From e93e7f67d4f70177c3ab5a34e8cc5b24fa2dde6d Mon Sep 17 00:00:00 2001 From: hrbrmstr Date: Mon, 31 Aug 2026 07:56:38 -0400 Subject: add: bph report iocs --- kevlar/2026-08-31/honeylabs/events-AS210644.ndjson | 44 ++++++++++++++++++++++ 1 file changed, 44 insertions(+) create mode 100644 kevlar/2026-08-31/honeylabs/events-AS210644.ndjson (limited to 'kevlar/2026-08-31/honeylabs/events-AS210644.ndjson') diff --git a/kevlar/2026-08-31/honeylabs/events-AS210644.ndjson b/kevlar/2026-08-31/honeylabs/events-AS210644.ndjson new file mode 100644 index 0000000..b9ce07c --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS210644.ndjson @@ -0,0 +1,44 @@ +{"timestamp": "2026-08-27T20:36:08", "event_id": "99eb9f4b-e854-4b81-bf3b-b539d4718e85", "source_ip": "217.144.190.138", "source_port": 37966, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 6363, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36", "url_path": "/favicon.ico", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":6363\",\"user-agent\":\"Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 112000000, "source_bytes": 238, "dest_bytes": 80, "network_bytes": 318, "event_summary": ""} +{"timestamp": "2026-08-27T20:36:08", "event_id": "74d246ba-7d1f-4843-b3a0-6e3784a7ee58", "source_ip": "217.144.190.138", "source_port": 37950, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 6363, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":6363\",\"user-agent\":\"Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 227, "dest_bytes": 80, "network_bytes": 307, "event_summary": ""} +{"timestamp": "2026-08-27T20:35:09", "event_id": "fe1a2ae3-da08-4ed9-994b-29c56ab18489", "source_ip": "217.144.190.138", "source_port": 48222, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 6363, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":6363\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 210, "dest_bytes": 80, "network_bytes": 290, "event_summary": ""} +{"timestamp": "2026-08-27T18:50:16", "event_id": "c5dd8381-ef5e-4346-97da-e7eb0b72c21f", "source_ip": "217.144.190.138", "source_port": 55096, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8999, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36", "url_path": "/favicon.ico", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8999\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 105000000, "source_bytes": 249, "dest_bytes": 80, "network_bytes": 329, "event_summary": ""} +{"timestamp": "2026-08-27T18:50:16", "event_id": "972705bf-20f1-4583-8020-29be323a2f62", "source_ip": "217.144.190.138", "source_port": 55084, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8999, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8999\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 102000000, "source_bytes": 238, "dest_bytes": 80, "network_bytes": 318, "event_summary": ""} +{"timestamp": "2026-08-27T18:49:23", "event_id": "d22753a5-4f1b-4cc5-a27d-c76fc27ec431", "source_ip": "217.144.190.138", "source_port": 44554, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8999, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":8999\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 210, "dest_bytes": 80, "network_bytes": 290, "event_summary": ""} +{"timestamp": "2026-08-27T18:31:31", "event_id": "e7fd6a75-2478-4831-9192-29290da36304", "source_ip": "217.144.190.138", "source_port": 44876, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8999, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0", "url_path": "/favicon.ico", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8999\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 198000000, "source_bytes": 213, "dest_bytes": 80, "network_bytes": 293, "event_summary": ""} +{"timestamp": "2026-08-27T18:31:30", "event_id": "f785b8ca-9844-423d-bde3-4baf90ee0a41", "source_ip": "217.144.190.138", "source_port": 44870, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8999, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8999\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 200000000, "source_bytes": 202, "dest_bytes": 80, "network_bytes": 282, "event_summary": ""} +{"timestamp": "2026-08-27T18:30:43", "event_id": "32cf3709-d55b-4827-81f7-a93e5a995c17", "source_ip": "217.144.190.138", "source_port": 36804, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8999, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":8999\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 209, "dest_bytes": 80, "network_bytes": 289, "event_summary": ""} +{"timestamp": "2026-08-27T15:11:50", "event_id": "af7af21b-2175-43f3-b8b1-04e7a5f0e077", "source_ip": "217.144.190.138", "source_port": 