doc_count":1073,"split_key":16509,"timestamp":"2026-07-12T03:00:00.000Z"} +{"doc_count":773,"split_key":51396,"timestamp":"2026-07-12T03:00:00.000Z"} +{"doc_count":2824,"split_key":211590,"timestamp":"2026-07-12T04:00:00.000Z"} +{"doc_count":1581,"split_key":37963,"timestamp":"2026-07-12T04:00:00.000Z"} +{"doc_count":927,"split_key":25369,"timestamp":"2026-07-12T04:00:00.000Z"} +{"doc_count":688,"split_key":16509,"timestamp":"2026-07-12T04:00:00.000Z"} +{"doc_count":656,"split_key":396982,"timestamp":"2026-07-12T04:00:00.000Z"} +{"doc_count":1769,"split_key":37963,"timestamp":"2026-07-12T05:00:00.000Z"} +{"doc_count":1054,"split_key":396982,"timestamp":"2026-07-12T05:00:00.000Z"} +{"doc_count":930,"split_key":25369,"timestamp":"2026-07-12T05:00:00.000Z"} +{"doc_count":814,"split_key":16509,"timestamp":"2026-07-12T05:00:00.000Z"} +{"doc_count":545,"split_key":14061,"timestamp":"2026-07-12T05:00:00.000Z"} +{"doc_count":1770,"split_key":37963,"timestamp":"2026-07-12T06:00:00.000Z"} +{"doc_count":780,"split_key":396982,"timestamp":"2026-07-12T06:00:00.000Z"} +{"doc_count":742,"split_key":16509,"timestamp":"2026-07-12T06:00:00.000Z"} +{"doc_count":682,"split_key":63737,"timestamp":"2026-07-12T06:00:00.000Z"} +{"doc_count":619,"split_key":25369,"timestamp":"2026-07-12T06:00:00.000Z"} +{"doc_count":14249,"split_key":209334,"timestamp":"2026-07-12T07:00:00.000Z"} +{"doc_count":1802,"split_key":37963,"timestamp":"2026-07-12T07:00:00.000Z"} +{"doc_count":1070,"split_key":206264,"timestamp":"2026-07-12T07:00:00.000Z"} +{"doc_count":867,"split_key":16509,"timestamp":"2026-07-12T07:00:00.000Z"} +{"doc_count":629,"split_key":396982,"timestamp":"2026-07-12T07:00:00.000Z"} +{"doc_count":19842,"split_key":209334,"timestamp":"2026-07-12T08:00:00.000Z"} +{"doc_count":2522,"split_key":37963,"timestamp":"2026-07-12T08:00:00.000Z"} +{"doc_count":867,"split_key":206264,"timestamp":"2026-07-12T08:00:00.000Z"} +{"doc_count":755,"split_key":16509,"timestamp":"2026-07-12T08:00:00.000Z"} +{"doc_count":732,"split_key":14618,"timestamp":"2026-07-12T08:00:00.000Z"} +{"doc_count":20238,"split_key":209334,"timestamp":"2026-07-12T09:00:00.000Z"} +{"doc_count":2173,"split_key":211590,"timestamp":"2026-07-12T09:00:00.000Z"} +{"doc_count":1456,"split_key":37963,"timestamp":"2026-07-12T09:00:00.000Z"} +{"doc_count":1344,"split_key":206264,"timestamp":"2026-07-12T09:00:00.000Z"} +{"doc_count":885,"split_key":16509,"timestamp":"2026-07-12T09:00:00.000Z"} +{"doc_count":19348,"split_key":209334,"timestamp":"2026-07-12T10:00:00.000Z"} +{"doc_count":2769,"split_key":206264,"timestamp":"2026-07-12T10:00:00.000Z"} +{"doc_count":1240,"split_key":37963,"timestamp":"2026-07-12T10:00:00.000Z"} +{"doc_count":961,"split_key":16509,"timestamp":"2026-07-12T10:00:00.000Z"} +{"doc_count":590,"split_key":201401,"timestamp":"2026-07-12T10:00:00.000Z"} +{"doc_count":19818,"split_key":209334,"timestamp":"2026-07-12T11:00:00.000Z"} +{"doc_count":3080,"split_key":206264,"timestamp":"2026-07-12T11:00:00.000Z"} +{"doc_count":910,"split_key":16509,"timestamp":"2026-07-12T11:00:00.000Z"} +{"doc_count":753,"split_key":201401,"timestamp":"2026-07-12T11:00:00.000Z"} +{"doc_count":668,"split_key":37963,"timestamp":"2026-07-12T11:00:00.000Z"} +{"doc_count":20109,"split_key":209334,"timestamp":"2026-07-12T12:00:00.000Z"} +{"doc_count":2658,"split_key":206264,"timestamp":"2026-07-12T12:00:00.000Z"} +{"doc_count":1380,"split_key":211590,"timestamp":"2026-07-12T12:00:00.000Z"} +{"doc_count":1172,"split_key":57724,"timestamp":"2026-07-12T12:00:00.000Z"} +{"doc_count":946,"split_key":16509,"timestamp":"2026-07-12T12:00:00.000Z"} +{"doc_count":18995,"split_key":209334,"timestamp":"2026-07-12T13:00:00.000Z"} +{"doc_count":9122,"split_key":14061,"timestamp":"2026-07-12T13:00:00.000Z"} +{"doc_count":7564,"split_key":211590,"timestamp":"2026-07-12T13:00:00.000Z"} +{"doc_count":1513,"split_key":206264,"timestamp":"2026-07-12T13:00:00.000Z"} +{"doc_count":1102,"split_key":57724,"timestamp":"2026-07-12T13:00:00.000Z"} +{"doc_count":49702,"split_key":14061,"timestamp":"2026-07-12T14:00:00.000Z"} +{"doc_count":16672,"split_key":209334,"timestamp":"2026-07-12T14:00:00.000Z"} +{"doc_count":2274,"split_key":211590,"timestamp":"2026-07-12T14:00:00.000Z"} +{"doc_count":1232,"split_key":206264,"timestamp":"2026-07-12T14:00:00.000Z"} +{"doc_count":1129,"split_key":30860,"timestamp":"2026-07-12T14:00:00.000Z"} +{"doc_count":25815,"split_key":14061,"timestamp":"2026-07-12T15:00:00.000Z"} +{"doc_count":15595,"split_key":209334,"timestamp":"2026-07-12T15:00:00.000Z"} +{"doc_count":4158,"split_key":211590,"timestamp":"2026-07-12T15:00:00.000Z"} +{"doc_count":2109,"split_key":206264,"timestamp":"2026-07-12T15:00:00.000Z"} +{"doc_count":783,"split_key":201401,"timestamp":"2026-07-12T15:00:00.000Z"} +{"doc_count":22779,"split_key":14061,"timestamp":"2026-07-12T16:00:00.000Z"} +{"doc_count":14752,"split_key":209334,"timestamp":"2026-07-12T16:00:00.000Z"} +{"doc_count":2113,"split_key":206264,"timestamp":"2026-07-12T16:00:00.000Z"} +{"doc_count":1012,"split_key":213291,"timestamp":"2026-07-12T16:00:00.000Z"} +{"doc_count":781,"split_key":16509,"timestamp":"2026-07-12T16:00:00.000Z"} +{"doc_count":14035,"split_key":209334,"timestamp":"2026-07-12T17:00:00.000Z"} +{"doc_count":9746,"split_key":14061,"timestamp":"2026-07-12T17:00:00.000Z"} +{"doc_count":2113,"split_key":206264,"timestamp":"2026-07-12T17:00:00.000Z"} +{"doc_count":937,"split_key":51396,"timestamp":"2026-07-12T17:00:00.000Z"} +{"doc_count":770,"split_key":201401,"timestamp":"2026-07-12T17:00:00.000Z"} +{"doc_count":13584,"split_key":209334,"timestamp":"2026-07-12T18:00:00.000Z"} +{"doc_count":2104,"split_key":206264,"timestamp":"2026-07-12T18:00:00.000Z"} +{"doc_count":789,"split_key":37963,"timestamp":"2026-07-12T18:00:00.000Z"} +{"doc_count":768,"split_key":201401,"timestamp":"2026-07-12T18:00:00.000Z"} +{"doc_count":611,"split_key":48925,"timestamp":"2026-07-12T18:00:00.000Z"} +{"doc_count":12700,"split_key":209334,"timestamp":"2026-07-12T19:00:00.000Z"} +{"doc_count":2110,"split_key":206264,"timestamp":"2026-07-12T19:00:00.000Z"} +{"doc_count":700,"split_key":16509,"timestamp":"2026-07-12T19:00:00.000Z"} +{"doc_count":696,"split_key":37963,"timestamp":"2026-07-12T19:00:00.000Z"} +{"doc_count":684,"split_key":201401,"timestamp":"2026-07-12T19:00:00.000Z"} +{"doc_count":27036,"split_key":209334,"timestamp":"2026-07-12T20:00:00.000Z"} +{"doc_count":3762,"split_key":211590,"timestamp":"2026-07-12T20:00:00.000Z"} +{"doc_count":2114,"split_key":206264,"timestamp":"2026-07-12T20:00:00.000Z"} +{"doc_count":1816,"split_key":45102,"timestamp":"2026-07-12T20:00:00.000Z"} +{"doc_count":865,"split_key":16509,"timestamp":"2026-07-12T20:00:00.000Z"} +{"doc_count":9665,"split_key":211590,"timestamp":"2026-07-12T21:00:00.000Z"} +{"doc_count":6817,"split_key":45102,"timestamp":"2026-07-12T21:00:00.000Z"} +{"doc_count":2106,"split_key":206264,"timestamp":"2026-07-12T21:00:00.000Z"} +{"doc_count":941,"split_key":51396,"timestamp":"2026-07-12T21:00:00.000Z"} +{"doc_count":878,"split_key":141995,"timestamp":"2026-07-12T21:00:00.000Z"} +{"doc_count":9948,"split_key":211590,"timestamp":"2026-07-12T22:00:00.000Z"} +{"doc_count":3066,"split_key":45102,"timestamp":"2026-07-12T22:00:00.000Z"} +{"doc_count":2112,"split_key":206264,"timestamp":"2026-07-12T22:00:00.000Z"} +{"doc_count":788,"split_key":16509,"timestamp":"2026-07-12T22:00:00.000Z"} +{"doc_count":640,"split_key":37963,"timestamp":"2026-07-12T22:00:00.000Z"} +{"doc_count":19740,"split_key":63949,"timestamp":"2026-07-12T23:00:00.000Z"} +{"doc_count":5977,"split_key":211590,"timestamp":"2026-07-12T23:00:00.000Z"} +{"doc_count":2097,"split_key":206264,"timestamp":"2026-07-12T23:00:00.000Z"} +{"doc_count":1737,"split_key":37963,"timestamp":"2026-07-12T23:00:00.000Z"} +{"doc_count":792,"split_key":16509,"timestamp":"2026-07-12T23:00:00.000Z"} +{"doc_count":19905,"split_key":63949,"timestamp":"2026-07-13T00:00:00.000Z"} +{"doc_count":10739,"split_key":14987,"timestamp":"2026-07-13T00:00:00.000Z"} +{"doc_count":8912,"split_key":14061,"timestamp":"2026-07-13T00:00:00.000Z"} +{"doc_count":2864,"split_key":211590,"timestamp":"2026-07-13T00:00:00.000Z"} +{"doc_count":2111,"split_key":206264,"timestamp":"2026-07-13T00:00:00.000Z"} +{"doc_count":19498,"split_key":63949,"timestamp":"2026-07-13T01:00:00.000Z"} +{"doc_count":11095,"split_key":14061,"timestamp":"2026-07-13T01:00:00.000Z"} +{"doc_count":5969,"split_key":211590,"timestamp":"2026-07-13T01:00:00.000Z"} +{"doc_count":2106,"split_key":206264,"timestamp":"2026-07-13T01:00:00.000Z"} +{"doc_count":1623,"split_key":37963,"timestamp":"2026-07-13T01:00:00.000Z"} +{"doc_count":19491,"split_key":63949,"timestamp":"2026-07-13T02:00:00.000Z"} +{"doc_count":11963,"split_key":14061,"timestamp":"2026-07-13T02:00:00.000Z"} +{"doc_count":2196,"split_key":206264,"timestamp":"2026-07-13T02:00:00.000Z"} +{"doc_count":1578,"split_key":37963,"timestamp":"2026-07-13T02:00:00.000Z"} +{"doc_count":923,"split_key":50360,"timestamp":"2026-07-13T02:00:00.000Z"} +{"doc_count":19662,"split_key":63949,"timestamp":"2026-07-13T03:00:00.000Z"} +{"doc_count":11644,"split_key":14061,"timestamp":"2026-07-13T03:00:00.000Z"} +{"doc_count":3008,"split_key":206264,"timestamp":"2026-07-13T03:00:00.000Z"} +{"doc_count":1752,"split_key":37963,"timestamp":"2026-07-13T03:00:00.000Z"} +{"doc_count":810,"split_key":16509,"timestamp":"2026-07-13T03:00:00.000Z"} +{"doc_count":20062,"split_key":63949,"timestamp":"2026-07-13T04:00:00.000Z"} +{"doc_count":11895,"split_key":14061,"timestamp":"2026-07-13T04:00:00.000Z"} +{"doc_count":3012,"split_key":206264,"timestamp":"2026-07-13T04:00:00.000Z"} +{"doc_count":1298,"split_key":25369,"timestamp":"2026-07-13T04:00:00.000Z"} +{"doc_count":1178,"split_key":16509,"timestamp":"2026-07-13T04:00:00.000Z"} +{"doc_count":11636,"split_key":14061,"timestamp":"2026-07-13T05:00:00.000Z"} +{"doc_count":8721,"split_key":63949,"timestamp":"2026-07-13T05:00:00.000Z"} +{"doc_count":3825,"split_key":206264,"timestamp":"2026-07-13T05:00:00.000Z"} +{"doc_count":1871,"split_key":25198,"timestamp":"2026-07-13T05:00:00.000Z"} +{"doc_count":1298,"split_key":25369,"timestamp":"2026-07-13T05:00:00.000Z"} +{"doc_count":11032,"split_key":14061,"timestamp":"2026-07-13T06:00:00.000Z"} +{"doc_count":3665,"split_key":206264,"timestamp":"2026-07-13T06:00:00.000Z"} +{"doc_count":3076,"split_key":211590,"timestamp":"2026-07-13T06:00:00.000Z"} +{"doc_count":903,"split_key":16509,"timestamp":"2026-07-13T06:00:00.000Z"} +{"doc_count":860,"split_key":25369,"timestamp":"2026-07-13T06:00:00.000Z"} +{"doc_count":13741,"split_key":209334,"timestamp":"2026-07-13T07:00:00.000Z"} +{"doc_count":10688,"split_key":14061,"timestamp":"2026-07-13T07:00:00.000Z"} +{"doc_count":4985,"split_key":211590,"timestamp":"2026-07-13T07:00:00.000Z"} +{"doc_count":2939,"split_key":206264,"timestamp":"2026-07-13T07:00:00.000Z"} +{"doc_count":1844,"split_key":45102,"timestamp":"2026-07-13T07:00:00.000Z"} +{"doc_count":20096,"split_key":209334,"timestamp":"2026-07-13T08:00:00.000Z"} +{"doc_count":10889,"split_key":14061,"timestamp":"2026-07-13T08:00:00.000Z"} +{"doc_count":1763,"split_key":37963,"timestamp":"2026-07-13T08:00:00.000Z"} +{"doc_count":1419,"split_key":137899,"timestamp":"2026-07-13T08:00:00.000Z"} +{"doc_count":1171,"split_key":211590,"timestamp":"2026-07-13T08:00:00.000Z"} +{"doc_count":20638,"split_key":209334,"timestamp":"2026-07-13T09:00:00.000Z"} +{"doc_count":10597,"split_key":14061,"timestamp":"2026-07-13T09:00:00.000Z"} +{"doc_count":1920,"split_key":37963,"timestamp":"2026-07-13T09:00:00.000Z"} +{"doc_count":768,"split_key":25198,"timestamp":"2026-07-13T09:00:00.000Z"} +{"doc_count":715,"split_key":16509,"timestamp":"2026-07-13T09:00:00.000Z"} +{"doc_count":19709,"split_key":209334,"timestamp":"2026-07-13T10:00:00.000Z"} +{"doc_count":10978,"split_key":14061,"timestamp":"2026-07-13T10:00:00.000Z"} +{"doc_count":1583,"split_key":37963,"timestamp":"2026-07-13T10:00:00.000Z"} +{"doc_count":1550,"split_key":57724,"timestamp":"2026-07-13T10:00:00.000Z"} +{"doc_count":1218,"split_key":206264,"timestamp":"2026-07-13T10:00:00.000Z"} +{"doc_count":19705,"split_key":209334,"timestamp":"2026-07-13T11:00:00.000Z"} +{"doc_count":9063,"split_key":14061,"timestamp":"2026-07-13T11:00:00.000Z"} +{"doc_count":3262,"split_key":57724,"timestamp":"2026-07-13T11:00:00.000Z"} +{"doc_count":1482,"split_key":37963,"timestamp":"2026-07-13T11:00:00.000Z"} +{"doc_count":1284,"split_key":206264,"timestamp":"2026-07-13T11:00:00.000Z"} +{"doc_count":20940,"split_key":209334,"timestamp":"2026-07-13T12:00:00.000Z"} +{"doc_count":1944,"split_key":57724,"timestamp":"2026-07-13T12:00:00.000Z"} +{"doc_count":1060,"split_key":206264,"timestamp":"2026-07-13T12:00:00.000Z"} +{"doc_count":1039,"split_key":37963,"timestamp":"2026-07-13T12:00:00.000Z"} +{"doc_count":927,"split_key":198158,"timestamp":"2026-07-13T12:00:00.000Z"} +{"doc_count":20769,"split_key":209334,"timestamp":"2026-07-13T13:00:00.000Z"} +{"doc_count":1102,"split_key":206264,"timestamp":"2026-07-13T13:00:00.000Z"} +{"doc_count":993,"split_key":16509,"timestamp":"2026-07-13T13:00:00.000Z"} +{"doc_count":823,"split_key":51396,"timestamp":"2026-07-13T13:00:00.000Z"} +{"doc_count":739,"split_key":396982,"timestamp":"2026-07-13T13:00:00.000Z"} +{"doc_count":19477,"split_key":209334,"timestamp":"2026-07-13T14:00:00.000Z"} +{"doc_count":2547,"split_key":211590,"timestamp":"2026-07-13T14:00:00.000Z"} +{"doc_count":1450,"split_key":206264,"timestamp":"2026-07-13T14:00:00.000Z"} +{"doc_count":673,"split_key":37963,"timestamp":"2026-07-13T14:00:00.000Z"} +{"doc_count":600,"split_key":48678,"timestamp":"2026-07-13T14:00:00.000Z"} +{"doc_count":17071,"split_key":209334,"timestamp":"2026-07-13T15:00:00.000Z"} +{"doc_count":1476,"split_key":206264,"timestamp":"2026-07-13T15:00:00.000Z"} +{"doc_count":838,"split_key":212477,"timestamp":"2026-07-13T15:00:00.000Z"} +{"doc_count":735,"split_key":16509,"timestamp":"2026-07-13T15:00:00.000Z"} +{"doc_count":582,"split_key":135377,"timestamp":"2026-07-13T15:00:00.000Z"} +{"doc_count":15579,"split_key":209334,"timestamp":"2026-07-13T16:00:00.000Z"} +{"doc_count":1582,"split_key":206264,"timestamp":"2026-07-13T16:00:00.000Z"} +{"doc_count":1001,"split_key":137899,"timestamp":"2026-07-13T16:00:00.000Z"} +{"doc_count":661,"split_key":198158,"timestamp":"2026-07-13T16:00:00.000Z"} +{"doc_count":659,"split_key":16509,"timestamp":"2026-07-13T16:00:00.000Z"} +{"doc_count":14213,"split_key":209334,"timestamp":"2026-07-13T17:00:00.000Z"} +{"doc_count":3140,"split_key":211590,"timestamp":"2026-07-13T17:00:00.000Z"} +{"doc_count":1021,"split_key":206264,"timestamp":"2026-07-13T17:00:00.000Z"} +{"doc_count":865,"split_key":16509,"timestamp":"2026-07-13T17:00:00.000Z"} +{"doc_count":736,"split_key":396982,"timestamp":"2026-07-13T17:00:00.000Z"} +{"doc_count":14207,"split_key":209334,"timestamp":"2026-07-13T18:00:00.000Z"} +{"doc_count":3128,"split_key":211590,"timestamp":"2026-07-13T18:00:00.000Z"} +{"doc_count":1369,"split_key":206264,"timestamp":"2026-07-13T18:00:00.000Z"} +{"doc_count":848,"split_key":16509,"timestamp":"2026-07-13T18:00:00.000Z"} +{"doc_count":800,"split_key":141995,"timestamp":"2026-07-13T18:00:00.000Z"} +{"doc_count":13249,"split_key":209334,"timestamp":"2026-07-13T19:00:00.000Z"} +{"doc_count":3119,"split_key":211590,"timestamp":"2026-07-13T19:00:00.000Z"} +{"doc_count":1357,"split_key":206264,"timestamp":"2026-07-13T19:00:00.000Z"} +{"doc_count":1239,"split_key":8075,"timestamp":"2026-07-13T19:00:00.000Z"} +{"doc_count":833,"split_key":141995,"timestamp":"2026-07-13T19:00:00.000Z"} +{"doc_count":16168,"split_key":209334,"timestamp":"2026-07-13T20:00:00.000Z"} +{"doc_count":1378,"split_key":206264,"timestamp":"2026-07-13T20:00:00.000Z"} +{"doc_count":1132,"split_key":8075,"timestamp":"2026-07-13T20:00:00.000Z"} +{"doc_count":1089,"split_key":48090,"timestamp":"2026-07-13T20:00:00.000Z"} +{"doc_count":910,"split_key":198158,"timestamp":"2026-07-13T20:00:00.000Z"} +{"doc_count":10611,"split_key":209334,"timestamp":"2026-07-13T21:00:00.000Z"} +{"doc_count":2577,"split_key":211590,"timestamp":"2026-07-13T21:00:00.000Z"} +{"doc_count":1567,"split_key":206264,"timestamp":"2026-07-13T21:00:00.000Z"} +{"doc_count":1016,"split_key":396982,"timestamp":"2026-07-13T21:00:00.000Z"} +{"doc_count":763,"split_key":51396,"timestamp":"2026-07-13T21:00:00.000Z"} +{"doc_count":1704,"split_key":211590,"timestamp":"2026-07-13T22:00:00.000Z"} +{"doc_count":1601,"split_key":206264,"timestamp":"2026-07-13T22:00:00.000Z"} +{"doc_count":526,"split_key":16509,"timestamp":"2026-07-13T22:00:00.000Z"} +{"doc_count":475,"split_key":396982,"timestamp":"2026-07-13T22:00:00.000Z"} +{"doc_count":449,"split_key":141995,"timestamp":"2026-07-13T22:00:00.000Z"} +{"doc_count":3087,"split_key":211590,"timestamp":"2026-07-13T23:00:00.000Z"} +{"doc_count":1619,"split_key":206264,"timestamp":"2026-07-13T23:00:00.000Z"} +{"doc_count":792,"split_key":141995,"timestamp":"2026-07-13T23:00:00.000Z"} +{"doc_count":598,"split_key":37963,"timestamp":"2026-07-13T23:00:00.000Z"} +{"doc_count":548,"split_key":14061,"timestamp":"2026-07-13T23:00:00.000Z"} +{"doc_count":13089,"split_key":14987,"timestamp":"2026-07-14T00:00:00.000Z"} +{"doc_count":5517,"split_key":211590,"timestamp":"2026-07-14T00:00:00.000Z"} +{"doc_count":1600,"split_key":206264,"timestamp":"2026-07-14T00:00:00.000Z"} +{"doc_count":874,"split_key":141995,"timestamp":"2026-07-14T00:00:00.000Z"} +{"doc_count":682,"split_key":396982,"timestamp":"2026-07-14T00:00:00.000Z"} +{"doc_count":1783,"split_key":14061,"timestamp":"2026-07-14T01:00:00.000Z"} +{"doc_count":1603,"split_key":206264,"timestamp":"2026-07-14T01:00:00.000Z"} +{"doc_count":1166,"split_key":137899,"timestamp":"2026-07-14T01:00:00.000Z"} +{"doc_count":978,"split_key":396982,"timestamp":"2026-07-14T01:00:00.000Z"} +{"doc_count":920,"split_key":16509,"timestamp":"2026-07-14T01:00:00.000Z"} +{"doc_count":12921,"split_key":14061,"timestamp":"2026-07-14T02:00:00.000Z"} +{"doc_count":1644,"split_key":206264,"timestamp":"2026-07-14T02:00:00.000Z"} +{"doc_count":874,"split_key":51396,"timestamp":"2026-07-14T02:00:00.000Z"} +{"doc_count":700,"split_key":16509,"timestamp":"2026-07-14T02:00:00.000Z"} +{"doc_count":629,"split_key":396982,"timestamp":"2026-07-14T02:00:00.000Z"} +{"doc_count":19375,"split_key":14061,"timestamp":"2026-07-14T03:00:00.000Z"} +{"doc_count":1564,"split_key":206264,"timestamp":"2026-07-14T03:00:00.000Z"} +{"doc_count":1207,"split_key":51396,"timestamp":"2026-07-14T03:00:00.000Z"} +{"doc_count":1168,"split_key":211590,"timestamp":"2026-07-14T03:00:00.000Z"} +{"doc_count":824,"split_key":16509,"timestamp":"2026-07-14T03:00:00.000Z"} +{"doc_count":15360,"split_key":14061,"timestamp":"2026-07-14T04:00:00.000Z"} +{"doc_count":3215,"split_key":211590,"timestamp":"2026-07-14T04:00:00.000Z"} +{"doc_count":1612,"split_key":206264,"timestamp":"2026-07-14T04:00:00.000Z"} +{"doc_count":1397,"split_key":25369,"timestamp":"2026-07-14T04:00:00.000Z"} +{"doc_count":1208,"split_key":51396,"timestamp":"2026-07-14T04:00:00.000Z"} +{"doc_count":11824,"split_key":14061,"timestamp":"2026-07-14T05:00:00.000Z"} +{"doc_count":6198,"split_key":211590,"timestamp":"2026-07-14T05:00:00.000Z"} +{"doc_count":1552,"split_key":206264,"timestamp":"2026-07-14T05:00:00.000Z"} +{"doc_count":1241,"split_key":25369,"timestamp":"2026-07-14T05:00:00.000Z"} +{"doc_count":1071,"split_key":396982,"timestamp":"2026-07-14T05:00:00.000Z"} +{"doc_count":11821,"split_key":14061,"timestamp":"2026-07-14T06:00:00.000Z"} +{"doc_count":1463,"split_key":206264,"timestamp":"2026-07-14T06:00:00.000Z"} +{"doc_count":973,"split_key":25369,"timestamp":"2026-07-14T06:00:00.000Z"} +{"doc_count":750,"split_key":209334,"timestamp":"2026-07-14T06:00:00.000Z"} +{"doc_count":686,"split_key":16509,"timestamp":"2026-07-14T06:00:00.000Z"} +{"doc_count":13797,"split_key":209334,"timestamp":"2026-07-14T07:00:00.000Z"} +{"doc_count":11400,"split_key":14061,"timestamp":"2026-07-14T07:00:00.000Z"} +{"doc_count":2214,"split_key":211590,"timestamp":"2026-07-14T07:00:00.000Z"} +{"doc_count":1695,"split_key":206264,"timestamp":"2026-07-14T07:00:00.000Z"} +{"doc_count":725,"split_key":24940,"timestamp":"2026-07-14T07:00:00.000Z"} +{"doc_count":18719,"split_key":209334,"timestamp":"2026-07-14T08:00:00.000Z"} +{"doc_count":11983,"split_key":206264,"timestamp":"2026-07-14T08:00:00.000Z"} +{"doc_count":10896,"split_key":14061,"timestamp":"2026-07-14T08:00:00.000Z"} +{"doc_count":2520,"split_key":202412,"timestamp":"2026-07-14T08:00:00.000Z"} +{"doc_count":1616,"split_key":25198,"timestamp":"2026-07-14T08:00:00.000Z"} +{"doc_count":21738,"split_key":209334,"timestamp":"2026-07-14T09:00:00.000Z"} +{"doc_count":11519,"split_key":14061,"timestamp":"2026-07-14T09:00:00.000Z"} +{"doc_count":7188,"split_key":206264,"timestamp":"2026-07-14T09:00:00.000Z"} +{"doc_count":923,"split_key":25198,"timestamp":"2026-07-14T09:00:00.000Z"} +{"doc_count":856,"split_key":396982,"timestamp":"2026-07-14T09:00:00.000Z"} +{"doc_count":19789,"split_key":209334,"timestamp":"2026-07-14T10:00:00.000Z"} +{"doc_count":10790,"split_key":14061,"timestamp":"2026-07-14T10:00:00.000Z"} +{"doc_count":6942,"split_key":206264,"timestamp":"2026-07-14T10:00:00.000Z"} +{"doc_count":1425,"split_key":47583,"timestamp":"2026-07-14T10:00:00.000Z"} +{"doc_count":1406,"split_key":137899,"timestamp":"2026-07-14T10:00:00.000Z"} +{"doc_count":18842,"split_key":209334,"timestamp":"2026-07-14T11:00:00.000Z"} +{"doc_count":11938,"split_key":48090,"timestamp":"2026-07-14T11:00:00.000Z"} +{"doc_count":9568,"split_key":14061,"timestamp":"2026-07-14T11:00:00.000Z"} +{"doc_count":8777,"split_key":206264,"timestamp":"2026-07-14T11:00:00.000Z"} +{"doc_count":2350,"split_key":50360,"timestamp":"2026-07-14T11:00:00.000Z"} +{"doc_count":19557,"split_key":209334,"timestamp":"2026-07-14T12:00:00.000Z"} +{"doc_count":10840,"split_key":206264,"timestamp":"2026-07-14T12:00:00.000Z"} +{"doc_count":9831,"split_key":14061,"timestamp":"2026-07-14T12:00:00.000Z"} +{"doc_count":2604,"split_key":50360,"timestamp":"2026-07-14T12:00:00.000Z"} +{"doc_count":1285,"split_key":53427,"timestamp":"2026-07-14T12:00:00.000Z"} +{"doc_count":20570,"split_key":209334,"timestamp":"2026-07-14T13:00:00.000Z"} +{"doc_count":9734,"split_key":14061,"timestamp":"2026-07-14T13:00:00.000Z"} +{"doc_count":6561,"split_key":206264,"timestamp":"2026-07-14T13:00:00.000Z"} +{"doc_count":1550,"split_key":45102,"timestamp":"2026-07-14T13:00:00.000Z"} +{"doc_count":1364,"split_key":201401,"timestamp":"2026-07-14T13:00:00.000Z"} +{"doc_count":24640,"split_key":206264,"timestamp":"2026-07-14T14:00:00.000Z"} +{"doc_count":17978,"split_key":209334,"timestamp":"2026-07-14T14:00:00.000Z"} +{"doc_count":10014,"split_key":14061,"timestamp":"2026-07-14T14:00:00.000Z"} +{"doc_count":3017,"split_key":211590,"timestamp":"2026-07-14T14:00:00.000Z"} +{"doc_count":1524,"split_key":45102,"timestamp":"2026-07-14T14:00:00.000Z"} +{"doc_count":29249,"split_key":206264,"timestamp":"2026-07-14T15:00:00.000Z"} +{"doc_count":17093,"split_key":209334,"timestamp":"2026-07-14T15:00:00.000Z"} +{"doc_count":5949,"split_key":14061,"timestamp":"2026-07-14T15:00:00.000Z"} +{"doc_count":4356,"split_key":211590,"timestamp":"2026-07-14T15:00:00.000Z"} +{"doc_count":1185,"split_key":396982,"timestamp":"2026-07-14T15:00:00.000Z"} +{"doc_count":28952,"split_key":206264,"timestamp":"2026-07-14T16:00:00.000Z"} +{"doc_count":15254,"split_key":209334,"timestamp":"2026-07-14T16:00:00.000Z"} +{"doc_count":2883,"split_key":211590,"timestamp":"2026-07-14T16:00:00.000Z"} +{"doc_count":842,"split_key":37963,"timestamp":"2026-07-14T16:00:00.000Z"} +{"doc_count":738,"split_key":16509,"timestamp":"2026-07-14T16:00:00.000Z"} +{"doc_count":29147,"split_key":206264,"timestamp":"2026-07-14T17:00:00.000Z"} +{"doc_count":14869,"split_key":209334,"timestamp":"2026-07-14T17:00:00.000Z"} +{"doc_count":800,"split_key":16509,"timestamp":"2026-07-14T17:00:00.000Z"} +{"doc_count":733,"split_key":396982,"timestamp":"2026-07-14T17:00:00.000Z"} +{"doc_count":643,"split_key":25198,"timestamp":"2026-07-14T17:00:00.000Z"} +{"doc_count":14297,"split_key":209334,"timestamp":"2026-07-14T18:00:00.000Z"} +{"doc_count":3149,"split_key":211590,"timestamp":"2026-07-14T18:00:00.000Z"} +{"doc_count":2205,"split_key":8452,"timestamp":"2026-07-14T18:00:00.000Z"} +{"doc_count":916,"split_key":25198,"timestamp":"2026-07-14T18:00:00.000Z"} +{"doc_count":703,"split_key":141995,"timestamp":"2026-07-14T18:00:00.000Z"} +{"doc_count":13765,"split_key":209334,"timestamp":"2026-07-14T19:00:00.000Z"} +{"doc_count":2343,"split_key":211590,"timestamp":"2026-07-14T19:00:00.000Z"} +{"doc_count":1410,"split_key":137899,"timestamp":"2026-07-14T19:00:00.000Z"} +{"doc_count":974,"split_key":16509,"timestamp":"2026-07-14T19:00:00.000Z"} +{"doc_count":904,"split_key":25198,"timestamp":"2026-07-14T19:00:00.000Z"} +{"doc_count":16655,"split_key":209334,"timestamp":"2026-07-14T20:00:00.000Z"} +{"doc_count":3700,"split_key":211590,"timestamp":"2026-07-14T20:00:00.000Z"} +{"doc_count":936,"split_key":141995,"timestamp":"2026-07-14T20:00:00.000Z"} +{"doc_count":912,"split_key":25198,"timestamp":"2026-07-14T20:00:00.000Z"} +{"doc_count":909,"split_key":16509,"timestamp":"2026-07-14T20:00:00.000Z"} +{"doc_count":11062,"split_key":209334,"timestamp":"2026-07-14T21:00:00.000Z"} +{"doc_count":873,"split_key":25198,"timestamp":"2026-07-14T21:00:00.000Z"} +{"doc_count":745,"split_key":16509,"timestamp":"2026-07-14T21:00:00.000Z"} +{"doc_count":709,"split_key":396982,"timestamp":"2026-07-14T21:00:00.000Z"} +{"doc_count":640,"split_key":51396,"timestamp":"2026-07-14T21:00:00.000Z"} +{"doc_count":3822,"split_key":37963,"timestamp":"2026-07-14T22:00:00.000Z"} +{"doc_count":917,"split_key":25198,"timestamp":"2026-07-14T22:00:00.000Z"} +{"doc_count":767,"split_key":16509,"timestamp":"2026-07-14T22:00:00.000Z"} +{"doc_count":574,"split_key":63737,"timestamp":"2026-07-14T22:00:00.000Z"} +{"doc_count":543,"split_key":396982,"timestamp":"2026-07-14T22:00:00.000Z"} +{"doc_count":3016,"split_key":211590,"timestamp":"2026-07-14T23:00:00.000Z"} +{"doc_count":1008,"split_key":202412,"timestamp":"2026-07-14T23:00:00.000Z"} +{"doc_count":899,"split_key":25198,"timestamp":"2026-07-14T23:00:00.000Z"} +{"doc_count":833,"split_key":16509,"timestamp":"2026-07-14T23:00:00.000Z"} +{"doc_count":563,"split_key":398101,"timestamp":"2026-07-14T23:00:00.000Z"} +{"doc_count":4325,"split_key":48090,"timestamp":"2026-07-15T00:00:00.000Z"} +{"doc_count":3878,"split_key":211590,"timestamp":"2026-07-15T00:00:00.000Z"} +{"doc_count":1456,"split_key":202412,"timestamp":"2026-07-15T00:00:00.000Z"} +{"doc_count":870,"split_key":25198,"timestamp":"2026-07-15T00:00:00.000Z"} +{"doc_count":674,"split_key":398101,"timestamp":"2026-07-15T00:00:00.000Z"} +{"doc_count":11076,"split_key":14987,"timestamp":"2026-07-15T01:00:00.000Z"} +{"doc_count":2172,"split_key":211590,"timestamp":"2026-07-15T01:00:00.000Z"} +{"doc_count":1539,"split_key":50360,"timestamp":"2026-07-15T01:00:00.000Z"} +{"doc_count":1499,"split_key":202412,"timestamp":"2026-07-15T01:00:00.000Z"} +{"doc_count":895,"split_key":25198,"timestamp":"2026-07-15T01:00:00.000Z"} +{"doc_count":2872,"split_key":50360,"timestamp":"2026-07-15T02:00:00.000Z"} +{"doc_count":1527,"split_key":14061,"timestamp":"2026-07-15T02:00:00.000Z"} +{"doc_count":1492,"split_key":202412,"timestamp":"2026-07-15T02:00:00.000Z"} +{"doc_count":862,"split_key":25198,"timestamp":"2026-07-15T02:00:00.000Z"} +{"doc_count":711,"split_key":396982,"timestamp":"2026-07-15T02:00:00.000Z"} +{"doc_count":2794,"split_key":50360,"timestamp":"2026-07-15T03:00:00.000Z"} +{"doc_count":1523,"split_key":202412,"timestamp":"2026-07-15T03:00:00.000Z"} +{"doc_count":951,"split_key":25198,"timestamp":"2026-07-15T03:00:00.000Z"} +{"doc_count":862,"split_key":16509,"timestamp":"2026-07-15T03:00:00.000Z"} +{"doc_count":669,"split_key":63737,"timestamp":"2026-07-15T03:00:00.000Z"} +{"doc_count":2853,"split_key":50360,"timestamp":"2026-07-15T04:00:00.000Z"} +{"doc_count":1430,"split_key":137899,"timestamp":"2026-07-15T04:00:00.000Z"} +{"doc_count":1161,"split_key":37963,"timestamp":"2026-07-15T04:00:00.000Z"} +{"doc_count":1115,"split_key":202412,"timestamp":"2026-07-15T04:00:00.000Z"} +{"doc_count":1048,"split_key":25369,"timestamp":"2026-07-15T04:00:00.000Z"} +{"doc_count":3040,"split_key":50360,"timestamp":"2026-07-15T05:00:00.000Z"} +{"doc_count":1051,"split_key":25369,"timestamp":"2026-07-15T05:00:00.000Z"} +{"doc_count":870,"split_key":396982,"timestamp":"2026-07-15T05:00:00.000Z"} +{"doc_count":833,"split_key":25198,"timestamp":"2026-07-15T05:00:00.000Z"} +{"doc_count":681,"split_key":63737,"timestamp":"2026-07-15T05:00:00.000Z"} +{"doc_count":12143,"split_key":206264,"timestamp":"2026-07-15T06:00:00.000Z"} +{"doc_count":2907,"split_key":50360,"timestamp":"2026-07-15T06:00:00.000Z"} +{"doc_count":948,"split_key":25198,"timestamp":"2026-07-15T06:00:00.000Z"} +{"doc_count":878,"split_key":16509,"timestamp":"2026-07-15T06:00:00.000Z"} +{"doc_count":725,"split_key":202412,"timestamp":"2026-07-15T06:00:00.000Z"} +{"doc_count":12910,"split_key":209334,"timestamp":"2026-07-15T07:00:00.000Z"} +{"doc_count":12827,"split_key":206264,"timestamp":"2026-07-15T07:00:00.000Z"} +{"doc_count":2811,"split_key":50360,"timestamp":"2026-07-15T07:00:00.000Z"} +{"doc_count":848,"split_key":25198,"timestamp":"2026-07-15T07:00:00.000Z"} +{"doc_count":813,"split_key":16509,"timestamp":"2026-07-15T07:00:00.000Z"} +{"doc_count":18008,"split_key":209334,"timestamp":"2026-07-15T08:00:00.000Z"} +{"doc_count":10870,"split_key":206264,"timestamp":"2026-07-15T08:00:00.000Z"} +{"doc_count":3909,"split_key":202412,"timestamp":"2026-07-15T08:00:00.000Z"} +{"doc_count":2905,"split_key":50360,"timestamp":"2026-07-15T08:00:00.000Z"} +{"doc_count":912,"split_key":25198,"timestamp":"2026-07-15T08:00:00.000Z"} +{"doc_count":23361,"split_key":209334,"timestamp":"2026-07-15T09:00:00.000Z"} +{"doc_count":10599,"split_key":206264,"timestamp":"2026-07-15T09:00:00.000Z"} +{"doc_count":2846,"split_key":50360,"timestamp":"2026-07-15T09:00:00.000Z"} +{"doc_count":1279,"split_key":37963,"timestamp":"2026-07-15T09:00:00.000Z"} +{"doc_count":862,"split_key":25198,"timestamp":"2026-07-15T09:00:00.000Z"} +{"doc_count":18044,"split_key":209334,"timestamp":"2026-07-15T10:00:00.000Z"} +{"doc_count":11946,"split_key":206264,"timestamp":"2026-07-15T10:00:00.000Z"} +{"doc_count":2839,"split_key":50360,"timestamp":"2026-07-15T10:00:00.000Z"} +{"doc_count":943,"split_key":25198,"timestamp":"2026-07-15T10:00:00.000Z"} +{"doc_count":847,"split_key":16509,"timestamp":"2026-07-15T10:00:00.000Z"} +{"doc_count":21510,"split_key":209334,"timestamp":"2026-07-15T11:00:00.000Z"} +{"doc_count":7802,"split_key":206264,"timestamp":"2026-07-15T11:00:00.000Z"} +{"doc_count":2792,"split_key":50360,"timestamp":"2026-07-15T11:00:00.000Z"} +{"doc_count":1106,"split_key":37963,"timestamp":"2026-07-15T11:00:00.000Z"} +{"doc_count":892,"split_key":25198,"timestamp":"2026-07-15T11:00:00.000Z"} +{"doc_count":17600,"split_key":209334,"timestamp":"2026-07-15T12:00:00.000Z"} +{"doc_count":6556,"split_key":206264,"timestamp":"2026-07-15T12:00:00.000Z"} +{"doc_count":2852,"split_key":50360,"timestamp":"2026-07-15T12:00:00.000Z"} +{"doc_count":731,"split_key":202412,"timestamp":"2026-07-15T12:00:00.000Z"} +{"doc_count":672,"split_key":398101,"timestamp":"2026-07-15T12:00:00.000Z"} +{"doc_count":23292,"split_key":209334,"timestamp":"2026-07-15T13:00:00.000Z"} +{"doc_count":2858,"split_key":50360,"timestamp":"2026-07-15T13:00:00.000Z"} +{"doc_count":1802,"split_key":266583,"timestamp":"2026-07-15T13:00:00.000Z"} +{"doc_count":1398,"split_key":137899,"timestamp":"2026-07-15T13:00:00.000Z"} +{"doc_count":989,"split_key":206264,"timestamp":"2026-07-15T13:00:00.000Z"} +{"doc_count":16927,"split_key":209334,"timestamp":"2026-07-15T14:00:00.000Z"} +{"doc_count":3923,"split_key":206264,"timestamp":"2026-07-15T14:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-07-15T14:00:00.000Z"} +{"doc_count":2822,"split_key":50360,"timestamp":"2026-07-15T14:00:00.000Z"} +{"doc_count":884,"split_key":197540,"timestamp":"2026-07-15T14:00:00.000Z"} +{"doc_count":115124,"split_key":23470,"timestamp":"2026-07-15T15:00:00.000Z"} +{"doc_count":17598,"split_key":209334,"timestamp":"2026-07-15T15:00:00.000Z"} +{"doc_count":2814,"split_key":50360,"timestamp":"2026-07-15T15:00:00.000Z"} +{"doc_count":1219,"split_key":16509,"timestamp":"2026-07-15T15:00:00.000Z"} +{"doc_count":650,"split_key":63737,"timestamp":"2026-07-15T15:00:00.000Z"} +{"doc_count":13925,"split_key":209334,"timestamp":"2026-07-15T16:00:00.000Z"} +{"doc_count":2815,"split_key":50360,"timestamp":"2026-07-15T16:00:00.000Z"} +{"doc_count":1738,"split_key":206264,"timestamp":"2026-07-15T16:00:00.000Z"} +{"doc_count":825,"split_key":57724,"timestamp":"2026-07-15T16:00:00.000Z"} +{"doc_count":682,"split_key":16509,"timestamp":"2026-07-15T16:00:00.000Z"} +{"doc_count":16006,"split_key":209334,"timestamp":"2026-07-15T17:00:00.000Z"} +{"doc_count":2803,"split_key":50360,"timestamp":"2026-07-15T17:00:00.000Z"} +{"doc_count":922,"split_key":57724,"timestamp":"2026-07-15T17:00:00.000Z"} +{"doc_count":685,"split_key":139904,"timestamp":"2026-07-15T17:00:00.000Z"} +{"doc_count":654,"split_key":206264,"timestamp":"2026-07-15T17:00:00.000Z"} +{"doc_count":14163,"split_key":209334,"timestamp":"2026-07-15T18:00:00.000Z"} +{"doc_count":2699,"split_key":50360,"timestamp":"2026-07-15T18:00:00.000Z"} +{"doc_count":2091,"split_key":206264,"timestamp":"2026-07-15T18:00:00.000Z"} +{"doc_count":948,"split_key":57724,"timestamp":"2026-07-15T18:00:00.000Z"} +{"doc_count":713,"split_key":16509,"timestamp":"2026-07-15T18:00:00.000Z"} +{"doc_count":13647,"split_key":209334,"timestamp":"2026-07-15T19:00:00.000Z"} +{"doc_count":3655,"split_key":206264,"timestamp":"2026-07-15T19:00:00.000Z"} +{"doc_count":2507,"split_key":50360,"timestamp":"2026-07-15T19:00:00.000Z"} +{"doc_count":929,"split_key":57724,"timestamp":"2026-07-15T19:00:00.000Z"} +{"doc_count":717,"split_key":266583,"timestamp":"2026-07-15T19:00:00.000Z"} +{"doc_count":16372,"split_key":209334,"timestamp":"2026-07-15T20:00:00.000Z"} +{"doc_count":3379,"split_key":50360,"timestamp":"2026-07-15T20:00:00.000Z"} +{"doc_count":1867,"split_key":206264,"timestamp":"2026-07-15T20:00:00.000Z"} +{"doc_count":1154,"split_key":37963,"timestamp":"2026-07-15T20:00:00.000Z"} +{"doc_count":961,"split_key":57724,"timestamp":"2026-07-15T20:00:00.000Z"} +{"doc_count":13805,"split_key":48090,"timestamp":"2026-07-15T21:00:00.000Z"} +{"doc_count":11577,"split_key":209334,"timestamp":"2026-07-15T21:00:00.000Z"} +{"doc_count":2164,"split_key":50360,"timestamp":"2026-07-15T21:00:00.000Z"} +{"doc_count":1569,"split_key":206264,"timestamp":"2026-07-15T21:00:00.000Z"} +{"doc_count":928,"split_key":57724,"timestamp":"2026-07-15T21:00:00.000Z"} +{"doc_count":5751,"split_key":48090,"timestamp":"2026-07-15T22:00:00.000Z"} +{"doc_count":1706,"split_key":50360,"timestamp":"2026-07-15T22:00:00.000Z"} +{"doc_count":1415,"split_key":137899,"timestamp":"2026-07-15T22:00:00.000Z"} +{"doc_count":1414,"split_key":206264,"timestamp":"2026-07-15T22:00:00.000Z"} +{"doc_count":949,"split_key":24323,"timestamp":"2026-07-15T22:00:00.000Z"} +{"doc_count":1670,"split_key":50360,"timestamp":"2026-07-15T23:00:00.000Z"} +{"doc_count":1447,"split_key":206264,"timestamp":"2026-07-15T23:00:00.000Z"} +{"doc_count":946,"split_key":57724,"timestamp":"2026-07-15T23:00:00.000Z"} +{"doc_count":763,"split_key":24323,"timestamp":"2026-07-15T23:00:00.000Z"} +{"doc_count":632,"split_key":63737,"timestamp":"2026-07-15T23:00:00.000Z"} +{"doc_count":13124,"split_key":14987,"timestamp":"2026-07-16T00:00:00.000Z"} +{"doc_count":2901,"split_key":50360,"timestamp":"2026-07-16T00:00:00.000Z"} +{"doc_count":1450,"split_key":206264,"timestamp":"2026-07-16T00:00:00.000Z"} +{"doc_count":1365,"split_key":26496,"timestamp":"2026-07-16T00:00:00.000Z"} +{"doc_count":946,"split_key":57724,"timestamp":"2026-07-16T00:00:00.000Z"} +{"doc_count":3421,"split_key":50360,"timestamp":"2026-07-16T01:00:00.000Z"} +{"doc_count":1430,"split_key":206264,"timestamp":"2026-07-16T01:00:00.000Z"} +{"doc_count":1265,"split_key":63737,"timestamp":"2026-07-16T01:00:00.000Z"} +{"doc_count":978,"split_key":57724,"timestamp":"2026-07-16T01:00:00.000Z"} +{"doc_count":940,"split_key":396982,"timestamp":"2026-07-16T01:00:00.000Z"} +{"doc_count":1794,"split_key":50360,"timestamp":"2026-07-16T02:00:00.000Z"} +{"doc_count":1405,"split_key":206264,"timestamp":"2026-07-16T02:00:00.000Z"} +{"doc_count":954,"split_key":57724,"timestamp":"2026-07-16T02:00:00.000Z"} +{"doc_count":878,"split_key":396982,"timestamp":"2026-07-16T02:00:00.000Z"} +{"doc_count":761,"split_key":24323,"timestamp":"2026-07-16T02:00:00.000Z"} +{"doc_count":5154,"split_key":211590,"timestamp":"2026-07-16T03:00:00.000Z"} +{"doc_count":1554,"split_key":8452,"timestamp":"2026-07-16T03:00:00.000Z"} +{"doc_count":1350,"split_key":206264,"timestamp":"2026-07-16T03:00:00.000Z"} +{"doc_count":973,"split_key":57724,"timestamp":"2026-07-16T03:00:00.000Z"} +{"doc_count":757,"split_key":24323,"timestamp":"2026-07-16T03:00:00.000Z"} +{"doc_count":2285,"split_key":211590,"timestamp":"2026-07-16T04:00:00.000Z"} +{"doc_count":1565,"split_key":206264,"timestamp":"2026-07-16T04:00:00.000Z"} +{"doc_count":1025,"split_key":25369,"timestamp":"2026-07-16T04:00:00.000Z"} +{"doc_count":944,"split_key":396982,"timestamp":"2026-07-16T04:00:00.000Z"} +{"doc_count":591,"split_key":16509,"timestamp":"2026-07-16T04:00:00.000Z"} +{"doc_count":2846,"split_key":19318,"timestamp":"2026-07-16T05:00:00.000Z"} +{"doc_count":1493,"split_key":206264,"timestamp":"2026-07-16T05:00:00.000Z"} +{"doc_count":1043,"split_key":396982,"timestamp":"2026-07-16T05:00:00.000Z"} +{"doc_count":824,"split_key":25369,"timestamp":"2026-07-16T05:00:00.000Z"} +{"doc_count":690,"split_key":16509,"timestamp":"2026-07-16T05:00:00.000Z"} +{"doc_count":2412,"split_key":211590,"timestamp":"2026-07-16T06:00:00.000Z"} +{"doc_count":1769,"split_key":206264,"timestamp":"2026-07-16T06:00:00.000Z"} +{"doc_count":862,"split_key":396982,"timestamp":"2026-07-16T06:00:00.000Z"} +{"doc_count":624,"split_key":63737,"timestamp":"2026-07-16T06:00:00.000Z"} +{"doc_count":483,"split_key":37963,"timestamp":"2026-07-16T06:00:00.000Z"} +{"doc_count":12723,"split_key":209334,"timestamp":"2026-07-16T07:00:00.000Z"} +{"doc_count":1426,"split_key":206264,"timestamp":"2026-07-16T07:00:00.000Z"} +{"doc_count":1411,"split_key":137899,"timestamp":"2026-07-16T07:00:00.000Z"} +{"doc_count":727,"split_key":24323,"timestamp":"2026-07-16T07:00:00.000Z"} +{"doc_count":680,"split_key":7393,"timestamp":"2026-07-16T07:00:00.000Z"} +{"doc_count":27992,"split_key":63949,"timestamp":"2026-07-16T08:00:00.000Z"} +{"doc_count":16868,"split_key":209334,"timestamp":"2026-07-16T08:00:00.000Z"} +{"doc_count":7778,"split_key":209272,"timestamp":"2026-07-16T08:00:00.000Z"} +{"doc_count":4138,"split_key":13649,"timestamp":"2026-07-16T08:00:00.000Z"} +{"doc_count":3144,"split_key":206264,"timestamp":"2026-07-16T08:00:00.000Z"} +{"doc_count":20471,"split_key":209334,"timestamp":"2026-07-16T09:00:00.000Z"} +{"doc_count":6703,"split_key":209272,"timestamp":"2026-07-16T09:00:00.000Z"} +{"doc_count":3578,"split_key":206264,"timestamp":"2026-07-16T09:00:00.000Z"} +{"doc_count":1553,"split_key":211590,"timestamp":"2026-07-16T09:00:00.000Z"} +{"doc_count":1363,"split_key":63949,"timestamp":"2026-07-16T09:00:00.000Z"} +{"doc_count":18529,"split_key":209334,"timestamp":"2026-07-16T10:00:00.000Z"} +{"doc_count":3790,"split_key":206264,"timestamp":"2026-07-16T10:00:00.000Z"} +{"doc_count":2659,"split_key":139952,"timestamp":"2026-07-16T10:00:00.000Z"} +{"doc_count":2486,"split_key":202412,"timestamp":"2026-07-16T10:00:00.000Z"} +{"doc_count":1237,"split_key":16509,"timestamp":"2026-07-16T10:00:00.000Z"} +{"doc_count":22618,"split_key":209334,"timestamp":"2026-07-16T11:00:00.000Z"} +{"doc_count":1597,"split_key":206264,"timestamp":"2026-07-16T11:00:00.000Z"} +{"doc_count":1533,"split_key":203140,"timestamp":"2026-07-16T11:00:00.000Z"} +{"doc_count":1385,"split_key":37963,"timestamp":"2026-07-16T11:00:00.000Z"} +{"doc_count":933,"split_key":51396,"timestamp":"2026-07-16T11:00:00.000Z"} +{"doc_count":18417,"split_key":209334,"timestamp":"2026-07-16T12:00:00.000Z"} +{"doc_count":4978,"split_key":206264,"timestamp":"2026-07-16T12:00:00.000Z"} +{"doc_count":2625,"split_key":211590,"timestamp":"2026-07-16T12:00:00.000Z"} +{"doc_count":1888,"split_key":139952,"timestamp":"2026-07-16T12:00:00.000Z"} +{"doc_count":1332,"split_key":203140,"timestamp":"2026-07-16T12:00:00.000Z"} +{"doc_count":23006,"split_key":209334,"timestamp":"2026-07-16T13:00:00.000Z"} +{"doc_count":3946,"split_key":206264,"timestamp":"2026-07-16T13:00:00.000Z"} +{"doc_count":2604,"split_key":139952,"timestamp":"2026-07-16T13:00:00.000Z"} +{"doc_count":2466,"split_key":38235,"timestamp":"2026-07-16T13:00:00.000Z"} +{"doc_count":988,"split_key":56005,"timestamp":"2026-07-16T13:00:00.000Z"} +{"doc_count":16638,"split_key":209334,"timestamp":"2026-07-16T14:00:00.000Z"} +{"doc_count":5682,"split_key":206264,"timestamp":"2026-07-16T14:00:00.000Z"} +{"doc_count":1586,"split_key":139952,"timestamp":"2026-07-16T14:00:00.000Z"} +{"doc_count":1111,"split_key":37963,"timestamp":"2026-07-16T14:00:00.000Z"} +{"doc_count":770,"split_key":24323,"timestamp":"2026-07-16T14:00:00.000Z"} +{"doc_count":10931,"split_key":209334,"timestamp":"2026-07-16T15:00:00.000Z"} +{"doc_count":6417,"split_key":206264,"timestamp":"2026-07-16T15:00:00.000Z"} +{"doc_count":3163,"split_key":211590,"timestamp":"2026-07-16T15:00:00.000Z"} +{"doc_count":1009,"split_key":137899,"timestamp":"2026-07-16T15:00:00.000Z"} +{"doc_count":898,"split_key":16509,"timestamp":"2026-07-16T15:00:00.000Z"} +{"doc_count":3143,"split_key":211590,"timestamp":"2026-07-16T16:00:00.000Z"} +{"doc_count":2843,"split_key":206264,"timestamp":"2026-07-16T16:00:00.000Z"} +{"doc_count":1001,"split_key":37963,"timestamp":"2026-07-16T16:00:00.000Z"} +{"doc_count":759,"split_key":24323,"timestamp":"2026-07-16T16:00:00.000Z"} +{"doc_count":717,"split_key":396982,"timestamp":"2026-07-16T16:00:00.000Z"} +{"doc_count":989,"split_key":396982,"timestamp":"2026-07-16T17:00:00.000Z"} +{"doc_count":941,"split_key":37963,"timestamp":"2026-07-16T17:00:00.000Z"} +{"doc_count":912,"split_key":212238,"timestamp":"2026-07-16T17:00:00.000Z"} +{"doc_count":873,"split_key":206264,"timestamp":"2026-07-16T17:00:00.000Z"} +{"doc_count":773,"split_key":24323,"timestamp":"2026-07-16T17:00:00.000Z"} +{"doc_count":5565,"split_key":206264,"timestamp":"2026-07-16T18:00:00.000Z"} +{"doc_count":947,"split_key":37963,"timestamp":"2026-07-16T18:00:00.000Z"} +{"doc_count":794,"split_key":396982,"timestamp":"2026-07-16T18:00:00.000Z"} +{"doc_count":742,"split_key":24323,"timestamp":"2026-07-16T18:00:00.000Z"} +{"doc_count":632,"split_key":63737,"timestamp":"2026-07-16T18:00:00.000Z"} +{"doc_count":11592,"split_key":206264,"timestamp":"2026-07-16T19:00:00.000Z"} +{"doc_count":939,"split_key":37963,"timestamp":"2026-07-16T19:00:00.000Z"} +{"doc_count":742,"split_key":203140,"timestamp":"2026-07-16T19:00:00.000Z"} +{"doc_count":742,"split_key":396982,"timestamp":"2026-07-16T19:00:00.000Z"} +{"doc_count":732,"split_key":24323,"timestamp":"2026-07-16T19:00:00.000Z"} +{"doc_count":2788,"split_key":206264,"timestamp":"2026-07-16T20:00:00.000Z"} +{"doc_count":1138,"split_key":14618,"timestamp":"2026-07-16T20:00:00.000Z"} +{"doc_count":942,"split_key":37963,"timestamp":"2026-07-16T20:00:00.000Z"} +{"doc_count":790,"split_key":24323,"timestamp":"2026-07-16T20:00:00.000Z"} +{"doc_count":753,"split_key":396982,"timestamp":"2026-07-16T20:00:00.000Z"} +{"doc_count":10794,"split_key":206264,"timestamp":"2026-07-16T21:00:00.000Z"} +{"doc_count":3032,"split_key":14618,"timestamp":"2026-07-16T21:00:00.000Z"} +{"doc_count":949,"split_key":37963,"timestamp":"2026-07-16T21:00:00.000Z"} +{"doc_count":925,"split_key":396982,"timestamp":"2026-07-16T21:00:00.000Z"} +{"doc_count":889,"split_key":51396,"timestamp":"2026-07-16T21:00:00.000Z"} +{"doc_count":13699,"split_key":206264,"timestamp":"2026-07-16T22:00:00.000Z"} +{"doc_count":3319,"split_key":16509,"timestamp":"2026-07-16T22:00:00.000Z"} +{"doc_count":996,"split_key":37963,"timestamp":"2026-07-16T22:00:00.000Z"} +{"doc_count":756,"split_key":396982,"timestamp":"2026-07-16T22:00:00.000Z"} +{"doc_count":754,"split_key":24323,"timestamp":"2026-07-16T22:00:00.000Z"} +{"doc_count":17465,"split_key":209334,"timestamp":"2026-07-16T23:00:00.000Z"} +{"doc_count":7813,"split_key":206264,"timestamp":"2026-07-16T23:00:00.000Z"} +{"doc_count":1143,"split_key":63737,"timestamp":"2026-07-16T23:00:00.000Z"} +{"doc_count":1106,"split_key":48090,"timestamp":"2026-07-16T23:00:00.000Z"} +{"doc_count":1097,"split_key":37963,"timestamp":"2026-07-16T23:00:00.000Z"} +{"doc_count":26676,"split_key":209334,"timestamp":"2026-07-17T00:00:00.000Z"} +{"doc_count":12406,"split_key":206264,"timestamp":"2026-07-17T00:00:00.000Z"} +{"doc_count":11829,"split_key":14987,"timestamp":"2026-07-17T00:00:00.000Z"} +{"doc_count":2862,"split_key":48090,"timestamp":"2026-07-17T00:00:00.000Z"} +{"doc_count":1392,"split_key":137899,"timestamp":"2026-07-17T00:00:00.000Z"} +{"doc_count":37207,"split_key":206264,"timestamp":"2026-07-17T01:00:00.000Z"} +{"doc_count":27900,"split_key":209334,"timestamp":"2026-07-17T01:00:00.000Z"} +{"doc_count":5168,"split_key":139952,"timestamp":"2026-07-17T01:00:00.000Z"} +{"doc_count":1264,"split_key":16509,"timestamp":"2026-07-17T01:00:00.000Z"} +{"doc_count":1037,"split_key":37963,"timestamp":"2026-07-17T01:00:00.000Z"} +{"doc_count":36979,"split_key":206264,"timestamp":"2026-07-17T02:00:00.000Z"} +{"doc_count":19399,"split_key":209334,"timestamp":"2026-07-17T02:00:00.000Z"} +{"doc_count":5168,"split_key":139952,"timestamp":"2026-07-17T02:00:00.000Z"} +{"doc_count":2045,"split_key":16276,"timestamp":"2026-07-17T02:00:00.000Z"} +{"doc_count":1374,"split_key":63737,"timestamp":"2026-07-17T02:00:00.000Z"} +{"doc_count":36967,"split_key":206264,"timestamp":"2026-07-17T03:00:00.000Z"} +{"doc_count":1103,"split_key":37963,"timestamp":"2026-07-17T03:00:00.000Z"} +{"doc_count":944,"split_key":141968,"timestamp":"2026-07-17T03:00:00.000Z"} +{"doc_count":796,"split_key":24323,"timestamp":"2026-07-17T03:00:00.000Z"} +{"doc_count":703,"split_key":396982,"timestamp":"2026-07-17T03:00:00.000Z"} +{"doc_count":36976,"split_key":206264,"timestamp":"2026-07-17T04:00:00.000Z"} +{"doc_count":1081,"split_key":37963,"timestamp":"2026-07-17T04:00:00.000Z"} +{"doc_count":992,"split_key":25369,"timestamp":"2026-07-17T04:00:00.000Z"} +{"doc_count":790,"split_key":24323,"timestamp":"2026-07-17T04:00:00.000Z"} +{"doc_count":687,"split_key":51396,"timestamp":"2026-07-17T04:00:00.000Z"} +{"doc_count":37005,"split_key":206264,"timestamp":"2026-07-17T05:00:00.000Z"} +{"doc_count":1089,"split_key":37963,"timestamp":"2026-07-17T05:00:00.000Z"} +{"doc_count":946,"split_key":25369,"timestamp":"2026-07-17T05:00:00.000Z"} +{"doc_count":780,"split_key":12876,"timestamp":"2026-07-17T05:00:00.000Z"} +{"doc_count":778,"split_key":24323,"timestamp":"2026-07-17T05:00:00.000Z"} +{"doc_count":36984,"split_key":206264,"timestamp":"2026-07-17T06:00:00.000Z"} +{"doc_count":2342,"split_key":12876,"timestamp":"2026-07-17T06:00:00.000Z"} +{"doc_count":1057,"split_key":37963,"timestamp":"2026-07-17T06:00:00.000Z"} +{"doc_count":818,"split_key":24323,"timestamp":"2026-07-17T06:00:00.000Z"} +{"doc_count":621,"split_key":51396,"timestamp":"2026-07-17T06:00:00.000Z"} +{"doc_count":36976,"split_key":206264,"timestamp":"2026-07-17T07:00:00.000Z"} +{"doc_count":11284,"split_key":209334,"timestamp":"2026-07-17T07:00:00.000Z"} +{"doc_count":1312,"split_key":141968,"timestamp":"2026-07-17T07:00:00.000Z"} +{"doc_count":1309,"split_key":12876,"timestamp":"2026-07-17T07:00:00.000Z"} +{"doc_count":1111,"split_key":37963,"timestamp":"2026-07-17T07:00:00.000Z"} +{"doc_count":36970,"split_key":206264,"timestamp":"2026-07-17T08:00:00.000Z"} +{"doc_count":18307,"split_key":209334,"timestamp":"2026-07-17T08:00:00.000Z"} +{"doc_count":1479,"split_key":37963,"timestamp":"2026-07-17T08:00:00.000Z"} +{"doc_count":1148,"split_key":63737,"timestamp":"2026-07-17T08:00:00.000Z"} +{"doc_count":923,"split_key":24323,"timestamp":"2026-07-17T08:00:00.000Z"} +{"doc_count":36984,"split_key":206264,"timestamp":"2026-07-17T09:00:00.000Z"} +{"doc_count":15909,"split_key":209334,"timestamp":"2026-07-17T09:00:00.000Z"} +{"doc_count":2564,"split_key":213252,"timestamp":"2026-07-17T09:00:00.000Z"} +{"doc_count":1404,"split_key":137899,"timestamp":"2026-07-17T09:00:00.000Z"} +{"doc_count":1362,"split_key":37963,"timestamp":"2026-07-17T09:00:00.000Z"} +{"doc_count":22756,"split_key":209334,"timestamp":"2026-07-17T10:00:00.000Z"} +{"doc_count":18519,"split_key":206264,"timestamp":"2026-07-17T10:00:00.000Z"} +{"doc_count":1364,"split_key":51396,"timestamp":"2026-07-17T10:00:00.000Z"} +{"doc_count":941,"split_key":24323,"timestamp":"2026-07-17T10:00:00.000Z"} +{"doc_count":851,"split_key":37963,"timestamp":"2026-07-17T10:00:00.000Z"} +{"doc_count":22874,"split_key":209334,"timestamp":"2026-07-17T11:00:00.000Z"} +{"doc_count":1709,"split_key":51396,"timestamp":"2026-07-17T11:00:00.000Z"} +{"doc_count":970,"split_key":24323,"timestamp":"2026-07-17T11:00:00.000Z"} +{"doc_count":790,"split_key":37963,"timestamp":"2026-07-17T11:00:00.000Z"} +{"doc_count":628,"split_key":63737,"timestamp":"2026-07-17T11:00:00.000Z"} +{"doc_count":17021,"split_key":209334,"timestamp":"2026-07-17T12:00:00.000Z"} +{"doc_count":1608,"split_key":5384,"timestamp":"2026-07-17T12:00:00.000Z"} +{"doc_count":1050,"split_key":24323,"timestamp":"2026-07-17T12:00:00.000Z"} +{"doc_count":835,"split_key":51396,"timestamp":"2026-07-17T12:00:00.000Z"} +{"doc_count":766,"split_key":37963,"timestamp":"2026-07-17T12:00:00.000Z"} +{"doc_count":27903,"split_key":209334,"timestamp":"2026-07-17T13:00:00.000Z"} +{"doc_count":1378,"split_key":63737,"timestamp":"2026-07-17T13:00:00.000Z"} +{"doc_count":826,"split_key":37963,"timestamp":"2026-07-17T13:00:00.000Z"} +{"doc_count":658,"split_key":51396,"timestamp":"2026-07-17T13:00:00.000Z"} +{"doc_count":555,"split_key":24323,"timestamp":"2026-07-17T13:00:00.000Z"} +{"doc_count":17425,"split_key":209334,"timestamp":"2026-07-17T14:00:00.000Z"} +{"doc_count":962,"split_key":37963,"timestamp":"2026-07-17T14:00:00.000Z"} +{"doc_count":549,"split_key":14061,"timestamp":"2026-07-17T14:00:00.000Z"} +{"doc_count":424,"split_key":16509,"timestamp":"2026-07-17T14:00:00.000Z"} +{"doc_count":413,"split_key":213412,"timestamp":"2026-07-17T14:00:00.000Z"} +{"doc_count":12280,"split_key":209334,"timestamp":"2026-07-17T15:00:00.000Z"} +{"doc_count":4079,"split_key":49785,"timestamp":"2026-07-17T15:00:00.000Z"} +{"doc_count":877,"split_key":37963,"timestamp":"2026-07-17T15:00:00.000Z"} +{"doc_count":631,"split_key":63737,"timestamp":"2026-07-17T15:00:00.000Z"} +{"doc_count":537,"split_key":14061,"timestamp":"2026-07-17T15:00:00.000Z"} +{"doc_count":3240,"split_key":49785,"timestamp":"2026-07-17T16:00:00.000Z"} +{"doc_count":2398,"split_key":37963,"timestamp":"2026-07-17T16:00:00.000Z"} +{"doc_count":554,"split_key":14061,"timestamp":"2026-07-17T16:00:00.000Z"} +{"doc_count":513,"split_key":14618,"timestamp":"2026-07-17T16:00:00.000Z"} +{"doc_count":480,"split_key":396982,"timestamp":"2026-07-17T16:00:00.000Z"} +{"doc_count":7194,"split_key":206264,"timestamp":"2026-07-17T17:00:00.000Z"} +{"doc_count":3812,"split_key":49785,"timestamp":"2026-07-17T17:00:00.000Z"} +{"doc_count":753,"split_key":37963,"timestamp":"2026-07-17T17:00:00.000Z"} +{"doc_count":703,"split_key":396982,"timestamp":"2026-07-17T17:00:00.000Z"} +{"doc_count":552,"split_key":16509,"timestamp":"2026-07-17T17:00:00.000Z"} +{"doc_count":22272,"split_key":206264,"timestamp":"2026-07-17T18:00:00.000Z"} +{"doc_count":3170,"split_key":49785,"timestamp":"2026-07-17T18:00:00.000Z"} +{"doc_count":1408,"split_key":137899,"timestamp":"2026-07-17T18:00:00.000Z"} +{"doc_count":1017,"split_key":14061,"timestamp":"2026-07-17T18:00:00.000Z"} +{"doc_count":858,"split_key":37963,"timestamp":"2026-07-17T18:00:00.000Z"} +{"doc_count":2928,"split_key":49785,"timestamp":"2026-07-17T19:00:00.000Z"} +{"doc_count":1961,"split_key":206264,"timestamp":"2026-07-17T19:00:00.000Z"} +{"doc_count":1018,"split_key":37963,"timestamp":"2026-07-17T19:00:00.000Z"} +{"doc_count":564,"split_key":63737,"timestamp":"2026-07-17T19:00:00.000Z"} +{"doc_count":556,"split_key":396982,"timestamp":"2026-07-17T19:00:00.000Z"} +{"doc_count":14731,"split_key":206264,"timestamp":"2026-07-17T20:00:00.000Z"} +{"doc_count":2094,"split_key":49785,"timestamp":"2026-07-17T20:00:00.000Z"} +{"doc_count":1147,"split_key":37963,"timestamp":"2026-07-17T20:00:00.000Z"} +{"doc_count":570,"split_key":396982,"timestamp":"2026-07-17T20:00:00.000Z"} +{"doc_count":559,"split_key":63737,"timestamp":"2026-07-17T20:00:00.000Z"} +{"doc_count":13732,"split_key":206264,"timestamp":"2026-07-17T21:00:00.000Z"} +{"doc_count":984,"split_key":37963,"timestamp":"2026-07-17T21:00:00.000Z"} +{"doc_count":885,"split_key":49785,"timestamp":"2026-07-17T21:00:00.000Z"} +{"doc_count":852,"split_key":396982,"timestamp":"2026-07-17T21:00:00.000Z"} +{"doc_count":670,"split_key":7393,"timestamp":"2026-07-17T21:00:00.000Z"} +{"doc_count":13980,"split_key":206264,"timestamp":"2026-07-17T22:00:00.000Z"} +{"doc_count":648,"split_key":37963,"timestamp":"2026-07-17T22:00:00.000Z"} +{"doc_count":575,"split_key":396982,"timestamp":"2026-07-17T22:00:00.000Z"} +{"doc_count":552,"split_key":63737,"timestamp":"2026-07-17T22:00:00.000Z"} +{"doc_count":493,"split_key":16509,"timestamp":"2026-07-17T22:00:00.000Z"} +{"doc_count":17401,"split_key":209334,"timestamp":"2026-07-17T23:00:00.000Z"} +{"doc_count":13858,"split_key":206264,"timestamp":"2026-07-17T23:00:00.000Z"} +{"doc_count":12525,"split_key":7393,"timestamp":"2026-07-17T23:00:00.000Z"} +{"doc_count":817,"split_key":14061,"timestamp":"2026-07-17T23:00:00.000Z"} +{"doc_count":700,"split_key":37963,"timestamp":"2026-07-17T23:00:00.000Z"} +{"doc_count":27058,"split_key":209334,"timestamp":"2026-07-18T00:00:00.000Z"} +{"doc_count":13838,"split_key":206264,"timestamp":"2026-07-18T00:00:00.000Z"} +{"doc_count":11026,"split_key":14987,"timestamp":"2026-07-18T00:00:00.000Z"} +{"doc_count":1805,"split_key":63949,"timestamp":"2026-07-18T00:00:00.000Z"} +{"doc_count":892,"split_key":37963,"timestamp":"2026-07-18T00:00:00.000Z"} +{"doc_count":27876,"split_key":209334,"timestamp":"2026-07-18T01:00:00.000Z"} +{"doc_count":13916,"split_key":206264,"timestamp":"2026-07-18T01:00:00.000Z"} +{"doc_count":1289,"split_key":37963,"timestamp":"2026-07-18T01:00:00.000Z"} +{"doc_count":761,"split_key":396982,"timestamp":"2026-07-18T01:00:00.000Z"} +{"doc_count":697,"split_key":201401,"timestamp":"2026-07-18T01:00:00.000Z"} +{"doc_count":19530,"split_key":209334,"timestamp":"2026-07-18T02:00:00.000Z"} +{"doc_count":13885,"split_key":206264,"timestamp":"2026-07-18T02:00:00.000Z"} +{"doc_count":1027,"split_key":37963,"timestamp":"2026-07-18T02:00:00.000Z"} +{"doc_count":722,"split_key":396982,"timestamp":"2026-07-18T02:00:00.000Z"} +{"doc_count":632,"split_key":16509,"timestamp":"2026-07-18T02:00:00.000Z"} +{"doc_count":13800,"split_key":206264,"timestamp":"2026-07-18T03:00:00.000Z"} +{"doc_count":1422,"split_key":137899,"timestamp":"2026-07-18T03:00:00.000Z"} +{"doc_count":914,"split_key":37963,"timestamp":"2026-07-18T03:00:00.000Z"} +{"doc_count":784,"split_key":396982,"timestamp":"2026-07-18T03:00:00.000Z"} +{"doc_count":669,"split_key":16509,"timestamp":"2026-07-18T03:00:00.000Z"} +{"doc_count":13992,"split_key":206264,"timestamp":"2026-07-18T04:00:00.000Z"} +{"doc_count":1547,"split_key":37963,"timestamp":"2026-07-18T04:00:00.000Z"} +{"doc_count":1126,"split_key":25369,"timestamp":"2026-07-18T04:00:00.000Z"} +{"doc_count":824,"split_key":396982,"timestamp":"2026-07-18T04:00:00.000Z"} +{"doc_count":729,"split_key":16509,"timestamp":"2026-07-18T04:00:00.000Z"} +{"doc_count":13997,"split_key":206264,"timestamp":"2026-07-18T05:00:00.000Z"} +{"doc_count":1017,"split_key":25369,"timestamp":"2026-07-18T05:00:00.000Z"} +{"doc_count":977,"split_key":396982,"timestamp":"2026-07-18T05:00:00.000Z"} +{"doc_count":878,"split_key":37963,"timestamp":"2026-07-18T05:00:00.000Z"} +{"doc_count":719,"split_key":51396,"timestamp":"2026-07-18T05:00:00.000Z"} +{"doc_count":13738,"split_key":206264,"timestamp":"2026-07-18T06:00:00.000Z"} +{"doc_count":902,"split_key":16509,"timestamp":"2026-07-18T06:00:00.000Z"} +{"doc_count":802,"split_key":37963,"timestamp":"2026-07-18T06:00:00.000Z"} +{"doc_count":620,"split_key":396982,"timestamp":"2026-07-18T06:00:00.000Z"} +{"doc_count":606,"split_key":63737,"timestamp":"2026-07-18T06:00:00.000Z"} +{"doc_count":19779,"split_key":14061,"timestamp":"2026-07-18T07:00:00.000Z"} +{"doc_count":14025,"split_key":206264,"timestamp":"2026-07-18T07:00:00.000Z"} +{"doc_count":10987,"split_key":209334,"timestamp":"2026-07-18T07:00:00.000Z"} +{"doc_count":1279,"split_key":200239,"timestamp":"2026-07-18T07:00:00.000Z"} +{"doc_count":914,"split_key":37963,"timestamp":"2026-07-18T07:00:00.000Z"} +{"doc_count":23808,"split_key":14061,"timestamp":"2026-07-18T08:00:00.000Z"} +{"doc_count":17557,"split_key":209334,"timestamp":"2026-07-18T08:00:00.000Z"} +{"doc_count":13878,"split_key":206264,"timestamp":"2026-07-18T08:00:00.000Z"} +{"doc_count":820,"split_key":37963,"timestamp":"2026-07-18T08:00:00.000Z"} +{"doc_count":682,"split_key":201401,"timestamp":"2026-07-18T08:00:00.000Z"} +{"doc_count":15682,"split_key":209334,"timestamp":"2026-07-18T09:00:00.000Z"} +{"doc_count":14033,"split_key":206264,"timestamp":"2026-07-18T09:00:00.000Z"} +{"doc_count":1787,"split_key":14061,"timestamp":"2026-07-18T09:00:00.000Z"} +{"doc_count":941,"split_key":396982,"timestamp":"2026-07-18T09:00:00.000Z"} +{"doc_count":767,"split_key":16509,"timestamp":"2026-07-18T09:00:00.000Z"} +{"doc_count":21442,"split_key":209334,"timestamp":"2026-07-18T10:00:00.000Z"} +{"doc_count":10225,"split_key":206264,"timestamp":"2026-07-18T10:00:00.000Z"} +{"doc_count":2937,"split_key":14061,"timestamp":"2026-07-18T10:00:00.000Z"} +{"doc_count":879,"split_key":37963,"timestamp":"2026