151.243.11.35

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 8081,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 5.1,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 25,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "54885a9ace86894f06c0464c7d4990d8b6d87065",
    "event_fingerprint": "6200042a8eedd96c47b109adc0963a36d177f604",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 8081,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "ca2a3c4432b9b2439a7791d74397a9e53181cdb7",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ],
    "behavior_alert_count": 1,
    "behavior_priority": 72
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 8888,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 5.3,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 25,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "f2dcda65c91d293e695bc36d2aad0db8bd1b9ee1",
    "event_fingerprint": "49f507c2cf48f6931b95b26ad1848f202640d676",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 8888,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "c95da89c00229903d27f41e308e4b8bd64ec47c2",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 8801,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 6.2,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 26,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "bb8fbf0f436b909039eb7814ff8598bc019ef08c",
    "event_fingerprint": "d3109d0598983dd95c3a4c5c9dc4abef915b5a14",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 8801,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "d53c870963a4e03e476d6ce86b8716d547d55511",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ],
    "behavior_alert_count": 1,
    "behavior_priority": 72
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 8800,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 6.1,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 26,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "2dccde2851452d2992e059a1743c5d03f0383a70",
    "event_fingerprint": "14fc127f6e5825ff1c1a148e1ae42725937533b6",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 8800,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "47e8897d4fdb9cae71e8ec0e6a32596e30a77238",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 8081,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 5.1,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 25,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "54885a9ace86894f06c0464c7d4990d8b6d87065",
    "event_fingerprint": "6200042a8eedd96c47b109adc0963a36d177f604",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 8081,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "ca2a3c4432b9b2439a7791d74397a9e53181cdb7",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ],
    "behavior_alert_count": 1,
    "behavior_priority": 72
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 8899,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 2.1,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 22,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "43eae3e327b9a6ab05cf71d69536886dc2d05768",
    "event_fingerprint": "d48c3d8b946d2c985bb68d9ed3546c10dcac1b16",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 8899,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "7c85c805558ac4a3e35325c07d57566de4c21fc4",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ],
    "behavior_alert_count": 1,
    "behavior_priority": 72
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 8181,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 6.2,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 26,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "bdcacf923d4126ae93d063bb5593e5136abd5350",
    "event_fingerprint": "9a52a781e557b9f140cd167860dc7e7a21b93d98",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 8181,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "f3a37817e869a0ddc5cfd615cbe67dda69512735",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 8083,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 5.4,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 25,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "f070034ea98bf43ee28c71ceb6413afdae280ef3",
    "event_fingerprint": "cd622d8500de7ed8c0adb98c335ed8e3c34439f2",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 8083,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "6fb6004c27f29d2da2d40d259990f1663e8a2232",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 7777,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 6.1,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 26,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "f384589288b8ee2829ce55cf5a4ad877285e676a",
    "event_fingerprint": "3f3bba27c5f5df8bb9692f302bad7af2e5d64b9f",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 7777,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "9f6ec4a516e72d1b86e8cdbf6c4f3142d55ca886",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ],
    "behavior_alert_count": 1,
    "behavior_priority": 84
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "well_known",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 88,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 5.9,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 25,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "10a7d7bbe423b34eb7d0b9d0327941611f097de9",