38514, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8989, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (CentOS; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0", "url_path": "/favicon.ico", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8989\",\"user-agent\":\"Mozilla/5.0 (CentOS; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 197000000, "source_bytes": 206, "dest_bytes": 80, "network_bytes": 286, "event_summary": ""} +{"timestamp": "2026-08-27T15:11:49", "event_id": "5ffec258-ad81-4e59-8e54-05642a3b9b66", "source_ip": "217.144.190.138", "source_port": 38496, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8989, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (CentOS; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8989\",\"user-agent\":\"Mozilla/5.0 (CentOS; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 202000000, "source_bytes": 195, "dest_bytes": 80, "network_bytes": 275, "event_summary": ""} +{"timestamp": "2026-08-27T15:10:55", "event_id": "d296eb7c-61ce-4814-92fb-b249414a914e", "source_ip": "217.144.190.138", "source_port": 54030, "source_domain": "", "country_code": "DE", "country_name": "Germany", "city_name": "Frankfurt am Main", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8989, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":8989\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 209, "dest_bytes": 80, "network_bytes": 289, "event_summary": ""} +{"timestamp": "2026-08-28T22:22:51", "event_id": "eaeb173c-27e1-4e77-95b0-a3933928b498", "source_ip": "147.45.71.214", "source_port": 49820, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8080, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36", "url_path": "/favicon.ico", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8080\",\"user-agent\":\"Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 202000000, "source_bytes": 233, "dest_bytes": 78, "network_bytes": 311, "event_summary": ""} +{"timestamp": "2026-08-28T22:22:50", "event_id": "dbcfbf12-17b2-4bc3-8410-9c03a475c020", "source_ip": "147.45.71.214", "source_port": 49804, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8080, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8080\",\"user-agent\":\"Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 236000000, "source_bytes": 222, "dest_bytes": 78, "network_bytes": 300, "event_summary": ""} +{"timestamp": "2026-08-28T22:20:13", "event_id": "dfb170dd-5387-4201-9c64-292704031b23", "source_ip": "147.45.71.214", "source_port": 57450, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8080, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":8080\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 209, "dest_bytes": 78, "network_bytes": 287, "event_summary": ""} +{"timestamp": "2026-08-28T20:38:07", "event_id": "eb9f92d3-ef6b-40b2-a719-e7048422ab2b", "source_ip": "147.45.71.214", "source_port": 34778, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8081, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.6.16", "url_path": "/favicon.ico", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8081\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.6.16\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 211000000, "source_bytes": 252, "dest_bytes": 78, "network_bytes": 330, "event_summary": ""} +{"timestamp": "2026-08-28T20:38:06", "event_id": "d458170d-3f2a-4c80-a842-11e61fb9a269", "source_ip": "147.45.71.214", "source_port": 34758, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8081, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.6.16", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8081\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.6.16\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 203000000, "source_bytes": 241, "dest_bytes": 78, "network_bytes": 319, "event_summary": ""} +{"timestamp": "2026-08-28T20:36:52", "event_id": "1ba0ed2b-312f-4af5-adbb-1e5409713984", "source_ip": "147.45.71.214", "source_port": 50546, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8081, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":8081\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 209, "dest_bytes": 78, "network_bytes": 287, "event_summary": ""} +{"timestamp": "2026-08-28T20:15:36", "event_id": "9522a6f4-39ac-4d1e-9d04-4cdcdf6d31d3", "source_ip": "147.45.71.214", "source_port": 33712, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8090, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; rv:125.0) Gecko/20100101 Firefox/125.0", "url_path": "/favicon.ico", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8090\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; rv:125.0) Gecko/20100101 Firefox/125.