-07-18T10:00:00.000Z"} +{"doc_count":719,"split_key":201401,"timestamp":"2026-07-18T10:00:00.000Z"} +{"doc_count":25354,"split_key":209334,"timestamp":"2026-07-18T11:00:00.000Z"} +{"doc_count":16446,"split_key":206264,"timestamp":"2026-07-18T11:00:00.000Z"} +{"doc_count":13212,"split_key":14061,"timestamp":"2026-07-18T11:00:00.000Z"} +{"doc_count":1025,"split_key":16509,"timestamp":"2026-07-18T11:00:00.000Z"} +{"doc_count":886,"split_key":37963,"timestamp":"2026-07-18T11:00:00.000Z"} +{"doc_count":21588,"split_key":206264,"timestamp":"2026-07-18T12:00:00.000Z"} +{"doc_count":17732,"split_key":209334,"timestamp":"2026-07-18T12:00:00.000Z"} +{"doc_count":6674,"split_key":14061,"timestamp":"2026-07-18T12:00:00.000Z"} +{"doc_count":1266,"split_key":137899,"timestamp":"2026-07-18T12:00:00.000Z"} +{"doc_count":1173,"split_key":396982,"timestamp":"2026-07-18T12:00:00.000Z"} +{"doc_count":27076,"split_key":209334,"timestamp":"2026-07-18T13:00:00.000Z"} +{"doc_count":13031,"split_key":206264,"timestamp":"2026-07-18T13:00:00.000Z"} +{"doc_count":1636,"split_key":396982,"timestamp":"2026-07-18T13:00:00.000Z"} +{"doc_count":719,"split_key":16509,"timestamp":"2026-07-18T13:00:00.000Z"} +{"doc_count":719,"split_key":201401,"timestamp":"2026-07-18T13:00:00.000Z"} +{"doc_count":21100,"split_key":206264,"timestamp":"2026-07-18T14:00:00.000Z"} +{"doc_count":14051,"split_key":209334,"timestamp":"2026-07-18T14:00:00.000Z"} +{"doc_count":1775,"split_key":57724,"timestamp":"2026-07-18T14:00:00.000Z"} +{"doc_count":1125,"split_key":396982,"timestamp":"2026-07-18T14:00:00.000Z"} +{"doc_count":738,"split_key":16509,"timestamp":"2026-07-18T14:00:00.000Z"} +{"doc_count":13515,"split_key":209334,"timestamp":"2026-07-18T15:00:00.000Z"} +{"doc_count":9066,"split_key":206264,"timestamp":"2026-07-18T15:00:00.000Z"} +{"doc_count":1422,"split_key":57724,"timestamp":"2026-07-18T15:00:00.000Z"} +{"doc_count":1067,"split_key":396982,"timestamp":"2026-07-18T15:00:00.000Z"} +{"doc_count":623,"split_key":63737,"timestamp":"2026-07-18T15:00:00.000Z"} +{"doc_count":8977,"split_key":206264,"timestamp":"2026-07-18T16:00:00.000Z"} +{"doc_count":704,"split_key":16509,"timestamp":"2026-07-18T16:00:00.000Z"} +{"doc_count":599,"split_key":63737,"timestamp":"2026-07-18T16:00:00.000Z"} +{"doc_count":519,"split_key":37963,"timestamp":"2026-07-18T16:00:00.000Z"} +{"doc_count":475,"split_key":44382,"timestamp":"2026-07-18T16:00:00.000Z"} +{"doc_count":17800,"split_key":206264,"timestamp":"2026-07-18T17:00:00.000Z"} +{"doc_count":1820,"split_key":213252,"timestamp":"2026-07-18T17:00:00.000Z"} +{"doc_count":631,"split_key":63737,"timestamp":"2026-07-18T17:00:00.000Z"} +{"doc_count":628,"split_key":398101,"timestamp":"2026-07-18T17:00:00.000Z"} +{"doc_count":590,"split_key":37963,"timestamp":"2026-07-18T17:00:00.000Z"} +{"doc_count":16022,"split_key":206264,"timestamp":"2026-07-18T18:00:00.000Z"} +{"doc_count":1196,"split_key":58791,"timestamp":"2026-07-18T18:00:00.000Z"} +{"doc_count":790,"split_key":37963,"timestamp":"2026-07-18T18:00:00.000Z"} +{"doc_count":785,"split_key":16509,"timestamp":"2026-07-18T18:00:00.000Z"} +{"doc_count":585,"split_key":63737,"timestamp":"2026-07-18T18:00:00.000Z"} +{"doc_count":16896,"split_key":206264,"timestamp":"2026-07-18T19:00:00.000Z"} +{"doc_count":1165,"split_key":51396,"timestamp":"2026-07-18T19:00:00.000Z"} +{"doc_count":712,"split_key":16509,"timestamp":"2026-07-18T19:00:00.000Z"} +{"doc_count":689,"split_key":37963,"timestamp":"2026-07-18T19:00:00.000Z"} +{"doc_count":633,"split_key":197540,"timestamp":"2026-07-18T19:00:00.000Z"} +{"doc_count":16511,"split_key":206264,"timestamp":"2026-07-18T20:00:00.000Z"} +{"doc_count":1193,"split_key":137899,"timestamp":"2026-07-18T20:00:00.000Z"} +{"doc_count":795,"split_key":16509,"timestamp":"2026-07-18T20:00:00.000Z"} +{"doc_count":667,"split_key":396982,"timestamp":"2026-07-18T20:00:00.000Z"} +{"doc_count":659,"split_key":51396,"timestamp":"2026-07-18T20:00:00.000Z"} +{"doc_count":14789,"split_key":206264,"timestamp":"2026-07-18T21:00:00.000Z"} +{"doc_count":1298,"split_key":37963,"timestamp":"2026-07-18T21:00:00.000Z"} +{"doc_count":981,"split_key":396982,"timestamp":"2026-07-18T21:00:00.000Z"} +{"doc_count":860,"split_key":140456,"timestamp":"2026-07-18T21:00:00.000Z"} +{"doc_count":586,"split_key":398101,"timestamp":"2026-07-18T21:00:00.000Z"} +{"doc_count":9665,"split_key":206264,"timestamp":"2026-07-18T22:00:00.000Z"} +{"doc_count":1177,"split_key":37963,"timestamp":"2026-07-18T22:00:00.000Z"} +{"doc_count":845,"split_key":140456,"timestamp":"2026-07-18T22:00:00.000Z"} +{"doc_count":759,"split_key":16509,"timestamp":"2026-07-18T22:00:00.000Z"} +{"doc_count":649,"split_key":398101,"timestamp":"2026-07-18T22:00:00.000Z"} +{"doc_count":13411,"split_key":209334,"timestamp":"2026-07-18T23:00:00.000Z"} +{"doc_count":9115,"split_key":206264,"timestamp":"2026-07-18T23:00:00.000Z"} +{"doc_count":865,"split_key":140456,"timestamp":"2026-07-18T23:00:00.000Z"} +{"doc_count":768,"split_key":16509,"timestamp":"2026-07-18T23:00:00.000Z"} +{"doc_count":570,"split_key":37963,"timestamp":"2026-07-18T23:00:00.000Z"} +{"doc_count":28229,"split_key":209334,"timestamp":"2026-07-19T00:00:00.000Z"} +{"doc_count":8798,"split_key":206264,"timestamp":"2026-07-19T00:00:00.000Z"} +{"doc_count":813,"split_key":396982,"timestamp":"2026-07-19T00:00:00.000Z"} +{"doc_count":710,"split_key":201401,"timestamp":"2026-07-19T00:00:00.000Z"} +{"doc_count":625,"split_key":140456,"timestamp":"2026-07-19T00:00:00.000Z"} +{"doc_count":26631,"split_key":209334,"timestamp":"2026-07-19T01:00:00.000Z"} +{"doc_count":8995,"split_key":206264,"timestamp":"2026-07-19T01:00:00.000Z"} +{"doc_count":1040,"split_key":396982,"timestamp":"2026-07-19T01:00:00.000Z"} +{"doc_count":658,"split_key":40663,"timestamp":"2026-07-19T01:00:00.000Z"} +{"doc_count":654,"split_key":201401,"timestamp":"2026-07-19T01:00:00.000Z"} +{"doc_count":19257,"split_key":209334,"timestamp":"2026-07-19T02:00:00.000Z"} +{"doc_count":8861,"split_key":206264,"timestamp":"2026-07-19T02:00:00.000Z"} +{"doc_count":1190,"split_key":396982,"timestamp":"2026-07-19T02:00:00.000Z"} +{"doc_count":949,"split_key":16509,"timestamp":"2026-07-19T02:00:00.000Z"} +{"doc_count":802,"split_key":51396,"timestamp":"2026-07-19T02:00:00.000Z"} +{"doc_count":9114,"split_key":206264,"timestamp":"2026-07-19T03:00:00.000Z"} +{"doc_count":1319,"split_key":37963,"timestamp":"2026-07-19T03:00:00.000Z"} +{"doc_count":1179,"split_key":396982,"timestamp":"2026-07-19T03:00:00.000Z"} +{"doc_count":817,"split_key":16509,"timestamp":"2026-07-19T03:00:00.000Z"} +{"doc_count":548,"split_key":63737,"timestamp":"2026-07-19T03:00:00.000Z"} +{"doc_count":9144,"split_key":206264,"timestamp":"2026-07-19T04:00:00.000Z"} +{"doc_count":1287,"split_key":37963,"timestamp":"2026-07-19T04:00:00.000Z"} +{"doc_count":1145,"split_key":25369,"timestamp":"2026-07-19T04:00:00.000Z"} +{"doc_count":1067,"split_key":16509,"timestamp":"2026-07-19T04:00:00.000Z"} +{"doc_count":795,"split_key":396982,"timestamp":"2026-07-19T04:00:00.000Z"} +{"doc_count":9539,"split_key":206264,"timestamp":"2026-07-19T05:00:00.000Z"} +{"doc_count":1408,"split_key":137899,"timestamp":"2026-07-19T05:00:00.000Z"} +{"doc_count":1233,"split_key":37963,"timestamp":"2026-07-19T05:00:00.000Z"} +{"doc_count":1087,"split_key":396982,"timestamp":"2026-07-19T05:00:00.000Z"} +{"doc_count":989,"split_key":25369,"timestamp":"2026-07-19T05:00:00.000Z"} +{"doc_count":9512,"split_key":206264,"timestamp":"2026-07-19T06:00:00.000Z"} +{"doc_count":1160,"split_key":37963,"timestamp":"2026-07-19T06:00:00.000Z"} +{"doc_count":890,"split_key":16509,"timestamp":"2026-07-19T06:00:00.000Z"} +{"doc_count":781,"split_key":28890,"timestamp":"2026-07-19T06:00:00.000Z"} +{"doc_count":723,"split_key":396982,"timestamp":"2026-07-19T06:00:00.000Z"} +{"doc_count":10068,"split_key":209334,"timestamp":"2026-07-19T07:00:00.000Z"} +{"doc_count":9301,"split_key":206264,"timestamp":"2026-07-19T07:00:00.000Z"} +{"doc_count":2457,"split_key":63949,"timestamp":"2026-07-19T07:00:00.000Z"} +{"doc_count":1620,"split_key":201401,"timestamp":"2026-07-19T07:00:00.000Z"} +{"doc_count":1197,"split_key":37963,"timestamp":"2026-07-19T07:00:00.000Z"} +{"doc_count":16081,"split_key":209334,"timestamp":"2026-07-19T08:00:00.000Z"} +{"doc_count":9252,"split_key":206264,"timestamp":"2026-07-19T08:00:00.000Z"} +{"doc_count":1656,"split_key":201401,"timestamp":"2026-07-19T08:00:00.000Z"} +{"doc_count":1229,"split_key":37963,"timestamp":"2026-07-19T08:00:00.000Z"} +{"doc_count":939,"split_key":16509,"timestamp":"2026-07-19T08:00:00.000Z"} +{"doc_count":15331,"split_key":209334,"timestamp":"2026-07-19T09:00:00.000Z"} +{"doc_count":12504,"split_key":206264,"timestamp":"2026-07-19T09:00:00.000Z"} +{"doc_count":1508,"split_key":201401,"timestamp":"2026-07-19T09:00:00.000Z"} +{"doc_count":1181,"split_key":37963,"timestamp":"2026-07-19T09:00:00.000Z"} +{"doc_count":949,"split_key":16509,"timestamp":"2026-07-19T09:00:00.000Z"} +{"doc_count":20393,"split_key":209334,"timestamp":"2026-07-19T10:00:00.000Z"} +{"doc_count":12345,"split_key":206264,"timestamp":"2026-07-19T10:00:00.000Z"} +{"doc_count":1685,"split_key":201401,"timestamp":"2026-07-19T10:00:00.000Z"} +{"doc_count":1108,"split_key":37963,"timestamp":"2026-07-19T10:00:00.000Z"} +{"doc_count":1091,"split_key":16509,"timestamp":"2026-07-19T10:00:00.000Z"} +{"doc_count":21866,"split_key":209334,"timestamp":"2026-07-19T11:00:00.000Z"} +{"doc_count":11966,"split_key":206264,"timestamp":"2026-07-19T11:00:00.000Z"} +{"doc_count":2536,"split_key":45102,"timestamp":"2026-07-19T11:00:00.000Z"} +{"doc_count":1719,"split_key":16509,"timestamp":"2026-07-19T11:00:00.000Z"} +{"doc_count":1685,"split_key":201401,"timestamp":"2026-07-19T11:00:00.000Z"} +{"doc_count":14374,"split_key":209334,"timestamp":"2026-07-19T12:00:00.000Z"} +{"doc_count":11904,"split_key":206264,"timestamp":"2026-07-19T12:00:00.000Z"} +{"doc_count":3321,"split_key":150436,"timestamp":"2026-07-19T12:00:00.000Z"} +{"doc_count":2132,"split_key":45102,"timestamp":"2026-07-19T12:00:00.000Z"} +{"doc_count":1670,"split_key":201401,"timestamp":"2026-07-19T12:00:00.000Z"} +{"doc_count":26106,"split_key":209334,"timestamp":"2026-07-19T13:00:00.000Z"} +{"doc_count":11474,"split_key":206264,"timestamp":"2026-07-19T13:00:00.000Z"} +{"doc_count":8805,"split_key":150436,"timestamp":"2026-07-19T13:00:00.000Z"} +{"doc_count":1708,"split_key":201401,"timestamp":"2026-07-19T13:00:00.000Z"} +{"doc_count":876,"split_key":16509,"timestamp":"2026-07-19T13:00:00.000Z"} +{"doc_count":32878,"split_key":14061,"timestamp":"2026-07-19T14:00:00.000Z"} +{"doc_count":14011,"split_key":206264,"timestamp":"2026-07-19T14:00:00.000Z"} +{"doc_count":12868,"split_key":209334,"timestamp":"2026-07-19T14:00:00.000Z"} +{"doc_count":1563,"split_key":201401,"timestamp":"2026-07-19T14:00:00.000Z"} +{"doc_count":1398,"split_key":137899,"timestamp":"2026-07-19T14:00:00.000Z"} +{"doc_count":51161,"split_key":14061,"timestamp":"2026-07-19T15:00:00.000Z"} +{"doc_count":14064,"split_key":206264,"timestamp":"2026-07-19T15:00:00.000Z"} +{"doc_count":13316,"split_key":209334,"timestamp":"2026-07-19T15:00:00.000Z"} +{"doc_count":1185,"split_key":37963,"timestamp":"2026-07-19T15:00:00.000Z"} +{"doc_count":1183,"split_key":201401,"timestamp":"2026-07-19T15:00:00.000Z"} +{"doc_count":34536,"split_key":14061,"timestamp":"2026-07-19T16:00:00.000Z"} +{"doc_count":13946,"split_key":206264,"timestamp":"2026-07-19T16:00:00.000Z"} +{"doc_count":1282,"split_key":37963,"timestamp":"2026-07-19T16:00:00.000Z"} +{"doc_count":963,"split_key":16509,"timestamp":"2026-07-19T16:00:00.000Z"} +{"doc_count":831,"split_key":51167,"timestamp":"2026-07-19T16:00:00.000Z"} +{"doc_count":14601,"split_key":206264,"timestamp":"2026-07-19T17:00:00.000Z"} +{"doc_count":1132,"split_key":37963,"timestamp":"2026-07-19T17:00:00.000Z"} +{"doc_count":886,"split_key":16509,"timestamp":"2026-07-19T17:00:00.000Z"} +{"doc_count":841,"split_key":51167,"timestamp":"2026-07-19T17:00:00.000Z"} +{"doc_count":577,"split_key":28890,"timestamp":"2026-07-19T17:00:00.000Z"} +{"doc_count":260212,"split_key":211590,"timestamp":"2026-07-19T18:00:00.000Z"} +{"doc_count":14456,"split_key":206264,"timestamp":"2026-07-19T18:00:00.000Z"} +{"doc_count":991,"split_key":16509,"timestamp":"2026-07-19T18:00:00.000Z"} +{"doc_count":919,"split_key":51396,"timestamp":"2026-07-19T18:00:00.000Z"} +{"doc_count":698,"split_key":63737,"timestamp":"2026-07-19T18:00:00.000Z"} +{"doc_count":115427,"split_key":211590,"timestamp":"2026-07-19T19:00:00.000Z"} +{"doc_count":14407,"split_key":206264,"timestamp":"2026-07-19T19:00:00.000Z"} +{"doc_count":1044,"split_key":37963,"timestamp":"2026-07-19T19:00:00.000Z"} +{"doc_count":912,"split_key":16509,"timestamp":"2026-07-19T19:00:00.000Z"} +{"doc_count":573,"split_key":28890,"timestamp":"2026-07-19T19:00:00.000Z"} +{"doc_count":13903,"split_key":206264,"timestamp":"2026-07-19T20:00:00.000Z"} +{"doc_count":1403,"split_key":37963,"timestamp":"2026-07-19T20:00:00.000Z"} +{"doc_count":949,"split_key":16509,"timestamp":"2026-07-19T20:00:00.000Z"} +{"doc_count":691,"split_key":63737,"timestamp":"2026-07-19T20:00:00.000Z"} +{"doc_count":572,"split_key":28890,"timestamp":"2026-07-19T20:00:00.000Z"} +{"doc_count":14434,"split_key":206264,"timestamp":"2026-07-19T21:00:00.000Z"} +{"doc_count":1040,"split_key":37963,"timestamp":"2026-07-19T21:00:00.000Z"} +{"doc_count":854,"split_key":16509,"timestamp":"2026-07-19T21:00:00.000Z"} +{"doc_count":825,"split_key":63737,"timestamp":"2026-07-19T21:00:00.000Z"} +{"doc_count":595,"split_key":396982,"timestamp":"2026-07-19T21:00:00.000Z"} +{"doc_count":15070,"split_key":206264,"timestamp":"2026-07-19T22:00:00.000Z"} +{"doc_count":1080,"split_key":37963,"timestamp":"2026-07-19T22:00:00.000Z"} +{"doc_count":752,"split_key":63737,"timestamp":"2026-07-19T22:00:00.000Z"} +{"doc_count":711,"split_key":16509,"timestamp":"2026-07-19T22:00:00.000Z"} +{"doc_count":567,"split_key":28890,"timestamp":"2026-07-19T22:00:00.000Z"} +{"doc_count":14963,"split_key":206264,"timestamp":"2026-07-19T23:00:00.000Z"} +{"doc_count":13383,"split_key":209334,"timestamp":"2026-07-19T23:00:00.000Z"} +{"doc_count":1623,"split_key":37963,"timestamp":"2026-07-19T23:00:00.000Z"} +{"doc_count":1404,"split_key":137899,"timestamp":"2026-07-19T23:00:00.000Z"} +{"doc_count":893,"split_key":51396,"timestamp":"2026-07-19T23:00:00.000Z"} +{"doc_count":30047,"split_key":209334,"timestamp":"2026-07-20T00:00:00.000Z"} +{"doc_count":16747,"split_key":14987,"timestamp":"2026-07-20T00:00:00.000Z"} +{"doc_count":14306,"split_key":206264,"timestamp":"2026-07-20T00:00:00.000Z"} +{"doc_count":1741,"split_key":37963,"timestamp":"2026-07-20T00:00:00.000Z"} +{"doc_count":1256,"split_key":201401,"timestamp":"2026-07-20T00:00:00.000Z"} +{"doc_count":28041,"split_key":209334,"timestamp":"2026-07-20T01:00:00.000Z"} +{"doc_count":14138,"split_key":206264,"timestamp":"2026-07-20T01:00:00.000Z"} +{"doc_count":2471,"split_key":37963,"timestamp":"2026-07-20T01:00:00.000Z"} +{"doc_count":1667,"split_key":201401,"timestamp":"2026-07-20T01:00:00.000Z"} +{"doc_count":652,"split_key":396982,"timestamp":"2026-07-20T01:00:00.000Z"} +{"doc_count":19508,"split_key":209334,"timestamp":"2026-07-20T02:00:00.000Z"} +{"doc_count":14959,"split_key":206264,"timestamp":"2026-07-20T02:00:00.000Z"} +{"doc_count":2479,"split_key":37963,"timestamp":"2026-07-20T02:00:00.000Z"} +{"doc_count":1502,"split_key":6698,"timestamp":"2026-07-20T02:00:00.000Z"} +{"doc_count":1262,"split_key":201401,"timestamp":"2026-07-20T02:00:00.000Z"} +{"doc_count":15131,"split_key":206264,"timestamp":"2026-07-20T03:00:00.000Z"} +{"doc_count":1948,"split_key":37963,"timestamp":"2026-07-20T03:00:00.000Z"} +{"doc_count":802,"split_key":28890,"timestamp":"2026-07-20T03:00:00.000Z"} +{"doc_count":506,"split_key":396982,"timestamp":"2026-07-20T03:00:00.000Z"} +{"doc_count":462,"split_key":53667,"timestamp":"2026-07-20T03:00:00.000Z"} +{"doc_count":15090,"split_key":206264,"timestamp":"2026-07-20T04:00:00.000Z"} +{"doc_count":1593,"split_key":37963,"timestamp":"2026-07-20T04:00:00.000Z"} +{"doc_count":1177,"split_key":25369,"timestamp":"2026-07-20T04:00:00.000Z"} +{"doc_count":691,"split_key":209334,"timestamp":"2026-07-20T04:00:00.000Z"} +{"doc_count":537,"split_key":53667,"timestamp":"2026-07-20T04:00:00.000Z"} +{"doc_count":14374,"split_key":206264,"timestamp":"2026-07-20T05:00:00.000Z"} +{"doc_count":1034,"split_key":25369,"timestamp":"2026-07-20T05:00:00.000Z"} +{"doc_count":954,"split_key":37963,"timestamp":"2026-07-20T05:00:00.000Z"} +{"doc_count":767,"split_key":396982,"timestamp":"2026-07-20T05:00:00.000Z"} +{"doc_count":469,"split_key":16509,"timestamp":"2026-07-20T05:00:00.000Z"} +{"doc_count":14456,"split_key":206264,"timestamp":"2026-07-20T06:00:00.000Z"} +{"doc_count":1101,"split_key":37963,"timestamp":"2026-07-20T06:00:00.000Z"} +{"doc_count":827,"split_key":209334,"timestamp":"2026-07-20T06:00:00.000Z"} +{"doc_count":582,"split_key":16509,"timestamp":"2026-07-20T06:00:00.000Z"} +{"doc_count":564,"split_key":63737,"timestamp":"2026-07-20T06:00:00.000Z"} +{"doc_count":15220,"split_key":206264,"timestamp":"2026-07-20T07:00:00.000Z"} +{"doc_count":11335,"split_key":209334,"timestamp":"2026-07-20T07:00:00.000Z"} +{"doc_count":3496,"split_key":210940,"timestamp":"2026-07-20T07:00:00.000Z"} +{"doc_count":1202,"split_key":37963,"timestamp":"2026-07-20T07:00:00.000Z"} +{"doc_count":657,"split_key":201401,"timestamp":"2026-07-20T07:00:00.000Z"} +{"doc_count":16209,"split_key":209334,"timestamp":"2026-07-20T08:00:00.000Z"} +{"doc_count":15191,"split_key":206264,"timestamp":"2026-07-20T08:00:00.000Z"} +{"doc_count":1612,"split_key":201401,"timestamp":"2026-07-20T08:00:00.000Z"} +{"doc_count":1441,"split_key":51396,"timestamp":"2026-07-20T08:00:00.000Z"} +{"doc_count":880,"split_key":398101,"timestamp":"2026-07-20T08:00:00.000Z"} +{"doc_count":14729,"split_key":206264,"timestamp":"2026-07-20T09:00:00.000Z"} +{"doc_count":13480,"split_key":209334,"timestamp":"2026-07-20T09:00:00.000Z"} +{"doc_count":1543,"split_key":201401,"timestamp":"2026-07-20T09:00:00.000Z"} +{"doc_count":1291,"split_key":63737,"timestamp":"2026-07-20T09:00:00.000Z"} +{"doc_count":558,"split_key":47583,"timestamp":"2026-07-20T09:00:00.000Z"} +{"doc_count":22011,"split_key":209334,"timestamp":"2026-07-20T10:00:00.000Z"} +{"doc_count":13568,"split_key":206264,"timestamp":"2026-07-20T10:00:00.000Z"} +{"doc_count":1676,"split_key":201401,"timestamp":"2026-07-20T10:00:00.000Z"} +{"doc_count":1125,"split_key":63737,"timestamp":"2026-07-20T10:00:00.000Z"} +{"doc_count":604,"split_key":207043,"timestamp":"2026-07-20T10:00:00.000Z"} +{"doc_count":64258,"split_key":211590,"timestamp":"2026-07-20T11:00:00.000Z"} +{"doc_count":20558,"split_key":209334,"timestamp":"2026-07-20T11:00:00.000Z"} +{"doc_count":14519,"split_key":206264,"timestamp":"2026-07-20T11:00:00.000Z"} +{"doc_count":9763,"split_key":141995,"timestamp":"2026-07-20T11:00:00.000Z"} +{"doc_count":1731,"split_key":201401,"timestamp":"2026-07-20T11:00:00.000Z"} +{"doc_count":66007,"split_key":211590,"timestamp":"2026-07-20T12:00:00.000Z"} +{"doc_count":15901,"split_key":209334,"timestamp":"2026-07-20T12:00:00.000Z"} +{"doc_count":15425,"split_key":206264,"timestamp":"2026-07-20T12:00:00.000Z"} +{"doc_count":9905,"split_key":141995,"timestamp":"2026-07-20T12:00:00.000Z"} +{"doc_count":1664,"split_key":201401,"timestamp":"2026-07-20T12:00:00.000Z"} +{"doc_count":22583,"split_key":209334,"timestamp":"2026-07-20T13:00:00.000Z"} +{"doc_count":21109,"split_key":206264,"timestamp":"2026-07-20T13:00:00.000Z"} +{"doc_count":1724,"split_key":201401,"timestamp":"2026-07-20T13:00:00.000Z"} +{"doc_count":730,"split_key":396982,"timestamp":"2026-07-20T13:00:00.000Z"} +{"doc_count":537,"split_key":53667,"timestamp":"2026-07-20T13:00:00.000Z"} +{"doc_count":18144,"split_key":206264,"timestamp":"2026-07-20T14:00:00.000Z"} +{"doc_count":16178,"split_key":209334,"timestamp":"2026-07-20T14:00:00.000Z"} +{"doc_count":1777,"split_key":201401,"timestamp":"2026-07-20T14:00:00.000Z"} +{"doc_count":740,"split_key":63737,"timestamp":"2026-07-20T14:00:00.000Z"} +{"doc_count":525,"split_key":24323,"timestamp":"2026-07-20T14:00:00.000Z"} +{"doc_count":16231,"split_key":209334,"timestamp":"2026-07-20T15:00:00.000Z"} +{"doc_count":14323,"split_key":206264,"timestamp":"2026-07-20T15:00:00.000Z"} +{"doc_count":1352,"split_key":201401,"timestamp":"2026-07-20T15:00:00.000Z"} +{"doc_count":566,"split_key":215762,"timestamp":"2026-07-20T15:00:00.000Z"} +{"doc_count":557,"split_key":63737,"timestamp":"2026-07-20T15:00:00.000Z"} +{"doc_count":15005,"split_key":206264,"timestamp":"2026-07-20T16:00:00.000Z"} +{"doc_count":3401,"split_key":199723,"timestamp":"2026-07-20T16:00:00.000Z"} +{"doc_count":658,"split_key":205089,"timestamp":"2026-07-20T16:00:00.000Z"} +{"doc_count":511,"split_key":138915,"timestamp":"2026-07-20T16:00:00.000Z"} +{"doc_count":505,"split_key":24323,"timestamp":"2026-07-20T16:00:00.000Z"} +{"doc_count":12688,"split_key":206264,"timestamp":"2026-07-20T17:00:00.000Z"} +{"doc_count":539,"split_key":396982,"timestamp":"2026-07-20T17:00:00.000Z"} +{"doc_count":519,"split_key":24323,"timestamp":"2026-07-20T17:00:00.000Z"} +{"doc_count":427,"split_key":213412,"timestamp":"2026-07-20T17:00:00.000Z"} +{"doc_count":418,"split_key":209854,"timestamp":"2026-07-20T17:00:00.000Z"} +{"doc_count":13219,"split_key":206264,"timestamp":"2026-07-20T18:00:00.000Z"} +{"doc_count":872,"split_key":396982,"timestamp":"2026-07-20T18:00:00.000Z"} +{"doc_count":507,"split_key":16276,"timestamp":"2026-07-20T18:00:00.000Z"} +{"doc_count":507,"split_key":16509,"timestamp":"2026-07-20T18:00:00.000Z"} +{"doc_count":501,"split_key":24323,"timestamp":"2026-07-20T18:00:00.000Z"} +{"doc_count":546,"split_key":16509,"timestamp":"2026-07-20T19:00:00.000Z"} +{"doc_count":538,"split_key":396982,"timestamp":"2026-07-20T19:00:00.000Z"} +{"doc_count":505,"split_key":24323,"timestamp":"2026-07-20T19:00:00.000Z"} +{"doc_count":422,"split_key":138915,"timestamp":"2026-07-20T19:00:00.000Z"} +{"doc_count":409,"split_key":63737,"timestamp":"2026-07-20T19:00:00.000Z"} +{"doc_count":538,"split_key":24323,"timestamp":"2026-07-20T20:00:00.000Z"} +{"doc_count":536,"split_key":16509,"timestamp":"2026-07-20T20:00:00.000Z"} +{"doc_count":527,"split_key":396982,"timestamp":"2026-07-20T20:00:00.000Z"} +{"doc_count":508,"split_key":135377,"timestamp":"2026-07-20T20:00:00.000Z"} +{"doc_count":429,"split_key":138915,"timestamp":"2026-07-20T20:00:00.000Z"} +{"doc_count":900,"split_key":396982,"timestamp":"2026-07-20T21:00:00.000Z"} +{"doc_count":593,"split_key":63737,"timestamp":"2026-07-20T21:00:00.000Z"} +{"doc_count":527,"split_key":24323,"timestamp":"2026-07-20T21:00:00.000Z"} +{"doc_count":502,"split_key":209854,"timestamp":"2026-07-20T21:00:00.000Z"} +{"doc_count":426,"split_key":138915,"timestamp":"2026-07-20T21:00:00.000Z"} +{"doc_count":931,"split_key":37963,"timestamp":"2026-07-20T22:00:00.000Z"} +{"doc_count":690,"split_key":213488,"timestamp":"2026-07-20T22:00:00.000Z"} +{"doc_count":521,"split_key":24323,"timestamp":"2026-07-20T22:00:00.000Z"} +{"doc_count":487,"split_key":396982,"timestamp":"2026-07-20T22:00:00.000Z"} +{"doc_count":398,"split_key":206264,"timestamp":"2026-07-20T22:00:00.000Z"} +{"doc_count":9507,"split_key":209334,"timestamp":"2026-07-20T23:00:00.000Z"} +{"doc_count":1033,"split_key":37963,"timestamp":"2026-07-20T23:00:00.000Z"} +{"doc_count":486,"split_key":138915,"timestamp":"2026-07-20T23:00:00.000Z"} +{"doc_count":477,"split_key":396982,"timestamp":"2026-07-20T23:00:00.000Z"} +{"doc_count":475,"split_key":45102,"timestamp":"2026-07-20T23:00:00.000Z"} +{"doc_count":26227,"split_key":209334,"timestamp":"2026-07-21T00:00:00.000Z"} +{"doc_count":11004,"split_key":14987,"timestamp":"2026-07-21T00:00:00.000Z"} +{"doc_count":2193,"split_key":45102,"timestamp":"2026-07-21T00:00:00.000Z"} +{"doc_count":1256,"split_key":37963,"timestamp":"2026-07-21T00:00:00.000Z"} +{"doc_count":753,"split_key":206264,"timestamp":"2026-07-21T00:00:00.000Z"} +{"doc_count":30306,"split_key":209334,"timestamp":"2026-07-21T01:00:00.000Z"} +{"doc_count":2141,"split_key":45102,"timestamp":"2026-07-21T01:00:00.000Z"} +{"doc_count":2012,"split_key":206264,"timestamp":"2026-07-21T01:00:00.000Z"} +{"doc_count":894,"split_key":51396,"timestamp":"2026-07-21T01:00:00.000Z"} +{"doc_count":750,"split_key":16509,"timestamp":"2026-07-21T01:00:00.000Z"} +{"doc_count":24533,"split_key":209334,"timestamp":"2026-07-21T02:00:00.000Z"} +{"doc_count":8658,"split_key":48090,"timestamp":"2026-07-21T02:00:00.000Z"} +{"doc_count":976,"split_key":396982,"timestamp":"2026-07-21T02:00:00.000Z"} +{"doc_count":782,"split_key":3215,"timestamp":"2026-07-21T02:00:00.000Z"} +{"doc_count":695,"split_key":211590,"timestamp":"2026-07-21T02:00:00.000Z"} +{"doc_count":14936,"split_key":48090,"timestamp":"2026-07-21T03:00:00.000Z"} +{"doc_count":707,"split_key":398101,"timestamp":"2026-07-21T03:00:00.000Z"} +{"doc_count":543,"split_key":4134,"timestamp":"2026-07-21T03:00:00.000Z"} +{"doc_count":538,"split_key":396982,"timestamp":"2026-07-21T03:00:00.000Z"} +{"doc_count":487,"split_key":138915,"timestamp":"2026-07-21T03:00:00.000Z"} +{"doc_count":2887,"split_key":48090,"timestamp":"2026-07-21T04:00:00.000Z"} +{"doc_count":1360,"split_key":25369,"timestamp":"2026-07-21T04:00:00.000Z"} +{"doc_count":650,"split_key":396982,"timestamp":"2026-07-21T04:00:00.000Z"} +{"doc_count":643,"split_key":205089,"timestamp":"2026-07-21T04:00:00.000Z"} +{"doc_count":623,"split_key":4134,"timestamp":"2026-07-21T04:00:00.000Z"} +{"doc_count":1086,"split_key":25369,"timestamp":"2026-07-21T05:00:00.000Z"} +{"doc_count":995,"split_key":396982,"timestamp":"2026-07-21T05:00:00.000Z"} +{"doc_count":980,"split_key":11427,"timestamp":"2026-07-21T05:00:00.000Z"} +{"doc_count":649,"split_key":63737,"timestamp":"2026-07-21T05:00:00.000Z"} +{"doc_count":433,"split_key":213412,"timestamp":"2026-07-21T05:00:00.000Z"} +{"doc_count":38222,"split_key":211590,"timestamp":"2026-07-21T06:00:00.000Z"} +{"doc_count":3829,"split_key":141995,"timestamp":"2026-07-21T06:00:00.000Z"} +{"doc_count":645,"split_key":396982,"timestamp":"2026-07-21T06:00:00.000Z"} +{"doc_count":499,"split_key":37963,"timestamp":"2026-07-21T06:00:00.000Z"} +{"doc_count":401,"split_key":213412,"timestamp":"2026-07-21T06:00:00.000Z"} +{"doc_count":11474,"split_key":209334,"timestamp":"2026-07-21T07:00:00.000Z"} +{"doc_count":876,"split_key":211590,"timestamp":"2026-07-21T07:00:00.000Z"} +{"doc_count":698,"split_key":63737,"timestamp":"2026-07-21T07:00:00.000Z"} +{"doc_count":496,"split_key":14061,"timestamp":"2026-07-21T07:00:00.000Z"} +{"doc_count":465,"split_key":14618,"timestamp":"2026-07-21T07:00:00.000Z"} +{"doc_count":14308,"split_key":209334,"timestamp":"2026-07-21T08:00:00.000Z"} +{"doc_count":838,"split_key":201401,"timestamp":"2026-07-21T08:00:00.000Z"} +{"doc_count":419,"split_key":16509,"timestamp":"2026-07-21T08:00:00.000Z"} +{"doc_count":371,"split_key":213412,"timestamp":"2026-07-21T08:00:00.000Z"} +{"doc_count":344,"split_key":396982,"timestamp":"2026-07-21T08:00:00.000Z"} +{"doc_count":15703,"split_key":209334,"timestamp":"2026-07-21T09:00:00.000Z"} +{"doc_count":965,"split_key":201401,"timestamp":"2026-07-21T09:00:00.000Z"} +{"doc_count":809,"split_key":396982,"timestamp":"2026-07-21T09:00:00.000Z"} +{"doc_count":601,"split_key":63737,"timestamp":"2026-07-21T09:00:00.000Z"} +{"doc_count":513,"split_key":14061,"timestamp":"2026-07-21T09:00:00.000Z"} +{"doc_count":20557,"split_key":209334,"timestamp":"2026-07-21T10:00:00.000Z"} +{"doc_count":1091,"split_key":201401,"timestamp":"2026-07-21T10:00:00.000Z"} +{"doc_count":660,"split_key":37963,"timestamp":"2026-07-21T10:00:00.000Z"} +{"doc_count":617,"split_key":14061,"timestamp":"2026-07-21T10:00:00.000Z"} +{"doc_count":426,"split_key":56041,"timestamp":"2026-07-21T10:00:00.000Z"} +{"doc_count":19940,"split_key":209334,"timestamp":"2026-07-21T11:00:00.000Z"} +{"doc_count":1379,"split_key":14061,"timestamp":"2026-07-21T11:00:00.000Z"} +{"doc_count":1293,"split_key":201401,"timestamp":"2026-07-21T11:00:00.000Z"} +{"doc_count":673,"split_key":63737,"timestamp":"2026-07-21T11:00:00.000Z"} +{"doc_count":472,"split_key":37963,"timestamp":"2026-07-21T11:00:00.000Z"} +{"doc_count":17316,"split_key":209334,"timestamp":"2026-07-21T12:00:00.000Z"} +{"doc_count":3134,"split_key":43171,"timestamp":"2026-07-21T12:00:00.000Z"} +{"doc_count":1360,"split_key":201401,"timestamp":"2026-07-21T12:00:00.000Z"} +{"doc_count":1245,"split_key":134294,"timestamp":"2026-07-21T12:00:00.000Z"} +{"doc_count":1178,"split_key":14061,"timestamp":"2026-07-21T12:00:00.000Z"} +{"doc_count":16691,"split_key":209334,"timestamp":"2026-07-21T13:00:00.000Z"} +{"doc_count":676,"split_key":63737,"timestamp":"2026-07-21T13:00:00.000Z"} +{"doc_count":611,"split_key":396982,"timestamp":"2026-07-21T13:00:00.000Z"} +{"doc_count":494,"split_key":201401,"timestamp":"2026-07-21T13:00:00.000Z"} +{"doc_count":478,"split_key":37963,"timestamp":"2026-07-21T13:00:00.000Z"} +{"doc_count":24638,"split_key":209334,"timestamp":"2026-07-21T14:00:00.000Z"} +{"doc_count":923,"split_key":206264,"timestamp":"2026-07-21T14:00:00.000Z"} +{"doc_count":827,"split_key":201401,"timestamp":"2026-07-21T14:00:00.000Z"} +{"doc_count":453,"split_key":14061,"timestamp":"2026-07-21T14:00:00.000Z"} +{"doc_count":437,"split_key":138915,"timestamp":"2026-07-21T14:00:00.000Z"} +{"doc_count":9719,"split_key":209334,"timestamp":"2026-07-21T15:00:00.000Z"} +{"doc_count":1117,"split_key":201401,"timestamp":"2026-07-21T15:00:00.000Z"} +{"doc_count":671,"split_key":63737,"timestamp":"2026-07-21T15:00:00.000Z"} +{"doc_count":484,"split_key":206264,"timestamp":"2026-07-21T15:00:00.000Z"} +{"doc_count":451,"split_key":16509,"timestamp":"2026-07-21T15:00:00.000Z"} +{"doc_count":2095,"split_key":4134,"timestamp":"2026-07-21T16:00:00.000Z"} +{"doc_count":1543,"split_key":57724,"timestamp":"2026-07-21T16:00:00.000Z"} +{"doc_count":1281,"split_key":206264,"timestamp":"2026-07-21T16:00:00.000Z"} +{"doc_count":1153,"split_key":209334,"timestamp":"2026-07-21T16:00:00.000Z"} +{"doc_count":593,"split_key":138915,"timestamp":"2026-07-21T16:00:00.000Z"} +{"doc_count":14007,"split_key":48090,"timestamp":"2026-07-21T17:00:00.000Z"} +{"doc_count":3681,"split_key":57724,"timestamp":"2026-07-21T17:00:00.000Z"} +{"doc_count":1351,"split_key":51396,"timestamp":"2026-07-21T17:00:00.000Z"} +{"doc_count":970,"split_key":4134,"timestamp":"2026-07-21T17:00:00.000Z"} +{"doc_count":619,"split_key":198610,"timestamp":"2026-07-21T17:00:00.000Z"} +{"doc_count":2334,"split_key":37963,"timestamp":"2026-07-21T18:00:00.000Z"} +{"doc_count":1610,"split_key":45102,"timestamp":"2026-07-21T18:00:00.000Z"} +{"doc_count":560,"split_key":4134,"timestamp":"2026-07-21T18:00:00.000Z"} +{"doc_count":468,"split_key":16509,"timestamp":"2026-07-21T18:00:00.000Z"} +{"doc_count":430,"split_key":396982,"timestamp":"2026-07-21T18:00:00.000Z"} +{"doc_count":2722,"split_key":37963,"timestamp":"2026-07-21T19:00:00.000Z"} +{"doc_count":1605,"split_key":45102,"timestamp":"2026-07-21T19:00:00.000Z"} +{"doc_count":745,"split_key":63737,"timestamp":"2026-07-21T19:00:00.000Z"} +{"doc_count":461,"split_key":396982,"timestamp":"2026-07-21T19:00:00.000Z"} +{"doc_count":407,"split_key":14061,"timestamp":"2026-07-21T19:00:00.000Z"} +{"doc_count":1233,"split_key":37963,"timestamp":"2026-07-21T20:00:00.000Z"} +{"doc_count":1168,"split_key":45102,"timestamp":"2026-07-21T20:00:00.000Z"} +{"doc_count":497,"split_key":396982,"timestamp":"2026-07-21T20:00:00.000Z"} +{"doc_count":484,"split_key":206264,"timestamp":"2026-07-21T20:00:00.000Z"} +{"doc_count":427,"split_key":142403,"timestamp":"2026-07-21T20:00:00.000Z"} +{"doc_count":981,"split_key":396982,"timestamp":"2026-07-21T21:00:00.000Z"} +{"doc_count":604,"split_key":37963,"timestamp":"2026-07-21T21:00:00.000Z"} +{"doc_count":484,"split_key":206264,"timestamp":"2026-07-21T21:00:00.000Z"} +{"doc_count":459,"split_key":63737,"timestamp":"2026-07-21T21:00:00.000Z"} +{"doc_count":408,"split_key":213412,"timestamp":"2026-07-21T21:00:00.000Z"} +{"doc_count":674,"split_key":63737,"timestamp":"2026-07-21T22:00:00.000Z"} +{"doc_count":599,"split_key":138915,"timestamp":"2026-07-21T22:00:00.000Z"} +{"doc_count":596,"split_key":37963,"timestamp":"2026-07-21T22:00:00.000Z"} +{"doc_count":500,"split_key":16509,"timestamp":"2026-07-21T22:00:00.000Z"} +{"doc_count":480,"split_key":396982,"timestamp":"2026-07-21T22:00:00.000Z"} +{"doc_count":6956,"split_key":209334,"timestamp":"2026-07-21T23:00:00.000Z"} +{"doc_count":554,"split_key":51396,"timestamp":"2026-07-21T23:00:00.000Z"} +{"doc_count":539,"split_key":37963,"timestamp":"2026-07-21T23:00:00.000Z"} +{"doc_count":522,"split_key":205089,"timestamp":"2026-07-21T23:00:00.000Z"} +{"doc_count":466,"split_key":138915,"timestamp":"2026-07-21T23:00:00.000Z"} +{"doc_count":26066,"split_key":209334,"timestamp":"2026-07-22T00:00:00.000Z"} +{"doc_count":11031,"split_key":14987,"timestamp":"2026-07-22T00:00:00.000Z"} +{"doc_count":709,"split_key":396982,"timestamp":"2026-07-22T00:00:00.000Z"} +{"doc_count":699,"split_key":201401,"timestamp":"2026-07-22T00:00:00.000Z"} +{"doc_count":666,"split_key":63737,"timestamp":"2026-07-22T00:00:00.000Z"} +{"doc_count":32335,"split_key":209334,"timestamp":"2026-07-22T01:00:00.000Z"} +{"doc_count":9873,"split_key":206264,"timestamp":"2026-07-22T01:00:00.000Z"} +{"doc_count":953,"split_key":201401,"timestamp":"2026-07-22T01:00:00.000Z"} +{"doc_count":896,"split_key":16509,"timestamp":"2026-07-22T01:00:00.000Z"} +{"doc_count":715,"split_key":396982,"timestamp":"2026-07-22T01:00:00.000Z"} +{"doc_count":23947,"split_key":209334,"timestamp":"2026-07-22T02:00:00.000Z"} +{"doc_count":6005,"split_key":206264,"timestamp":"2026-07-22T02:00:00.000Z"} +{"doc_count":1106,"split_key":201401,"timestamp":"2026-07-22T02:00:00.000Z"} +{"doc_count":667,"split_key":63737,"timestamp":"2026-07-22T02:00:00.000Z"} +{"doc_count":588,"split_key":16509,"timestamp":"2026-07-22T02:00:00.000Z"} +{"doc_count":378802,"split_key":39891,"timestamp":"2026-07-22T03:00:00.000Z"} +{"doc_count":155731,"split_key":35819,"timestamp":"2026-07-22T03:00:00.000Z"} +{"doc_count":31441,"split_key":5384,"timestamp":"2026-07-22T03:00:00.000Z"} +{"doc_count":26950,"split_key":1221,"timestamp":"2026-07-22T03:00:00.000Z"} +{"doc_count":26557,"split_key":42961,"timestamp":"2026-07-22T03:00:00.000Z"} +{"doc_count":3109,"split_key":211590,"timestamp":"2026-07-22T04:00:00.000Z"} +{"doc_count":1406,"split_key":25369,"timestamp":"2026-07-22T04:00:00.000Z"} +{"doc_count":1340,"split_key":37963,"timestamp":"2026-07-22T04:00:00.000Z"} +{"doc_count":665,"split_key":63737,"timestamp":"2026-07-22T04:00:00.000Z"} +{"doc_count":615,"split_key":396982,"timestamp":"2026-07-22T04:00:00.000Z"} +{"doc_count":1703,"split_key":37963,"timestamp":"2026-07-22T05:00:00.000Z"} +{"doc_count":1025,"split_key":396982,"timestamp":"2026-07-22T05:00:00.000Z"} +{"doc_count":901,"split_key":25369,"timestamp":"2026-07-22T05:00:00.000Z"} +{"doc_count":740,"split_key":63737,"timestamp":"2026-07-22T05:00:00.000Z"} +{"doc_count":714,"split_key":16509,"timestamp":"2026-07-22T05:00:00.000Z"} +{"doc_count":1146,"split_key":37963,"timestamp":"2026-07-22T06:00:00.000Z"} +{"doc_count":810,"split_key":16509,"timestamp":"2026-07-22T06:00:00.000Z"} +{"doc_count":503,"split_key":396982,"timestamp":"2026-07-22T06:00:00.000Z"} +{"doc_count":396,"split_key":213412,"timestamp":"2026-07-22T06:00:00.000Z"} +{"doc_count":370,"split_key":138915,"timestamp":"2026-07-22T06:00:00.000Z"} +{"doc_count":10656,"split_key":209334,"timestamp":"2026-07-22T07:00:00.000Z"} +{"doc_count":2543,"split_key":54600,"timestamp":"2026-07-22T07:00:00.000Z"} +{"doc_count":1123,"split_key":140224,"timestamp":"2026-07-22T07:00:00.000Z"} +{"doc_count":1115,"split_key":37963,"timestamp":"2026-07-22T07:00:00.000Z"} +{"doc_count":816,"split_key":16509,"timestamp":"2026-07-22T07:00:00.000Z"} +{"doc_count":13831,"split_key":209334,"timestamp":"2026-07-22T08:00:00.000Z"} +{"doc_count":4134,"split_key":54600,"timestamp":"2026-07-22T08:00:00.000Z"} +{"doc_count":2632,"split_key":140224,"timestamp":"2026-07-22T08:00:00.000Z"} +{"doc_count":1023,"split_key":16509,"timestamp":"2026-07-22T08:00:00.000Z"} +{"doc_count":673,"split_key":63737,"timestamp":"2026-07-22T08:00:00.000Z"} +{"doc_count":14707,"split_key":209334,"timestamp":"2026-07-22T09:00:00.000Z"} +{"doc_count":8794,"split_key":140224,"timestamp":"2026-07-22T09:00:00.000Z"} +{"doc_count":1991,"split_key":45102,"timestamp":"2026-07-22T09:00:00.000Z"} +{"doc_count":1491,"split_key":132839,"timestamp":"2026-07-22T09:00:00.000Z"} +{"doc_count":1250,"split_key":54600,"timestamp":"2026-07-22T09:00:00.000Z"} +{"doc_count":22894,"split_key":209334,"timestamp":"2026-07-22T10:00:00.000Z"} +{"doc_count":1962,"split_key":45102,"timestamp":"2026-07-22T10:00:00.000Z"} +{"doc_count":800,"split_key":201401,"timestamp":"2026-07-22T10:00:00.000Z"} +{"doc_count":717,"split_key":134033,"timestamp":"2026-07-22T10:00:00.000Z"} +{"doc_count":683,"split_key":16509,"timestamp":"2026-07-22T10:00:00.000Z"} +{"doc_count":19150,"split_key":209334,"timestamp":"2026-07-22T11:00:00.000Z"} +{"doc_count":1275,"split_key":16509,"timestamp":"2026-07-22T11:00:00.000Z"} +{"doc_count":765,"split_key":201401,"timestamp":"2026-07-22T11:00:00.000Z"} +{"doc_count":706,"split_key":135905,"timestamp":"2026-07-22T11:00:00.000Z"} +{"doc_count":693,"split_key":45102,"timestamp":"2026-07-22T11:00:00.000Z"} +{"doc_count":16533,"split_key":209334,"timestamp":"2026-07-22T12:00:00.000Z"} +{"doc_count":1809,"split_key":206264,"timestamp":"2026-07-22T12:00:00.000Z"} +{"doc_count":1238,"split_key":201401,"timestamp":"2026-07-22T12:00:00.000Z"} +{"doc_count":643,"split_key":16509,"timestamp":"2026-07-22T12:00:00.000Z"} +{"doc_count":424,"split_key":213412,"timestamp":"2026-07-22T12:00:00.000Z"} +{"doc_count":17619,"split_key":209334,"timestamp":"2026-07-22T13:00:00.000Z"} +{"doc_count":1640,"split_key":206264,"timestamp":"2026-07-22T13:00:00.000Z"} +{"doc_count":676,"split_key":16509,"timestamp":"2026-07-22T13:00:00.000Z"} +{"doc_count":674,"split_key":63737,"timestamp":"2026-07-22T13:00:00.000Z"} +{"doc_count":521,"split_key":201401,"timestamp":"2026-07-22T13:00:00.000Z"} +{"doc_count":24074,"split_key":209334,"timestamp":"2026-07-22T14:00:00.000Z"} +{"doc_count":1806,"split_key":63949,"timestamp":"2026-07-22T14:00:00.000Z"} +{"doc_count":1096,"split_key":201401,"timestamp":"2026-07-22T14:00:00.000Z"} +{"doc_count":665,"split_key":63737,"timestamp":"2026-07-22T14:00:00.000Z"} +{"doc_count":655,"split_key":16509,"timestamp":"2026-07-22T14:00:00.000Z"} +{"doc_count":12920,"split_key":209334,"timestamp":"2026-07-22T15:00:00.000Z"} +{"doc_count":1427,"split_key":201401,"timestamp":"2026-07-22T15:00:00.000Z"} +{"doc_count":1214,"split_key":206264,"timestamp":"2026-07-22T15:00:00.000Z"} +{"doc_count":664,"split_key":51396,"timestamp":"2026-07-22T15:00:00.000Z"} +{"doc_count":482,"split_key":16509,"timestamp":"2026-07-22T15:00:00.000Z"} +{"doc_count":3240,"split_key":12389,"timestamp":"2026-07-22T16:00:00.000Z"} +{"doc_count":1974,"split_key":209334,"timestamp":"2026-07-22T16:00:00.000Z"} +{"doc_count":669,"split_key":63737,"timestamp":"2026-07-22T16:00:00.000Z"} +{"doc_count":642,"split_key":16509,"timestamp":"2026-07-22T16:00:00.000Z"} +{"doc_count":381,"split_key":37963,"timestamp":"2026-07-22T16:00:00.000Z"} +{"doc_count":986,"split_key":16509,"timestamp":"2026-07-22T17:00:00.000Z"} +{"doc_count":741,"split_key":63737,"timestamp":"2026-07-22T17:00:00.000Z"} +{"doc_count":622,"split_key":206264,"timestamp":"2026-07-22T17:00:00.000Z"} +{"doc_count":532,"split_key":37963,"timestamp":"2026-07-22T17:00:00.000Z"} +{"doc_count":437,"split_key":213412,"timestamp":"2026-07-22T17:00:00.000Z"} +{"doc_count":1090,"split_key":16509,"timestamp":"2026-07-22T18:00:00.000Z"} +{"doc_count":590,"split_key":201814,"timestamp":"2026-07-22T18:00:00.000Z"} +{"doc_count":477,"split_key":37963,"timestamp":"2026-07-22T18:00:00.000Z"} +{"doc_count":467,"split_key":213412,"timestamp":"2026-07-22T18:00:00.000Z"} +{"doc_count":466,"split_key":209334,"timestamp":"2026-07-22T18:00:00.000Z"} +{"doc_count":6816,"split_key":206264,"timestamp":"2026-07-22T19:00:00.000Z"} +{"doc_count":843,"split_key":37963,"timestamp":"2026-07-22T19:00:00.000Z"} +{"doc_count":696,"split_key":63737,"timestamp":"2026-07-22T19:00:00.000Z"} +{"doc_count":435,"split_key":213412,"timestamp":"2026-07-22T19:00:00.000Z"} +{"doc_count":393,"split_key":209334,"timestamp":"2026-07-22T19:00:00.000Z"} +{"doc_count":980,"split_key":16509,"timestamp":"2026-07-22T20:00:00.000Z"} +{"doc_count":908,"split_key":37963,"timestamp":"2026-07-22T20:00:00.000Z"} +{"doc_count":839,"split_key":51396,"timestamp":"2026-07-22T20:00:00.000Z"} +{"doc_count":750,"split_key":63737,"timestamp":"2026-07-22T20:00:00.000Z"} +{"doc_count":675,"split_key":45102,"timestamp":"2026-07-22T20:00:00.000Z"} +{"doc_count":966,"split_key":45102,"timestamp":"2026-07-22T21:00:00.000Z"} +{"doc_count":729,"split_key":37963,"timestamp":"2026-07-22T21:00:00.000Z"} +{"doc_count":717,"split_key":396982,"timestamp":"2026-07-22T21:00:00.000Z"} +{"doc_count":620,"split_key":16509,"timestamp":"2026-07-22T21:00:00.000Z"} +{"doc_count":410,"split_key":213412,"timestamp":"2026-07-22T21:00:00.000Z"} +{"doc_count":1759,"split_key":45102,"timestamp":"2026-07-22T22:00:00.000Z"} +{"doc_count":1319,"split_key":57724,"timestamp":"2026-07-22T22:00:00.000Z"} +{"doc_count":732,"split_key":63737,"timestamp":"2026-07-22T22:00:00.000Z"} +{"doc_count":647,"split_key":396982,"timestamp":"2026-07-22T22:00:00.000Z"} +{"doc_count":615,"split_key":37963,"timestamp":"2026-07-22T22:00:00.000Z"} +{"doc_count":4300,"split_key":209334,"timestamp":"2026-07-22T23:00:00.000Z"} +{"doc_count":2541,"split_key":45102,"timestamp":"2026-07-22T23:00:00.000Z"} +{"doc_count":2368,"split_key":57724,"timestamp":"2026-07-22T23:00:00.000Z"} +{"doc_count":884,"split_key":37963,"timestamp":"2026-07-22T23:00:00.000Z"} +{"doc_count":565,"split_key":396982,"timestamp":"2026-07-22T23:00:00.000Z"} +{"doc_count":27636,"split_key":209334,"timestamp":"2026-07-23T00:00:00.000Z"} +{"doc_count":24333,"split_key":14061,"timestamp":"2026-07-23T00:00:00.000Z"} +{"doc_count":12688,"split_key":14987,"timestamp":"2026-07-23T00:00:00.000Z"} +{"doc_count":2950,"split_key":57724,"timestamp":"2026-07-23T00:00:00.000Z"} +{"doc_count":2570,"split_key":45102,"timestamp":"2026-07-23T00:00:00.000Z"} +{"doc_count":32217,"split_key":209334,"timestamp":"2026-07-23T01:00:00.000Z"} +{"doc_count":24877,"split_key":14061,"timestamp":"2026-07-23T01:00:00.000Z"} +{"doc_count":2985,"split_key":57724,"timestamp":"2026-07-23T01:00:00.000Z"} +{"doc_count":1340,"split_key":396982,"timestamp":"2026-07-23T01:00:00.000Z"} +{"doc_count":1317,"split_key":45102,"timestamp":"2026-07-23T01:00:00.000Z"} +{"doc_count":25568,"split_key":209334,"timestamp":"2026-07-23T02:00:00.000Z"} +{"doc_count":25187,"split_key":14061,"timestamp":"2026-07-23T02:00:00.000Z"} +{"doc_count":2986,"split_key":57724,"timestamp":"2026-07-23T02:00:00.000Z"} +{"doc_count":1046,"split_key":45102,"timestamp":"2026-07-23T02:00:00.000Z"} +{"doc_count":992,"split_key":37963,"timestamp":"2026-07-23T02:00:00.000Z"} +{"doc_count":14954,"split_key":14061,"timestamp":"2026-07-23T03:00:00.000Z"} +{"doc_count":12148,"split_key":214036,"timestamp":"2026-07-23T03:00:00.000Z"} +{"doc_count":3002,"split_key":57724,"timestamp":"2026-07-23T03:00:00.000Z"} +{"doc_count":1516,"split_key":63737,"timestamp":"2026-07-23T03:00:00.000Z"} +{"doc_count":972,"split_key":37963,"timestamp":"2026-07-23T03:00:00.000Z"} +{"doc_count":8098,"split_key":214036,"timestamp":"2026-07-23T04:00:00.000Z"} +{"doc_count":3012,"split_key":57724,"timestamp":"2026-07-23T04:00:00.000Z"} +{"doc_count":1631,"split_key":63737,"timestamp":"2026-07-23T04:00:00.000Z"} +{"doc_count":1477,"split_key":25369,"timestamp":"2026-07-23T04:00:00.000Z"} +{"doc_count":826,"split_key":37963,"timestamp":"2026-07-23T04:00:00.000Z"} +{"doc_count":41671,"split_key":214036,"timestamp":"2026-07-23T05:00:00.000Z"} +{"doc_count":2984,"split_key":57724,"timestamp":"2026-07-23T05:00:00.000Z"} +{"doc_count":1082,"split_key":396982,"timestamp":"2026-07-23T05:00:00.000Z"} +{"doc_count":857,"split_key":37963,"timestamp":"2026-07-23T05:00:00.000Z"} +{"doc_count":815,"split_key":63737,"timestamp":"2026-07-23T05:00:00.000Z"} +{"doc_count":45840,"split_key":214036,"timestamp":"2026-07-23T06:00:00.000Z"} +{"doc_count":3023,"split_key":57724,"timestamp":"2026-07-23T06:00:00.000Z"} +{"doc_count":1103,"split_key":63737,"timestamp":"2026-07-23T06:00:00.000Z"} +{"doc_count":647,"split_key":396982,"timestamp":"2026-07-23T06:00:00.000Z"} +{"doc_count":587,"split_key":215762,"timestamp":"2026-07-23T06:00:00.000Z"} +{"doc_count":27416,"split_key":214036,"timestamp":"2026-07-23T07:00:00.000Z"} +{"doc_count":7553,"split_key":209334,"timestamp":"2026-07-23T07:00:00.000Z"} +{"doc_count":2982,"split_key":57724,"timestamp":"2026-07-23T07:00:00.000Z"} +{"doc_count":983,"split_key":398101,"timestamp":"2026-07-23T07:00:00.000Z"} +{"doc_count":754,"split_key":63737,"timestamp":"2026-07-23T07:00:00.000Z"} +{"doc_count":43507,"split_key":214036,"timestamp":"2026-07-23T08:00:00.000Z"} +{"doc_count":16632,"split_key":209334,"timestamp":"2026-07-23T08:00:00.000Z"} +{"doc_count":2975,"split_key":57724,"timestamp":"2026-07-23T08:00:00.000Z"} +{"doc_count":2251,"split_key":45102,"timestamp":"2026-07-23T08:00:00.000Z"} +{"doc_count":2030,"split_key":211590,"timestamp":"2026-07-23T08:00:00.000Z"} +{"doc_count":39525,"split_key":214036,"timestamp":"2026-07-23T09:00:00.000Z"} +{"doc_count":15675,"split_key":209334,"timestamp":"2026-07-23T09:00:00.000Z"} +{"doc_count":4253,"split_key":140224,"timestamp":"2026-07-23T09:00:00.000Z"} +{"doc_count":2980,"split_key":57724,"timestamp":"2026-07-23T09:00:00.000Z"} +{"doc_count":2226,"split_key":45102,"timestamp":"2026-07-23T09:00:00.000Z"} +{"doc_count":42681,"split_key":214036,"timestamp":"2026-07-23T10:00:00.000Z"} +{"doc_count":22781,"split_key":209334,"timestamp":"2026-07-23T10:00:00.000Z"} +{"doc_count":2946,"split_key":57724,"timestamp":"2026-07-23T10:00:00.000Z"} +{"doc_count":1591,"split_key":399077,"timestamp":"2026-07-23T10:00:00.000Z"} +{"doc_count":1296,"split_key":201401,"timestamp":"2026-07-23T10:00:00.000Z"} +{"doc_count":39577,"split_key":214036,"timestamp":"2026-07-23T11:00:00.000Z"} +{"doc_count":11158,"split_key":209334,"timestamp":"2026-07-23T11:00:00.000Z"} +{"doc_count":1799,"split_key":57724,"timestamp":"2026-07-23T11:00:00.000Z"} +{"doc_count":1303,"split_key":399077,"timestamp":"2026-07-23T11:00:00.000Z"} +{"doc_count":1205,"split_key":206264,"timestamp":"2026-07-23T11:00:00.000Z"} +{"doc_count":35933,"split_key":214036,"timestamp":"2026-07-23T12:00:00.000Z"} +{"doc_count":27205,"split_key":209334,"timestamp":"2026-07-23T12:00:00.000Z"} +{"doc_count":1835,"split_key":200602,"timestamp":"2026-07-23T12:00:00.000Z"} +{"doc_count":1238,"split_key":37963,"timestamp":"2026-07-23T12:00:00.000Z"} +{"doc_count":1131,"split_key":201401,"timestamp":"2026-07-23T12:00:00.000Z"} +{"doc_count":15152,"split_key":206264,"timestamp":"2026-07-23T13:00:00.000Z"} +{"doc_count":12167,"split_key":209334,"timestamp":"2026-07-23T13:00:00.000Z"} +{"doc_count":3071,"split_key":200602,"timestamp":"2026-07-23T13:00:00.000Z"} +{"doc_count":1070,"split_key":37963,"timestamp":"2026-07-23T13:00:00.000Z"} +{"doc_count":885,"split_key":214036,"timestamp":"2026-07-23T13:00:00.000Z"} +{"doc_count":35595,"split_key":209334,"timestamp":"2026-07-23T14:00:00.000Z"} +{"doc_count":25145,"split_key":214036,"timestamp":"2026-07-23T14:00:00.000Z"} +{"doc_count":16625,"split_key":206264,"timestamp":"2026-07-23T14:00:00.000Z"} +{"doc_count":2958,"split_key":200602,"timestamp":"2026-07-23T14:00:00.000Z"} +{"doc_count":1179,"split_key":52009,"timestamp":"2026-07-23T14:00:00.000Z"} +{"doc_count":44275,"split_key":214036,"timestamp":"2026-07-23T15:00:00.000Z"} +{"doc_count":27828,"split_key":206264,"timestamp":"2026-07-23T15:00:00.000Z"} +{"doc_count":13510,"split_key":209334,"timestamp":"2026-07-23T15:00:00.000Z"} +{"doc_count":13120,"split_key":49666,"timestamp":"2026-07-23T15:00:00.000Z"} +{"doc_count":5119,"split_key":396982,"timestamp":"2026-07-23T15:00:00.000Z"} +{"doc_count":28081,"split_key":206264,"timestamp":"2026-07-23T16:00:00.000Z"} +{"doc_count":2745,"split_key":209334,"timestamp":"2026-07-23T16:00:00.000Z"} +{"doc_count":2172,"split_key":214036,"timestamp":"2026-07-23T16:00:00.000Z"} +{"doc_count":2167,"split_key":200602,"timestamp":"2026-07-23T16:00:00.000Z"} +{"doc_count":1286,"split_key":197540,"timestamp":"2026-07-23T16:00:00.000Z"} +{"doc_count":29761,"split_key":206264,"timestamp":"2026-07-23T17:00:00.000Z"} +{"doc_count":8376,"split_key":14061,"timestamp":"2026-07-23T17:00:00.000Z"} +{"doc_count":1068,"split_key":37963,"timestamp":"2026-07-23T17:00:00.000Z"} +{"doc_count":713,"split_key":63737,"timestamp":"2026-07-23T17:00:00.000Z"} +{"doc_count":678,"split_key":396982,"timestamp":"2026-07-23T17:00:00.000Z"} +{"doc_count":26366,"split_key":206264,"timestamp":"2026-07-23T18:00:00.000Z"} +{"doc_count":12756,"split_key":14061,"timestamp":"2026-07-23T18:00:00.000Z"} +{"doc_count":1136,"split_key":37963,"timestamp":"2026-07-23T18:00:00.000Z"} +{"doc_count":980,"split_key":197540,"timestamp":"2026-07-23T18:00:00.000Z"} +{"doc_count":653,"split_key":63737,"timestamp":"2026-07-23T18:00:00.000Z"} +{"doc_count":26292,"split_key":206264,"timestamp":"2026-07-23T19:00:00.000Z"} +{"doc_count":1612,"split_key":14061,"timestamp":"2026-07-23T19:00:00.000Z"} +{"doc_count":1213,"split_key":37963,"timestamp":"2026-07-23T19:00:00.000Z"} +{"doc_count":634,"split_key":138915,"timestamp":"2026-07-23T19:00:00.000Z"} +{"doc_count":600,"split_key":197540,"timestamp":"2026-07-23T19:00:00.000Z"} +{"doc_count":26965,"split_key":206264,"timestamp":"2026-07-23T20:00:00.000Z"} +{"doc_count":1663,"split_key":197207,"timestamp":"2026-07-23T20:00:00.000Z"} +{"doc_count":1228,"split_key":37963,"timestamp":"2026-07-23T20:00:00.000Z"} +{"doc_count":1039,"split_key":58224,"timestamp":"2026-07-23T20:00:00.000Z"} +{"doc_count":914,"split_key":197540,"timestamp":"2026-07-23T20:00:00.000Z"} +{"doc_count":27337,"split_key":206264,"timestamp":"2026-07-23T21:00:00.000Z"} +{"doc_count":1199,"split_key":37963,"timestamp":"2026-07-23T21:00:00.000Z"} +{"doc_count":996,"split_key":197540,"timestamp":"2026-07-23T21:00:00.000Z"} +{"doc_count":799,"split_key":63023,"timestamp":"2026-07-23T21:00:00.000Z"} +{"doc_count":756,"split_key":57724,"timestamp":"2026-07-23T21:00:00.000Z"} +{"doc_count":28716,"split_key":206264,"timestamp":"2026-07-23T22:00:00.000Z"} +{"doc_count":10303,"split_key":14061,"timestamp":"2026-07-23T22:00:00.000Z"} +{"doc_count":1490,"split_key":37963,"timestamp":"2026-07-23T22:00:00.000Z"} +{"doc_count":847,"split_key":51396,"timestamp":"2026-07-23T22:00:00.000Z"} +{"doc_count":812,"split_key":53667,"timestamp":"2026-07-23T22:00:00.000Z"} +{"doc_count":28768,"split_key":206264,"timestamp":"2026-07-23T23:00:00.000Z"} +{"doc_count":25428,"split_key":14061,"timestamp":"2026-07-23T23:00:00.000Z"} +{"doc_count":3667,"split_key":209334,"timestamp":"2026-07-23T23:00:00.000Z"} +{"doc_count":2249,"split_key":37963,"timestamp":"2026-07-23T23:00:00.000Z"} +{"doc_count":1297,"split_key":399244,"timestamp":"2026-07-23T23:00:00.000Z"} +{"doc_count":27713,"split_key":209334,"timestamp":"2026-07-24T00:00:00.000Z"} +{"doc_count":27204,"split_key":206264,"timestamp":"2026-07-24T00:00:00.000Z"} +{"doc_count":11037,"split_key":14987,"timestamp":"2026-07-24T00:00:00.000Z"} +{"doc_count":10045,"split_key":14061,"timestamp":"2026-07-24T00:00:00.000Z"} +{"doc_count":3242,"split_key":399244,"timestamp":"2026-07-24T00:00:00.000Z"} +{"doc_count":32155,"split_key":209334,"timestamp":"2026-07-24T01:00:00.000Z"} +{"doc_count":29185,"split_key":206264,"timestamp":"2026-07-24T01:00:00.000Z"} +{"doc_count":2715,"split_key":399244,"timestamp":"2026-07-24T01:00:00.000Z"} +{"doc_count":1258,"split_key":14987,"timestamp":"2026-07-24T01:00:00.000Z"} +{"doc_count":1199,"split_key":37963,"timestamp":"2026-07-24T01:00:00.000Z"} +{"doc_count":29032,"split_key":206264,"timestamp":"2026-07-24T02:00:00.000Z"} +{"doc_count":25513,"split_key":209334,"timestamp":"2026-07-24T02:00:00.000Z"} +{"doc_count":3073,"split_key":399244,"timestamp":"2026-07-24T02:00:00.000Z"} +{"doc_count":2037,"split_key":37963,"timestamp":"2026-07-24T02:00:00.000Z"} +{"doc_count":1160,"split_key":201401,"timestamp":"2026-07-24T02:00:00.000Z"} +{"doc_count":31274,"split_key":206264,"timestamp":"2026-07-24T03:00:00.000Z"} +{"doc_count":3010,"split_key":399244,"timestamp":"2026-07-24T03:00:00.000Z"} +{"doc_count":2058,"split_key":37963,"timestamp":"2026-07-24T03:00:00.000Z"} +{"doc_count":1169,"split_key":16509,"timestamp":"2026-07-24T03:00:00.000Z"} +{"doc_count":1143,"split_key":53667,"timestamp":"2026-07-24T03:00:00.000Z"} +{"doc_count":28506,"split_key":206264,"timestamp":"2026-07-24T04:00:00.000Z"} +{"doc_count":2950,"split_key":399244,"timestamp":"2026-07-24T04:00:00.000Z"} +{"doc_count":2468,"split_key":37963,"timestamp":"2026-07-24T04:00:00.000Z"} +{"doc_count":1002,"split_key":197540,"timestamp":"2026-07-24T04:00:00.000Z"} +{"doc_count":875,"split_key":16509,"timestamp":"2026-07-24T04:00:00.000Z"} +{"doc_count":27925,"split_key":206264,"timestamp":"2026-07-24T05:00:00.000Z"} +{"doc_count":2985,"split_key":399244,"timestamp":"2026-07-24T05:00:00.000Z"} +{"doc_count":1327,"split_key":37963,"timestamp":"2026-07-24T05:00:00.000Z"} +{"doc_count":934,"split_key":396982,"timestamp":"2026-07-24T05:00:00.000Z"} +{"doc_count":924,"split_key":14061,"timestamp":"2026-07-24T05:00:00.000Z"} +{"doc_count":28571,"split_key":206264,"timestamp":"2026-07-24T06:00:00.000Z"} +{"doc_count":2945,"split_key":399244,"timestamp":"2026-07-24T06:00:00.000Z"} +{"doc_count":1949,"split_key":57724,"timestamp":"2026-07-24T06:00:00.000Z"} +{"doc_count":1212,"split_key":16509,"timestamp":"2026-07-24T06:00:00.000Z"} +{"doc_count":1189,"split_key":63737,"timestamp":"2026-07-24T06:00:00.000Z"} +{"doc_count":29418,"split_key":206264,"timestamp":"2026-07-24T07:00:00.000Z"} +{"doc_count":5309,"split_key":209334,"timestamp":"2026-07-24T07:00:00.000Z"} +{"doc_count":2975,"split_key":399244,"timestamp":"2026-07-24T07:00:00.000Z"} +{"doc_count":1046,"split_key":197540,"timestamp":"2026-07-24T07:00:00.000Z"} +{"doc_count":878,"split_key":53667,"timestamp":"2026-07-24T07:00:00.000Z"} +{"doc_count":31049,"split_key":206264,"timestamp":"2026-07-24T08:00:00.000Z"} +{"doc_count":19108,"split_key":209334,"timestamp":"2026-07-24T08:00:00.000Z"} +{"doc_count":2980,"split_key":399244,"timestamp":"2026-07-24T08:00:00.000Z"} +{"doc_count":1157,"split_key":16509,"timestamp":"2026-07-24T08:00:00.000Z"} +{"doc_count":918,"split_key":53667,"timestamp":"2026-07-24T08:00:00.000Z"} +{"doc_count":26977,"split_key":206264,"timestamp":"2026-07-24T09:00:00.000Z"} +{"doc_count":14222,"split_key":209334,"timestamp":"2026-07-24T09:00:00.000Z"} +{"doc_count":2975,"split_key":399244,"timestamp":"2026-07-24T09:00:00.000Z"} +{"doc_count":1811,"split_key":54600,"timestamp":"2026-07-24T09:00:00.000Z"} +{"doc_count":1100,"split_key":37963,"timestamp":"2026-07-24T09:00:00.000Z"} +{"doc_count":27171,"split_key":206264,"timestamp":"2026-07-24T10:00:00.000Z"} +{"doc_count":25485,"split_key":209334,"timestamp":"2026-07-24T10:00:00.000Z"} +{"doc_count":16678,"split_key":54600,"timestamp":"2026-07-24T10:00:00.000Z"} +{"doc_count":6254,"split_key":14061,"timestamp":"2026-07-24T10:00:00.000Z"} +{"doc_count":2690,"split_key":399244,"timestamp":"2026-07-24T10:00:00.000Z"} +{"doc_count":26190,"split_key":206264,"timestamp":"2026-07-24T11:00:00.000Z"} +{"doc_count":10435,"split_key":54600,"timestamp":"2026-07-24T11:00:00.000Z"} +{"doc_count":8511,"split_key":209334,"timestamp":"2026-07-24T11:00:00.000Z"} +{"doc_count":7484,"split_key":14061,"timestamp":"2026-07-24T11:00:00.000Z"} +{"doc_count":3167,"split_key":205146,"timestamp":"2026-07-24T11:00:00.000Z"} +{"doc_count":27484,"split_key":206264,"timestamp":"2026-07-24T12:00:00.000Z"} +{"doc_count":21958,"split_key":209334,"timestamp":"2026-07-24T12:00:00.000Z"} +{"doc_count":7587,"split_key":14061,"timestamp":"2026-07-24T12:00:00.000Z"} +{"doc_count":3380,"split_key":212623,"timestamp":"2026-07-24T12:00:00.000Z"} +{"doc_count":3237,"split_key":399244,"timestamp":"2026-07-24T12:00:00.000Z"} +{"doc_count":29822,"split_key":206264,"timestamp":"2026-07-24T13:00:00.000Z"} +{"doc_count":10955,"split_key":209334,"timestamp":"2026-07-24T13:00:00.000Z"} +{"doc_count":3392,"split_key":212623,"timestamp":"2026-07-24T13:00:00.000Z"} +{"doc_count":2881,"split_key":399244,"timestamp":"2026-07-24T13:00:00.000Z"} +{"doc_count":2367,"split_key":205146,"timestamp":"2026-07-24T13:00:00.000Z"} +{"doc_count":38387,"split_key":209334,"timestamp":"2026-07-24T14:00:00.000Z"} +{"doc_count":27865,"split_key":206264,"timestamp":"2026-07-24T14:00:00.000Z"} +{"doc_count":4197,"split_key":212623,"timestamp":"2026-07-24T14:00:00.000Z"} +{"doc_count":3020,"split_key":399244,"timestamp":"2026-07-24T14:00:00.000Z"} +{"doc_count":1464,"split_key":63737,"timestamp":"2026-07-24T14:00:00.000Z"} +{"doc_count":28066,"split_key":206264,"timestamp":"2026-07-24T15:00:00.000Z"} +{"doc_count":12235,"split_key":209334,"timestamp":"2026-07-24T15:00:00.000Z"} +{"doc_count":3079,"split_key":399244,"timestamp":"2026-07-24T15:00:00.000Z"} +{"doc_count":2799,"split_key":212623,"timestamp":"2026-07-24T15:00:00.000Z"} +{"doc_count":1503,"split_key":63737,"timestamp":"2026-07-24T15:00:00.000Z"} +{"doc_count":29335,"split_key":206264,"timestamp":"2026-07-24T16:00:00.000Z"} +{"doc_count":4526,"split_key":209334,"timestamp":"2026-07-24T16:00:00.000Z"} +{"doc_count":3201,"split_key":399244,"timestamp":"2026-07-24T16:00:00.000Z"} +{"doc_count":2432,"split_key":212623,"timestamp":"2026-07-24T16:00:00.000Z"} +{"doc_count":1248,"split_key":37963,"timestamp":"2026-07-24T16:00:00.000Z"} +{"doc_count":28339,"split_key":206264,"timestamp":"2026-07-24T17:00:00.000Z"} +{"doc_count":3288,"split_key":399244,"timestamp":"2026-07-24T17:00:00.000Z"} +{"doc_count":1476,"split_key":212623,"timestamp":"2026-07-24T17:00:00.000Z"} +{"doc_count":1354,"split_key":16509,"timestamp":"2026