    "event_fingerprint": "aee707815b899e8cc03c185fa526535386cf2bd0",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 88,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "ede4ed244c866745f7c98fec0e72a36c46aeeb1f",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ],
    "behavior_alert_count": 2,
    "behavior_priority": 84
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 8085,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 5.8,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 25,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "a6c7dfe63e653e37c279b894ddc3d00cea4883c7",
    "event_fingerprint": "3ba3caf85b54604d2e5345c79177ef73dd4d9056",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 8085,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "3eb1124d05a28b9588e7793c5a83160cfca413f0",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ],
    "behavior_alert_count": 1,
    "behavior_priority": 84
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 8000,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 2.1,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 22,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "88fe4a7ad5165173f5e462cf689d3b4d88b5d36c",
    "event_fingerprint": "e1c0c85ec32def59777043a6640e6195bd4e1e00",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 8000,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "75c90088cf62ad35c23a8743aaefdbad7afe492d",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ],
    "behavior_alert_count": 2,
    "behavior_priority": 84
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 8090,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 6.5,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 26,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "2dfc0958186d7eba6e4c60cbf36f6993c86f14d0",
    "event_fingerprint": "f0ba12ea638bc63544a493d13ee885b92a15c40b",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 8090,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "aab3614b3fb80ba265ae72788d5c9fe042f24e45",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ],
    "behavior_alert_count": 2,
    "behavior_priority": 84
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "well_known",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 81,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 4.8,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 24,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "afca55369cc4f8de9052a71b242278b6edcd44d1",
    "event_fingerprint": "7faab3dd896c75447e800363e774f1eec5b0272f",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 81,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "e15b4c8af3b53aa135d885cba22058d302619158",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ],
    "behavior_alert_count": 2,
    "behavior_priority": 84
}

{
    "tls_ja3_hash": "6639916abfac56b9257ca216677085bc",
    "tls_sni": null,
    "bytes_in": 1457,
    "payload_entropy": 7.752764595494128,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "tls",
    "app_proto": "tls",
    "asn": 209630,
    "country": "AE",
    "dst_port": 8443,
    "risk_waf": 8,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 15,
    "risk_boost": 0,
    "risk_granularity": 2.5,
    "risk_breakdown": {
        "waf": 8,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 15
    },
    "risk_score": 14,
    "tag_count": 2,
    "anomaly_count": 0,
    "campaign_key": "af66e1b8cddf3f40d1bb548f8e857d74baf8b288",
    "event_fingerprint": "9be551faa8994f23f3e0aebc345881eca0b27fa3",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "ja3": "6639916abfac56b9257ca216677085bc",
        "payload_hash": "a06185c50953dda1bb09bc9e588d9a36",
        "path_pattern_hash": "8792d2cfdc5028123bfb8f159de8656c"
    },
    "target_context": {
        "dst_port": 8443,
        "service": "tls"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.71,
    "classification_confidence": 0.71,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "\u0016\u0003\u0001\u0005\ufffd\u0001\u0000\u0005\ufffd\u0003\u0003\u0004U\u0003m\ufffd\/N\ufffdP\ufffd\ufffdS\u0011\ufffdOwt$\ufffd2T\ufffd\ufffd1~\u011f\ufffd\ufffd\ufffd|\ufffd I\ufffdK\t\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\u01b7\u0017\uff96\ufffd$\u0524,\ufffdl~\ufffdw\ufffd\ufffdI\ufffdE$\u0000\u001a\ufffd+\ufffd\/\ufffd,\ufffd0\u0329\u0328\ufffd\t\ufffd\u0013\ufffd\n\ufffd\u0014\u0013\u0001\u0013\u0002\u0013\u0003\u0001\u0000\u0005E\u0000\u000b\u0000\u0002\u0001\u0000\ufffd\u0001\u0000\u0001\u0000\u0000\u0017\u0000\u0000\u0000\u0012\u0000\u0000\u0000",
    "event_signature": "de019340fbb6b1dcfbcbad9030890e1eba92e42f",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "tls_ja3",
        "tls_no_sni"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 8888,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 5.3,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 25,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "f2dcda65c91d293e695bc36d2aad0db8bd1b9ee1",
    "event_fingerprint": "49f507c2cf48f6931b95b26ad1848f202640d676",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 8888,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "c95da89c00229903d27f41e308e4b8bd64ec47c2",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ],
    "behavior_alert_count": 1,
    "behavior_priority": 72
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 1111,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 5.9,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 25,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "c09b9366ba15c9d97d11682c7354007b0b394a4d",
