{"ip":"108.178.17.26","total_events":36,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["36 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."]},"first_seen":"2026-06-18T18:30:37","last_seen":"2026-07-18T06:24:49","events_24h":1,"events_7d":8,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":32475,"org":"Internap Holding LLC"},"source_domain":"server1.chicago.lewandowski.com","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":5060,"proto":"tcp","label":"SIP","count":36}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-06-18","count":2},{"date":"2026-06-19","count":1},{"date":"2026-06-20","count":1},{"date":"2026-06-21","count":3},{"date":"2026-06-22","count":1},{"date":"2026-06-23","count":3},{"date":"2026-06-24","count":1},{"date":"2026-06-25","count":3},{"date":"2026-06-26","count":1},{"date":"2026-06-27","count":3},{"date":"2026-06-28","count":2},{"date":"2026-06-29","count":1},{"date":"2026-07-04","count":2},{"date":"2026-07-10","count":1},{"date":"2026-07-11","count":3},{"date":"2026-07-13","count":1},{"date":"2026-07-14","count":2},{"date":"2026-07-15","count":1},{"date":"2026-07-16","count":1},{"date":"2026-07-17","count":2},{"date":"2026-07-18","count":1}],"recent_events":[{"timestamp":"2026-07-18T06:24:49","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"REGISTER sip:<HONEYPOT> SIP/2.0\r\nVia: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-jp5q3vdfb9\r\nMax-Forwards: 70\r\nTo: <sip:<HONEYPOT>>\r\nFrom: <sip:scan@scanner.local>;tag=zcc7mu6l\r\nCall-ID: 1784355889509978484\r\nCSeq: 1 REGISTER\r\nUser-Agent: Grandstream GXP1625\r\nContent-Length: 0\r\n\r\n","payload_hex":"5245474953544552207369703a<HONEYPOT>205349502f322e300d0a5669613a205349502f322e302f544350203139322e3136382e312e3130303a353036303b6272616e63683d7a39684734624b2d6a7035713376646662390d0a4d61782d466f7277617264733a2037300d0a546f3a203c7369703a<HONEYPOT>3e0d0a46726f6d3a203c7369703a7363616e407363616e6e65722e6c6f63616c3e3b7461673d7a6363376d75366c0d0a43616c6c2d49443a20313738343335353838393530393937383438340d0a435365713a20312052454749535445520d0a557365722d4167656e743a204772616e6473747265616d20475850313632350d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","community_id":"1:04wFF03GF04nnq/LWN+0MwIHask=","ja3":"","session":"ebcbad12-9fa3-4f5b-9e22-2e121ce254b2","seq":1,"duration_ms":100,"bytes_in":291,"bytes_out":13,"enriched":{"digest":"167a958fb855be99","label":"SIP","strings":["REGISTER sip:<HONEYPOT> SIP/2.0","Via: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-jp5q3vdfb9","Max-Forwards: 70","To: <sip:<HONEYPOT>>","From: <sip:scan@scanner.local>;tag=zcc7mu6l","Call-ID: 1784355889509978484","CSeq: 1 REGISTER","User-Agent: Grandstream GXP1625","Content-Length: 0"],"iocs":{"ips":["192.168.1.100"],"domains":["scanner.local"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-17T16:41:51","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"REGISTER sip:<HONEYPOT> SIP/2.0\r\nVia: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-n8v7mec9ov\r\nMax-Forwards: 70\r\nTo: <sip:<HONEYPOT>>\r\nFrom: <sip:scan@scanner.local>;tag=nd175m69\r\nCall-ID: 1784306511780047532\r\nCSeq: 1 REGISTER\r\nUser-Agent: Asterisk PBX\r\nContent-Length: 