-07-24T17:00:00.000Z"} +{"doc_count":1024,"split_key":53667,"timestamp":"2026-07-24T17:00:00.000Z"} +{"doc_count":30859,"split_key":206264,"timestamp":"2026-07-24T18:00:00.000Z"} +{"doc_count":2588,"split_key":399244,"timestamp":"2026-07-24T18:00:00.000Z"} +{"doc_count":2337,"split_key":33915,"timestamp":"2026-07-24T18:00:00.000Z"} +{"doc_count":1510,"split_key":212623,"timestamp":"2026-07-24T18:00:00.000Z"} +{"doc_count":1061,"split_key":45102,"timestamp":"2026-07-24T18:00:00.000Z"} +{"doc_count":26683,"split_key":206264,"timestamp":"2026-07-24T19:00:00.000Z"} +{"doc_count":3243,"split_key":212623,"timestamp":"2026-07-24T19:00:00.000Z"} +{"doc_count":3067,"split_key":399244,"timestamp":"2026-07-24T19:00:00.000Z"} +{"doc_count":1664,"split_key":37963,"timestamp":"2026-07-24T19:00:00.000Z"} +{"doc_count":1215,"split_key":63737,"timestamp":"2026-07-24T19:00:00.000Z"} +{"doc_count":24975,"split_key":206264,"timestamp":"2026-07-24T20:00:00.000Z"} +{"doc_count":5853,"split_key":212623,"timestamp":"2026-07-24T20:00:00.000Z"} +{"doc_count":2411,"split_key":37963,"timestamp":"2026-07-24T20:00:00.000Z"} +{"doc_count":1878,"split_key":399244,"timestamp":"2026-07-24T20:00:00.000Z"} +{"doc_count":1047,"split_key":45102,"timestamp":"2026-07-24T20:00:00.000Z"} +{"doc_count":26287,"split_key":206264,"timestamp":"2026-07-24T21:00:00.000Z"} +{"doc_count":8288,"split_key":212623,"timestamp":"2026-07-24T21:00:00.000Z"} +{"doc_count":2596,"split_key":399244,"timestamp":"2026-07-24T21:00:00.000Z"} +{"doc_count":1393,"split_key":63737,"timestamp":"2026-07-24T21:00:00.000Z"} +{"doc_count":1229,"split_key":37963,"timestamp":"2026-07-24T21:00:00.000Z"} +{"doc_count":25384,"split_key":206264,"timestamp":"2026-07-24T22:00:00.000Z"} +{"doc_count":3168,"split_key":399244,"timestamp":"2026-07-24T22:00:00.000Z"} +{"doc_count":1052,"split_key":197540,"timestamp":"2026-07-24T22:00:00.000Z"} +{"doc_count":975,"split_key":53667,"timestamp":"2026-07-24T22:00:00.000Z"} +{"doc_count":832,"split_key":16509,"timestamp":"2026-07-24T22:00:00.000Z"} +{"doc_count":29001,"split_key":206264,"timestamp":"2026-07-24T23:00:00.000Z"} +{"doc_count":3091,"split_key":399244,"timestamp":"2026-07-24T23:00:00.000Z"} +{"doc_count":1772,"split_key":209334,"timestamp":"2026-07-24T23:00:00.000Z"} +{"doc_count":1406,"split_key":63737,"timestamp":"2026-07-24T23:00:00.000Z"} +{"doc_count":1185,"split_key":53667,"timestamp":"2026-07-24T23:00:00.000Z"} +{"doc_count":28101,"split_key":206264,"timestamp":"2026-07-25T00:00:00.000Z"} +{"doc_count":25079,"split_key":209334,"timestamp":"2026-07-25T00:00:00.000Z"} +{"doc_count":10576,"split_key":14987,"timestamp":"2026-07-25T00:00:00.000Z"} +{"doc_count":3059,"split_key":399244,"timestamp":"2026-07-25T00:00:00.000Z"} +{"doc_count":1117,"split_key":63737,"timestamp":"2026-07-25T00:00:00.000Z"} +{"doc_count":28022,"split_key":209334,"timestamp":"2026-07-25T01:00:00.000Z"} +{"doc_count":25359,"split_key":206264,"timestamp":"2026-07-25T01:00:00.000Z"} +{"doc_count":2919,"split_key":399244,"timestamp":"2026-07-25T01:00:00.000Z"} +{"doc_count":1491,"split_key":63737,"timestamp":"2026-07-25T01:00:00.000Z"} +{"doc_count":1024,"split_key":197540,"timestamp":"2026-07-25T01:00:00.000Z"} +{"doc_count":30325,"split_key":209334,"timestamp":"2026-07-25T02:00:00.000Z"} +{"doc_count":27270,"split_key":206264,"timestamp":"2026-07-25T02:00:00.000Z"} +{"doc_count":3022,"split_key":399244,"timestamp":"2026-07-25T02:00:00.000Z"} +{"doc_count":1380,"split_key":63737,"timestamp":"2026-07-25T02:00:00.000Z"} +{"doc_count":1041,"split_key":201401,"timestamp":"2026-07-25T02:00:00.000Z"} +{"doc_count":27327,"split_key":206264,"timestamp":"2026-07-25T03:00:00.000Z"} +{"doc_count":4309,"split_key":209334,"timestamp":"2026-07-25T03:00:00.000Z"} +{"doc_count":2884,"split_key":399244,"timestamp":"2026-07-25T03:00:00.000Z"} +{"doc_count":1413,"split_key":45102,"timestamp":"2026-07-25T03:00:00.000Z"} +{"doc_count":1070,"split_key":197540,"timestamp":"2026-07-25T03:00:00.000Z"} +{"doc_count":31392,"split_key":206264,"timestamp":"2026-07-25T04:00:00.000Z"} +{"doc_count":2594,"split_key":152194,"timestamp":"2026-07-25T04:00:00.000Z"} +{"doc_count":2433,"split_key":399244,"timestamp":"2026-07-25T04:00:00.000Z"} +{"doc_count":1423,"split_key":45102,"timestamp":"2026-07-25T04:00:00.000Z"} +{"doc_count":979,"split_key":53667,"timestamp":"2026-07-25T04:00:00.000Z"} +{"doc_count":28432,"split_key":206264,"timestamp":"2026-07-25T05:00:00.000Z"} +{"doc_count":2663,"split_key":399244,"timestamp":"2026-07-25T05:00:00.000Z"} +{"doc_count":1998,"split_key":7713,"timestamp":"2026-07-25T05:00:00.000Z"} +{"doc_count":1397,"split_key":45102,"timestamp":"2026-07-25T05:00:00.000Z"} +{"doc_count":1306,"split_key":396982,"timestamp":"2026-07-25T05:00:00.000Z"} +{"doc_count":27793,"split_key":206264,"timestamp":"2026-07-25T06:00:00.000Z"} +{"doc_count":3156,"split_key":399244,"timestamp":"2026-07-25T06:00:00.000Z"} +{"doc_count":1998,"split_key":7713,"timestamp":"2026-07-25T06:00:00.000Z"} +{"doc_count":1208,"split_key":37963,"timestamp":"2026-07-25T06:00:00.000Z"} +{"doc_count":962,"split_key":15525,"timestamp":"2026-07-25T06:00:00.000Z"} +{"doc_count":28719,"split_key":206264,"timestamp":"2026-07-25T07:00:00.000Z"} +{"doc_count":5197,"split_key":209334,"timestamp":"2026-07-25T07:00:00.000Z"} +{"doc_count":3172,"split_key":399244,"timestamp":"2026-07-25T07:00:00.000Z"} +{"doc_count":1430,"split_key":7713,"timestamp":"2026-07-25T07:00:00.000Z"} +{"doc_count":1408,"split_key":63737,"timestamp":"2026-07-25T07:00:00.000Z"} +{"doc_count":27899,"split_key":206264,"timestamp":"2026-07-25T08:00:00.000Z"} +{"doc_count":15832,"split_key":209334,"timestamp":"2026-07-25T08:00:00.000Z"} +{"doc_count":3223,"split_key":399244,"timestamp":"2026-07-25T08:00:00.000Z"} +{"doc_count":1396,"split_key":63737,"timestamp":"2026-07-25T08:00:00.000Z"} +{"doc_count":1215,"split_key":37963,"timestamp":"2026-07-25T08:00:00.000Z"} +{"doc_count":30835,"split_key":206264,"timestamp":"2026-07-25T09:00:00.000Z"} +{"doc_count":14179,"split_key":209334,"timestamp":"2026-07-25T09:00:00.000Z"} +{"doc_count":3251,"split_key":399244,"timestamp":"2026-07-25T09:00:00.000Z"} +{"doc_count":1495,"split_key":58087,"timestamp":"2026-07-25T09:00:00.000Z"} +{"doc_count":1345,"split_key":63737,"timestamp":"2026-07-25T09:00:00.000Z"} +{"doc_count":29042,"split_key":206264,"timestamp":"2026-07-25T10:00:00.000Z"} +{"doc_count":27146,"split_key":209334,"timestamp":"2026-07-25T10:00:00.000Z"} +{"doc_count":1775,"split_key":399244,"timestamp":"2026-07-25T10:00:00.000Z"} +{"doc_count":1069,"split_key":53667,"timestamp":"2026-07-25T10:00:00.000Z"} +{"doc_count":1058,"split_key":15525,"timestamp":"2026-07-25T10:00:00.000Z"} +{"doc_count":27540,"split_key":206264,"timestamp":"2026-07-25T11:00:00.000Z"} +{"doc_count":8163,"split_key":209334,"timestamp":"2026-07-25T11:00:00.000Z"} +{"doc_count":8029,"split_key":212623,"timestamp":"2026-07-25T11:00:00.000Z"} +{"doc_count":5114,"split_key":23470,"timestamp":"2026-07-25T11:00:00.000Z"} +{"doc_count":1596,"split_key":37963,"timestamp":"2026-07-25T11:00:00.000Z"} +{"doc_count":28530,"split_key":206264,"timestamp":"2026-07-25T12:00:00.000Z"} +{"doc_count":19743,"split_key":209334,"timestamp":"2026-07-25T12:00:00.000Z"} +{"doc_count":7799,"split_key":212623,"timestamp":"2026-07-25T12:00:00.000Z"} +{"doc_count":1233,"split_key":53667,"timestamp":"2026-07-25T12:00:00.000Z"} +{"doc_count":966,"split_key":15525,"timestamp":"2026-07-25T12:00:00.000Z"} +{"doc_count":26919,"split_key":206264,"timestamp":"2026-07-25T13:00:00.000Z"} +{"doc_count":12539,"split_key":209334,"timestamp":"2026-07-25T13:00:00.000Z"} +{"doc_count":6623,"split_key":212623,"timestamp":"2026-07-25T13:00:00.000Z"} +{"doc_count":5078,"split_key":23470,"timestamp":"2026-07-25T13:00:00.000Z"} +{"doc_count":1056,"split_key":15525,"timestamp":"2026-07-25T13:00:00.000Z"} +{"doc_count":36766,"split_key":209334,"timestamp":"2026-07-25T14:00:00.000Z"} +{"doc_count":28899,"split_key":206264,"timestamp":"2026-07-25T14:00:00.000Z"} +{"doc_count":8344,"split_key":212623,"timestamp":"2026-07-25T14:00:00.000Z"} +{"doc_count":1010,"split_key":15525,"timestamp":"2026-07-25T14:00:00.000Z"} +{"doc_count":776,"split_key":63737,"timestamp":"2026-07-25T14:00:00.000Z"} +{"doc_count":27117,"split_key":206264,"timestamp":"2026-07-25T15:00:00.000Z"} +{"doc_count":15788,"split_key":209334,"timestamp":"2026-07-25T15:00:00.000Z"} +{"doc_count":6959,"split_key":212623,"timestamp":"2026-07-25T15:00:00.000Z"} +{"doc_count":1652,"split_key":399244,"timestamp":"2026-07-25T15:00:00.000Z"} +{"doc_count":1016,"split_key":15525,"timestamp":"2026-07-25T15:00:00.000Z"} +{"doc_count":24543,"split_key":206264,"timestamp":"2026-07-25T16:00:00.000Z"} +{"doc_count":6445,"split_key":212623,"timestamp":"2026-07-25T16:00:00.000Z"} +{"doc_count":5198,"split_key":209334,"timestamp":"2026-07-25T16:00:00.000Z"} +{"doc_count":3215,"split_key":399244,"timestamp":"2026-07-25T16:00:00.000Z"} +{"doc_count":1307,"split_key":37963,"timestamp":"2026-07-25T16:00:00.000Z"} +{"doc_count":26145,"split_key":206264,"timestamp":"2026-07-25T17:00:00.000Z"} +{"doc_count":1959,"split_key":37963,"timestamp":"2026-07-25T17:00:00.000Z"} +{"doc_count":1051,"split_key":4134,"timestamp":"2026-07-25T17:00:00.000Z"} +{"doc_count":1041,"split_key":212623,"timestamp":"2026-07-25T17:00:00.000Z"} +{"doc_count":965,"split_key":15525,"timestamp":"2026-07-25T17:00:00.000Z"} +{"doc_count":25247,"split_key":206264,"timestamp":"2026-07-25T18:00:00.000Z"} +{"doc_count":5542,"split_key":48925,"timestamp":"2026-07-25T18:00:00.000Z"} +{"doc_count":3312,"split_key":399244,"timestamp":"2026-07-25T18:00:00.000Z"} +{"doc_count":1463,"split_key":214987,"timestamp":"2026-07-25T18:00:00.000Z"} +{"doc_count":1111,"split_key":30399,"timestamp":"2026-07-25T18:00:00.000Z"} +{"doc_count":30588,"split_key":206264,"timestamp":"2026-07-25T19:00:00.000Z"} +{"doc_count":4846,"split_key":212623,"timestamp":"2026-07-25T19:00:00.000Z"} +{"doc_count":1843,"split_key":399244,"timestamp":"2026-07-25T19:00:00.000Z"} +{"doc_count":1011,"split_key":15525,"timestamp":"2026-07-25T19:00:00.000Z"} +{"doc_count":613,"split_key":63737,"timestamp":"2026-07-25T19:00:00.000Z"} +{"doc_count":29039,"split_key":206264,"timestamp":"2026-07-25T20:00:00.000Z"} +{"doc_count":6868,"split_key":48925,"timestamp":"2026-07-25T20:00:00.000Z"} +{"doc_count":2811,"split_key":212623,"timestamp":"2026-07-25T20:00:00.000Z"} +{"doc_count":1015,"split_key":15525,"timestamp":"2026-07-25T20:00:00.000Z"} +{"doc_count":1002,"split_key":53667,"timestamp":"2026-07-25T20:00:00.000Z"} +{"doc_count":26133,"split_key":206264,"timestamp":"2026-07-25T21:00:00.000Z"} +{"doc_count":3195,"split_key":399244,"timestamp":"2026-07-25T21:00:00.000Z"} +{"doc_count":917,"split_key":15525,"timestamp":"2026-07-25T21:00:00.000Z"} +{"doc_count":835,"split_key":396982,"timestamp":"2026-07-25T21:00:00.000Z"} +{"doc_count":737,"split_key":37963,"timestamp":"2026-07-25T21:00:00.000Z"} +{"doc_count":27296,"split_key":206264,"timestamp":"2026-07-25T22:00:00.000Z"} +{"doc_count":1104,"split_key":51167,"timestamp":"2026-07-25T22:00:00.000Z"} +{"doc_count":940,"split_key":15525,"timestamp":"2026-07-25T22:00:00.000Z"} +{"doc_count":938,"split_key":37963,"timestamp":"2026-07-25T22:00:00.000Z"} +{"doc_count":938,"split_key":399244,"timestamp":"2026-07-25T22:00:00.000Z"} +{"doc_count":27927,"split_key":206264,"timestamp":"2026-07-25T23:00:00.000Z"} +{"doc_count":1405,"split_key":14061,"timestamp":"2026-07-25T23:00:00.000Z"} +{"doc_count":1173,"split_key":399244,"timestamp":"2026-07-25T23:00:00.000Z"} +{"doc_count":948,"split_key":15525,"timestamp":"2026-07-25T23:00:00.000Z"} +{"doc_count":722,"split_key":63737,"timestamp":"2026-07-25T23:00:00.000Z"} +{"doc_count":29170,"split_key":206264,"timestamp":"2026-07-26T00:00:00.000Z"} +{"doc_count":28142,"split_key":209334,"timestamp":"2026-07-26T00:00:00.000Z"} +{"doc_count":20455,"split_key":14987,"timestamp":"2026-07-26T00:00:00.000Z"} +{"doc_count":3275,"split_key":399244,"timestamp":"2026-07-26T00:00:00.000Z"} +{"doc_count":1198,"split_key":14061,"timestamp":"2026-07-26T00:00:00.000Z"} +{"doc_count":29096,"split_key":209334,"timestamp":"2026-07-26T01:00:00.000Z"} +{"doc_count":25542,"split_key":206264,"timestamp":"2026-07-26T01:00:00.000Z"} +{"doc_count":1237,"split_key":396982,"timestamp":"2026-07-26T01:00:00.000Z"} +{"doc_count":1134,"split_key":201401,"timestamp":"2026-07-26T01:00:00.000Z"} +{"doc_count":922,"split_key":15525,"timestamp":"2026-07-26T01:00:00.000Z"} +{"doc_count":29999,"split_key":209334,"timestamp":"2026-07-26T02:00:00.000Z"} +{"doc_count":24672,"split_key":206264,"timestamp":"2026-07-26T02:00:00.000Z"} +{"doc_count":2522,"split_key":399244,"timestamp":"2026-07-26T02:00:00.000Z"} +{"doc_count":1723,"split_key":201401,"timestamp":"2026-07-26T02:00:00.000Z"} +{"doc_count":1417,"split_key":53667,"timestamp":"2026-07-26T02:00:00.000Z"} +{"doc_count":25636,"split_key":206264,"timestamp":"2026-07-26T03:00:00.000Z"} +{"doc_count":4827,"split_key":209334,"timestamp":"2026-07-26T03:00:00.000Z"} +{"doc_count":4066,"split_key":54600,"timestamp":"2026-07-26T03:00:00.000Z"} +{"doc_count":3149,"split_key":53667,"timestamp":"2026-07-26T03:00:00.000Z"} +{"doc_count":2636,"split_key":399244,"timestamp":"2026-07-26T03:00:00.000Z"} +{"doc_count":23947,"split_key":206264,"timestamp":"2026-07-26T04:00:00.000Z"} +{"doc_count":8285,"split_key":54600,"timestamp":"2026-07-26T04:00:00.000Z"} +{"doc_count":2967,"split_key":37963,"timestamp":"2026-07-26T04:00:00.000Z"} +{"doc_count":2664,"split_key":399244,"timestamp":"2026-07-26T04:00:00.000Z"} +{"doc_count":987,"split_key":15525,"timestamp":"2026-07-26T04:00:00.000Z"} +{"doc_count":29518,"split_key":206264,"timestamp":"2026-07-26T05:00:00.000Z"} +{"doc_count":19167,"split_key":14061,"timestamp":"2026-07-26T05:00:00.000Z"} +{"doc_count":13098,"split_key":54600,"timestamp":"2026-07-26T05:00:00.000Z"} +{"doc_count":3185,"split_key":37963,"timestamp":"2026-07-26T05:00:00.000Z"} +{"doc_count":3043,"split_key":399244,"timestamp":"2026-07-26T05:00:00.000Z"} +{"doc_count":26344,"split_key":206264,"timestamp":"2026-07-26T06:00:00.000Z"} +{"doc_count":13657,"split_key":54600,"timestamp":"2026-07-26T06:00:00.000Z"} +{"doc_count":4185,"split_key":57724,"timestamp":"2026-07-26T06:00:00.000Z"} +{"doc_count":3062,"split_key":399244,"timestamp":"2026-07-26T06:00:00.000Z"} +{"doc_count":2407,"split_key":37963,"timestamp":"2026-07-26T06:00:00.000Z"} +{"doc_count":24602,"split_key":206264,"timestamp":"2026-07-26T07:00:00.000Z"} +{"doc_count":17063,"split_key":54600,"timestamp":"2026-07-26T07:00:00.000Z"} +{"doc_count":5416,"split_key":209334,"timestamp":"2026-07-26T07:00:00.000Z"} +{"doc_count":2830,"split_key":399244,"timestamp":"2026-07-26T07:00:00.000Z"} +{"doc_count":2024,"split_key":57724,"timestamp":"2026-07-26T07:00:00.000Z"} +{"doc_count":26270,"split_key":206264,"timestamp":"2026-07-26T08:00:00.000Z"} +{"doc_count":11138,"split_key":209334,"timestamp":"2026-07-26T08:00:00.000Z"} +{"doc_count":5430,"split_key":57724,"timestamp":"2026-07-26T08:00:00.000Z"} +{"doc_count":3273,"split_key":399244,"timestamp":"2026-07-26T08:00:00.000Z"} +{"doc_count":1228,"split_key":37963,"timestamp":"2026-07-26T08:00:00.000Z"} +{"doc_count":25544,"split_key":206264,"timestamp":"2026-07-26T09:00:00.000Z"} +{"doc_count":18116,"split_key":209334,"timestamp":"2026-07-26T09:00:00.000Z"} +{"doc_count":3429,"split_key":212623,"timestamp":"2026-07-26T09:00:00.000Z"} +{"doc_count":3117,"split_key":19318,"timestamp":"2026-07-26T09:00:00.000Z"} +{"doc_count":2079,"split_key":57724,"timestamp":"2026-07-26T09:00:00.000Z"} +{"doc_count":29563,"split_key":206264,"timestamp":"2026-07-26T10:00:00.000Z"} +{"doc_count":21919,"split_key":209334,"timestamp":"2026-07-26T10:00:00.000Z"} +{"doc_count":6865,"split_key":212623,"timestamp":"2026-07-26T10:00:00.000Z"} +{"doc_count":3308,"split_key":399244,"timestamp":"2026-07-26T10:00:00.000Z"} +{"doc_count":1209,"split_key":37963,"timestamp":"2026-07-26T10:00:00.000Z"} +{"doc_count":25454,"split_key":206264,"timestamp":"2026-07-26T11:00:00.000Z"} +{"doc_count":15537,"split_key":209334,"timestamp":"2026-07-26T11:00:00.000Z"} +{"doc_count":8565,"split_key":212623,"timestamp":"2026-07-26T11:00:00.000Z"} +{"doc_count":1644,"split_key":399244,"timestamp":"2026-07-26T11:00:00.000Z"} +{"doc_count":1092,"split_key":37963,"timestamp":"2026-07-26T11:00:00.000Z"} +{"doc_count":24160,"split_key":206264,"timestamp":"2026-07-26T12:00:00.000Z"} +{"doc_count":19405,"split_key":209334,"timestamp":"2026-07-26T12:00:00.000Z"} +{"doc_count":7540,"split_key":212623,"timestamp":"2026-07-26T12:00:00.000Z"} +{"doc_count":2707,"split_key":399244,"timestamp":"2026-07-26T12:00:00.000Z"} +{"doc_count":2260,"split_key":57724,"timestamp":"2026-07-26T12:00:00.000Z"} +{"doc_count":25413,"split_key":206264,"timestamp":"2026-07-26T13:00:00.000Z"} +{"doc_count":15711,"split_key":14061,"timestamp":"2026-07-26T13:00:00.000Z"} +{"doc_count":12884,"split_key":209334,"timestamp":"2026-07-26T13:00:00.000Z"} +{"doc_count":9125,"split_key":53850,"timestamp":"2026-07-26T13:00:00.000Z"} +{"doc_count":8284,"split_key":212623,"timestamp":"2026-07-26T13:00:00.000Z"} +{"doc_count":27447,"split_key":209334,"timestamp":"2026-07-26T14:00:00.000Z"} +{"doc_count":25025,"split_key":206264,"timestamp":"2026-07-26T14:00:00.000Z"} +{"doc_count":15817,"split_key":14061,"timestamp":"2026-07-26T14:00:00.000Z"} +{"doc_count":6775,"split_key":53850,"timestamp":"2026-07-26T14:00:00.000Z"} +{"doc_count":6026,"split_key":212623,"timestamp":"2026-07-26T14:00:00.000Z"} +{"doc_count":40824,"split_key":14061,"timestamp":"2026-07-26T15:00:00.000Z"} +{"doc_count":28077,"split_key":206264,"timestamp":"2026-07-26T15:00:00.000Z"} +{"doc_count":19132,"split_key":209334,"timestamp":"2026-07-26T15:00:00.000Z"} +{"doc_count":2450,"split_key":57724,"timestamp":"2026-07-26T15:00:00.000Z"} +{"doc_count":1462,"split_key":53667,"timestamp":"2026-07-26T15:00:00.000Z"} +{"doc_count":33340,"split_key":14061,"timestamp":"2026-07-26T16:00:00.000Z"} +{"doc_count":25173,"split_key":206264,"timestamp":"2026-07-26T16:00:00.000Z"} +{"doc_count":10395,"split_key":209334,"timestamp":"2026-07-26T16:00:00.000Z"} +{"doc_count":5983,"split_key":57724,"timestamp":"2026-07-26T16:00:00.000Z"} +{"doc_count":1083,"split_key":51167,"timestamp":"2026-07-26T16:00:00.000Z"} +{"doc_count":23909,"split_key":206264,"timestamp":"2026-07-26T17:00:00.000Z"} +{"doc_count":8146,"split_key":14061,"timestamp":"2026-07-26T17:00:00.000Z"} +{"doc_count":2322,"split_key":57724,"timestamp":"2026-07-26T17:00:00.000Z"} +{"doc_count":2321,"split_key":45102,"timestamp":"2026-07-26T17:00:00.000Z"} +{"doc_count":1024,"split_key":15525,"timestamp":"2026-07-26T17:00:00.000Z"} +{"doc_count":25559,"split_key":206264,"timestamp":"2026-07-26T18:00:00.000Z"} +{"doc_count":2656,"split_key":45102,"timestamp":"2026-07-26T18:00:00.000Z"} +{"doc_count":1591,"split_key":57724,"timestamp":"2026-07-26T18:00:00.000Z"} +{"doc_count":983,"split_key":15525,"timestamp":"2026-07-26T18:00:00.000Z"} +{"doc_count":975,"split_key":53667,"timestamp":"2026-07-26T18:00:00.000Z"} +{"doc_count":24105,"split_key":206264,"timestamp":"2026-07-26T19:00:00.000Z"} +{"doc_count":1544,"split_key":399244,"timestamp":"2026-07-26T19:00:00.000Z"} +{"doc_count":1128,"split_key":45102,"timestamp":"2026-07-26T19:00:00.000Z"} +{"doc_count":1032,"split_key":15525,"timestamp":"2026-07-26T19:00:00.000Z"} +{"doc_count":780,"split_key":53667,"timestamp":"2026-07-26T19:00:00.000Z"} +{"doc_count":29053,"split_key":206264,"timestamp":"2026-07-26T20:00:00.000Z"} +{"doc_count":1655,"split_key":399244,"timestamp":"2026-07-26T20:00:00.000Z"} +{"doc_count":1305,"split_key":212623,"timestamp":"2026-07-26T20:00:00.000Z"} +{"doc_count":997,"split_key":15525,"timestamp":"2026-07-26T20:00:00.000Z"} +{"doc_count":751,"split_key":14061,"timestamp":"2026-07-26T20:00:00.000Z"} +{"doc_count":26871,"split_key":206264,"timestamp":"2026-07-26T21:00:00.000Z"} +{"doc_count":5851,"split_key":212623,"timestamp":"2026-07-26T21:00:00.000Z"} +{"doc_count":1020,"split_key":15525,"timestamp":"2026-07-26T21:00:00.000Z"} +{"doc_count":713,"split_key":51396,"timestamp":"2026-07-26T21:00:00.000Z"} +{"doc_count":674,"split_key":8075,"timestamp":"2026-07-26T21:00:00.000Z"} +{"doc_count":24085,"split_key":206264,"timestamp":"2026-07-26T22:00:00.000Z"} +{"doc_count":1657,"split_key":399244,"timestamp":"2026-07-26T22:00:00.000Z"} +{"doc_count":1007,"split_key":15525,"timestamp":"2026-07-26T22:00:00.000Z"} +{"doc_count":982,"split_key":51396,"timestamp":"2026-07-26T22:00:00.000Z"} +{"doc_count":890,"split_key":37963,"timestamp":"2026-07-26T22:00:00.000Z"} +{"doc_count":24629,"split_key":206264,"timestamp":"2026-07-26T23:00:00.000Z"} +{"doc_count":1856,"split_key":37963,"timestamp":"2026-07-26T23:00:00.000Z"} +{"doc_count":1684,"split_key":399244,"timestamp":"2026-07-26T23:00:00.000Z"} +{"doc_count":1224,"split_key":51396,"timestamp":"2026-07-26T23:00:00.000Z"} +{"doc_count":1023,"split_key":15525,"timestamp":"2026-07-26T23:00:00.000Z"} +{"doc_count":21754,"split_key":206264,"timestamp":"2026-07-27T00:00:00.000Z"} +{"doc_count":18367,"split_key":209334,"timestamp":"2026-07-27T00:00:00.000Z"} +{"doc_count":10060,"split_key":14987,"timestamp":"2026-07-27T00:00:00.000Z"} +{"doc_count":1667,"split_key":399244,"timestamp":"2026-07-27T00:00:00.000Z"} +{"doc_count":1648,"split_key":37963,"timestamp":"2026-07-27T00:00:00.000Z"} +{"doc_count":27705,"split_key":209334,"timestamp":"2026-07-27T01:00:00.000Z"} +{"doc_count":24736,"split_key":206264,"timestamp":"2026-07-27T01:00:00.000Z"} +{"doc_count":12275,"split_key":14061,"timestamp":"2026-07-27T01:00:00.000Z"} +{"doc_count":1122,"split_key":399244,"timestamp":"2026-07-27T01:00:00.000Z"} +{"doc_count":1101,"split_key":201401,"timestamp":"2026-07-27T01:00:00.000Z"} +{"doc_count":29839,"split_key":209334,"timestamp":"2026-07-27T02:00:00.000Z"} +{"doc_count":22583,"split_key":14061,"timestamp":"2026-07-27T02:00:00.000Z"} +{"doc_count":22279,"split_key":206264,"timestamp":"2026-07-27T02:00:00.000Z"} +{"doc_count":1001,"split_key":201401,"timestamp":"2026-07-27T02:00:00.000Z"} +{"doc_count":961,"split_key":15525,"timestamp":"2026-07-27T02:00:00.000Z"} +{"doc_count":22850,"split_key":206264,"timestamp":"2026-07-27T03:00:00.000Z"} +{"doc_count":12634,"split_key":209334,"timestamp":"2026-07-27T03:00:00.000Z"} +{"doc_count":9984,"split_key":14061,"timestamp":"2026-07-27T03:00:00.000Z"} +{"doc_count":1507,"split_key":399244,"timestamp":"2026-07-27T03:00:00.000Z"} +{"doc_count":1029,"split_key":15525,"timestamp":"2026-07-27T03:00:00.000Z"} +{"doc_count":22460,"split_key":206264,"timestamp":"2026-07-27T04:00:00.000Z"} +{"doc_count":1657,"split_key":399244,"timestamp":"2026-07-27T04:00:00.000Z"} +{"doc_count":1287,"split_key":16509,"timestamp":"2026-07-27T04:00:00.000Z"} +{"doc_count":1105,"split_key":15525,"timestamp":"2026-07-27T04:00:00.000Z"} +{"doc_count":826,"split_key":4134,"timestamp":"2026-07-27T04:00:00.000Z"} +{"doc_count":21985,"split_key":206264,"timestamp":"2026-07-27T05:00:00.000Z"} +{"doc_count":1670,"split_key":399244,"timestamp":"2026-07-27T05:00:00.000Z"} +{"doc_count":986,"split_key":15525,"timestamp":"2026-07-27T05:00:00.000Z"} +{"doc_count":861,"split_key":37963,"timestamp":"2026-07-27T05:00:00.000Z"} +{"doc_count":784,"split_key":396982,"timestamp":"2026-07-27T05:00:00.000Z"} +{"doc_count":23727,"split_key":206264,"timestamp":"2026-07-27T06:00:00.000Z"} +{"doc_count":5689,"split_key":37963,"timestamp":"2026-07-27T06:00:00.000Z"} +{"doc_count":1649,"split_key":399244,"timestamp":"2026-07-27T06:00:00.000Z"} +{"doc_count":989,"split_key":15525,"timestamp":"2026-07-27T06:00:00.000Z"} +{"doc_count":636,"split_key":16509,"timestamp":"2026-07-27T06:00:00.000Z"} +{"doc_count":17418,"split_key":206264,"timestamp":"2026-07-27T07:00:00.000Z"} +{"doc_count":1601,"split_key":399244,"timestamp":"2026-07-27T07:00:00.000Z"} +{"doc_count":1264,"split_key":209334,"timestamp":"2026-07-27T07:00:00.000Z"} +{"doc_count":1168,"split_key":51396,"timestamp":"2026-07-27T07:00:00.000Z"} +{"doc_count":1132,"split_key":37963,"timestamp":"2026-07-27T07:00:00.000Z"} +{"doc_count":18372,"split_key":206264,"timestamp":"2026-07-27T08:00:00.000Z"} +{"doc_count":13808,"split_key":209334,"timestamp":"2026-07-27T08:00:00.000Z"} +{"doc_count":1522,"split_key":399244,"timestamp":"2026-07-27T08:00:00.000Z"} +{"doc_count":1047,"split_key":15525,"timestamp":"2026-07-27T08:00:00.000Z"} +{"doc_count":914,"split_key":201401,"timestamp":"2026-07-27T08:00:00.000Z"} +{"doc_count":16784,"split_key":209334,"timestamp":"2026-07-27T09:00:00.000Z"} +{"doc_count":14840,"split_key":206264,"timestamp":"2026-07-27T09:00:00.000Z"} +{"doc_count":7028,"split_key":57724,"timestamp":"2026-07-27T09:00:00.000Z"} +{"doc_count":1213,"split_key":212623,"timestamp":"2026-07-27T09:00:00.000Z"} +{"doc_count":1005,"split_key":15525,"timestamp":"2026-07-27T09:00:00.000Z"} +{"doc_count":14386,"split_key":206264,"timestamp":"2026-07-27T10:00:00.000Z"} +{"doc_count":14079,"split_key":209334,"timestamp":"2026-07-27T10:00:00.000Z"} +{"doc_count":1645,"split_key":399244,"timestamp":"2026-07-27T10:00:00.000Z"} +{"doc_count":1022,"split_key":15525,"timestamp":"2026-07-27T10:00:00.000Z"} +{"doc_count":907,"split_key":37963,"timestamp":"2026-07-27T10:00:00.000Z"} +{"doc_count":15371,"split_key":206264,"timestamp":"2026-07-27T11:00:00.000Z"} +{"doc_count":8666,"split_key":209334,"timestamp":"2026-07-27T11:00:00.000Z"} +{"doc_count":2232,"split_key":37963,"timestamp":"2026-07-27T11:00:00.000Z"} +{"doc_count":1668,"split_key":399244,"timestamp":"2026-07-27T11:00:00.000Z"} +{"doc_count":1099,"split_key":15525,"timestamp":"2026-07-27T11:00:00.000Z"} +{"doc_count":15141,"split_key":206264,"timestamp":"2026-07-27T12:00:00.000Z"} +{"doc_count":6235,"split_key":209334,"timestamp":"2026-07-27T12:00:00.000Z"} +{"doc_count":2266,"split_key":197620,"timestamp":"2026-07-27T12:00:00.000Z"} +{"doc_count":2246,"split_key":54600,"timestamp":"2026-07-27T12:00:00.000Z"} +{"doc_count":1657,"split_key":399244,"timestamp":"2026-07-27T12:00:00.000Z"} +{"doc_count":14916,"split_key":206264,"timestamp":"2026-07-27T13:00:00.000Z"} +{"doc_count":3476,"split_key":209334,"timestamp":"2026-07-27T13:00:00.000Z"} +{"doc_count":2435,"split_key":197620,"timestamp":"2026-07-27T13:00:00.000Z"} +{"doc_count":1653,"split_key":399244,"timestamp":"2026-07-27T13:00:00.000Z"} +{"doc_count":1139,"split_key":16509,"timestamp":"2026-07-27T13:00:00.000Z"} +{"doc_count":14691,"split_key":206264,"timestamp":"2026-07-27T14:00:00.000Z"} +{"doc_count":6398,"split_key":209334,"timestamp":"2026-07-27T14:00:00.000Z"} +{"doc_count":3182,"split_key":54600,"timestamp":"2026-07-27T14:00:00.000Z"} +{"doc_count":1652,"split_key":399244,"timestamp":"2026-07-27T14:00:00.000Z"} +{"doc_count":1063,"split_key":15525,"timestamp":"2026-07-27T14:00:00.000Z"} +{"doc_count":24150,"split_key":54600,"timestamp":"2026-07-27T15:00:00.000Z"} +{"doc_count":18180,"split_key":206264,"timestamp":"2026-07-27T15:00:00.000Z"} +{"doc_count":6472,"split_key":209334,"timestamp":"2026-07-27T15:00:00.000Z"} +{"doc_count":1533,"split_key":399244,"timestamp":"2026-07-27T15:00:00.000Z"} +{"doc_count":1103,"split_key":15525,"timestamp":"2026-07-27T15:00:00.000Z"} +{"doc_count":14876,"split_key":206264,"timestamp":"2026-07-27T16:00:00.000Z"} +{"doc_count":14021,"split_key":54600,"timestamp":"2026-07-27T16:00:00.000Z"} +{"doc_count":7575,"split_key":53850,"timestamp":"2026-07-27T16:00:00.000Z"} +{"doc_count":2784,"split_key":209334,"timestamp":"2026-07-27T16:00:00.000Z"} +{"doc_count":1660,"split_key":399244,"timestamp":"2026-07-27T16:00:00.000Z"} +{"doc_count":14245,"split_key":206264,"timestamp":"2026-07-27T17:00:00.000Z"} +{"doc_count":4764,"split_key":54600,"timestamp":"2026-07-27T17:00:00.000Z"} +{"doc_count":2312,"split_key":53850,"timestamp":"2026-07-27T17:00:00.000Z"} +{"doc_count":1649,"split_key":399244,"timestamp":"2026-07-27T17:00:00.000Z"} +{"doc_count":1311,"split_key":51396,"timestamp":"2026-07-27T17:00:00.000Z"} +{"doc_count":6601,"split_key":206264,"timestamp":"2026-07-27T18:00:00.000Z"} +{"doc_count":4334,"split_key":212623,"timestamp":"2026-07-27T18:00:00.000Z"} +{"doc_count":1665,"split_key":399244,"timestamp":"2026-07-27T18:00:00.000Z"} +{"doc_count":1104,"split_key":15525,"timestamp":"2026-07-27T18:00:00.000Z"} +{"doc_count":682,"split_key":63737,"timestamp":"2026-07-27T18:00:00.000Z"} +{"doc_count":8010,"split_key":206264,"timestamp":"2026-07-27T19:00:00.000Z"} +{"doc_count":2415,"split_key":216246,"timestamp":"2026-07-27T19:00:00.000Z"} +{"doc_count":1658,"split_key":399244,"timestamp":"2026-07-27T19:00:00.000Z"} +{"doc_count":1634,"split_key":212623,"timestamp":"2026-07-27T19:00:00.000Z"} +{"doc_count":1074,"split_key":15525,"timestamp":"2026-07-27T19:00:00.000Z"} +{"doc_count":5193,"split_key":206264,"timestamp":"2026-07-27T20:00:00.000Z"} +{"doc_count":1639,"split_key":399244,"timestamp":"2026-07-27T20:00:00.000Z"} +{"doc_count":1030,"split_key":15525,"timestamp":"2026-07-27T20:00:00.000Z"} +{"doc_count":683,"split_key":63737,"timestamp":"2026-07-27T20:00:00.000Z"} +{"doc_count":609,"split_key":16509,"timestamp":"2026-07-27T20:00:00.000Z"} +{"doc_count":3727,"split_key":206264,"timestamp":"2026-07-27T21:00:00.000Z"} +{"doc_count":1657,"split_key":399244,"timestamp":"2026-07-27T21:00:00.000Z"} +{"doc_count":1292,"split_key":216246,"timestamp":"2026-07-27T21:00:00.000Z"} +{"doc_count":1052,"split_key":396982,"timestamp":"2026-07-27T21:00:00.000Z"} +{"doc_count":1026,"split_key":15525,"timestamp":"2026-07-27T21:00:00.000Z"} +{"doc_count":15108,"split_key":216246,"timestamp":"2026-07-27T22:00:00.000Z"} +{"doc_count":2886,"split_key":206264,"timestamp":"2026-07-27T22:00:00.000Z"} +{"doc_count":1077,"split_key":15525,"timestamp":"2026-07-27T22:00:00.000Z"} +{"doc_count":1042,"split_key":37963,"timestamp":"2026-07-27T22:00:00.000Z"} +{"doc_count":849,"split_key":16509,"timestamp":"2026-07-27T22:00:00.000Z"} +{"doc_count":12674,"split_key":48090,"timestamp":"2026-07-27T23:00:00.000Z"} +{"doc_count":2959,"split_key":206264,"timestamp":"2026-07-27T23:00:00.000Z"} +{"doc_count":1096,"split_key":15525,"timestamp":"2026-07-27T23:00:00.000Z"} +{"doc_count":1090,"split_key":37963,"timestamp":"2026-07-27T23:00:00.000Z"} +{"doc_count":846,"split_key":399244,"timestamp":"2026-07-27T23:00:00.000Z"} +{"doc_count":28924,"split_key":216246,"timestamp":"2026-07-28T00:00:00.000Z"} +{"doc_count":10017,"split_key":14987,"timestamp":"2026-07-28T00:00:00.000Z"} +{"doc_count":5168,"split_key":209334,"timestamp":"2026-07-28T00:00:00.000Z"} +{"doc_count":3682,"split_key":206264,"timestamp":"2026-07-28T00:00:00.000Z"} +{"doc_count":1673,"split_key":399244,"timestamp":"2026-07-28T00:00:00.000Z"} +{"doc_count":6986,"split_key":209334,"timestamp":"2026-07-28T01:00:00.000Z"} +{"doc_count":2975,"split_key":206264,"timestamp":"2026-07-28T01:00:00.000Z"} +{"doc_count":1652,"split_key":399244,"timestamp":"2026-07-28T01:00:00.000Z"} +{"doc_count":1465,"split_key":53850,"timestamp":"2026-07-28T01:00:00.000Z"} +{"doc_count":1298,"split_key":54600,"timestamp":"2026-07-28T01:00:00.000Z"} +{"doc_count":15935,"split_key":54600,"timestamp":"2026-07-28T02:00:00.000Z"} +{"doc_count":8493,"split_key":209334,"timestamp":"2026-07-28T02:00:00.000Z"} +{"doc_count":7577,"split_key":53850,"timestamp":"2026-07-28T02:00:00.000Z"} +{"doc_count":3147,"split_key":206264,"timestamp":"2026-07-28T02:00:00.000Z"} +{"doc_count":1569,"split_key":399244,"timestamp":"2026-07-28T02:00:00.000Z"} +{"doc_count":3518,"split_key":209334,"timestamp":"2026-07-28T03:00:00.000Z"} +{"doc_count":2611,"split_key":206264,"timestamp":"2026-07-28T03:00:00.000Z"} +{"doc_count":1618,"split_key":399244,"timestamp":"2026-07-28T03:00:00.000Z"} +{"doc_count":1378,"split_key":53850,"timestamp":"2026-07-28T03:00:00.000Z"} +{"doc_count":1080,"split_key":15525,"timestamp":"2026-07-28T03:00:00.000Z"} +{"doc_count":8129,"split_key":54600,"timestamp":"2026-07-28T04:00:00.000Z"} +{"doc_count":4229,"split_key":206264,"timestamp":"2026-07-28T04:00:00.000Z"} +{"doc_count":4169,"split_key":53850,"timestamp":"2026-07-28T04:00:00.000Z"} +{"doc_count":1136,"split_key":19429,"timestamp":"2026-07-28T04:00:00.000Z"} +{"doc_count":1040,"split_key":15525,"timestamp":"2026-07-28T04:00:00.000Z"} +{"doc_count":13405,"split_key":54600,"timestamp":"2026-07-28T05:00:00.000Z"} +{"doc_count":7765,"split_key":53850,"timestamp":"2026-07-28T05:00:00.000Z"} +{"doc_count":3188,"split_key":206264,"timestamp":"2026-07-28T05:00:00.000Z"} +{"doc_count":1661,"split_key":399244,"timestamp":"2026-07-28T05:00:00.000Z"} +{"doc_count":1125,"split_key":15525,"timestamp":"2026-07-28T05:00:00.000Z"} +{"doc_count":12207,"split_key":206264,"timestamp":"2026-07-28T06:00:00.000Z"} +{"doc_count":4153,"split_key":54600,"timestamp":"2026-07-28T06:00:00.000Z"} +{"doc_count":2210,"split_key":53850,"timestamp":"2026-07-28T06:00:00.000Z"} +{"doc_count":1679,"split_key":399244,"timestamp":"2026-07-28T06:00:00.000Z"} +{"doc_count":1138,"split_key":15525,"timestamp":"2026-07-28T06:00:00.000Z"} +{"doc_count":28821,"split_key":206264,"timestamp":"2026-07-28T07:00:00.000Z"} +{"doc_count":9548,"split_key":54600,"timestamp":"2026-07-28T07:00:00.000Z"} +{"doc_count":4679,"split_key":53850,"timestamp":"2026-07-28T07:00:00.000Z"} +{"doc_count":1671,"split_key":214653,"timestamp":"2026-07-28T07:00:00.000Z"} +{"doc_count":1641,"split_key":399244,"timestamp":"2026-07-28T07:00:00.000Z"} +{"doc_count":29476,"split_key":206264,"timestamp":"2026-07-28T08:00:00.000Z"} +{"doc_count":7428,"split_key":54600,"timestamp":"2026-07-28T08:00:00.000Z"} +{"doc_count":3808,"split_key":53850,"timestamp":"2026-07-28T08:00:00.000Z"} +{"doc_count":3452,"split_key":209334,"timestamp":"2026-07-28T08:00:00.000Z"} +{"doc_count":1671,"split_key":399244,"timestamp":"2026-07-28T08:00:00.000Z"} +{"doc_count":28677,"split_key":206264,"timestamp":"2026-07-28T09:00:00.000Z"} +{"doc_count":4645,"split_key":209334,"timestamp":"2026-07-28T09:00:00.000Z"} +{"doc_count":1657,"split_key":399244,"timestamp":"2026-07-28T09:00:00.000Z"} +{"doc_count":1164,"split_key":15525,"timestamp":"2026-07-28T09:00:00.000Z"} +{"doc_count":1056,"split_key":63737,"timestamp":"2026-07-28T09:00:00.000Z"} +{"doc_count":28263,"split_key":206264,"timestamp":"2026-07-28T10:00:00.000Z"} +{"doc_count":2946,"split_key":209334,"timestamp":"2026-07-28T10:00:00.000Z"} +{"doc_count":1687,"split_key":212623,"timestamp":"2026-07-28T10:00:00.000Z"} +{"doc_count":1390,"split_key":399244,"timestamp":"2026-07-28T10:00:00.000Z"} +{"doc_count":1207,"split_key":15525,"timestamp":"2026-07-28T10:00:00.000Z"} +{"doc_count":26485,"split_key":206264,"timestamp":"2026-07-28T11:00:00.000Z"} +{"doc_count":6505,"split_key":209334,"timestamp":"2026-07-28T11:00:00.000Z"} +{"doc_count":1662,"split_key":399244,"timestamp":"2026-07-28T11:00:00.000Z"} +{"doc_count":1634,"split_key":45102,"timestamp":"2026-07-28T11:00:00.000Z"} +{"doc_count":1147,"split_key":15525,"timestamp":"2026-07-28T11:00:00.000Z"} +{"doc_count":25891,"split_key":206264,"timestamp":"2026-07-28T12:00:00.000Z"} +{"doc_count":12750,"split_key":48090,"timestamp":"2026-07-28T12:00:00.000Z"} +{"doc_count":6578,"split_key":209334,"timestamp":"2026-07-28T12:00:00.000Z"} +{"doc_count":2138,"split_key":198418,"timestamp":"2026-07-28T12:00:00.000Z"} +{"doc_count":1668,"split_key":399244,"timestamp":"2026-07-28T12:00:00.000Z"} +{"doc_count":29812,"split_key":206264,"timestamp":"2026-07-28T13:00:00.000Z"} +{"doc_count":3500,"split_key":209334,"timestamp":"2026-07-28T13:00:00.000Z"} +{"doc_count":2131,"split_key":198418,"timestamp":"2026-07-28T13:00:00.000Z"} +{"doc_count":1656,"split_key":399244,"timestamp":"2026-07-28T13:00:00.000Z"} +{"doc_count":1374,"split_key":273976,"timestamp":"2026-07-28T13:00:00.000Z"} +{"doc_count":21562,"split_key":206264,"timestamp":"2026-07-28T14:00:00.000Z"} +{"doc_count":6598,"split_key":209334,"timestamp":"2026-07-28T14:00:00.000Z"} +{"doc_count":2117,"split_key":198418,"timestamp":"2026-07-28T14:00:00.000Z"} +{"doc_count":1644,"split_key":399244,"timestamp":"2026-07-28T14:00:00.000Z"} +{"doc_count":1144,"split_key":15525,"timestamp":"2026-07-28T14:00:00.000Z"} +{"doc_count":30097,"split_key":206264,"timestamp":"2026-07-28T15:00:00.000Z"} +{"doc_count":7226,"split_key":209334,"timestamp":"2026-07-28T15:00:00.000Z"} +{"doc_count":2138,"split_key":198418,"timestamp":"2026-07-28T15:00:00.000Z"} +{"doc_count":1135,"split_key":15525,"timestamp":"2026-07-28T15:00:00.000Z"} +{"doc_count":655,"split_key":37963,"timestamp":"2026-07-28T15:00:00.000Z"} +{"doc_count":26731,"split_key":206264,"timestamp":"2026-07-28T16:00:00.000Z"} +{"doc_count":3674,"split_key":54600,"timestamp":"2026-07-28T16:00:00.000Z"} +{"doc_count":3451,"split_key":53850,"timestamp":"2026-07-28T16:00:00.000Z"} +{"doc_count":3099,"split_key":209334,"timestamp":"2026-07-28T16:00:00.000Z"} +{"doc_count":2048,"split_key":198418,"timestamp":"2026-07-28T16:00:00.000Z"} +{"doc_count":27653,"split_key":206264,"timestamp":"2026-07-28T17:00:00.000Z"} +{"doc_count":10717,"split_key":54600,"timestamp":"2026-07-28T17:00:00.000Z"} +{"doc_count":4070,"split_key":53850,"timestamp":"2026-07-28T17:00:00.000Z"} +{"doc_count":2420,"split_key":209334,"timestamp":"2026-07-28T17:00:00.000Z"} +{"doc_count":1105,"split_key":15525,"timestamp":"2026-07-28T17:00:00.000Z"} +{"doc_count":27087,"split_key":206264,"timestamp":"2026-07-28T18:00:00.000Z"} +{"doc_count":2478,"split_key":54600,"timestamp":"2026-07-28T18:00:00.000Z"} +{"doc_count":1498,"split_key":53850,"timestamp":"2026-07-28T18:00:00.000Z"} +{"doc_count":1040,"split_key":15525,"timestamp":"2026-07-28T18:00:00.000Z"} +{"doc_count":662,"split_key":45102,"timestamp":"2026-07-28T18:00:00.000Z"} +{"doc_count":27245,"split_key":206264,"timestamp":"2026-07-28T19:00:00.000Z"} +{"doc_count":3406,"split_key":57724,"timestamp":"2026-07-28T19:00:00.000Z"} +{"doc_count":1409,"split_key":37963,"timestamp":"2026-07-28T19:00:00.000Z"} +{"doc_count":1104,"split_key":15525,"timestamp":"2026-07-28T19:00:00.000Z"} +{"doc_count":543,"split_key":16509,"timestamp":"2026-07-28T19:00:00.000Z"} +{"doc_count":30834,"split_key":206264,"timestamp":"2026-07-28T20:00:00.000Z"} +{"doc_count":5071,"split_key":57724,"timestamp":"2026-07-28T20:00:00.000Z"} +{"doc_count":1064,"split_key":15525,"timestamp":"2026-07-28T20:00:00.000Z"} +{"doc_count":753,"split_key":37963,"timestamp":"2026-07-28T20:00:00.000Z"} +{"doc_count":600,"split_key":63737,"timestamp":"2026-07-28T20:00:00.000Z"} +{"doc_count":26947,"split_key":206264,"timestamp":"2026-07-28T21:00:00.000Z"} +{"doc_count":2100,"split_key":57724,"timestamp":"2026-07-28T21:00:00.000Z"} +{"doc_count":1077,"split_key":15525,"timestamp":"2026-07-28T21:00:00.000Z"} +{"doc_count":846,"split_key":396982,"timestamp":"2026-07-28T21:00:00.000Z"} +{"doc_count":685,"split_key":215762,"timestamp":"2026-07-28T21:00:00.000Z"} +{"doc_count":28240,"split_key":206264,"timestamp":"2026-07-28T22:00:00.000Z"} +{"doc_count":1059,"split_key":15525,"timestamp":"2026-07-28T22:00:00.000Z"} +{"doc_count":550,"split_key":138915,"timestamp":"2026-07-28T22:00:00.000Z"} +{"doc_count":524,"split_key":209854,"timestamp":"2026-07-28T22:00:00.000Z"} +{"doc_count":484,"split_key":396982,"timestamp":"2026-07-28T22:00:00.000Z"} +{"doc_count":26035,"split_key":206264,"timestamp":"2026-07-28T23:00:00.000Z"} +{"doc_count":1121,"split_key":15525,"timestamp":"2026-07-28T23:00:00.000Z"} +{"doc_count":787,"split_key":212623,"timestamp":"2026-07-28T23:00:00.000Z"} +{"doc_count":606,"split_key":396982,"timestamp":"2026-07-28T23:00:00.000Z"} +{"doc_count":589,"split_key":57724,"timestamp":"2026-07-28T23:00:00.000Z"} +{"doc_count":27012,"split_key":206264,"timestamp":"2026-07-29T00:00:00.000Z"} +{"doc_count":12626,"split_key":209334,"timestamp":"2026-07-29T00:00:00.000Z"} +{"doc_count":3644,"split_key":14061,"timestamp":"2026-07-29T00:00:00.000Z"} +{"doc_count":1137,"split_key":15525,"timestamp":"2026-07-29T00:00:00.000Z"} +{"doc_count":564,"split_key":63737,"timestamp":"2026-07-29T00:00:00.000Z"} +{"doc_count":29913,"split_key":206264,"timestamp":"2026-07-29T01:00:00.000Z"} +{"doc_count":27742,"split_key":209334,"timestamp":"2026-07-29T01:00:00.000Z"} +{"doc_count":14734,"split_key":14061,"timestamp":"2026-07-29T01:00:00.000Z"} +{"doc_count":4787,"split_key":20473,"timestamp":"2026-07-29T01:00:00.000Z"} +{"doc_count":1142,"split_key":15525,"timestamp":"2026-07-29T01:00:00.000Z"} +{"doc_count":31962,"split_key":209334,"timestamp":"2026-07-29T02:00:00.000Z"} +{"doc_count":27371,"split_key":206264,"timestamp":"2026-07-29T02:00:00.000Z"} +{"doc_count":5865,"split_key":20473,"timestamp":"2026-07-29T02:00:00.000Z"} +{"doc_count":4221,"split_key":14061,"timestamp":"2026-07-29T02:00:00.000Z"} +{"doc_count":1222,"split_key":63737,"timestamp":"2026-07-29T02:00:00.000Z"} +{"doc_count":27010,"split_key":206264,"timestamp":"2026-07-29T03:00:00.000Z"} +{"doc_count":22675,"split_key":209334,"timestamp":"2026-07-29T03:00:00.000Z"} +{"doc_count":4626,"split_key":20473,"timestamp":"2026-07-29T03:00:00.000Z"} +{"doc_count":1171,"split_key":63737,"timestamp":"2026-07-29T03:00:00.000Z"} +{"doc_count":1069,"split_key":15525,"timestamp":"2026-07-29T03:00:00.000Z"} +{"doc_count":27377,"split_key":206264,"timestamp":"2026-07-29T04:00:00.000Z"} +{"doc_count":3741,"split_key":20473,"timestamp":"2026-07-29T04:00:00.000Z"} +{"doc_count":3363,"split_key":54600,"timestamp":"2026-07-29T04:00:00.000Z"} +{"doc_count":1599,"split_key":45102,"timestamp":"2026-07-29T04:00:00.000Z"} +{"doc_count":1282,"split_key":53850,"timestamp":"2026-07-29T04:00:00.000Z"} +{"doc_count":26739,"split_key":206264,"timestamp":"2026-07-29T05:00:00.000Z"} +{"doc_count":5869,"split_key":20473,"timestamp":"2026-07-29T05:00:00.000Z"} +{"doc_count":2702,"split_key":54600,"timestamp":"2026-07-29T05:00:00.000Z"} +{"doc_count":2087,"split_key":53850,"timestamp":"2026-07-29T05:00:00.000Z"} +{"doc_count":1236,"split_key":63737,"timestamp":"2026-07-29T05:00:00.000Z"} +{"doc_count":26860,"split_key":206264,"timestamp":"2026-07-29T06:00:00.000Z"} +{"doc_count":1220,"split_key":63737,"timestamp":"2026-07-29T06:00:00.000Z"} +{"doc_count":1131,"split_key":55933,"timestamp":"2026-07-29T06:00:00.000Z"} +{"doc_count":1031,"split_key":15525,"timestamp":"2026-07-29T06:00:00.000Z"} +{"doc_count":1022,"split_key":58224,"timestamp":"2026-07-29T06:00:00.000Z"} +{"doc_count":3054,"split_key":4766,"timestamp":"2026-07-29T07:00:00.000Z"} +{"doc_count":2803,"split_key":209334,"timestamp":"2026-07-29T07:00:00.000Z"} +{"doc_count":1263,"split_key":63737,"timestamp":"2026-07-29T07:00:00.000Z"} +{"doc_count":1199,"split_key":25198,"timestamp":"2026-07-29T07:00:00.000Z"} +{"doc_count":1025,"split_key":15525,"timestamp":"2026-07-29T07:00:00.000Z"} +{"doc_count":10946,"split_key":209334,"timestamp":"2026-07-29T08:00:00.000Z"} +{"doc_count":6193,"split_key":4766,"timestamp":"2026-07-29T08:00:00.000Z"} +{"doc_count":1469,"split_key":47583,"timestamp":"2026-07-29T08:00:00.000Z"} +{"doc_count":1203,"split_key":37963,"timestamp":"2026-07-29T08:00:00.000Z"} +{"doc_count":991,"split_key":15525,"timestamp":"2026-07-29T08:00:00.000Z"} +{"doc_count":17436,"split_key":209334,"timestamp":"2026-07-29T09:00:00.000Z"} +{"doc_count":6504,"split_key":4766,"timestamp":"2026-07-29T09:00:00.000Z"} +{"doc_count":1315,"split_key":37963,"timestamp":"2026-07-29T09:00:00.000Z"} +{"doc_count":1269,"split_key":400619,"timestamp":"2026-07-29T09:00:00.000Z"} +{"doc_count":995,"split_key":15525,"timestamp":"2026-07-29T09:00:00.000Z"} +{"doc_count":15073,"split_key":209334,"timestamp":"2026-07-29T10:00:00.000Z"} +{"doc_count":1672,"split_key":212623,"timestamp":"2026-07-29T10:00:00.000Z"} +{"doc_count":1295,"split_key":37963,"timestamp":"2026-07-29T10:00:00.000Z"} +{"doc_count":1240,"split_key":58466,"timestamp":"2026-07-29T10:00:00.000Z"} +{"doc_count":1010,"split_key":15525,"timestamp":"2026-07-29T10:00:00.000Z"} +{"doc_count":25717,"split_key":209334,"timestamp":"2026-07-29T11:00:00.000Z"} +{"doc_count":1592,"split_key":45102,"timestamp":"2026-07-29T11:00:00.000Z"} +{"doc_count":1005,"split_key":15525,"timestamp":"2026-07-29T11:00:00.000Z"} +{"doc_count":701,"split_key":37963,"timestamp":"2026-07-29T11:00:00.000Z"} +{"doc_count":655,"split_key":16509,"timestamp":"2026-07-29T11:00:00.000Z"} +{"doc_count":16372,"split_key":209334,"timestamp":"2026-07-29T12:00:00.000Z"} +{"doc_count":1858,"split_key":34254,"timestamp":"2026-07-29T12:00:00.000Z"} +{"doc_count":1587,"split_key":45102,"timestamp":"2026-07-29T12:00:00.000Z"} +{"doc_count":933,"split_key":15525,"timestamp":"2026-07-29T12:00:00.000Z"} +{"doc_count":718,"split_key":16509,"timestamp":"2026-07-29T12:00:00.000Z"} +{"doc_count":24137,"split_key":209334,"timestamp":"2026-07-29T13:00:00.000Z"} +{"doc_count":1917,"split_key":34254,"timestamp":"2026-07-29T13:00:00.000Z"} +{"doc_count":733,"split_key":45102,"timestamp":"2026-07-29T13:00:00.000Z"} +{"doc_count":695,"split_key":16509,"timestamp":"2026-07-29T13:00:00.000Z"} +{"doc_count":564,"split_key":63737,"timestamp":"2026-07-29T13:00:00.000Z"} +{"doc_count":10773,"split_key":209334,"timestamp":"2026-07-29T14:00:00.000Z"} +{"doc_count":1412,"split_key":4907,"timestamp":"2026-07-29T14:00:00.000Z"} +{"doc_count":1192,"split_key":63737,"timestamp":"2026-07-29T14:00:00.000Z"} +{"doc_count":836,"split_key":16509,"timestamp":"2026-07-29T14:00:00.000Z"} +{"doc_count":633,"split_key":51396,"timestamp":"2026-07-29T14:00:00.000Z"} +{"doc_count":27022,"split_key":209334,"timestamp":"2026-07-29T15:00:00.000Z"} +{"doc_count":1039,"split_key":63737,"timestamp":"2026-07-29T15:00:00.000Z"} +{"doc_count":881,"split_key":4907,"timestamp":"2026-07-29T15:00:00.000Z"} +{"doc_count":785,"split_key":51396,"timestamp":"2026-07-29T15:00:00.000Z"} +{"doc_count":521,"split_key":16509,"timestamp":"2026-07-29T15:00:00.000Z"} +{"doc_count":23392,"split_key":209334,"timestamp":"2026-07-29T16:00:00.000Z"} +{"doc_count":959,"split_key":63737,"timestamp":"2026-07-29T16:00:00.000Z"} +{"doc_count":642,"split_key":51396,"timestamp":"2026-07-29T16:00:00.000Z"} +{"doc_count":567,"split_key":37963,"timestamp":"2026-07-29T16:00:00.000Z"} +{"doc_count":497,"split_key":205089,"timestamp":"2026-07-29T16:00:00.000Z"} +{"doc_count":3717,"split_key":209334,"timestamp":"2026-07-29T17:00:00.000Z"} +{"doc_count":1305,"split_key":6698,"timestamp":"2026-07-29T17:00:00.000Z"} +{"doc_count":1084,"split_key":30860,"timestamp":"2026-07-29T17:00:00.000Z"} +{"doc_count":984,"split_key":63737,"timestamp":"2026-07-29T17:00:00.000Z"} +{"doc_count":733,"split_key":16509,"timestamp":"2026-07-29T17:00:00.000Z"} +{"doc_count":1198,"split_key":63737,"timestamp":"2026-07-29T18:00:00.000Z"} +{"doc_count":832,"split_key":209334,"timestamp":"2026-07-29T18:00:00.000Z"} +{"doc_count":679,"split_key":16509,"timestamp":"2026-07-29T18:00:00.000Z"} +{"doc_count":671,"split_key":37963,"timestamp":"2026-07-29T18:00:00.000Z"} +{"doc_count":669,"split_key":396982,"timestamp":"2026-07-29T18:00:00.000Z"} +{"doc_count":2034,"split_key":209334,"timestamp":"2026-07-29T19:00:00.000Z"} +{"doc_count":1161,"split_key":63737,"timestamp":"2026-07-29T19:00:00.000Z"} +{"doc_count":1108,"split_key":37963,"timestamp":"2026-07-29T19:00:00.000Z"} +{"doc_count":615,"split_key":8075,"timestamp":"2026-07-29T19:00:00.000Z"} +{"doc_count":460,"split_key":396982,"timestamp":"2026-07-29T19:00:00.000Z"} +{"doc_count":1585,"split_key":63737,"timestamp":"2026-07-29T20:00:00.000Z"} +{"doc_count":1532,"split_key":37963,"timestamp":"2026-07-29T20:00:00.000Z"} +{"doc_count":881,"split_key":4907,"timestamp":"2026-07-29T20:00:00.000Z"} +{"doc_count":847,"split_key":209334,"timestamp":"2026-07-29T20:00:00.000Z"} +{"doc_count":767,"split_key":16276,"timestamp":"2026-07-29T20:00:00.000Z"} +{"doc_count":2744,"split_key":57724,"timestamp":"2026-07-29T21:00:00.000Z"} +{"doc_count":1673,"split_key":209334,"timestamp":"2026-07-29T21:00:00.000Z"} +{"doc_count":1272,"split_key":37963,"timestamp":"2026-07-29T21:00:00.000Z"} +{"doc_count":1183,"split_key":4907,"timestamp":"2026-07-29T21:00:00.000Z"} +{"doc_count":589,"split_key":396982,"timestamp":"2026-07-29T21:00:00.000Z"} +{"doc_count":3773,"split_key":57724,"timestamp":"2026-07-29T22:00:00.000Z"} +{"doc_count":1375,"split_key":209334,"timestamp":"2026-07-29T22:00:00.000Z"} +{"doc_count":1194,"split_key":4907,"timestamp":"2026-07-29T22:00:00.000Z"} +{"doc_count":946,"split_key":396982,"timestamp":"2026-07-29T22:00:00.000Z"} +{"doc_count":834,"split_key":37963,"timestamp":"2026-07-29T22:00:00.000Z"} +{"doc_count":3298,"split_key":57724,"timestamp":"2026-07-29T23:00:00.000Z"} +{"doc_count":1145,"split_key":209334,"timestamp":"2026-07-29T23:00:00.000Z"} +{"doc_count":754,"split_key":209854,"timestamp":"2026-07-29T23:00:00.000Z"} +{"doc_count":624,"split_key":16509,"timestamp":"2026-07-29T23:00:00.000Z"} +{"doc_count":540,"split_key":51167,"timestamp":"2026-07-29T23:00:00.000Z"} +{"doc_count":9284,"split_key":209334,"timestamp":"2026-07-30T00:00:00.000Z"} +{"doc_count":1257,"split_key":3462,"timestamp":"2026-07-30T00:00:00.000Z"} +{"doc_count":671,"split_key":215762,"timestamp":"2026-07-30T00:00:00.000Z"} +{"doc_count":639,"split_key":396982,"timestamp":"2026-07-30T00:00:00.000Z"} +{"doc_count":614,"split_key":16509,"timestamp":"2026-07-30T00:00:00.000Z"} +{"doc_count":25479,"split_key":209334,"timestamp":"2026-07-30T01:00:00.000Z"} +{"doc_count":4869,"split_key":4766,"timestamp":"2026-07-30T01:00:00.000Z"} +{"doc_count":3027,"split_key":20473,"timestamp":"2026-07-30T01:00:00.000Z"} +{"doc_count":1121,"split_key":398101,"timestamp":"2026-07-30T01:00:00.000Z"} +{"doc_count":891,"split_key":201401,"timestamp":"2026-07-30T01:00:00.000Z"} +{"doc_count":18935,"split_key":209334,"timestamp":"2026-07-30T02:00:00.000Z"} +{"doc_count":7665,"split_key":4766,"timestamp":"2026-07-30T02:00:00.000Z"} +{"doc_count":5564,"split_key":20473,"timestamp":"2026-07-30T02:00:00.000Z"} +{"doc_count":1540,"split_key":4907,"timestamp":"2026-07-30T02:00:00.000Z"} +{"doc_count":1184,"split_key":396982,"timestamp":"2026-07-30T02:00:00.000Z"} +{"doc_count":19968,"split_key":209334,"timestamp":"2026-07-30T03:00:00.000Z"} +{"doc_count":2248,"split_key":4766,"timestamp":"2026-07-30T03:00:00.000Z"} +{"doc_count":1607,"split_key":20473,"timestamp":"2026-07-30T03:00:00.000Z"} +{"doc_count":868,"split_key":398101,"timestamp":"2026-07-30T03:00:00.000Z"} +{"doc_count":857,"split_key":45102,"timestamp":"2026-07-30T03:00:00.000Z"} +{"doc_count":2741,"split_key":209334,"timestamp":"2026-07-30T04:00:00.000Z"} +{"doc_count":1653,"split_key":4907,"timestamp":"2026-07-30T04:00:00.000Z"} +{"doc_count":1550,"split_key":45102,"timestamp":"2026-07-30T04:00:00.000Z"} +{"doc_count":689,"split_key":396982,"timestamp":"2026-07-30T04:00:00.000Z"} +{"doc_count":636,"split_key":16509,"timestamp":"2026-07-30T04:00:00.000Z"} +{"doc_count":1593,"split_key":45102,"timestamp":"2026-07-30T05:00:00.000Z"} +{"doc_count":1167,"split_key":4907,"timestamp":"2026-07-30T05:00:00.000Z"} +{"doc_count":989,"split_key":396982,"timestamp":"2026-07-30T05:00:00.000Z"} +{"doc_count":852,"split_key":209334,"timestamp":"2026-07-30T05:00:00.000Z"} +{"doc_count":737,"split_key":32708,"timestamp":"2026-07-30T05:00:00.000Z"} +{"doc_count":1123,"split_key":45102,"timestamp":"2026-07-30T06:00:00.000Z"} +{"doc_count":865,"split_key":396982,"timestamp":"2026-07-30T06:00:00.000Z"} +{"doc_count":844,"split_key":4907,"timestamp":"2026-07-30T06:00:00.000Z"} +{"doc_count":777,"split_key":135377,"timestamp":"2026-07-30T06:00:00.000Z"} +{"doc_count":682,"split_key":8359,"timestamp":"2026-07-30T06:00:00.000Z"} +{"doc_count":1803,"split_key":63949,"timestamp":"2026-07-30T07:00:00.000Z"} +{"doc_count":1660,"split_key":4907,"timestamp":"2026-07-30T07:00:00.000Z"} +{"doc_count":1397,"split_key":209334,"timestamp":"2026-07-30T07:00:00.000Z"} +{"doc_count":1008,"split_key":45102,"timestamp":"2026-07-30T07:00:00.000Z"} +{"doc_count":608,"split_key":396982,"timestamp":"2026-07-30T07:00:00.000Z"} +{"doc_count":1715,"split_key":4907,"timestamp":"2026-07-30T08:00:00.000Z"} +{"doc_count":1023,"split_key":209334,"timestamp":"2026-07-30T08:00:00.000Z"} +{"doc_count":747,"split_key":201401,"timestamp":"2026-07-30T08:00:00.000Z"} +{"doc_count":723,"split_key":51396,"timestamp":"2026-07-30T08:00:00.000Z"} +{"doc_count":594,"split_key":270764,"timestamp":"2026-07-30T08:00:00.000Z"} +{"doc_count":1710,"split_key":4907,"timestamp":"2026-07-30T09:00:00.000Z"} +{"doc_count":1010,"split_key":209334,"timestamp":"2026-07-30T09:00:00.000Z"} +{"doc_count":824,"split_key":398101,"timestamp":"2026-07-30T09:00:00.000Z"} +{"doc_count":725,"split_key":24560,"timestamp":"2026-07-30T09:00:00.000Z"} +{"doc_count":668,"split_key":16509,"timestamp":"2026-07-30T09:00:00.000Z"} +{"doc_count":1713,"split_key":4907,"timestamp":"2026-07-30T10:00:00.000Z"} +{"doc_count":890,"split_key":205089,"timestamp":"2026-07-30T10:00:00.000Z"} +{"doc_count":834,"split_key":398101,"timestamp":"2026-07-30T10:00:00.000Z"} +{"doc_count":727,"split_key":16509,"timestamp":"2026-07-30T10:00:00.000Z"} +{"doc_count":681,"split_key":45102,"timestamp":"2026-07-30T10:00:00.000Z"} +{"doc_count":1713,"split_key":63949,"timestamp":"2026-07-30T11:00:00.000Z"} +{"doc_count":1691,"split_key":16509,"timestamp":"2026-07-30T11:00:00.000Z"} +{"doc_count":1242,"split_key":30860,"timestamp":"2026-07-30T11:00:00.000Z"} +{"doc_count":1140,"split_key":209334,"timestamp":"2026-07-30T11:00:00.000Z"} +{"doc_count":1089,"split_key":45102,"timestamp":"2026-07-30T11:00:00.000Z"} +{"doc_count":8186,"split_key":209334,"timestamp":"2026-07-30T12:00:00.000Z"} +{"doc_count":7867,"split_key":34254,"timestamp":"2026-07-30T12:00:00.000Z"} +{"doc_count":3402,"split_key":16509,"timestamp":"2026-07-30T12:00:00.000Z"} +{"doc_count":1201,"split_key":51396,"timestamp":"2026-07-30T12:00:00.000Z"} +{"doc_count":1166,"split_key":45102,"timestamp":"2026-07-30T12:00:00.000Z"} +{"doc_count":17039,"split_key":209334,"timestamp":"2026-07-30T13:00:00.000Z"} +{"doc_count":4204,"split_key":34254,"timestamp":"2026-07-30T13:00:00.000Z"} +{"doc_count":3333,"split_key":4907,"timestamp":"2026-07-30T13:00:00.000Z"} +{"doc_count":821,"split_key":201401,"timestamp":"2026-07-30T13:00:00.000Z"} +{"doc_count":640,"split_key":45102,"timestamp":"2026-07-30T13:00:00.000Z"} +{"doc_count":16777,"split_key":209334,"timestamp":"2026-07-30T14:00:00.000Z"} +{"doc_count":6352,"split_key":34254,"timestamp":"2026-07-30T14:00:00.000Z"} +{"doc_count":3020,"split_key":4907,"timestamp":"2026-07-30T14:00:00.000Z"} +{"doc_count":835,"split_key":201401,"timestamp":"2026-07-30T14:00:00.000Z"} +{"doc_count":695,"split_key":45899,"timestamp":"2026-07-30T14:00:00.000Z"} +{"doc_count":17481,"split_key":209334,"timestamp":"2026-07-30T15:00:00.000Z"} +{"doc_count":6849,"split_key":34254,"timestamp":"2026-07-30T15:00:00.000Z"} +{"doc_count":3029,"split_key":4907,"timestamp":"2026-07-30T15:00:00.000Z"} +{"doc_count":821,"split_key":201401,"timestamp":"2026-07-30T15:00:00.000Z"} +{"doc_count":722,"split_key":45102,"timestamp":"2026-07-30T15:00:00.000Z"} +{"doc_count":17095,"split_key":209334,"timestamp":"2026-07-30T16:00:00.000Z"} +{"doc_count":2435,"split_key":4907,"timestamp":"2026-07-30T16:00:00.000Z"} +{"doc_count":2122,"split_key":34254,"timestamp":"2026-07-30T16:00:00.000Z"} +{"doc_count":1010,"split_key":45102,"timestamp":"2026-07-30T16:00:00.000Z"} +{"doc_count":827,"split_key":201401,"timestamp":"2026-07-30T16:00:00.000Z"} +{"doc_count":16858,"split_key":209334,"timestamp":"2026-07-30T17:00:00.000Z"} +{"doc_count":1956,"split_key":34254,"timestamp":"2026-07-30T17:00:00.000Z"} +{"doc_count":923,"split_key":45102,"timestamp":"2026-07-30T17:00:00.000Z"} +{"doc_count":780,"split_key":212623,"timestamp":"2026-07-30T17:00:00.000Z"} +{"doc_count":767,"split_key":396982,"timestamp":"2026-07-30T17:00:00.000Z"} +{"doc_count":1760,"split_key":209334,"timestamp":"2026-07-30T18:00:00.000Z"} +{"doc_count":1425,"split_key":4907,"timestamp":"2026-07-30T18:00:00.000Z"} +{"doc_count":795,"split_key":51396,"timestamp":"2026-07-30T18:00:00.000Z"} +{"doc_count":710,"split_key":16509,"timestamp":"2026-07-30T18:00:00.000Z"} +{"doc_count":578,"split_key":396982,"timestamp":"2026-07-30T18:00:00.000Z"} +{"doc_count":2088,"split_key":209334,"timestamp":"2026-07-30T19:00:00.000Z"} +{"doc_count":727,"split_key":16509,"timestamp":"2026-07-30T19:00:00.000Z"} +{"doc_count":601,"split_key":396982,"timestamp":"2026-07-30T19:00:00.000Z"} +{"doc_count":476,"split_key":213412,"timestamp":"2026-07-30T19:00:00.000Z"} +{"doc_count":461,"split_key":45102,"timestamp":"2026-07-30T19:00:00.000Z"} +{"doc_count":4302,"split_key":34254,"timestamp":"2026-07-30T20:00:00.000Z"} +{"doc_count":2847,"split_key":57724,"timestamp":"2026-07-30T20:00:00.000Z"} +{"doc_count":1508,"split_key":399244,"timestamp":"2026-07-30T20:00:00.000Z"} +{"doc_count":1160,"split_key":209334,"timestamp":"2026-07-30T20:00:00.000Z"} +{"doc_count":973,"split_key":14061,"timestamp":"2026-07-30T20:00:00.000Z"} +{"doc_count":8376,"split_key":34254,"timestamp":"2026-07-30T21:00:00.000Z"} +{"doc_count":6003,"split_key":57724,"timestamp":"2026-07-30T21:00:00.000Z"} +{"doc_count":836,"split_key":51396,"timestamp":"2026-07-30T21:00:00.000Z"} +{"doc_count":786,"split_key":396982,"timestamp":"2026-07-30T21:00:00.000Z"} +{"doc_count":779,"split_key":4907,"timestamp":"2026-07-30T21:00:00.000Z"} +{"doc_count":4345,"split_key":57724,"timestamp":"2026-07-30T22:00:00.000Z"} +{"doc_count":1310,"split_key":4907,"timestamp":"2026-07-30T22:00:00.000Z"} +{"doc_count":710,"split_key":205089,"timestamp":"2026-07-30T22:00:00.000Z"} +{"doc_count":621,"split_key":16509,"timestamp":"2026-07-30T22:00:00.000Z"} +{"doc_count":609,"split_key":396982,"timestamp":"2026-07-30T22:00:00.000Z"} +{"doc_count":1275,"split_key":209334,"timestamp":"2026-07-30T23:00:00.000Z"} +{"doc_count":762,"split_key":51396,"timestamp":"2026-07-30T23:00:00.000Z"} +{"doc_count":657,"split_key":45899,"timestamp":"2026-07-30T23:00:00.000Z"} +{"doc_count":576,"split_key":396982,"timestamp":"2026-07-30T23:00:00.000Z"} +{"doc_count":540,"split_key":16509,"timestamp":"2026-07-30T23:00:00.000Z"} +{"doc_count":1649,"split_key":209334,"timestamp":"2026-07-31T00:00:00.000Z"} +{"doc_count":666,"split_key":16509,"timestamp":"2026-07-31T00:00:00.000Z"} +{"doc_count":609,"split_key":399244,"timestamp":"2026-07-31T00:00:00.000