    "event_fingerprint": "463cc4a8c724f8d63a697629fd1468d142a07c01",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 1111,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "f9f0177dae7f6af6bca2bbf55dc66f78c95eded2",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ],
    "behavior_alert_count": 1,
    "behavior_priority": 72
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 8080,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 5,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 24,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "de8c40439a6148cda65c84a02ccf9959cb156646",
    "event_fingerprint": "e8d7e440ce64622852a586f753bfe5d0110d3e76",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 8080,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "96b5ab0ad3215ea1b26efe3a6e6611376f83eb19",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ],
    "behavior_alert_count": 1,
    "behavior_priority": 72
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 5000,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 3.2,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 23,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "c770872b4a3e1d09a2e3c56a1c6b374720e4c6ef",
    "event_fingerprint": "75a3a9e560bcdbdbc1d9fd15750e1b81cebffe01",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 5000,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "f4d71f8b74bc130e5621017cb52b6109c2b20007",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 8800,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 6.1,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 26,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "2dccde2851452d2992e059a1743c5d03f0383a70",
    "event_fingerprint": "14fc127f6e5825ff1c1a148e1ae42725937533b6",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 8800,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "47e8897d4fdb9cae71e8ec0e6a32596e30a77238",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 5000,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 3.2,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 23,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "c770872b4a3e1d09a2e3c56a1c6b374720e4c6ef",
    "event_fingerprint": "75a3a9e560bcdbdbc1d9fd15750e1b81cebffe01",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 5000,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "f4d71f8b74bc130e5621017cb52b6109c2b20007",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ],
    "behavior_alert_count": 1,
    "behavior_priority": 72
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "dst_port": 8000,
    "risk_waf": 32,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_granularity": 2.1,
    "risk_breakdown": {
        "waf": 32,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 22,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "88fe4a7ad5165173f5e462cf689d3b4d88b5d36c",
    "event_fingerprint": "e1c0c85ec32def59777043a6640e6195bd4e1e00",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 8000,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "75c90088cf62ad35c23a8743aaefdbad7afe492d",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ],
    "behavior_alert_count": 1,
    "behavior_priority": 72
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "risk_waf": 30,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_breakdown": {
        "waf": 30,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 18,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "f384589288b8ee2829ce55cf5a4ad877285e676a",
    "event_fingerprint": "3f3bba27c5f5df8bb9692f302bad7af2e5d64b9f",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 7777,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "9f6ec4a516e72d1b86e8cdbf6c4f3142d55ca886",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "risk_waf": 30,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_breakdown": {
        "waf": 30,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 18,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "43eae3e327b9a6ab05cf71d69536886dc2d05768",
    "event_fingerprint": "d48c3d8b946d2c985bb68d9ed3546c10dcac1b16",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 8899,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "7c85c805558ac4a3e35325c07d57566de4c21fc4",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "risk_waf": 30,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_breakdown": {
        "waf": 30,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 18,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "c753f52f91b5504b7e6402cf00594950ce06c093",
    "event_fingerprint": "1deb1ca3ff08e669a31868f67b5c6e884f2e10ad",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 2525,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "51ea52de46ea5e918276bbebcef77dc853cc2192",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ],
    "behavior_alert_count": 1,
    "behavior_priority": 84
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "risk_waf": 30,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_breakdown": {
        "waf": 30,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 18,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "c753f52f91b5504b7e6402cf00594950ce06c093",
    "event_fingerprint": "1deb1ca3ff08e669a31868f67b5c6e884f2e10ad",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 2525,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "51ea52de46ea5e918276bbebcef77dc853cc2192",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ],