0\r\n\r\n","payload_hex":"5245474953544552207369703a<HONEYPOT>205349502f322e300d0a5669613a205349502f322e302f544350203139322e3136382e312e3130303a353036303b6272616e63683d7a39684734624b2d6e3876376d6563396f760d0a4d61782d466f7277617264733a2037300d0a546f3a203c7369703a<HONEYPOT>3e0d0a46726f6d3a203c7369703a7363616e407363616e6e65722e6c6f63616c3e3b7461673d6e643137356d36390d0a43616c6c2d49443a20313738343330363531313738303034373533320d0a435365713a20312052454749535445520d0a557365722d4167656e743a20417374657269736b205042580d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","community_id":"1:IPXY1m2di2WbnqosAAwHuVojc40=","ja3":"","session":"b7cd8ad0-9b7b-45a4-be3e-a4f7f8652fe4","seq":1,"duration_ms":100,"bytes_in":280,"bytes_out":13,"enriched":{"digest":"6227b4df596cfa21","label":"SIP","strings":["REGISTER sip:<HONEYPOT> SIP/2.0","Via: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-n8v7mec9ov","Max-Forwards: 70","To: <sip:<HONEYPOT>>","From: <sip:scan@scanner.local>;tag=nd175m69","Call-ID: 1784306511780047532","CSeq: 1 REGISTER","User-Agent: Asterisk PBX","Content-Length: 0"],"iocs":{"ips":["192.168.1.100"],"domains":["scanner.local"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-17T16:41:51","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"REGISTER sip:<HONEYPOT> SIP/2.0\r\nVia: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-0at45lmy6n\r\nMax-Forwards: 70\r\nTo: <sip:<HONEYPOT>>\r\nFrom: <sip:scan@scanner.local>;tag=05odjmmx\r\nCall-ID: 1784306511805222897\r\nCSeq: 1 REGISTER\r\nUser-Agent: Grandstream GXP1625\r\nContent-Length: 0\r\n\r\n","payload_hex":"5245474953544552207369703a<HONEYPOT>205349502f322e300d0a5669613a205349502f322e302f544350203139322e3136382e312e3130303a353036303b6272616e63683d7a39684734624b2d30617434356c6d79366e0d0a4d61782d466f7277617264733a2037300d0a546f3a203c7369703a<HONEYPOT>3e0d0a46726f6d3a203c7369703a7363616e407363616e6e65722e6c6f63616c3e3b7461673d30356f646a6d6d780d0a43616c6c2d49443a20313738343330363531313830353232323839370d0a435365713a20312052454749535445520d0a557365722d4167656e743a204772616e6473747265616d20475850313632350d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","community_id":"1:xQ2f9lrBUC5/4O+MLCfylgJZat4=","ja3":"","session":"f3be531f-8807-4682-9b92-4424c0422e3a","seq":1,"duration_ms":100,"bytes_in":287,"bytes_out":13,"enriched":{"digest":"2e12fb22c3e32729","label":"SIP","strings":["REGISTER sip:<HONEYPOT> SIP/2.0","Via: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-0at45lmy6n","Max-Forwards: 70","To: <sip:<HONEYPOT>>","From: <sip:scan@scanner.local>;tag=05odjmmx","Call-ID: 1784306511805222897","CSeq: 1 REGISTER","User-Agent: Grandstream GXP1625","Content-Length: 0"],"iocs":{"ips":["192.168.1.100"],"domains":["scanner.local"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-16T21:42:33","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"REGISTER sip:<HONEYPOT> SIP/2.0\r\nVia: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-om8d8hpr24\r\nMax-Forwards: 70\r\nTo: <sip:<HONEYPOT>>\r\nFrom: <sip:scan@scanner.local>;tag=ql6qqh1g\r\nCall-ID: 1784238153471003353\r\nCSeq: 1 REGISTER\r\nUser-Agent: FPBX-16.0\r\nContent-Length: 0\r\n\r\n","payload_hex":"5245474953544552207369703a<HONEYPOT>205349502f322e300d0a5669613a205349502f322e302f544350203139322e3136382e312e3130303a353036303b6272616e63683d7a39684734624b2d6f6d38643868707232340d0a4d61782d466f7277617264733a2037300d0a546f3a203c7369703a<HONEYPOT>3e0d0a46726f6d3a203c7369703a7363616e407363616e6e65722e6c6f63616c3e3b7461673d716c3671716831670d0a43616c6c2d49443a20313738343233383135333437313030333335330d0a435365713a20312052454749535445520d0a557365722d4167656e743a20465042582d31362e300d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","community_id":"1:sUQ2O39+JMi1wuoIOYcAWnDGUhg=","ja3":"","session":"0acc4b9b-2a42-4b87-b7f2-9b64ed9175a2","seq":1,"duration_ms":100,"bytes_in":279,"bytes_out":13,"enriched":{"digest":"2f4da257bfbb9694","label":"SIP","strings":["REGISTER