Z"} +{"doc_count":564,"split_key":396982,"timestamp":"2026-07-31T00:00:00.000Z"} +{"doc_count":382,"split_key":197540,"timestamp":"2026-07-31T00:00:00.000Z"} +{"doc_count":3368,"split_key":209334,"timestamp":"2026-07-31T01:00:00.000Z"} +{"doc_count":817,"split_key":396982,"timestamp":"2026-07-31T01:00:00.000Z"} +{"doc_count":687,"split_key":16509,"timestamp":"2026-07-31T01:00:00.000Z"} +{"doc_count":666,"split_key":399244,"timestamp":"2026-07-31T01:00:00.000Z"} +{"doc_count":563,"split_key":4907,"timestamp":"2026-07-31T01:00:00.000Z"} +{"doc_count":4537,"split_key":209334,"timestamp":"2026-07-31T02:00:00.000Z"} +{"doc_count":2140,"split_key":4907,"timestamp":"2026-07-31T02:00:00.000Z"} +{"doc_count":1250,"split_key":45102,"timestamp":"2026-07-31T02:00:00.000Z"} +{"doc_count":1242,"split_key":16509,"timestamp":"2026-07-31T02:00:00.000Z"} +{"doc_count":664,"split_key":45899,"timestamp":"2026-07-31T02:00:00.000Z"} +{"doc_count":8951,"split_key":209334,"timestamp":"2026-07-31T03:00:00.000Z"} +{"doc_count":1390,"split_key":45102,"timestamp":"2026-07-31T03:00:00.000Z"} +{"doc_count":828,"split_key":16509,"timestamp":"2026-07-31T03:00:00.000Z"} +{"doc_count":663,"split_key":45899,"timestamp":"2026-07-31T03:00:00.000Z"} +{"doc_count":652,"split_key":396982,"timestamp":"2026-07-31T03:00:00.000Z"} +{"doc_count":12209,"split_key":209334,"timestamp":"2026-07-31T04:00:00.000Z"} +{"doc_count":1216,"split_key":45102,"timestamp":"2026-07-31T04:00:00.000Z"} +{"doc_count":886,"split_key":16509,"timestamp":"2026-07-31T04:00:00.000Z"} +{"doc_count":810,"split_key":399244,"timestamp":"2026-07-31T04:00:00.000Z"} +{"doc_count":719,"split_key":396982,"timestamp":"2026-07-31T04:00:00.000Z"} +{"doc_count":11030,"split_key":209334,"timestamp":"2026-07-31T05:00:00.000Z"} +{"doc_count":1326,"split_key":45102,"timestamp":"2026-07-31T05:00:00.000Z"} +{"doc_count":992,"split_key":16509,"timestamp":"2026-07-31T05:00:00.000Z"} +{"doc_count":966,"split_key":399244,"timestamp":"2026-07-31T05:00:00.000Z"} +{"doc_count":943,"split_key":396982,"timestamp":"2026-07-31T05:00:00.000Z"} +{"doc_count":10028,"split_key":209334,"timestamp":"2026-07-31T06:00:00.000Z"} +{"doc_count":5465,"split_key":211590,"timestamp":"2026-07-31T06:00:00.000Z"} +{"doc_count":1268,"split_key":134294,"timestamp":"2026-07-31T06:00:00.000Z"} +{"doc_count":1049,"split_key":141995,"timestamp":"2026-07-31T06:00:00.000Z"} +{"doc_count":852,"split_key":16509,"timestamp":"2026-07-31T06:00:00.000Z"} +{"doc_count":9738,"split_key":209334,"timestamp":"2026-07-31T07:00:00.000Z"} +{"doc_count":4581,"split_key":211590,"timestamp":"2026-07-31T07:00:00.000Z"} +{"doc_count":992,"split_key":16509,"timestamp":"2026-07-31T07:00:00.000Z"} +{"doc_count":919,"split_key":141995,"timestamp":"2026-07-31T07:00:00.000Z"} +{"doc_count":800,"split_key":45899,"timestamp":"2026-07-31T07:00:00.000Z"} +{"doc_count":9223,"split_key":209334,"timestamp":"2026-07-31T08:00:00.000Z"} +{"doc_count":7434,"split_key":211590,"timestamp":"2026-07-31T08:00:00.000Z"} +{"doc_count":914,"split_key":51396,"timestamp":"2026-07-31T08:00:00.000Z"} +{"doc_count":718,"split_key":45899,"timestamp":"2026-07-31T08:00:00.000Z"} +{"doc_count":680,"split_key":16509,"timestamp":"2026-07-31T08:00:00.000Z"} +{"doc_count":8971,"split_key":209334,"timestamp":"2026-07-31T09:00:00.000Z"} +{"doc_count":1175,"split_key":51396,"timestamp":"2026-07-31T09:00:00.000Z"} +{"doc_count":812,"split_key":16509,"timestamp":"2026-07-31T09:00:00.000Z"} +{"doc_count":772,"split_key":45899,"timestamp":"2026-07-31T09:00:00.000Z"} +{"doc_count":661,"split_key":23674,"timestamp":"2026-07-31T09:00:00.000Z"} +{"doc_count":9450,"split_key":48090,"timestamp":"2026-07-31T10:00:00.000Z"} +{"doc_count":8802,"split_key":57724,"timestamp":"2026-07-31T10:00:00.000Z"} +{"doc_count":5903,"split_key":209334,"timestamp":"2026-07-31T10:00:00.000Z"} +{"doc_count":844,"split_key":45899,"timestamp":"2026-07-31T10:00:00.000Z"} +{"doc_count":751,"split_key":16509,"timestamp":"2026-07-31T10:00:00.000Z"} +{"doc_count":6332,"split_key":57724,"timestamp":"2026-07-31T11:00:00.000Z"} +{"doc_count":4706,"split_key":211590,"timestamp":"2026-07-31T11:00:00.000Z"} +{"doc_count":1291,"split_key":209334,"timestamp":"2026-07-31T11:00:00.000Z"} +{"doc_count":1218,"split_key":37963,"timestamp":"2026-07-31T11:00:00.000Z"} +{"doc_count":741,"split_key":45899,"timestamp":"2026-07-31T11:00:00.000Z"} +{"doc_count":4068,"split_key":209334,"timestamp":"2026-07-31T12:00:00.000Z"} +{"doc_count":2826,"split_key":37963,"timestamp":"2026-07-31T12:00:00.000Z"} +{"doc_count":2059,"split_key":211590,"timestamp":"2026-07-31T12:00:00.000Z"} +{"doc_count":1819,"split_key":57724,"timestamp":"2026-07-31T12:00:00.000Z"} +{"doc_count":794,"split_key":16509,"timestamp":"2026-07-31T12:00:00.000Z"} +{"doc_count":23533,"split_key":209334,"timestamp":"2026-07-31T13:00:00.000Z"} +{"doc_count":5578,"split_key":24940,"timestamp":"2026-07-31T13:00:00.000Z"} +{"doc_count":2880,"split_key":37963,"timestamp":"2026-07-31T13:00:00.000Z"} +{"doc_count":1376,"split_key":211590,"timestamp":"2026-07-31T13:00:00.000Z"} +{"doc_count":930,"split_key":201401,"timestamp":"2026-07-31T13:00:00.000Z"} +{"doc_count":33320,"split_key":24940,"timestamp":"2026-07-31T14:00:00.000Z"} +{"doc_count":17938,"split_key":209334,"timestamp":"2026-07-31T14:00:00.000Z"} +{"doc_count":2923,"split_key":4907,"timestamp":"2026-07-31T14:00:00.000Z"} +{"doc_count":2005,"split_key":63139,"timestamp":"2026-07-31T14:00:00.000Z"} +{"doc_count":1223,"split_key":399244,"timestamp":"2026-07-31T14:00:00.000Z"} +{"doc_count":19337,"split_key":209334,"timestamp":"2026-07-31T15:00:00.000Z"} +{"doc_count":3809,"split_key":48090,"timestamp":"2026-07-31T15:00:00.000Z"} +{"doc_count":1391,"split_key":4907,"timestamp":"2026-07-31T15:00:00.000Z"} +{"doc_count":1150,"split_key":399244,"timestamp":"2026-07-31T15:00:00.000Z"} +{"doc_count":1128,"split_key":37963,"timestamp":"2026-07-31T15:00:00.000Z"} +{"doc_count":12085,"split_key":209334,"timestamp":"2026-07-31T16:00:00.000Z"} +{"doc_count":1739,"split_key":37963,"timestamp":"2026-07-31T16:00:00.000Z"} +{"doc_count":1707,"split_key":4907,"timestamp":"2026-07-31T16:00:00.000Z"} +{"doc_count":1383,"split_key":211590,"timestamp":"2026-07-31T16:00:00.000Z"} +{"doc_count":1110,"split_key":16509,"timestamp":"2026-07-31T16:00:00.000Z"} +{"doc_count":16986,"split_key":209334,"timestamp":"2026-07-31T17:00:00.000Z"} +{"doc_count":2135,"split_key":4907,"timestamp":"2026-07-31T17:00:00.000Z"} +{"doc_count":1556,"split_key":211590,"timestamp":"2026-07-31T17:00:00.000Z"} +{"doc_count":1086,"split_key":63737,"timestamp":"2026-07-31T17:00:00.000Z"} +{"doc_count":974,"split_key":37963,"timestamp":"2026-07-31T17:00:00.000Z"} +{"doc_count":6931,"split_key":209334,"timestamp":"2026-07-31T18:00:00.000Z"} +{"doc_count":4860,"split_key":211590,"timestamp":"2026-07-31T18:00:00.000Z"} +{"doc_count":1708,"split_key":4907,"timestamp":"2026-07-31T18:00:00.000Z"} +{"doc_count":1658,"split_key":48090,"timestamp":"2026-07-31T18:00:00.000Z"} +{"doc_count":1017,"split_key":141995,"timestamp":"2026-07-31T18:00:00.000Z"} +{"doc_count":4725,"split_key":211590,"timestamp":"2026-07-31T19:00:00.000Z"} +{"doc_count":2609,"split_key":209334,"timestamp":"2026-07-31T19:00:00.000Z"} +{"doc_count":1003,"split_key":63737,"timestamp":"2026-07-31T19:00:00.000Z"} +{"doc_count":950,"split_key":16509,"timestamp":"2026-07-31T19:00:00.000Z"} +{"doc_count":905,"split_key":141995,"timestamp":"2026-07-31T19:00:00.000Z"} +{"doc_count":6425,"split_key":211590,"timestamp":"2026-07-31T20:00:00.000Z"} +{"doc_count":936,"split_key":209334,"timestamp":"2026-07-31T20:00:00.000Z"} +{"doc_count":851,"split_key":34762,"timestamp":"2026-07-31T20:00:00.000Z"} +{"doc_count":830,"split_key":399244,"timestamp":"2026-07-31T20:00:00.000Z"} +{"doc_count":692,"split_key":16509,"timestamp":"2026-07-31T20:00:00.000Z"} +{"doc_count":6609,"split_key":211590,"timestamp":"2026-07-31T21:00:00.000Z"} +{"doc_count":1277,"split_key":4907,"timestamp":"2026-07-31T21:00:00.000Z"} +{"doc_count":833,"split_key":399244,"timestamp":"2026-07-31T21:00:00.000Z"} +{"doc_count":777,"split_key":209334,"timestamp":"2026-07-31T21:00:00.000Z"} +{"doc_count":606,"split_key":16509,"timestamp":"2026-07-31T21:00:00.000Z"} +{"doc_count":4723,"split_key":211590,"timestamp":"2026-07-31T22:00:00.000Z"} +{"doc_count":2301,"split_key":37963,"timestamp":"2026-07-31T22:00:00.000Z"} +{"doc_count":1709,"split_key":48090,"timestamp":"2026-07-31T22:00:00.000Z"} +{"doc_count":1074,"split_key":16509,"timestamp":"2026-07-31T22:00:00.000Z"} +{"doc_count":967,"split_key":4907,"timestamp":"2026-07-31T22:00:00.000Z"} +{"doc_count":2196,"split_key":37963,"timestamp":"2026-07-31T23:00:00.000Z"} +{"doc_count":1624,"split_key":4907,"timestamp":"2026-07-31T23:00:00.000Z"} +{"doc_count":1218,"split_key":209334,"timestamp":"2026-07-31T23:00:00.000Z"} +{"doc_count":936,"split_key":51396,"timestamp":"2026-07-31T23:00:00.000Z"} +{"doc_count":591,"split_key":209854,"timestamp":"2026-07-31T23:00:00.000Z"} +{"doc_count":10014,"split_key":14987,"timestamp":"2026-08-01T00:00:00.000Z"} +{"doc_count":2057,"split_key":45102,"timestamp":"2026-08-01T00:00:00.000Z"} +{"doc_count":1876,"split_key":37963,"timestamp":"2026-08-01T00:00:00.000Z"} +{"doc_count":1606,"split_key":209334,"timestamp":"2026-08-01T00:00:00.000Z"} +{"doc_count":1278,"split_key":4907,"timestamp":"2026-08-01T00:00:00.000Z"} +{"doc_count":4835,"split_key":211590,"timestamp":"2026-08-01T01:00:00.000Z"} +{"doc_count":3342,"split_key":209334,"timestamp":"2026-08-01T01:00:00.000Z"} +{"doc_count":2365,"split_key":45102,"timestamp":"2026-08-01T01:00:00.000Z"} +{"doc_count":1876,"split_key":37963,"timestamp":"2026-08-01T01:00:00.000Z"} +{"doc_count":1711,"split_key":4907,"timestamp":"2026-08-01T01:00:00.000Z"} +{"doc_count":4688,"split_key":48090,"timestamp":"2026-08-01T02:00:00.000Z"} +{"doc_count":4490,"split_key":209334,"timestamp":"2026-08-01T02:00:00.000Z"} +{"doc_count":2989,"split_key":4907,"timestamp":"2026-08-01T02:00:00.000Z"} +{"doc_count":998,"split_key":396982,"timestamp":"2026-08-01T02:00:00.000Z"} +{"doc_count":804,"split_key":16509,"timestamp":"2026-08-01T02:00:00.000Z"} +{"doc_count":8923,"split_key":209334,"timestamp":"2026-08-01T03:00:00.000Z"} +{"doc_count":4721,"split_key":151858,"timestamp":"2026-08-01T03:00:00.000Z"} +{"doc_count":4700,"split_key":48090,"timestamp":"2026-08-01T03:00:00.000Z"} +{"doc_count":2993,"split_key":4907,"timestamp":"2026-08-01T03:00:00.000Z"} +{"doc_count":1154,"split_key":6698,"timestamp":"2026-08-01T03:00:00.000Z"} +{"doc_count":12404,"split_key":209334,"timestamp":"2026-08-01T04:00:00.000Z"} +{"doc_count":4367,"split_key":63760,"timestamp":"2026-08-01T04:00:00.000Z"} +{"doc_count":1682,"split_key":151858,"timestamp":"2026-08-01T04:00:00.000Z"} +{"doc_count":1360,"split_key":210554,"timestamp":"2026-08-01T04:00:00.000Z"} +{"doc_count":1306,"split_key":211590,"timestamp":"2026-08-01T04:00:00.000Z"} +{"doc_count":10633,"split_key":209334,"timestamp":"2026-08-01T05:00:00.000Z"} +{"doc_count":3430,"split_key":211590,"timestamp":"2026-08-01T05:00:00.000Z"} +{"doc_count":2115,"split_key":37963,"timestamp":"2026-08-01T05:00:00.000Z"} +{"doc_count":1082,"split_key":4907,"timestamp":"2026-08-01T05:00:00.000Z"} +{"doc_count":908,"split_key":396982,"timestamp":"2026-08-01T05:00:00.000Z"} +{"doc_count":10157,"split_key":209334,"timestamp":"2026-08-01T06:00:00.000Z"} +{"doc_count":6176,"split_key":149089,"timestamp":"2026-08-01T06:00:00.000Z"} +{"doc_count":3862,"split_key":211590,"timestamp":"2026-08-01T06:00:00.000Z"} +{"doc_count":2991,"split_key":4907,"timestamp":"2026-08-01T06:00:00.000Z"} +{"doc_count":691,"split_key":37963,"timestamp":"2026-08-01T06:00:00.000Z"} +{"doc_count":9807,"split_key":209334,"timestamp":"2026-08-01T07:00:00.000Z"} +{"doc_count":7250,"split_key":149089,"timestamp":"2026-08-01T07:00:00.000Z"} +{"doc_count":4654,"split_key":211590,"timestamp":"2026-08-01T07:00:00.000Z"} +{"doc_count":1416,"split_key":4907,"timestamp":"2026-08-01T07:00:00.000Z"} +{"doc_count":643,"split_key":141995,"timestamp":"2026-08-01T07:00:00.000Z"} +{"doc_count":8124,"split_key":209334,"timestamp":"2026-08-01T08:00:00.000Z"} +{"doc_count":4844,"split_key":211590,"timestamp":"2026-08-01T08:00:00.000Z"} +{"doc_count":1036,"split_key":9498,"timestamp":"2026-08-01T08:00:00.000Z"} +{"doc_count":917,"split_key":51396,"timestamp":"2026-08-01T08:00:00.000Z"} +{"doc_count":827,"split_key":37963,"timestamp":"2026-08-01T08:00:00.000Z"} +{"doc_count":8737,"split_key":209334,"timestamp":"2026-08-01T09:00:00.000Z"} +{"doc_count":6028,"split_key":20857,"timestamp":"2026-08-01T09:00:00.000Z"} +{"doc_count":2822,"split_key":48090,"timestamp":"2026-08-01T09:00:00.000Z"} +{"doc_count":2429,"split_key":33915,"timestamp":"2026-08-01T09:00:00.000Z"} +{"doc_count":1929,"split_key":34762,"timestamp":"2026-08-01T09:00:00.000Z"} +{"doc_count":5728,"split_key":209334,"timestamp":"2026-08-01T10:00:00.000Z"} +{"doc_count":2520,"split_key":33915,"timestamp":"2026-08-01T10:00:00.000Z"} +{"doc_count":1911,"split_key":20857,"timestamp":"2026-08-01T10:00:00.000Z"} +{"doc_count":1810,"split_key":34762,"timestamp":"2026-08-01T10:00:00.000Z"} +{"doc_count":1245,"split_key":152194,"timestamp":"2026-08-01T10:00:00.000Z"} +{"doc_count":5532,"split_key":211590,"timestamp":"2026-08-01T11:00:00.000Z"} +{"doc_count":2081,"split_key":4907,"timestamp":"2026-08-01T11:00:00.000Z"} +{"doc_count":1635,"split_key":6698,"timestamp":"2026-08-01T11:00:00.000Z"} +{"doc_count":886,"split_key":209334,"timestamp":"2026-08-01T11:00:00.000Z"} +{"doc_count":833,"split_key":152194,"timestamp":"2026-08-01T11:00:00.000Z"} +{"doc_count":3981,"split_key":209334,"timestamp":"2026-08-01T12:00:00.000Z"} +{"doc_count":3878,"split_key":211590,"timestamp":"2026-08-01T12:00:00.000Z"} +{"doc_count":2185,"split_key":4907,"timestamp":"2026-08-01T12:00:00.000Z"} +{"doc_count":1215,"split_key":16509,"timestamp":"2026-08-01T12:00:00.000Z"} +{"doc_count":836,"split_key":152194,"timestamp":"2026-08-01T12:00:00.000Z"} +{"doc_count":15841,"split_key":209334,"timestamp":"2026-08-01T13:00:00.000Z"} +{"doc_count":5632,"split_key":211590,"timestamp":"2026-08-01T13:00:00.000Z"} +{"doc_count":1236,"split_key":396982,"timestamp":"2026-08-01T13:00:00.000Z"} +{"doc_count":1121,"split_key":51396,"timestamp":"2026-08-01T13:00:00.000Z"} +{"doc_count":994,"split_key":152194,"timestamp":"2026-08-01T13:00:00.000Z"} +{"doc_count":17696,"split_key":209334,"timestamp":"2026-08-01T14:00:00.000Z"} +{"doc_count":8233,"split_key":56153,"timestamp":"2026-08-01T14:00:00.000Z"} +{"doc_count":3398,"split_key":211590,"timestamp":"2026-08-01T14:00:00.000Z"} +{"doc_count":2150,"split_key":4907,"timestamp":"2026-08-01T14:00:00.000Z"} +{"doc_count":921,"split_key":152194,"timestamp":"2026-08-01T14:00:00.000Z"} +{"doc_count":18656,"split_key":209334,"timestamp":"2026-08-01T15:00:00.000Z"} +{"doc_count":7067,"split_key":211590,"timestamp":"2026-08-01T15:00:00.000Z"} +{"doc_count":6442,"split_key":56153,"timestamp":"2026-08-01T15:00:00.000Z"} +{"doc_count":2988,"split_key":4907,"timestamp":"2026-08-01T15:00:00.000Z"} +{"doc_count":1109,"split_key":139904,"timestamp":"2026-08-01T15:00:00.000Z"} +{"doc_count":11959,"split_key":209334,"timestamp":"2026-08-01T16:00:00.000Z"} +{"doc_count":6632,"split_key":149089,"timestamp":"2026-08-01T16:00:00.000Z"} +{"doc_count":2966,"split_key":4907,"timestamp":"2026-08-01T16:00:00.000Z"} +{"doc_count":1726,"split_key":56153,"timestamp":"2026-08-01T16:00:00.000Z"} +{"doc_count":1007,"split_key":58519,"timestamp":"2026-08-01T16:00:00.000Z"} +{"doc_count":16321,"split_key":209334,"timestamp":"2026-08-01T17:00:00.000Z"} +{"doc_count":4842,"split_key":149089,"timestamp":"2026-08-01T17:00:00.000Z"} +{"doc_count":3849,"split_key":211590,"timestamp":"2026-08-01T17:00:00.000Z"} +{"doc_count":2987,"split_key":4907,"timestamp":"2026-08-01T17:00:00.000Z"} +{"doc_count":854,"split_key":152194,"timestamp":"2026-08-01T17:00:00.000Z"} +{"doc_count":6625,"split_key":209334,"timestamp":"2026-08-01T18:00:00.000Z"} +{"doc_count":5604,"split_key":149089,"timestamp":"2026-08-01T18:00:00.000Z"} +{"doc_count":3619,"split_key":211590,"timestamp":"2026-08-01T18:00:00.000Z"} +{"doc_count":2976,"split_key":4907,"timestamp":"2026-08-01T18:00:00.000Z"} +{"doc_count":858,"split_key":152194,"timestamp":"2026-08-01T18:00:00.000Z"} +{"doc_count":6915,"split_key":211590,"timestamp":"2026-08-01T19:00:00.000Z"} +{"doc_count":2959,"split_key":4907,"timestamp":"2026-08-01T19:00:00.000Z"} +{"doc_count":1803,"split_key":209334,"timestamp":"2026-08-01T19:00:00.000Z"} +{"doc_count":654,"split_key":37963,"timestamp":"2026-08-01T19:00:00.000Z"} +{"doc_count":585,"split_key":16509,"timestamp":"2026-08-01T19:00:00.000Z"} +{"doc_count":3884,"split_key":211590,"timestamp":"2026-08-01T20:00:00.000Z"} +{"doc_count":1603,"split_key":4907,"timestamp":"2026-08-01T20:00:00.000Z"} +{"doc_count":1162,"split_key":209334,"timestamp":"2026-08-01T20:00:00.000Z"} +{"doc_count":629,"split_key":152194,"timestamp":"2026-08-01T20:00:00.000Z"} +{"doc_count":603,"split_key":396982,"timestamp":"2026-08-01T20:00:00.000Z"} +{"doc_count":794,"split_key":209334,"timestamp":"2026-08-01T21:00:00.000Z"} +{"doc_count":740,"split_key":396982,"timestamp":"2026-08-01T21:00:00.000Z"} +{"doc_count":618,"split_key":53667,"timestamp":"2026-08-01T21:00:00.000Z"} +{"doc_count":554,"split_key":16509,"timestamp":"2026-08-01T21:00:00.000Z"} +{"doc_count":547,"split_key":138915,"timestamp":"2026-08-01T21:00:00.000Z"} +{"doc_count":2673,"split_key":211590,"timestamp":"2026-08-01T22:00:00.000Z"} +{"doc_count":2299,"split_key":4907,"timestamp":"2026-08-01T22:00:00.000Z"} +{"doc_count":754,"split_key":396982,"timestamp":"2026-08-01T22:00:00.000Z"} +{"doc_count":648,"split_key":399244,"timestamp":"2026-08-01T22:00:00.000Z"} +{"doc_count":641,"split_key":152194,"timestamp":"2026-08-01T22:00:00.000Z"} +{"doc_count":3286,"split_key":211590,"timestamp":"2026-08-01T23:00:00.000Z"} +{"doc_count":1065,"split_key":51396,"timestamp":"2026-08-01T23:00:00.000Z"} +{"doc_count":900,"split_key":4907,"timestamp":"2026-08-01T23:00:00.000Z"} +{"doc_count":647,"split_key":209334,"timestamp":"2026-08-01T23:00:00.000Z"} +{"doc_count":491,"split_key":53667,"timestamp":"2026-08-01T23:00:00.000Z"} +{"doc_count":10005,"split_key":14987,"timestamp":"2026-08-02T00:00:00.000Z"} +{"doc_count":3534,"split_key":211590,"timestamp":"2026-08-02T00:00:00.000Z"} +{"doc_count":932,"split_key":51396,"timestamp":"2026-08-02T00:00:00.000Z"} +{"doc_count":816,"split_key":396982,"timestamp":"2026-08-02T00:00:00.000Z"} +{"doc_count":779,"split_key":209334,"timestamp":"2026-08-02T00:00:00.000Z"} +{"doc_count":3034,"split_key":211590,"timestamp":"2026-08-02T01:00:00.000Z"} +{"doc_count":1200,"split_key":4907,"timestamp":"2026-08-02T01:00:00.000Z"} +{"doc_count":1161,"split_key":209334,"timestamp":"2026-08-02T01:00:00.000Z"} +{"doc_count":1038,"split_key":48090,"timestamp":"2026-08-02T01:00:00.000Z"} +{"doc_count":1014,"split_key":396982,"timestamp":"2026-08-02T01:00:00.000Z"} +{"doc_count":2744,"split_key":209334,"timestamp":"2026-08-02T02:00:00.000Z"} +{"doc_count":2720,"split_key":211590,"timestamp":"2026-08-02T02:00:00.000Z"} +{"doc_count":2587,"split_key":149089,"timestamp":"2026-08-02T02:00:00.000Z"} +{"doc_count":1259,"split_key":4907,"timestamp":"2026-08-02T02:00:00.000Z"} +{"doc_count":1121,"split_key":396982,"timestamp":"2026-08-02T02:00:00.000Z"} +{"doc_count":4855,"split_key":209334,"timestamp":"2026-08-02T03:00:00.000Z"} +{"doc_count":1866,"split_key":149089,"timestamp":"2026-08-02T03:00:00.000Z"} +{"doc_count":1865,"split_key":211590,"timestamp":"2026-08-02T03:00:00.000Z"} +{"doc_count":1169,"split_key":396982,"timestamp":"2026-08-02T03:00:00.000Z"} +{"doc_count":756,"split_key":152194,"timestamp":"2026-08-02T03:00:00.000Z"} +{"doc_count":9663,"split_key":209334,"timestamp":"2026-08-02T04:00:00.000Z"} +{"doc_count":1000,"split_key":211590,"timestamp":"2026-08-02T04:00:00.000Z"} +{"doc_count":845,"split_key":149089,"timestamp":"2026-08-02T04:00:00.000Z"} +{"doc_count":682,"split_key":396982,"timestamp":"2026-08-02T04:00:00.000Z"} +{"doc_count":648,"split_key":16509,"timestamp":"2026-08-02T04:00:00.000Z"} +{"doc_count":11088,"split_key":209334,"timestamp":"2026-08-02T05:00:00.000Z"} +{"doc_count":819,"split_key":205089,"timestamp":"2026-08-02T05:00:00.000Z"} +{"doc_count":787,"split_key":396982,"timestamp":"2026-08-02T05:00:00.000Z"} +{"doc_count":564,"split_key":63737,"timestamp":"2026-08-02T05:00:00.000Z"} +{"doc_count":534,"split_key":16509,"timestamp":"2026-08-02T05:00:00.000Z"} +{"doc_count":10680,"split_key":209334,"timestamp":"2026-08-02T06:00:00.000Z"} +{"doc_count":1550,"split_key":211590,"timestamp":"2026-08-02T06:00:00.000Z"} +{"doc_count":934,"split_key":396982,"timestamp":"2026-08-02T06:00:00.000Z"} +{"doc_count":598,"split_key":16509,"timestamp":"2026-08-02T06:00:00.000Z"} +{"doc_count":551,"split_key":205089,"timestamp":"2026-08-02T06:00:00.000Z"} +{"doc_count":10125,"split_key":209334,"timestamp":"2026-08-02T07:00:00.000Z"} +{"doc_count":765,"split_key":139904,"timestamp":"2026-08-02T07:00:00.000Z"} +{"doc_count":714,"split_key":396982,"timestamp":"2026-08-02T07:00:00.000Z"} +{"doc_count":676,"split_key":16509,"timestamp":"2026-08-02T07:00:00.000Z"} +{"doc_count":540,"split_key":63737,"timestamp":"2026-08-02T07:00:00.000Z"} +{"doc_count":9867,"split_key":209334,"timestamp":"2026-08-02T08:00:00.000Z"} +{"doc_count":758,"split_key":16509,"timestamp":"2026-08-02T08:00:00.000Z"} +{"doc_count":566,"split_key":37963,"timestamp":"2026-08-02T08:00:00.000Z"} +{"doc_count":550,"split_key":396982,"timestamp":"2026-08-02T08:00:00.000Z"} +{"doc_count":521,"split_key":138915,"timestamp":"2026-08-02T08:00:00.000Z"} +{"doc_count":9130,"split_key":209334,"timestamp":"2026-08-02T09:00:00.000Z"} +{"doc_count":8403,"split_key":56153,"timestamp":"2026-08-02T09:00:00.000Z"} +{"doc_count":2411,"split_key":211590,"timestamp":"2026-08-02T09:00:00.000Z"} +{"doc_count":729,"split_key":396982,"timestamp":"2026-08-02T09:00:00.000Z"} +{"doc_count":657,"split_key":16509,"timestamp":"2026-08-02T09:00:00.000Z"} +{"doc_count":9278,"split_key":209334,"timestamp":"2026-08-02T10:00:00.000Z"} +{"doc_count":4735,"split_key":56150,"timestamp":"2026-08-02T10:00:00.000Z"} +{"doc_count":3568,"split_key":211590,"timestamp":"2026-08-02T10:00:00.000Z"} +{"doc_count":1701,"split_key":54600,"timestamp":"2026-08-02T10:00:00.000Z"} +{"doc_count":790,"split_key":4766,"timestamp":"2026-08-02T10:00:00.000Z"} +{"doc_count":9611,"split_key":209334,"timestamp":"2026-08-02T11:00:00.000Z"} +{"doc_count":3253,"split_key":211590,"timestamp":"2026-08-02T11:00:00.000Z"} +{"doc_count":1284,"split_key":56150,"timestamp":"2026-08-02T11:00:00.000Z"} +{"doc_count":930,"split_key":398101,"timestamp":"2026-08-02T11:00:00.000Z"} +{"doc_count":857,"split_key":64199,"timestamp":"2026-08-02T11:00:00.000Z"} +{"doc_count":4662,"split_key":64199,"timestamp":"2026-08-02T12:00:00.000Z"} +{"doc_count":2839,"split_key":211590,"timestamp":"2026-08-02T12:00:00.000Z"} +{"doc_count":2064,"split_key":209334,"timestamp":"2026-08-02T12:00:00.000Z"} +{"doc_count":1947,"split_key":399244,"timestamp":"2026-08-02T12:00:00.000Z"} +{"doc_count":1241,"split_key":51395,"timestamp":"2026-08-02T12:00:00.000Z"} +{"doc_count":17557,"split_key":209334,"timestamp":"2026-08-02T13:00:00.000Z"} +{"doc_count":1216,"split_key":63737,"timestamp":"2026-08-02T13:00:00.000Z"} +{"doc_count":846,"split_key":4907,"timestamp":"2026-08-02T13:00:00.000Z"} +{"doc_count":804,"split_key":16509,"timestamp":"2026-08-02T13:00:00.000Z"} +{"doc_count":674,"split_key":396982,"timestamp":"2026-08-02T13:00:00.000Z"} +{"doc_count":17951,"split_key":209334,"timestamp":"2026-08-02T14:00:00.000Z"} +{"doc_count":3537,"split_key":135905,"timestamp":"2026-08-02T14:00:00.000Z"} +{"doc_count":2193,"split_key":401541,"timestamp":"2026-08-02T14:00:00.000Z"} +{"doc_count":1870,"split_key":203,"timestamp":"2026-08-02T14:00:00.000Z"} +{"doc_count":845,"split_key":4907,"timestamp":"2026-08-02T14:00:00.000Z"} +{"doc_count":18687,"split_key":209334,"timestamp":"2026-08-02T15:00:00.000Z"} +{"doc_count":11176,"split_key":14061,"timestamp":"2026-08-02T15:00:00.000Z"} +{"doc_count":4942,"split_key":135905,"timestamp":"2026-08-02T15:00:00.000Z"} +{"doc_count":3803,"split_key":211590,"timestamp":"2026-08-02T15:00:00.000Z"} +{"doc_count":1873,"split_key":203,"timestamp":"2026-08-02T15:00:00.000Z"} +{"doc_count":54835,"split_key":14061,"timestamp":"2026-08-02T16:00:00.000Z"} +{"doc_count":11814,"split_key":209334,"timestamp":"2026-08-02T16:00:00.000Z"} +{"doc_count":6788,"split_key":47329,"timestamp":"2026-08-02T16:00:00.000Z"} +{"doc_count":3617,"split_key":211590,"timestamp":"2026-08-02T16:00:00.000Z"} +{"doc_count":2625,"split_key":19318,"timestamp":"2026-08-02T16:00:00.000Z"} +{"doc_count":37842,"split_key":14061,"timestamp":"2026-08-02T17:00:00.000Z"} +{"doc_count":17288,"split_key":209334,"timestamp":"2026-08-02T17:00:00.000Z"} +{"doc_count":8471,"split_key":47329,"timestamp":"2026-08-02T17:00:00.000Z"} +{"doc_count":1472,"split_key":57724,"timestamp":"2026-08-02T17:00:00.000Z"} +{"doc_count":1433,"split_key":211590,"timestamp":"2026-08-02T17:00:00.000Z"} +{"doc_count":8333,"split_key":47329,"timestamp":"2026-08-02T18:00:00.000Z"} +{"doc_count":6927,"split_key":209334,"timestamp":"2026-08-02T18:00:00.000Z"} +{"doc_count":4738,"split_key":211590,"timestamp":"2026-08-02T18:00:00.000Z"} +{"doc_count":879,"split_key":141995,"timestamp":"2026-08-02T18:00:00.000Z"} +{"doc_count":844,"split_key":4907,"timestamp":"2026-08-02T18:00:00.000Z"} +{"doc_count":8502,"split_key":47329,"timestamp":"2026-08-02T19:00:00.000Z"} +{"doc_count":7019,"split_key":211590,"timestamp":"2026-08-02T19:00:00.000Z"} +{"doc_count":3642,"split_key":53230,"timestamp":"2026-08-02T19:00:00.000Z"} +{"doc_count":1861,"split_key":209334,"timestamp":"2026-08-02T19:00:00.000Z"} +{"doc_count":1119,"split_key":141995,"timestamp":"2026-08-02T19:00:00.000Z"} +{"doc_count":9476,"split_key":53230,"timestamp":"2026-08-02T20:00:00.000Z"} +{"doc_count":8037,"split_key":47329,"timestamp":"2026-08-02T20:00:00.000Z"} +{"doc_count":4131,"split_key":399244,"timestamp":"2026-08-02T20:00:00.000Z"} +{"doc_count":2859,"split_key":211590,"timestamp":"2026-08-02T20:00:00.000Z"} +{"doc_count":1198,"split_key":209334,"timestamp":"2026-08-02T20:00:00.000Z"} +{"doc_count":8591,"split_key":47329,"timestamp":"2026-08-02T21:00:00.000Z"} +{"doc_count":2603,"split_key":399244,"timestamp":"2026-08-02T21:00:00.000Z"} +{"doc_count":1702,"split_key":211590,"timestamp":"2026-08-02T21:00:00.000Z"} +{"doc_count":1083,"split_key":396982,"timestamp":"2026-08-02T21:00:00.000Z"} +{"doc_count":925,"split_key":209334,"timestamp":"2026-08-02T21:00:00.000Z"} +{"doc_count":4446,"split_key":211590,"timestamp":"2026-08-02T22:00:00.000Z"} +{"doc_count":1278,"split_key":399244,"timestamp":"2026-08-02T22:00:00.000Z"} +{"doc_count":816,"split_key":396982,"timestamp":"2026-08-02T22:00:00.000Z"} +{"doc_count":796,"split_key":5619,"timestamp":"2026-08-02T22:00:00.000Z"} +{"doc_count":743,"split_key":4907,"timestamp":"2026-08-02T22:00:00.000Z"} +{"doc_count":8918,"split_key":211590,"timestamp":"2026-08-02T23:00:00.000Z"} +{"doc_count":4557,"split_key":53667,"timestamp":"2026-08-02T23:00:00.000Z"} +{"doc_count":4262,"split_key":5619,"timestamp":"2026-08-02T23:00:00.000Z"} +{"doc_count":1001,"split_key":63737,"timestamp":"2026-08-02T23:00:00.000Z"} +{"doc_count":677,"split_key":209334,"timestamp":"2026-08-02T23:00:00.000Z"} +{"doc_count":11416,"split_key":14061,"timestamp":"2026-08-03T00:00:00.000Z"} +{"doc_count":10024,"split_key":14987,"timestamp":"2026-08-03T00:00:00.000Z"} +{"doc_count":6395,"split_key":211590,"timestamp":"2026-08-03T00:00:00.000Z"} +{"doc_count":4300,"split_key":5619,"timestamp":"2026-08-03T00:00:00.000Z"} +{"doc_count":1415,"split_key":53667,"timestamp":"2026-08-03T00:00:00.000Z"} +{"doc_count":11456,"split_key":14061,"timestamp":"2026-08-03T01:00:00.000Z"} +{"doc_count":4248,"split_key":5619,"timestamp":"2026-08-03T01:00:00.000Z"} +{"doc_count":4037,"split_key":211590,"timestamp":"2026-08-03T01:00:00.000Z"} +{"doc_count":1334,"split_key":209334,"timestamp":"2026-08-03T01:00:00.000Z"} +{"doc_count":791,"split_key":396982,"timestamp":"2026-08-03T01:00:00.000Z"} +{"doc_count":7588,"split_key":211590,"timestamp":"2026-08-03T02:00:00.000Z"} +{"doc_count":4208,"split_key":5619,"timestamp":"2026-08-03T02:00:00.000Z"} +{"doc_count":2915,"split_key":209334,"timestamp":"2026-08-03T02:00:00.000Z"} +{"doc_count":1392,"split_key":63844,"timestamp":"2026-08-03T02:00:00.000Z"} +{"doc_count":819,"split_key":396982,"timestamp":"2026-08-03T02:00:00.000Z"} +{"doc_count":8963,"split_key":211590,"timestamp":"2026-08-03T03:00:00.000Z"} +{"doc_count":5259,"split_key":209334,"timestamp":"2026-08-03T03:00:00.000Z"} +{"doc_count":4214,"split_key":5619,"timestamp":"2026-08-03T03:00:00.000Z"} +{"doc_count":2407,"split_key":149089,"timestamp":"2026-08-03T03:00:00.000Z"} +{"doc_count":1148,"split_key":63844,"timestamp":"2026-08-03T03:00:00.000Z"} +{"doc_count":9755,"split_key":209334,"timestamp":"2026-08-03T04:00:00.000Z"} +{"doc_count":9293,"split_key":211590,"timestamp":"2026-08-03T04:00:00.000Z"} +{"doc_count":4871,"split_key":149089,"timestamp":"2026-08-03T04:00:00.000Z"} +{"doc_count":4155,"split_key":5619,"timestamp":"2026-08-03T04:00:00.000Z"} +{"doc_count":1197,"split_key":11427,"timestamp":"2026-08-03T04:00:00.000Z"} +{"doc_count":22001,"split_key":14061,"timestamp":"2026-08-03T05:00:00.000Z"} +{"doc_count":11182,"split_key":209334,"timestamp":"2026-08-03T05:00:00.000Z"} +{"doc_count":4248,"split_key":5619,"timestamp":"2026-08-03T05:00:00.000Z"} +{"doc_count":3490,"split_key":211590,"timestamp":"2026-08-03T05:00:00.000Z"} +{"doc_count":771,"split_key":396982,"timestamp":"2026-08-03T05:00:00.000Z"} +{"doc_count":29115,"split_key":14061,"timestamp":"2026-08-03T06:00:00.000Z"} +{"doc_count":12582,"split_key":209334,"timestamp":"2026-08-03T06:00:00.000Z"} +{"doc_count":4208,"split_key":211590,"timestamp":"2026-08-03T06:00:00.000Z"} +{"doc_count":4199,"split_key":5619,"timestamp":"2026-08-03T06:00:00.000Z"} +{"doc_count":1497,"split_key":64199,"timestamp":"2026-08-03T06:00:00.000Z"} +{"doc_count":21688,"split_key":14061,"timestamp":"2026-08-03T07:00:00.000Z"} +{"doc_count":10215,"split_key":209334,"timestamp":"2026-08-03T07:00:00.000Z"} +{"doc_count":4157,"split_key":5619,"timestamp":"2026-08-03T07:00:00.000Z"} +{"doc_count":721,"split_key":64199,"timestamp":"2026-08-03T07:00:00.000Z"} +{"doc_count":638,"split_key":16509,"timestamp":"2026-08-03T07:00:00.000Z"} +{"doc_count":15999,"split_key":14061,"timestamp":"2026-08-03T08:00:00.000Z"} +{"doc_count":9319,"split_key":209334,"timestamp":"2026-08-03T08:00:00.000Z"} +{"doc_count":4275,"split_key":5619,"timestamp":"2026-08-03T08:00:00.000Z"} +{"doc_count":2230,"split_key":47583,"timestamp":"2026-08-03T08:00:00.000Z"} +{"doc_count":888,"split_key":37963,"timestamp":"2026-08-03T08:00:00.000Z"} +{"doc_count":8621,"split_key":209334,"timestamp":"2026-08-03T09:00:00.000Z"} +{"doc_count":4312,"split_key":5619,"timestamp":"2026-08-03T09:00:00.000Z"} +{"doc_count":1768,"split_key":37963,"timestamp":"2026-08-03T09:00:00.000Z"} +{"doc_count":821,"split_key":47583,"timestamp":"2026-08-03T09:00:00.000Z"} +{"doc_count":817,"split_key":4907,"timestamp":"2026-08-03T09:00:00.000Z"} +{"doc_count":9004,"split_key":209334,"timestamp":"2026-08-03T10:00:00.000Z"} +{"doc_count":4366,"split_key":5619,"timestamp":"2026-08-03T10:00:00.000Z"} +{"doc_count":3304,"split_key":47583,"timestamp":"2026-08-03T10:00:00.000Z"} +{"doc_count":1604,"split_key":37963,"timestamp":"2026-08-03T10:00:00.000Z"} +{"doc_count":1525,"split_key":211590,"timestamp":"2026-08-03T10:00:00.000Z"} +{"doc_count":10289,"split_key":209334,"timestamp":"2026-08-03T11:00:00.000Z"} +{"doc_count":4247,"split_key":5619,"timestamp":"2026-08-03T11:00:00.000Z"} +{"doc_count":2299,"split_key":55933,"timestamp":"2026-08-03T11:00:00.000Z"} +{"doc_count":1578,"split_key":37963,"timestamp":"2026-08-03T11:00:00.000Z"} +{"doc_count":1537,"split_key":211590,"timestamp":"2026-08-03T11:00:00.000Z"} +{"doc_count":6423,"split_key":133199,"timestamp":"2026-08-03T12:00:00.000Z"} +{"doc_count":4309,"split_key":5619,"timestamp":"2026-08-03T12:00:00.000Z"} +{"doc_count":3987,"split_key":47329,"timestamp":"2026-08-03T12:00:00.000Z"} +{"doc_count":2385,"split_key":135905,"timestamp":"2026-08-03T12:00:00.000Z"} +{"doc_count":1541,"split_key":209334,"timestamp":"2026-08-03T12:00:00.000Z"} +{"doc_count":16210,"split_key":209334,"timestamp":"2026-08-03T13:00:00.000Z"} +{"doc_count":6816,"split_key":4907,"timestamp":"2026-08-03T13:00:00.000Z"} +{"doc_count":3980,"split_key":135905,"timestamp":"2026-08-03T13:00:00.000Z"} +{"doc_count":2416,"split_key":5619,"timestamp":"2026-08-03T13:00:00.000Z"} +{"doc_count":2310,"split_key":56153,"timestamp":"2026-08-03T13:00:00.000Z"} +{"doc_count":16002,"split_key":209334,"timestamp":"2026-08-03T14:00:00.000Z"} +{"doc_count":6084,"split_key":56153,"timestamp":"2026-08-03T14:00:00.000Z"} +{"doc_count":2051,"split_key":37963,"timestamp":"2026-08-03T14:00:00.000Z"} +{"doc_count":901,"split_key":4907,"timestamp":"2026-08-03T14:00:00.000Z"} +{"doc_count":740,"split_key":60191,"timestamp":"2026-08-03T14:00:00.000Z"} +{"doc_count":21259,"split_key":37963,"timestamp":"2026-08-03T15:00:00.000Z"} +{"doc_count":16048,"split_key":209334,"timestamp":"2026-08-03T15:00:00.000Z"} +{"doc_count":2951,"split_key":211590,"timestamp":"2026-08-03T15:00:00.000Z"} +{"doc_count":2208,"split_key":60191,"timestamp":"2026-08-03T15:00:00.000Z"} +{"doc_count":1011,"split_key":136514,"timestamp":"2026-08-03T15:00:00.000Z"} +{"doc_count":20540,"split_key":37963,"timestamp":"2026-08-03T16:00:00.000Z"} +{"doc_count":15860,"split_key":209334,"timestamp":"2026-08-03T16:00:00.000Z"} +{"doc_count":8377,"split_key":211590,"timestamp":"2026-08-03T16:00:00.000Z"} +{"doc_count":4331,"split_key":60191,"timestamp":"2026-08-03T16:00:00.000Z"} +{"doc_count":4302,"split_key":5619,"timestamp":"2026-08-03T16:00:00.000Z"} +{"doc_count":15105,"split_key":209334,"timestamp":"2026-08-03T17:00:00.000Z"} +{"doc_count":12656,"split_key":54600,"timestamp":"2026-08-03T17:00:00.000Z"} +{"doc_count":4346,"split_key":5619,"timestamp":"2026-08-03T17:00:00.000Z"} +{"doc_count":1996,"split_key":211590,"timestamp":"2026-08-03T17:00:00.000Z"} +{"doc_count":1032,"split_key":51396,"timestamp":"2026-08-03T17:00:00.000Z"} +{"doc_count":11486,"split_key":209334,"timestamp":"2026-08-03T18:00:00.000Z"} +{"doc_count":6325,"split_key":211590,"timestamp":"2026-08-03T18:00:00.000Z"} +{"doc_count":6107,"split_key":14061,"timestamp":"2026-08-03T18:00:00.000Z"} +{"doc_count":5236,"split_key":54600,"timestamp":"2026-08-03T18:00:00.000Z"} +{"doc_count":5197,"split_key":47329,"timestamp":"2026-08-03T18:00:00.000Z"} +{"doc_count":18511,"split_key":14061,"timestamp":"2026-08-03T19:00:00.000Z"} +{"doc_count":4212,"split_key":5619,"timestamp":"2026-08-03T19:00:00.000Z"} +{"doc_count":3104,"split_key":47329,"timestamp":"2026-08-03T19:00:00.000Z"} +{"doc_count":2896,"split_key":7393,"timestamp":"2026-08-03T19:00:00.000Z"} +{"doc_count":1927,"split_key":209334,"timestamp":"2026-08-03T19:00:00.000Z"} +{"doc_count":13317,"split_key":14061,"timestamp":"2026-08-03T20:00:00.000Z"} +{"doc_count":8124,"split_key":47329,"timestamp":"2026-08-03T20:00:00.000Z"} +{"doc_count":4022,"split_key":5619,"timestamp":"2026-08-03T20:00:00.000Z"} +{"doc_count":2221,"split_key":211590,"timestamp":"2026-08-03T20:00:00.000Z"} +{"doc_count":1975,"split_key":37963,"timestamp":"2026-08-03T20:00:00.000Z"} +{"doc_count":8415,"split_key":47329,"timestamp":"2026-08-03T21:00:00.000Z"} +{"doc_count":6954,"split_key":14061,"timestamp":"2026-08-03T21:00:00.000Z"} +{"doc_count":4304,"split_key":5619,"timestamp":"2026-08-03T21:00:00.000Z"} +{"doc_count":3545,"split_key":211590,"timestamp":"2026-08-03T21:00:00.000Z"} +{"doc_count":2026,"split_key":37963,"timestamp":"2026-08-03T21:00:00.000Z"} +{"doc_count":4231,"split_key":47329,"timestamp":"2026-08-03T22:00:00.000Z"} +{"doc_count":4208,"split_key":5619,"timestamp":"2026-08-03T22:00:00.000Z"} +{"doc_count":2333,"split_key":37963,"timestamp":"2026-08-03T22:00:00.000Z"} +{"doc_count":1472,"split_key":52041,"timestamp":"2026-08-03T22:00:00.000Z"} +{"doc_count":1017,"split_key":211590,"timestamp":"2026-08-03T22:00:00.000Z"} +{"doc_count":2212,"split_key":399244,"timestamp":"2026-08-03T23:00:00.000Z"} +{"doc_count":1956,"split_key":37963,"timestamp":"2026-08-03T23:00:00.000Z"} +{"doc_count":1646,"split_key":5619,"timestamp":"2026-08-03T23:00:00.000Z"} +{"doc_count":678,"split_key":396982,"timestamp":"2026-08-03T23:00:00.000Z"} +{"doc_count":623,"split_key":63737,"timestamp":"2026-08-03T23:00:00.000Z"} +{"doc_count":12202,"split_key":14987,"timestamp":"2026-08-04T00:00:00.000Z"} +{"doc_count":3789,"split_key":399244,"timestamp":"2026-08-04T00:00:00.000Z"} +{"doc_count":1490,"split_key":37963,"timestamp":"2026-08-04T00:00:00.000Z"} +{"doc_count":845,"split_key":4907,"timestamp":"2026-08-04T00:00:00.000Z"} +{"doc_count":621,"split_key":202053,"timestamp":"2026-08-04T00:00:00.000Z"} +{"doc_count":4259,"split_key":399244,"timestamp":"2026-08-04T01:00:00.000Z"} +{"doc_count":921,"split_key":37963,"timestamp":"2026-08-04T01:00:00.000Z"} +{"doc_count":900,"split_key":396982,"timestamp":"2026-08-04T01:00:00.000Z"} +{"doc_count":853,"split_key":63737,"timestamp":"2026-08-04T01:00:00.000Z"} +{"doc_count":664,"split_key":45102,"timestamp":"2026-08-04T01:00:00.000Z"} +{"doc_count":4298,"split_key":399244,"timestamp":"2026-08-04T02:00:00.000Z"} +{"doc_count":3008,"split_key":211590,"timestamp":"2026-08-04T02:00:00.000Z"} +{"doc_count":1386,"split_key":37963,"timestamp":"2026-08-04T02:00:00.000Z"} +{"doc_count":871,"split_key":398101,"timestamp":"2026-08-04T02:00:00.000Z"} +{"doc_count":754,"split_key":53667,"timestamp":"2026-08-04T02:00:00.000Z"} +{"doc_count":7077,"split_key":56153,"timestamp":"2026-08-04T03:00:00.000Z"} +{"doc_count":4212,"split_key":399244,"timestamp":"2026-08-04T03:00:00.000Z"} +{"doc_count":1896,"split_key":209334,"timestamp":"2026-08-04T03:00:00.000Z"} +{"doc_count":1519,"split_key":37963,"timestamp":"2026-08-04T03:00:00.000Z"} +{"doc_count":823,"split_key":16509,"timestamp":"2026-08-04T03:00:00.000Z"} +{"doc_count":766154,"split_key":53667,"timestamp":"2026-08-04T04:00:00.000Z"} +{"doc_count":5253,"split_key":209334,"timestamp":"2026-08-04T04:00:00.000Z"} +{"doc_count":4553,"split_key":149089,"timestamp":"2026-08-04T04:00:00.000Z"} +{"doc_count":4276,"split_key":399244,"timestamp":"2026-08-04T04:00:00.000Z"} +{"doc_count":4050,"split_key":211590,"timestamp":"2026-08-04T04:00:00.000Z"} +{"doc_count":2033684,"split_key":53667,"timestamp":"2026-08-04T05:00:00.000Z"} +{"doc_count":9617,"split_key":209334,"timestamp":"2026-08-04T05:00:00.000Z"} +{"doc_count":4086,"split_key":399244,"timestamp":"2026-08-04T05:00:00.000Z"} +{"doc_count":3441,"split_key":149089,"timestamp":"2026-08-04T05:00:00.000Z"} +{"doc_count":1241,"split_key":63844,"timestamp":"2026-08-04T05:00:00.000Z"} +{"doc_count":9827,"split_key":209334,"timestamp":"2026-08-04T06:00:00.000Z"} +{"doc_count":4274,"split_key":399244,"timestamp":"2026-08-04T06:00:00.000Z"} +{"doc_count":1964,"split_key":211590,"timestamp":"2026-08-04T06:00:00.000Z"} +{"doc_count":1103,"split_key":16509,"timestamp":"2026-08-04T06:00:00.000Z"} +{"doc_count":733,"split_key":37963,"timestamp":"2026-08-04T06:00:00.000Z"} +{"doc_count":9934,"split_key":209334,"timestamp":"2026-08-04T07:00:00.000Z"} +{"doc_count":4260,"split_key":399244,"timestamp":"2026-08-04T07:00:00.000Z"} +{"doc_count":3831,"split_key":211590,"timestamp":"2026-08-04T07:00:00.000Z"} +{"doc_count":926,"split_key":16509,"timestamp":"2026-08-04T07:00:00.000Z"} +{"doc_count":691,"split_key":37963,"timestamp":"2026-08-04T07:00:00.000Z"} +{"doc_count":9712,"split_key":209334,"timestamp":"2026-08-04T08:00:00.000Z"} +{"doc_count":3966,"split_key":211590,"timestamp":"2026-08-04T08:00:00.000Z"} +{"doc_count":3725,"split_key":399244,"timestamp":"2026-08-04T08:00:00.000Z"} +{"doc_count":1062,"split_key":51396,"timestamp":"2026-08-04T08:00:00.000Z"} +{"doc_count":747,"split_key":4907,"timestamp":"2026-08-04T08:00:00.000Z"} +{"doc_count":8878,"split_key":209334,"timestamp":"2026-08-04T09:00:00.000Z"} +{"doc_count":5148,"split_key":56153,"timestamp":"2026-08-04T09:00:00.000Z"} +{"doc_count":4966,"split_key":211590,"timestamp":"2026-08-04T09:00:00.000Z"} +{"doc_count":3381,"split_key":25820,"timestamp":"2026-08-04T09:00:00.000Z"} +{"doc_count":3168,"split_key":399244,"timestamp":"2026-08-04T09:00:00.000Z"} +{"doc_count":17328,"split_key":25820,"timestamp":"2026-08-04T10:00:00.000Z"} +{"doc_count":9282,"split_key":209334,"timestamp":"2026-08-04T10:00:00.000Z"} +{"doc_count":6026,"split_key":211590,"timestamp":"2026-08-04T10:00:00.000Z"} +{"doc_count":3670,"split_key":399244,"timestamp":"2026-08-04T10:00:00.000Z"} +{"doc_count":972,"split_key":56153,"timestamp":"2026-08-04T10:00:00.000Z"} +{"doc_count":14026,"split_key":25820,"timestamp":"2026-08-04T11:00:00.000Z"} +{"doc_count":10382,"split_key":209334,"timestamp":"2026-08-04T11:00:00.000Z"} +{"doc_count":2901,"split_key":399244,"timestamp":"2026-08-04T11:00:00.000Z"} +{"doc_count":1935,"split_key":47329,"timestamp":"2026-08-04T11:00:00.000Z"} +{"doc_count":1013,"split_key":51396,"timestamp":"2026-08-04T11:00:00.000Z"} +{"doc_count":18481,"split_key":209334,"timestamp":"2026-08-04T12:00:00.000Z"} +{"doc_count":5499,"split_key":211590,"timestamp":"2026-08-04T12:00:00.000Z"} +{"doc_count":3836,"split_key":399244,"timestamp":"2026-08-04T12:00:00.000Z"} +{"doc_count":2579,"split_key":202281,"timestamp":"2026-08-04T12:00:00.000Z"} +{"doc_count":921,"split_key":14061,"timestamp":"2026-08-04T12:00:00.000Z"} +{"doc_count":10192,"split_key":209334,"timestamp":"2026-08-04T13:00:00.000Z"} +{"doc_count":4214,"split_key":399244,"timestamp":"2026-08-04T13:00:00.000Z"} +{"doc_count":3309,"split_key":202281,"timestamp":"2026-08-04T13:00:00.000Z"} +{"doc_count":1289,"split_key":47329,"timestamp":"2026-08-04T13:00:00.000Z"} +{"doc_count":946,"split_key":14061,"timestamp":"2026-08-04T13:00:00.000Z"} +{"doc_count":20044,"split_key":211590,"timestamp":"2026-08-04T14:00:00.000Z"} +{"doc_count":19127,"split_key":209334,"timestamp":"2026-08-04T14:00:00.000Z"} +{"doc_count":3676,"split_key":202281,"timestamp":"2026-08-04T14:00:00.000Z"} +{"doc_count":3447,"split_key":399244,"timestamp":"2026-08-04T14:00:00.000Z"} +{"doc_count":2123,"split_key":16509,"timestamp":"2026-08-04T14:00:00.000Z"} +{"doc_count":169178,"split_key":211590,"timestamp":"2026-08-04T15:00:00.000Z"} +{"doc_count":19774,"split_key":209334,"timestamp":"2026-08-04T15:00:00.000Z"} +{"doc_count":8636,"split_key":14061,"timestamp":"2026-08-04T15:00:00.000Z"} +{"doc_count":3431,"split_key":399244,"timestamp":"2026-08-04T15:00:00.000Z"} +{"doc_count":2806,"split_key":202281,"timestamp":"2026-08-04T15:00:00.000Z"} +{"doc_count":23583,"split_key":14061,"timestamp":"2026-08-04T16:00:00.000Z"} +{"doc_count":15915,"split_key":209334,"timestamp":"2026-08-04T16:00:00.000Z"} +{"doc_count":3382,"split_key":399244,"timestamp":"2026-08-04T16:00:00.000Z"} +{"doc_count":2848,"split_key":202281,"timestamp":"2026-08-04T16:00:00.000Z"} +{"doc_count":1149,"split_key":47329,"timestamp":"2026-08-04T16:00:00.000Z"} +{"doc_count":224911,"split_key":211590,"timestamp":"2026-08-04T17:00:00.000Z"} +{"doc_count":14588,"split_key":209334,"timestamp":"2026-08-04T17:00:00.000Z"} +{"doc_count":13928,"split_key":14061,"timestamp":"2026-08-04T17:00:00.000Z"} +{"doc_count":3196,"split_key":399244,"timestamp":"2026-08-04T17:00:00.000Z"} +{"doc_count":2950,"split_key":202281,"timestamp":"2026-08-04T17:00:00.000Z"} +{"doc_count":11201,"split_key":209334,"timestamp":"2026-08-04T18:00:00.000Z"} +{"doc_count":3522,"split_key":399244,"timestamp":"2026-08-04T18:00:00.000Z"} +{"doc_count":2547,"split_key":202281,"timestamp":"2026-08-04T18:00:00.000Z"} +{"doc_count":990,"split_key":396982,"timestamp":"2026-08-04T18:00:00.000Z"} +{"doc_count":713,"split_key":37963,"timestamp":"2026-08-04T18:00:00.000Z"} +{"doc_count":2119,"split_key":202281,"timestamp":"2026-08-04T19:00:00.000Z"} +{"doc_count":2047,"split_key":209334,"timestamp":"2026-08-04T19:00:00.000Z"} +{"doc_count":1200,"split_key":37963,"timestamp":"2026-08-04T19:00:00.000Z"} +{"doc_count":821,"split_key":399244,"timestamp":"2026-08-04T19:00:00.000Z"} +{"doc_count":751,"split_key":202230,"timestamp":"2026-08-04T19:00:00.000Z"} +{"doc_count":16438,"split_key":211590,"timestamp":"2026-08-04T20:00:00.000Z"} +{"doc_count":2971,"split_key":141995,"timestamp":"2026-08-04T20:00:00.000Z"} +{"doc_count":2810,"split_key":399244,"timestamp":"2026-08-04T20:00:00.000Z"} +{"doc_count":1797,"split_key":37963,"timestamp":"2026-08-04T20:00:00.000Z"} +{"doc_count":1657,"split_key":202281,"timestamp":"2026-08-04T20:00:00.000Z"} +{"doc_count":6874,"split_key":211590,"timestamp":"2026-08-04T21:00:00.000Z"} +{"doc_count":4487,"split_key":14061,"timestamp":"2026-08-04T21:00:00.000Z"} +{"doc_count":3196,"split_key":37963,"timestamp":"2026-08-04T21:00:00.000Z"} +{"doc_count":1498,"split_key":399244,"timestamp":"2026-08-04T21:00:00.000Z"} +{"doc_count":1393,"split_key":141995,"timestamp":"2026-08-04T21:00:00.000Z"} +{"doc_count":24889,"split_key":14061,"timestamp":"2026-08-04T22:00:00.000Z"} +{"doc_count":9702,"split_key":211590,"timestamp":"2026-08-04T22:00:00.000Z"} +{"doc_count":2601,"split_key":37963,"timestamp":"2026-08-04T22:00:00.000Z"} +{"doc_count":2600,"split_key":141995,"timestamp":"2026-08-04T22:00:00.000Z"} +{"doc_count":932,"split_key":399244,"timestamp":"2026-08-04T22:00:00.000Z"} +{"doc_count":16181,"split_key":14061,"timestamp":"2026-08-04T23:00:00.000Z"} +{"doc_count":2233,"split_key":399244,"timestamp":"2026-08-04T23:00:00.000Z"} +{"doc_count":1314,"split_key":37963,"timestamp":"2026-08-04T23:00:00.000Z"} +{"doc_count":752,"split_key":396982,"timestamp":"2026-08-04T23:00:00.000Z"} +{"doc_count":748,"split_key":16509,"timestamp":"2026-08-04T23:00:00.000Z"} +{"doc_count":11102,"split_key":14987,"timestamp":"2026-08-05T00:00:00.000Z"} +{"doc_count":9314,"split_key":211590,"timestamp":"2026-08-05T00:00:00.000Z"} +{"doc_count":2297,"split_key":399244,"timestamp":"2026-08-05T00:00:00.000Z"} +{"doc_count":2272,"split_key":141995,"timestamp":"2026-08-05T00:00:00.000Z"} +{"doc_count":811,"split_key":37963,"timestamp":"2026-08-05T00:00:00.000Z"} +{"doc_count":2144,"split_key":211590,"timestamp":"2026-08-05T01:00:00.000Z"} +{"doc_count":2084,"split_key":399244,"timestamp":"2026-08-05T01:00:00.000Z"} +{"doc_count":2035,"split_key":151858,"timestamp":"2026-08-05T01:00:00.000Z"} +{"doc_count":706,"split_key":396982,"timestamp":"2026-08-05T01:00:00.000Z"} +{"doc_count":682,"split_key":209334,"timestamp":"2026-08-05T01:00:00.000Z"} +{"doc_count":60849,"split_key":23470,"timestamp":"2026-08-05T02:00:00.000Z"} +{"doc_count":1966,"split_key":399244,"timestamp":"2026-08-05T02:00:00.000Z"} +{"doc_count":1054,"split_key":151858,"timestamp":"2026-08-05T02:00:00.000Z"} +{"doc_count":990,"split_key":211590,"timestamp":"2026-08-05T02:00:00.000Z"} +{"doc_count":961,"split_key":45102,"timestamp":"2026-08-05T02:00:00.000Z"} +{"doc_count":2220,"split_key":211590,"timestamp":"2026-08-05T03:00:00.000Z"} +{"doc_count":1901,"split_key":209334,"timestamp":"2026-08-05T03:00:00.000Z"} +{"doc_count":1644,"split_key":399244,"timestamp":"2026-08-05T03:00:00.000Z"} +{"doc_count":1392,"split_key":8075,"timestamp":"2026-08-05T03:00:00.000Z"} +{"doc_count":920,"split_key":16509,"timestamp":"2026-08-05T03:00:00.000Z"} +{"doc_count":5398,"split_key":209334,"timestamp":"2026-08-05T04:00:00.000Z"} +{"doc_count":907,"split_key":211590,"timestamp":"2026-08-05T04:00:00.000Z"} +{"doc_count":872,"split_key":396982,"timestamp":"2026-08-05T04:00:00.000Z"} +{"doc_count":664,"split_key":37963,"timestamp":"2026-08-05T04:00:00.000Z"} +{"doc_count":564,"split_key":45102,"timestamp":"2026-08-05T04:00:00.000Z"} +{"doc_count":9194,"split_key":209334,"timestamp":"2026-08-05T05:00:00.000Z"} +{"doc_count":3653,"split_key":37963,"timestamp":"2026-08-05T05:00:00.000Z"} +{"doc_count":875,"split_key":396982,"timestamp":"2026-08-05T05:00:00.000Z"} +{"doc_count":671,"split_key":16509,"timestamp":"2026-08-05T05:00:00.000Z"} +{"doc_count":600,"split_key":45102,"timestamp":"2026-08-05T05:00:00.000Z"} +{"doc_count":10499,"split_key":209334,"timestamp":"2026-08-05T06:00:00.000Z"} +{"doc_count":764,"split_key":51396,"timestamp":"2026-08-05T06:00:00.000Z"} +{"doc_count":737,"split_key":396982,"timestamp":"2026-08-05T06:00:00.000Z"} +{"doc_count":666,"split_key":396356,"timestamp":"2026-08-05T06:00:00.000Z"} +{"doc_count":618,"split_key":37963,"timestamp":"2026-08-05T06:00:00.000Z"} +{"doc_count":9782,"split_key":209334,"timestamp":"2026-08-05T07:00:00.000Z"} +{"doc_count":2298,"split_key":60404,"timestamp":"2026-08-05T07:00:00.000Z"} +{"doc_count":1683,"split_key":51396,"timestamp":"2026-08-05T07:00:00.000Z"} +{"doc_count":958,"split_key":45102,"timestamp":"2026-08-05T07:00:00.000Z"} +{"doc_count":674,"split_key":396982,"timestamp":"2026-08-05T07:00:00.000Z"} +{"doc_count":10268,"split_key":209334,"timestamp":"2026-08-05T08:00:00.000Z"} +{"doc_count":639,"split_key":14618,"timestamp":"2026-08-05T08:00:00.000Z"} +{"doc_count":637,"split_key":45102,"timestamp":"2026-08-05T08:00:00.000Z"} +{"doc_count":633,"split_key":396982,"timestamp":"2026-08-05T08:00:00.000Z"} +{"doc_count":607,"split_key":16509,"timestamp":"2026-08-05T08:00:00.000Z"} +{"doc_count":8370,"split_key":209334,"timestamp":"2026-08-05T09:00:00.000Z"} +{"doc_count":4738,"split_key":26496,"timestamp":"2026-08-05T09:00:00.000Z"} +{"doc_count":851,"split_key":16509,"timestamp":"2026-08-05T09:00:00.000Z"} +{"doc_count":754,"split_key":45102,"timestamp":"2026-08-05T09:00:00.000Z"} +{"doc_count":688,"split_key":14618,"timestamp":"2026-08-05T09:00:00.000Z"} +{"doc_count":9085,"split_key":209334,"timestamp":"2026-08-05T10:00:00.000Z"} +{"doc_count":1105,"split_key":37963,"timestamp":"2026-08-05T10:00:00.000Z"} +{"doc_count":1086,"split_key":16509,"timestamp":"2026-08-05T10:00:00.000Z"} +{"doc_count":742,"split_key":45102,"timestamp":"2026-08-05T10:00:00.000Z"} +{"doc_count":564,"split_key":201814,"timestamp":"2026-08-05T10:00:00.000Z"} +{"doc_count":10961,"split_key":209334,"timestamp":"2026-08-05T11:00:00.000Z"} +{"doc_count":3842,"split_key":26496,"timestamp":"2026-08-05T11:00:00.000Z"} +{"doc_count":1739,"split_key":37963,"timestamp":"2026-08-05T11:00:00.000Z"} +{"doc_count":1463,"split_key":16509,"timestamp":"2026-08-05T11:00:00.000Z"} +{"doc_count":1151,"split_key":50266,"timestamp":"2026-08-05T11:00:00.000Z"} +{"doc_count":16724,"split_key":209334,"timestamp":"2026-08-05T12:00:00.000Z"} +{"doc_count":6261,"split_key":213438,"timestamp":"2026-08-05T12:00:00.000Z"} +{"doc_count":4300,"split_key":26496,"timestamp":"2026-08-05T12:00:00.000Z"} +{"doc_count":1309,"split_key":37963,"timestamp":"2026-08-05T12:00:00.000Z"} +{"doc_count":900,"split_key":16509,"timestamp":"2026-08-05T12:00:00.000Z"} +{"doc_count":11193,"split_key":209334,"timestamp":"2026-08-05T13:00:00.000Z"} +{"doc_count":3180,"split_key":37963,"timestamp":"2026-08-05T13:00:00.000Z"} +{"doc_count":2199,"split_key":26496,"timestamp":"2026-08-05T13:00:00.000Z"} +{"doc_count":737,"split_key":16509,"timestamp":"2026-08-05T13:00:00.000Z"} +{"doc_count":579,"split_key":201814,"timestamp":"2026-08-05T13:00:00.000Z"} +{"doc_count":19928,"split_key":209334,"timestamp":"2026-08-05T14:00:00.000Z"} +{"doc_count":6298,"split_key":37963,"timestamp":"2026-08-05T14:00:00.000Z"} +{"doc_count":2463,"split_key":211590,"timestamp":"2026-08-05T14:00:00.000Z"} +{"doc_count":847,"split_key":141995,"timestamp":"2026-08-05T14:00:00.000Z"} +{"doc_count":624,"split_key":14061,"timestamp":"2026-08-05T14:00:00.000Z"} +{"doc_count":16599,"split_key":209334,"timestamp":"2026-08-05T15:00:00.000Z"} +{"doc_count":5749,"split_key":37963,"timestamp":"2026-08-05T15:00:00.000Z"} +{"doc_count":819,"split_key":14061,"timestamp":"2026-08-05T15:00:00.000Z"} +{"doc_count":726,"split_key":16509,"timestamp":"2026-08-05T15:00:00.000Z"} +{"doc_count":571,"split_key":63737,"timestamp":"2026-08-05T15:00:00.000Z"} +{"doc_count":18236,"split_key":209334,"timestamp":"2026-08-05T16:00:00.000Z"} +{"doc_count":1920,"split_key":202425,"timestamp":"2026-08-05T16:00:00.000Z"} +{"doc_count":1783,"split_key":37963,"timestamp":"2026-08-05T16:00:00.000Z"} +{"doc_count":1049,"split_key":14061,"timestamp":"2026-08-05T16:00:00.000Z"} +{"doc_count":561,"split_key":201814,"timestamp":"2026-08-05T16:00:00.000Z"} +{"doc_count":14526,"split_key":209334,"timestamp":"2026-08-05T17:00:00.000Z"} +{"doc_count":1472,"split_key":37963,"timestamp":"2026-08-05T17:00:00.000Z"} +{"doc_count":1368,"split_key":62390,"timestamp":"2026-08-05T17:00:00.000Z"} +{"doc_count":758,"split_key":202425,"timestamp":"2026-08-05T17:00:00.000Z"} +{"doc_count":740,"split_key":16509,"timestamp":"2026-08-05T17:00:00.000Z"} +{"doc_count":11316,"split_key":209334,"timestamp":"2026-08-05T18:00:00.000Z"} +{"doc_count":1621,"split_key":14061,"timestamp":"2026-08-05T18:00:00.000Z"} +{"doc_count":1021,"split_key":37963,"timestamp":"2026-08-05T18:00:00.000Z"} +{"doc_count":614,"split_key":51396,"timestamp":"2026-08-05T18:00:00.000Z"} +{"doc_count":614,"split_key":201814,"timestamp":"2026-08-05T18:00:00.000Z"} +{"doc_count":24397,"split_key":16276,"timestamp":"2026-08-05T19:00:00.000Z"} +{"doc_count":2165,"split_key":209334,"timestamp":"2026-08-05T19:00:00.000Z"} +{"doc_count":1263,"split_key":211590,"timestamp":"2026-08-05T19:00:00.000Z"} +{"doc_count":568,"split_key":51396,"timestamp":"2026-08-05T19:00:00.000Z"} +{"doc_count":544,"split_key":201814,"timestamp":"2026-08-05T19:00:00.000Z"} +{"doc_count":957,"split_key":209334,"timestamp":"2026-08-05T20:00:00.000Z"} +{"doc_count":686,"split_key":16509,"timestamp":"2026-08-05T20:00:00.000Z"} +{"doc_count":587,"split_key":201814,"timestamp":"2026-08-05T20:00:00.000Z"} +{"doc_count":543,"split_key":209854,"timestamp":"2026-08-05T20:00:00.000Z"} +{"doc_count":540,"split_key":37963,"timestamp":"2026-08-05T20:00:00.000Z"} +{"doc_count":17797,"split_key":14061,"timestamp":"2026-08-05T21:00:00.000Z"} +{"doc_count":630,"split_key":209334,"timestamp":"2026-08-05T21:00:00.000Z"} +{"doc_count":617,"split_key":37963,"timestamp":"2026-08-05T21:00:00.000Z"} +{"doc_count":602,"split_key":201814,"timestamp":"2026-08-05T21:00:00.000Z"} +{"doc_count":550,"split_key":213412,"timestamp":"2026-08-05T21:00:00.000Z"} +{"doc_count":20702,"split_key":14061,"timestamp":"2026-08-05T22:00:00.000Z"} +{"doc_count":724,"split_key":37963,"timestamp":"2026-08-05T22:00:00.000Z"} +{"doc_count":606,"split_key":201814,"timestamp":"2026-08-05T22:00:00.000Z"} +{"doc_count":584,"split_key":215762,"timestamp":"2026-08-05T22:00:00.000Z"} +{"doc_count":580,"split_key":396982,"timestamp":"2026-08-05T22:00:00.000Z"} +{"doc_count":6840,"split_key":14061,"timestamp":"2026-08-05T23:00:00.000Z"} +{"doc_count":610,"split_key":209334,"timestamp":"2026-08-05T23:00:00.000Z"} +{"doc_count":591,"split_key":396982,"timestamp":"2026-08-05T23:00:00.000Z"} +{"doc_count":579,"split_key":16509,"timestamp":"2026-08-05T23:00:00.000Z"} +{"doc_count":554,"split_key":201814,"timestamp":"2026-08-05T23:00:00.000Z"} +{"doc_count":10035,"split_key":14987,"timestamp":"2026-08-06T00:00:00.000Z"} +{"doc_count":673,"split_key":396982,"timestamp":"2026-08-06T00:00:00.000Z"} +{"doc_count":608,"split_key":209334,"timestamp":"2026-08-06T00:00:00.000Z"} +{"doc_count":581,"split_key":201814,"timestamp":"2026-08-06T00:00:00.000Z"} +{"doc_count":548,"split_key":12735,"timestamp":"2026-08-06T00:00:00.000Z"} +{"doc_count":1425,"split_key":4907,"timestamp":"2026-08-06T01:00:00.000Z"} +{"doc_count":1279,"split_key":51396,"timestamp":"2026-08-06T01:00:00.000Z"} +{"doc_count":699,"split_key":209334,"timestamp":"2026-08-06T01:00:00.000Z"} +{"doc_count":629,"split_key":16509,"timestamp":"2026-08-06T01:00:00.000Z"} +{"doc_count":606,"split_key":396982,"timestamp":"2026-08-06T01:00:00.000Z"} +{"doc_count":1591,"split_key":396982,"timestamp":"2026-08-06T02:00:00.000Z"} +{"doc_count":825,"split_key":209334,"timestamp":"2026-08-06T02:00:00.000Z"} +{"doc_count":820,"split_key":25369,"timestamp":"2026-08-06T02:00:00.000Z"} +{"doc_count":745,"split_key":51396,"timestamp":"2026-08-06T02:00:00.000Z"} +{"doc_count":712,"split_key":16509,"timestamp":"2026-08-06T02:00:00.000Z"} +{"doc_count":1911,"split_key":209334,"timestamp":"2026-08-06T03:00:00.000Z"} +{"doc_count":1298,"split_key":136514,"timestamp":"2026-08-06T03:00:00.000Z"} +{"doc_count":856,"split_key":25369,"timestamp":"2026-08-06T03:00:00.000Z"} +{"doc_count":775,"split_key":51396,"timestamp":"2026-08-06T03:00:00.000Z"} +{"doc_count":733,"split_key":16509,"timestamp":"2026-08-06T03:00:00.000Z"} +{"doc_count":5388,"split_key":209334,"timestamp":"2026-08-06T04:00:00.000Z"} +{"doc_count":818,"split_key":396982,"timestamp":"2026-08-06T04:00:00.000Z"} +{"doc_count":800,"split_key":25369,"timestamp":"2026-08-06T04:00:00.000Z"} +{"doc_count":654,"split_key":16509,"timestamp":"2026-08-06T04:00:00.000Z"} +{"doc_count":643,"split_key":37963,"timestamp":"2026-08-06T04:00:00.000Z"} +{"doc_count":9404,"split_key":209334,"timestamp":"2026-08-06T05:00:00.000Z"} +{"doc_count":2040,"split_key":211590,"timestamp":"2026-08-06T05:00:00.000Z"} +{"doc_count":1612,"split_key":6698,"timestamp":"2026-08-06T05:00:00.000Z"} +{"doc_count":1351,"split_key":396982,"timestamp":"2026-08-06T05:00:00.000Z"} +{"doc_count":888,"split_key":25369,"timestamp":"2026-08-06T05:00:00.000Z"} +{"doc_count":10342,"split_key":209334,"timestamp":"2026-08-06T06:00:00.000Z"} +{"doc_count":1237,"split_key":45102,"timestamp":"2026-08-06T06:00:00.000Z"} +{"doc_count":1135,"split_key":211590,"timestamp":"2026-08-06T06:00:00.000Z"} +{"doc_count":627,"split_key":396982,"timestamp":"2026-08-06T06:00:00.000Z"} +{"doc_count":602,"split_key":201814,"timestamp":"2026-08-06T06:00:00.000Z"} +{"doc_count":10148,"split_key":209334,"timestamp":"2026-08-06T07:00:00.000Z"} +{"doc_count":2878,"split_key":26496,"timestamp":"2026-08-06T07:00:00.000Z"} +{"doc_count":2274,"split_key":45102,"timestamp":"2026-08-06T07:00:00.000Z"} +{"doc_count":596,"split_key":396982,"timestamp":"2026-08-06T07:00:00.000Z"} +{"doc_count":572,"split_key":201814,"timestamp":"2026-08-06T07:00:00.000Z"} +{"doc_count":10386,"split_key":209334,"timestamp":"2026-08-06T08:00:00.000Z"} +{"doc_count":1207,"split_key":45102,"timestamp":"2026-08-06T08:00:00.000Z"} +{"doc_count":731,"split_key":398101,"timestamp":"2026-08-06T08:00:00.000Z"} +{"doc_count":682,"split_key":205089,"timestamp":"2026-08-06T08:00:00.000Z"} +{"doc_count":558,"split_key":53667,"timestamp":"2026-08-06T08:00:00.000Z"} +{"doc_count":7301,"split_key":209334,"timestamp":"2026-08-06T09:00:00.000Z"} +{"doc_count":2750,"split_key":37963,"timestamp":"2026-08-06T09:00:00.000Z"} +{"doc_count":829,"split_key":16509,"timestamp":"2026-08-06T09:00:00.000Z"} +{"doc_count":769,"split_key":396982,"timestamp":"2026-08-06T09:00:00.000Z"} +{"doc_count":567,"split_key":201814,"timestamp":"2026-08-06T09:00:00.000Z"} +{"doc_count":10233,"split_key":209334,"timestamp":"2026-08-06T10:00:00.000Z"} +{"doc_count":715,"split_key":16509,"timestamp":"2026-08-06T10:00:00.000Z"} +{"doc_count":575,"split_key":201814,"timestamp":"2026-08-06T10:00:00.000Z"} +{"doc_count":475,"split_key":53667,"timestamp":"2026-08-06T10:00:00.000Z"} +{"doc_count":469,"split_key":213412,"timestamp":"2026-08-06T10:00:00.000Z"} +{"doc_count":10995,"split_key":209334,"timestamp":"2026-08-06T11:00:00.000Z"} +{"doc_count":939,"split_key":15703,"timestamp":"2026-08-06T11:00:00.000Z"} +{"doc_count":558,"split_key":201814,"timestamp":"2026-08-06T11:00:00.000Z"} +{"doc_count":536,"split_key":16509,"timestamp":"2026-08-06T11:00:00.000Z"} +{"doc_count":495,"split_key":53667,"timestamp":"2026-08-06T11:00:00.000Z"} +{"doc_count":17162,"split_key":16276,"timestamp":"2026-08-06T12:00:00.000Z"} +{"doc_count":15048,"split_key":209334,"timestamp":"2026-08-06T12:00:00.000Z"} +{"doc_count":946,"split_key":15703,"timestamp":"2026-08-06T12:00:00.000Z"} +{"doc_count":512,"split_key":201814,"timestamp":"2026-08-06T12:00:00.000Z"} +{"doc_count":460,"split_key":53667,"timestamp":"2026-08-06T12:00:00.000Z"} +{"doc_count":13230,"split_key":209334,"timestamp":"2026-08-06T13:00:00.000Z"} +{"doc_count":653,"split_key":396982,"timestamp":"2026-08-06T13:00:00.000Z"} +{"doc_count":564,"split_key":201814,"timestamp":"2026-08-06T13:00:00.000Z"} +{"doc_count":545,"split_key":215762,"timestamp":"2026-08-06T13:00:00.000Z"} +{"doc_count":491,"split_key":53667,"timestamp":"2026-08-06T13:00:00.000Z"} +{"doc_count":19185,"split_key":14061,"timestamp":"2026-08-06T14:00:00.000Z"} +{"doc_count":17933,"split_key":209334,"timestamp":"2026-08-06T14:00:00.000Z"} +{"doc_count":712,"split_key":16509,"timestamp":"2026-08-06T14:00:00.000Z"} +{"doc_count":682,"split_key":211590,"timestamp":"2026-08-06T14:00:00.000Z"} +{"doc_count":552,"split_key":201814,"timestamp":"2026-08-06T14:00:00.000Z"} +{"doc_count":15186,"split_key":209334,"timestamp":"2026-08-06T15:00:00.000Z"} +{"doc_count":2149,"split_key":136514,"timestamp":"2026-08-06T15:00:00.000Z"} +{"doc_count":560,"split_key":45899,"timestamp":"2026-08-06T15:00:00.000Z"} +{"doc_count":551,"split_key":16509,"timestamp":"2026-08-06T15:00:00.000Z"} +{"doc_count":523,"split_key":201814,"timestamp":"2026-08-06T15:00:00.000Z"} +{"doc_count":22685,"split_key":209334,"timestamp":"2026-08-06T16:00:00.000Z"} +{"doc_count":2778,"split_key":136514,"timestamp":"2026-08-06T16:00:00.000Z"} +{"doc_count":763,"split_key":16509,"timestamp":"2026-08-06T16:00:00.000Z"} +{"doc_count":669,"split_key":53667,"timestamp":"2026-08-06T16:00:00.000Z"} +{"doc_count":563,"split_key":201814,"timestamp":"2026-08-06T16:00:00.000Z"} +{"doc_count":13596,"split_key":209334,"timestamp":"2026-08-06T17:00:00.000Z"} +{"doc_count":1568,"split_key":4766,"timestamp":"2026-08-06T17:00:00.000Z"} +{"doc_count":978,"split_key":136514,"timestamp":"2026-08-06T17:00:00.000Z"} +{"doc_count":905,"split_key":16509,"timestamp":"2026-08-06T17:00:00.000Z"} +{"doc_count":660,"split_key":201814,"timestamp":"2026-08-06T17:00:00.000Z"} +{"doc_count":12772,"split_key":209334,"timestamp":"2026-08-06T18:00:00.000Z"} +{"doc_count":4430,"split_key":17858,"timestamp":"2026-08-06T18:00:00.000Z"} +{"doc_count":1150,"split_key":136514,"timestamp":"2026-08-06T18:00:00.000Z"} +{"doc_count":1028,"split_key":16509,"timestamp":"2026-08-06T18:00:00.000Z"} +{"doc_count":666,"split_key":51396,"timestamp":"2026-08-06T18:00:00.000Z"} +{"doc_count":2300,"split_key":209334,"timestamp":"2026-08-06T19:00:00.000Z"} +{"doc_count":1176,"split_key":14061,"timestamp":"2026-08-06T19:00:00.000Z"} +{"doc_count":806,"split_key":16509,"timestamp":"2026-08-06T19:00:00.000Z"} +{"doc_count":641,"split_key":37963,"timestamp":"2026-08-06T19:00:00.000Z"} +{"doc_count":589,"split_key":396982,"timestamp":"2026-08-06T19:00:00.000Z"} +{"doc_count":2204,"split_key":136514,"timestamp":"2026-08-06T20:00:00.000Z"} +{"doc_count":907,"split_key":16509,"timestamp":"2026-08-06T20:00:00.000Z"} +{"doc_count":873,"split_key":51396,"timestamp":"2026-08-06T20:00:00.000Z"} +{"doc_count":856,"split_key":209334,"timestamp":"2026-08-06T20:00:00.000Z"} +{"doc_count":604,"split_key":396982,"timestamp":"2026-08-06T20:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-08-06T21:00:00.000Z"} +{"doc_count":1675,"split_key":197207,"timestamp":"2026-08-06T21:00:00.000Z"} +{"doc_count":1103,"split_key":396982,"timestamp":"2026-08-06T21:00:00.000Z"} +{"doc_count":621,"split_key":16509,"timestamp":"2026-08-06T21:00:00.000Z"} +{"doc_count":604,"split_key":201814,"timestamp":"2026-08-06T21:00:00.000Z"} +{"doc_count":905,"split_key":16509,"timestamp":"2026-08-06T22:00:00.000Z"} +{"doc_count":865,"split_key":51396,"timestamp":"2026-08-06T22:00:00.000Z"} +{"doc_count":594,"split_key":201814,"timestamp":"2026-08-06T22:00:00.000Z"} +{"doc_count":576,"split_key":37963,"timestamp":"2026-08-06T22:00:00.000Z"} +{"doc_count":549,"split_key":396982,"timestamp":"2026-08-06T22:00:00.000Z"} +{"doc_count":870,"split_key":4134,"timestamp":"2026-08-06T23:00:00.000Z"} +{"doc_count":713,"split_key":25369,"timestamp":"2026-08-06T23:00:00.000Z"} +{"doc_count":671,"split_key":16509,"timestamp":"2026-08-06T23:00:00.000Z"} +{"doc_count":623,"split_key":14061,"timestamp":"2026-08-06T23:00:00.000Z"} +{"doc_count":616,"split_key":201814,"timestamp":"2026-08-06T23:00:00.000Z"} +{"doc_count":10063,"split_key":14987,"timestamp":"2026-08-07T00:00:00.000Z"} +{"doc_count":2700,"split_key":211590,"timestamp":"2026-08-07T00:00:00.000Z"} +{"doc_count":1675,"split_key":202412,"timestamp":"2026-08-07T00:00:00.000Z"} +{"doc_count":699,"split_key":16509,"timestamp":"2026-08-07T00:00:00.000Z"} +{"doc_count":678,"split_key":25369,"timestamp":"2026-08-07T00:00:00.000Z"} +{"doc_count":1111,"split_key":396982,"timestamp":"2026-08-07T01:00:00.000Z"} +{"doc_count":984,"split_key":16509,"timestamp":"2026-08-07T01:00:00.000Z"} +{"doc_count":695,"split_key":209334,"timestamp":"2026-08-07T01:00:00.000Z"} +{"doc_count":663,"split_key":25369,"timestamp":"2026-08-07T01:00:00.000Z"} +{"doc_count":532,"split_key":201814,"timestamp":"2026-08-07T01:00:00.000Z"} +{"doc_count":795,"split_key":209334,"timestamp":"2026-08-07T02:00:00.000Z"} +{"doc_count":752,"split_key":25369,"timestamp":"2026-08-07T02:00:00.000Z"} +{"doc_count":751,"split_key":16509,"timestamp":"2026-08-07T02:00:00.000Z"} +{"doc_count":725,"split_key":396982,"timestamp":"2026-08-07T02:00:00.000Z"} +{"doc_count":555,"split_key":201814,"timestamp":"2026-08-07T02:00:00.000Z"} +{"doc_count":5947,"split_key":398101,"timestamp":"2026-08-07T03:00:00.000Z"} +{"doc_count":1853,"split_key":209334,"timestamp":"2026-08-07T03:00:00.000Z"} +{"doc_count":835,"split_key":396982,"timestamp":"2026-08-07T03:00:00.000Z"} +{"doc_count":663,"split_key":25369,"timestamp":"2026-08-07T03:00:00.000Z"} +{"doc_count":528,"split_key":201814,"timestamp":"2026-08-07T03:00:00.000Z"} +{"doc_count":6323,"split_key":398101,"timestamp":"2026-08-07T04:00:00.000Z"} +{"doc_count":5301,"split_key":209334,"timestamp":"2026-08-07T04:00:00.000Z"} +{"doc_count":699,"split_key":396982,"timestamp":"2026-08-07T04:00:00.000Z"} +{"doc_count":670,"split_key":16509,"timestamp":"2026-08-07T04:00:00.000Z"} +{"doc_count":599,"split_key":25369,"timestamp":"2026-08-07T04:00:00.000Z"} +{"doc_count":226906,"split_key":211590,"timestamp":"2026-08-07T05:00:00.000Z"} +{"doc_count":9298,"split_key":209334,"timestamp":"2026-08-07T05:00:00.000Z"} +{"doc_count":1612,"split_key":398101,"timestamp":"2026-08-07T05:00:00.000Z"} +{"doc_count":878,"split_key":396982,"timestamp":"2026-08-07T05:00:00.000Z"} +{"doc_count":805,"split_key":16509,"timestamp":"2026-08-07T05:00:00.000Z"} +{"doc_count":9942,"split_key":209334,"timestamp":"2026-08-07T06:00:00.000Z"} +{"doc_count":846,"split_key":398101,"timestamp":"2026-08-07T06:00:00.000Z"} +{"doc_count":711,"split_key":396982,"timestamp":"2026-08-07T06:00:00.000Z"} +{"doc_count":655,"split_key":16509,"timestamp":"2026-08-07T06:00:00.000Z"} +{"doc_count":564,"split_key":201814,"timestamp":"2026-08-07T06:00:00.000Z"} +{"doc_count":10841,"split_key":209334,"timestamp":"2026-08-07T07:00:00.000Z"} +{"doc_count":787,"split_key":398101,"timestamp":"2026-08-07T07:00:00.000Z"} +{"doc_count":600,"split_key":396982,"timestamp":"2026-08-07T07:00:00.000Z"} +{"doc_count":599,"split_key":16509,"timestamp":"2026-08-07T07:00:00.000Z"} +{"doc_count":545,"split_key":201814,"timestamp":"2026-08-07T07:00:00.000Z"} +{"doc_count":64616,"split_key":16276,"timestamp":"2026-08-07T08:00:00.000Z"} +{"doc_count":10135,"split_key":209334,"timestamp":"2026-08-07T08:00:00.000Z"} +{"doc_count":2006,"split_key":150303,"timestamp":"2026-08-07T08:00:00.000Z"} +{"doc_count":1520,"split_key":398101,"timestamp":"2026-08-07T08:00:00.000Z"} +{"doc_count":571,"split_key":201814,"timestamp":"2026-08-07T08:00:00.000Z"} +{"doc_count":7319,"split_key":209334,"timestamp":"2026-08-07T09:00:00.000Z"} +{"doc_count":2263,"split_key":48090,"timestamp":"2026-08-07T09:00:00.000Z"} +{"doc_count":1518,"split_key":51396,"timestamp":"2026-08-07T09:00:00.000Z"} +{"doc_count":1235,"split_key":398101,"timestamp":"2026-08-07T09:00:00.000Z"} +{"doc_count":1003,"split_key":150303,"timestamp":"2026-08-07T09:00:00.000Z"} +{"doc_count":10131,"split_key":209334,"timestamp":"2026-08-07T10:00:00.000Z"} +{"doc_count":2397,"split_key":48090,"timestamp":"2026-08-07T10:00:00.000Z"} +{"doc_count":1336,"split_key":398101,"timestamp":"2026-08-07T10:00:00.000Z"} +{"doc_count":1167,"split_key":58791,"timestamp":"2026-08-07T10:00:00.000Z"} +{"doc_count":822,"split_key":16509,"timestamp":"2026-08-07T10:00:00.000Z"} +{"doc_count":11162,"split_key":209334,"timestamp":"2026-08-07T11:00:00.000Z"} +{"doc_count":4225,"split_key":56971,"timestamp":"2026-08-07T11:00:00.000Z"} +{"doc_count":900,"split_key":398101,"timestamp":"2026-08-07T11:00:00.000Z"} +{"doc_count":584,"split_key":40393,"timestamp":"2026-08-07T11:00:00.000Z"} +{"doc_count":582,"split_key":26496,"timestamp":"2026-08-07T11:00:00.000Z"} +{"doc_count":14360,"split_key":209334,"timestamp":"2026-08-07T12:00:00.000Z"} +{"doc_count":3944,"split_key":56971,"timestamp":"2026-08-07T12:00:00.000Z"} +{"doc_count":929,"split_key":51396,"timestamp":"2026-08-07T12:00:00.000Z"} +{"doc_count":596,"split_key":40393,"timestamp":"2026-08-07T12:00:00.000Z"} +{"doc_count":576,"split_key":16509,"timestamp":"2026-08-07T12:00:00.000Z"} +{"doc_count":13860,"split_key":209334,"timestamp":"2026-08-07T13:00:00.000Z"} +{"doc_count":3111,"split_key":56971,"timestamp":"2026-08-07T13:00:00.000Z"} +{"doc_count":964,"split_key":16509,"timestamp":"2026-08-07T13:00:00.000Z"} +{"doc_count":582,"split_key":40393,"timestamp":"2026-08-07T13:00:00.000Z"} +{"doc_count":579,"split_key":201814,"timestamp":"2026-08-07T13:00:00.000Z"} +{"doc_count":17891,"split_key":209334,"timestamp":"2026-08-07T14:00:00.000Z"} +{"doc_count":693,"split_key":51396,"timestamp":"2026-08-07T14:00:00.000Z"} +{"doc_count":585,"split_key":16509,"timestamp":"2026-08-07T14:00:00.000Z"} +{"doc_count":576,"split_key":201814,"timestamp":"2026-08-07T14:00:00.000Z"} +{"doc_count":414,"split_key":53667,"timestamp":"2026-08-07T14:00:00.000Z"} +{"doc_count":12733,"split_key":209334,"timestamp":"2026-08-07T15:00:00.000Z"} +{"doc_count":5067,"split_key":48090,"timestamp":"2026-08-07T15:00:00.000Z"} +{"doc_count":758,"split_key":16509,"timestamp":"2026-08-07T15:00:00.000Z"} +{"doc_count":687,"split_key":14618,"timestamp":"2026-08-07T15:00:00.000Z"} +{"doc_count":599,"split_key":201814,"timestamp":"2026-08-07T15:00:00.000Z"} +{"doc_count":25062,"split_key":209334,"timestamp":"2026-08-07T16:00:00.000Z"} +{"doc_count":1679,"split_key":51396,"timestamp":"2026-08-07T16:00:00.000Z"} +{"doc_count":1634,"split_key":48090,"timestamp":"2026-08-07T16:00:00.000Z"} +{"doc_count":689,"split_key":24323,"timestamp":"2026-08-07T16:00:00.000Z"} +{"doc_count":574,"split_key":201814,"timestamp":"2026-08-07T16:00:00.000Z"} +{"doc_count":13572,"split_key":209334,"timestamp":"2026-08-07T17:00:00.000Z"} +{"doc_count":1541,"split_key":51396,"timestamp":"2026-08-07T17:00:00.000Z"} +{"doc_count":864,"split_key":16509,"timestamp":"2026-08-07T17:00:00.000Z"} +{"doc_count":625,"split_key":396982,"timestamp":"2026-08-07T17:00:00.000Z"} +{"doc_count":565,"split_key":201814,"timestamp":"2026-08-07T17:00:00.000Z"} +{"doc_count":12541,"split_key":209334,"timestamp":"2026-08-07T18:00:00.000Z"} +{"doc_count":1216,"split_key":51396,"timestamp":"2026-08-07T18:00:00.000Z"} +{"doc_count":738,"split_key":16509,"timestamp":"2026-08-07T18:00:00.000Z"} +{"doc_count":579,"split_key":201814,"timestamp":"2026-08-07T18:00:00.000Z"} +{"doc_count":501,"split_key":396982,"timestamp":"2026-08-07T18:00:00.000Z"} +{"doc_count":12891,"split_key":211590,"timestamp":"2026-08-07T19:00:00.000Z"} +{"doc_count":3397,"split_key":141995,"timestamp":"2026-08-07T19:00:00.000Z"} +{"doc_count":2170,"split_key":209334,"timestamp":"2026-08-07T19:00:00.000Z"} +{"doc_count":663,"split_key":51396,"timestamp":"2026-08-07T19:00:00.000Z"} +{"doc_count":550,"split_key":396982,"timestamp":"2026-08-07T19:00:00.000Z"} +{"doc_count":1232,"split_key":51396,"timestamp":"2026-08-07T20:00:00.000Z"} +{"doc_count":845,"split_key":209334,"timestamp":"2026-08-07T20:00:00.000Z"} +{"doc_count":562,"split_key":24323,"timestamp":"2026-08-07T20:00:00.000Z"} +{"doc_count":541,"split_key":396982,"timestamp":"2026-08-07T20:00:00.000Z"} +{"doc_count":537,"split_key":16509,"timestamp":"2026-08-07T20:00:00.000Z"} +{"doc_count":1063,"split_key":37963,"timestamp":"2026-08-07T21:00:00.000Z"} +{"doc_count":700,"split_key":396982,"timestamp":"2026-08-07T21:00:00.000Z"} +{"doc_count":662,"split_key":16509,"timestamp":"2026-08-07T21:00:00.000Z"} +{"doc_count":613,"split_key":209854,"timestamp":"2026-08-07T21:00:00.000Z"} +{"doc_count":595,"split_key":209334,"timestamp":"2026-08-07T21:00:00.000Z"} +{"doc_count":2097,"split_key":58087,"timestamp":"2026-08-07T22:00:00.000Z"} +{"doc_count":1071,"split_key":51396,"timestamp":"2026-08-07T22:00:00.000Z"} +{"doc_count":909,"split_key":24323,"timestamp":"2026-08-07T22:00:00.000Z"} +{"doc_count":687,"split_key":25369,"timestamp":"2026-08-07T22:00:00.000Z"} +{"doc_count":556,"split_key":201814,"timestamp":"2026-08-07T22:00:00.000Z"} +{"doc_count":1798,"split_key":51396,"timestamp":"2026-08-07T23:00:00.000Z"} +{"doc_count":1123,"split_key":24323,"timestamp":"2026-08-07T23:00:00.000Z"} +{"doc_count":726,"split_key":25369,"timestamp":"2026-08-07T23:00:00.000Z"} +{"doc_count":719,"split_key":16509,"timestamp":"2026-08-07T23:00:00.000Z"} +{"doc_count":544,"split_key":201814,"timestamp":"2026-08-07T23:00:00.000Z"} +{"doc_count":12707,"split_key":14987,"timestamp":"2026-08-08T00:00:00.000Z"} +{"doc_count":1412,"split_key":51396,"timestamp":"2026-08-08T00:00:00.000Z"} +{"doc_count":1314,"split_key":399244,"timestamp":"2026-08-08T00:00:00.000Z"} +{"doc_count":1088,"split_key":24323,"timestamp":"2026-08-08T00:00:00.000Z"} +{"doc_count":1010,"split_key":36947,"timestamp":"2026-08-08T00:00:00.000Z"} +{"doc_count":4273,"split_key":399244,"timestamp":"2026-08-08T01:00:00.000Z"} +{"doc_count":2900,"split_key":36947,"timestamp":"2026-08-08T01:00:00.000Z"} +{"doc_count":1158,"split_key":135377,"timestamp":"2026-08-08T01:00:00.000Z"} +{"doc_count":1066,"split_key":24323,"timestamp":"2026-08-08T01:00:00.000Z"} +{"doc_count":922,"split_key":16509,"timestamp":"2026-08-08T01:00:00.000Z"} +{"doc_count":7080,"split_key":36947,"timestamp":"2026-08-08T02:00:00.000Z"} +{"doc_count":4257,"split_key":399244,"timestamp":"2026-08-08T02:00:00.000Z"} +{"doc_count":1019,"split_key":24323,"timestamp":"2026-08-08T02:00:00.000Z"} +{"doc_count":873,"split_key":16509,"timestamp":"2026-08-08T02:00:00.000Z"} +{"doc_count":770,"split_key":209334,"timestamp":"2026-08-08T02:00:00.000Z"} +{"doc_count":4184,"split_key":399244,"timestamp":"2026-08-08T03:00:00.000Z"} +{"doc_count":1838,"split_key":209334,"timestamp":"2026-08-08T03:00:00.000Z"} +{"doc_count":959,"split_key":24323,"timestamp":"2026-08-08T03:00:00.000Z"} +{"doc_count":692,"split_key":16509,"timestamp":"2026-08-08T03:00:00.000Z"} +{"doc_count":664,"split_key":4134,"timestamp":"2026-08-08T03:00:00.000Z"} +{"doc_count":5367,"split_key":209334,"timestamp":"2026-08-08T04:00:00.000Z"} +{"doc_count":4270,"split_key":399244,"timestamp":"2026-08-08T04:00:00.000Z"} +{"doc_count":917,"split_key":24323,"timestamp":"2026-08-08T04:00:00.000Z"} +{"doc_count":910,"split_key":396982,"timestamp":"2026-08-08T04:00:00.000Z"} +{"doc_count":851,"split_key":4907,"timestamp":"2026-08-08T04:00:00.000Z"} +{"doc_count":9400,"split_key":209334,"timestamp":"2026-08-08T05:00:00.000Z"} +{"doc_count":4268,"split_key":399244,"timestamp":"2026-08-08T05:00:00.000Z"} +{"doc_count":918,"split_key":24323,"timestamp":"2026-08-08T05:00:00.000Z"} +{"doc_count":851,"split_key":4907,"timestamp":"2026-08-08T05:00:00.000Z"} +{"doc_count":707,"split_key":396982,"timestamp":"2026-08-08T05:00:00.000Z"} +{"doc_count":9716,"split_key":209334,"timestamp":"2026-08-08T06:00:00.000Z"} +{"doc_count":4375,"split_key":399244,"timestamp":"2026-08-08T06:00:00.000Z"} +{"doc_count":907,"split_key":24323,"timestamp":"2026-08-08T06:00:00.000Z"} +{"doc_count":848,"split_key":4907,"timestamp":"2026-08-08T06:00:00.000Z"} +{"doc_count":752,"split_key":396982,"timestamp":"2026-08-08T06:00:00.000Z"} +{"doc_count":10756,"split_key":209334,"timestamp":"2026-08-08T07:00:00.000Z"} +{"doc_count":4355,"split_key":399244,"timestamp":"2026-08-08T07:00:00.000Z"} +{"doc_count":921,"split_key":24323,"timestamp":"2026-08-08T07:00:00.000Z"} +{"doc_count":851,"split_key":4907,"timestamp":"2026-08-08T07:00:00.000Z"} +{"doc_count":583,"split_key":201814,"timestamp":"2026-08-08T07:00:00.000Z"} +{"doc_count":64509,"split_key":23470,"timestamp":"2026-08-08T08:00:00.000Z"} +{"doc_count":10082,"split_key":209334,"timestamp":"2026-08-08T08:00:00.000Z"} +{"doc_count":4414,"split_key":399244,"timestamp":"2026-08-08T08:00:00.000Z"} +{"doc_count":934,"split_key":24323,"timestamp":"2026-08-08T08:00:00.000Z"} +{"doc_count":605,"split_key":16509,"timestamp":"2026-08-08T08:00:00.000Z"} +{"doc_count":7361,"split_key":209334,"timestamp":"2026-08-08T09:00:00.000Z"} +{"doc_count":4419,"split_key":399244,"timestamp":"2026-08-08T09:00:00.000Z"} +{"doc_count":2511,"split_key":4907,"timestamp":"2026-08-08T09:00:00.000Z"} +{"doc_count":949,"split_key":24323,"timestamp":"2026-08-08T09:00:00.000Z"} +{"doc_count":689,"split_key":16509,"timestamp":"2026-08-08T09:00:00.000Z"} +{"doc_count":10037,"split_key":209334,"timestamp":"2026-08-08T10:00:00.000Z"} +{"doc_count":4343,"split_key":399244,"timestamp":"2026-08-08T10:00:00.000Z"} +{"doc_count":1196,"split_key":3462,"timestamp":"2026-08-08T10:00:00.000Z"} +{"doc_count":1165,"split_key":396982,"timestamp":"2026-08-08T10:00:00.000Z"} +{"doc_count":940,"split_key":24323,"timestamp":"2026-08-08T10:00:00.000Z"} +{"doc_count":11149,"split_key":209334,"timestamp":"2026-08-08T11:00:00.000Z"} +{"doc_count":4284,"split_key":399244,"timestamp":"2026-08-08T11:00:00.000Z"} +{"doc_count":961,"split_key":24323,"timestamp":"2026-08-08T11:00:00.000Z"} +{"doc_count":757,"split_key":137688,"timestamp":"2026-08-08T11:00:00.000Z"} +{"doc_count":590,"split_key":211590,"timestamp":"2026-08-08T11:00:00.000Z"} +{"doc_count":13936,"split_key":209334,"timestamp":"2026-08-08T12:00:00.000Z"} +{"doc_count":4247,"split_key":399244,"timestamp":"2026-08-08T12:00:00.000Z"} +{"doc_count":950,"split_key":24323,"timestamp":"2026-08-08T12:00:00.000Z"} +{"doc_count":850,"split_key":4907,"timestamp":"2026-08-08T12:00:00.000Z"} +{"doc_count":727,"split_key":137688,"timestamp":"2026-08-08T12:00:00.000Z"} +{"doc_count":14041,"split_key":209334,"timestamp":"2026-08-08T13:00:00.000Z"} +{"doc_count":4198,"split_key":399244,"timestamp":"2026-08-08T13:00:00.000Z"} +{"doc_count":945,"split_key":24323,"timestamp":"2026-08-08T13:00:00.000Z"} +{"doc_count":851,"split_key":4907,"timestamp":"2026-08-08T13:00:00.000Z"} +{"doc_count":758,"split_key":137688,"timestamp":"2026-08-08T13:00:00.000Z"} +{"doc_count":17923,"split_key":209334,"timestamp":"2026-08-08T14:00:00.000Z"} +{"doc_count":4205,"split_key":399244,"timestamp":"2026-08-08T14:00:00.000Z"} +{"doc_count":906,"split_key":24323,"timestamp":"2026-08-08T14:00:00.000Z"} +{"doc_count":848,"split_key":4907,"timestamp":"2026-08-08T14:00:00.000Z"} +{"doc_count":745,"split_key":137688,"timestamp":"2026-08-08T14:00:00.000Z"} +{"doc_count":8946,"split_key":209334,"timestamp":"2026-08-08T15:00:00.000Z"} +{"doc_count":2737,"split_key":399244,"timestamp":"2026-08-08T15:00:00.000Z"} +{"doc_count":961,"split_key":24323,"timestamp":"2026-08-08T15:00:00.000Z"} +{"doc_count":769,"split_key":4907,"timestamp":"2026-08-08T15:00:00.000Z"} +{"doc_count":758,"split_key":137688,"timestamp":"2026-08-08T15:00:00.000Z"} +{"doc_count":28073,"split_key":209334,"timestamp":"2026-08-08T16:00:00.000Z"} +{"doc_count":1154,"split_key":399244,"timestamp":"2026-08-08T16:00:00.000Z"} +{"doc_count":1052,"split_key":24323,"timestamp":"2026-08-08T16:00:00.000Z"} +{"doc_count":1048,"split_key":37963,"timestamp":"2026-08-08T16:00:00.000Z"} +{"doc_count":799,"split_key":51396,"timestamp":"2026-08-08T16:00:00.000Z"} +{"doc_count":12900,"split_key":209334,"timestamp":"2026-08-08T17:00:00.000Z"} +{"doc_count":8338,"split_key":149089,"timestamp":"2026-08-08T17:00:00.000Z"} +{"doc_count":3219,"split_key":399244,"timestamp":"2026-08-08T17:00:00.000Z"} +{"doc_count":1099,"split_key":24323,"timestamp":"2026-08-08T17:00:00.000Z"} +{"doc_count":847,"split_key":4907,"timestamp":"2026-08-08T17:00:00.000Z"} +{"doc_count":13887,"split_key":209334,"timestamp":"2026-08-08T18:00:00.000Z"} +{"doc_count":4110,"split_key":399244,"timestamp":"2026-08-08T18:00:00.000Z"} +{"doc_count":2216,"split_key":211590,"timestamp":"2026-08-08T18:00:00.000Z"} +{"doc_count":1196,"split_key":141995,"timestamp":"2026-08-08T18:00:00.000Z"} +{"doc_count":1012,"split_key":24323,"timestamp":"2026-08-08T18:00:00.000Z"} +{"doc_count":4203,"split_key":399244,"timestamp":"2026-08-08T19:00:00.000Z"} +{"doc_count":2305,"split_key":209334,"timestamp":"2026-08-08T19:00:00.000Z"} +{"doc_count":1053,"split_key":24323,"timestamp":"2026-08-08T19:00:00.000Z"} +{"doc_count":1008,"split_key":37963,"timestamp":"2026-08-08T19:00:00.000Z"} +{"doc_count":876,"split_key":51396,"timestamp":"2026-08-08T19:00:00.000Z"} +{"doc_count":4328,"split_key":399244,"timestamp":"2026-08-08T20:00:00.000Z"} +{"doc_count":1595,"split_key":211590,"timestamp":"2026-08-08T20:00:00.000Z"} +{"doc_count":1016,"split_key":24323,"timestamp":"2026-08-08T20:00:00.000Z"} +{"doc_count":1015,"split_key":37963,"timestamp":"2026-08-08T20:00:00.000Z"} +{"doc_count":846,"split_key":4907,"timestamp":"2026-08-08T20:00:00.000Z"} +{"doc_count":2215,"split_key":399244,"timestamp":"2026-08-08T21:00:00.000Z"} +{"doc_count":1048,"split_key":24323,"timestamp":"2026-08-08T21:00:00.000Z"} +{"doc_count":1044,"split_key":37963,"timestamp":"2026-08-08T21:00:00.000Z"} +{"doc_count":846,"split_key":4907,"timestamp":"2026-08-08T21:00:00.000Z"} +{"doc_count":752,"split_key":396982,"timestamp":"2026-08-08T21:00:00.000Z"} +{"doc_count":1758,"split_key":399244,"timestamp":"2026-08-08T22:00:00.000Z"} +{"doc_count":1073,"split_key":24323,"timestamp":"2026-08-08T22:00:00.000Z"} +{"doc_count":888,"split_key":37963,"timestamp":"2026-08-08T22:00:00.000Z"} +{"doc_count":848,"split_key":4907,"timestamp":"2026-08-08T22:00:00.000Z"} +{"doc_count":575,"split_key":201814,"timestamp":"2026-08-08T22:00:00.000Z"} +{"doc_count":3376,"split_key":399244,"timestamp":"2026-08-08T23:00:00.000Z"} +{"doc_count":1691,"split_key":211590,"timestamp":"2026-08-08T23:00:00.000Z"} +{"doc_count":1029,"split_key":24323,"timestamp":"2026-08-08T23:00:00.000Z"} +{"doc_count":1014,"split_key":37963,"timestamp":"2026-08-08T23:00:00.000Z"} +{"doc_count":848,"split_key":4907,"timestamp":"2026-08-08T23:00:00.000Z"} +{"doc_count":10009,"split_key":14987,"timestamp":"2026-08-09T00:00:00.000Z"} +{"doc_count":2896,"split_key":399244,"timestamp":"2026-08-09T00:00:00.000Z"} +{"doc_count":1281,"split_key":211590,"timestamp":"2026-08-09T00:00:00.000Z"} +{"doc_count":1011,"split_key":4134,"timestamp":"2026-08-09T00:00:00.000Z"} +{"doc_count":979,"split_key":24323,"timestamp":"2026-08-09T00:00:00.000Z"} +{"doc_count":2838,"split_key":399244,"timestamp":"2026-08-09T01:00:00.000Z"} +{"doc_count":2376,"split_key":211590,"timestamp":"2026-08-09T01:00:00.000Z"} +{"doc_count":1112,"split_key":396982,"timestamp":"2026-08-09T01:00:00.000Z"} +{"doc_count":1110,"split_key":209334,"timestamp":"2026-08-09T01:00:00.000Z"} +{"doc_count":1006,"split_key":24323,"timestamp":"2026-08-09T01:00:00.000Z"} +{"doc_count":2417,"split_key":399244,"timestamp":"2026-08-09T02:00:00.000Z"} +{"doc_count":1222,"split_key":396982,"timestamp":"2026-08-09T02:00:00.000Z"} +{"doc_count":965,"split_key":24323,"timestamp":"2026-08-09T02:00:00.000Z"} +{"doc_count":848,"split_key":4907,"timestamp":"2026-08-09T02:00:00.000Z"} +{"doc_count":783,"split_key":209334,"timestamp":"2026-08-09T02:00:00.000Z"} +{"doc_count":2103,"split_key":399244,"timestamp":"2026-08-09T03:00:00.000Z"} +{"doc_count":1842,"split_key":209334,"timestamp":"2026-08-09T03:00:00.000Z"} +{"doc_count":954,"split_key":396982,"timestamp":"2026-08-09T03:00:00.000Z"} +{"doc_count":949,"split_key":24323,"timestamp":"2026-08-09T03:00:00.000Z"} +{"doc_count":846,"split_key":4907,"timestamp":"2026-08-09T03:00:00.000Z"} +{"doc_count":5278,"split_key":209334,"timestamp":"2026-08-09T04:00:00.000Z"} +{"doc_count":3140,"split_key":211590,"timestamp":"2026-08-09T04:00:00.000Z"} +{"doc_count":2213,"split_key":399244,"timestamp":"2026-08-09T04:00:00.000Z"} +{"doc_count":1116,"split_key":24323,"timestamp":"2026-08-09T04:00:00.000Z"} +{"doc_count":848,"split_key":4907,"timestamp":"2026-08-09T04:00:00.000Z"} +{"doc_count":9549,"split_key":209334,"timestamp":"2026-08-09T05:00:00.000Z"} +{"doc_count":2527,"split_key":399244,"timestamp":"2026-08-09T05:00:00.000Z"} +{"doc_count":1189,"split_key":24323,"timestamp":"2026-08-09T05:00:00.000Z"} +{"doc_count":924,"split_key":396982,"timestamp":"2026-08-09T05:00:00.000Z"} +{"doc_count":842,"split_key":4907,"timestamp":"2026-08-09T05:00:00.000Z"} +{"doc_count":9837,"split_key":209334,"timestamp":"2026-08-09T06:00:00.000Z"} +{"doc_count":1920,"split_key":399244,"timestamp":"2026-08-09T06:00:00.000Z"} +{"doc_count":1146,"split_key":24323,"timestamp":"2026-08-09T06:00:00.000Z"} +{"doc_count":843,"split_key":396982,"timestamp":"2026-08-09T06:00:00.000Z"} +{"doc_count":761,"split_key":398101,"timestamp":"2026-08-09T06:00:00.000Z"} +{"doc_count":10821,"split_key":209334,"timestamp":"2026-08-09T07:00:00.000Z"} +{"doc_count":1709,"split_key":399244,"timestamp":"2026-08-09T07:00:00.000Z"} +{"doc_count":1113,"split_key":24323,"timestamp":"2026-08-09T07:00:00.000Z"} +{"doc_count":578,"split_key":137688,"timestamp":"2026-08-09T07:00:00.000Z"} +{"doc_count":554,"split_key":45102,"timestamp":"2026-08-09T07:00:00.000Z"} +{"doc_count":64510,"split_key":23470,"timestamp":"2026-08-09T08:00:00.000Z"} +{"doc_count":9944,"split_key":209334,"timestamp":"2026-08-09T08:00:00.000Z"} +{"doc_count":7195,"split_key":40065,"timestamp":"2026-08-09T08:00:00.000Z"} +{"doc_count":2255,"split_key":45102,"timestamp":"2026-08-09T08:00:00.000Z"} +{"doc_count":1756,"split_key":399244,"timestamp":"2026-08-09T08:00:00.000Z"} +{"doc_count":18487,"split_key":40065,"timestamp":"2026-08-09T09:00:00.000Z"} +{"doc_count":7781,"split_key":209334,"timestamp":"2026-08-09T09:00:00.000Z"} +{"doc_count":2937,"split_key":399244,"timestamp":"2026-08-09T09:00:00.000Z"} +{"doc_count":1814,"split_key":45102,"timestamp":"2026-08-09T09:00:00.000Z"} +{"doc_count":999,"split_key":24323,"timestamp":"2026-08-09T09:00:00.000Z"} +{"doc_count":11579,"split_key":40065,"timestamp":"2026-08-09T10:00:00.000Z"} +{"doc_count":11384,"split_key":209334,"timestamp":"2026-08-09T10:00:00.000Z"} +{"doc_count":2020,"split_key":399244,"timestamp":"2026-08-09T10:00:00.000Z"} +{"doc_count":1189,"split_key":211590,"timestamp":"2026-08-09T10:00:00.000Z"} +{"doc_count":1033,"split_key":45102,"timestamp":"2026-08-09T10:00:00.000Z"} +{"doc_count":10578,"split_key":209334,"timestamp":"2026-08-09T11:00:00.000Z"} +{"doc_count":4346,"split_key":54600,"timestamp":"2026-08-09T11:00:00.000Z"} +{"doc_count":2245,"split_key":40065,"timestamp":"2026-08-09T11:00:00.000Z"} +{"doc_count":1431,"split_key":45102,"timestamp":"2026-08-09T11:00:00.000Z"} +{"doc_count":1153,"split_key":51396,"timestamp":"2026-08-09T11:00:00.000Z"} +{"doc_count":14613,"split_key":209334,"timestamp":"2026-08-09T12:00:00.000Z"} +{"doc_count":10269,"split_key":54600,"timestamp":"2026-08-09T12:00:00.000Z"} +{"doc_count":6079,"split_key":211590,"timestamp":"2026-08-09T12:00:00.000Z"} +{"doc_count":1980,"split_key":209693,"timestamp":"2026-08-09T12:00:00.000Z"} +{"doc_count":1662,"split_key":399244,"timestamp":"2026-08-09T12:00:00.000Z"} +{"doc_count":13686,"split_key":209334,"timestamp":"2026-08-09T13:00:00.000Z"} +{"doc_count":7177,"split_key":48090,"timestamp":"2026-08-09T13:00:00.000Z"} +{"doc_count":5008,"split_key":54600,"timestamp":"2026-08-09T13:00:00.000Z"} +{"doc_count":5006,"split_key":209630,"timestamp":"2026-08-09T13:00:00.000Z"} +{"doc_count":1952,"split_key":274069,"timestamp":"2026-08-09T13:00:00.000Z"} +{"doc_count":18988,"split_key":209334,"timestamp":"2026-08-09T14:00:00.000Z"} +{"doc_count":4040,"split_key":211590,"timestamp":"2026-08-09T14:00:00.000Z"} +{"doc_count":3020,"split_key":209630,"timestamp":"2026-08-09T14:00:00.000Z"} +{"doc_count":2923,"split_key":209693,"timestamp":"2026-08-09T14:00:00.000Z"} +{"doc_count":2280,"split_key":48090,"timestamp":"2026-08-09T14:00:00.000Z"} +{"doc_count":8516,"split_key":209334,"timestamp":"2026-08-09T15:00:00.000Z"} +{"doc_count":1451,"split_key":8447,"timestamp":"2026-08-09T15:00:00.000Z"} +{"doc_count":1383,"split_key":209630,"timestamp":"2026-08-09T15:00:00.000Z"} +{"doc_count":1368,"split_key":45102,"timestamp":"2026-08-09T15:00:00.000Z"} +{"doc_count":1139,"split_key":211590,"timestamp":"2026-08-09T15:00:00.000Z"} +{"doc_count":28907,"split_key":209334,"timestamp":"2026-08-09T16:00:00.000Z"} +{"doc_count":6318,"split_key":14061,"timestamp":"2026-08-09T16:00:00.000Z"} +{"doc_count":4224,"split_key":209630,"timestamp":"2026-08-09T16:00:00.000Z"} +{"doc_count":3675,"split_key":399244,"timestamp":"2026-08-09T16:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-08-09T16:00:00.000Z"} +{"doc_count":22447,"split_key":14061,"timestamp":"2026-08-09T17:00:00.000Z"} +{"doc_count":11892,"split_key":209334,"timestamp":"2026-08-09T17:00:00.000Z"} +{"doc_count":4239,"split_key":399244,"timestamp":"2026-08-09T17:00:00.000Z"} +{"doc_count":3205,"split_key":209630,"timestamp":"2026-08-09T17:00:00.000Z"} +{"doc_count":2173,"split_key":211590,"timestamp":"2026-08-09T17:00:00.000Z"} +{"doc_count":27729,"split_key":14061,"timestamp":"2026-08-09T18:00:00.000Z"} +{"doc_count":14384,"split_key":209334,"timestamp":"2026-08-09T18:00:00.000Z"} +{"doc_count":4650,"split_key":211590,"timestamp":"2026-08-09T18:00:00.000Z"} +{"doc_count":4323,"split_key":399244,"timestamp":"2026-08-09T18:00:00.000Z"} +{"doc_count":1949,"split_key":213887,"timestamp":"2026-08-09T18:00:00.000Z"} +{"doc_count":11448,"split_key":54600,"timestamp":"2026-08-09T19:00:00.000Z"} +{"doc_count":11437,"split_key":14061,"timestamp":"2026-08-09T19:00:00.000Z"} +{"doc_count":4332,"split_key":399244,"timestamp":"2026-08-09T19:00:00.000Z"} +{"doc_count":4263,"split_key":209630,"timestamp":"2026-08-09T19:00:00.000Z"} +{"doc_count":2597,"split_key":209334,"timestamp":"2026-08-09T19:00:00.000Z"} +{"doc_count":16484,"split_key":54600,"timestamp":"2026-08-09T20:00:00.000Z"} +{"doc_count":4352,"split_key":399244,"timestamp":"2026-08-09T20:00:00.000Z"} +{"doc_count":3091,"split_key":209630,"timestamp":"2026-08-09T20:00:00.000Z"} +{"doc_count":1660,"split_key":211590,"timestamp":"2026-08-09T20:00:00.000Z"} +{"doc_count":1228,"split_key":274069,"timestamp":"2026-08-09T20:00:00.000Z"} +{"doc_count":4829,"split_key":54600,"timestamp":"2026-08-09T21:00:00.000Z"} +{"doc_count":1368,"split_key":209630,"timestamp":"2026-08-09T21:00:00.000Z"} +{"doc_count":1280,"split_key":399244,"timestamp":"2026-08-09T21:00:00.000Z"} +{"doc_count":734,"split_key":396982,"timestamp":"2026-08-09T21:00:00.000Z"} +{"doc_count":652,"split_key":4907,"timestamp":"2026-08-09T21:00:00.000Z"} +{"doc_count":4096,"split_key":209630,"timestamp":"2026-08-09T22:00:00.000Z"} +{"doc_count":3818,"split_key":211590,"timestamp":"2026-08-09T22:00:00.000Z"} +{"doc_count":2282,"split_key":399244,"timestamp":"2026-08-09T22:00:00.000Z"} +{"doc_count":1779,"split_key":274069,"timestamp":"2026-08-09T22:00:00.000Z"} +{"doc_count":662,"split_key":25369,"timestamp":"2026-08-09T22:00:00.000Z"} +{"doc_count":3505,"split_key":399244,"timestamp":"2026-08-09T23:00:00.000Z"} +{"doc_count":3320,"split_key":209630,"timestamp":"2026-08-09T23:00:00.000Z"} +{"doc_count":1210,"split_key":274069,"timestamp":"2026-08-09T23:00:00.000Z"} +{"doc_count":652,"split_key":4907,"timestamp":"2026-08-09T23:00:00.000Z"} +{"doc_count":644,"split_key":25369,"timestamp":"2026-08-09T23:00:00.000Z"} +{"doc_count":11968,"split_key":14061,"timestamp":"2026-08-10T00:00:00.000Z"} +{"doc_count":4285,"split_key":399244,"timestamp":"2026-08-10T00:00:00.000Z"} +{"doc_count":1163,"split_key":209630,"timestamp":"2026-08-10T00:00:00.000Z"} +{"doc_count":756,"split_key":16509,"timestamp":"2026-08-10T00:00:00.000Z"} +{"doc_count":695,"split_key":25369,"timestamp":"2026-08-10T00:00:00.000Z"} +{"doc_count":16159,"split_key":14061,"timestamp":"2026-08-10T01:00:00.000Z"} +{"doc_count":4306,"split_key":399244,"timestamp":"2026-08-10T01:00:00.000Z"} +{"doc_count":2902,"split_key":209630,"timestamp":"2026-08-10T01:00:00.000Z"} +{"doc_count":2487,"split_key":211590,"timestamp":"2026-08-10T01:00:00.000Z"} +{"doc_count":2182,"split_key":13649,"timestamp":"2026-08-10T01:00:00.000Z"} +{"doc_count":4345,"split_key":399244,"timestamp":"2026-08-10T02:00:00.000Z"} +{"doc_count":4169,"split_key":209630,"timestamp":"2026-08-10T02:00:00.000Z"} +{"doc_count":2555,"split_key":211590,"timestamp":"2026-08-10T02:00:00.000Z"} +{"doc_count":2230,"split_key":14061,"timestamp":"2026-08-10T02:00:00.000Z"} +{"doc_count":1629,"split_key":274069,"timestamp":"2026-08-10T02:00:00.000Z"} +{"doc_count":4313,"split_key":399244,"timestamp":"2026-08-10T03:00:00.000Z"} +{"doc_count":1847,"split_key":209334,"timestamp":"2026-08-10T03:00:00.000Z"} +{"doc_count":1416,"split_key":209630,"timestamp":"2026-08-10T03:00:00.000Z"} +{"doc_count":1195,"split_key":11427,"timestamp":"2026-08-10T03:00:00.000Z"} +{"doc_count":694,"split_key":16276,"timestamp":"2026-08-10T03:00:00.000Z"} +{"doc_count":6439,"split_key":54600,"timestamp":"2026-08-10T04:00:00.000Z"} +{"doc_count":4960,"split_key":209334,"timestamp":"2026-08-10T04:00:00.000Z"} +{"doc_count":4319,"split_key":399244,"timestamp":"2026-08-10T04:00:00.000Z"} +{"doc_count":3085,"split_key":209630,"timestamp":"2026-08-10T04:00:00.000Z"} +{"doc_count":1288,"split_key":274069,"timestamp":"2026-08-10T04:00:00.000Z"} +{"doc_count":14461,"split_key":54600,"timestamp":"2026-08-10T05:00:00.000Z"} +{"doc_count":9658,"split_key":209334,"timestamp":"2026-08-10T05:00:00.000Z"} +{"doc_count":6310,"split_key":149089,"timestamp":"2026-08-10T05:00:00.000Z"} +{"doc_count":4293,"split_key":399244,"timestamp":"2026-08-10T05:00:00.000Z"} +{"doc_count":4181,"split_key":209630,"timestamp":"2026-08-10T05:00:00.000Z"} +{"doc_count":9771,"split_key":209334,"timestamp":"2026-08-10T06:00:00.000Z"} +{"doc_count":7783,"split_key":54600,"timestamp":"2026-08-10T06:00:00.000Z"} +{"doc_count":4285,"split_key":399244,"timestamp":"2026-08-10T06:00:00.000Z"} +{"doc_count":2210,"split_key":149089,"timestamp":"2026-08-10T06:00:00.000Z"} +{"doc_count":1410,"split_key":209630,"timestamp":"2026-08-10T06:00:00.000Z"} +{"doc_count":9875,"split_key":54600,"timestamp":"2026-08-10T07:00:00.000Z"} +{"doc_count":9355,"split_key":209334,"timestamp":"2026-08-10T07:00:00.000Z"} +{"doc_count":4234,"split_key":399244,"timestamp":"2026-08-10T07:00:00.000Z"} +{"doc_count":2990,"split_key":209630,"timestamp":"2026-08-10T07:00:00.000Z"} +{"doc_count":2412,"split_key":211590,"timestamp":"2026-08-10T07:00:00.000Z"} +{"doc_count":15159,"split_key":54600,"timestamp":"2026-08-10T08:00:00.000Z"} +{"doc_count":10984,"split_key":209334,"timestamp":"2026-08-10T08:00:00.000Z"} +{"doc_count":4185,"split_key":209630,"timestamp":"2026-08-10T08:00:00.000Z"} +{"doc_count":3213,"split_key":399244,"timestamp":"2026-08-10T08:00:00.000Z"} +{"doc_count":1657,"split_key":274069,"timestamp":"2026-08-10T08:00:00.000Z"} +{"doc_count":7423,"split_key":209334,"timestamp":"2026-08-10T09:00:00.000Z"} +{"doc_count":5079,"split_key":54600,"timestamp":"2026-08-10T09:00:00.000Z"} +{"doc_count":3823,"split_key":399244,"timestamp":"2026-08-10T09:00:00.000Z"} +{"doc_count":1424,"split_key":209630,"timestamp":"2026-08-10T09:00:00.000Z"} +{"doc_count":821,"split_key":138915,"timestamp":"2026-08-10T09:00:00.000Z"} +{"doc_count":10227,"split_key":209334,"timestamp":"2026-08-10T10:00:00.000Z"} +{"doc_count":3109,"split_key":209630,"timestamp":"2026-08-10T10:00:00.000Z"} +{"doc_count":2492,"split_key":399244,"timestamp":"2026-08-10T10:00:00.000Z"} +{"doc_count":1294,"split_key":274069,"timestamp":"2026-08-10T10:00:00.000Z"} +{"doc_count":1168,"split_key":3462,"timestamp":"2026-08-10T10:00:00.000Z"} +{"doc_count":10337,"split_key":209334,"timestamp":"2026-08-10T11:00:00.000Z"} +{"doc_count":4175,"split_key":209630,"timestamp":"2026-08-10T11:00:00.000Z"} +{"doc_count":3853,"split_key":399244,"timestamp":"2026-08-10T11:00:00.000Z"} +{"doc_count":3157,"split_key":211590,"timestamp":"2026-08-10T11:00:00.000Z"} +{"doc_count":1590,"split_key":274069,"timestamp":"2026-08-10T11:00:00.000Z"} +{"doc_count":17336,"split_key":209334,"timestamp":"2026-08-10T12:00:00.000Z"} +{"doc_count":14665,"split_key":45899,"timestamp":"2026-08-10T12:00:00.000Z"} +{"doc_count":3972,"split_key":211590,"timestamp":"2026-08-10T12:00:00.000Z"} +{"doc_count":1654,"split_key":131562,"timestamp":"2026-08-10T12:00:00.000Z"} +{"doc_count":1406,"split_key":399244,"timestamp":"2026-08-10T12:00:00.000Z"} +{"doc_count":13974,"split_key":209334,"timestamp":"2026-08-10T13:00:00.000Z"} +{"doc_count":10383,"split_key":14061,"timestamp":"2026-08-10T13:00:00.000Z"} +{"doc_count":3646,"split_key":399244,"timestamp":"2026-08-10T13:00:00.000Z"} +{"doc_count":3010,"split_key":211590,"timestamp":"2026-08-10T13:00:00.000Z"} +{"doc_count":2947,"split_key":209630,"timestamp":"2026-08-10T13:00:00.000Z"} +{"doc_count":28511,"split_key":14061,"timestamp":"2026-08-10T14:00:00.000Z"} +{"doc_count":18299,"split_key":209334,"timestamp":"2026-08-10T14:00:00.000Z"} +{"doc_count":3684,"split_key":399244,"timestamp":"2026-08-10T14:00:00.000Z"} +{"doc_count":3649,"split_key":209630,"timestamp":"2026-08-10T14:00:00.000Z"} +{"doc_count":1442,"split_key":274069,"timestamp":"2026-08-10T14:00:00.000Z"} +{"doc_count":14702,"split_key":14061,"timestamp":"2026-08-10T15:00:00.000Z"} +{"doc_count":8656,"split_key":209334,"timestamp":"2026-08-10T15:00:00.000Z"} +{"doc_count":4402,"split_key":211590,"timestamp":"2026-08-10T15:00:00.000Z"} +{"doc_count":2151,"split_key":399244,"timestamp":"2026-08-10T15:00:00.000Z"} +{"doc_count":1857,"split_key":209630,"timestamp":"2026-08-10T15:00:00.000Z"} +{"doc_count":30540,"split_key":209334,"timestamp":"2026-08-10T16:00:00.000Z"} +{"doc_count":8042,"split_key":14061,"timestamp":"2026-08-10T16:00:00.000Z"} +{"doc_count":2968,"split_key":399244,"timestamp":"2026-08-10T16:00:00.000Z"} +{"doc_count":2934,"split_key":209630,"timestamp":"2026-08-10T16:00:00.000Z"} +{"doc_count":1384,"split_key":274069,"timestamp":"2026-08-10T16:00:00.000Z"} +{"doc_count":22589,"split_key":14061,"timestamp":"2026-08-10T17:00:00.000Z"} +{"doc_count":10746,"split_key":209334,"timestamp":"2026-08-10T17:00:00.000Z"} +{"doc_count":4122,"split_key":149089,"timestamp":"2026-08-10T17:00:00.000Z"} +{"doc_count":3221,"split_key":399244,"timestamp":"2026-08-10T17:00:00.000Z"} +{"doc_count":2322,"split_key":209630,"timestamp":"2026-08-10T17:00:00.000Z"} +{"doc_count":27122,"split_key":14061,"timestamp":"2026-08-10T18:00:00.000Z"} +{"doc_count":13910,"split_key":209334,"timestamp":"2026-08-10T18:00:00.000Z"} +{"doc_count":4245,"split_key":399244,"timestamp":"2026-08-10T18:00:00.000Z"} +{"doc_count":3344,"split_key":209630,"timestamp":"2026-08-10T18:00:00.000Z"} +{"doc_count":1417,"split_key":149089,"timestamp":"2026-08-10T18:00:00.000Z"} +{"doc_count":14033,"split_key":14061,"timestamp":"2026-08-10T19:00:00.000Z"} +{"doc_count":3787,"split_key":399244,"timestamp":"2026-08-10T19:00:00.000Z"} +{"doc_count":3353,"split_key":209334,"timestamp":"2026-08-10T19:00:00.000Z"} +{"doc_count":3102,"split_key":209630,"timestamp":"2026-08-10T19:00:00.000Z"} +{"doc_count":1130,"split_key":274069,"timestamp":"2026-08-10T19:00:00.000Z"} +{"doc_count":4693,"split_key":14061,"timestamp":"2026-08-10T20:00:00.000Z"} +{"doc_count":1930,"split_key":399244,"timestamp":"2026-08-10T20:00:00.000Z"} +{"doc_count":1366,"split_key":209630,"timestamp":"2026-08-10T20:00:00.000Z"} +{"doc_count":870,"split_key":209334,"timestamp":"2026-08-10T20:00:00.000Z"} +{"doc_count":810,"split_key":16509,"timestamp":"2026-08-10T20:00:00.000Z"} +{"doc_count":2723,"split_key":209630,"timestamp":"2026-08-10T21:00:00.000Z"} +{"doc_count":1333,"split_key":274069,"timestamp":"2026-08-10T21:00:00.000Z"} +{"doc_count":692,"split_key":16509,"timestamp":"2026-08-10T21:00:00.000Z"} +{"doc_count":548,"split_key":396982,"timestamp":"2026-08-10T21:00:00.000Z"} +{"doc_count":547,"split_key":201814,"timestamp":"2026-08-10T21:00:00.000Z"} +{"doc_count":1111,"split_key":396982,"timestamp":"2026-08-10T22:00:00.000Z"} +{"doc_count":829,"split_key":8075,"timestamp":"2026-08-10T22:00:00.000Z"} +{"doc_count":646,"split_key":25369,"timestamp":"2026-08-10T22:00:00.000Z"} +{"doc_count":590,"split_key":201814,"timestamp":"2026-08-10T22:00:00.000Z"} +{"doc_count":589,"split_key":399244,"timestamp":"2026-08-10T22:00:00.000Z"} +{"doc_count":3968,"split_key":14061,"timestamp":"2026-08-10T23:00:00.000Z"} +{"doc_count":1947,"split_key":64199,"timestamp":"2026-08-10T23:00:00.000Z"} +{"doc_count":913,"split_key":205775,"timestamp":"2026-08-10T23:00:00.000Z"} +{"doc_count":636,"split_key":25369,"timestamp":"2026-08-10T23:00:00.000Z"} +{"doc_count":617,"split_key":201814,"timestamp":"2026-08-10T23:00:00.000Z"} +{"doc_count":25207,"split_key":14061,"timestamp":"2026-08-11T00:00:00.000Z"} +{"doc_count":1989,"split_key":64199,"timestamp":"2026-08-11T00:00:00.000Z"} +{"doc_count":1356,"split_key":50304,"timestamp":"2026-08-11T00:00:00.000Z"} +{"doc_count":819,"split_key":25369,"timestamp":"2026-08-11T00:00:00.000Z"} +{"doc_count":744,"split_key":14618,"timestamp":"2026-08-11T00:00:00.000Z"} +{"doc_count":15992,"split_key":14061,"timestamp":"2026-08-11T01:00:00.000Z"} +{"doc_count":2101,"split_key":64199,"timestamp":"2026-08-11T01:00:00.000Z"} +{"doc_count":1968,"split_key":203,"timestamp":"2026-08-11T01:00:00.000Z"} +{"doc_count":806,"split_key":37963,"timestamp":"2026-08-11T01:00:00.000Z"} +{"doc_count":791,"split_key":25369,"timestamp":"2026-08-11T01:00:00.000Z"} +{"doc_count":2400,"split_key":203,"timestamp":"2026-08-11T02:00:00.000Z"} +{"doc_count":2374,"split_key":64199,"timestamp":"2026-08-11T02:00:00.000Z"} +{"doc_count":907,"split_key":25369,"timestamp":"2026-08-11T02:00:00.000Z"} +{"doc_count":904,"split_key":17552,"timestamp":"2026-08-11T02:00:00.000Z"} +{"doc_count":766,"split_key":51396,"timestamp":"2026-08-11T02:00:00.000Z"} +{"doc_count":2561,"split_key":64199,"timestamp":"2026-08-11T03:00:00.000Z"} +{"doc_count":1617,"split_key":209334,"timestamp":"2026-08-11T03:00:00.000Z"} +{"doc_count":933,"split_key":17552,"timestamp":"2026-08-11T03:00:00.000Z"} +{"doc_count":833,"split_key":25369,"timestamp":"2026-08-11T03:00:00.000Z"} +{"doc_count":750,"split_key":37963,"timestamp":"2026-08-11T03:00:00.000Z"} +{"doc_count":5086,"split_key":209334,"timestamp":"2026-08-11T04:00:00.000Z"} +{"doc_count":2563,"split_key":64199,"timestamp":"2026-08-11T04:00:00.000Z"} +{"doc_count":902,"split_key":25369,"timestamp":"2026-08-11T04:00:00.000Z"} +{"doc_count":724,"split_key":37963,"timestamp":"2026-08-11T04:00:00.000Z"} +{"doc_count":701,"split_key":17552,"timestamp":"2026-08-11T04:00:00.000Z"} +{"doc_count":9148,"split_key":209334,"timestamp":"2026-08-11T05:00:00.000Z"} +{"doc_count":2460,"split_key":64199,"timestamp":"2026-08-11T05:00:00.000Z"} +{"doc_count":1195,"split_key":19429,"timestamp":"2026-08-11T05:00:00.000Z"} +{"doc_count":1194,"split_key":396982,"timestamp":"2026-08-11T05:00:00.000Z"} +{"doc_count":1100,"split_key":211590,"timestamp":"2026-08-11T05:00:00.000Z"} +{"doc_count":6979,"split_key":209334,"timestamp":"2026-08-11T06:00:00.000Z"} +{"doc_count":2134,"split_key":64199,"timestamp":"2026-08-11T06:00:00.000Z"} +{"doc_count":666,"split_key":37963,"timestamp":"2026-08-11T06:00:00.000Z"} +{"doc_count":663,"split_key":396982,"timestamp":"2026-08-11T06:00:00.000Z"} +{"doc_count":571,"split_key":201814,"timestamp":"2026-08-11T06:00:00.000Z"} +{"doc_count":13397,"split_key":209334,"timestamp":"2026-08-11T07:00:00.000Z"} +{"doc_count":2399,"split_key":211590,"timestamp":"2026-08-11T07:00:00.000Z"} +{"doc_count":2218,"split_key":64199,"timestamp":"2026-08-11T07:00:00.000Z"} +{"doc_count":743,"split_key":141995,"timestamp":"2026-08-11T07:00:00.000Z"} +{"doc_count":714,"split_key":396982,"timestamp":"2026-08-11T07:00:00.000Z"} +{"doc_count":10587,"split_key":209334,"timestamp":"2026-08-11T08:00:00.000Z"} +{"doc_count":1872,"split_key":64199,"timestamp":"2026-08-11T08:00:00.000Z"} +{"doc_count":548,"split_key":201814,"timestamp":"2026-08-11T08:00:00.000Z"} +{"doc_count":537,"split_key":45102,"timestamp":"2026-08-11T08:00:00.000Z"} +{"doc_count":423,"split_key":213412,"timestamp":"2026-08-11T08:00:00.000Z"} +{"doc_count":8962,"split_key":209334,"timestamp":"2026-08-11T09:00:00.000Z"} +{"doc_count":2140,"split_key":64199,"timestamp":"2026-08-11T09:00:00.000Z"} +{"doc_count":1195,"split_key":45753,"timestamp":"2026-08-11T09:00:00.000Z"} +{"doc_count":1138,"split_key":4134,"timestamp":"2026-08-11T09:00:00.000Z"} +{"doc_count":813,"split_key":396982,"timestamp":"2026-08-11T09:00:00.000Z"} +{"doc_count":10484,"split_key":209334,"timestamp":"2026-08-11T10:00:00.000Z"} +{"doc_count":5005,"split_key":213493,"timestamp":"2026-08-11T10:00:00.000Z"} +{"doc_count":1872,"split_key":64199,"timestamp":"2026-08-11T10:00:00.000Z"} +{"doc_count":1013,"split_key":211590,"timestamp":"2026-08-11T10:00:00.000Z"} +{"doc_count":910,"split_key":213790,"timestamp":"2026-08-11T10:00:00.000Z"} +{"doc_count":9604,"split_key":209334,"timestamp":"2026-08-11T11:00:00.000Z"} +{"doc_count":2933,"split_key":209630,"timestamp":"2026-08-11T11:00:00.000Z"} +{"doc_count":2496,"split_key":64199,"timestamp":"2026-08-11T11:00:00.000Z"} +{"doc_count":2207,"split_key":45102,"timestamp":"2026-08-11T11:00:00.000Z"} +{"doc_count":1134,"split_key":274069,"timestamp":"2026-08-11T11:00:00.000Z"} +{"doc_count":14002,"split_key":209334,"timestamp":"2026-08-11T12:00:00.000Z"} +{"doc_count":4242,"split_key":64199,"timestamp":"2026-08-11T12:00:00.000Z"} +{"doc_count":903,"split_key":209630,"timestamp":"2026-08-11T12:00:00.000Z"} +{"doc_count":768,"split_key":51396,"timestamp":"2026-08-11T12:00:00.000Z"} +{"doc_count":697,"split_key":16509,"timestamp":"2026-08-11T12:00:00.000Z"} +{"doc_count":64494,"split_key":16276,"timestamp":"2026-08-11T13:00:00.000Z"} +{"doc_count":15440,"split_key":209334,"timestamp":"2026-08-11T13:00:00.000Z"} +{"doc_count":3441,"split_key":209630,"timestamp":"2026-08-11T13:00:00.000Z"} +{"doc_count":2644,"split_key":64199,"timestamp":"2026-08-11T13:00:00.000Z"} +{"doc_count":1525,"split_key":213790,"timestamp":"2026-08-11T13:00:00.000Z"} +{"doc_count":13610,"split_key":209334,"timestamp":"2026-08-11T14:00:00.000Z"} +{"doc_count":4312,"split_key":209630,"timestamp":"2026-08-11T14:00:00.000Z"} +{"doc_count":2536,"split_key":64199,"timestamp":"2026-08-11T14:00:00.000Z"} +{"doc_count":1635,"split_key":274069,"timestamp":"2026-08-11T14:00:00.000Z"} +{"doc_count":814,"split_key":396982,"timestamp":"2026-08-11T14:00:00.000Z"} +{"doc_count":9536,"split_key":209334,"timestamp":"2026-08-11T15:00:00.000Z"} +{"doc_count":2571,"split_key":64199,"timestamp":"2026-08-11T15:00:00.000Z"} +{"doc_count":1457,"split_key":209630,"timestamp":"2026-08-11T15:00:00.000Z"} +{"doc_count":658,"split_key":4134,"timestamp":"2026-08-11T15:00:00.000Z"} +{"doc_count":632,"split_key":16509,"timestamp":"2026-08-11T15:00:00.000Z"} +{"doc_count":32552,"split_key":209334,"timestamp":"2026-08-11T16:00:00.000Z"} +{"doc_count":3308,"split_key":209630,"timestamp":"2026-08-11T16:00:00.000Z"} +{"doc_count":2569,"split_key":64199,"timestamp":"2026-08-11T16:00:00.000Z"} +{"doc_count":1157,"split_key":274069,"timestamp":"2026-08-11T16:00:00.000Z"} +{"doc_count":839,"split_key":14061,"timestamp":"2026-08-11T16:00:00.000Z"} +{"doc_count":5295,"split_key":209334,"timestamp":"2026-08-11T17:00:00.000Z"} +{"doc_count":4129,"split_key":209630,"timestamp":"2026-08-11T17:00:00.000Z"} +{"doc_count":1918,"split_key":274069,"timestamp":"2026-08-11T17:00:00.000Z"} +{"doc_count":1729,"split_key":64199,"timestamp":"2026-08-11T17:00:00.000Z"} +{"doc_count":611,"split_key":16509,"timestamp":"2026-08-11T17:00:00.000Z"} +{"doc_count":19328,"split_key":209334,"timestamp":"2026-08-11T18:00:00.000Z"} +{"doc_count":1581,"split_key":213790,"timestamp":"2026-08-11T18:00:00.000Z"} +{"doc_count":1366,"split_key":209630,"timestamp":"2026-08-11T18:00:00.000Z"} +{"doc_count":685,"split_key":16509,"timestamp":"2026-08-11T18:00:00.000Z"} +{"doc_count":576,"split_key":274069,"timestamp":"2026-08-11T18:00:00.000Z"} +{"doc_count":3822,"split_key":209630,"timestamp":"2026-08-11T19:00:00.000Z"} +{"doc_count":3568,"split_key":209334,"timestamp":"2026-08-11T19:00:00.000Z"} +{"doc_count":1272,"split_key":274069,"timestamp":"2026-08-11T19:00:00.000Z"} +{"doc_count":1191,"split_key":45102,"timestamp":"2026-08-11T19:00:00.000Z"} +{"doc_count":682,"split_key":37963,"timestamp":"2026-08-11T19:00:00.000Z"} +{"doc_count":3498,"split_key":209630,"timestamp":"2026-08-11T20:00:00.000Z"} +{"doc_count":2980,"split_key":45102,"timestamp":"2026-08-11T20:00:00.000Z"} +{"doc_count":1501,"split_key":274069,"timestamp":"2026-08-11T20:00:00.000Z"} +{"doc_count":881,"split_key":209334,"timestamp":"2026-08-11T20:00:00.000Z"} +{"doc_count":756,"split_key":16509,"timestamp":"2026-08-11T20:00:00.000Z"} +{"doc_count":3000,"split_key":211590,"timestamp":"2026-08-11T21:00:00.000Z"} +{"doc_count":1553,"split_key":51396,"timestamp":"2026-08-11T21:00:00.000Z"} +{"doc_count":1553,"split_key":209630,"timestamp":"2026-08-11T21:00:00.000Z"} +{"doc_count":826,"split_key":396982,"timestamp":"2026-08-11T21:00:00.000Z"} +{"doc_count":643,"split_key":209334,"timestamp":"2026-08-11T21:00:00.000Z"} +{"doc_count":4704,"split_key":209630,"timestamp":"2026-08-11T22:00:00.000Z"} +{"doc_count":1920,"split_key":274069,"timestamp":"2026-08-11T22:00:00.000Z"} +{"doc_count":892,"split_key":25369,"timestamp":"2026-08-11T22:00:00.000Z"} +{"doc_count":802,"split_key":16509,"timestamp":"2026-08-11T22:00:00.000Z"} +{"doc_count":660,"split_key":51396,"timestamp":"2026-08-11T22:00:00.000Z"} +{"doc_count":4921,"split_key":209630,"timestamp":"2026-08-11T23:00:00.000Z"} +{"doc_count":3010,"split_key":211590,"timestamp":"2026-08-11T23:00:00.000Z"} +{"doc_count":1875,"split_key":274069,"timestamp":"2026-08-11T23:00:00.000Z"} +{"doc_count":814,"split_key":25369,"timestamp":"2026-08-11T23:00:00.000Z"} +{"doc_count":617,"split_key":37963,"timestamp":"2026-08-11T23:00:00.000Z"} +{"doc_count":12721,"split_key":14987,"timestamp":"2026-08-12T00:00:00.000Z"} +{"doc_count":6596,"split_key":209630,"timestamp":"2026-08-12T00:00:00.000Z"} +{"doc_count":2663,"split_key":274069,"timestamp":"2026-08-12T00:00:00.000Z"} +{"doc_count":900,"split_key":25369,"timestamp":"2026-08-12T00:00:00.000Z"} +{"doc_count":685,"split_key":16509,"timestamp":"2026-08-12T00:00:00.000Z"} +{"doc_count":5288,"split_key":209630,"timestamp":"2026-08-12T01:00:00.000Z"} +{"doc_count":2037,"split_key":274069,"timestamp":"2026-08-12T01:00:00.000Z"} +{"doc_count":750,"split_key":25369,"timestamp":"2026-08-12T01:00:00.000Z"} +{"doc_count":718,"split_key":209334,"timestamp":"2026-08-12T01:00:00.000Z"} +{"doc_count":716,"split_key":396982,"timestamp":"2026-08-12T01:00:00.000Z"} +{"doc_count":4855,"split_key":209630,"timestamp":"2026-08-12T02:00:00.000Z"} +{"doc_count":2039,"split_key":274069,"timestamp":"2026-08-12T02:00:00.000Z"} +{"doc_count":1319,"split_key":37963,"timestamp":"2026-08-12T02:00:00.000Z"} +{"doc_count":1065,"split_key":50304,"timestamp":"2026-08-12T02:00:00.000Z"} +{"doc_count":913,"split_key":25369,"timestamp":"2026-08-12T02:00:00.000Z"} +{"doc_count":6063,"split_key":209630,"timestamp":"2026-08-12T03:00:00.000Z"} +{"doc_count":1966,"split_key":274069,"timestamp":"2026-08-12T03:00:00.000Z"} +{"doc_count":1819,"split_key":37963,"timestamp":"2026-08-12T03:00:00.000Z"} +{"doc_count":1636,"split_key":209334,"timestamp":"2026-08-12T03:00:00.000Z"} +{"doc_count":782,"split_key":25369,"timestamp":"2026-08-12T03:00:00.000Z"} +{"doc_count":4952,"split_key":209334,"timestamp":"2026-08-12T04:00:00.000Z"} +{"doc_count":4879,"split_key":209630,"timestamp":"2026-08-12T04:00:00.000Z"} +{"doc_count":3016,"split_key":211590,"timestamp":"2026-08-12T04:00:00.000Z"} +{"doc_count":2549,"split_key":37963,"timestamp":"2026-08-12T04:00:00.000Z"} +{"doc_count":1715,"split_key":274069,"timestamp":"2026-08-12T04:00:00.000Z"} +{"doc_count":8888,"split_key":209334,"timestamp":"2026-08-12T05:00:00.000Z"} +{"doc_count":6533,"split_key":209630,"timestamp":"2026-08-12T05:00:00.000Z"} +{"doc_count":2635,"split_key":274069,"timestamp":"2026-08-12T05:00:00.000Z"} +{"doc_count":2299,"split_key":37963,"timestamp":"2026-08-12T05:00:00.000Z"} +{"doc_count":1127,"split_key":396982,"timestamp":"2026-08-12T05:00:00.000Z"} +{"doc_count":7586,"split_key":209334,"timestamp":"2026-08-12T06:00:00.000Z"} +{"doc_count":3636,"split_key":209630,"timestamp":"2026-08-12T06:00:00.000Z"} +{"doc_count":1514,"split_key":37963,"timestamp":"2026-08-12T06:00:00.000Z"} +{"doc_count":1398,"split_key":274069,"timestamp":"2026-08-12T06:00:00.000Z"} +{"doc_count":686,"split_key":201814,"timestamp":"2026-08-12T06:00:00.000Z"} +{"doc_count":10298,"split_key":209334,"timestamp":"2026-08-12T07:00:00.000Z"} +{"doc_count":6869,"split_key":209630,"timestamp":"2026-08-12T07:00:00.000Z"} +{"doc_count":2820,"split_key":274069,"timestamp":"2026-08-12T07:00:00.000Z"} +{"doc_count":1238,"split_key":37963,"timestamp":"2026-08-12T07:00:00.000Z"} +{"doc_count":653,"split_key":201814,"timestamp":"2026-08-12T07:00:00.000Z"} +{"doc_count":10638,"split_key":209334,"timestamp":"2026-08-12T08:00:00.000Z"} +{"doc_count":2967,"split_key":209630,"timestamp":"2026-08-12T08:00:00.000Z"} +{"doc_count":1252,"split_key":37963,"timestamp":"2026-08-12T08:00:00.000Z"} +{"doc_count":1181,"split_key":274069,"timestamp":"2026-08-12T08:00:00.000Z"} +{"doc_count":654,"split_key":201814,"timestamp":"2026-08-12T08:00:00.000Z"} +{"doc_count":9816,"split_key":209334,"timestamp":"2026-08-12T09:00:00.000Z"} +{"doc_count":6976,"split_key":209630,"timestamp":"2026-08-12T09:00:00.000Z"} +{"doc_count":2559,"split_key":274069,"timestamp":"2026-08-12T09:00:00.000Z"} +{"doc_count":1308,"split_key":37963,"timestamp":"2026-08-12T09:00:00.000Z"} +{"doc_count":1230,"split_key":51396,"timestamp":"2026-08-12T09:00:00.000Z"} +{"doc_count":9082,"split_key":209334,"timestamp":"2026-08-12T10:00:00.000Z"} +{"doc_count":3085,"split_key":209630,"timestamp":"2026-08-12T10:00:00.000Z"} +{"doc_count":1651,"split_key":37963,"timestamp":"2026-08-12T10:00:00.000Z"} +{"doc_count":1144,"split_key":274069,"timestamp":"2026-08-12T10:00:00.000Z"} +{"doc_count":1026,"split_key":51396,"timestamp":"2026-08-12T10:00:00.000Z"} +{"doc_count":10198,"split_key":209334,"timestamp":"2026-08-12T11:00:00.000Z"} +{"doc_count":7069,"split_key":53755,"timestamp":"2026-08-12T11:00:00.000Z"} +{"doc_count":6507,"split_key":209630,"timestamp":"2026-08-12T11:00:00.000Z"} +{"doc_count":2909,"split_key":274069,"timestamp":"2026-08-12T11:00:00.000Z"} +{"doc_count":1635,"split_key":37963,"timestamp":"2026-08-12T11:00:00.000Z"} +{"doc_count":14152,"split_key":209334,"timestamp":"2026-08-12T12:00:00.000Z"} +{"doc_count":3437,"split_key":134548,"timestamp":"2026-08-12T12:00:00.000Z"} +{"doc_count":2987,"split_key":209630,"timestamp":"2026-08-12T12:00:00.000Z"} +{"doc_count":1581,"split_key":37963,"timestamp":"2026-08-12T12:00:00.000Z"} +{"doc_count":1491,"split_key":7738,"timestamp":"2026-08-12T12:00:00.000Z"} +{"doc_count":14682,"split_key":209334,"timestamp":"2026-08-12T13:00:00.000Z"} +{"doc_count":6696,"split_key":209630,"timestamp":"2026-08-12T13:00:00.000Z"} +{"doc_count":3007,"split_key":211590,"timestamp":"2026-08-12T13:00:00.000Z"} +{"doc_count":2881,"split_key":274069,"timestamp":"2026-08-12T13:00:00.000Z"} +{"doc_count":2017,"split_key":134175,"timestamp":"2026-08-12T13:00:00.000Z"} +{"doc_count":10684,"split_key":209334,"timestamp":"2026-08-12T14:00:00.000Z"} +{"doc_count":3216,"split_key":209630,"timestamp":"2026-08-12T14:00:00.000Z"} +{"doc_count":3094,"split_key":149089,"timestamp":"2026-08-12T14:00:00.000Z"} +{"doc_count":2341,"split_key":37963,"timestamp":"2026-08-12T14:00:00.000Z"} +{"doc_count":2220,"split_key":211590,"timestamp":"2026-08-12T14:00:00.000Z"} +{"doc_count":10538,"split_key":209334,"timestamp":"2026-08