    "behavior_alert_count": 1,
    "behavior_priority": 84
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "risk_waf": 30,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_breakdown": {
        "waf": 30,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 18,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "bb8fbf0f436b909039eb7814ff8598bc019ef08c",
    "event_fingerprint": "d3109d0598983dd95c3a4c5c9dc4abef915b5a14",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 8801,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "d53c870963a4e03e476d6ce86b8716d547d55511",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ],
    "behavior_alert_count": 1,
    "behavior_priority": 84
}

{
    "tls_ja3_hash": "6639916abfac56b9257ca216677085bc",
    "tls_sni": null,
    "bytes_in": 1457,
    "payload_entropy": 7.745727600023945,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "tls",
    "app_proto": "tls",
    "asn": 209630,
    "country": "AE",
    "risk_waf": 0,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 15,
    "risk_boost": 0,
    "risk_breakdown": {
        "waf": 0,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 15
    },
    "risk_score": 8,
    "tag_count": 2,
    "anomaly_count": 0,
    "campaign_key": "af66e1b8cddf3f40d1bb548f8e857d74baf8b288",
    "event_fingerprint": "9be551faa8994f23f3e0aebc345881eca0b27fa3",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "ja3": "6639916abfac56b9257ca216677085bc",
        "payload_hash": "8f6539de991db711d004dc7ae4d1bf35",
        "path_pattern_hash": "8792d2cfdc5028123bfb8f159de8656c"
    },
    "target_context": {
        "dst_port": 8443,
        "service": "tls"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.71,
    "classification_confidence": 0.71,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "\u0016\u0003\u0001\u0005\ufffd\u0001\u0000\u0005\ufffd\u0003\u00036\u0498\ufffd\u0019\ufffdv\u0001\ufffd@\ufffd\ufffdA\u0158z\ufffd\ufffd\ufffdYv\ufffd\ufffd{\ufffdNk\ufffd,P\ufffdK x\ufffd\ufffd\u0005f\ufffd9\ufffd\ufffd\ufffd\ufffd$1\ufffd\ufffd\u0018\u0000\ufffd'@2\ua0da\ufffd\ufffd$&\u02e4\ufffd\u0000\u001a\ufffd+\ufffd\/\ufffd,\ufffd0\u0329\u0328\ufffd\t\ufffd\u0013\ufffd\n\ufffd\u0014\u0013\u0001\u0013\u0002\u0013\u0003\u0001\u0000\u0005E\u0000\u000b\u0000\u0002\u0001\u0000\ufffd\u0001\u0000\u0001\u0000\u0000\u0017\u0000\u0000\u0000\u0012\u0000\u0000\u0000",
    "event_signature": "0975fbd1d35b050077ed0f2593c781b0934eabd4",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "tls_ja3",
        "tls_no_sni"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "risk_waf": 30,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_breakdown": {
        "waf": 30,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 18,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "c753f52f91b5504b7e6402cf00594950ce06c093",
    "event_fingerprint": "1deb1ca3ff08e669a31868f67b5c6e884f2e10ad",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 2525,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "51ea52de46ea5e918276bbebcef77dc853cc2192",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "risk_waf": 30,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_breakdown": {
        "waf": 30,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 18,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "c753f52f91b5504b7e6402cf00594950ce06c093",
    "event_fingerprint": "1deb1ca3ff08e669a31868f67b5c6e884f2e10ad",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 2525,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "51ea52de46ea5e918276bbebcef77dc853cc2192",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "risk_waf": 30,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_breakdown": {
        "waf": 30,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 18,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "c753f52f91b5504b7e6402cf00594950ce06c093",
    "event_fingerprint": "1deb1ca3ff08e669a31868f67b5c6e884f2e10ad",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 2525,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "51ea52de46ea5e918276bbebcef77dc853cc2192",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "risk_waf": 30,
    "risk_classification": 30,
    "risk_behavior": 0,
    "risk_geo": 0,
    "risk_protocol": 35,
    "risk_novelty": 30,
    "risk_boost": 0,
    "risk_breakdown": {
        "waf": 30,
        "classification": 30,
        "behavior": 0,
        "geo": 0,
        "protocol": 35,
        "novelty": 30
    },
    "risk_score": 18,
    "tag_count": 5,
    "anomaly_count": 1,
    "campaign_key": "f070034ea98bf43ee28c71ceb6413afdae280ef3",
    "event_fingerprint": "cd622d8500de7ed8c0adb98c335ed8e3c34439f2",
    "city": null,
    "is_datacenter": false,
    "is_tor_hint": false,
    "geo": {
        "country": "AE",
        "asn": 209630,
        "org": "LLC Vash Kredit Bank",
        "is_datacenter": false,
        "is_tor_hint": false
    },
    "fingerprint": {
        "http_ua_hash": "c2d945f9e2ebe73a50cc502e17a53fdc",
        "payload_hash": "ac7f8a04638b9d43b6172e3bf0e60155",
        "path_pattern_hash": "8a5edab282632443219e051e4ade2d1d"
    },
    "target_context": {
        "dst_port": 8083,
        "service": "http"
    },
    "attack_stage": "probe",
    "mitre_tactics": [
        "TA0007",
        "TA0001"
    ],
    "threat_family": [
        "scanner"
    ],
    "confidence": 0.8,