sip:<HONEYPOT> SIP/2.0","Via: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-om8d8hpr24","Max-Forwards: 70","To: <sip:<HONEYPOT>>","From: <sip:scan@scanner.local>;tag=ql6qqh1g","Call-ID: 1784238153471003353","CSeq: 1 REGISTER","User-Agent: FPBX-16.0","Content-Length: 0"],"iocs":{"ips":["192.168.1.100"],"domains":["scanner.local"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-15T05:44:11","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"REGISTER sip:<HONEYPOT> SIP/2.0\r\nVia: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-tybayzrbf3\r\nMax-Forwards: 70\r\nTo: <sip:<HONEYPOT>>\r\nFrom: <sip:scan@scanner.local>;tag=vbkwov4b\r\nCall-ID: 1784094251893239673\r\nCSeq: 1 REGISTER\r\nUser-Agent: FPBX-16.0\r\nContent-Length: 0\r\n\r\n","payload_hex":"5245474953544552207369703a<HONEYPOT>205349502f322e300d0a5669613a205349502f322e302f544350203139322e3136382e312e3130303a353036303b6272616e63683d7a39684734624b2d74796261797a726266330d0a4d61782d466f7277617264733a2037300d0a546f3a203c7369703a<HONEYPOT>3e0d0a46726f6d3a203c7369703a7363616e407363616e6e65722e6c6f63616c3e3b7461673d76626b776f7634620d0a43616c6c2d49443a20313738343039343235313839333233393637330d0a435365713a20312052454749535445520d0a557365722d4167656e743a20465042582d31362e300d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","community_id":"1:jAXpXYUadCabbFMjeRyf271bESM=","ja3":"","session":"b2859d6d-a28f-4d16-bd50-584f234c953e","seq":1,"duration_ms":100,"bytes_in":281,"bytes_out":13,"enriched":{"digest":"e8e73ab9d554540b","label":"SIP","strings":["REGISTER sip:<HONEYPOT> SIP/2.0","Via: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-tybayzrbf3","Max-Forwards: 70","To: <sip:<HONEYPOT>>","From: <sip:scan@scanner.local>;tag=vbkwov4b","Call-ID: 1784094251893239673","CSeq: 1 REGISTER","User-Agent: FPBX-16.0","Content-Length: 0"],"iocs":{"ips":["192.168.1.100"],"domains":["scanner.local"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-14T15:43:29","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"REGISTER sip:<HONEYPOT> SIP/2.0\r\nVia: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-51tir14fbf\r\nMax-Forwards: 70\r\nTo: <sip:<HONEYPOT>>\r\nFrom: <sip:scan@scanner.local>;tag=w5b5ecld\r\nCall-ID: 1784043809460396870\r\nCSeq: 1 REGISTER\r\nUser-Agent: Yealink SIP-T21P\r\nContent-Length: 0\r\n\r\n","payload_hex":"5245474953544552207369703a<HONEYPOT>205349502f322e300d0a5669613a205349502f322e302f544350203139322e3136382e312e3130303a353036303b6272616e63683d7a39684734624b2d353174697231346662660d0a4d61782d466f7277617264733a2037300d0a546f3a203c7369703a<HONEYPOT>3e0d0a46726f6d3a203c7369703a7363616e407363616e6e65722e6c6f63616c3e3b7461673d7735623565636c640d0a43616c6c2d49443a20313738343034333830393436303339363837300d0a435365713a20312052454749535445520d0a557365722d4167656e743a205965616c696e6b205349502d543231500d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","community_id":"1:QbQ6+10Avdn/BBgmG/eO/FsUTsg=","ja3":"","session":"06d435ec-eb23-4e56-8de9-bfd9ca42585d","seq":1,"duration_ms":100,"bytes_in":284,"bytes_out":13,"enriched":{"digest":"7053ff9e4769db24","label":"SIP","strings":["REGISTER