-12T15:00:00.000Z"} +{"doc_count":6859,"split_key":209630,"timestamp":"2026-08-12T15:00:00.000Z"} +{"doc_count":2455,"split_key":274069,"timestamp":"2026-08-12T15:00:00.000Z"} +{"doc_count":1590,"split_key":37963,"timestamp":"2026-08-12T15:00:00.000Z"} +{"doc_count":1573,"split_key":149089,"timestamp":"2026-08-12T15:00:00.000Z"} +{"doc_count":25041,"split_key":209334,"timestamp":"2026-08-12T16:00:00.000Z"} +{"doc_count":3849,"split_key":209630,"timestamp":"2026-08-12T16:00:00.000Z"} +{"doc_count":2553,"split_key":50705,"timestamp":"2026-08-12T16:00:00.000Z"} +{"doc_count":1584,"split_key":274069,"timestamp":"2026-08-12T16:00:00.000Z"} +{"doc_count":1505,"split_key":37963,"timestamp":"2026-08-12T16:00:00.000Z"} +{"doc_count":10853,"split_key":209334,"timestamp":"2026-08-12T17:00:00.000Z"} +{"doc_count":6891,"split_key":209630,"timestamp":"2026-08-12T17:00:00.000Z"} +{"doc_count":2875,"split_key":50705,"timestamp":"2026-08-12T17:00:00.000Z"} +{"doc_count":2744,"split_key":274069,"timestamp":"2026-08-12T17:00:00.000Z"} +{"doc_count":1711,"split_key":37963,"timestamp":"2026-08-12T17:00:00.000Z"} +{"doc_count":22480,"split_key":209334,"timestamp":"2026-08-12T18:00:00.000Z"} +{"doc_count":5454,"split_key":209630,"timestamp":"2026-08-12T18:00:00.000Z"} +{"doc_count":1741,"split_key":37963,"timestamp":"2026-08-12T18:00:00.000Z"} +{"doc_count":1712,"split_key":274069,"timestamp":"2026-08-12T18:00:00.000Z"} +{"doc_count":809,"split_key":201814,"timestamp":"2026-08-12T18:00:00.000Z"} +{"doc_count":7062,"split_key":209630,"timestamp":"2026-08-12T19:00:00.000Z"} +{"doc_count":3856,"split_key":211590,"timestamp":"2026-08-12T19:00:00.000Z"} +{"doc_count":3781,"split_key":209334,"timestamp":"2026-08-12T19:00:00.000Z"} +{"doc_count":2603,"split_key":274069,"timestamp":"2026-08-12T19:00:00.000Z"} +{"doc_count":1571,"split_key":37963,"timestamp":"2026-08-12T19:00:00.000Z"} +{"doc_count":7728,"split_key":209630,"timestamp":"2026-08-12T20:00:00.000Z"} +{"doc_count":2986,"split_key":274069,"timestamp":"2026-08-12T20:00:00.000Z"} +{"doc_count":1819,"split_key":24940,"timestamp":"2026-08-12T20:00:00.000Z"} +{"doc_count":1175,"split_key":37963,"timestamp":"2026-08-12T20:00:00.000Z"} +{"doc_count":887,"split_key":209334,"timestamp":"2026-08-12T20:00:00.000Z"} +{"doc_count":4236,"split_key":209630,"timestamp":"2026-08-12T21:00:00.000Z"} +{"doc_count":1923,"split_key":274069,"timestamp":"2026-08-12T21:00:00.000Z"} +{"doc_count":1700,"split_key":50705,"timestamp":"2026-08-12T21:00:00.000Z"} +{"doc_count":1116,"split_key":24940,"timestamp":"2026-08-12T21:00:00.000Z"} +{"doc_count":962,"split_key":37963,"timestamp":"2026-08-12T21:00:00.000Z"} +{"doc_count":8833,"split_key":209630,"timestamp":"2026-08-12T22:00:00.000Z"} +{"doc_count":3243,"split_key":274069,"timestamp":"2026-08-12T22:00:00.000Z"} +{"doc_count":1277,"split_key":37963,"timestamp":"2026-08-12T22:00:00.000Z"} +{"doc_count":782,"split_key":25369,"timestamp":"2026-08-12T22:00:00.000Z"} +{"doc_count":675,"split_key":201814,"timestamp":"2026-08-12T22:00:00.000Z"} +{"doc_count":8535,"split_key":209630,"timestamp":"2026-08-12T23:00:00.000Z"} +{"doc_count":3397,"split_key":274069,"timestamp":"2026-08-12T23:00:00.000Z"} +{"doc_count":851,"split_key":25369,"timestamp":"2026-08-12T23:00:00.000Z"} +{"doc_count":803,"split_key":16509,"timestamp":"2026-08-12T23:00:00.000Z"} +{"doc_count":685,"split_key":201814,"timestamp":"2026-08-12T23:00:00.000Z"} +{"doc_count":11068,"split_key":14987,"timestamp":"2026-08-13T00:00:00.000Z"} +{"doc_count":5167,"split_key":209630,"timestamp":"2026-08-13T00:00:00.000Z"} +{"doc_count":2113,"split_key":274069,"timestamp":"2026-08-13T00:00:00.000Z"} +{"doc_count":818,"split_key":25369,"timestamp":"2026-08-13T00:00:00.000Z"} +{"doc_count":686,"split_key":201814,"timestamp":"2026-08-13T00:00:00.000Z"} +{"doc_count":7561,"split_key":209630,"timestamp":"2026-08-13T01:00:00.000Z"} +{"doc_count":2880,"split_key":274069,"timestamp":"2026-08-13T01:00:00.000Z"} +{"doc_count":1826,"split_key":63949,"timestamp":"2026-08-13T01:00:00.000Z"} +{"doc_count":1299,"split_key":51396,"timestamp":"2026-08-13T01:00:00.000Z"} +{"doc_count":857,"split_key":16509,"timestamp":"2026-08-13T01:00:00.000Z"} +{"doc_count":6125,"split_key":209630,"timestamp":"2026-08-13T02:00:00.000Z"} +{"doc_count":2275,"split_key":274069,"timestamp":"2026-08-13T02:00:00.000Z"} +{"doc_count":1244,"split_key":396982,"timestamp":"2026-08-13T02:00:00.000Z"} +{"doc_count":827,"split_key":25369,"timestamp":"2026-08-13T02:00:00.000Z"} +{"doc_count":821,"split_key":209334,"timestamp":"2026-08-13T02:00:00.000Z"} +{"doc_count":7414,"split_key":209630,"timestamp":"2026-08-13T03:00:00.000Z"} +{"doc_count":3521,"split_key":134175,"timestamp":"2026-08-13T03:00:00.000Z"} +{"doc_count":3073,"split_key":211590,"timestamp":"2026-08-13T03:00:00.000Z"} +{"doc_count":2825,"split_key":274069,"timestamp":"2026-08-13T03:00:00.000Z"} +{"doc_count":1752,"split_key":48090,"timestamp":"2026-08-13T03:00:00.000Z"} +{"doc_count":8251,"split_key":209630,"timestamp":"2026-08-13T04:00:00.000Z"} +{"doc_count":6002,"split_key":211590,"timestamp":"2026-08-13T04:00:00.000Z"} +{"doc_count":4970,"split_key":209334,"timestamp":"2026-08-13T04:00:00.000Z"} +{"doc_count":3458,"split_key":274069,"timestamp":"2026-08-13T04:00:00.000Z"} +{"doc_count":1918,"split_key":48090,"timestamp":"2026-08-13T04:00:00.000Z"} +{"doc_count":7768,"split_key":209334,"timestamp":"2026-08-13T05:00:00.000Z"} +{"doc_count":4545,"split_key":209630,"timestamp":"2026-08-13T05:00:00.000Z"} +{"doc_count":1717,"split_key":274069,"timestamp":"2026-08-13T05:00:00.000Z"} +{"doc_count":1136,"split_key":48090,"timestamp":"2026-08-13T05:00:00.000Z"} +{"doc_count":897,"split_key":25369,"timestamp":"2026-08-13T05:00:00.000Z"} +{"doc_count":8580,"split_key":209334,"timestamp":"2026-08-13T06:00:00.000Z"} +{"doc_count":7884,"split_key":209630,"timestamp":"2026-08-13T06:00:00.000Z"} +{"doc_count":3230,"split_key":274069,"timestamp":"2026-08-13T06:00:00.000Z"} +{"doc_count":2207,"split_key":48090,"timestamp":"2026-08-13T06:00:00.000Z"} +{"doc_count":1494,"split_key":396982,"timestamp":"2026-08-13T06:00:00.000Z"} +{"doc_count":10233,"split_key":209334,"timestamp":"2026-08-13T07:00:00.000Z"} +{"doc_count":7144,"split_key":209630,"timestamp":"2026-08-13T07:00:00.000Z"} +{"doc_count":5701,"split_key":211590,"timestamp":"2026-08-13T07:00:00.000Z"} +{"doc_count":2862,"split_key":274069,"timestamp":"2026-08-13T07:00:00.000Z"} +{"doc_count":685,"split_key":396982,"timestamp":"2026-08-13T07:00:00.000Z"} +{"doc_count":10651,"split_key":209334,"timestamp":"2026-08-13T08:00:00.000Z"} +{"doc_count":6557,"split_key":209630,"timestamp":"2026-08-13T08:00:00.000Z"} +{"doc_count":2492,"split_key":274069,"timestamp":"2026-08-13T08:00:00.000Z"} +{"doc_count":647,"split_key":4907,"timestamp":"2026-08-13T08:00:00.000Z"} +{"doc_count":636,"split_key":201814,"timestamp":"2026-08-13T08:00:00.000Z"} +{"doc_count":9305,"split_key":209334,"timestamp":"2026-08-13T09:00:00.000Z"} +{"doc_count":7659,"split_key":209630,"timestamp":"2026-08-13T09:00:00.000Z"} +{"doc_count":2697,"split_key":274069,"timestamp":"2026-08-13T09:00:00.000Z"} +{"doc_count":1330,"split_key":211590,"timestamp":"2026-08-13T09:00:00.000Z"} +{"doc_count":673,"split_key":396982,"timestamp":"2026-08-13T09:00:00.000Z"} +{"doc_count":7262,"split_key":209334,"timestamp":"2026-08-13T10:00:00.000Z"} +{"doc_count":4714,"split_key":209630,"timestamp":"2026-08-13T10:00:00.000Z"} +{"doc_count":1686,"split_key":274069,"timestamp":"2026-08-13T10:00:00.000Z"} +{"doc_count":1140,"split_key":3170,"timestamp":"2026-08-13T10:00:00.000Z"} +{"doc_count":643,"split_key":4907,"timestamp":"2026-08-13T10:00:00.000Z"} +{"doc_count":10972,"split_key":209334,"timestamp":"2026-08-13T11:00:00.000Z"} +{"doc_count":8868,"split_key":209630,"timestamp":"2026-08-13T11:00:00.000Z"} +{"doc_count":5921,"split_key":22612,"timestamp":"2026-08-13T11:00:00.000Z"} +{"doc_count":3281,"split_key":274069,"timestamp":"2026-08-13T11:00:00.000Z"} +{"doc_count":3095,"split_key":211590,"timestamp":"2026-08-13T11:00:00.000Z"} +{"doc_count":15196,"split_key":209334,"timestamp":"2026-08-13T12:00:00.000Z"} +{"doc_count":8227,"split_key":209630,"timestamp":"2026-08-13T12:00:00.000Z"} +{"doc_count":6388,"split_key":22612,"timestamp":"2026-08-13T12:00:00.000Z"} +{"doc_count":3211,"split_key":274069,"timestamp":"2026-08-13T12:00:00.000Z"} +{"doc_count":2922,"split_key":211590,"timestamp":"2026-08-13T12:00:00.000Z"} +{"doc_count":10169,"split_key":209334,"timestamp":"2026-08-13T13:00:00.000Z"} +{"doc_count":4552,"split_key":209630,"timestamp":"2026-08-13T13:00:00.000Z"} +{"doc_count":3007,"split_key":211590,"timestamp":"2026-08-13T13:00:00.000Z"} +{"doc_count":1723,"split_key":274069,"timestamp":"2026-08-13T13:00:00.000Z"} +{"doc_count":714,"split_key":201814,"timestamp":"2026-08-13T13:00:00.000Z"} +{"doc_count":15812,"split_key":209334,"timestamp":"2026-08-13T14:00:00.000Z"} +{"doc_count":7994,"split_key":209630,"timestamp":"2026-08-13T14:00:00.000Z"} +{"doc_count":3159,"split_key":274069,"timestamp":"2026-08-13T14:00:00.000Z"} +{"doc_count":995,"split_key":51396,"timestamp":"2026-08-13T14:00:00.000Z"} +{"doc_count":943,"split_key":211590,"timestamp":"2026-08-13T14:00:00.000Z"} +{"doc_count":12776,"split_key":209334,"timestamp":"2026-08-13T15:00:00.000Z"} +{"doc_count":6988,"split_key":209630,"timestamp":"2026-08-13T15:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-08-13T15:00:00.000Z"} +{"doc_count":2866,"split_key":274069,"timestamp":"2026-08-13T15:00:00.000Z"} +{"doc_count":1312,"split_key":16509,"timestamp":"2026-08-13T15:00:00.000Z"} +{"doc_count":22507,"split_key":209334,"timestamp":"2026-08-13T16:00:00.000Z"} +{"doc_count":6997,"split_key":209630,"timestamp":"2026-08-13T16:00:00.000Z"} +{"doc_count":2742,"split_key":274069,"timestamp":"2026-08-13T16:00:00.000Z"} +{"doc_count":1931,"split_key":211590,"timestamp":"2026-08-13T16:00:00.000Z"} +{"doc_count":732,"split_key":201401,"timestamp":"2026-08-13T16:00:00.000Z"} +{"doc_count":12329,"split_key":209334,"timestamp":"2026-08-13T17:00:00.000Z"} +{"doc_count":7126,"split_key":209630,"timestamp":"2026-08-13T17:00:00.000Z"} +{"doc_count":2979,"split_key":274069,"timestamp":"2026-08-13T17:00:00.000Z"} +{"doc_count":643,"split_key":201814,"timestamp":"2026-08-13T17:00:00.000Z"} +{"doc_count":551,"split_key":16509,"timestamp":"2026-08-13T17:00:00.000Z"} +{"doc_count":22527,"split_key":209334,"timestamp":"2026-08-13T18:00:00.000Z"} +{"doc_count":6176,"split_key":209630,"timestamp":"2026-08-13T18:00:00.000Z"} +{"doc_count":2141,"split_key":274069,"timestamp":"2026-08-13T18:00:00.000Z"} +{"doc_count":908,"split_key":205089,"timestamp":"2026-08-13T18:00:00.000Z"} +{"doc_count":880,"split_key":51396,"timestamp":"2026-08-13T18:00:00.000Z"} +{"doc_count":8438,"split_key":209630,"timestamp":"2026-08-13T19:00:00.000Z"} +{"doc_count":5107,"split_key":34254,"timestamp":"2026-08-13T19:00:00.000Z"} +{"doc_count":3765,"split_key":274069,"timestamp":"2026-08-13T19:00:00.000Z"} +{"doc_count":3402,"split_key":209334,"timestamp":"2026-08-13T19:00:00.000Z"} +{"doc_count":677,"split_key":201814,"timestamp":"2026-08-13T19:00:00.000Z"} +{"doc_count":6556,"split_key":34254,"timestamp":"2026-08-13T20:00:00.000Z"} +{"doc_count":6042,"split_key":209630,"timestamp":"2026-08-13T20:00:00.000Z"} +{"doc_count":2424,"split_key":274069,"timestamp":"2026-08-13T20:00:00.000Z"} +{"doc_count":1121,"split_key":209334,"timestamp":"2026-08-13T20:00:00.000Z"} +{"doc_count":739,"split_key":16509,"timestamp":"2026-08-13T20:00:00.000Z"} +{"doc_count":4912,"split_key":209630,"timestamp":"2026-08-13T21:00:00.000Z"} +{"doc_count":3889,"split_key":34254,"timestamp":"2026-08-13T21:00:00.000Z"} +{"doc_count":1810,"split_key":274069,"timestamp":"2026-08-13T21:00:00.000Z"} +{"doc_count":970,"split_key":396982,"timestamp":"2026-08-13T21:00:00.000Z"} +{"doc_count":842,"split_key":51396,"timestamp":"2026-08-13T21:00:00.000Z"} +{"doc_count":9150,"split_key":209630,"timestamp":"2026-08-13T22:00:00.000Z"} +{"doc_count":3872,"split_key":274069,"timestamp":"2026-08-13T22:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-08-13T22:00:00.000Z"} +{"doc_count":886,"split_key":201814,"timestamp":"2026-08-13T22:00:00.000Z"} +{"doc_count":854,"split_key":25369,"timestamp":"2026-08-13T22:00:00.000Z"} +{"doc_count":5324,"split_key":209630,"timestamp":"2026-08-13T23:00:00.000Z"} +{"doc_count":2460,"split_key":216071,"timestamp":"2026-08-13T23:00:00.000Z"} +{"doc_count":2187,"split_key":274069,"timestamp":"2026-08-13T23:00:00.000Z"} +{"doc_count":825,"split_key":201814,"timestamp":"2026-08-13T23:00:00.000Z"} +{"doc_count":781,"split_key":25369,"timestamp":"2026-08-13T23:00:00.000Z"} +{"doc_count":10096,"split_key":14987,"timestamp":"2026-08-14T00:00:00.000Z"} +{"doc_count":8957,"split_key":209630,"timestamp":"2026-08-14T00:00:00.000Z"} +{"doc_count":3931,"split_key":216071,"timestamp":"2026-08-14T00:00:00.000Z"} +{"doc_count":3218,"split_key":274069,"timestamp":"2026-08-14T00:00:00.000Z"} +{"doc_count":2841,"split_key":19318,"timestamp":"2026-08-14T00:00:00.000Z"} +{"doc_count":20257,"split_key":14061,"timestamp":"2026-08-14T01:00:00.000Z"} +{"doc_count":5839,"split_key":209630,"timestamp":"2026-08-14T01:00:00.000Z"} +{"doc_count":3306,"split_key":16276,"timestamp":"2026-08-14T01:00:00.000Z"} +{"doc_count":2484,"split_key":274069,"timestamp":"2026-08-14T01:00:00.000Z"} +{"doc_count":1333,"split_key":216071,"timestamp":"2026-08-14T01:00:00.000Z"} +{"doc_count":23947,"split_key":14061,"timestamp":"2026-08-14T02:00:00.000Z"} +{"doc_count":7950,"split_key":209630,"timestamp":"2026-08-14T02:00:00.000Z"} +{"doc_count":5546,"split_key":211590,"timestamp":"2026-08-14T02:00:00.000Z"} +{"doc_count":4643,"split_key":135905,"timestamp":"2026-08-14T02:00:00.000Z"} +{"doc_count":2965,"split_key":274069,"timestamp":"2026-08-14T02:00:00.000Z"} +{"doc_count":6534,"split_key":209630,"timestamp":"2026-08-14T03:00:00.000Z"} +{"doc_count":3879,"split_key":135905,"timestamp":"2026-08-14T03:00:00.000Z"} +{"doc_count":2701,"split_key":274069,"timestamp":"2026-08-14T03:00:00.000Z"} +{"doc_count":1445,"split_key":209334,"timestamp":"2026-08-14T03:00:00.000Z"} +{"doc_count":838,"split_key":201814,"timestamp":"2026-08-14T03:00:00.000Z"} +{"doc_count":12452,"split_key":9009,"timestamp":"2026-08-14T04:00:00.000Z"} +{"doc_count":5057,"split_key":209630,"timestamp":"2026-08-14T04:00:00.000Z"} +{"doc_count":4515,"split_key":209334,"timestamp":"2026-08-14T04:00:00.000Z"} +{"doc_count":3008,"split_key":211590,"timestamp":"2026-08-14T04:00:00.000Z"} +{"doc_count":1791,"split_key":274069,"timestamp":"2026-08-14T04:00:00.000Z"} +{"doc_count":8732,"split_key":209630,"timestamp":"2026-08-14T05:00:00.000Z"} +{"doc_count":7286,"split_key":209334,"timestamp":"2026-08-14T05:00:00.000Z"} +{"doc_count":3265,"split_key":274069,"timestamp":"2026-08-14T05:00:00.000Z"} +{"doc_count":902,"split_key":396982,"timestamp":"2026-08-14T05:00:00.000Z"} +{"doc_count":882,"split_key":51396,"timestamp":"2026-08-14T05:00:00.000Z"} +{"doc_count":9012,"split_key":209334,"timestamp":"2026-08-14T06:00:00.000Z"} +{"doc_count":5995,"split_key":209630,"timestamp":"2026-08-14T06:00:00.000Z"} +{"doc_count":2283,"split_key":274069,"timestamp":"2026-08-14T06:00:00.000Z"} +{"doc_count":892,"split_key":51396,"timestamp":"2026-08-14T06:00:00.000Z"} +{"doc_count":802,"split_key":201814,"timestamp":"2026-08-14T06:00:00.000Z"} +{"doc_count":9041,"split_key":209334,"timestamp":"2026-08-14T07:00:00.000Z"} +{"doc_count":8910,"split_key":209630,"timestamp":"2026-08-14T07:00:00.000Z"} +{"doc_count":5990,"split_key":150862,"timestamp":"2026-08-14T07:00:00.000Z"} +{"doc_count":3293,"split_key":274069,"timestamp":"2026-08-14T07:00:00.000Z"} +{"doc_count":846,"split_key":201814,"timestamp":"2026-08-14T07:00:00.000Z"} +{"doc_count":11015,"split_key":209334,"timestamp":"2026-08-14T08:00:00.000Z"} +{"doc_count":5826,"split_key":209630,"timestamp":"2026-08-14T08:00:00.000Z"} +{"doc_count":2471,"split_key":211590,"timestamp":"2026-08-14T08:00:00.000Z"} +{"doc_count":2440,"split_key":150862,"timestamp":"2026-08-14T08:00:00.000Z"} +{"doc_count":2330,"split_key":274069,"timestamp":"2026-08-14T08:00:00.000Z"} +{"doc_count":9302,"split_key":209334,"timestamp":"2026-08-14T09:00:00.000Z"} +{"doc_count":7833,"split_key":209630,"timestamp":"2026-08-14T09:00:00.000Z"} +{"doc_count":2797,"split_key":274069,"timestamp":"2026-08-14T09:00:00.000Z"} +{"doc_count":1714,"split_key":37963,"timestamp":"2026-08-14T09:00:00.000Z"} +{"doc_count":1195,"split_key":19429,"timestamp":"2026-08-14T09:00:00.000Z"} +{"doc_count":8408,"split_key":209334,"timestamp":"2026-08-14T10:00:00.000Z"} +{"doc_count":6959,"split_key":209630,"timestamp":"2026-08-14T10:00:00.000Z"} +{"doc_count":2654,"split_key":274069,"timestamp":"2026-08-14T10:00:00.000Z"} +{"doc_count":2028,"split_key":37963,"timestamp":"2026-08-14T10:00:00.000Z"} +{"doc_count":1296,"split_key":16509,"timestamp":"2026-08-14T10:00:00.000Z"} +{"doc_count":9460,"split_key":209334,"timestamp":"2026-08-14T11:00:00.000Z"} +{"doc_count":5143,"split_key":209630,"timestamp":"2026-08-14T11:00:00.000Z"} +{"doc_count":2041,"split_key":274069,"timestamp":"2026-08-14T11:00:00.000Z"} +{"doc_count":1915,"split_key":37963,"timestamp":"2026-08-14T11:00:00.000Z"} +{"doc_count":837,"split_key":201814,"timestamp":"2026-08-14T11:00:00.000Z"} +{"doc_count":11122,"split_key":209334,"timestamp":"2026-08-14T12:00:00.000Z"} +{"doc_count":8418,"split_key":209630,"timestamp":"2026-08-14T12:00:00.000Z"} +{"doc_count":3393,"split_key":274069,"timestamp":"2026-08-14T12:00:00.000Z"} +{"doc_count":1681,"split_key":4907,"timestamp":"2026-08-14T12:00:00.000Z"} +{"doc_count":831,"split_key":201814,"timestamp":"2026-08-14T12:00:00.000Z"} +{"doc_count":13455,"split_key":209334,"timestamp":"2026-08-14T13:00:00.000Z"} +{"doc_count":5980,"split_key":209630,"timestamp":"2026-08-14T13:00:00.000Z"} +{"doc_count":2256,"split_key":274069,"timestamp":"2026-08-14T13:00:00.000Z"} +{"doc_count":891,"split_key":16509,"timestamp":"2026-08-14T13:00:00.000Z"} +{"doc_count":733,"split_key":201814,"timestamp":"2026-08-14T13:00:00.000Z"} +{"doc_count":16170,"split_key":209334,"timestamp":"2026-08-14T14:00:00.000Z"} +{"doc_count":9020,"split_key":209630,"timestamp":"2026-08-14T14:00:00.000Z"} +{"doc_count":5642,"split_key":50188,"timestamp":"2026-08-14T14:00:00.000Z"} +{"doc_count":3227,"split_key":274069,"timestamp":"2026-08-14T14:00:00.000Z"} +{"doc_count":3007,"split_key":211590,"timestamp":"2026-08-14T14:00:00.000Z"} +{"doc_count":13035,"split_key":209334,"timestamp":"2026-08-14T15:00:00.000Z"} +{"doc_count":5743,"split_key":209630,"timestamp":"2026-08-14T15:00:00.000Z"} +{"doc_count":2414,"split_key":274069,"timestamp":"2026-08-14T15:00:00.000Z"} +{"doc_count":1196,"split_key":132199,"timestamp":"2026-08-14T15:00:00.000Z"} +{"doc_count":803,"split_key":201814,"timestamp":"2026-08-14T15:00:00.000Z"} +{"doc_count":20942,"split_key":209334,"timestamp":"2026-08-14T16:00:00.000Z"} +{"doc_count":7207,"split_key":209630,"timestamp":"2026-08-14T16:00:00.000Z"} +{"doc_count":3059,"split_key":274069,"timestamp":"2026-08-14T16:00:00.000Z"} +{"doc_count":849,"split_key":215762,"timestamp":"2026-08-14T16:00:00.000Z"} +{"doc_count":815,"split_key":202412,"timestamp":"2026-08-14T16:00:00.000Z"} +{"doc_count":14633,"split_key":209334,"timestamp":"2026-08-14T17:00:00.000Z"} +{"doc_count":7147,"split_key":209630,"timestamp":"2026-08-14T17:00:00.000Z"} +{"doc_count":2816,"split_key":274069,"timestamp":"2026-08-14T17:00:00.000Z"} +{"doc_count":2087,"split_key":211590,"timestamp":"2026-08-14T17:00:00.000Z"} +{"doc_count":1077,"split_key":45102,"timestamp":"2026-08-14T17:00:00.000Z"} +{"doc_count":15301,"split_key":209334,"timestamp":"2026-08-14T18:00:00.000Z"} +{"doc_count":10323,"split_key":48090,"timestamp":"2026-08-14T18:00:00.000Z"} +{"doc_count":4872,"split_key":209630,"timestamp":"2026-08-14T18:00:00.000Z"} +{"doc_count":1952,"split_key":274069,"timestamp":"2026-08-14T18:00:00.000Z"} +{"doc_count":931,"split_key":211590,"timestamp":"2026-08-14T18:00:00.000Z"} +{"doc_count":12033,"split_key":209334,"timestamp":"2026-08-14T19:00:00.000Z"} +{"doc_count":8955,"split_key":209630,"timestamp":"2026-08-14T19:00:00.000Z"} +{"doc_count":6003,"split_key":211590,"timestamp":"2026-08-14T19:00:00.000Z"} +{"doc_count":3945,"split_key":50188,"timestamp":"2026-08-14T19:00:00.000Z"} +{"doc_count":3276,"split_key":274069,"timestamp":"2026-08-14T19:00:00.000Z"} +{"doc_count":6211,"split_key":209630,"timestamp":"2026-08-14T20:00:00.000Z"} +{"doc_count":4185,"split_key":50188,"timestamp":"2026-08-14T20:00:00.000Z"} +{"doc_count":2131,"split_key":274069,"timestamp":"2026-08-14T20:00:00.000Z"} +{"doc_count":1423,"split_key":48925,"timestamp":"2026-08-14T20:00:00.000Z"} +{"doc_count":1077,"split_key":209334,"timestamp":"2026-08-14T20:00:00.000Z"} +{"doc_count":8634,"split_key":209630,"timestamp":"2026-08-14T21:00:00.000Z"} +{"doc_count":4675,"split_key":14061,"timestamp":"2026-08-14T21:00:00.000Z"} +{"doc_count":4591,"split_key":50188,"timestamp":"2026-08-14T21:00:00.000Z"} +{"doc_count":3163,"split_key":274069,"timestamp":"2026-08-14T21:00:00.000Z"} +{"doc_count":3009,"split_key":211590,"timestamp":"2026-08-14T21:00:00.000Z"} +{"doc_count":12818,"split_key":14061,"timestamp":"2026-08-14T22:00:00.000Z"} +{"doc_count":6703,"split_key":50188,"timestamp":"2026-08-14T22:00:00.000Z"} +{"doc_count":6091,"split_key":209630,"timestamp":"2026-08-14T22:00:00.000Z"} +{"doc_count":3019,"split_key":211590,"timestamp":"2026-08-14T22:00:00.000Z"} +{"doc_count":2637,"split_key":274069,"timestamp":"2026-08-14T22:00:00.000Z"} +{"doc_count":8799,"split_key":209630,"timestamp":"2026-08-14T23:00:00.000Z"} +{"doc_count":7982,"split_key":211590,"timestamp":"2026-08-14T23:00:00.000Z"} +{"doc_count":4765,"split_key":14061,"timestamp":"2026-08-14T23:00:00.000Z"} +{"doc_count":3313,"split_key":274069,"timestamp":"2026-08-14T23:00:00.000Z"} +{"doc_count":1939,"split_key":45102,"timestamp":"2026-08-14T23:00:00.000Z"} +{"doc_count":10062,"split_key":14987,"timestamp":"2026-08-15T00:00:00.000Z"} +{"doc_count":6678,"split_key":48090,"timestamp":"2026-08-15T00:00:00.000Z"} +{"doc_count":5609,"split_key":209630,"timestamp":"2026-08-15T00:00:00.000Z"} +{"doc_count":2300,"split_key":274069,"timestamp":"2026-08-15T00:00:00.000Z"} +{"doc_count":1968,"split_key":45102,"timestamp":"2026-08-15T00:00:00.000Z"} +{"doc_count":7613,"split_key":48090,"timestamp":"2026-08-15T01:00:00.000Z"} +{"doc_count":5668,"split_key":209630,"timestamp":"2026-08-15T01:00:00.000Z"} +{"doc_count":2165,"split_key":274069,"timestamp":"2026-08-15T01:00:00.000Z"} +{"doc_count":1896,"split_key":211590,"timestamp":"2026-08-15T01:00:00.000Z"} +{"doc_count":881,"split_key":25369,"timestamp":"2026-08-15T01:00:00.000Z"} +{"doc_count":8720,"split_key":209630,"timestamp":"2026-08-15T02:00:00.000Z"} +{"doc_count":4989,"split_key":211590,"timestamp":"2026-08-15T02:00:00.000Z"} +{"doc_count":3439,"split_key":274069,"timestamp":"2026-08-15T02:00:00.000Z"} +{"doc_count":819,"split_key":25369,"timestamp":"2026-08-15T02:00:00.000Z"} +{"doc_count":798,"split_key":201814,"timestamp":"2026-08-15T02:00:00.000Z"} +{"doc_count":5396,"split_key":209630,"timestamp":"2026-08-15T03:00:00.000Z"} +{"doc_count":4023,"split_key":211590,"timestamp":"2026-08-15T03:00:00.000Z"} +{"doc_count":2338,"split_key":274069,"timestamp":"2026-08-15T03:00:00.000Z"} +{"doc_count":1458,"split_key":209334,"timestamp":"2026-08-15T03:00:00.000Z"} +{"doc_count":1116,"split_key":45102,"timestamp":"2026-08-15T03:00:00.000Z"} +{"doc_count":8449,"split_key":209630,"timestamp":"2026-08-15T04:00:00.000Z"} +{"doc_count":4441,"split_key":209334,"timestamp":"2026-08-15T04:00:00.000Z"} +{"doc_count":3342,"split_key":274069,"timestamp":"2026-08-15T04:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-08-15T04:00:00.000Z"} +{"doc_count":1774,"split_key":45102,"timestamp":"2026-08-15T04:00:00.000Z"} +{"doc_count":12480,"split_key":11878,"timestamp":"2026-08-15T05:00:00.000Z"} +{"doc_count":5879,"split_key":209630,"timestamp":"2026-08-15T05:00:00.000Z"} +{"doc_count":5372,"split_key":209334,"timestamp":"2026-08-15T05:00:00.000Z"} +{"doc_count":4589,"split_key":201814,"timestamp":"2026-08-15T05:00:00.000Z"} +{"doc_count":4560,"split_key":211590,"timestamp":"2026-08-15T05:00:00.000Z"} +{"doc_count":10954,"split_key":209334,"timestamp":"2026-08-15T06:00:00.000Z"} +{"doc_count":9390,"split_key":209630,"timestamp":"2026-08-15T06:00:00.000Z"} +{"doc_count":7473,"split_key":211590,"timestamp":"2026-08-15T06:00:00.000Z"} +{"doc_count":3617,"split_key":274069,"timestamp":"2026-08-15T06:00:00.000Z"} +{"doc_count":2599,"split_key":201814,"timestamp":"2026-08-15T06:00:00.000Z"} +{"doc_count":8714,"split_key":209334,"timestamp":"2026-08-15T07:00:00.000Z"} +{"doc_count":5123,"split_key":209630,"timestamp":"2026-08-15T07:00:00.000Z"} +{"doc_count":2084,"split_key":274069,"timestamp":"2026-08-15T07:00:00.000Z"} +{"doc_count":1272,"split_key":30058,"timestamp":"2026-08-15T07:00:00.000Z"} +{"doc_count":1208,"split_key":16276,"timestamp":"2026-08-15T07:00:00.000Z"} +{"doc_count":11113,"split_key":209334,"timestamp":"2026-08-15T08:00:00.000Z"} +{"doc_count":6261,"split_key":209630,"timestamp":"2026-08-15T08:00:00.000Z"} +{"doc_count":2687,"split_key":274069,"timestamp":"2026-08-15T08:00:00.000Z"} +{"doc_count":1037,"split_key":45102,"timestamp":"2026-08-15T08:00:00.000Z"} +{"doc_count":796,"split_key":16509,"timestamp":"2026-08-15T08:00:00.000Z"} +{"doc_count":9191,"split_key":209334,"timestamp":"2026-08-15T09:00:00.000Z"} +{"doc_count":8575,"split_key":211590,"timestamp":"2026-08-15T09:00:00.000Z"} +{"doc_count":8228,"split_key":209630,"timestamp":"2026-08-15T09:00:00.000Z"} +{"doc_count":3099,"split_key":274069,"timestamp":"2026-08-15T09:00:00.000Z"} +{"doc_count":939,"split_key":134294,"timestamp":"2026-08-15T09:00:00.000Z"} +{"doc_count":7711,"split_key":209334,"timestamp":"2026-08-15T10:00:00.000Z"} +{"doc_count":7322,"split_key":50188,"timestamp":"2026-08-15T10:00:00.000Z"} +{"doc_count":6467,"split_key":211590,"timestamp":"2026-08-15T10:00:00.000Z"} +{"doc_count":6167,"split_key":209630,"timestamp":"2026-08-15T10:00:00.000Z"} +{"doc_count":3969,"split_key":135747,"timestamp":"2026-08-15T10:00:00.000Z"} +{"doc_count":8364,"split_key":209630,"timestamp":"2026-08-15T11:00:00.000Z"} +{"doc_count":7344,"split_key":209334,"timestamp":"2026-08-15T11:00:00.000Z"} +{"doc_count":7259,"split_key":50188,"timestamp":"2026-08-15T11:00:00.000Z"} +{"doc_count":4828,"split_key":211590,"timestamp":"2026-08-15T11:00:00.000Z"} +{"doc_count":3043,"split_key":274069,"timestamp":"2026-08-15T11:00:00.000Z"} +{"doc_count":12555,"split_key":209334,"timestamp":"2026-08-15T12:00:00.000Z"} +{"doc_count":8037,"split_key":50188,"timestamp":"2026-08-15T12:00:00.000Z"} +{"doc_count":5946,"split_key":209630,"timestamp":"2026-08-15T12:00:00.000Z"} +{"doc_count":4160,"split_key":64199,"timestamp":"2026-08-15T12:00:00.000Z"} +{"doc_count":2271,"split_key":274069,"timestamp":"2026-08-15T12:00:00.000Z"} +{"doc_count":14817,"split_key":209334,"timestamp":"2026-08-15T13:00:00.000Z"} +{"doc_count":8960,"split_key":209630,"timestamp":"2026-08-15T13:00:00.000Z"} +{"doc_count":4493,"split_key":210538,"timestamp":"2026-08-15T13:00:00.000Z"} +{"doc_count":3666,"split_key":274069,"timestamp":"2026-08-15T13:00:00.000Z"} +{"doc_count":3297,"split_key":64199,"timestamp":"2026-08-15T13:00:00.000Z"} +{"doc_count":11346,"split_key":209334,"timestamp":"2026-08-15T14:00:00.000Z"} +{"doc_count":6374,"split_key":210538,"timestamp":"2026-08-15T14:00:00.000Z"} +{"doc_count":5873,"split_key":209630,"timestamp":"2026-08-15T14:00:00.000Z"} +{"doc_count":2205,"split_key":274069,"timestamp":"2026-08-15T14:00:00.000Z"} +{"doc_count":2106,"split_key":64199,"timestamp":"2026-08-15T14:00:00.000Z"} +{"doc_count":17962,"split_key":209334,"timestamp":"2026-08-15T15:00:00.000Z"} +{"doc_count":7338,"split_key":209630,"timestamp":"2026-08-15T15:00:00.000Z"} +{"doc_count":5122,"split_key":45090,"timestamp":"2026-08-15T15:00:00.000Z"} +{"doc_count":3378,"split_key":210538,"timestamp":"2026-08-15T15:00:00.000Z"} +{"doc_count":2696,"split_key":274069,"timestamp":"2026-08-15T15:00:00.000Z"} +{"doc_count":14100,"split_key":209334,"timestamp":"2026-08-15T16:00:00.000Z"} +{"doc_count":7427,"split_key":209630,"timestamp":"2026-08-15T16:00:00.000Z"} +{"doc_count":5056,"split_key":50188,"timestamp":"2026-08-15T16:00:00.000Z"} +{"doc_count":4682,"split_key":45090,"timestamp":"2026-08-15T16:00:00.000Z"} +{"doc_count":4238,"split_key":64199,"timestamp":"2026-08-15T16:00:00.000Z"} +{"doc_count":19775,"split_key":209334,"timestamp":"2026-08-15T17:00:00.000Z"} +{"doc_count":5240,"split_key":209630,"timestamp":"2026-08-15T17:00:00.000Z"} +{"doc_count":4146,"split_key":59460,"timestamp":"2026-08-15T17:00:00.000Z"} +{"doc_count":3002,"split_key":211590,"timestamp":"2026-08-15T17:00:00.000Z"} +{"doc_count":2495,"split_key":64199,"timestamp":"2026-08-15T17:00:00.000Z"} +{"doc_count":12306,"split_key":209334,"timestamp":"2026-08-15T18:00:00.000Z"} +{"doc_count":9396,"split_key":209630,"timestamp":"2026-08-15T18:00:00.000Z"} +{"doc_count":5650,"split_key":211804,"timestamp":"2026-08-15T18:00:00.000Z"} +{"doc_count":3196,"split_key":274069,"timestamp":"2026-08-15T18:00:00.000Z"} +{"doc_count":1460,"split_key":59460,"timestamp":"2026-08-15T18:00:00.000Z"} +{"doc_count":14747,"split_key":209334,"timestamp":"2026-08-15T19:00:00.000Z"} +{"doc_count":5966,"split_key":209630,"timestamp":"2026-08-15T19:00:00.000Z"} +{"doc_count":2544,"split_key":211590,"timestamp":"2026-08-15T19:00:00.000Z"} +{"doc_count":2333,"split_key":274069,"timestamp":"2026-08-15T19:00:00.000Z"} +{"doc_count":1409,"split_key":211804,"timestamp":"2026-08-15T19:00:00.000Z"} +{"doc_count":8591,"split_key":209630,"timestamp":"2026-08-15T20:00:00.000Z"} +{"doc_count":6368,"split_key":50188,"timestamp":"2026-08-15T20:00:00.000Z"} +{"doc_count":3493,"split_key":274069,"timestamp":"2026-08-15T20:00:00.000Z"} +{"doc_count":2735,"split_key":64199,"timestamp":"2026-08-15T20:00:00.000Z"} +{"doc_count":1130,"split_key":37963,"timestamp":"2026-08-15T20:00:00.000Z"} +{"doc_count":6076,"split_key":209630,"timestamp":"2026-08-15T21:00:00.000Z"} +{"doc_count":5240,"split_key":48090,"timestamp":"2026-08-15T21:00:00.000Z"} +{"doc_count":1980,"split_key":274069,"timestamp":"2026-08-15T21:00:00.000Z"} +{"doc_count":1282,"split_key":64199,"timestamp":"2026-08-15T21:00:00.000Z"} +{"doc_count":802,"split_key":201814,"timestamp":"2026-08-15T21:00:00.000Z"} +{"doc_count":9674,"split_key":209630,"timestamp":"2026-08-15T22:00:00.000Z"} +{"doc_count":8154,"split_key":64199,"timestamp":"2026-08-15T22:00:00.000Z"} +{"doc_count":3400,"split_key":274069,"timestamp":"2026-08-15T22:00:00.000Z"} +{"doc_count":2466,"split_key":37963,"timestamp":"2026-08-15T22:00:00.000Z"} +{"doc_count":781,"split_key":201814,"timestamp":"2026-08-15T22:00:00.000Z"} +{"doc_count":8681,"split_key":64199,"timestamp":"2026-08-15T23:00:00.000Z"} +{"doc_count":5419,"split_key":209630,"timestamp":"2026-08-15T23:00:00.000Z"} +{"doc_count":1921,"split_key":274069,"timestamp":"2026-08-15T23:00:00.000Z"} +{"doc_count":1368,"split_key":4134,"timestamp":"2026-08-15T23:00:00.000Z"} +{"doc_count":840,"split_key":201814,"timestamp":"2026-08-15T23:00:00.000Z"} +{"doc_count":20051,"split_key":14987,"timestamp":"2026-08-16T00:00:00.000Z"} +{"doc_count":8746,"split_key":64199,"timestamp":"2026-08-16T00:00:00.000Z"} +{"doc_count":6727,"split_key":209630,"timestamp":"2026-08-16T00:00:00.000Z"} +{"doc_count":3300,"split_key":211590,"timestamp":"2026-08-16T00:00:00.000Z"} +{"doc_count":2515,"split_key":274069,"timestamp":"2026-08-16T00:00:00.000Z"} +{"doc_count":8669,"split_key":64199,"timestamp":"2026-08-16T01:00:00.000Z"} +{"doc_count":7916,"split_key":209630,"timestamp":"2026-08-16T01:00:00.000Z"} +{"doc_count":3082,"split_key":274069,"timestamp":"2026-08-16T01:00:00.000Z"} +{"doc_count":2718,"split_key":211590,"timestamp":"2026-08-16T01:00:00.000Z"} +{"doc_count":1396,"split_key":51396,"timestamp":"2026-08-16T01:00:00.000Z"} +{"doc_count":8577,"split_key":64199,"timestamp":"2026-08-16T02:00:00.000Z"} +{"doc_count":5977,"split_key":209630,"timestamp":"2026-08-16T02:00:00.000Z"} +{"doc_count":2335,"split_key":274069,"timestamp":"2026-08-16T02:00:00.000Z"} +{"doc_count":1382,"split_key":50304,"timestamp":"2026-08-16T02:00:00.000Z"} +{"doc_count":1220,"split_key":396982,"timestamp":"2026-08-16T02:00:00.000Z"} +{"doc_count":8254,"split_key":209630,"timestamp":"2026-08-16T03:00:00.000Z"} +{"doc_count":7768,"split_key":64199,"timestamp":"2026-08-16T03:00:00.000Z"} +{"doc_count":3190,"split_key":274069,"timestamp":"2026-08-16T03:00:00.000Z"} +{"doc_count":3007,"split_key":211590,"timestamp":"2026-08-16T03:00:00.000Z"} +{"doc_count":1352,"split_key":209334,"timestamp":"2026-08-16T03:00:00.000Z"} +{"doc_count":8281,"split_key":64199,"timestamp":"2026-08-16T04:00:00.000Z"} +{"doc_count":6155,"split_key":209630,"timestamp":"2026-08-16T04:00:00.000Z"} +{"doc_count":3153,"split_key":209334,"timestamp":"2026-08-16T04:00:00.000Z"} +{"doc_count":2380,"split_key":37963,"timestamp":"2026-08-16T04:00:00.000Z"} +{"doc_count":2278,"split_key":274069,"timestamp":"2026-08-16T04:00:00.000Z"} +{"doc_count":9357,"split_key":209630,"timestamp":"2026-08-16T05:00:00.000Z"} +{"doc_count":8432,"split_key":64199,"timestamp":"2026-08-16T05:00:00.000Z"} +{"doc_count":5858,"split_key":209334,"timestamp":"2026-08-16T05:00:00.000Z"} +{"doc_count":3246,"split_key":274069,"timestamp":"2026-08-16T05:00:00.000Z"} +{"doc_count":3044,"split_key":211590,"timestamp":"2026-08-16T05:00:00.000Z"} +{"doc_count":11043,"split_key":209334,"timestamp":"2026-08-16T06:00:00.000Z"} +{"doc_count":8441,"split_key":64199,"timestamp":"2026-08-16T06:00:00.000Z"} +{"doc_count":5811,"split_key":209630,"timestamp":"2026-08-16T06:00:00.000Z"} +{"doc_count":2243,"split_key":274069,"timestamp":"2026-08-16T06:00:00.000Z"} +{"doc_count":778,"split_key":201814,"timestamp":"2026-08-16T06:00:00.000Z"} +{"doc_count":8402,"split_key":64199,"timestamp":"2026-08-16T07:00:00.000Z"} +{"doc_count":7951,"split_key":209334,"timestamp":"2026-08-16T07:00:00.000Z"} +{"doc_count":7769,"split_key":209630,"timestamp":"2026-08-16T07:00:00.000Z"} +{"doc_count":2990,"split_key":274069,"timestamp":"2026-08-16T07:00:00.000Z"} +{"doc_count":1781,"split_key":396982,"timestamp":"2026-08-16T07:00:00.000Z"} +{"doc_count":64516,"split_key":23470,"timestamp":"2026-08-16T08:00:00.000Z"} +{"doc_count":10240,"split_key":209334,"timestamp":"2026-08-16T08:00:00.000Z"} +{"doc_count":8614,"split_key":64199,"timestamp":"2026-08-16T08:00:00.000Z"} +{"doc_count":6745,"split_key":209630,"timestamp":"2026-08-16T08:00:00.000Z"} +{"doc_count":2903,"split_key":274069,"timestamp":"2026-08-16T08:00:00.000Z"} +{"doc_count":8619,"split_key":209334,"timestamp":"2026-08-16T09:00:00.000Z"} +{"doc_count":7809,"split_key":64199,"timestamp":"2026-08-16T09:00:00.000Z"} +{"doc_count":4912,"split_key":209630,"timestamp":"2026-08-16T09:00:00.000Z"} +{"doc_count":2119,"split_key":274069,"timestamp":"2026-08-16T09:00:00.000Z"} +{"doc_count":1635,"split_key":23470,"timestamp":"2026-08-16T09:00:00.000Z"} +{"doc_count":8720,"split_key":209630,"timestamp":"2026-08-16T10:00:00.000Z"} +{"doc_count":7200,"split_key":209334,"timestamp":"2026-08-16T10:00:00.000Z"} +{"doc_count":3778,"split_key":64199,"timestamp":"2026-08-16T10:00:00.000Z"} +{"doc_count":3486,"split_key":274069,"timestamp":"2026-08-16T10:00:00.000Z"} +{"doc_count":2380,"split_key":63949,"timestamp":"2026-08-16T10:00:00.000Z"} +{"doc_count":21625,"split_key":14061,"timestamp":"2026-08-16T11:00:00.000Z"} +{"doc_count":8152,"split_key":209334,"timestamp":"2026-08-16T11:00:00.000Z"} +{"doc_count":6452,"split_key":64199,"timestamp":"2026-08-16T11:00:00.000Z"} +{"doc_count":4258,"split_key":209630,"timestamp":"2026-08-16T11:00:00.000Z"} +{"doc_count":1589,"split_key":274069,"timestamp":"2026-08-16T11:00:00.000Z"} +{"doc_count":19248,"split_key":14061,"timestamp":"2026-08-16T12:00:00.000Z"} +{"doc_count":10663,"split_key":209334,"timestamp":"2026-08-16T12:00:00.000Z"} +{"doc_count":6494,"split_key":64199,"timestamp":"2026-08-16T12:00:00.000Z"} +{"doc_count":5818,"split_key":209630,"timestamp":"2026-08-16T12:00:00.000Z"} +{"doc_count":2300,"split_key":274069,"timestamp":"2026-08-16T12:00:00.000Z"} +{"doc_count":14876,"split_key":209334,"timestamp":"2026-08-16T13:00:00.000Z"} +{"doc_count":8859,"split_key":23470,"timestamp":"2026-08-16T13:00:00.000Z"} +{"doc_count":4829,"split_key":64199,"timestamp":"2026-08-16T13:00:00.000Z"} +{"doc_count":4459,"split_key":209630,"timestamp":"2026-08-16T13:00:00.000Z"} +{"doc_count":2693,"split_key":14061,"timestamp":"2026-08-16T13:00:00.000Z"} +{"doc_count":11085,"split_key":209334,"timestamp":"2026-08-16T14:00:00.000Z"} +{"doc_count":6699,"split_key":209630,"timestamp":"2026-08-16T14:00:00.000Z"} +{"doc_count":6483,"split_key":64199,"timestamp":"2026-08-16T14:00:00.000Z"} +{"doc_count":2693,"split_key":274069,"timestamp":"2026-08-16T14:00:00.000Z"} +{"doc_count":1569,"split_key":37963,"timestamp":"2026-08-16T14:00:00.000Z"} +{"doc_count":17697,"split_key":209334,"timestamp":"2026-08-16T15:00:00.000Z"} +{"doc_count":6514,"split_key":64199,"timestamp":"2026-08-16T15:00:00.000Z"} +{"doc_count":3883,"split_key":209630,"timestamp":"2026-08-16T15:00:00.000Z"} +{"doc_count":1576,"split_key":274069,"timestamp":"2026-08-16T15:00:00.000Z"} +{"doc_count":725,"split_key":201814,"timestamp":"2026-08-16T15:00:00.000Z"} +{"doc_count":5845,"split_key":209334,"timestamp":"2026-08-16T16:00:00.000Z"} +{"doc_count":5621,"split_key":64199,"timestamp":"2026-08-16T16:00:00.000Z"} +{"doc_count":5504,"split_key":56153,"timestamp":"2026-08-16T16:00:00.000Z"} +{"doc_count":4612,"split_key":209630,"timestamp":"2026-08-16T16:00:00.000Z"} +{"doc_count":4480,"split_key":23470,"timestamp":"2026-08-16T16:00:00.000Z"} +{"doc_count":25766,"split_key":209334,"timestamp":"2026-08-16T17:00:00.000Z"} +{"doc_count":5538,"split_key":209630,"timestamp":"2026-08-16T17:00:00.000Z"} +{"doc_count":1959,"split_key":64199,"timestamp":"2026-08-16T17:00:00.000Z"} +{"doc_count":1919,"split_key":274069,"timestamp":"2026-08-16T17:00:00.000Z"} +{"doc_count":946,"split_key":56153,"timestamp":"2026-08-16T17:00:00.000Z"} +{"doc_count":13379,"split_key":209334,"timestamp":"2026-08-16T18:00:00.000Z"} +{"doc_count":4401,"split_key":48090,"timestamp":"2026-08-16T18:00:00.000Z"} +{"doc_count":4002,"split_key":209630,"timestamp":"2026-08-16T18:00:00.000Z"} +{"doc_count":1892,"split_key":64199,"timestamp":"2026-08-16T18:00:00.000Z"} +{"doc_count":1681,"split_key":274069,"timestamp":"2026-08-16T18:00:00.000Z"} +{"doc_count":15078,"split_key":209334,"timestamp":"2026-08-16T19:00:00.000Z"} +{"doc_count":6594,"split_key":209630,"timestamp":"2026-08-16T19:00:00.000Z"} +{"doc_count":2585,"split_key":274069,"timestamp":"2026-08-16T19:00:00.000Z"} +{"doc_count":1944,"split_key":211804,"timestamp":"2026-08-16T19:00:00.000Z"} +{"doc_count":762,"split_key":201814,"timestamp":"2026-08-16T19:00:00.000Z"} +{"doc_count":9348,"split_key":211804,"timestamp":"2026-08-16T20:00:00.000Z"} +{"doc_count":7329,"split_key":48090,"timestamp":"2026-08-16T20:00:00.000Z"} +{"doc_count":4445,"split_key":209630,"timestamp":"2026-08-16T20:00:00.000Z"} +{"doc_count":2005,"split_key":209334,"timestamp":"2026-08-16T20:00:00.000Z"} +{"doc_count":1646,"split_key":274069,"timestamp":"2026-08-16T20:00:00.000Z"} +{"doc_count":9734,"split_key":209630,"timestamp":"2026-08-16T21:00:00.000Z"} +{"doc_count":5675,"split_key":211590,"timestamp":"2026-08-16T21:00:00.000Z"} +{"doc_count":4962,"split_key":211804,"timestamp":"2026-08-16T21:00:00.000Z"} +{"doc_count":4064,"split_key":274069,"timestamp":"2026-08-16T21:00:00.000Z"} +{"doc_count":1824,"split_key":64199,"timestamp":"2026-08-16T21:00:00.000Z"} +{"doc_count":4610,"split_key":209630,"timestamp":"2026-08-16T22:00:00.000Z"} +{"doc_count":2622,"split_key":64199,"timestamp":"2026-08-16T22:00:00.000Z"} +{"doc_count":1824,"split_key":274069,"timestamp":"2026-08-16T22:00:00.000Z"} +{"doc_count":1732,"split_key":211804,"timestamp":"2026-08-16T22:00:00.000Z"} +{"doc_count":805,"split_key":25369,"timestamp":"2026-08-16T22:00:00.000Z"} +{"doc_count":10986,"split_key":209630,"timestamp":"2026-08-16T23:00:00.000Z"} +{"doc_count":8448,"split_key":64199,"timestamp":"2026-08-16T23:00:00.000Z"} +{"doc_count":4127,"split_key":274069,"timestamp":"2026-08-16T23:00:00.000Z"} +{"doc_count":4038,"split_key":211804,"timestamp":"2026-08-16T23:00:00.000Z"} +{"doc_count":1006,"split_key":25369,"timestamp":"2026-08-16T23:00:00.000Z"} +{"doc_count":11737,"split_key":14987,"timestamp":"2026-08-17T00:00:00.000Z"} +{"doc_count":5709,"split_key":64199,"timestamp":"2026-08-17T00:00:00.000Z"} +{"doc_count":4535,"split_key":209630,"timestamp":"2026-08-17T00:00:00.000Z"} +{"doc_count":2490,"split_key":48090,"timestamp":"2026-08-17T00:00:00.000Z"} +{"doc_count":1680,"split_key":274069,"timestamp":"2026-08-17T00:00:00.000Z"} +{"doc_count":12482,"split_key":212238,"timestamp":"2026-08-17T01:00:00.000Z"} +{"doc_count":8723,"split_key":64199,"timestamp":"2026-08-17T01:00:00.000Z"} +{"doc_count":4766,"split_key":209630,"timestamp":"2026-08-17T01:00:00.000Z"} +{"doc_count":2577,"split_key":211590,"timestamp":"2026-08-17T01:00:00.000Z"} +{"doc_count":1875,"split_key":274069,"timestamp":"2026-08-17T01:00:00.000Z"} +{"doc_count":9531,"split_key":209630,"timestamp":"2026-08-17T02:00:00.000Z"} +{"doc_count":8788,"split_key":64199,"timestamp":"2026-08-17T02:00:00.000Z"} +{"doc_count":3614,"split_key":274069,"timestamp":"2026-08-17T02:00:00.000Z"} +{"doc_count":1195,"split_key":132199,"timestamp":"2026-08-17T02:00:00.000Z"} +{"doc_count":870,"split_key":201814,"timestamp":"2026-08-17T02:00:00.000Z"} +{"doc_count":8581,"split_key":64199,"timestamp":"2026-08-17T03:00:00.000Z"} +{"doc_count":4891,"split_key":209630,"timestamp":"2026-08-17T03:00:00.000Z"} +{"doc_count":1592,"split_key":274069,"timestamp":"2026-08-17T03:00:00.000Z"} +{"doc_count":1300,"split_key":209334,"timestamp":"2026-08-17T03:00:00.000Z"} +{"doc_count":834,"split_key":25369,"timestamp":"2026-08-17T03:00:00.000Z"} +{"doc_count":11499,"split_key":209630,"timestamp":"2026-08-17T04:00:00.000Z"} +{"doc_count":8687,"split_key":64199,"timestamp":"2026-08-17T04:00:00.000Z"} +{"doc_count":2977,"split_key":274069,"timestamp":"2026-08-17T04:00:00.000Z"} +{"doc_count":2539,"split_key":209334,"timestamp":"2026-08-17T04:00:00.000Z"} +{"doc_count":882,"split_key":25369,"timestamp":"2026-08-17T04:00:00.000Z"} +{"doc_count":8357,"split_key":64199,"timestamp":"2026-08-17T05:00:00.000Z"} +{"doc_count":6165,"split_key":209334,"timestamp":"2026-08-17T05:00:00.000Z"} +{"doc_count":4780,"split_key":209630,"timestamp":"2026-08-17T05:00:00.000Z"} +{"doc_count":914,"split_key":274069,"timestamp":"2026-08-17T05:00:00.000Z"} +{"doc_count":734,"split_key":25369,"timestamp":"2026-08-17T05:00:00.000Z"} +{"doc_count":11146,"split_key":209630,"timestamp":"2026-08-17T06:00:00.000Z"} +{"doc_count":9139,"split_key":209334,"timestamp":"2026-08-17T06:00:00.000Z"} +{"doc_count":7825,"split_key":64199,"timestamp":"2026-08-17T06:00:00.000Z"} +{"doc_count":4267,"split_key":274069,"timestamp":"2026-08-17T06:00:00.000Z"} +{"doc_count":2466,"split_key":211590,"timestamp":"2026-08-17T06:00:00.000Z"} +{"doc_count":9630,"split_key":209334,"timestamp":"2026-08-17T07:00:00.000Z"} +{"doc_count":8509,"split_key":64199,"timestamp":"2026-08-17T07:00:00.000Z"} +{"doc_count":4501,"split_key":209630,"timestamp":"2026-08-17T07:00:00.000Z"} +{"doc_count":1804,"split_key":274069,"timestamp":"2026-08-17T07:00:00.000Z"} +{"doc_count":1386,"split_key":37963,"timestamp":"2026-08-17T07:00:00.000Z"} +{"doc_count":8443,"split_key":64199,"timestamp":"2026-08-17T08:00:00.000Z"} +{"doc_count":7185,"split_key":209334,"timestamp":"2026-08-17T08:00:00.000Z"} +{"doc_count":5628,"split_key":209630,"timestamp":"2026-08-17T08:00:00.000Z"} +{"doc_count":4318,"split_key":56153,"timestamp":"2026-08-17T08:00:00.000Z"} +{"doc_count":1917,"split_key":274069,"timestamp":"2026-08-17T08:00:00.000Z"} +{"doc_count":64524,"split_key":23470,"timestamp":"2026-08-17T09:00:00.000Z"} +{"doc_count":9623,"split_key":209630,"timestamp":"2026-08-17T09:00:00.000Z"} +{"doc_count":8599,"split_key":64199,"timestamp":"2026-08-17T09:00:00.000Z"} +{"doc_count":7600,"split_key":209334,"timestamp":"2026-08-17T09:00:00.000Z"} +{"doc_count":4120,"split_key":56153,"timestamp":"2026-08-17T09:00:00.000Z"} +{"doc_count":8473,"split_key":64199,"timestamp":"2026-08-17T10:00:00.000Z"} +{"doc_count":7684,"split_key":209334,"timestamp":"2026-08-17T10:00:00.000Z"} +{"doc_count":4514,"split_key":209630,"timestamp":"2026-08-17T10:00:00.000Z"} +{"doc_count":3001,"split_key":211590,"timestamp":"2026-08-17T10:00:00.000Z"} +{"doc_count":2682,"split_key":53667,"timestamp":"2026-08-17T10:00:00.000Z"} +{"doc_count":11839,"split_key":209334,"timestamp":"2026-08-17T11:00:00.000Z"} +{"doc_count":11621,"split_key":209630,"timestamp":"2026-08-17T11:00:00.000Z"} +{"doc_count":8726,"split_key":14061,"timestamp":"2026-08-17T11:00:00.000Z"} +{"doc_count":8538,"split_key":64199,"timestamp":"2026-08-17T11:00:00.000Z"} +{"doc_count":4113,"split_key":274069,"timestamp":"2026-08-17T11:00:00.000Z"} +{"doc_count":30456,"split_key":14061,"timestamp":"2026-08-17T12:00:00.000Z"} +{"doc_count":11150,"split_key":209334,"timestamp":"2026-08-17T12:00:00.000Z"} +{"doc_count":4548,"split_key":209630,"timestamp":"2026-08-17T12:00:00.000Z"} +{"doc_count":3843,"split_key":211590,"timestamp":"2026-08-17T12:00:00.000Z"} +{"doc_count":2814,"split_key":64199,"timestamp":"2026-08-17T12:00:00.000Z"} +{"doc_count":46439,"split_key":14061,"timestamp":"2026-08-17T13:00:00.000Z"} +{"doc_count":14267,"split_key":209334,"timestamp":"2026-08-17T13:00:00.000Z"} +{"doc_count":10309,"split_key":209630,"timestamp":"2026-08-17T13:00:00.000Z"} +{"doc_count":3974,"split_key":274069,"timestamp":"2026-08-17T13:00:00.000Z"} +{"doc_count":1136,"split_key":37963,"timestamp":"2026-08-17T13:00:00.000Z"} +{"doc_count":22098,"split_key":14061,"timestamp":"2026-08-17T14:00:00.000Z"} +{"doc_count":12149,"split_key":209334,"timestamp":"2026-08-17T14:00:00.000Z"} +{"doc_count":4877,"split_key":209630,"timestamp":"2026-08-17T14:00:00.000Z"} +{"doc_count":3016,"split_key":211590,"timestamp":"2026-08-17T14:00:00.000Z"} +{"doc_count":2855,"split_key":64199,"timestamp":"2026-08-17T14:00:00.000Z"} +{"doc_count":17651,"split_key":209334,"timestamp":"2026-08-17T15:00:00.000Z"} +{"doc_count":12814,"split_key":14061,"timestamp":"2026-08-17T15:00:00.000Z"} +{"doc_count":10558,"split_key":209630,"timestamp":"2026-08-17T15:00:00.000Z"} +{"doc_count":5307,"split_key":64199,"timestamp":"2026-08-17T15:00:00.000Z"} +{"doc_count":3894,"split_key":50188,"timestamp":"2026-08-17T15:00:00.000Z"} +{"doc_count":14120,"split_key":14061,"timestamp":"2026-08-17T16:00:00.000Z"} +{"doc_count":5050,"split_key":209630,"timestamp":"2026-08-17T16:00:00.000Z"} +{"doc_count":4461,"split_key":209334,"timestamp":"2026-08-17T16:00:00.000Z"} +{"doc_count":1891,"split_key":274069,"timestamp":"2026-08-17T16:00:00.000Z"} +{"doc_count":1082,"split_key":37963,"timestamp":"2026-08-17T16:00:00.000Z"} +{"doc_count":27119,"split_key":209334,"timestamp":"2026-08-17T17:00:00.000Z"} +{"doc_count":5601,"split_key":209630,"timestamp":"2026-08-17T17:00:00.000Z"} +{"doc_count":3460,"split_key":211804,"timestamp":"2026-08-17T17:00:00.000Z"} +{"doc_count":2864,"split_key":14061,"timestamp":"2026-08-17T17:00:00.000Z"} +{"doc_count":2135,"split_key":274069,"timestamp":"2026-08-17T17:00:00.000Z"} +{"doc_count":12210,"split_key":209334,"timestamp":"2026-08-17T18:00:00.000Z"} +{"doc_count":9733,"split_key":209630,"timestamp":"2026-08-17T18:00:00.000Z"} +{"doc_count":3927,"split_key":211804,"timestamp":"2026-08-17T18:00:00.000Z"} +{"doc_count":3549,"split_key":274069,"timestamp":"2026-08-17T18:00:00.000Z"} +{"doc_count":2815,"split_key":64199,"timestamp":"2026-08-17T18:00:00.000Z"} +{"doc_count":18700,"split_key":209334,"timestamp":"2026-08-17T19:00:00.000Z"} +{"doc_count":5662,"split_key":64199,"timestamp":"2026-08-17T19:00:00.000Z"} +{"doc_count":4298,"split_key":701,"timestamp":"2026-08-17T19:00:00.000Z"} +{"doc_count":3842,"split_key":209630,"timestamp":"2026-08-17T19:00:00.000Z"} +{"doc_count":2326,"split_key":37963,"timestamp":"2026-08-17T19:00:00.000Z"} +{"doc_count":10780,"split_key":209630,"timestamp":"2026-08-17T20:00:00.000Z"} +{"doc_count":5529,"split_key":140026,"timestamp":"2026-08-17T20:00:00.000Z"} +{"doc_count":5036,"split_key":64199,"timestamp":"2026-08-17T20:00:00.000Z"} +{"doc_count":4407,"split_key":274069,"timestamp":"2026-08-17T20:00:00.000Z"} +{"doc_count":3558,"split_key":37963,"timestamp":"2026-08-17T20:00:00.000Z"} +{"doc_count":5852,"split_key":140026,"timestamp":"2026-08-17T21:00:00.000Z"} +{"doc_count":4950,"split_key":209630,"timestamp":"2026-08-17T21:00:00.000Z"} +{"doc_count":4009,"split_key":64199,"timestamp":"2026-08-17T21:00:00.000Z"} +{"doc_count":2976,"split_key":37963,"timestamp":"2026-08-17T21:00:00.000Z"} +{"doc_count":1999,"split_key":274069,"timestamp":"2026-08-17T21:00:00.000Z"} +{"doc_count":10238,"split_key":209630,"timestamp":"2026-08-17T22:00:00.000Z"} +{"doc_count":4242,"split_key":274069,"timestamp":"2026-08-17T22:00:00.000Z"} +{"doc_count":2841,"split_key":64199,"timestamp":"2026-08-17T22:00:00.000Z"} +{"doc_count":2793,"split_key":37963,"timestamp":"2026-08-17T22:00:00.000Z"} +{"doc_count":1155,"split_key":57724,"timestamp":"2026-08-17T22:00:00.000Z"} +{"doc_count":4653,"split_key":209630,"timestamp":"2026-08-17T23:00:00.000Z"} +{"doc_count":3201,"split_key":203,"timestamp":"2026-08-17T23:00:00.000Z"} +{"doc_count":3054,"split_key":37963,"timestamp":"2026-08-17T23:00:00.000Z"} +{"doc_count":1758,"split_key":274069,"timestamp":"2026-08-17T23:00:00.000Z"} +{"doc_count":1283,"split_key":57724,"timestamp":"2026-08-17T23:00:00.000Z"} +{"doc_count":11179,"split_key":14987,"timestamp":"2026-08-18T00:00:00.000Z"} +{"doc_count":10752,"split_key":209630,"timestamp":"2026-08-18T00:00:00.000Z"} +{"doc_count":3975,"split_key":274069,"timestamp":"2026-08-18T00:00:00.000Z"} +{"doc_count":3135,"split_key":37963,"timestamp":"2026-08-18T00:00:00.000Z"} +{"doc_count":793,"split_key":25369,"timestamp":"2026-08-18T00:00:00.000Z"} +{"doc_count":6858,"split_key":212238,"timestamp":"2026-08-18T01:00:00.000Z"} +{"doc_count":4814,"split_key":64199,"timestamp":"2026-08-18T01:00:00.000Z"} +{"doc_count":4442,"split_key":209630,"timestamp":"2026-08-18T01:00:00.000Z"} +{"doc_count":2157,"split_key":37963,"timestamp":"2026-08-18T01:00:00.000Z"} +{"doc_count":1960,"split_key":63949,"timestamp":"2026-08-18T01:00:00.000Z"} +{"doc_count":7685,"split_key":64199,"timestamp":"2026-08-18T02:00:00.000Z"} +{"doc_count":6037,"split_key":209630,"timestamp":"2026-08-18T02:00:00.000Z"} +{"doc_count":2266,"split_key":274069,"timestamp":"2026-08-18T02:00:00.000Z"} +{"doc_count":2011,"split_key":37963,"timestamp":"2026-08-18T02:00:00.000Z"} +{"doc_count":1056,"split_key":396982,"timestamp":"2026-08-18T02:00:00.000Z"} +{"doc_count":9074,"split_key":209630,"timestamp":"2026-08-18T03:00:00.000Z"} +{"doc_count":8327,"split_key":64199,"timestamp":"2026-08-18T03:00:00.000Z"} +{"doc_count":3569,"split_key":274069,"timestamp":"2026-08-18T03:00:00.000Z"} +{"doc_count":2118,"split_key":37963,"timestamp":"2026-08-18T03:00:00.000Z"} +{"doc_count":1145,"split_key":209334,"timestamp":"2026-08-18T03:00:00.000Z"} +{"doc_count":7804,"split_key":64199,"timestamp":"2026-08-18T04:00:00.000Z"} +{"doc_count":3909,"split_key":209630,"timestamp":"2026-08-18T04:00:00.000Z"} +{"doc_count":2752,"split_key":209334,"timestamp":"2026-08-18T04:00:00.000Z"} +{"doc_count":2203,"split_key":37963,"timestamp":"2026-08-18T04:00:00.000Z"} +{"doc_count":1335,"split_key":211590,"timestamp":"2026-08-18T04:00:00.000Z"} +{"doc_count":10565,"split_key":209630,"timestamp":"2026-08-18T05:00:00.000Z"} +{"doc_count":6352,"split_key":64199,"timestamp":"2026-08-18T05:00:00.000Z"} +{"doc_count":5843,"split_key":209334,"timestamp":"2026-08-18T05:00:00.000Z"} +{"doc_count":3978,"split_key":274069,"timestamp":"2026-08-18T05:00:00.000Z"} +{"doc_count":2553,"split_key":37963,"timestamp":"2026-08-18T05:00:00.000Z"} +{"doc_count":8785,"split_key":209334,"timestamp":"2026-08-18T06:00:00.000Z"} +{"doc_count":7950,"split_key":64199,"timestamp":"2026-08-18T06:00:00.000Z"} +{"doc_count":5047,"split_key":209630,"timestamp":"2026-08-18T06:00:00.000Z"} +{"doc_count":2603,"split_key":37963,"timestamp":"2026-08-18T06:00:00.000Z"} +{"doc_count":1947,"split_key":274069,"timestamp":"2026-08-18T06:00:00.000Z"} +{"doc_count":10359,"split_key":209334,"timestamp":"2026-08-18T07:00:00.000Z"} +{"doc_count":10334,"split_key":209630,"timestamp":"2026-08-18T07:00:00.000Z"} +{"doc_count":8037,"split_key":64199,"timestamp":"2026-08-18T07:00:00.000Z"} +{"doc_count":4302,"split_key":274069,"timestamp":"2026-08-18T07:00:00.000Z"} +{"doc_count":2553,"split_key":37963,"timestamp":"2026-08-18T07:00:00.000Z"} +{"doc_count":7696,"split_key":64199,"timestamp":"2026-08-18T08:00:00.000Z"} +{"doc_count":7153,"split_key":209334,"timestamp":"2026-08-18T08:00:00.000Z"} +{"doc_count":4643,"split_key":209630,"timestamp":"2026-08-18T08:00:00.000Z"} +{"doc_count":2500,"split_key":37963,"timestamp":"2026-08-18T08:00:00.000Z"} +{"doc_count":1478,"split_key":274069,"timestamp":"2026-08-18T08:00:00.000Z"} +{"doc_count":9519,"split_key":209630,"timestamp":"2026-08-18T09:00:00.000Z"} +{"doc_count":8350,"split_key":209334,"timestamp":"2026-08-18T09:00:00.000Z"} +{"doc_count":7610,"split_key":64199,"timestamp":"2026-08-18T09:00:00.000Z"} +{"doc_count":3706,"split_key":274069,"timestamp":"2026-08-18T09:00:00.000Z"} +{"doc_count":3282,"split_key":37963,"timestamp":"2026-08-18T09:00:00.000Z"} +{"doc_count":8742,"split_key":209334,"timestamp":"2026-08-18T10:00:00.000Z"} +{"doc_count":7862,"split_key":64199,"timestamp":"2026-08-18T10:00:00.000Z"} +{"doc_count":5279,"split_key":209630,"timestamp":"2026-08-18T10:00:00.000Z"} +{"doc_count":2032,"split_key":274069,"timestamp":"2026-08-18T10:00:00.000Z"} +{"doc_count":1738,"split_key":37963,"timestamp":"2026-08-18T10:00:00.000Z"} +{"doc_count":10556,"split_key":209334,"timestamp":"2026-08-18T11:00:00.000Z"} +{"doc_count":7467,"split_key":64199,"timestamp":"2026-08-18T11:00:00.000Z"} +{"doc_count":5364,"split_key":209630,"timestamp":"2026-08-18T11:00:00.000Z"} +{"doc_count":2023,"split_key":202281,"timestamp":"2026-08-18T11:00:00.000Z"} +{"doc_count":1741,"split_key":274069,"timestamp":"2026-08-18T11:00:00.000Z"} +{"doc_count":10234,"split_key":209334,"timestamp":"2026-08-18T12:00:00.000Z"} +{"doc_count":9676,"split_key":209630,"timestamp":"2026-08-18T12:00:00.000Z"} +{"doc_count":8268,"split_key":202281,"timestamp":"2026-08-18T12:00:00.000Z"} +{"doc_count":4030,"split_key":274069,"timestamp":"2026-08-18T12:00:00.000Z"} +{"doc_count":1636,"split_key":37963,"timestamp":"2026-08-18T12:00:00.000Z"} +{"doc_count":8834,"split_key":209334,"timestamp":"2026-08-18T13:00:00.000Z"} +{"doc_count":4729,"split_key":209630,"timestamp":"2026-08-18T13:00:00.000Z"} +{"doc_count":4230,"split_key":64199,"timestamp":"2026-08-18T13:00:00.000Z"} +{"doc_count":3401,"split_key":174,"timestamp":"2026-08-18T13:00:00.000Z"} +{"doc_count":3383,"split_key":140026,"timestamp":"2026-08-18T13:00:00.000Z"} +{"doc_count":18765,"split_key":209334,"timestamp":"2026-08-18T14:00:00.000Z"} +{"doc_count":10307,"split_key":209630,"timestamp":"2026-08-18T14:00:00.000Z"} +{"doc_count":4620,"split_key":14061,"timestamp":"2026-08-18T14:00:00.000Z"} +{"doc_count":4083,"split_key":274069,"timestamp":"2026-08-18T14:00:00.000Z"} +{"doc_count":3179,"split_key":49743,"timestamp":"2026-08-18T14:00:00.000Z"} +{"doc_count":25118,"split_key":14061,"timestamp":"2026-08-18T15:00:00.000Z"} +{"doc_count":17292,"split_key":209334,"timestamp":"2026-08-18T15:00:00.000Z"} +{"doc_count":4940,"split_key":209630,"timestamp":"2026-08-18T15:00:00.000Z"} +{"doc_count":1913,"split_key":274069,"timestamp":"2026-08-18T15:00:00.000Z"} +{"doc_count":1571,"split_key":37963,"timestamp":"2026-08-18T15:00:00.000Z"} +{"doc_count":14919,"split_key":14061,"timestamp":"2026-08-18T16:00:00.000Z"} +{"doc_count":10374,"split_key":209630,"timestamp":"2026-08-18T16:00:00.000Z"} +{"doc_count":7011,"split_key":209334,"timestamp":"2026-08-18T16:00:00.000Z"} +{"doc_count":4138,"split_key":274069,"timestamp":"2026-08-18T16:00:00.000Z"} +{"doc_count":2898,"split_key":211590,"timestamp":"2026-08-18T16:00:00.000Z"} +{"doc_count":24369,"split_key":209334,"timestamp":"2026-08-18T17:00:00.000Z"} +{"doc_count":4899,"split_key":209630,"timestamp":"2026-08-18T17:00:00.000Z"} +{"doc_count":3995,"split_key":211590,"timestamp":"2026-08-18T17:00:00.000Z"} +{"doc_count":1598,"split_key":274069,"timestamp":"2026-08-18T17:00:00.000Z"} +{"doc_count":1383,"split_key":37963,"timestamp":"2026-08-18T17:00:00.000Z"} +{"doc_count":16561,"split_key":209334,"timestamp":"2026-08-18T18:00:00.000Z"} +{"doc_count":10424,"split_key":209630,"timestamp":"2026-08-18T18:00:00.000Z"} +{"doc_count":3836,"split_key":274069,"timestamp":"2026-08-18T18:00:00.000Z"} +{"doc_count":2769,"split_key":64199,"timestamp":"2026-08-18T18:00:00.000Z"} +{"doc_count":2765,"split_key":50188,"timestamp":"2026-08-18T18:00:00.000Z"} +{"doc_count":15873,"split_key":209334,"timestamp":"2026-08-18T19:00:00.000Z"} +{"doc_count":4915,"split_key":209630,"timestamp":"2026-08-18T19:00:00.000Z"} +{"doc_count":2258,"split_key":64199,"timestamp":"2026-08-18T19:00:00.000Z"} +{"doc_count":2172,"split_key":37963,"timestamp":"2026-08-18T19:00:00.000Z"} +{"doc_count":1797,"split_key":274069,"timestamp":"2026-08-18T19:00:00.000Z"} +{"doc_count":5059,"split_key":209630,"timestamp":"2026-08-18T20:00:00.000Z"} +{"doc_count":3459,"split_key":209334,"timestamp":"2026-08-18T20:00:00.000Z"} +{"doc_count":2357,"split_key":37963,"timestamp":"2026-08-18T20:00:00.000Z"} +{"doc_count":2261,"split_key":215620,"timestamp":"2026-08-18T20:00:00.000Z"} +{"doc_count":1969,"split_key":274069,"timestamp":"2026-08-18T20:00:00.000Z"} +{"doc_count":9794,"split_key":209630,"timestamp":"2026-08-18T21:00:00.000Z"} +{"doc_count":3889,"split_key":274069,"timestamp":"2026-08-18T21:00:00.000Z"} +{"doc_count":3145,"split_key":37963,"timestamp":"2026-08-18T21:00:00.000Z"} +{"doc_count":1247,"split_key":215620,