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 206000000, "source_bytes": 201, "dest_bytes": 78, "network_bytes": 279, "event_summary": ""} +{"timestamp": "2026-08-28T20:15:34", "event_id": "68ef2598-2a05-4b89-bcbc-a917834ea939", "source_ip": "147.45.71.214", "source_port": 33694, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8090, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; rv:125.0) Gecko/20100101 Firefox/125.0", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8090\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; rv:125.0) Gecko/20100101 Firefox/125.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 213000000, "source_bytes": 190, "dest_bytes": 78, "network_bytes": 268, "event_summary": ""} +{"timestamp": "2026-08-28T20:14:49", "event_id": "c81d2387-96f2-497d-a1e4-e47901c27cb9", "source_ip": "147.45.71.214", "source_port": 33586, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8090, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":8090\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 209, "dest_bytes": 78, "network_bytes": 287, "event_summary": ""} +{"timestamp": "2026-08-28T14:20:32", "event_id": "dab653d9-a1e2-46c2-842f-b6cf6e1f7636", "source_ip": "176.124.203.177", "source_port": 44280, "source_domain": "", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Amsterdam", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 18190, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 3, "event_duration": 404000000, "source_bytes": 31, "dest_bytes": 45, "network_bytes": 76, "event_summary": "\u0000\u0000\u0000\u0001\u0000"} +{"timestamp": "2026-08-29T08:27:41", "event_id": "452ac326-661c-45c8-99e6-d91d3c3e1f54", "source_ip": "147.45.71.214", "source_port": 52038, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8080, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/v1/getinfo", "url_domain": "", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":8080\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1909h2_9dc949149365_97f8aa674fd9", "tls_client_ja3": "7c1e207beb00684bbbe144f1b0abe1d5", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 219, "dest_bytes": 78, "network_bytes": 297, "event_summary": ""} +{"timestamp": "2026-08-29T08:24:45", "event_id": "8b6bc71a-24f2-46b7-a361-ed8a19b2d3fe", "source_ip": "147.45.71.214", "source_port": 42660, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8080, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/v1/getinfo", "url_domain": "", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":8080\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1909h2_9dc949149365_97f8aa674fd9", "tls_client_ja3": "7c1e207beb00684bbbe144f1b0abe1d5", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 219, "dest_bytes": 78, "network_bytes": 297, "event_summary": ""} +{"timestamp": "2026-08-29T07:39:10", "event_id": "4fccdda3-2b6e-4dca-8818-7081b438ddfc", "source_ip": "147.45.71.214", "source_port": 52300, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8080, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/v1/getinfo", "url_domain": "", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":8080\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1909h2_9dc949149365_97f8aa674fd9", "tls_client_ja3": "7c1e207beb00684bbbe144f1b0abe1d5", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 220, "dest_bytes": 78, "network_bytes": 298, "event_summary": ""} +{"timestamp": "2026-08-29T06:04:48", "event_id": "52081089-bf67-40d3-a78f-16e09d7cb014", "source_ip": "147.45.71.214", "source_port": 59232, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8080, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.5.18", "url_path": "/favicon.ico", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8080\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.5.18\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 106000000, "source_bytes": 253, "dest_bytes": 78, "network_bytes": 331, "event_summary": ""} +{"timestamp": "2026-08-29T06:04:48", "event_id": "e09ac5a8-7a4f-486d-b3ca-f7d87d3c873e", "source_ip": "147.45.71.214", "source_port": 39386, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8080, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.5.18", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8080\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.5.18\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 106000000, "source_bytes": 242, "dest_bytes": 78, "network_bytes": 320, "event_summary": ""} +{"timestamp": "2026-08-29T06:03:27", "event_id": "9047e065-df4f-4b23-9065-a1e703204410", "source_ip": "147.45.71.214", "source_port": 58140, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8080, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":8080\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 210, "dest_bytes": 78, "network_bytes": 288, "event_summary": ""} +{"timestamp": "2026-08-29T04:07:32", "event_id": "1cace572-a2ff-44c9-acb0-2bf8961c7d17", "source_ip": "147.45.71.214", "source_port": 