sip:<HONEYPOT> SIP/2.0","Via: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-51tir14fbf","Max-Forwards: 70","To: <sip:<HONEYPOT>>","From: <sip:scan@scanner.local>;tag=w5b5ecld","Call-ID: 1784043809460396870","CSeq: 1 REGISTER","User-Agent: Yealink SIP-T21P","Content-Length: 0"],"iocs":{"ips":["192.168.1.100"],"domains":["scanner.local"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-14T15:43:29","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"REGISTER sip:<HONEYPOT> SIP/2.0\r\nVia: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-n5owyq2bdo\r\nMax-Forwards: 70\r\nTo: <sip:<HONEYPOT>>\r\nFrom: <sip:scan@scanner.local>;tag=w2gdx77l\r\nCall-ID: 1784043809508302643\r\nCSeq: 1 REGISTER\r\nUser-Agent: Yealink SIP-T21P\r\nContent-Length: 0\r\n\r\n","payload_hex":"5245474953544552207369703a<HONEYPOT>205349502f322e300d0a5669613a205349502f322e302f544350203139322e3136382e312e3130303a353036303b6272616e63683d7a39684734624b2d6e356f7779713262646f0d0a4d61782d466f7277617264733a2037300d0a546f3a203c7369703a<HONEYPOT>3e0d0a46726f6d3a203c7369703a7363616e407363616e6e65722e6c6f63616c3e3b7461673d773267647837376c0d0a43616c6c2d49443a20313738343034333830393530383330323634330d0a435365713a20312052454749535445520d0a557365722d4167656e743a205965616c696e6b205349502d543231500d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","community_id":"1:eNMDykD3+TzwBSjWwQbmCgC4h/Y=","ja3":"","session":"2635e3c7-59bc-4656-8eac-604dba51a26f","seq":1,"duration_ms":101,"bytes_in":284,"bytes_out":13,"enriched":{"digest":"e86a0cbefdde6c28","label":"SIP","strings":["REGISTER sip:<HONEYPOT> SIP/2.0","Via: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-n5owyq2bdo","Max-Forwards: 70","To: <sip:<HONEYPOT>>","From: <sip:scan@scanner.local>;tag=w2gdx77l","Call-ID: 1784043809508302643","CSeq: 1 REGISTER","User-Agent: Yealink SIP-T21P","Content-Length: 0"],"iocs":{"ips":["192.168.1.100"],"domains":["scanner.local"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-13T21:58:42","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:<HONEYPOT> SIP/2.0\r\nVia: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-u6ctehc32d\r\nMax-Forwards: 70\r\nTo: <sip:<HONEYPOT>>\r\nFrom: <sip:scan@scanner.local>;tag=v3wkuc90\r\nCall-ID: 1783979922067442748\r\nCSeq: 1 INVITE\r\nUser-Agent: Yealink SIP-T21P\r\nContent-Length: 0\r\n\r\n","payload_hex":"494e56495445207369703a<HONEYPOT>205349502f322e300d0a5669613a205349502f322e302f544350203139322e3136382e312e3130303a353036303b6272616e63683d7a39684734624b2d753663746568633332640d0a4d61782d466f7277617264733a2037300d0a546f3a203c7369703a<HONEYPOT>3e0d0a46726f6d3a203c7369703a7363616e407363616e6e65722e6c6f63616c3e3b7461673d7633776b756339300d0a43616c6c2d49443a20313738333937393932323036373434323734380d0a435365713a203120494e564954450d0a557365722d4167656e743a205965616c696e6b205349502d543231500d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","community_id":"1:EhSWQ0Q7r9lCax7Ppmk84Ng7kuQ=","ja3":"","session":"48691050-f14f-4728-bd95-c1aa3249a5df","seq":1,"duration_ms":100,"bytes_in":282,"bytes_out":13,"enriched":{"digest":"7b317242b4e7c6da","label":"SIP","strings":["INVITE sip:<HONEYPOT> SIP/2.0","Via: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-u6ctehc32d","Max-Forwards: 70","To: <sip:<HONEYPOT>>","From: <sip:scan@scanner.local>;tag=v3wkuc90","Call-ID: 