    "classification_confidence": 0.8,
    "recommended_client_action": "monitor",
    "policy_mode": "intelligence",
    "sensor_role": "threat_intelligence",
    "payload_preview": "GET \/ HTTP\/1.1\r\nUser-Agent: curl\/7.68.0\r\nConnection: close\r\n\r\n",
    "event_signature": "6fb6004c27f29d2da2d40d259990f1663e8a2232",
    "ban_policy": "advisory_monitor",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "tag_count": 5,
    "anomaly_count": 1,
    "risk_score": 63,
    "campaign_key": "c770872b4a3e1d09a2e3c56a1c6b374720e4c6ef",
    "event_fingerprint": "75a3a9e560bcdbdbc1d9fd15750e1b81cebffe01",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "tag_count": 5,
    "anomaly_count": 1,
    "risk_score": 63,
    "campaign_key": "f2dcda65c91d293e695bc36d2aad0db8bd1b9ee1",
    "event_fingerprint": "49f507c2cf48f6931b95b26ad1848f202640d676",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "tag_count": 5,
    "anomaly_count": 1,
    "risk_score": 63,
    "campaign_key": "43eae3e327b9a6ab05cf71d69536886dc2d05768",
    "event_fingerprint": "d48c3d8b946d2c985bb68d9ed3546c10dcac1b16",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "tag_count": 5,
    "anomaly_count": 1,
    "risk_score": 63,
    "campaign_key": "c09b9366ba15c9d97d11682c7354007b0b394a4d",
    "event_fingerprint": "463cc4a8c724f8d63a697629fd1468d142a07c01",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "tag_count": 5,
    "anomaly_count": 1,
    "risk_score": 63,
    "campaign_key": "43eae3e327b9a6ab05cf71d69536886dc2d05768",
    "event_fingerprint": "d48c3d8b946d2c985bb68d9ed3546c10dcac1b16",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "tag_count": 5,
    "anomaly_count": 1,
    "risk_score": 63,
    "campaign_key": "54885a9ace86894f06c0464c7d4990d8b6d87065",
    "event_fingerprint": "6200042a8eedd96c47b109adc0963a36d177f604",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "tag_count": 5,
    "anomaly_count": 1,
    "risk_score": 63,
    "campaign_key": "2dfc0958186d7eba6e4c60cbf36f6993c86f14d0",
    "event_fingerprint": "f0ba12ea638bc63544a493d13ee885b92a15c40b",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "well_known",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "tag_count": 5,
    "anomaly_count": 1,
    "risk_score": 63,
    "campaign_key": "10a7d7bbe423b34eb7d0b9d0327941611f097de9",
    "event_fingerprint": "aee707815b899e8cc03c185fa526535386cf2bd0",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "tag_count": 5,
    "anomaly_count": 1,
    "risk_score": 63,
    "campaign_key": "a6c7dfe63e653e37c279b894ddc3d00cea4883c7",
    "event_fingerprint": "3ba3caf85b54604d2e5345c79177ef73dd4d9056",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "well_known",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "tag_count": 5,
    "anomaly_count": 1,
    "risk_score": 63,
    "campaign_key": "afca55369cc4f8de9052a71b242278b6edcd44d1",
    "event_fingerprint": "7faab3dd896c75447e800363e774f1eec5b0272f",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "tag_count": 5,
    "anomaly_count": 1,
    "risk_score": 63,
    "campaign_key": "bb8fbf0f436b909039eb7814ff8598bc019ef08c",
    "event_fingerprint": "d3109d0598983dd95c3a4c5c9dc4abef915b5a14",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "tag_count": 5,
    "anomaly_count": 1,
    "risk_score": 63,
    "campaign_key": "f2dcda65c91d293e695bc36d2aad0db8bd1b9ee1",
    "event_fingerprint": "49f507c2cf48f6931b95b26ad1848f202640d676",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "tag_count": 5,
    "anomaly_count": 1,
    "risk_score": 63,
    "campaign_key": "de8c40439a6148cda65c84a02ccf9959cb156646",
    "event_fingerprint": "e8d7e440ce64622852a586f753bfe5d0110d3e76",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "tag_count": 5,
    "anomaly_count": 1,
    "risk_score": 63,
    "campaign_key": "c770872b4a3e1d09a2e3c56a1c6b374720e4c6ef",
    "event_fingerprint": "75a3a9e560bcdbdbc1d9fd15750e1b81cebffe01",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "tag_count": 5,
    "anomaly_count": 1,
    "risk_score": 63,
    "campaign_key": "bdcacf923d4126ae93d063bb5593e5136abd5350",
    "event_fingerprint": "9a52a781e557b9f140cd167860dc7e7a21b93d98",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "tag_count": 5,
    "anomaly_count": 1,
    "risk_score": 63,
    "campaign_key": "88fe4a7ad5165173f5e462cf689d3b4d88b5d36c",
    "event_fingerprint": "e1c0c85ec32def59777043a6640e6195bd4e1e00",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}

{
    "http_header_count": 2,
    "http_query_params": 0,
    "http_path_depth": 0,
    "http_path_ext": null,
    "http_ua_hash": "bc1bc2956e51c5b9c9f7c213c207ff9a36c04117",
    "http_host_hash": null,
    "http_target_hash": "42099b4af021e53fd8fd4e056c2568d7c2e3ffa8",
    "http_referer_hash": null,
    "http_method": "GET",
    "http_ua_is_cli": true,
    "http_ua_is_browser": false,
    "bytes_in": 62,
    "payload_entropy": 4.732027963438207,
    "port_category": "registered",
    "org": "LLC Vash Kredit Bank",
    "service": "http",
    "app_proto": "http",
    "asn": 209630,
    "country": "AE",
    "tag_count": 5,
    "anomaly_count": 1,
    "risk_score": 63,
    "campaign_key": "2dccde2851452d2992e059a1743c5d03f0383a70",
    "event_fingerprint": "14fc127f6e5825ff1c1a148e1ae42725937533b6",
    "tags_list": [
        "950734:sap-sapcontrol-path",
        "anomaly:scanner-ua",
        "http_missing_host",
        "http_ua_suspicious",
        "scanner-ua"
    ]
}