57844, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8989, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.18", "url_path": "/favicon.ico", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8989\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.18\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 124000000, "source_bytes": 254, "dest_bytes": 78, "network_bytes": 332, "event_summary": ""} +{"timestamp": "2026-08-29T04:07:32", "event_id": "a08bd56e-59af-42a6-a118-3a85964fb3a1", "source_ip": "147.45.71.214", "source_port": 57834, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8989, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.18", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8989\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.18\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 134000000, "source_bytes": 243, "dest_bytes": 78, "network_bytes": 321, "event_summary": ""} +{"timestamp": "2026-08-29T04:07:14", "event_id": "d05badbf-645f-401d-bfcc-8b704e383b14", "source_ip": "147.45.71.214", "source_port": 55904, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8989, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":8989\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 211, "dest_bytes": 78, "network_bytes": 289, "event_summary": ""} +{"timestamp": "2026-08-29T03:32:41", "event_id": "fbd5ddec-a5c3-4b3d-afec-758a257d7a3a", "source_ip": "147.45.71.214", "source_port": 49148, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8085, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.27", "url_path": "/favicon.ico", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8085\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.27\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 202000000, "source_bytes": 250, "dest_bytes": 78, "network_bytes": 328, "event_summary": ""} +{"timestamp": "2026-08-29T03:32:40", "event_id": "bd3d5954-de6e-46d3-baae-bd5cfb4feba3", "source_ip": "147.45.71.214", "source_port": 49132, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8085, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.27", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8085\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.27\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 201000000, "source_bytes": 239, "dest_bytes": 78, "network_bytes": 317, "event_summary": ""} +{"timestamp": "2026-08-29T03:32:00", "event_id": "78b4ade9-69f2-46b2-afd5-2722e11a7c05", "source_ip": "147.45.71.214", "source_port": 50252, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8085, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":8085\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 209, "dest_bytes": 78, "network_bytes": 287, "event_summary": ""} +{"timestamp": "2026-08-29T03:05:59", "event_id": "413cfb69-f8e4-4fb6-a6c2-45fd078b39e4", "source_ip": "147.45.71.214", "source_port": 46990, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8085, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.45", "url_path": "/favicon.ico", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8085\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.45\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 127000000, "source_bytes": 254, "dest_bytes": 78, "network_bytes": 332, "event_summary": ""} +{"timestamp": "2026-08-29T03:05:58", "event_id": "4828d7f6-e092-4791-a997-419423c95f3f", "source_ip": "147.45.71.214", "source_port": 46980, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8085, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.45", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8085\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.45\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 175000000, "source_bytes": 243, "dest_bytes": 78, "network_bytes": 321, "event_summary": ""} +{"timestamp": "2026-08-29T03:05:40", "event_id": "66c6f6eb-6fb5-458c-8667-281f2236da98", "source_ip": "147.45.71.214", "source_port": 38182, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8085, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":8085\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 211, "dest_bytes": 78, "network_bytes": 289, "event_summary": ""} +{"timestamp": "2026-08-29T02:09:01", "event_id": "da17f1bc-fb43-4c5f-b5a4-61aa8635e17d", "source_ip": "147.45.71.214", "source_port": 54992, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8999, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 14) AppleWebKit/616.19.3 (KHTML, like Gecko) Version/17.6.11 Safari/616.19.3", "url_path": "/favicon.ico", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8999\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 14) AppleWebKit/616.19.3 (KHTML, like