1783979922067442748","CSeq: 1 INVITE","User-Agent: Yealink SIP-T21P","Content-Length: 0"],"iocs":{"ips":["192.168.1.100"],"domains":["scanner.local"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T16:41:55","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:<HONEYPOT> SIP/2.0\r\nVia: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-sjuoe8f41h\r\nMax-Forwards: 70\r\nTo: <sip:<HONEYPOT>>\r\nFrom: <sip:scan@scanner.local>;tag=tzggxxpk\r\nCall-ID: 1783788115588084939\r\nCSeq: 1 INVITE\r\nUser-Agent: FPBX-16.0\r\nContent-Length: 0\r\n\r\n","payload_hex":"494e56495445207369703a<HONEYPOT>205349502f322e300d0a5669613a205349502f322e302f544350203139322e3136382e312e3130303a353036303b6272616e63683d7a39684734624b2d736a756f6538663431680d0a4d61782d466f7277617264733a2037300d0a546f3a203c7369703a<HONEYPOT>3e0d0a46726f6d3a203c7369703a7363616e407363616e6e65722e6c6f63616c3e3b7461673d747a67677878706b0d0a43616c6c2d49443a20313738333738383131353538383038343933390d0a435365713a203120494e564954450d0a557365722d4167656e743a20465042582d31362e300d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","community_id":"1:uon1VHIW4YVkaio/IbJO95k8/r4=","ja3":"","session":"7bf170a4-4a71-49e7-8e76-69a47955ec61","seq":1,"duration_ms":100,"bytes_in":273,"bytes_out":13,"enriched":{"digest":"8ae535348a5c2128","label":"SIP","strings":["INVITE sip:<HONEYPOT> SIP/2.0","Via: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-sjuoe8f41h","Max-Forwards: 70","To: <sip:<HONEYPOT>>","From: <sip:scan@scanner.local>;tag=tzggxxpk","Call-ID: 1783788115588084939","CSeq: 1 INVITE","User-Agent: FPBX-16.0","Content-Length: 0"],"iocs":{"ips":["192.168.1.100"],"domains":["scanner.local"],"paths":["/2.0/TCP"]}}},{"timestamp":"2026-07-11T16:41:55","port":5060,"proto":"tcp","app_proto":"","app_protocol":"sip","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"INVITE sip:<HONEYPOT> SIP/2.0\r\nVia: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-esqdzn7yj8\r\nMax-Forwards: 70\r\nTo: <sip:<HONEYPOT>>\r\nFrom: <sip:scan@scanner.local>;tag=gi118zki\r\nCall-ID: 1783788115617252161\r\nCSeq: 1 INVITE\r\nUser-Agent: Asterisk PBX\r\nContent-Length: 0\r\n\r\n","payload_hex":"494e56495445207369703a<HONEYPOT>205349502f322e300d0a5669613a205349502f322e302f544350203139322e3136382e312e3130303a353036303b6272616e63683d7a39684734624b2d657371647a6e37796a380d0a4d61782d466f7277617264733a2037300d0a546f3a203c7369703a<HONEYPOT>3e0d0a46726f6d3a203c7369703a7363616e407363616e6e65722e6c6f63616c3e3b7461673d67693131387a6b690d0a43616c6c2d49443a20313738333738383131353631373235323136310d0a435365713a203120494e564954450d0a557365722d4167656e743a20417374657269736b205042580d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","community_id":"1:zCkIq0rAMCb6KeBeDDD6mPtxnlE=","ja3":"","session":"b45e7b8b-f63a-4121-836a-649e8f62a027","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":13,"enriched":{"digest":"8907faf9e04f49bb","label":"SIP","strings":["INVITE sip:<HONEYPOT> SIP/2.0","Via: SIP/2.0/TCP 192.168.1.100:5060;branch=z9hG4bK-esqdzn7yj8","Max-Forwards: 70","To: <sip:<HONEYPOT>>","From: <sip:scan@scanner.local>;tag=gi118zki","Call-ID: 1783788115617252161","CSeq: 1 INVITE","User-Agent: Asterisk PBX","Content-Length: 0"],"iocs":{"ips":["192.168.1.100"],"domains":["scanner.local"],"paths":["/2.0/TCP"]}}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-18T23:02:24.609040+00:00"}