"timestamp":"2026-08-18T21:00:00.000Z"} +{"doc_count":960,"split_key":34254,"timestamp":"2026-08-18T21:00:00.000Z"} +{"doc_count":6356,"split_key":64199,"timestamp":"2026-08-18T22:00:00.000Z"} +{"doc_count":4333,"split_key":209630,"timestamp":"2026-08-18T22:00:00.000Z"} +{"doc_count":1988,"split_key":37963,"timestamp":"2026-08-18T22:00:00.000Z"} +{"doc_count":1613,"split_key":274069,"timestamp":"2026-08-18T22:00:00.000Z"} +{"doc_count":1054,"split_key":25369,"timestamp":"2026-08-18T22:00:00.000Z"} +{"doc_count":10883,"split_key":209630,"timestamp":"2026-08-18T23:00:00.000Z"} +{"doc_count":4208,"split_key":274069,"timestamp":"2026-08-18T23:00:00.000Z"} +{"doc_count":2410,"split_key":64199,"timestamp":"2026-08-18T23:00:00.000Z"} +{"doc_count":2093,"split_key":37963,"timestamp":"2026-08-18T23:00:00.000Z"} +{"doc_count":764,"split_key":25369,"timestamp":"2026-08-18T23:00:00.000Z"} +{"doc_count":12518,"split_key":14987,"timestamp":"2026-08-19T00:00:00.000Z"} +{"doc_count":4824,"split_key":209630,"timestamp":"2026-08-19T00:00:00.000Z"} +{"doc_count":2001,"split_key":37963,"timestamp":"2026-08-19T00:00:00.000Z"} +{"doc_count":1850,"split_key":834,"timestamp":"2026-08-19T00:00:00.000Z"} +{"doc_count":1811,"split_key":274069,"timestamp":"2026-08-19T00:00:00.000Z"} +{"doc_count":10357,"split_key":209630,"timestamp":"2026-08-19T01:00:00.000Z"} +{"doc_count":8369,"split_key":11878,"timestamp":"2026-08-19T01:00:00.000Z"} +{"doc_count":3628,"split_key":274069,"timestamp":"2026-08-19T01:00:00.000Z"} +{"doc_count":1988,"split_key":834,"timestamp":"2026-08-19T01:00:00.000Z"} +{"doc_count":1835,"split_key":37963,"timestamp":"2026-08-19T01:00:00.000Z"} +{"doc_count":4837,"split_key":209630,"timestamp":"2026-08-19T02:00:00.000Z"} +{"doc_count":1918,"split_key":274069,"timestamp":"2026-08-19T02:00:00.000Z"} +{"doc_count":1729,"split_key":37963,"timestamp":"2026-08-19T02:00:00.000Z"} +{"doc_count":999,"split_key":209334,"timestamp":"2026-08-19T02:00:00.000Z"} +{"doc_count":965,"split_key":25369,"timestamp":"2026-08-19T02:00:00.000Z"} +{"doc_count":10500,"split_key":209630,"timestamp":"2026-08-19T03:00:00.000Z"} +{"doc_count":3869,"split_key":274069,"timestamp":"2026-08-19T03:00:00.000Z"} +{"doc_count":2060,"split_key":37963,"timestamp":"2026-08-19T03:00:00.000Z"} +{"doc_count":1496,"split_key":209334,"timestamp":"2026-08-19T03:00:00.000Z"} +{"doc_count":969,"split_key":25369,"timestamp":"2026-08-19T03:00:00.000Z"} +{"doc_count":8401,"split_key":56153,"timestamp":"2026-08-19T04:00:00.000Z"} +{"doc_count":4749,"split_key":209630,"timestamp":"2026-08-19T04:00:00.000Z"} +{"doc_count":2861,"split_key":209334,"timestamp":"2026-08-19T04:00:00.000Z"} +{"doc_count":2368,"split_key":37963,"timestamp":"2026-08-19T04:00:00.000Z"} +{"doc_count":2030,"split_key":274069,"timestamp":"2026-08-19T04:00:00.000Z"} +{"doc_count":6140,"split_key":209334,"timestamp":"2026-08-19T05:00:00.000Z"} +{"doc_count":5252,"split_key":209630,"timestamp":"2026-08-19T05:00:00.000Z"} +{"doc_count":2879,"split_key":131378,"timestamp":"2026-08-19T05:00:00.000Z"} +{"doc_count":2016,"split_key":274069,"timestamp":"2026-08-19T05:00:00.000Z"} +{"doc_count":939,"split_key":37963,"timestamp":"2026-08-19T05:00:00.000Z"} +{"doc_count":9358,"split_key":209334,"timestamp":"2026-08-19T06:00:00.000Z"} +{"doc_count":8848,"split_key":209630,"timestamp":"2026-08-19T06:00:00.000Z"} +{"doc_count":4880,"split_key":149089,"timestamp":"2026-08-19T06:00:00.000Z"} +{"doc_count":3756,"split_key":274069,"timestamp":"2026-08-19T06:00:00.000Z"} +{"doc_count":816,"split_key":398101,"timestamp":"2026-08-19T06:00:00.000Z"} +{"doc_count":10770,"split_key":209334,"timestamp":"2026-08-19T07:00:00.000Z"} +{"doc_count":3736,"split_key":149089,"timestamp":"2026-08-19T07:00:00.000Z"} +{"doc_count":2909,"split_key":209630,"timestamp":"2026-08-19T07:00:00.000Z"} +{"doc_count":2604,"split_key":274069,"timestamp":"2026-08-19T07:00:00.000Z"} +{"doc_count":1039,"split_key":16509,"timestamp":"2026-08-19T07:00:00.000Z"} +{"doc_count":7639,"split_key":209630,"timestamp":"2026-08-19T08:00:00.000Z"} +{"doc_count":7546,"split_key":209334,"timestamp":"2026-08-19T08:00:00.000Z"} +{"doc_count":7129,"split_key":274069,"timestamp":"2026-08-19T08:00:00.000Z"} +{"doc_count":853,"split_key":16509,"timestamp":"2026-08-19T08:00:00.000Z"} +{"doc_count":773,"split_key":208137,"timestamp":"2026-08-19T08:00:00.000Z"} +{"doc_count":8614,"split_key":209334,"timestamp":"2026-08-19T09:00:00.000Z"} +{"doc_count":2804,"split_key":209630,"timestamp":"2026-08-19T09:00:00.000Z"} +{"doc_count":2381,"split_key":274069,"timestamp":"2026-08-19T09:00:00.000Z"} +{"doc_count":929,"split_key":208137,"timestamp":"2026-08-19T09:00:00.000Z"} +{"doc_count":673,"split_key":37963,"timestamp":"2026-08-19T09:00:00.000Z"} +{"doc_count":8906,"split_key":209334,"timestamp":"2026-08-19T10:00:00.000Z"} +{"doc_count":6360,"split_key":48090,"timestamp":"2026-08-19T10:00:00.000Z"} +{"doc_count":3066,"split_key":209630,"timestamp":"2026-08-19T10:00:00.000Z"} +{"doc_count":2547,"split_key":274069,"timestamp":"2026-08-19T10:00:00.000Z"} +{"doc_count":1026,"split_key":208137,"timestamp":"2026-08-19T10:00:00.000Z"} +{"doc_count":10909,"split_key":209334,"timestamp":"2026-08-19T11:00:00.000Z"} +{"doc_count":6263,"split_key":209630,"timestamp":"2026-08-19T11:00:00.000Z"} +{"doc_count":5631,"split_key":274069,"timestamp":"2026-08-19T11:00:00.000Z"} +{"doc_count":983,"split_key":22612,"timestamp":"2026-08-19T11:00:00.000Z"} +{"doc_count":948,"split_key":37963,"timestamp":"2026-08-19T11:00:00.000Z"} +{"doc_count":16338,"split_key":14061,"timestamp":"2026-08-19T12:00:00.000Z"} +{"doc_count":9995,"split_key":209334,"timestamp":"2026-08-19T12:00:00.000Z"} +{"doc_count":3480,"split_key":209630,"timestamp":"2026-08-19T12:00:00.000Z"} +{"doc_count":3419,"split_key":274069,"timestamp":"2026-08-19T12:00:00.000Z"} +{"doc_count":2252,"split_key":37963,"timestamp":"2026-08-19T12:00:00.000Z"} +{"doc_count":17081,"split_key":14061,"timestamp":"2026-08-19T13:00:00.000Z"} +{"doc_count":8976,"split_key":209334,"timestamp":"2026-08-19T13:00:00.000Z"} +{"doc_count":4741,"split_key":64199,"timestamp":"2026-08-19T13:00:00.000Z"} +{"doc_count":2829,"split_key":209630,"timestamp":"2026-08-19T13:00:00.000Z"} +{"doc_count":2343,"split_key":274069,"timestamp":"2026-08-19T13:00:00.000Z"} +{"doc_count":12621,"split_key":209334,"timestamp":"2026-08-19T14:00:00.000Z"} +{"doc_count":10293,"split_key":14061,"timestamp":"2026-08-19T14:00:00.000Z"} +{"doc_count":8399,"split_key":64199,"timestamp":"2026-08-19T14:00:00.000Z"} +{"doc_count":7260,"split_key":56153,"timestamp":"2026-08-19T14:00:00.000Z"} +{"doc_count":6062,"split_key":209630,"timestamp":"2026-08-19T14:00:00.000Z"} +{"doc_count":16822,"split_key":209334,"timestamp":"2026-08-19T15:00:00.000Z"} +{"doc_count":8261,"split_key":64199,"timestamp":"2026-08-19T15:00:00.000Z"} +{"doc_count":3290,"split_key":209630,"timestamp":"2026-08-19T15:00:00.000Z"} +{"doc_count":3127,"split_key":274069,"timestamp":"2026-08-19T15:00:00.000Z"} +{"doc_count":1533,"split_key":14061,"timestamp":"2026-08-19T15:00:00.000Z"} +{"doc_count":10385,"split_key":209334,"timestamp":"2026-08-19T16:00:00.000Z"} +{"doc_count":3851,"split_key":64199,"timestamp":"2026-08-19T16:00:00.000Z"} +{"doc_count":2837,"split_key":274069,"timestamp":"2026-08-19T16:00:00.000Z"} +{"doc_count":2726,"split_key":209630,"timestamp":"2026-08-19T16:00:00.000Z"} +{"doc_count":1016,"split_key":37963,"timestamp":"2026-08-19T16:00:00.000Z"} +{"doc_count":24812,"split_key":209334,"timestamp":"2026-08-19T17:00:00.000Z"} +{"doc_count":5830,"split_key":274069,"timestamp":"2026-08-19T17:00:00.000Z"} +{"doc_count":5722,"split_key":209630,"timestamp":"2026-08-19T17:00:00.000Z"} +{"doc_count":3120,"split_key":64199,"timestamp":"2026-08-19T17:00:00.000Z"} +{"doc_count":1366,"split_key":37963,"timestamp":"2026-08-19T17:00:00.000Z"} +{"doc_count":14893,"split_key":209334,"timestamp":"2026-08-19T18:00:00.000Z"} +{"doc_count":3912,"split_key":64199,"timestamp":"2026-08-19T18:00:00.000Z"} +{"doc_count":3640,"split_key":274069,"timestamp":"2026-08-19T18:00:00.000Z"} +{"doc_count":3143,"split_key":209630,"timestamp":"2026-08-19T18:00:00.000Z"} +{"doc_count":1091,"split_key":51396,"timestamp":"2026-08-19T18:00:00.000Z"} +{"doc_count":18264,"split_key":209334,"timestamp":"2026-08-19T19:00:00.000Z"} +{"doc_count":2582,"split_key":274069,"timestamp":"2026-08-19T19:00:00.000Z"} +{"doc_count":2351,"split_key":209630,"timestamp":"2026-08-19T19:00:00.000Z"} +{"doc_count":1757,"split_key":64199,"timestamp":"2026-08-19T19:00:00.000Z"} +{"doc_count":815,"split_key":208137,"timestamp":"2026-08-19T19:00:00.000Z"} +{"doc_count":5878,"split_key":274069,"timestamp":"2026-08-19T20:00:00.000Z"} +{"doc_count":5259,"split_key":209630,"timestamp":"2026-08-19T20:00:00.000Z"} +{"doc_count":3545,"split_key":209334,"timestamp":"2026-08-19T20:00:00.000Z"} +{"doc_count":3069,"split_key":64199,"timestamp":"2026-08-19T20:00:00.000Z"} +{"doc_count":748,"split_key":208137,"timestamp":"2026-08-19T20:00:00.000Z"} +{"doc_count":3470,"split_key":274069,"timestamp":"2026-08-19T21:00:00.000Z"} +{"doc_count":3157,"split_key":209630,"timestamp":"2026-08-19T21:00:00.000Z"} +{"doc_count":860,"split_key":209334,"timestamp":"2026-08-19T21:00:00.000Z"} +{"doc_count":646,"split_key":208137,"timestamp":"2026-08-19T21:00:00.000Z"} +{"doc_count":520,"split_key":16509,"timestamp":"2026-08-19T21:00:00.000Z"} +{"doc_count":5292,"split_key":64199,"timestamp":"2026-08-19T22:00:00.000Z"} +{"doc_count":3853,"split_key":135004,"timestamp":"2026-08-19T22:00:00.000Z"} +{"doc_count":2537,"split_key":209630,"timestamp":"2026-08-19T22:00:00.000Z"} +{"doc_count":2472,"split_key":274069,"timestamp":"2026-08-19T22:00:00.000Z"} +{"doc_count":2346,"split_key":197207,"timestamp":"2026-08-19T22:00:00.000Z"} +{"doc_count":6423,"split_key":64199,"timestamp":"2026-08-19T23:00:00.000Z"} +{"doc_count":5695,"split_key":274069,"timestamp":"2026-08-19T23:00:00.000Z"} +{"doc_count":5178,"split_key":209630,"timestamp":"2026-08-19T23:00:00.000Z"} +{"doc_count":871,"split_key":25369,"timestamp":"2026-08-19T23:00:00.000Z"} +{"doc_count":545,"split_key":396982,"timestamp":"2026-08-19T23:00:00.000Z"} +{"doc_count":10037,"split_key":14987,"timestamp":"2026-08-20T00:00:00.000Z"} +{"doc_count":7951,"split_key":64199,"timestamp":"2026-08-20T00:00:00.000Z"} +{"doc_count":3165,"split_key":274069,"timestamp":"2026-08-20T00:00:00.000Z"} +{"doc_count":3029,"split_key":209630,"timestamp":"2026-08-20T00:00:00.000Z"} +{"doc_count":900,"split_key":25369,"timestamp":"2026-08-20T00:00:00.000Z"} +{"doc_count":7919,"split_key":64199,"timestamp":"2026-08-20T01:00:00.000Z"} +{"doc_count":2664,"split_key":274069,"timestamp":"2026-08-20T01:00:00.000Z"} +{"doc_count":2317,"split_key":209630,"timestamp":"2026-08-20T01:00:00.000Z"} +{"doc_count":918,"split_key":14987,"timestamp":"2026-08-20T01:00:00.000Z"} +{"doc_count":914,"split_key":37963,"timestamp":"2026-08-20T01:00:00.000Z"} +{"doc_count":7944,"split_key":64199,"timestamp":"2026-08-20T02:00:00.000Z"} +{"doc_count":5461,"split_key":274069,"timestamp":"2026-08-20T02:00:00.000Z"} +{"doc_count":4989,"split_key":209630,"timestamp":"2026-08-20T02:00:00.000Z"} +{"doc_count":1196,"split_key":396982,"timestamp":"2026-08-20T02:00:00.000Z"} +{"doc_count":902,"split_key":37963,"timestamp":"2026-08-20T02:00:00.000Z"} +{"doc_count":7815,"split_key":64199,"timestamp":"2026-08-20T03:00:00.000Z"} +{"doc_count":3565,"split_key":274069,"timestamp":"2026-08-20T03:00:00.000Z"} +{"doc_count":3119,"split_key":209630,"timestamp":"2026-08-20T03:00:00.000Z"} +{"doc_count":1290,"split_key":209334,"timestamp":"2026-08-20T03:00:00.000Z"} +{"doc_count":1101,"split_key":9121,"timestamp":"2026-08-20T03:00:00.000Z"} +{"doc_count":7133,"split_key":64199,"timestamp":"2026-08-20T04:00:00.000Z"} +{"doc_count":2968,"split_key":209334,"timestamp":"2026-08-20T04:00:00.000Z"} +{"doc_count":2681,"split_key":274069,"timestamp":"2026-08-20T04:00:00.000Z"} +{"doc_count":2330,"split_key":209630,"timestamp":"2026-08-20T04:00:00.000Z"} +{"doc_count":1295,"split_key":51396,"timestamp":"2026-08-20T04:00:00.000Z"} +{"doc_count":6705,"split_key":209334,"timestamp":"2026-08-20T05:00:00.000Z"} +{"doc_count":5786,"split_key":64199,"timestamp":"2026-08-20T05:00:00.000Z"} +{"doc_count":3837,"split_key":274069,"timestamp":"2026-08-20T05:00:00.000Z"} +{"doc_count":3505,"split_key":209630,"timestamp":"2026-08-20T05:00:00.000Z"} +{"doc_count":1288,"split_key":8075,"timestamp":"2026-08-20T05:00:00.000Z"} +{"doc_count":7746,"split_key":209334,"timestamp":"2026-08-20T06:00:00.000Z"} +{"doc_count":5186,"split_key":274069,"timestamp":"2026-08-20T06:00:00.000Z"} +{"doc_count":4774,"split_key":209630,"timestamp":"2026-08-20T06:00:00.000Z"} +{"doc_count":4598,"split_key":64199,"timestamp":"2026-08-20T06:00:00.000Z"} +{"doc_count":1753,"split_key":37963,"timestamp":"2026-08-20T06:00:00.000Z"} +{"doc_count":12052,"split_key":209334,"timestamp":"2026-08-20T07:00:00.000Z"} +{"doc_count":7277,"split_key":64199,"timestamp":"2026-08-20T07:00:00.000Z"} +{"doc_count":2500,"split_key":274069,"timestamp":"2026-08-20T07:00:00.000Z"} +{"doc_count":2360,"split_key":209630,"timestamp":"2026-08-20T07:00:00.000Z"} +{"doc_count":1914,"split_key":37963,"timestamp":"2026-08-20T07:00:00.000Z"} +{"doc_count":7840,"split_key":64199,"timestamp":"2026-08-20T08:00:00.000Z"} +{"doc_count":7283,"split_key":209334,"timestamp":"2026-08-20T08:00:00.000Z"} +{"doc_count":3532,"split_key":274069,"timestamp":"2026-08-20T08:00:00.000Z"} +{"doc_count":2812,"split_key":209630,"timestamp":"2026-08-20T08:00:00.000Z"} +{"doc_count":2006,"split_key":37963,"timestamp":"2026-08-20T08:00:00.000Z"} +{"doc_count":8641,"split_key":209334,"timestamp":"2026-08-20T09:00:00.000Z"} +{"doc_count":5598,"split_key":274069,"timestamp":"2026-08-20T09:00:00.000Z"} +{"doc_count":5228,"split_key":209630,"timestamp":"2026-08-20T09:00:00.000Z"} +{"doc_count":5034,"split_key":64199,"timestamp":"2026-08-20T09:00:00.000Z"} +{"doc_count":1680,"split_key":37963,"timestamp":"2026-08-20T09:00:00.000Z"} +{"doc_count":10500,"split_key":37963,"timestamp":"2026-08-20T10:00:00.000Z"} +{"doc_count":8470,"split_key":64199,"timestamp":"2026-08-20T10:00:00.000Z"} +{"doc_count":8212,"split_key":209334,"timestamp":"2026-08-20T10:00:00.000Z"} +{"doc_count":2545,"split_key":274069,"timestamp":"2026-08-20T10:00:00.000Z"} +{"doc_count":2526,"split_key":209630,"timestamp":"2026-08-20T10:00:00.000Z"} +{"doc_count":11224,"split_key":209334,"timestamp":"2026-08-20T11:00:00.000Z"} +{"doc_count":8434,"split_key":64199,"timestamp":"2026-08-20T11:00:00.000Z"} +{"doc_count":2620,"split_key":274069,"timestamp":"2026-08-20T11:00:00.000Z"} +{"doc_count":2491,"split_key":209630,"timestamp":"2026-08-20T11:00:00.000Z"} +{"doc_count":915,"split_key":152900,"timestamp":"2026-08-20T11:00:00.000Z"} +{"doc_count":12194,"split_key":14061,"timestamp":"2026-08-20T12:00:00.000Z"} +{"doc_count":8556,"split_key":64199,"timestamp":"2026-08-20T12:00:00.000Z"} +{"doc_count":7184,"split_key":209334,"timestamp":"2026-08-20T12:00:00.000Z"} +{"doc_count":6572,"split_key":274069,"timestamp":"2026-08-20T12:00:00.000Z"} +{"doc_count":5652,"split_key":209630,"timestamp":"2026-08-20T12:00:00.000Z"} +{"doc_count":11012,"split_key":209334,"timestamp":"2026-08-20T13:00:00.000Z"} +{"doc_count":10617,"split_key":14061,"timestamp":"2026-08-20T13:00:00.000Z"} +{"doc_count":2853,"split_key":274069,"timestamp":"2026-08-20T13:00:00.000Z"} +{"doc_count":2556,"split_key":209630,"timestamp":"2026-08-20T13:00:00.000Z"} +{"doc_count":1270,"split_key":64199,"timestamp":"2026-08-20T13:00:00.000Z"} +{"doc_count":13300,"split_key":209334,"timestamp":"2026-08-20T14:00:00.000Z"} +{"doc_count":4502,"split_key":64199,"timestamp":"2026-08-20T14:00:00.000Z"} +{"doc_count":2744,"split_key":274069,"timestamp":"2026-08-20T14:00:00.000Z"} +{"doc_count":2292,"split_key":209630,"timestamp":"2026-08-20T14:00:00.000Z"} +{"doc_count":1025,"split_key":37963,"timestamp":"2026-08-20T14:00:00.000Z"} +{"doc_count":16426,"split_key":209334,"timestamp":"2026-08-20T15:00:00.000Z"} +{"doc_count":6192,"split_key":64199,"timestamp":"2026-08-20T15:00:00.000Z"} +{"doc_count":5892,"split_key":274069,"timestamp":"2026-08-20T15:00:00.000Z"} +{"doc_count":5738,"split_key":209630,"timestamp":"2026-08-20T15:00:00.000Z"} +{"doc_count":911,"split_key":37963,"timestamp":"2026-08-20T15:00:00.000Z"} +{"doc_count":11100,"split_key":209334,"timestamp":"2026-08-20T16:00:00.000Z"} +{"doc_count":7409,"split_key":200750,"timestamp":"2026-08-20T16:00:00.000Z"} +{"doc_count":2786,"split_key":274069,"timestamp":"2026-08-20T16:00:00.000Z"} +{"doc_count":2712,"split_key":209630,"timestamp":"2026-08-20T16:00:00.000Z"} +{"doc_count":831,"split_key":37963,"timestamp":"2026-08-20T16:00:00.000Z"} +{"doc_count":22793,"split_key":209334,"timestamp":"2026-08-20T17:00:00.000Z"} +{"doc_count":7930,"split_key":200750,"timestamp":"2026-08-20T17:00:00.000Z"} +{"doc_count":3229,"split_key":64199,"timestamp":"2026-08-20T17:00:00.000Z"} +{"doc_count":2516,"split_key":274069,"timestamp":"2026-08-20T17:00:00.000Z"} +{"doc_count":2360,"split_key":209630,"timestamp":"2026-08-20T17:00:00.000Z"} +{"doc_count":15793,"split_key":209334,"timestamp":"2026-08-20T18:00:00.000Z"} +{"doc_count":6729,"split_key":274069,"timestamp":"2026-08-20T18:00:00.000Z"} +{"doc_count":5915,"split_key":209630,"timestamp":"2026-08-20T18:00:00.000Z"} +{"doc_count":5416,"split_key":200750,"timestamp":"2026-08-20T18:00:00.000Z"} +{"doc_count":3992,"split_key":16509,"timestamp":"2026-08-20T18:00:00.000Z"} +{"doc_count":18463,"split_key":209334,"timestamp":"2026-08-20T19:00:00.000Z"} +{"doc_count":7951,"split_key":200750,"timestamp":"2026-08-20T19:00:00.000Z"} +{"doc_count":2772,"split_key":274069,"timestamp":"2026-08-20T19:00:00.000Z"} +{"doc_count":2533,"split_key":209630,"timestamp":"2026-08-20T19:00:00.000Z"} +{"doc_count":673,"split_key":137693,"timestamp":"2026-08-20T19:00:00.000Z"} +{"doc_count":8072,"split_key":200750,"timestamp":"2026-08-20T20:00:00.000Z"} +{"doc_count":3950,"split_key":64199,"timestamp":"2026-08-20T20:00:00.000Z"} +{"doc_count":3531,"split_key":209334,"timestamp":"2026-08-20T20:00:00.000Z"} +{"doc_count":2733,"split_key":274069,"timestamp":"2026-08-20T20:00:00.000Z"} +{"doc_count":2404,"split_key":209630,"timestamp":"2026-08-20T20:00:00.000Z"} +{"doc_count":7454,"split_key":200750,"timestamp":"2026-08-20T21:00:00.000Z"} +{"doc_count":6640,"split_key":274069,"timestamp":"2026-08-20T21:00:00.000Z"} +{"doc_count":5913,"split_key":209630,"timestamp":"2026-08-20T21:00:00.000Z"} +{"doc_count":5806,"split_key":64199,"timestamp":"2026-08-20T21:00:00.000Z"} +{"doc_count":837,"split_key":51396,"timestamp":"2026-08-20T21:00:00.000Z"} +{"doc_count":6929,"split_key":26496,"timestamp":"2026-08-20T22:00:00.000Z"} +{"doc_count":3451,"split_key":64199,"timestamp":"2026-08-20T22:00:00.000Z"} +{"doc_count":2683,"split_key":274069,"timestamp":"2026-08-20T22:00:00.000Z"} +{"doc_count":2337,"split_key":209630,"timestamp":"2026-08-20T22:00:00.000Z"} +{"doc_count":728,"split_key":25369,"timestamp":"2026-08-20T22:00:00.000Z"} +{"doc_count":3573,"split_key":26496,"timestamp":"2026-08-20T23:00:00.000Z"} +{"doc_count":2393,"split_key":274069,"timestamp":"2026-08-20T23:00:00.000Z"} +{"doc_count":2281,"split_key":209630,"timestamp":"2026-08-20T23:00:00.000Z"} +{"doc_count":945,"split_key":25369,"timestamp":"2026-08-20T23:00:00.000Z"} +{"doc_count":630,"split_key":16509,"timestamp":"2026-08-20T23:00:00.000Z"} +{"doc_count":10018,"split_key":14987,"timestamp":"2026-08-21T00:00:00.000Z"} +{"doc_count":6758,"split_key":274069,"timestamp":"2026-08-21T00:00:00.000Z"} +{"doc_count":5630,"split_key":209630,"timestamp":"2026-08-21T00:00:00.000Z"} +{"doc_count":663,"split_key":25369,"timestamp":"2026-08-21T00:00:00.000Z"} +{"doc_count":637,"split_key":37963,"timestamp":"2026-08-21T00:00:00.000Z"} +{"doc_count":5030,"split_key":64199,"timestamp":"2026-08-21T01:00:00.000Z"} +{"doc_count":2709,"split_key":274069,"timestamp":"2026-08-21T01:00:00.000Z"} +{"doc_count":2572,"split_key":209630,"timestamp":"2026-08-21T01:00:00.000Z"} +{"doc_count":1469,"split_key":37963,"timestamp":"2026-08-21T01:00:00.000Z"} +{"doc_count":1045,"split_key":10439,"timestamp":"2026-08-21T01:00:00.000Z"} +{"doc_count":2333,"split_key":274069,"timestamp":"2026-08-21T02:00:00.000Z"} +{"doc_count":2066,"split_key":64199,"timestamp":"2026-08-21T02:00:00.000Z"} +{"doc_count":1994,"split_key":209630,"timestamp":"2026-08-21T02:00:00.000Z"} +{"doc_count":1380,"split_key":37963,"timestamp":"2026-08-21T02:00:00.000Z"} +{"doc_count":934,"split_key":396982,"timestamp":"2026-08-21T02:00:00.000Z"} +{"doc_count":12552,"split_key":11878,"timestamp":"2026-08-21T03:00:00.000Z"} +{"doc_count":6711,"split_key":274069,"timestamp":"2026-08-21T03:00:00.000Z"} +{"doc_count":6252,"split_key":209630,"timestamp":"2026-08-21T03:00:00.000Z"} +{"doc_count":1429,"split_key":209334,"timestamp":"2026-08-21T03:00:00.000Z"} +{"doc_count":1368,"split_key":37963,"timestamp":"2026-08-21T03:00:00.000Z"} +{"doc_count":2708,"split_key":274069,"timestamp":"2026-08-21T04:00:00.000Z"} +{"doc_count":2563,"split_key":209334,"timestamp":"2026-08-21T04:00:00.000Z"} +{"doc_count":2547,"split_key":209630,"timestamp":"2026-08-21T04:00:00.000Z"} +{"doc_count":1235,"split_key":37963,"timestamp":"2026-08-21T04:00:00.000Z"} +{"doc_count":677,"split_key":396982,"timestamp":"2026-08-21T04:00:00.000Z"} +{"doc_count":6880,"split_key":209334,"timestamp":"2026-08-21T05:00:00.000Z"} +{"doc_count":2089,"split_key":274069,"timestamp":"2026-08-21T05:00:00.000Z"} +{"doc_count":1958,"split_key":209630,"timestamp":"2026-08-21T05:00:00.000Z"} +{"doc_count":833,"split_key":396982,"timestamp":"2026-08-21T05:00:00.000Z"} +{"doc_count":633,"split_key":16509,"timestamp":"2026-08-21T05:00:00.000Z"} +{"doc_count":7610,"split_key":209334,"timestamp":"2026-08-21T06:00:00.000Z"} +{"doc_count":6789,"split_key":274069,"timestamp":"2026-08-21T06:00:00.000Z"} +{"doc_count":6149,"split_key":209630,"timestamp":"2026-08-21T06:00:00.000Z"} +{"doc_count":2952,"split_key":8075,"timestamp":"2026-08-21T06:00:00.000Z"} +{"doc_count":1235,"split_key":37963,"timestamp":"2026-08-21T06:00:00.000Z"} +{"doc_count":12111,"split_key":209334,"timestamp":"2026-08-21T07:00:00.000Z"} +{"doc_count":2795,"split_key":274069,"timestamp":"2026-08-21T07:00:00.000Z"} +{"doc_count":2631,"split_key":209630,"timestamp":"2026-08-21T07:00:00.000Z"} +{"doc_count":699,"split_key":208137,"timestamp":"2026-08-21T07:00:00.000Z"} +{"doc_count":542,"split_key":37963,"timestamp":"2026-08-21T07:00:00.000Z"} +{"doc_count":4541,"split_key":209334,"timestamp":"2026-08-21T08:00:00.000Z"} +{"doc_count":2279,"split_key":274069,"timestamp":"2026-08-21T08:00:00.000Z"} +{"doc_count":1853,"split_key":209630,"timestamp":"2026-08-21T08:00:00.000Z"} +{"doc_count":477,"split_key":16509,"timestamp":"2026-08-21T08:00:00.000Z"} +{"doc_count":442,"split_key":213412,"timestamp":"2026-08-21T08:00:00.000Z"} +{"doc_count":10712,"split_key":209334,"timestamp":"2026-08-21T09:00:00.000Z"} +{"doc_count":6269,"split_key":274069,"timestamp":"2026-08-21T09:00:00.000Z"} +{"doc_count":5616,"split_key":209630,"timestamp":"2026-08-21T09:00:00.000Z"} +{"doc_count":798,"split_key":396982,"timestamp":"2026-08-21T09:00:00.000Z"} +{"doc_count":603,"split_key":215762,"timestamp":"2026-08-21T09:00:00.000Z"} +{"doc_count":8160,"split_key":209334,"timestamp":"2026-08-21T10:00:00.000Z"} +{"doc_count":3229,"split_key":274069,"timestamp":"2026-08-21T10:00:00.000Z"} +{"doc_count":2969,"split_key":209630,"timestamp":"2026-08-21T10:00:00.000Z"} +{"doc_count":815,"split_key":208137,"timestamp":"2026-08-21T10:00:00.000Z"} +{"doc_count":616,"split_key":396982,"timestamp":"2026-08-21T10:00:00.000Z"} +{"doc_count":10698,"split_key":209334,"timestamp":"2026-08-21T11:00:00.000Z"} +{"doc_count":2356,"split_key":274069,"timestamp":"2026-08-21T11:00:00.000Z"} +{"doc_count":1918,"split_key":209630,"timestamp":"2026-08-21T11:00:00.000Z"} +{"doc_count":681,"split_key":208137,"timestamp":"2026-08-21T11:00:00.000Z"} +{"doc_count":481,"split_key":16509,"timestamp":"2026-08-21T11:00:00.000Z"} +{"doc_count":64220,"split_key":23470,"timestamp":"2026-08-21T12:00:00.000Z"} +{"doc_count":6210,"split_key":209334,"timestamp":"2026-08-21T12:00:00.000Z"} +{"doc_count":5894,"split_key":274069,"timestamp":"2026-08-21T12:00:00.000Z"} +{"doc_count":5074,"split_key":209630,"timestamp":"2026-08-21T12:00:00.000Z"} +{"doc_count":996,"split_key":16509,"timestamp":"2026-08-21T12:00:00.000Z"} +{"doc_count":10925,"split_key":209334,"timestamp":"2026-08-21T13:00:00.000Z"} +{"doc_count":3723,"split_key":274069,"timestamp":"2026-08-21T13:00:00.000Z"} +{"doc_count":3259,"split_key":209630,"timestamp":"2026-08-21T13:00:00.000Z"} +{"doc_count":2338,"split_key":202281,"timestamp":"2026-08-21T13:00:00.000Z"} +{"doc_count":783,"split_key":208137,"timestamp":"2026-08-21T13:00:00.000Z"} +{"doc_count":14939,"split_key":209334,"timestamp":"2026-08-21T14:00:00.000Z"} +{"doc_count":6152,"split_key":41931,"timestamp":"2026-08-21T14:00:00.000Z"} +{"doc_count":2420,"split_key":274069,"timestamp":"2026-08-21T14:00:00.000Z"} +{"doc_count":2156,"split_key":209630,"timestamp":"2026-08-21T14:00:00.000Z"} +{"doc_count":1238,"split_key":56153,"timestamp":"2026-08-21T14:00:00.000Z"} +{"doc_count":16181,"split_key":209334,"timestamp":"2026-08-21T15:00:00.000Z"} +{"doc_count":7572,"split_key":41931,"timestamp":"2026-08-21T15:00:00.000Z"} +{"doc_count":7422,"split_key":56153,"timestamp":"2026-08-21T15:00:00.000Z"} +{"doc_count":5701,"split_key":274069,"timestamp":"2026-08-21T15:00:00.000Z"} +{"doc_count":5380,"split_key":209630,"timestamp":"2026-08-21T15:00:00.000Z"} +{"doc_count":14311,"split_key":209334,"timestamp":"2026-08-21T16:00:00.000Z"} +{"doc_count":7150,"split_key":41931,"timestamp":"2026-08-21T16:00:00.000Z"} +{"doc_count":3609,"split_key":274069,"timestamp":"2026-08-21T16:00:00.000Z"} +{"doc_count":2871,"split_key":209630,"timestamp":"2026-08-21T16:00:00.000Z"} +{"doc_count":928,"split_key":16509,"timestamp":"2026-08-21T16:00:00.000Z"} +{"doc_count":22277,"split_key":209334,"timestamp":"2026-08-21T17:00:00.000Z"} +{"doc_count":11985,"split_key":14061,"timestamp":"2026-08-21T17:00:00.000Z"} +{"doc_count":8564,"split_key":41931,"timestamp":"2026-08-21T17:00:00.000Z"} +{"doc_count":4596,"split_key":51852,"timestamp":"2026-08-21T17:00:00.000Z"} +{"doc_count":2676,"split_key":274069,"timestamp":"2026-08-21T17:00:00.000Z"} +{"doc_count":15971,"split_key":209334,"timestamp":"2026-08-21T18:00:00.000Z"} +{"doc_count":10402,"split_key":14061,"timestamp":"2026-08-21T18:00:00.000Z"} +{"doc_count":4265,"split_key":274069,"timestamp":"2026-08-21T18:00:00.000Z"} +{"doc_count":2164,"split_key":13649,"timestamp":"2026-08-21T18:00:00.000Z"} +{"doc_count":761,"split_key":51396,"timestamp":"2026-08-21T18:00:00.000Z"} +{"doc_count":18502,"split_key":209334,"timestamp":"2026-08-21T19:00:00.000Z"} +{"doc_count":8732,"split_key":274069,"timestamp":"2026-08-21T19:00:00.000Z"} +{"doc_count":7597,"split_key":64199,"timestamp":"2026-08-21T19:00:00.000Z"} +{"doc_count":823,"split_key":16509,"timestamp":"2026-08-21T19:00:00.000Z"} +{"doc_count":812,"split_key":396982,"timestamp":"2026-08-21T19:00:00.000Z"} +{"doc_count":5044,"split_key":274069,"timestamp":"2026-08-21T20:00:00.000Z"} +{"doc_count":4736,"split_key":64199,"timestamp":"2026-08-21T20:00:00.000Z"} +{"doc_count":3522,"split_key":209334,"timestamp":"2026-08-21T20:00:00.000Z"} +{"doc_count":644,"split_key":14618,"timestamp":"2026-08-21T20:00:00.000Z"} +{"doc_count":507,"split_key":396982,"timestamp":"2026-08-21T20:00:00.000Z"} +{"doc_count":3405,"split_key":274069,"timestamp":"2026-08-21T21:00:00.000Z"} +{"doc_count":854,"split_key":209334,"timestamp":"2026-08-21T21:00:00.000Z"} +{"doc_count":720,"split_key":37963,"timestamp":"2026-08-21T21:00:00.000Z"} +{"doc_count":627,"split_key":16509,"timestamp":"2026-08-21T21:00:00.000Z"} +{"doc_count":551,"split_key":396982,"timestamp":"2026-08-21T21:00:00.000Z"} +{"doc_count":3549,"split_key":274069,"timestamp":"2026-08-21T22:00:00.000Z"} +{"doc_count":690,"split_key":51396,"timestamp":"2026-08-21T22:00:00.000Z"} +{"doc_count":623,"split_key":16509,"timestamp":"2026-08-21T22:00:00.000Z"} +{"doc_count":468,"split_key":396982,"timestamp":"2026-08-21T22:00:00.000Z"} +{"doc_count":418,"split_key":208137,"timestamp":"2026-08-21T22:00:00.000Z"} +{"doc_count":3321,"split_key":274069,"timestamp":"2026-08-21T23:00:00.000Z"} +{"doc_count":1614,"split_key":64199,"timestamp":"2026-08-21T23:00:00.000Z"} +{"doc_count":866,"split_key":396982,"timestamp":"2026-08-21T23:00:00.000Z"} +{"doc_count":540,"split_key":16509,"timestamp":"2026-08-21T23:00:00.000Z"} +{"doc_count":487,"split_key":25369,"timestamp":"2026-08-21T23:00:00.000Z"} +{"doc_count":10024,"split_key":14987,"timestamp":"2026-08-22T00:00:00.000Z"} +{"doc_count":3735,"split_key":274069,"timestamp":"2026-08-22T00:00:00.000Z"} +{"doc_count":1109,"split_key":64199,"timestamp":"2026-08-22T00:00:00.000Z"} +{"doc_count":831,"split_key":37963,"timestamp":"2026-08-22T00:00:00.000Z"} +{"doc_count":650,"split_key":16509,"timestamp":"2026-08-22T00:00:00.000Z"} +{"doc_count":9193,"split_key":274069,"timestamp":"2026-08-22T01:00:00.000Z"} +{"doc_count":1402,"split_key":37963,"timestamp":"2026-08-22T01:00:00.000Z"} +{"doc_count":915,"split_key":14987,"timestamp":"2026-08-22T01:00:00.000Z"} +{"doc_count":789,"split_key":396982,"timestamp":"2026-08-22T01:00:00.000Z"} +{"doc_count":619,"split_key":209334,"timestamp":"2026-08-22T01:00:00.000Z"} +{"doc_count":4231,"split_key":274069,"timestamp":"2026-08-22T02:00:00.000Z"} +{"doc_count":1581,"split_key":37963,"timestamp":"2026-08-22T02:00:00.000Z"} +{"doc_count":1499,"split_key":271177,"timestamp":"2026-08-22T02:00:00.000Z"} +{"doc_count":760,"split_key":209334,"timestamp":"2026-08-22T02:00:00.000Z"} +{"doc_count":750,"split_key":265919,"timestamp":"2026-08-22T02:00:00.000Z"} +{"doc_count":79320,"split_key":39891,"timestamp":"2026-08-22T03:00:00.000Z"} +{"doc_count":20215,"split_key":5384,"timestamp":"2026-08-22T03:00:00.000Z"} +{"doc_count":15932,"split_key":1221,"timestamp":"2026-08-22T03:00:00.000Z"} +{"doc_count":10746,"split_key":42961,"timestamp":"2026-08-22T03:00:00.000Z"} +{"doc_count":9981,"split_key":28885,"timestamp":"2026-08-22T03:00:00.000Z"} +{"doc_count":2901,"split_key":274069,"timestamp":"2026-08-22T04:00:00.000Z"} +{"doc_count":2296,"split_key":209334,"timestamp":"2026-08-22T04:00:00.000Z"} +{"doc_count":806,"split_key":16509,"timestamp":"2026-08-22T04:00:00.000Z"} +{"doc_count":636,"split_key":51396,"timestamp":"2026-08-22T04:00:00.000Z"} +{"doc_count":625,"split_key":25369,"timestamp":"2026-08-22T04:00:00.000Z"} +{"doc_count":6677,"split_key":209334,"timestamp":"2026-08-22T05:00:00.000Z"} +{"doc_count":3048,"split_key":274069,"timestamp":"2026-08-22T05:00:00.000Z"} +{"doc_count":894,"split_key":396982,"timestamp":"2026-08-22T05:00:00.000Z"} +{"doc_count":731,"split_key":16509,"timestamp":"2026-08-22T05:00:00.000Z"} +{"doc_count":627,"split_key":25369,"timestamp":"2026-08-22T05:00:00.000Z"} +{"doc_count":6689,"split_key":274069,"timestamp":"2026-08-22T06:00:00.000Z"} +{"doc_count":5164,"split_key":209334,"timestamp":"2026-08-22T06:00:00.000Z"} +{"doc_count":813,"split_key":16509,"timestamp":"2026-08-22T06:00:00.000Z"} +{"doc_count":800,"split_key":396982,"timestamp":"2026-08-22T06:00:00.000Z"} +{"doc_count":509,"split_key":51396,"timestamp":"2026-08-22T06:00:00.000Z"} +{"doc_count":10176,"split_key":209334,"timestamp":"2026-08-22T07:00:00.000Z"} +{"doc_count":7552,"split_key":274069,"timestamp":"2026-08-22T07:00:00.000Z"} +{"doc_count":650,"split_key":396982,"timestamp":"2026-08-22T07:00:00.000Z"} +{"doc_count":596,"split_key":16509,"timestamp":"2026-08-22T07:00:00.000Z"} +{"doc_count":520,"split_key":25369,"timestamp":"2026-08-22T07:00:00.000Z"} +{"doc_count":7305,"split_key":209334,"timestamp":"2026-08-22T08:00:00.000Z"} +{"doc_count":4020,"split_key":274069,"timestamp":"2026-08-22T08:00:00.000Z"} +{"doc_count":889,"split_key":14618,"timestamp":"2026-08-22T08:00:00.000Z"} +{"doc_count":706,"split_key":37963,"timestamp":"2026-08-22T08:00:00.000Z"} +{"doc_count":474,"split_key":53667,"timestamp":"2026-08-22T08:00:00.000Z"} +{"doc_count":10831,"split_key":209334,"timestamp":"2026-08-22T09:00:00.000Z"} +{"doc_count":4647,"split_key":834,"timestamp":"2026-08-22T09:00:00.000Z"} +{"doc_count":3353,"split_key":274069,"timestamp":"2026-08-22T09:00:00.000Z"} +{"doc_count":1503,"split_key":37963,"timestamp":"2026-08-22T09:00:00.000Z"} +{"doc_count":1195,"split_key":58791,"timestamp":"2026-08-22T09:00:00.000Z"} +{"doc_count":7654,"split_key":209334,"timestamp":"2026-08-22T10:00:00.000Z"} +{"doc_count":3943,"split_key":274069,"timestamp":"2026-08-22T10:00:00.000Z"} +{"doc_count":1554,"split_key":834,"timestamp":"2026-08-22T10:00:00.000Z"} +{"doc_count":1349,"split_key":37963,"timestamp":"2026-08-22T10:00:00.000Z"} +{"doc_count":892,"split_key":396982,"timestamp":"2026-08-22T10:00:00.000Z"} +{"doc_count":5084,"split_key":209334,"timestamp":"2026-08-22T11:00:00.000Z"} +{"doc_count":3642,"split_key":834,"timestamp":"2026-08-22T11:00:00.000Z"} +{"doc_count":2786,"split_key":8075,"timestamp":"2026-08-22T11:00:00.000Z"} +{"doc_count":2282,"split_key":274069,"timestamp":"2026-08-22T11:00:00.000Z"} +{"doc_count":1021,"split_key":37963,"timestamp":"2026-08-22T11:00:00.000Z"} +{"doc_count":10966,"split_key":209334,"timestamp":"2026-08-22T12:00:00.000Z"} +{"doc_count":9387,"split_key":274069,"timestamp":"2026-08-22T12:00:00.000Z"} +{"doc_count":1894,"split_key":834,"timestamp":"2026-08-22T12:00:00.000Z"} +{"doc_count":1261,"split_key":37963,"timestamp":"2026-08-22T12:00:00.000Z"} +{"doc_count":754,"split_key":135905,"timestamp":"2026-08-22T12:00:00.000Z"} +{"doc_count":12302,"split_key":209334,"timestamp":"2026-08-22T13:00:00.000Z"} +{"doc_count":5313,"split_key":274069,"timestamp":"2026-08-22T13:00:00.000Z"} +{"doc_count":884,"split_key":16509,"timestamp":"2026-08-22T13:00:00.000Z"} +{"doc_count":792,"split_key":202425,"timestamp":"2026-08-22T13:00:00.000Z"} +{"doc_count":784,"split_key":135905,"timestamp":"2026-08-22T13:00:00.000Z"} +{"doc_count":27046,"split_key":3188,"timestamp":"2026-08-22T14:00:00.000Z"} +{"doc_count":13539,"split_key":209334,"timestamp":"2026-08-22T14:00:00.000Z"} +{"doc_count":3232,"split_key":274069,"timestamp":"2026-08-22T14:00:00.000Z"} +{"doc_count":1262,"split_key":135905,"timestamp":"2026-08-22T14:00:00.000Z"} +{"doc_count":835,"split_key":24323,"timestamp":"2026-08-22T14:00:00.000Z"} +{"doc_count":11920,"split_key":209334,"timestamp":"2026-08-22T15:00:00.000Z"} +{"doc_count":7104,"split_key":53667,"timestamp":"2026-08-22T15:00:00.000Z"} +{"doc_count":4158,"split_key":274069,"timestamp":"2026-08-22T15:00:00.000Z"} +{"doc_count":1341,"split_key":24323,"timestamp":"2026-08-22T15:00:00.000Z"} +{"doc_count":1288,"split_key":135905,"timestamp":"2026-08-22T15:00:00.000Z"} +{"doc_count":17486,"split_key":209334,"timestamp":"2026-08-22T16:00:00.000Z"} +{"doc_count":8072,"split_key":53667,"timestamp":"2026-08-22T16:00:00.000Z"} +{"doc_count":2820,"split_key":274069,"timestamp":"2026-08-22T16:00:00.000Z"} +{"doc_count":1686,"split_key":207567,"timestamp":"2026-08-22T16:00:00.000Z"} +{"doc_count":1346,"split_key":64199,"timestamp":"2026-08-22T16:00:00.000Z"} +{"doc_count":11384,"split_key":271177,"timestamp":"2026-08-22T17:00:00.000Z"} +{"doc_count":7814,"split_key":53667,"timestamp":"2026-08-22T17:00:00.000Z"} +{"doc_count":7569,"split_key":209334,"timestamp":"2026-08-22T17:00:00.000Z"} +{"doc_count":3162,"split_key":274069,"timestamp":"2026-08-22T17:00:00.000Z"} +{"doc_count":1712,"split_key":207567,"timestamp":"2026-08-22T17:00:00.000Z"} +{"doc_count":29376,"split_key":209334,"timestamp":"2026-08-22T18:00:00.000Z"} +{"doc_count":9892,"split_key":274069,"timestamp":"2026-08-22T18:00:00.000Z"} +{"doc_count":8282,"split_key":53667,"timestamp":"2026-08-22T18:00:00.000Z"} +{"doc_count":2529,"split_key":207567,"timestamp":"2026-08-22T18:00:00.000Z"} +{"doc_count":1229,"split_key":210538,"timestamp":"2026-08-22T18:00:00.000Z"} +{"doc_count":14246,"split_key":209334,"timestamp":"2026-08-22T19:00:00.000Z"} +{"doc_count":8662,"split_key":53667,"timestamp":"2026-08-22T19:00:00.000Z"} +{"doc_count":4285,"split_key":274069,"timestamp":"2026-08-22T19:00:00.000Z"} +{"doc_count":2415,"split_key":207567,"timestamp":"2026-08-22T19:00:00.000Z"} +{"doc_count":1245,"split_key":210538,"timestamp":"2026-08-22T19:00:00.000Z"} +{"doc_count":8251,"split_key":209334,"timestamp":"2026-08-22T20:00:00.000Z"} +{"doc_count":8100,"split_key":53667,"timestamp":"2026-08-22T20:00:00.000Z"} +{"doc_count":4288,"split_key":274069,"timestamp":"2026-08-22T20:00:00.000Z"} +{"doc_count":2145,"split_key":207567,"timestamp":"2026-08-22T20:00:00.000Z"} +{"doc_count":2129,"split_key":57724,"timestamp":"2026-08-22T20:00:00.000Z"} +{"doc_count":8323,"split_key":53667,"timestamp":"2026-08-22T21:00:00.000Z"} +{"doc_count":3134,"split_key":274069,"timestamp":"2026-08-22T21:00:00.000Z"} +{"doc_count":1683,"split_key":207567,"timestamp":"2026-08-22T21:00:00.000Z"} +{"doc_count":1469,"split_key":24323,"timestamp":"2026-08-22T21:00:00.000Z"} +{"doc_count":1230,"split_key":210538,"timestamp":"2026-08-22T21:00:00.000Z"} +{"doc_count":8446,"split_key":53667,"timestamp":"2026-08-22T22:00:00.000Z"} +{"doc_count":3035,"split_key":274069,"timestamp":"2026-08-22T22:00:00.000Z"} +{"doc_count":1653,"split_key":24323,"timestamp":"2026-08-22T22:00:00.000Z"} +{"doc_count":1232,"split_key":210538,"timestamp":"2026-08-22T22:00:00.000Z"} +{"doc_count":1028,"split_key":16509,"timestamp":"2026-08-22T22:00:00.000Z"} +{"doc_count":8487,"split_key":53667,"timestamp":"2026-08-22T23:00:00.000Z"} +{"doc_count":4792,"split_key":274069,"timestamp":"2026-08-22T23:00:00.000Z"} +{"doc_count":1607,"split_key":24323,"timestamp":"2026-08-22T23:00:00.000Z"} +{"doc_count":1252,"split_key":210538,"timestamp":"2026-08-22T23:00:00.000Z"} +{"doc_count":866,"split_key":14061,"timestamp":"2026-08-22T23:00:00.000Z"} +{"doc_count":10028,"split_key":14987,"timestamp":"2026-08-23T00:00:00.000Z"} +{"doc_count":8300,"split_key":53667,"timestamp":"2026-08-23T00:00:00.000Z"} +{"doc_count":7976,"split_key":274069,"timestamp":"2026-08-23T00:00:00.000Z"} +{"doc_count":1232,"split_key":210538,"timestamp":"2026-08-23T00:00:00.000Z"} +{"doc_count":1136,"split_key":14061,"timestamp":"2026-08-23T00:00:00.000Z"} +{"doc_count":5636,"split_key":274069,"timestamp":"2026-08-23T01:00:00.000Z"} +{"doc_count":4944,"split_key":53667,"timestamp":"2026-08-23T01:00:00.000Z"} +{"doc_count":1229,"split_key":210538,"timestamp":"2026-08-23T01:00:00.000Z"} +{"doc_count":1172,"split_key":396982,"timestamp":"2026-08-23T01:00:00.000Z"} +{"doc_count":703,"split_key":24560,"timestamp":"2026-08-23T01:00:00.000Z"} +{"doc_count":8048,"split_key":53667,"timestamp":"2026-08-23T02:00:00.000Z"} +{"doc_count":3010,"split_key":274069,"timestamp":"2026-08-23T02:00:00.000Z"} +{"doc_count":1234,"split_key":210538,"timestamp":"2026-08-23T02:00:00.000Z"} +{"doc_count":1043,"split_key":396982,"timestamp":"2026-08-23T02:00:00.000Z"} +{"doc_count":698,"split_key":209334,"timestamp":"2026-08-23T02:00:00.000Z"} +{"doc_count":7787,"split_key":53667,"timestamp":"2026-08-23T03:00:00.000Z"} +{"doc_count":3530,"split_key":274069,"timestamp":"2026-08-23T03:00:00.000Z"} +{"doc_count":1277,"split_key":209334,"timestamp":"2026-08-23T03:00:00.000Z"} +{"doc_count":1045,"split_key":396982,"timestamp":"2026-08-23T03:00:00.000Z"} +{"doc_count":838,"split_key":210538,"timestamp":"2026-08-23T03:00:00.000Z"} +{"doc_count":7480,"split_key":53667,"timestamp":"2026-08-23T04:00:00.000Z"} +{"doc_count":2732,"split_key":274069,"timestamp":"2026-08-23T04:00:00.000Z"} +{"doc_count":2466,"split_key":209334,"timestamp":"2026-08-23T04:00:00.000Z"} +{"doc_count":916,"split_key":396982,"timestamp":"2026-08-23T04:00:00.000Z"} +{"doc_count":820,"split_key":45102,"timestamp":"2026-08-23T04:00:00.000Z"} +{"doc_count":8335,"split_key":274069,"timestamp":"2026-08-23T05:00:00.000Z"} +{"doc_count":7722,"split_key":53667,"timestamp":"2026-08-23T05:00:00.000Z"} +{"doc_count":6900,"split_key":209334,"timestamp":"2026-08-23T05:00:00.000Z"} +{"doc_count":745,"split_key":45102,"timestamp":"2026-08-23T05:00:00.000Z"} +{"doc_count":693,"split_key":25369,"timestamp":"2026-08-23T05:00:00.000Z"} +{"doc_count":7204,"split_key":53667,"timestamp":"2026-08-23T06:00:00.000Z"} +{"doc_count":6534,"split_key":274069,"timestamp":"2026-08-23T06:00:00.000Z"} +{"doc_count":4874,"split_key":209334,"timestamp":"2026-08-23T06:00:00.000Z"} +{"doc_count":653,"split_key":51396,"timestamp":"2026-08-23T06:00:00.000Z"} +{"doc_count":613,"split_key":396982,"timestamp":"2026-08-23T06:00:00.000Z"} +{"doc_count":10948,"split_key":209334,"timestamp":"2026-08-23T07:00:00.000Z"} +{"doc_count":7148,"split_key":53667,"timestamp":"2026-08-23T07:00:00.000Z"} +{"doc_count":3514,"split_key":151858,"timestamp":"2026-08-23T07:00:00.000Z"} +{"doc_count":3178,"split_key":274069,"timestamp":"2026-08-23T07:00:00.000Z"} +{"doc_count":751,"split_key":51396,"timestamp":"2026-08-23T07:00:00.000Z"} +{"doc_count":7744,"split_key":209334,"timestamp":"2026-08-23T08:00:00.000Z"} +{"doc_count":7457,"split_key":53667,"timestamp":"2026-08-23T08:00:00.000Z"} +{"doc_count":4085,"split_key":274069,"timestamp":"2026-08-23T08:00:00.000Z"} +{"doc_count":1323,"split_key":151858,"timestamp":"2026-08-23T08:00:00.000Z"} +{"doc_count":1193,"split_key":16509,"timestamp":"2026-08-23T08:00:00.000Z"} +{"doc_count":11364,"split_key":209334,"timestamp":"2026-08-23T09:00:00.000Z"} +{"doc_count":7226,"split_key":53667,"timestamp":"2026-08-23T09:00:00.000Z"} +{"doc_count":3335,"split_key":154247,"timestamp":"2026-08-23T09:00:00.000Z"} +{"doc_count":3185,"split_key":274069,"timestamp":"2026-08-23T09:00:00.000Z"} +{"doc_count":654,"split_key":396982,"timestamp":"2026-08-23T09:00:00.000Z"} +{"doc_count":7813,"split_key":209334,"timestamp":"2026-08-23T10:00:00.000Z"} +{"doc_count":7288,"split_key":53667,"timestamp":"2026-08-23T10:00:00.000Z"} +{"doc_count":3069,"split_key":274069,"timestamp":"2026-08-23T10:00:00.000Z"} +{"doc_count":2346,"split_key":154247,"timestamp":"2026-08-23T10:00:00.000Z"} +{"doc_count":1572,"split_key":135905,"timestamp":"2026-08-23T10:00:00.000Z"} +{"doc_count":10002,"split_key":274069,"timestamp":"2026-08-23T11:00:00.000Z"} +{"doc_count":7247,"split_key":53667,"timestamp":"2026-08-23T11:00:00.000Z"} +{"doc_count":5475,"split_key":209334,"timestamp":"2026-08-23T11:00:00.000Z"} +{"doc_count":2405,"split_key":396982,"timestamp":"2026-08-23T11:00:00.000Z"} +{"doc_count":685,"split_key":210538,"timestamp":"2026-08-23T11:00:00.000Z"} +{"doc_count":10768,"split_key":209334,"timestamp":"2026-08-23T12:00:00.000Z"} +{"doc_count":7363,"split_key":53667,"timestamp":"2026-08-23T12:00:00.000Z"} +{"doc_count":4070,"split_key":274069,"timestamp":"2026-08-23T12:00:00.000Z"} +{"doc_count":670,"split_key":16509,"timestamp":"2026-08-23T12:00:00.000Z"} +{"doc_count":666,"split_key":14061,"timestamp":"2026-08-23T12:00:00.000Z"} +{"doc_count":12112,"split_key":209334,"timestamp":"2026-08-23T13:00:00.000Z"} +{"doc_count":7620,"split_key":53667,"timestamp":"2026-08-23T13:00:00.000Z"} +{"doc_count":4063,"split_key":274069,"timestamp":"2026-08-23T13:00:00.000Z"} +{"doc_count":1718,"split_key":56153,"timestamp":"2026-08-23T13:00:00.000Z"} +{"doc_count":667,"split_key":16509,"timestamp":"2026-08-23T13:00:00.000Z"} +{"doc_count":13971,"split_key":56153,"timestamp":"2026-08-23T14:00:00.000Z"} +{"doc_count":12391,"split_key":209334,"timestamp":"2026-08-23T14:00:00.000Z"} +{"doc_count":8798,"split_key":41931,"timestamp":"2026-08-23T14:00:00.000Z"} +{"doc_count":7151,"split_key":53667,"timestamp":"2026-08-23T14:00:00.000Z"} +{"doc_count":3347,"split_key":274069,"timestamp":"2026-08-23T14:00:00.000Z"} +{"doc_count":12344,"split_key":209334,"timestamp":"2026-08-23T15:00:00.000Z"} +{"doc_count":8799,"split_key":41931,"timestamp":"2026-08-23T15:00:00.000Z"} +{"doc_count":7829,"split_key":53667,"timestamp":"2026-08-23T15:00:00.000Z"} +{"doc_count":4041,"split_key":274069,"timestamp":"2026-08-23T15:00:00.000Z"} +{"doc_count":634,"split_key":45102,"timestamp":"2026-08-23T15:00:00.000Z"} +{"doc_count":17383,"split_key":209334,"timestamp":"2026-08-23T16:00:00.000Z"} +{"doc_count":8856,"split_key":41931,"timestamp":"2026-08-23T16:00:00.000Z"} +{"doc_count":7280,"split_key":53667,"timestamp":"2026-08-23T16:00:00.000Z"} +{"doc_count":3956,"split_key":274069,"timestamp":"2026-08-23T16:00:00.000Z"} +{"doc_count":936,"split_key":16509,"timestamp":"2026-08-23T16:00:00.000Z"} +{"doc_count":10534,"split_key":149089,"timestamp":"2026-08-23T17:00:00.000Z"} +{"doc_count":9112,"split_key":274069,"timestamp":"2026-08-23T17:00:00.000Z"} +{"doc_count":8731,"split_key":41931,"timestamp":"2026-08-23T17:00:00.000Z"} +{"doc_count":7730,"split_key":53667,"timestamp":"2026-08-23T17:00:00.000Z"} +{"doc_count":7678,"split_key":209334,"timestamp":"2026-08-23T17:00:00.000Z"} +{"doc_count":28331,"split_key":209334,"timestamp":"2026-08-23T18:00:00.000Z"} +{"doc_count":8550,"split_key":149089,"timestamp":"2026-08-23T18:00:00.000Z"} +{"doc_count":8087,"split_key":14061,"timestamp":"2026-08-23T18:00:00.000Z"} +{"doc_count":8038,"split_key":41931,"timestamp":"2026-08-23T18:00:00.000Z"} +{"doc_count":7030,"split_key":53667,"timestamp":"2026-08-23T18:00:00.000Z"} +{"doc_count":13799,"split_key":209334,"timestamp":"2026-08-23T19:00:00.000Z"} +{"doc_count":12156,"split_key":14061,"timestamp":"2026-08-23T19:00:00.000Z"} +{"doc_count":8909,"split_key":41931,"timestamp":"2026-08-23T19:00:00.000Z"} +{"doc_count":6494,"split_key":53667,"timestamp":"2026-08-23T19:00:00.000Z"} +{"doc_count":3739,"split_key":274069,"timestamp":"2026-08-23T19:00:00.000Z"} +{"doc_count":13437,"split_key":271177,"timestamp":"2026-08-23T20:00:00.000Z"} +{"doc_count":9863,"split_key":209334,"timestamp":"2026-08-23T20:00:00.000Z"} +{"doc_count":8907,"split_key":41931,"timestamp":"2026-08-23T20:00:00.000Z"} +{"doc_count":7868,"split_key":34984,"timestamp":"2026-08-23T20:00:00.000Z"} +{"doc_count":7143,"split_key":53667,"timestamp":"2026-08-23T20:00:00.000Z"} +{"doc_count":42242,"split_key":271177,"timestamp":"2026-08-23T21:00:00.000Z"} +{"doc_count":8421,"split_key":41931,"timestamp":"2026-08-23T21:00:00.000Z"} +{"doc_count":8334,"split_key":34984,"timestamp":"2026-08-23T21:00:00.000Z"} +{"doc_count":7114,"split_key":53667,"timestamp":"2026-08-23T21:00:00.000Z"} +{"doc_count":2403,"split_key":274069,"timestamp":"2026-08-23T21:00:00.000Z"} +{"doc_count":42489,"split_key":271177,"timestamp":"2026-08-23T22:00:00.000Z"} +{"doc_count":10693,"split_key":274069,"timestamp":"2026-08-23T22:00:00.000Z"} +{"doc_count":8756,"split_key":16509,"timestamp":"2026-08-23T22:00:00.000Z"} +{"doc_count":7129,"split_key":53667,"timestamp":"2026-08-23T22:00:00.000Z"} +{"doc_count":1041,"split_key":34984,"timestamp":"2026-08-23T22:00:00.000Z"} +{"doc_count":42275,"split_key":271177,"timestamp":"2026-08-23T23:00:00.000Z"} +{"doc_count":7047,"split_key":53667,"timestamp":"2026-08-23T23:00:00.000Z"} +{"doc_count":4770,"split_key":16509,"timestamp":"2026-08-23T23:00:00.000Z"} +{"doc_count":4205,"split_key":274069,"timestamp":"2026-08-23T23:00:00.000Z"} +{"doc_count":929,"split_key":37963,"timestamp":"2026-08-23T23:00:00.000Z"} +{"doc_count":42197,"split_key":271177,"timestamp":"2026-08-24T00:00:00.000Z"} +{"doc_count":8270,"split_key":53667,"timestamp":"2026-08-24T00:00:00.000Z"} +{"doc_count":4484,"split_key":274069,"timestamp":"2026-08-24T00:00:00.000Z"} +{"doc_count":902,"split_key":37963,"timestamp":"2026-08-24T00:00:00.000Z"} +{"doc_count":808,"split_key":8075,"timestamp":"2026-08-24T00:00:00.000Z"} +{"doc_count":41140,"split_key":271177,"timestamp":"2026-08-24T01:00:00.000Z"} +{"doc_count":8302,"split_key":53667,"timestamp":"2026-08-24T01:00:00.000Z"} +{"doc_count":3031,"split_key":274069,"timestamp":"2026-08-24T01:00:00.000Z"} +{"doc_count":884,"split_key":37963,"timestamp":"2026-08-24T01:00:00.000Z"} +{"doc_count":671,"split_key":45102,"timestamp":"2026-08-24T01:00:00.000Z"} +{"doc_count":17545,"split_key":271177,"timestamp":"2026-08-24T02:00:00.000Z"} +{"doc_count":5829,"split_key":149089,"timestamp":"2026-08-24T02:00:00.000Z"} +{"doc_count":4258,"split_key":274069,"timestamp":"2026-08-24T02:00:00.000Z"} +{"doc_count":3452,"split_key":53667,"timestamp":"2026-08-24T02:00:00.000Z"} +{"doc_count":880,"split_key":37963,"timestamp":"2026-08-24T02:00:00.000Z"} +{"doc_count":16053,"split_key":149089,"timestamp":"2026-08-24T03:00:00.000Z"} +{"doc_count":3291,"split_key":274069,"timestamp":"2026-08-24T03:00:00.000Z"} +{"doc_count":2326,"split_key":45102,"timestamp":"2026-08-24T03:00:00.000Z"} +{"doc_count":1237,"split_key":209334,"timestamp":"2026-08-24T03:00:00.000Z"} +{"doc_count":792,"split_key":37963,"timestamp":"2026-08-24T03:00:00.000Z"} +{"doc_count":16270,"split_key":135915,"timestamp":"2026-08-24T04:00:00.000Z"} +{"doc_count":9908,"split_key":274069,"timestamp":"2026-08-24T04:00:00.000Z"} +{"doc_count":2585,"split_key":209334,"timestamp":"2026-08-24T04:00:00.000Z"} +{"doc_count":2506,"split_key":45102,"timestamp":"2026-08-24T04:00:00.000Z"} +{"doc_count":814,"split_key":37963,"timestamp":"2026-08-24T04:00:00.000Z"} +{"doc_count":6739,"split_key":209334,"timestamp":"2026-08-24T05:00:00.000Z"} +{"doc_count":4701,"split_key":274069,"timestamp":"2026-08-24T05:00:00.000Z"} +{"doc_count":3549,"split_key":135915,"timestamp":"2026-08-24T05:00:00.000Z"} +{"doc_count":2774,"split_key":45102,"timestamp":"2026-08-24T05:00:00.000Z"} +{"doc_count":2657,"split_key":56153,"timestamp":"2026-08-24T05:00:00.000Z"} +{"doc_count":16163,"split_key":56153,"timestamp":"2026-08-24T06:00:00.000Z"} +{"doc_count":10061,"split_key":14061,"timestamp":"2026-08-24T06:00:00.000Z"} +{"doc_count":4932,"split_key":209334,"timestamp":"2026-08-24T06:00:00.000Z"} +{"doc_count":3875,"split_key":274069,"timestamp":"2026-08-24T06:00:00.000Z"} +{"doc_count":2544,"split_key":45102,"timestamp":"2026-08-24T06:00:00.000Z"} +{"doc_count":22834,"split_key":14061,"timestamp":"2026-08-24T07:00:00.000Z"} +{"doc_count":12999,"split_key":56153,"timestamp":"2026-08-24T07:00:00.000Z"} +{"doc_count":10902,"split_key":209334,"timestamp":"2026-08-24T07:00:00.000Z"} +{"doc_count":3692,"split_key":274069,"timestamp":"2026-08-24T07:00:00.000Z"} +{"doc_count":3651,"split_key":396982,"timestamp":"2026-08-24T07:00:00.000Z"} +{"doc_count":35222,"split_key":14061,"timestamp":"2026-08-24T08:00:00.000Z"} +{"doc_count":7851,"split_key":209334,"timestamp":"2026-08-24T08:00:00.000Z"} +{"doc_count":4074,"split_key":135004,"timestamp":"2026-08-24T08:00:00.000Z"} +{"doc_count":2773,"split_key":274069,"timestamp":"2026-08-24T08:00:00.000Z"} +{"doc_count":1321,"split_key":45102,"timestamp":"2026-08-24T08:00:00.000Z"} +{"doc_count":28994,"split_key":14061,"timestamp":"2026-08-24T09:00:00.000Z"} +{"doc_count":11059,"split_key":209334,"timestamp":"2026-08-24T09:00:00.000Z"} +{"doc_count":10107,"split_key":274069,"timestamp":"2026-08-24T09:00:00.000Z"} +{"doc_count":2405,"split_key":41931,"timestamp":"2026-08-24T09:00:00.000Z"} +{"doc_count":1746,"split_key":45102,"timestamp":"2026-08-24T09:00:00.000Z"} +{"doc_count":8164,"split_key":209334,"timestamp":"2026-08-24T10:00:00.000Z"} +{"doc_count":4761,"split_key":274069,"timestamp":"2026-08-24T10:00:00.000Z"} +{"doc_count":4600,"split_key":14061,"timestamp":"2026-08-24T10:00:00.000Z"} +{"doc_count":1170,"split_key":45102,"timestamp":"2026-08-24T10:00:00.000Z"} +{"doc_count":1067,"split_key":37963,"timestamp":"2026-08-24T10:00:00.000Z"} +{"doc_count":7322,"split_key":5619,"timestamp":"2026-08-24T11:00:00.000Z"} +{"doc_count":5571,"split_key":209334,"timestamp":"2026-08-24T11:00:00.000Z"} +{"doc_count":4261,"split_key":14061,"timestamp":"2026-08-24T11:00:00.000Z"} +{"doc_count":4126,"split_key":274069,"timestamp":"2026-08-24T11:00:00.000Z"} +{"doc_count":1481,"split_key":13335,"timestamp":"2026-08-24T11:00:00.000Z"} +{"doc_count":12213,"split_key":14061,"timestamp":"2026-08-24T12:00:00.000Z"} +{"doc_count":10875,"split_key":209334,"timestamp":"2026-08-24T12:00:00.000Z"} +{"doc_count":10846,"split_key":5619,"timestamp":"2026-08-24T12:00:00.000Z"} +{"doc_count":3418,"split_key":274069,"timestamp":"2026-08-24T12:00:00.000Z"} +{"doc_count":2397,"split_key":45102,"timestamp":"2026-08-24T12:00:00.000Z"} +{"doc_count":64709,"split_key":23470,"timestamp":"2026-08-24T13:00:00.000Z"} +{"doc_count":12246,"split_key":209334,"timestamp":"2026-08-24T13:00:00.000Z"} +{"doc_count":6546,"split_key":14061,"timestamp":"2026-08-24T13:00:00.000Z"} +{"doc_count":4242,"split_key":274069,"timestamp":"2026-08-24T13:00:00.000Z"} +{"doc_count":2193,"split_key":135004,"timestamp":"2026-08-24T13:00:00.000Z"} +{"doc_count":12631,"split_key":209334,"timestamp":"2026-08-24T14:00:00.000Z"} +{"doc_count":7534,"split_key":30456,"timestamp":"2026-08-24T14:00:00.000Z"} +{"doc_count":6576,"split_key":135004,"timestamp":"2026-08-24T14:00:00.000Z"} +{"doc_count":3367,"split_key":274069,"timestamp":"2026-08-24T14:00:00.000Z"} +{"doc_count":1833,"split_key":45102,"timestamp":"2026-08-24T14:00:00.000Z"} +{"doc_count":12154,"split_key":209334,"timestamp":"2026-08-24T15:00:00.000Z"} +{"doc_count":9686,"split_key":274069,"timestamp":"2026-08-24T15:00:00.000Z"} +{"doc_count":2931,"split_key":139180,"timestamp":"2026-08-24T15:00:00.000Z"} +{"doc_count":2854,"split_key":45102,"timestamp":"2026-08-24T15:00:00.000Z"} +{"doc_count":1562,"split_key":135004,"timestamp":"2026-08-24T15:00:00.000Z"} +{"doc_count":17545,"split_key":209334,"timestamp":"2026-08-24T16:00:00.000Z"} +{"doc_count":7922,"split_key":396982,"timestamp":"2026-08-24T16:00:00.000Z"} +{"doc_count":4641,"split_key":274069,"timestamp":"2026-08-24T16:00:00.000Z"} +{"doc_count":2841,"split_key":45102,"timestamp":"2026-08-24T16:00:00.000Z"} +{"doc_count":2280,"split_key":139180,"timestamp":"2026-08-24T16:00:00.000Z"} +{"doc_count":7500,"split_key":209334,"timestamp":"2026-08-24T17:00:00.000Z"} +{"doc_count":4291,"split_key":274069,"timestamp":"2026-08-24T17:00:00.000Z"} +{"doc_count":3112,"split_key":210644,"timestamp":"2026-08-24T17:00:00.000Z"} +{"doc_count":2146,"split_key":136190,"timestamp":"2026-08-24T17:00:00.000Z"} +{"doc_count":1618,"split_key":45102,"timestamp":"2026-08-24T17:00:00.000Z"} +{"doc_count":25806,"split_key":209334,"timestamp":"2026-08-24T18:00:00.000Z"} +{"doc_count":25710,"split_key":210644,"timestamp":"2026-08-24T18:00:00.000Z"} +{"doc_count":3166,"split_key":274069,"timestamp":"2026-08-24T18:00:00.000Z"} +{"doc_count":1150,"split_key":45102,"timestamp":"2026-08-24T18:00:00.000Z"} +{"doc_count":1070,"split_key":136190,"timestamp":"2026-08-24T18:00:00.000Z"} +{"doc_count":14986,"split_key":209334,"timestamp":"2026-08-24T19:00:00.000Z"} +{"doc_count":5868,"split_key":50467,"timestamp":"2026-08-24T19:00:00.000Z"} +{"doc_count":3426,"split_key":274069,"timestamp":"2026-08-24T19:00:00.000Z"} +{"doc_count":1373,"split_key":45102,"timestamp":"2026-08-24T19:00:00.000Z"} +{"doc_count":1118,"split_key":37963,"timestamp":"2026-08-24T19:00:00.000Z"} +{"doc_count":50921,"split_key":210644,"timestamp":"2026-08-24T20:00:00.000Z"} +{"doc_count":11023,"split_key":209334,"timestamp":"2026-08-24T20:00:00.000Z"} +{"doc_count":10157,"split_key":274069,"timestamp":"2026-08-24T20:00:00.000Z"} +{"doc_count":6566,"split_key":50467,"timestamp":"2026-08-24T20:00:00.000Z"} +{"doc_count":1299,"split_key":45102,"timestamp":"2026-08-24T20:00:00.000Z"} +{"doc_count":7309,"split_key":50467,"timestamp":"2026-08-24T21:00:00.000Z"} +{"doc_count":5091,"split_key":274069,"timestamp":"2026-08-24T21:00:00.000Z"} +{"doc_count":1306,"split_key":45102,"timestamp":"2026-08-24T21:00:00.000Z"} +{"doc_count":1177,"split_key":37963,"timestamp":"2026-08-24T21:00:00.000Z"} +{"doc_count":1079,"split_key":209334,"timestamp":"2026-08-24T21:00:00.000Z"} +{"doc_count":11270,"split_key":50467,"timestamp":"2026-08-24T22:00:00.000Z"} +{"doc_count":4330,"split_key":274069,"timestamp":"2026-08-24T22:00:00.000Z"} +{"doc_count":1281,"split_key":45102,"timestamp":"2026-08-24T22:00:00.000Z"} +{"doc_count":1195,"split_key":37963,"timestamp":"2026-08-24T22:00:00.000Z"} +{"doc_count":899,"split_key":25369,"timestamp":"2026-08-24T22:00:00.000Z"} +{"doc_count":11073,"split_key":50467,"timestamp":"2026-08-24T23:00:00.000Z"} +{"doc_count":3826,"split_key":274069,"timestamp":"2026-08-24T23:00:00.000Z"} +{"doc_count":1277,"split_key":8075,"timestamp":"2026-08-24T23:00:00.000Z"} +{"doc_count":1196,"split_key":45102,"timestamp":"2026-08-24T23:00:00.000Z"} +{"doc_count":1193,"split_key":37963,"timestamp":"2026-08-24T23:00:00.000Z"} +{"doc_count":11122,"split_key":50467,"timestamp":"2026-08-25T00:00:00.000Z"} +{"doc_count":10044,"split_key":14987,"timestamp":"2026-08-25T00:00:00.000Z"} +{"doc_count":8374,"split_key":14061,"timestamp":"2026-08-25T00:00:00.000Z"} +{"doc_count":4092,"split_key":274069,"timestamp":"2026-08-25T00:00:00.000Z"} +{"doc_count":1161,"split_key":45102,"timestamp":"2026-08-25T00:00:00.000Z"} +{"doc_count":10236,"split_key":50467,"timestamp":"2026-08-25T01:00:00.000Z"} +{"doc_count":9869,"split_key":14061,"timestamp":"2026-08-25T01:00:00.000Z"} +{"doc_count":3374,"split_key":274069,"timestamp":"2026-08-25T01:00:00.000Z"} +{"doc_count":1223,"split_key":37963,"timestamp":"2026-08-25T01:00:00.000Z"} +{"doc_count":1166,"split_key":45102,"timestamp":"2026-08-25T01:00:00.000Z"} +{"doc_count":10000,"split_key":274069,"timestamp":"2026-08-25T02:00:00.000Z"} +{"doc_count":8332,"split_key":135905,"timestamp":"2026-08-25T02:00:00.000Z"} +{"doc_count":4453,"split_key":14061,"timestamp":"2026-08-25T02:00:00.000Z"} +{"doc_count":1602,"split_key":37963,"timestamp":"2026-08-25T02:00:00.000Z"} +{"doc_count":1232,"split_key":396982,"timestamp":"2026-08-25T02:00:00.000Z"} +{"doc_count":12049,"split_key":135905,"timestamp":"2026-08-25T03:00:00.000Z"} +{"doc_count":4593,"split_key":274069,"timestamp":"2026-08-25T03:00:00.000Z"} +{"doc_count":1574,"split_key":37963,"timestamp":"2026-08-25T03:00:00.000Z"} +{"doc_count":1256,"split_key":209334,"timestamp":"2026-08-25T03:00:00.000Z"} +{"doc_count":1110,"split_key":45102,"timestamp":"2026-08-25T03:00:00.000Z"} +{"doc_count":4344,"split_key":274069,"timestamp":"2026-08-25T04:00:00.000Z"} +{"doc_count":2469,"split_key":209334,"timestamp":"2026-08-25T04:00:00.000Z"} +{"doc_count":1616,"