Gecko) Version/17.6.11 Safari/616.19.3\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 208000000, "source_bytes": 248, "dest_bytes": 78, "network_bytes": 326, "event_summary": ""} +{"timestamp": "2026-08-29T02:09:00", "event_id": "0dcdd1fb-fe01-40bb-b5ba-94cdd53bc572", "source_ip": "147.45.71.214", "source_port": 54968, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8999, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 14) AppleWebKit/616.19.3 (KHTML, like Gecko) Version/17.6.11 Safari/616.19.3", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8999\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 14) AppleWebKit/616.19.3 (KHTML, like Gecko) Version/17.6.11 Safari/616.19.3\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 201000000, "source_bytes": 237, "dest_bytes": 78, "network_bytes": 315, "event_summary": ""} +{"timestamp": "2026-08-29T02:07:54", "event_id": "16138719-1b2c-411b-b647-056774048da5", "source_ip": "147.45.71.214", "source_port": 60240, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8999, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":8999\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_88d30a62b7ad", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 209, "dest_bytes": 78, "network_bytes": 287, "event_summary": ""} +{"timestamp": "2026-08-29T01:34:42", "event_id": "3172cd8e-c4e0-4436-868d-a2ec8fab8189", "source_ip": "147.45.71.214", "source_port": 57030, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8090, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36", "url_path": "/favicon.ico", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8090\",\"user-agent\":\"Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 201000000, "source_bytes": 237, "dest_bytes": 78, "network_bytes": 315, "event_summary": ""} +{"timestamp": "2026-08-29T01:34:41", "event_id": "08303f7e-da8d-4c6c-abd5-b98cc25b5fa0", "source_ip": "147.45.71.214", "source_port": 57000, "source_domain": "", "country_code": "AT", "country_name": "Austria", "city_name": "Vienna", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8090, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8090\",\"user-agent\":\"Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}", "ssh_client_hassh": "", "tls_client_ja4": "t12i130500_2d7513195f68_e51b7354d87f", "tls_client_ja3": "cba7f34191ef2379c1325641f6c6c4f4", "tls_client_version": "TLSv1.2", "tls_client_cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 201000000, "source_bytes": 226, "dest_bytes": 78, "network_bytes": 304, "event_summary": ""} +{"timestamp": "2026-08-30T20:27:15", "event_id": "c7a09daf-794e-4e6c-875f-a23aadbed443", "source_ip": "185.246.217.150", "source_port": 44276, "source_domain": "", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Amsterdam", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 2222, "network_protocol": "", "application_protocol": "ssh", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "19532158b559096b89b1a5f7d17175b2", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 139000000, "source_bytes": 1536, "dest_bytes": 15, "network_bytes": 1551, "event_summary": "SSH-2.0-libssh2_1.11.1\r\n\u0000\u0000\u0005\ufffd\u000b\u0014KI=\ufffd\rO\ufffd\ufffd\ufffdfQWHL\ufffd<\u0000\u0000\u0001hcurve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com\u0000\u0000\u0001fecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa,ssh-rsa-cert-v01@openssh.com\u0000\u0000\u0000\ufffdchacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc\u0000\u0000\u0000\ufffdchacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc\u0000\u0000\u0000\ufffdhmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96\u0000\u0000\u0000\ufffdhmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00001\ufffd\u0011Q~n\ufffd\ufffd\ufffd\u0006\ufffd"} +{"timestamp": "2026-08-30T05:00:51", "event_id": "2c1ba5cf-f75b-440c-a1eb-39192e3de713", "source_ip": "176.124.203.177", "source_port": 60706, "source_domain": "", "country_code": "NL", "country_name": "The Netherlands", "city_name": "Amsterdam", "asn_number": 210644, "asn_org": "Aeza Group LLC", "dest_port": 8443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 17_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15", "url_path": "/", "url_domain": "", "http_request_headers": "{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\":8443\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 17_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i190900_9dc949149365_e7c285222651", "tls_client_ja3": "d6828e30ab66774a91a96ae93be4ae4c", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0500_9af7e0472034", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 238, "dest_bytes": 80, "network_bytes": 318, "event_summary": ""} -- cgit v1.2.3