split_key":37963,"timestamp":"2026-08-25T04:00:00.000Z"} +{"doc_count":1165,"split_key":45102,"timestamp":"2026-08-25T04:00:00.000Z"} +{"doc_count":935,"split_key":25369,"timestamp":"2026-08-25T04:00:00.000Z"} +{"doc_count":6743,"split_key":209334,"timestamp":"2026-08-25T05:00:00.000Z"} +{"doc_count":2920,"split_key":274069,"timestamp":"2026-08-25T05:00:00.000Z"} +{"doc_count":1416,"split_key":37963,"timestamp":"2026-08-25T05:00:00.000Z"} +{"doc_count":1188,"split_key":45102,"timestamp":"2026-08-25T05:00:00.000Z"} +{"doc_count":1012,"split_key":396982,"timestamp":"2026-08-25T05:00:00.000Z"} +{"doc_count":4660,"split_key":209334,"timestamp":"2026-08-25T06:00:00.000Z"} +{"doc_count":3704,"split_key":274069,"timestamp":"2026-08-25T06:00:00.000Z"} +{"doc_count":2682,"split_key":3188,"timestamp":"2026-08-25T06:00:00.000Z"} +{"doc_count":1335,"split_key":45102,"timestamp":"2026-08-25T06:00:00.000Z"} +{"doc_count":1096,"split_key":37963,"timestamp":"2026-08-25T06:00:00.000Z"} +{"doc_count":11090,"split_key":209334,"timestamp":"2026-08-25T07:00:00.000Z"} +{"doc_count":10115,"split_key":274069,"timestamp":"2026-08-25T07:00:00.000Z"} +{"doc_count":1730,"split_key":37963,"timestamp":"2026-08-25T07:00:00.000Z"} +{"doc_count":1193,"split_key":45102,"timestamp":"2026-08-25T07:00:00.000Z"} +{"doc_count":922,"split_key":9808,"timestamp":"2026-08-25T07:00:00.000Z"} +{"doc_count":7895,"split_key":209334,"timestamp":"2026-08-25T08:00:00.000Z"} +{"doc_count":5143,"split_key":274069,"timestamp":"2026-08-25T08:00:00.000Z"} +{"doc_count":1543,"split_key":37963,"timestamp":"2026-08-25T08:00:00.000Z"} +{"doc_count":1195,"split_key":11427,"timestamp":"2026-08-25T08:00:00.000Z"} +{"doc_count":812,"split_key":50467,"timestamp":"2026-08-25T08:00:00.000Z"} +{"doc_count":11141,"split_key":209334,"timestamp":"2026-08-25T09:00:00.000Z"} +{"doc_count":7500,"split_key":50467,"timestamp":"2026-08-25T09:00:00.000Z"} +{"doc_count":3867,"split_key":274069,"timestamp":"2026-08-25T09:00:00.000Z"} +{"doc_count":1216,"split_key":37963,"timestamp":"2026-08-25T09:00:00.000Z"} +{"doc_count":970,"split_key":16509,"timestamp":"2026-08-25T09:00:00.000Z"} +{"doc_count":8272,"split_key":209334,"timestamp":"2026-08-25T10:00:00.000Z"} +{"doc_count":6393,"split_key":50467,"timestamp":"2026-08-25T10:00:00.000Z"} +{"doc_count":3527,"split_key":274069,"timestamp":"2026-08-25T10:00:00.000Z"} +{"doc_count":2491,"split_key":3188,"timestamp":"2026-08-25T10:00:00.000Z"} +{"doc_count":1226,"split_key":37963,"timestamp":"2026-08-25T10:00:00.000Z"} +{"doc_count":5417,"split_key":209334,"timestamp":"2026-08-25T11:00:00.000Z"} +{"doc_count":3955,"split_key":274069,"timestamp":"2026-08-25T11:00:00.000Z"} +{"doc_count":2445,"split_key":13335,"timestamp":"2026-08-25T11:00:00.000Z"} +{"doc_count":1508,"split_key":37963,"timestamp":"2026-08-25T11:00:00.000Z"} +{"doc_count":938,"split_key":202281,"timestamp":"2026-08-25T11:00:00.000Z"} +{"doc_count":10918,"split_key":209334,"timestamp":"2026-08-25T12:00:00.000Z"} +{"doc_count":5426,"split_key":200750,"timestamp":"2026-08-25T12:00:00.000Z"} +{"doc_count":4507,"split_key":274069,"timestamp":"2026-08-25T12:00:00.000Z"} +{"doc_count":1342,"split_key":37963,"timestamp":"2026-08-25T12:00:00.000Z"} +{"doc_count":739,"split_key":45102,"timestamp":"2026-08-25T12:00:00.000Z"} +{"doc_count":12147,"split_key":209334,"timestamp":"2026-08-25T13:00:00.000Z"} +{"doc_count":9719,"split_key":274069,"timestamp":"2026-08-25T13:00:00.000Z"} +{"doc_count":7026,"split_key":200750,"timestamp":"2026-08-25T13:00:00.000Z"} +{"doc_count":1456,"split_key":37963,"timestamp":"2026-08-25T13:00:00.000Z"} +{"doc_count":1150,"split_key":45102,"timestamp":"2026-08-25T13:00:00.000Z"} +{"doc_count":12752,"split_key":209334,"timestamp":"2026-08-25T14:00:00.000Z"} +{"doc_count":7174,"split_key":200750,"timestamp":"2026-08-25T14:00:00.000Z"} +{"doc_count":3235,"split_key":274069,"timestamp":"2026-08-25T14:00:00.000Z"} +{"doc_count":1397,"split_key":37963,"timestamp":"2026-08-25T14:00:00.000Z"} +{"doc_count":884,"split_key":49870,"timestamp":"2026-08-25T14:00:00.000Z"} +{"doc_count":12039,"split_key":209334,"timestamp":"2026-08-25T15:00:00.000Z"} +{"doc_count":4540,"split_key":274069,"timestamp":"2026-08-25T15:00:00.000Z"} +{"doc_count":4455,"split_key":200750,"timestamp":"2026-08-25T15:00:00.000Z"} +{"doc_count":1312,"split_key":37963,"timestamp":"2026-08-25T15:00:00.000Z"} +{"doc_count":776,"split_key":24323,"timestamp":"2026-08-25T15:00:00.000Z"} +{"doc_count":17628,"split_key":209334,"timestamp":"2026-08-25T16:00:00.000Z"} +{"doc_count":3289,"split_key":274069,"timestamp":"2026-08-25T16:00:00.000Z"} +{"doc_count":3152,"split_key":200750,"timestamp":"2026-08-25T16:00:00.000Z"} +{"doc_count":1848,"split_key":37963,"timestamp":"2026-08-25T16:00:00.000Z"} +{"doc_count":931,"split_key":16509,"timestamp":"2026-08-25T16:00:00.000Z"} +{"doc_count":7593,"split_key":209334,"timestamp":"2026-08-25T17:00:00.000Z"} +{"doc_count":4348,"split_key":274069,"timestamp":"2026-08-25T17:00:00.000Z"} +{"doc_count":2431,"split_key":63734,"timestamp":"2026-08-25T17:00:00.000Z"} +{"doc_count":2179,"split_key":45102,"timestamp":"2026-08-25T17:00:00.000Z"} +{"doc_count":2081,"split_key":151858,"timestamp":"2026-08-25T17:00:00.000Z"} +{"doc_count":25829,"split_key":209334,"timestamp":"2026-08-25T18:00:00.000Z"} +{"doc_count":20637,"split_key":63734,"timestamp":"2026-08-25T18:00:00.000Z"} +{"doc_count":9449,"split_key":274069,"timestamp":"2026-08-25T18:00:00.000Z"} +{"doc_count":1173,"split_key":37963,"timestamp":"2026-08-25T18:00:00.000Z"} +{"doc_count":903,"split_key":24323,"timestamp":"2026-08-25T18:00:00.000Z"} +{"doc_count":20371,"split_key":63734,"timestamp":"2026-08-25T19:00:00.000Z"} +{"doc_count":14571,"split_key":209334,"timestamp":"2026-08-25T19:00:00.000Z"} +{"doc_count":5069,"split_key":274069,"timestamp":"2026-08-25T19:00:00.000Z"} +{"doc_count":3842,"split_key":210538,"timestamp":"2026-08-25T19:00:00.000Z"} +{"doc_count":1356,"split_key":396982,"timestamp":"2026-08-25T19:00:00.000Z"} +{"doc_count":20987,"split_key":63734,"timestamp":"2026-08-25T20:00:00.000Z"} +{"doc_count":11635,"split_key":209334,"timestamp":"2026-08-25T20:00:00.000Z"} +{"doc_count":4463,"split_key":274069,"timestamp":"2026-08-25T20:00:00.000Z"} +{"doc_count":3961,"split_key":210538,"timestamp":"2026-08-25T20:00:00.000Z"} +{"doc_count":1201,"split_key":37963,"timestamp":"2026-08-25T20:00:00.000Z"} +{"doc_count":19370,"split_key":63734,"timestamp":"2026-08-25T21:00:00.000Z"} +{"doc_count":3882,"split_key":210538,"timestamp":"2026-08-25T21:00:00.000Z"} +{"doc_count":3301,"split_key":274069,"timestamp":"2026-08-25T21:00:00.000Z"} +{"doc_count":2908,"split_key":265919,"timestamp":"2026-08-25T21:00:00.000Z"} +{"doc_count":1216,"split_key":37963,"timestamp":"2026-08-25T21:00:00.000Z"} +{"doc_count":11330,"split_key":271177,"timestamp":"2026-08-25T22:00:00.000Z"} +{"doc_count":6385,"split_key":206991,"timestamp":"2026-08-25T22:00:00.000Z"} +{"doc_count":3539,"split_key":274069,"timestamp":"2026-08-25T22:00:00.000Z"} +{"doc_count":2790,"split_key":51540,"timestamp":"2026-08-25T22:00:00.000Z"} +{"doc_count":1279,"split_key":37963,"timestamp":"2026-08-25T22:00:00.000Z"} +{"doc_count":9406,"split_key":274069,"timestamp":"2026-08-25T23:00:00.000Z"} +{"doc_count":8035,"split_key":206991,"timestamp":"2026-08-25T23:00:00.000Z"} +{"doc_count":3703,"split_key":51540,"timestamp":"2026-08-25T23:00:00.000Z"} +{"doc_count":1785,"split_key":37963,"timestamp":"2026-08-25T23:00:00.000Z"} +{"doc_count":1156,"split_key":51396,"timestamp":"2026-08-25T23:00:00.000Z"} +{"doc_count":10032,"split_key":14987,"timestamp":"2026-08-26T00:00:00.000Z"} +{"doc_count":8112,"split_key":206991,"timestamp":"2026-08-26T00:00:00.000Z"} +{"doc_count":5240,"split_key":274069,"timestamp":"2026-08-26T00:00:00.000Z"} +{"doc_count":3724,"split_key":51540,"timestamp":"2026-08-26T00:00:00.000Z"} +{"doc_count":2353,"split_key":37963,"timestamp":"2026-08-26T00:00:00.000Z"} +{"doc_count":7982,"split_key":206991,"timestamp":"2026-08-26T01:00:00.000Z"} +{"doc_count":4027,"split_key":274069,"timestamp":"2026-08-26T01:00:00.000Z"} +{"doc_count":3728,"split_key":51540,"timestamp":"2026-08-26T01:00:00.000Z"} +{"doc_count":3195,"split_key":37963,"timestamp":"2026-08-26T01:00:00.000Z"} +{"doc_count":2729,"split_key":396982,"timestamp":"2026-08-26T01:00:00.000Z"} +{"doc_count":128080,"split_key":137127,"timestamp":"2026-08-26T02:00:00.000Z"} +{"doc_count":9144,"split_key":396982,"timestamp":"2026-08-26T02:00:00.000Z"} +{"doc_count":8085,"split_key":206991,"timestamp":"2026-08-26T02:00:00.000Z"} +{"doc_count":4324,"split_key":274069,"timestamp":"2026-08-26T02:00:00.000Z"} +{"doc_count":3741,"split_key":51540,"timestamp":"2026-08-26T02:00:00.000Z"} +{"doc_count":7961,"split_key":206991,"timestamp":"2026-08-26T03:00:00.000Z"} +{"doc_count":4371,"split_key":274069,"timestamp":"2026-08-26T03:00:00.000Z"} +{"doc_count":3714,"split_key":51540,"timestamp":"2026-08-26T03:00:00.000Z"} +{"doc_count":1220,"split_key":209334,"timestamp":"2026-08-26T03:00:00.000Z"} +{"doc_count":1144,"split_key":37963,"timestamp":"2026-08-26T03:00:00.000Z"} +{"doc_count":7982,"split_key":206991,"timestamp":"2026-08-26T04:00:00.000Z"} +{"doc_count":5206,"split_key":14061,"timestamp":"2026-08-26T04:00:00.000Z"} +{"doc_count":3742,"split_key":274069,"timestamp":"2026-08-26T04:00:00.000Z"} +{"doc_count":3722,"split_key":51540,"timestamp":"2026-08-26T04:00:00.000Z"} +{"doc_count":2479,"split_key":209334,"timestamp":"2026-08-26T04:00:00.000Z"} +{"doc_count":9780,"split_key":274069,"timestamp":"2026-08-26T05:00:00.000Z"} +{"doc_count":8892,"split_key":14061,"timestamp":"2026-08-26T05:00:00.000Z"} +{"doc_count":7975,"split_key":206991,"timestamp":"2026-08-26T05:00:00.000Z"} +{"doc_count":6603,"split_key":209334,"timestamp":"2026-08-26T05:00:00.000Z"} +{"doc_count":3730,"split_key":51540,"timestamp":"2026-08-26T05:00:00.000Z"} +{"doc_count":8541,"split_key":14061,"timestamp":"2026-08-26T06:00:00.000Z"} +{"doc_count":8169,"split_key":206991,"timestamp":"2026-08-26T06:00:00.000Z"} +{"doc_count":4900,"split_key":274069,"timestamp":"2026-08-26T06:00:00.000Z"} +{"doc_count":4770,"split_key":209334,"timestamp":"2026-08-26T06:00:00.000Z"} +{"doc_count":3747,"split_key":51540,"timestamp":"2026-08-26T06:00:00.000Z"} +{"doc_count":11047,"split_key":209334,"timestamp":"2026-08-26T07:00:00.000Z"} +{"doc_count":8143,"split_key":206991,"timestamp":"2026-08-26T07:00:00.000Z"} +{"doc_count":4507,"split_key":274069,"timestamp":"2026-08-26T07:00:00.000Z"} +{"doc_count":3717,"split_key":51540,"timestamp":"2026-08-26T07:00:00.000Z"} +{"doc_count":1140,"split_key":37963,"timestamp":"2026-08-26T07:00:00.000Z"} +{"doc_count":8124,"split_key":209334,"timestamp":"2026-08-26T08:00:00.000Z"} +{"doc_count":3503,"split_key":274069,"timestamp":"2026-08-26T08:00:00.000Z"} +{"doc_count":1922,"split_key":206991,"timestamp":"2026-08-26T08:00:00.000Z"} +{"doc_count":1100,"split_key":37963,"timestamp":"2026-08-26T08:00:00.000Z"} +{"doc_count":970,"split_key":51540,"timestamp":"2026-08-26T08:00:00.000Z"} +{"doc_count":13083,"split_key":209334,"timestamp":"2026-08-26T09:00:00.000Z"} +{"doc_count":3857,"split_key":274069,"timestamp":"2026-08-26T09:00:00.000Z"} +{"doc_count":2429,"split_key":41297,"timestamp":"2026-08-26T09:00:00.000Z"} +{"doc_count":1167,"split_key":37963,"timestamp":"2026-08-26T09:00:00.000Z"} +{"doc_count":1091,"split_key":396982,"timestamp":"2026-08-26T09:00:00.000Z"} +{"doc_count":9867,"split_key":274069,"timestamp":"2026-08-26T10:00:00.000Z"} +{"doc_count":8859,"split_key":41297,"timestamp":"2026-08-26T10:00:00.000Z"} +{"doc_count":8377,"split_key":209334,"timestamp":"2026-08-26T10:00:00.000Z"} +{"doc_count":1213,"split_key":37963,"timestamp":"2026-08-26T10:00:00.000Z"} +{"doc_count":658,"split_key":396982,"timestamp":"2026-08-26T10:00:00.000Z"} +{"doc_count":8244,"split_key":41297,"timestamp":"2026-08-26T11:00:00.000Z"} +{"doc_count":5688,"split_key":209334,"timestamp":"2026-08-26T11:00:00.000Z"} +{"doc_count":4977,"split_key":274069,"timestamp":"2026-08-26T11:00:00.000Z"} +{"doc_count":1859,"split_key":16509,"timestamp":"2026-08-26T11:00:00.000Z"} +{"doc_count":1198,"split_key":37963,"timestamp":"2026-08-26T11:00:00.000Z"} +{"doc_count":10235,"split_key":209334,"timestamp":"2026-08-26T12:00:00.000Z"} +{"doc_count":8030,"split_key":41297,"timestamp":"2026-08-26T12:00:00.000Z"} +{"doc_count":4314,"split_key":274069,"timestamp":"2026-08-26T12:00:00.000Z"} +{"doc_count":2411,"split_key":16509,"timestamp":"2026-08-26T12:00:00.000Z"} +{"doc_count":968,"split_key":48090,"timestamp":"2026-08-26T12:00:00.000Z"} +{"doc_count":12819,"split_key":209334,"timestamp":"2026-08-26T13:00:00.000Z"} +{"doc_count":7874,"split_key":41297,"timestamp":"2026-08-26T13:00:00.000Z"} +{"doc_count":4997,"split_key":16509,"timestamp":"2026-08-26T13:00:00.000Z"} +{"doc_count":3292,"split_key":274069,"timestamp":"2026-08-26T13:00:00.000Z"} +{"doc_count":905,"split_key":37963,"timestamp":"2026-08-26T13:00:00.000Z"} +{"doc_count":12689,"split_key":209334,"timestamp":"2026-08-26T14:00:00.000Z"} +{"doc_count":7861,"split_key":41297,"timestamp":"2026-08-26T14:00:00.000Z"} +{"doc_count":3718,"split_key":274069,"timestamp":"2026-08-26T14:00:00.000Z"} +{"doc_count":2744,"split_key":16509,"timestamp":"2026-08-26T14:00:00.000Z"} +{"doc_count":1069,"split_key":37963,"timestamp":"2026-08-26T14:00:00.000Z"} +{"doc_count":13430,"split_key":209334,"timestamp":"2026-08-26T15:00:00.000Z"} +{"doc_count":9242,"split_key":274069,"timestamp":"2026-08-26T15:00:00.000Z"} +{"doc_count":7583,"split_key":41297,"timestamp":"2026-08-26T15:00:00.000Z"} +{"doc_count":1295,"split_key":14987,"timestamp":"2026-08-26T15:00:00.000Z"} +{"doc_count":1219,"split_key":37963,"timestamp":"2026-08-26T15:00:00.000Z"} +{"doc_count":23103,"split_key":209334,"timestamp":"2026-08-26T16:00:00.000Z"} +{"doc_count":7835,"split_key":41297,"timestamp":"2026-08-26T16:00:00.000Z"} +{"doc_count":5927,"split_key":274069,"timestamp":"2026-08-26T16:00:00.000Z"} +{"doc_count":4625,"split_key":22295,"timestamp":"2026-08-26T16:00:00.000Z"} +{"doc_count":1351,"split_key":36352,"timestamp":"2026-08-26T16:00:00.000Z"} +{"doc_count":39803,"split_key":271177,"timestamp":"2026-08-26T17:00:00.000Z"} +{"doc_count":7713,"split_key":209334,"timestamp":"2026-08-26T17:00:00.000Z"} +{"doc_count":7206,"split_key":22295,"timestamp":"2026-08-26T17:00:00.000Z"} +{"doc_count":6906,"split_key":41297,"timestamp":"2026-08-26T17:00:00.000Z"} +{"doc_count":3947,"split_key":274069,"timestamp":"2026-08-26T17:00:00.000Z"} +{"doc_count":39687,"split_key":271177,"timestamp":"2026-08-26T18:00:00.000Z"} +{"doc_count":25009,"split_key":209334,"timestamp":"2026-08-26T18:00:00.000Z"} +{"doc_count":9358,"split_key":22295,"timestamp":"2026-08-26T18:00:00.000Z"} +{"doc_count":6353,"split_key":41297,"timestamp":"2026-08-26T18:00:00.000Z"} +{"doc_count":4558,"split_key":274069,"timestamp":"2026-08-26T18:00:00.000Z"} +{"doc_count":38691,"split_key":271177,"timestamp":"2026-08-26T19:00:00.000Z"} +{"doc_count":15122,"split_key":209334,"timestamp":"2026-08-26T19:00:00.000Z"} +{"doc_count":9001,"split_key":22295,"timestamp":"2026-08-26T19:00:00.000Z"} +{"doc_count":7268,"split_key":14061,"timestamp":"2026-08-26T19:00:00.000Z"} +{"doc_count":6968,"split_key":41297,"timestamp":"2026-08-26T19:00:00.000Z"} +{"doc_count":11753,"split_key":209334,"timestamp":"2026-08-26T20:00:00.000Z"} +{"doc_count":7206,"split_key":14061,"timestamp":"2026-08-26T20:00:00.000Z"} +{"doc_count":6919,"split_key":41297,"timestamp":"2026-08-26T20:00:00.000Z"} +{"doc_count":4040,"split_key":274069,"timestamp":"2026-08-26T20:00:00.000Z"} +{"doc_count":2898,"split_key":271177,"timestamp":"2026-08-26T20:00:00.000Z"} +{"doc_count":9616,"split_key":274069,"timestamp":"2026-08-26T21:00:00.000Z"} +{"doc_count":4012,"split_key":14061,"timestamp":"2026-08-26T21:00:00.000Z"} +{"doc_count":1387,"split_key":41297,"timestamp":"2026-08-26T21:00:00.000Z"} +{"doc_count":1302,"split_key":37963,"timestamp":"2026-08-26T21:00:00.000Z"} +{"doc_count":1024,"split_key":16276,"timestamp":"2026-08-26T21:00:00.000Z"} +{"doc_count":4800,"split_key":274069,"timestamp":"2026-08-26T22:00:00.000Z"} +{"doc_count":1591,"split_key":396982,"timestamp":"2026-08-26T22:00:00.000Z"} +{"doc_count":1307,"split_key":37963,"timestamp":"2026-08-26T22:00:00.000Z"} +{"doc_count":809,"split_key":16509,"timestamp":"2026-08-26T22:00:00.000Z"} +{"doc_count":782,"split_key":25369,"timestamp":"2026-08-26T22:00:00.000Z"} +{"doc_count":4451,"split_key":274069,"timestamp":"2026-08-26T23:00:00.000Z"} +{"doc_count":1165,"split_key":37963,"timestamp":"2026-08-26T23:00:00.000Z"} +{"doc_count":1008,"split_key":45804,"timestamp":"2026-08-26T23:00:00.000Z"} +{"doc_count":863,"split_key":25369,"timestamp":"2026-08-26T23:00:00.000Z"} +{"doc_count":675,"split_key":16509,"timestamp":"2026-08-26T23:00:00.000Z"} +{"doc_count":10691,"split_key":14987,"timestamp":"2026-08-27T00:00:00.000Z"} +{"doc_count":3269,"split_key":274069,"timestamp":"2026-08-27T00:00:00.000Z"} +{"doc_count":1538,"split_key":37963,"timestamp":"2026-08-27T00:00:00.000Z"} +{"doc_count":1014,"split_key":396982,"timestamp":"2026-08-27T00:00:00.000Z"} +{"doc_count":857,"split_key":25369,"timestamp":"2026-08-27T00:00:00.000Z"} +{"doc_count":4409,"split_key":274069,"timestamp":"2026-08-27T01:00:00.000Z"} +{"doc_count":1659,"split_key":22295,"timestamp":"2026-08-27T01:00:00.000Z"} +{"doc_count":1576,"split_key":37963,"timestamp":"2026-08-27T01:00:00.000Z"} +{"doc_count":1125,"split_key":4837,"timestamp":"2026-08-27T01:00:00.000Z"} +{"doc_count":745,"split_key":209334,"timestamp":"2026-08-27T01:00:00.000Z"} +{"doc_count":7996,"split_key":22295,"timestamp":"2026-08-27T02:00:00.000Z"} +{"doc_count":6614,"split_key":39891,"timestamp":"2026-08-27T02:00:00.000Z"} +{"doc_count":6595,"split_key":274069,"timestamp":"2026-08-27T02:00:00.000Z"} +{"doc_count":6335,"split_key":209630,"timestamp":"2026-08-27T02:00:00.000Z"} +{"doc_count":2931,"split_key":5384,"timestamp":"2026-08-27T02:00:00.000Z"} +{"doc_count":8984,"split_key":22295,"timestamp":"2026-08-27T03:00:00.000Z"} +{"doc_count":2717,"split_key":209630,"timestamp":"2026-08-27T03:00:00.000Z"} +{"doc_count":2715,"split_key":274069,"timestamp":"2026-08-27T03:00:00.000Z"} +{"doc_count":2439,"split_key":36352,"timestamp":"2026-08-27T03:00:00.000Z"} +{"doc_count":1620,"split_key":45102,"timestamp":"2026-08-27T03:00:00.000Z"} +{"doc_count":6512,"split_key":22295,"timestamp":"2026-08-27T04:00:00.000Z"} +{"doc_count":3420,"split_key":209630,"timestamp":"2026-08-27T04:00:00.000Z"} +{"doc_count":3167,"split_key":274069,"timestamp":"2026-08-27T04:00:00.000Z"} +{"doc_count":2626,"split_key":209334,"timestamp":"2026-08-27T04:00:00.000Z"} +{"doc_count":1847,"split_key":36352,"timestamp":"2026-08-27T04:00:00.000Z"} +{"doc_count":7846,"split_key":22295,"timestamp":"2026-08-27T05:00:00.000Z"} +{"doc_count":6789,"split_key":209334,"timestamp":"2026-08-27T05:00:00.000Z"} +{"doc_count":6501,"split_key":209630,"timestamp":"2026-08-27T05:00:00.000Z"} +{"doc_count":6151,"split_key":274069,"timestamp":"2026-08-27T05:00:00.000Z"} +{"doc_count":2086,"split_key":36352,"timestamp":"2026-08-27T05:00:00.000Z"} +{"doc_count":5951,"split_key":22295,"timestamp":"2026-08-27T06:00:00.000Z"} +{"doc_count":4658,"split_key":209334,"timestamp":"2026-08-27T06:00:00.000Z"} +{"doc_count":3254,"split_key":209630,"timestamp":"2026-08-27T06:00:00.000Z"} +{"doc_count":3090,"split_key":274069,"timestamp":"2026-08-27T06:00:00.000Z"} +{"doc_count":1695,"split_key":36352,"timestamp":"2026-08-27T06:00:00.000Z"} +{"doc_count":11190,"split_key":209334,"timestamp":"2026-08-27T07:00:00.000Z"} +{"doc_count":9589,"split_key":22295,"timestamp":"2026-08-27T07:00:00.000Z"} +{"doc_count":6067,"split_key":274069,"timestamp":"2026-08-27T07:00:00.000Z"} +{"doc_count":5845,"split_key":209630,"timestamp":"2026-08-27T07:00:00.000Z"} +{"doc_count":2690,"split_key":36352,"timestamp":"2026-08-27T07:00:00.000Z"} +{"doc_count":10156,"split_key":22295,"timestamp":"2026-08-27T08:00:00.000Z"} +{"doc_count":8038,"split_key":209334,"timestamp":"2026-08-27T08:00:00.000Z"} +{"doc_count":3593,"split_key":209630,"timestamp":"2026-08-27T08:00:00.000Z"} +{"doc_count":3387,"split_key":274069,"timestamp":"2026-08-27T08:00:00.000Z"} +{"doc_count":2839,"split_key":36352,"timestamp":"2026-08-27T08:00:00.000Z"} +{"doc_count":11149,"split_key":22295,"timestamp":"2026-08-27T09:00:00.000Z"} +{"doc_count":9240,"split_key":209334,"timestamp":"2026-08-27T09:00:00.000Z"} +{"doc_count":3254,"split_key":36352,"timestamp":"2026-08-27T09:00:00.000Z"} +{"doc_count":2637,"split_key":274069,"timestamp":"2026-08-27T09:00:00.000Z"} +{"doc_count":2627,"split_key":209630,"timestamp":"2026-08-27T09:00:00.000Z"} +{"doc_count":10768,"split_key":22295,"timestamp":"2026-08-27T10:00:00.000Z"} +{"doc_count":7157,"split_key":209630,"timestamp":"2026-08-27T10:00:00.000Z"} +{"doc_count":6490,"split_key":274069,"timestamp":"2026-08-27T10:00:00.000Z"} +{"doc_count":5697,"split_key":209334,"timestamp":"2026-08-27T10:00:00.000Z"} +{"doc_count":3158,"split_key":41297,"timestamp":"2026-08-27T10:00:00.000Z"} +{"doc_count":14748,"split_key":22295,"timestamp":"2026-08-27T11:00:00.000Z"} +{"doc_count":6088,"split_key":209334,"timestamp":"2026-08-27T11:00:00.000Z"} +{"doc_count":5135,"split_key":47329,"timestamp":"2026-08-27T11:00:00.000Z"} +{"doc_count":3614,"split_key":36352,"timestamp":"2026-08-27T11:00:00.000Z"} +{"doc_count":3576,"split_key":274069,"timestamp":"2026-08-27T11:00:00.000Z"} +{"doc_count":12069,"split_key":209334,"timestamp":"2026-08-27T12:00:00.000Z"} +{"doc_count":11856,"split_key":22295,"timestamp":"2026-08-27T12:00:00.000Z"} +{"doc_count":11810,"split_key":47329,"timestamp":"2026-08-27T12:00:00.000Z"} +{"doc_count":4490,"split_key":36352,"timestamp":"2026-08-27T12:00:00.000Z"} +{"doc_count":3342,"split_key":209630,"timestamp":"2026-08-27T12:00:00.000Z"} +{"doc_count":16159,"split_key":209334,"timestamp":"2026-08-27T13:00:00.000Z"} +{"doc_count":10136,"split_key":47329,"timestamp":"2026-08-27T13:00:00.000Z"} +{"doc_count":8624,"split_key":22295,"timestamp":"2026-08-27T13:00:00.000Z"} +{"doc_count":6509,"split_key":274069,"timestamp":"2026-08-27T13:00:00.000Z"} +{"doc_count":6180,"split_key":209630,"timestamp":"2026-08-27T13:00:00.000Z"} +{"doc_count":8455,"split_key":22295,"timestamp":"2026-08-27T14:00:00.000Z"} +{"doc_count":7841,"split_key":209334,"timestamp":"2026-08-27T14:00:00.000Z"} +{"doc_count":5660,"split_key":43420,"timestamp":"2026-08-27T14:00:00.000Z"} +{"doc_count":4352,"split_key":47329,"timestamp":"2026-08-27T14:00:00.000Z"} +{"doc_count":3388,"split_key":209630,"timestamp":"2026-08-27T14:00:00.000Z"} +{"doc_count":15189,"split_key":209334,"timestamp":"2026-08-27T15:00:00.000Z"} +{"doc_count":11224,"split_key":43420,"timestamp":"2026-08-27T15:00:00.000Z"} +{"doc_count":10572,"split_key":22295,"timestamp":"2026-08-27T15:00:00.000Z"} +{"doc_count":6403,"split_key":274069,"timestamp":"2026-08-27T15:00:00.000Z"} +{"doc_count":5957,"split_key":209630,"timestamp":"2026-08-27T15:00:00.000Z"} +{"doc_count":14890,"split_key":209334,"timestamp":"2026-08-27T16:00:00.000Z"} +{"doc_count":13063,"split_key":43420,"timestamp":"2026-08-27T16:00:00.000Z"} +{"doc_count":10178,"split_key":22295,"timestamp":"2026-08-27T16:00:00.000Z"} +{"doc_count":4123,"split_key":209630,"timestamp":"2026-08-27T16:00:00.000Z"} +{"doc_count":3689,"split_key":274069,"timestamp":"2026-08-27T16:00:00.000Z"} +{"doc_count":12308,"split_key":43420,"timestamp":"2026-08-27T17:00:00.000Z"} +{"doc_count":9040,"split_key":22295,"timestamp":"2026-08-27T17:00:00.000Z"} +{"doc_count":7804,"split_key":209334,"timestamp":"2026-08-27T17:00:00.000Z"} +{"doc_count":2859,"split_key":209630,"timestamp":"2026-08-27T17:00:00.000Z"} +{"doc_count":2599,"split_key":274069,"timestamp":"2026-08-27T17:00:00.000Z"} +{"doc_count":21755,"split_key":209334,"timestamp":"2026-08-27T18:00:00.000Z"} +{"doc_count":12925,"split_key":43420,"timestamp":"2026-08-27T18:00:00.000Z"} +{"doc_count":10207,"split_key":22295,"timestamp":"2026-08-27T18:00:00.000Z"} +{"doc_count":6935,"split_key":209630,"timestamp":"2026-08-27T18:00:00.000Z"} +{"doc_count":6844,"split_key":274069,"timestamp":"2026-08-27T18:00:00.000Z"} +{"doc_count":15216,"split_key":209334,"timestamp":"2026-08-27T19:00:00.000Z"} +{"doc_count":12699,"split_key":47329,"timestamp":"2026-08-27T19:00:00.000Z"} +{"doc_count":10786,"split_key":22295,"timestamp":"2026-08-27T19:00:00.000Z"} +{"doc_count":6016,"split_key":396982,"timestamp":"2026-08-27T19:00:00.000Z"} +{"doc_count":3542,"split_key":209630,"timestamp":"2026-08-27T19:00:00.000Z"} +{"doc_count":14952,"split_key":209334,"timestamp":"2026-08-27T20:00:00.000Z"} +{"doc_count":12007,"split_key":396982,"timestamp":"2026-08-27T20:00:00.000Z"} +{"doc_count":8861,"split_key":22295,"timestamp":"2026-08-27T20:00:00.000Z"} +{"doc_count":4891,"split_key":47329,"timestamp":"2026-08-27T20:00:00.000Z"} +{"doc_count":4353,"split_key":209630,"timestamp":"2026-08-27T20:00:00.000Z"} +{"doc_count":11270,"split_key":396982,"timestamp":"2026-08-27T21:00:00.000Z"} +{"doc_count":10865,"split_key":22295,"timestamp":"2026-08-27T21:00:00.000Z"} +{"doc_count":6284,"split_key":274069,"timestamp":"2026-08-27T21:00:00.000Z"} +{"doc_count":6058,"split_key":209630,"timestamp":"2026-08-27T21:00:00.000Z"} +{"doc_count":5889,"split_key":150436,"timestamp":"2026-08-27T21:00:00.000Z"} +{"doc_count":11162,"split_key":22295,"timestamp":"2026-08-27T22:00:00.000Z"} +{"doc_count":7097,"split_key":396982,"timestamp":"2026-08-27T22:00:00.000Z"} +{"doc_count":5593,"split_key":16276,"timestamp":"2026-08-27T22:00:00.000Z"} +{"doc_count":3224,"split_key":209630,"timestamp":"2026-08-27T22:00:00.000Z"} +{"doc_count":3100,"split_key":36352,"timestamp":"2026-08-27T22:00:00.000Z"} +{"doc_count":7250,"split_key":22295,"timestamp":"2026-08-27T23:00:00.000Z"} +{"doc_count":5714,"split_key":209630,"timestamp":"2026-08-27T23:00:00.000Z"} +{"doc_count":5428,"split_key":274069,"timestamp":"2026-08-27T23:00:00.000Z"} +{"doc_count":4751,"split_key":396982,"timestamp":"2026-08-27T23:00:00.000Z"} +{"doc_count":2254,"split_key":36352,"timestamp":"2026-08-27T23:00:00.000Z"} +{"doc_count":9581,"split_key":22295,"timestamp":"2026-08-28T00:00:00.000Z"} +{"doc_count":5081,"split_key":396982,"timestamp":"2026-08-28T00:00:00.000Z"} +{"doc_count":3818,"split_key":209630,"timestamp":"2026-08-28T00:00:00.000Z"} +{"doc_count":3598,"split_key":274069,"timestamp":"2026-08-28T00:00:00.000Z"} +{"doc_count":2793,"split_key":36352,"timestamp":"2026-08-28T00:00:00.000Z"} +{"doc_count":12124,"split_key":22295,"timestamp":"2026-08-28T01:00:00.000Z"} +{"doc_count":3395,"split_key":36352,"timestamp":"2026-08-28T01:00:00.000Z"} +{"doc_count":3012,"split_key":209630,"timestamp":"2026-08-28T01:00:00.000Z"} +{"doc_count":2669,"split_key":274069,"timestamp":"2026-08-28T01:00:00.000Z"} +{"doc_count":1681,"split_key":396982,"timestamp":"2026-08-28T01:00:00.000Z"} +{"doc_count":11036,"split_key":22295,"timestamp":"2026-08-28T02:00:00.000Z"} +{"doc_count":7978,"split_key":274069,"timestamp":"2026-08-28T02:00:00.000Z"} +{"doc_count":7973,"split_key":209630,"timestamp":"2026-08-28T02:00:00.000Z"} +{"doc_count":3125,"split_key":36352,"timestamp":"2026-08-28T02:00:00.000Z"} +{"doc_count":2829,"split_key":396982,"timestamp":"2026-08-28T02:00:00.000Z"} +{"doc_count":10391,"split_key":209630,"timestamp":"2026-08-28T03:00:00.000Z"} +{"doc_count":9729,"split_key":396982,"timestamp":"2026-08-28T03:00:00.000Z"} +{"doc_count":9477,"split_key":22295,"timestamp":"2026-08-28T03:00:00.000Z"} +{"doc_count":8415,"split_key":274069,"timestamp":"2026-08-28T03:00:00.000Z"} +{"doc_count":2821,"split_key":36352,"timestamp":"2026-08-28T03:00:00.000Z"} +{"doc_count":11376,"split_key":209630,"timestamp":"2026-08-28T04:00:00.000Z"} +{"doc_count":9667,"split_key":274069,"timestamp":"2026-08-28T04:00:00.000Z"} +{"doc_count":9424,"split_key":22295,"timestamp":"2026-08-28T04:00:00.000Z"} +{"doc_count":9199,"split_key":396982,"timestamp":"2026-08-28T04:00:00.000Z"} +{"doc_count":2633,"split_key":36352,"timestamp":"2026-08-28T04:00:00.000Z"} +{"doc_count":14222,"split_key":209630,"timestamp":"2026-08-28T05:00:00.000Z"} +{"doc_count":12546,"split_key":274069,"timestamp":"2026-08-28T05:00:00.000Z"} +{"doc_count":10779,"split_key":396982,"timestamp":"2026-08-28T05:00:00.000Z"} +{"doc_count":8471,"split_key":22295,"timestamp":"2026-08-28T05:00:00.000Z"} +{"doc_count":6468,"split_key":209334,"timestamp":"2026-08-28T05:00:00.000Z"} +{"doc_count":16202,"split_key":154247,"timestamp":"2026-08-28T06:00:00.000Z"} +{"doc_count":8609,"split_key":209630,"timestamp":"2026-08-28T06:00:00.000Z"} +{"doc_count":7079,"split_key":396982,"timestamp":"2026-08-28T06:00:00.000Z"} +{"doc_count":7051,"split_key":274069,"timestamp":"2026-08-28T06:00:00.000Z"} +{"doc_count":4155,"split_key":209334,"timestamp":"2026-08-28T06:00:00.000Z"} +{"doc_count":23664,"split_key":154247,"timestamp":"2026-08-28T07:00:00.000Z"} +{"doc_count":10352,"split_key":396982,"timestamp":"2026-08-28T07:00:00.000Z"} +{"doc_count":9723,"split_key":209334,"timestamp":"2026-08-28T07:00:00.000Z"} +{"doc_count":4626,"split_key":22295,"timestamp":"2026-08-28T07:00:00.000Z"} +{"doc_count":2213,"split_key":209630,"timestamp":"2026-08-28T07:00:00.000Z"} +{"doc_count":11843,"split_key":396982,"timestamp":"2026-08-28T08:00:00.000Z"} +{"doc_count":9037,"split_key":209334,"timestamp":"2026-08-28T08:00:00.000Z"} +{"doc_count":7671,"split_key":154247,"timestamp":"2026-08-28T08:00:00.000Z"} +{"doc_count":2590,"split_key":24940,"timestamp":"2026-08-28T08:00:00.000Z"} +{"doc_count":2085,"split_key":22295,"timestamp":"2026-08-28T08:00:00.000Z"} +{"doc_count":8230,"split_key":209334,"timestamp":"2026-08-28T09:00:00.000Z"} +{"doc_count":5943,"split_key":396982,"timestamp":"2026-08-28T09:00:00.000Z"} +{"doc_count":3591,"split_key":22295,"timestamp":"2026-08-28T09:00:00.000Z"} +{"doc_count":1190,"split_key":36352,"timestamp":"2026-08-28T09:00:00.000Z"} +{"doc_count":763,"split_key":16509,"timestamp":"2026-08-28T09:00:00.000Z"} +{"doc_count":8499,"split_key":154247,"timestamp":"2026-08-28T10:00:00.000Z"} +{"doc_count":5035,"split_key":209334,"timestamp":"2026-08-28T10:00:00.000Z"} +{"doc_count":3013,"split_key":209630,"timestamp":"2026-08-28T10:00:00.000Z"} +{"doc_count":2862,"split_key":22295,"timestamp":"2026-08-28T10:00:00.000Z"} +{"doc_count":2854,"split_key":274069,"timestamp":"2026-08-28T10:00:00.000Z"} +{"doc_count":23833,"split_key":154247,"timestamp":"2026-08-28T11:00:00.000Z"} +{"doc_count":10935,"split_key":47329,"timestamp":"2026-08-28T11:00:00.000Z"} +{"doc_count":6945,"split_key":209334,"timestamp":"2026-08-28T11:00:00.000Z"} +{"doc_count":2364,"split_key":22295,"timestamp":"2026-08-28T11:00:00.000Z"} +{"doc_count":898,"split_key":197540,"timestamp":"2026-08-28T11:00:00.000Z"} +{"doc_count":24150,"split_key":154247,"timestamp":"2026-08-28T12:00:00.000Z"} +{"doc_count":13096,"split_key":47329,"timestamp":"2026-08-28T12:00:00.000Z"} +{"doc_count":11100,"split_key":209334,"timestamp":"2026-08-28T12:00:00.000Z"} +{"doc_count":2456,"split_key":22295,"timestamp":"2026-08-28T12:00:00.000Z"} +{"doc_count":1236,"split_key":979,"timestamp":"2026-08-28T12:00:00.000Z"} +{"doc_count":23843,"split_key":154247,"timestamp":"2026-08-28T13:00:00.000Z"} +{"doc_count":13707,"split_key":209334,"timestamp":"2026-08-28T13:00:00.000Z"} +{"doc_count":9418,"split_key":47329,"timestamp":"2026-08-28T13:00:00.000Z"} +{"doc_count":2748,"split_key":22295,"timestamp":"2026-08-28T13:00:00.000Z"} +{"doc_count":2361,"split_key":209630,"timestamp":"2026-08-28T13:00:00.000Z"} +{"doc_count":14931,"split_key":154247,"timestamp":"2026-08-28T14:00:00.000Z"} +{"doc_count":5675,"split_key":209334,"timestamp":"2026-08-28T14:00:00.000Z"} +{"doc_count":3307,"split_key":22295,"timestamp":"2026-08-28T14:00:00.000Z"} +{"doc_count":1800,"split_key":47329,"timestamp":"2026-08-28T14:00:00.000Z"} +{"doc_count":1050,"split_key":36352,"timestamp":"2026-08-28T14:00:00.000Z"} +{"doc_count":17245,"split_key":209334,"timestamp":"2026-08-28T15:00:00.000Z"} +{"doc_count":3014,"split_key":47329,"timestamp":"2026-08-28T15:00:00.000Z"} +{"doc_count":2765,"split_key":209630,"timestamp":"2026-08-28T15:00:00.000Z"} +{"doc_count":2569,"split_key":274069,"timestamp":"2026-08-28T15:00:00.000Z"} +{"doc_count":2450,"split_key":22295,"timestamp":"2026-08-28T15:00:00.000Z"} +{"doc_count":16137,"split_key":47329,"timestamp":"2026-08-28T16:00:00.000Z"} +{"doc_count":12865,"split_key":45903,"timestamp":"2026-08-28T16:00:00.000Z"} +{"doc_count":10093,"split_key":209334,"timestamp":"2026-08-28T16:00:00.000Z"} +{"doc_count":2836,"split_key":131353,"timestamp":"2026-08-28T16:00:00.000Z"} +{"doc_count":1845,"split_key":396982,"timestamp":"2026-08-28T16:00:00.000Z"} +{"doc_count":16147,"split_key":47329,"timestamp":"2026-08-28T17:00:00.000Z"} +{"doc_count":12628,"split_key":209334,"timestamp":"2026-08-28T17:00:00.000Z"} +{"doc_count":5498,"split_key":45903,"timestamp":"2026-08-28T17:00:00.000Z"} +{"doc_count":2200,"split_key":22295,"timestamp":"2026-08-28T17:00:00.000Z"} +{"doc_count":1592,"split_key":396982,"timestamp":"2026-08-28T17:00:00.000Z"} +{"doc_count":17291,"split_key":209334,"timestamp":"2026-08-28T18:00:00.000Z"} +{"doc_count":16436,"split_key":47329,"timestamp":"2026-08-28T18:00:00.000Z"} +{"doc_count":2896,"split_key":209630,"timestamp":"2026-08-28T18:00:00.000Z"} +{"doc_count":2754,"split_key":274069,"timestamp":"2026-08-28T18:00:00.000Z"} +{"doc_count":2745,"split_key":22295,"timestamp":"2026-08-28T18:00:00.000Z"} +{"doc_count":18276,"split_key":209334,"timestamp":"2026-08-28T19:00:00.000Z"} +{"doc_count":14267,"split_key":47329,"timestamp":"2026-08-28T19:00:00.000Z"} +{"doc_count":12675,"split_key":136557,"timestamp":"2026-08-28T19:00:00.000Z"} +{"doc_count":4183,"split_key":22295,"timestamp":"2026-08-28T19:00:00.000Z"} +{"doc_count":2349,"split_key":979,"timestamp":"2026-08-28T19:00:00.000Z"} +{"doc_count":17259,"split_key":209334,"timestamp":"2026-08-28T20:00:00.000Z"} +{"doc_count":8316,"split_key":47329,"timestamp":"2026-08-28T20:00:00.000Z"} +{"doc_count":3772,"split_key":22295,"timestamp":"2026-08-28T20:00:00.000Z"} +{"doc_count":2476,"split_key":209630,"timestamp":"2026-08-28T20:00:00.000Z"} +{"doc_count":1887,"split_key":274069,"timestamp":"2026-08-28T20:00:00.000Z"} +{"doc_count":4369,"split_key":22295,"timestamp":"2026-08-28T21:00:00.000Z"} +{"doc_count":1378,"split_key":36352,"timestamp":"2026-08-28T21:00:00.000Z"} +{"doc_count":1224,"split_key":209630,"timestamp":"2026-08-28T21:00:00.000Z"} +{"doc_count":1199,"split_key":274069,"timestamp":"2026-08-28T21:00:00.000Z"} +{"doc_count":1074,"split_key":396982,"timestamp":"2026-08-28T21:00:00.000Z"} +{"doc_count":3896,"split_key":22295,"timestamp":"2026-08-28T22:00:00.000Z"} +{"doc_count":1181,"split_key":36352,"timestamp":"2026-08-28T22:00:00.000Z"} +{"doc_count":1021,"split_key":10439,"timestamp":"2026-08-28T22:00:00.000Z"} +{"doc_count":832,"split_key":396982,"timestamp":"2026-08-28T22:00:00.000Z"} +{"doc_count":555,"split_key":135377,"timestamp":"2026-08-28T22:00:00.000Z"} +{"doc_count":4032,"split_key":202281,"timestamp":"2026-08-28T23:00:00.000Z"} +{"doc_count":3754,"split_key":22295,"timestamp":"2026-08-28T23:00:00.000Z"} +{"doc_count":2884,"split_key":209630,"timestamp":"2026-08-28T23:00:00.000Z"} +{"doc_count":2767,"split_key":274069,"timestamp":"2026-08-28T23:00:00.000Z"} +{"doc_count":1143,"split_key":36352,"timestamp":"2026-08-28T23:00:00.000Z"} +{"doc_count":5410,"split_key":202281,"timestamp":"2026-08-29T00:00:00.000Z"} +{"doc_count":3748,"split_key":22295,"timestamp":"2026-08-29T00:00:00.000Z"} +{"doc_count":1603,"split_key":13489,"timestamp":"2026-08-29T00:00:00.000Z"} +{"doc_count":1459,"split_key":199829,"timestamp":"2026-08-29T00:00:00.000Z"} +{"doc_count":1111,"split_key":36352,"timestamp":"2026-08-29T00:00:00.000Z"} +{"doc_count":4209,"split_key":22295,"timestamp":"2026-08-29T01:00:00.000Z"} +{"doc_count":2228,"split_key":209630,"timestamp":"2026-08-29T01:00:00.000Z"} +{"doc_count":1907,"split_key":274069,"timestamp":"2026-08-29T01:00:00.000Z"} +{"doc_count":1308,"split_key":209854,"timestamp":"2026-08-29T01:00:00.000Z"} +{"doc_count":1295,"split_key":36352,"timestamp":"2026-08-29T01:00:00.000Z"} +{"doc_count":3662,"split_key":22295,"timestamp":"2026-08-29T02:00:00.000Z"} +{"doc_count":1262,"split_key":209630,"timestamp":"2026-08-29T02:00:00.000Z"} +{"doc_count":1154,"split_key":274069,"timestamp":"2026-08-29T02:00:00.000Z"} +{"doc_count":1146,"split_key":36352,"timestamp":"2026-08-29T02:00:00.000Z"} +{"doc_count":789,"split_key":16509,"timestamp":"2026-08-29T02:00:00.000Z"} +{"doc_count":4694,"split_key":45903,"timestamp":"2026-08-29T03:00:00.000Z"} +{"doc_count":2836,"split_key":22295,"timestamp":"2026-08-29T03:00:00.000Z"} +{"doc_count":1900,"split_key":209334,"timestamp":"2026-08-29T03:00:00.000Z"} +{"doc_count":863,"split_key":209854,"timestamp":"2026-08-29T03:00:00.000Z"} +{"doc_count":857,"split_key":36352,"timestamp":"2026-08-29T03:00:00.000Z"} +{"doc_count":7415,"split_key":45903,"timestamp":"2026-08-29T04:00:00.000Z"} +{"doc_count":2809,"split_key":209630,"timestamp":"2026-08-29T04:00:00.000Z"} +{"doc_count":2687,"split_key":274069,"timestamp":"2026-08-29T04:00:00.000Z"} +{"doc_count":2360,"split_key":22295,"timestamp":"2026-08-29T04:00:00.000Z"} +{"doc_count":2283,"split_key":209334,"timestamp":"2026-08-29T04:00:00.000Z"} +{"doc_count":8772,"split_key":149089,"timestamp":"2026-08-29T05:00:00.000Z"} +{"doc_count":5336,"split_key":209334,"timestamp":"2026-08-29T05:00:00.000Z"} +{"doc_count":3303,"split_key":22295,"timestamp":"2026-08-29T05:00:00.000Z"} +{"doc_count":1009,"split_key":36352,"timestamp":"2026-08-29T05:00:00.000Z"} +{"doc_count":799,"split_key":396982,"timestamp":"2026-08-29T05:00:00.000Z"} +{"doc_count":23938,"split_key":149089,"timestamp":"2026-08-29T06:00:00.000Z"} +{"doc_count":9413,"split_key":396982,"timestamp":"2026-08-29T06:00:00.000Z"} +{"doc_count":3909,"split_key":22295,"timestamp":"2026-08-29T06:00:00.000Z"} +{"doc_count":3636,"split_key":209334,"timestamp":"2026-08-29T06:00:00.000Z"} +{"doc_count":1295,"split_key":274069,"timestamp":"2026-08-29T06:00:00.000Z"} +{"doc_count":18832,"split_key":48090,"timestamp":"2026-08-29T07:00:00.000Z"} +{"doc_count":15800,"split_key":149089,"timestamp":"2026-08-29T07:00:00.000Z"} +{"doc_count":8899,"split_key":209334,"timestamp":"2026-08-29T07:00:00.000Z"} +{"doc_count":3970,"split_key":22295,"timestamp":"2026-08-29T07:00:00.000Z"} +{"doc_count":2072,"split_key":209630,"timestamp":"2026-08-29T07:00:00.000Z"} +{"doc_count":10803,"split_key":48090,"timestamp":"2026-08-29T08:00:00.000Z"} +{"doc_count":8598,"split_key":209334,"timestamp":"2026-08-29T08:00:00.000Z"} +{"doc_count":3807,"split_key":22295,"timestamp":"2026-08-29T08:00:00.000Z"} +{"doc_count":1119,"split_key":36352,"timestamp":"2026-08-29T08:00:00.000Z"} +{"doc_count":720,"split_key":396982,"timestamp":"2026-08-29T08:00:00.000Z"} +{"doc_count":16205,"split_key":47329,"timestamp":"2026-08-29T09:00:00.000Z"} +{"doc_count":8643,"split_key":209334,"timestamp":"2026-08-29T09:00:00.000Z"} +{"doc_count":3065,"split_key":22295,"timestamp":"2026-08-29T09:00:00.000Z"} +{"doc_count":2722,"split_key":274069,"timestamp":"2026-08-29T09:00:00.000Z"} +{"doc_count":2637,"split_key":209630,"timestamp":"2026-08-29T09:00:00.000Z"} +{"doc_count":16074,"split_key":47329,"timestamp":"2026-08-29T10:00:00.000Z"} +{"doc_count":5334,"split_key":209334,"timestamp":"2026-08-29T10:00:00.000Z"} +{"doc_count":2643,"split_key":22295,"timestamp":"2026-08-29T10:00:00.000Z"} +{"doc_count":822,"split_key":16509,"timestamp":"2026-08-29T10:00:00.000Z"} +{"doc_count":805,"split_key":36352,"timestamp":"2026-08-29T10:00:00.000Z"} +{"doc_count":15949,"split_key":47329,"timestamp":"2026-08-29T11:00:00.000Z"} +{"doc_count":7359,"split_key":209334,"timestamp":"2026-08-29T11:00:00.000Z"} +{"doc_count":3950,"split_key":22295,"timestamp":"2026-08-29T11:00:00.000Z"} +{"doc_count":1172,"split_key":36352,"timestamp":"2026-08-29T11:00:00.000Z"} +{"doc_count":608,"split_key":198953,"timestamp":"2026-08-29T11:00:00.000Z"} +{"doc_count":15828,"split_key":265187,"timestamp":"2026-08-29T12:00:00.000Z"} +{"doc_count":15751,"split_key":47329,"timestamp":"2026-08-29T12:00:00.000Z"} +{"doc_count":8745,"split_key":209334,"timestamp":"2026-08-29T12:00:00.000Z"} +{"doc_count":3291,"split_key":22295,"timestamp":"2026-08-29T12:00:00.000Z"} +{"doc_count":2935,"split_key":274069,"timestamp":"2026-08-29T12:00:00.000Z"} +{"doc_count":81778,"split_key":265187,"timestamp":"2026-08-29T13:00:00.000Z"} +{"doc_count":10555,"split_key":209334,"timestamp":"2026-08-29T13:00:00.000Z"} +{"doc_count":3666,"split_key":22295,"timestamp":"2026-08-29T13:00:00.000Z"} +{"doc_count":1186,"split_key":396982,"timestamp":"2026-08-29T13:00:00.000Z"} +{"doc_count":1140,"split_key":36352,"timestamp":"2026-08-29T13:00:00.000Z"} +{"doc_count":38592,"split_key":265187,"timestamp":"2026-08-29T14:00:00.000Z"} +{"doc_count":8997,"split_key":209334,"timestamp":"2026-08-29T14:00:00.000Z"} +{"doc_count":8995,"split_key":47329,"timestamp":"2026-08-29T14:00:00.000Z"} +{"doc_count":4260,"split_key":199829,"timestamp":"2026-08-29T14:00:00.000Z"} +{"doc_count":2731,"split_key":22295,"timestamp":"2026-08-29T14:00:00.000Z"} +{"doc_count":77266,"split_key":265187,"timestamp":"2026-08-29T15:00:00.000Z"} +{"doc_count":19958,"split_key":209334,"timestamp":"2026-08-29T15:00:00.000Z"} +{"doc_count":15859,"split_key":47329,"timestamp":"2026-08-29T15:00:00.000Z"} +{"doc_count":3568,"split_key":22295,"timestamp":"2026-08-29T15:00:00.000Z"} +{"doc_count":1934,"split_key":63949,"timestamp":"2026-08-29T15:00:00.000Z"} +{"doc_count":81786,"split_key":265187,"timestamp":"2026-08-29T16:00:00.000Z"} +{"doc_count":15872,"split_key":47329,"timestamp":"2026-08-29T16:00:00.000Z"} +{"doc_count":6693,"split_key":209334,"timestamp":"2026-08-29T16:00:00.000Z"} +{"doc_count":4055,"split_key":22295,"timestamp":"2026-08-29T16:00:00.000Z"} +{"doc_count":2854,"split_key":49581,"timestamp":"2026-08-29T16:00:00.000Z"} +{"doc_count":81848,"split_key":265187,"timestamp":"2026-08-29T17:00:00.000Z"} +{"doc_count":23979,"split_key":135967,"timestamp":"2026-08-29T17:00:00.000Z"} +{"doc_count":14238,"split_key":209334,"timestamp":"2026-08-29T17:00:00.000Z"} +{"doc_count":6757,"split_key":47329,"timestamp":"2026-08-29T17:00:00.000Z"} +{"doc_count":3136,"split_key":22295,"timestamp":"2026-08-29T17:00:00.000Z"} +{"doc_count":81939,"split_key":265187,"timestamp":"2026-08-29T18:00:00.000Z"} +{"doc_count":23922,"split_key":135967,"timestamp":"2026-08-29T18:00:00.000Z"} +{"doc_count":15479,"split_key":209334,"timestamp":"2026-08-29T18:00:00.000Z"} +{"doc_count":4134,"split_key":22295,"timestamp":"2026-08-29T18:00:00.000Z"} +{"doc_count":3899,"split_key":47329,"timestamp":"2026-08-29T18:00:00.000Z"} +{"doc_count":81750,"split_key":265187,"timestamp":"2026-08-29T19:00:00.000Z"} +{"doc_count":23128,"split_key":135967,"timestamp":"2026-08-29T19:00:00.000Z"} +{"doc_count":21437,"split_key":209334,"timestamp":"2026-08-29T19:00:00.000Z"} +{"doc_count":3235,"split_key":22295,"timestamp":"2026-08-29T19:00:00.000Z"} +{"doc_count":2018,"split_key":209630,"timestamp":"2026-08-29T19:00:00.000Z"} +{"doc_count":57667,"split_key":265187,"timestamp":"2026-08-29T20:00:00.000Z"} +{"doc_count":23285,"split_key":135967,"timestamp":"2026-08-29T20:00:00.000Z"} +{"doc_count":15810,"split_key":209334,"timestamp":"2026-08-29T20:00:00.000Z"} +{"doc_count":3485,"split_key":22295,"timestamp":"2026-08-29T20:00:00.000Z"} +{"doc_count":1498,"split_key":29066,"timestamp":"2026-08-29T20:00:00.000Z"} +{"doc_count":3680,"split_key":22295,"timestamp":"2026-08-29T21:00:00.000Z"} +{"doc_count":1898,"split_key":214693,"timestamp":"2026-08-29T21:00:00.000Z"} +{"doc_count":1614,"split_key":209334,"timestamp":"2026-08-29T21:00:00.000Z"} +{"doc_count":1293,"split_key":29066,"timestamp":"2026-08-29T21:00:00.000Z"} +{"doc_count":1192,"split_key":396982,"timestamp":"2026-08-29T21:00:00.000Z"} +{"doc_count":13341,"split_key":47329,"timestamp":"2026-08-29T22:00:00.000Z"} +{"doc_count":3885,"split_key":22295,"timestamp":"2026-08-29T22:00:00.000Z"} +{"doc_count":2888,"split_key":209630,"timestamp":"2026-08-29T22:00:00.000Z"} +{"doc_count":2854,"split_key":274069,"timestamp":"2026-08-29T22:00:00.000Z"} +{"doc_count":1176,"split_key":36352,"timestamp":"2026-08-29T22:00:00.000Z"} +{"doc_count":10544,"split_key":47329,"timestamp":"2026-08-29T23:00:00.000Z"} +{"doc_count":3260,"split_key":22295,"timestamp":"2026-08-29T23:00:00.000Z"} +{"doc_count":992,"split_key":36352,"timestamp":"2026-08-29T23:00:00.000Z"} +{"doc_count":609,"split_key":37963,"timestamp":"2026-08-29T23:00:00.000Z"} +{"doc_count":584,"split_key":29066,"timestamp":"2026-08-29T23:00:00.000Z"} +{"doc_count":10725,"split_key":47329,"timestamp":"2026-08-30T00:00:00.000Z"} +{"doc_count":8374,"split_key":396982,"timestamp":"2026-08-30T00:00:00.000Z"} +{"doc_count":4350,"split_key":22295,"timestamp":"2026-08-30T00:00:00.000Z"} +{"doc_count":2106,"split_key":209630,"timestamp":"2026-08-30T00:00:00.000Z"} +{"doc_count":2096,"split_key":274069,"timestamp":"2026-08-30T00:00:00.000Z"} +{"doc_count":11615,"split_key":47329,"timestamp":"2026-08-30T01:00:00.000Z"} +{"doc_count":10163,"split_key":396982,"timestamp":"2026-08-30T01:00:00.000Z"} +{"doc_count":2935,"split_key":139325,"timestamp":"2026-08-30T01:00:00.000Z"} +{"doc_count":2908,"split_key":22295,"timestamp":"2026-08-30T01:00:00.000Z"} +{"doc_count":1036,"split_key":274069,"timestamp":"2026-08-30T01:00:00.000Z"} +{"doc_count":16140,"split_key":47329,"timestamp":"2026-08-30T02:00:00.000Z"} +{"doc_count":10815,"split_key":396982,"timestamp":"2026-08-30T02:00:00.000Z"} +{"doc_count":3941,"split_key":22295,"timestamp":"2026-08-30T02:00:00.000Z"} +{"doc_count":1191,"split_key":36352,"timestamp":"2026-08-30T02:00:00.000Z"} +{"doc_count":765,"split_key":16509,"timestamp":"2026-08-30T02:00:00.000Z"} +{"doc_count":16439,"split_key":47329,"timestamp":"2026-08-30T03:00:00.000Z"} +{"doc_count":12692,"split_key":396982,"timestamp":"2026-08-30T03:00:00.000Z"} +{"doc_count":3716,"split_key":22295,"timestamp":"2026-08-30T03:00:00.000Z"} +{"doc_count":3002,"split_key":209630,"timestamp":"2026-08-30T03:00:00.000Z"} +{"doc_count":2887,"split_key":274069,"timestamp":"2026-08-30T03:00:00.000Z"} +{"doc_count":16306,"split_key":47329,"timestamp":"2026-08-30T04:00:00.000Z"} +{"doc_count":3863,"split_key":22295,"timestamp":"2026-08-30T04:00:00.000Z"} +{"doc_count":3085,"split_key":396982,"timestamp":"2026-08-30T04:00:00.000Z"} +{"doc_count":2332,"split_key":209334,"timestamp":"2026-08-30T04:00:00.000Z"} +{"doc_count":1139,"split_key":36352,"timestamp":"2026-08-30T04:00:00.000Z"} +{"doc_count":12201,"split_key":47329,"timestamp":"2026-08-30T05:00:00.000Z"} +{"doc_count":5167,"split_key":209334,"timestamp":"2026-08-30T05:00:00.000Z"} +{"doc_count":4963,"split_key":396982,"timestamp":"2026-08-30T05:00:00.000Z"} +{"doc_count":2063,"split_key":209630,"timestamp":"2026-08-30T05:00:00.000Z"} +{"doc_count":2036,"split_key":274069,"timestamp":"2026-08-30T05:00:00.000Z"} +{"doc_count":4077,"split_key":209334,"timestamp":"2026-08-30T06:00:00.000Z"} +{"doc_count":3356,"split_key":22295,"timestamp":"2026-08-30T06:00:00.000Z"} +{"doc_count":2238,"split_key":396982,"timestamp":"2026-08-30T06:00:00.000Z"} +{"doc_count":998,"split_key":209630,"timestamp":"2026-08-30T06:00:00.000Z"} +{"doc_count":992,"split_key":274069,"timestamp":"2026-08-30T06:00:00.000Z"} +{"doc_count":8780,"split_key":209334,"timestamp":"2026-08-30T07:00:00.000Z"} +{"doc_count":4039,"split_key":22295,"timestamp":"2026-08-30T07:00:00.000Z"} +{"doc_count":3317,"split_key":396982,"timestamp":"2026-08-30T07:00:00.000Z"} +{"doc_count":712,"split_key":37963,"timestamp":"2026-08-30T07:00:00.000Z"} +{"doc_count":672,"split_key":201401,"timestamp":"2026-08-30T07:00:00.000Z"} +{"doc_count":8519,"split_key":209334,"timestamp":"2026-08-30T08:00:00.000Z"} +{"doc_count":5250,"split_key":47329,"timestamp":"2026-08-30T08:00:00.000Z"} +{"doc_count":3986,"split_key":22295,"timestamp":"2026-08-30T08:00:00.000Z"} +{"doc_count":2948,"split_key":209630,"timestamp":"2026-08-30T08:00:00.000Z"} +{"doc_count":2903,"split_key":274069,"timestamp":"2026-08-30T08:00:00.000Z"} +{"doc_count":16343,"split_key":47329,"timestamp":"2026-08-30T09:00:00.000Z"} +{"doc_count":7930,"split_key":209334,"timestamp":"2026-08-30T09:00:00.000Z"} +{"doc_count":3960,"split_key":22295,"timestamp":"2026-08-30T09:00:00.000Z"} +{"doc_count":3303,"split_key":396982,"timestamp":"2026-08-30T09:00:00.000Z"} +{"doc_count":1078,"split_key":37963,"timestamp":"2026-08-30T09:00:00.000Z"} +{"doc_count":16521,"split_key":47329,"timestamp":"2026-08-30T10:00:00.000Z"} +{"doc_count":5971,"split_key":396982,"timestamp":"2026-08-30T10:00:00.000Z"} +{"doc_count":5503,"split_key":209334,"timestamp":"2026-08-30T10:00:00.000Z"} +{"doc_count":4204,"split_key":22295,"timestamp":"2026-08-30T10:00:00.000Z"} +{"doc_count":2164,"split_key":209630,"timestamp":"2026-08-30T10:00:00.000Z"} +{"doc_count":16333,"split_key":47329,"timestamp":"2026-08-30T11:00:00.000Z"} +{"doc_count":7259,"split_key":209334,"timestamp":"2026-08-30T11:00:00.000Z"} +{"doc_count":3945,"split_key":48925,"timestamp":"2026-08-30T11:00:00.000Z"} +{"doc_count":3912,"split_key":22295,"timestamp":"2026-08-30T11:00:00.000Z"} +{"doc_count":2525,"split_key":396982,"timestamp":"2026-08-30T11:00:00.000Z"} +{"doc_count":13052,"split_key":47329,"timestamp":"2026-08-30T12:00:00.000Z"} +{"doc_count":7539,"split_key":209334,"timestamp":"2026-08-30T12:00:00.000Z"} +{"doc_count":4091,"split_key":22295,"timestamp":"2026-08-30T12:00:00.000Z"} +{"doc_count":3089,"split_key":396982,"timestamp":"2026-08-30T12:00:00.000Z"} +{"doc_count":2107,"split_key":37963,"timestamp":"2026-08-30T12:00:00.000Z"} +{"doc_count":11947,"split_key":47329,"timestamp":"2026-08-30T13:00:00.000Z"} +{"doc_count":8700,"split_key":209334,"timestamp":"2026-08-30T13:00:00.000Z"} +{"doc_count":3941,"split_key":22295,"timestamp":"2026-08-30T13:00:00.000Z"} +{"doc_count":3016,"split_key":209630,"timestamp":"2026-08-30T13:00:00.000Z"} +{"doc_count":2879,"split_key":274069,"timestamp":"2026-08-30T13:00:00.000Z"} +{"doc_count":11505,"split_key":209334,"timestamp":"2026-08-30T14:00:00.000Z"} +{"doc_count":4000,"split_key":22295,"timestamp":"2026-08-30T14:00:00.000Z"} +{"doc_count":2352,"split_key":396982,"timestamp":"2026-08-30T14:00:00.000Z"} +{"doc_count":2337,"split_key":47329,"timestamp":"2026-08-30T14:00:00.000Z"} +{"doc_count":1029,"split_key":10439,"timestamp":"2026-08-30T14:00:00.000Z"} +{"doc_count":20759,"split_key":209334,"timestamp":"2026-08-30T15:00:00.000Z"} +{"doc_count":2188,"split_key":274069,"timestamp":"2026-08-30T15:00:00.000Z"} +{"doc_count":1905,"split_key":209630,"timestamp":"2026-08-30T15:00:00.000Z"} +{"doc_count":1514,"split_key":22295,"timestamp":"2026-08-30T15:00:00.000Z"} +{"doc_count":1467,"split_key":396982,"timestamp":"2026-08-30T15:00:00.000Z"} +{"doc_count":6626,"split_key":209334,"timestamp":"2026-08-30T16:00:00.000Z"} +{"doc_count":3502,"split_key":200750,"timestamp":"2026-08-30T16:00:00.000Z"} +{"doc_count":2513,"split_key":396982,"timestamp":"2026-08-30T16:00:00.000Z"} +{"doc_count":1712,"split_key":48090,"timestamp":"2026-08-30T16:00:00.000Z"} +{"doc_count":1100,"split_key":209630,"timestamp":"2026-08-30T16:00:00.000Z"} +{"doc_count":14803,"split_key":209334,"timestamp":"2026-08-30T17:00:00.000Z"} +{"doc_count":4926,"split_key":200750,"timestamp":"2026-08-30T17:00:00.000Z"} +{"doc_count":2001,"split_key":396982,"timestamp":"2026-08-30T17:00:00.000Z"} +{"doc_count":928,"split_key":22295,"timestamp":"2026-08-30T17:00:00.000Z"} +{"doc_count":869,"split_key":51396,"timestamp":"2026-08-30T17:00:00.000Z"} +{"doc_count":14734,"split_key":209334,"timestamp":"2026-08-30T18:00:00.000Z"} +{"doc_count":4940,"split_key":200750,"timestamp":"2026-08-30T18:00:00.000Z"} +{"doc_count":2923,"split_key":209630,"timestamp":"2026-08-30T18:00:00.000Z"} +{"doc_count":2847,"split_key":274069,"timestamp":"2026-08-30T18:00:00.000Z"} +{"doc_count":1226,"split_key":396982,"timestamp":"2026-08-30T18:00:00.000Z"} +{"doc_count":24179,"split_key":209334,"timestamp":"2026-08-30T19:00:00.000Z"} +{"doc_count":2489,"split_key":3352,"timestamp":"2026-08-30T19:00:00.000Z"} +{"doc_count":2427,"split_key":396982,"timestamp":"2026-08-30T19:00:00.000Z"} +{"doc_count":2241,"split_key":200750,"timestamp":"2026-08-30T19:00:00.000Z"} +{"doc_count":1175,"split_key":22295,"timestamp":"2026-08-30T19:00:00.000Z"} +{"doc_count":12854,"split_key":209334,"timestamp":"2026-08-30T20:00:00.000Z"} +{"doc_count":2820,"split_key":22295,"timestamp":"2026-08-30T20:00:00.000Z"} +{"doc_count":2221,"split_key":274069,"timestamp":"2026-08-30T20:00:00.000Z"} +{"doc_count":2198,"split_key":209630,"timestamp":"2026-08-30T20:00:00.000Z"} +{"doc_count":2105,"split_key":396982,"timestamp":"2026-08-30T20:00:00.000Z"} +{"doc_count":5486,"split_key":209334,"timestamp":"2026-08-30T21:00:00.000Z"} +{"doc_count":4222,"split_key":22295,"timestamp":"2026-08-30T21:00:00.000Z"} +{"doc_count":3708,"split_key":396982,"timestamp":"2026-08-30T21:00:00.000Z"} +{"doc_count":964,"split_key":209630,"timestamp":"2026-08-30T21:00:00.000Z"} +{"doc_count":950,"split_key":274069,"timestamp":"2026-08-30T21:00:00.000Z"} +{"doc_count":3673,"split_key":396982,"timestamp":"2026-08-30T22:00:00.000Z"} +{"doc_count":3382,"split_key":22295,"timestamp":"2026-08-30T22:00:00.000Z"} +{"doc_count":719,"split_key":36352,"timestamp":"2026-08-30T22:00:00.000Z"} +{"doc_count":704,"split_key":37963,"timestamp":"2026-08-30T22:00:00.000Z"} +{"doc_count":357,"split_key":201814,"timestamp":"2026-08-30T22:00:00.000Z"} +{"doc_count":3378,"split_key":22295,"timestamp":"2026-08-30T23:00:00.000Z"} +{"doc_count":2966,"split_key":274069,"timestamp":"2026-08-30T23:00:00.000Z"} +{"doc_count":2919,"split_key":209630,"timestamp":"2026-08-30T23:00:00.000Z"} +{"doc_count":2562,"split_key":396982,"timestamp":"2026-08-30T23:00:00.000Z"} +{"doc_count":677,"split_key":36352,"timestamp":"2026-08-30T23:00:00.000Z"} +{"doc_count":10244,"split_key":396982,"timestamp":"2026-08-31T00:00:00.000Z"} +{"doc_count":2575,"split_key":22295,"timestamp":"2026-08-31T00:00:00.000Z"} +{"doc_count":579,"split_key":16509,"timestamp":"2026-08-31T00:00:00.000Z"} +{"doc_count":558,"split_key":36352,"timestamp":"2026-08-31T00:00:00.000Z"} +{"doc_count":538,"split_key":37963,"timestamp":"2026-08-31T00:00:00.000Z"} +{"doc_count":14424,"split_key":14061,"timestamp":"2026-08-31T01:00:00.000Z"} +{"doc_count":2751,"split_key":274069,"timestamp":"2026-08-31T01:00:00.000Z"} +{"doc_count":2645,"split_key":209630,"timestamp":"2026-08-31T01:00:00.000Z"} +{"doc_count":2644,"split_key":396982,"timestamp":"2026-08-31T01:00:00.000Z"} +{"doc_count":2471,"split_key":22295,"timestamp":"2026-08-31T01:00:00.000Z"} +{"doc_count":50621,"split_key":14061,"timestamp":"2026-08-31T02:00:00.000Z"} +{"doc_count":5343,"split_key":396982,"timestamp":"2026-08-31T02:00:00.000Z"} +{"doc_count":2822,"split_key":22295,"timestamp":"2026-08-31T02:00:00.000Z"} +{"doc_count":600,"split_key":16509,"timestamp":"2026-08-31T02:00:00.000Z"} +{"doc_count":567,"split_key":37963,"timestamp":"2026-08-31T02:00:00.000Z"} +{"doc_count":17866,"split_key":14061,"timestamp":"2026-08-31T03:00:00.000Z"} +{"doc_count":2490,"split_key":22295,"timestamp":"2026-08-31T03:00:00.000Z"} +{"doc_count":1552,"split_key":396982,"timestamp":"2026-08-31T03:00:00.000Z"} +{"doc_count":954,"split_key":209334,"timestamp":"2026-08-31T03:00:00.000Z"} +{"doc_count":547,"split_key":37963,"timestamp":"2026-08-31T03:00:00.000Z"} +{"doc_count":2939,"split_key":209630,"timestamp":"2026-08-31T04:00:00.000Z"} +{"doc_count":2608,"split_key":274069,"timestamp":"2026-08-31T04:00:00.000Z"} +{"doc_count":2144,"split_key":396982,"timestamp":"2026-08-31T04:00:00.000Z"} +{"doc_count":1968,"split_key":209334,"timestamp":"2026-08-31T04:00:00.000Z"} +{"doc_count":1794,"split_key":22295,"timestamp":"2026-08-31T04:00:00.000Z"} +{"doc_count":3886,"split_key":209334,"timestamp":"2026-08-31T05:00:00.000Z"} +{"doc_count":2263,"split_key":22295,"timestamp":"2026-08-31T05:00:00.000Z"} +{"doc_count":1075,"split_key":396982,"timestamp":"2026-08-31T05:00:00.000Z"} +{"doc_count":744,"split_key":16509,"timestamp":"2026-08-31T05:00:00.000Z"} +{"doc_count":541,"split_key":37963,"timestamp":"2026-08-31T05:00:00.000Z"} +{"doc_count":5103,"split_key":209334,"timestamp":"2026-08-31T06:00:00.000Z"} +{"doc_count":2938,"split_key":209630,"timestamp":"2026-08-31T06:00:00.000Z"} +{"doc_count":2766,"split_key":274069,"timestamp":"2026-08-31T06:00:00.000Z"} +{"doc_count":2614,"split_key":22295,"timestamp":"2026-08-31T06:00:00.000Z"} +{"doc_count":1577,"split_key":396982,"timestamp":"2026-08-31T06:00:00.000Z"} +{"doc_count":9149,"split_key":209334,"timestamp":"2026-08-31T07:00:00.000Z"} +{"doc_count":2842,"split_key":22295,"timestamp":"2026-08-31T07:00:00.000Z"} +{"doc_count":2201,"split_key":396982,"timestamp":"2026-08-31T07:00:00.000Z"} +{"doc_count":528,"split_key":201401,"timestamp":"2026-08-31T07:00:00.000Z"} +{"doc_count":475,"split_key":37963,"timestamp":"2026-08-31T07:00:00.000Z"} +{"doc_count":8575,"split_key":209334,"timestamp":"2026-08-31T08:00:00.000Z"} +{"doc_count":2226,"split_key":22295,"timestamp":"2026-08-31T08:00:00.000Z"} +{"doc_count":2089,"split_key":396982,"timestamp":"2026-08-31T08:00:00.000Z"} +{"doc_count":1234,"split_key":274069,"timestamp":"2026-08-31T08:00:00.000Z"} +{"doc_count":1198,"split_key":209630,"timestamp":"2026-08-31T08:00:00.000Z"} +{"doc_count":4472,"split_key":13335,"timestamp":"2026-08-31T09:00:00.000Z"} +{"doc_count":4133,"split_key":209334,"timestamp":"2026-08-31T09:00:00.000Z"} +{"doc_count":2016,"split_key":209630,"timestamp":"2026-08-31T09:00:00.000Z"} +{"doc_count":1641,"split_key":274069,"timestamp":"2026-08-31T09:00:00.000Z"} +{"doc_count":1627,"split_key":22295,"timestamp":"2026-08-31T09:00:00.000Z"} +{"doc_count":9990,"split_key":209334,"timestamp":"2026-08-31T10:00:00.000Z"} +{"doc_count":6940,"split_key":13335,"timestamp":"2026-08-31T10:00:00.000Z"} +{"doc_count":1369,"split_key":22295,"timestamp":"2026-08-31T10:00:00.000Z"} +{"doc_count":1312,"split_key":16276,"timestamp":"2026-08-31T10:00:00.000Z"} +{"doc_count":613,"split_key":201401,"timestamp":"2026-08-31T10:00:00.000Z"} |