{"ip":"13.234.214.153","data_as_of":"2026-10-24T00:40:57+00:00","observed":true,"total_events":3,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"apcosys","confidence":"high","network_type":"enterprise","why":["The address is in a published scanner range (apcosys).","Known research and commercial scanners are labelled by operator and carry no threat verdict.","Counts include 5 interactive session(s) as well as first-packet events."],"engagement":{"level":"request","label":"Request traffic","detail":"3,904 bytes sent","bytes_sent":3904,"session_seconds":32,"persistent":false},"basis":"combined"},"first_seen":"2026-10-17T00:12:45","last_seen":"2026-10-19T10:10:58","events_24h":0,"events_7d":2,"interactive_sessions":5,"interactive_sessions_24h":0,"interactive_sessions_7d":5,"interactive_protocols":[{"protocol":"http","sessions":2},{"protocol":"pjl","sessions":2},{"protocol":"smb","sessions":1}],"geo":{"country_code":"IN","country_name":"India","region":"Maharashtra","city":"Mumbai","lat":19.0748,"lon":72.8856,"asn":16509,"org":"Amazon.com, Inc."},"source_domain":"scan.apcosys.cc","known_scanners":["apcosys"],"scanner_tag":{"key":"peeringdb:as16509","label":"Amazon.com","category":"enterprise","url":"https://www.peeringdb.com/asn/16509"},"cve_matches":[],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":5,"first_seen":"2026-10-17T18:47:15","last_seen":"2026-10-19T10:10:58","verdicts":[{"verdict":"scan","sessions":3},{"verdict":"unknown","sessions":2}],"personas":[{"persona":"printer@HP LaserJet 400 M401dn","sessions":2},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1","sessions":2},{"persona":"smb@Windows Server 2019","sessions":1}],"services":[{"protocol":"http","port":9200,"sessions":2},{"protocol":"pjl","port":9100,"sessions":2},{"protocol":"smb","port":139,"sessions":1}],"logins":[],"commands":[],"downloads":[],"files":[{"sha256":"79cfda0f1d4d1239ac6934837db67d9865269face0025e9ff4563303236c1ffe","name":"job-1","size":1523,"mime_type":"application/octet-stream","kind":"print-job","times":1,"first_seen":"2026-10-17T18:47:21","last_seen":"2026-10-17T18:47:21","virustotal":null},{"sha256":"0e75e65e292c5446ffb91c213a3098115230ffd69ded03bbc326f9ed20191405","name":"job-1","size":170,"mime_type":"text/plain","kind":"print-job","times":1,"first_seen":"2026-10-17T18:47:10","last_seen":"2026-10-17T18:47:10","virustotal":null}],"attack":[{"technique_id":"T1595","technique_name":"Active Scanning","tactic_id":"TA0043","tactic_name":"Reconnaissance","sessions":3}]},"top_ports":[{"port":27017,"proto":"tcp","label":"MongoDB","count":2,"sessions":0},{"port":9100,"proto":"tcp","label":"Printer","count":0,"sessions":2},{"port":9200,"proto":"tcp","label":"Elastic","count":0,"sessions":2},{"port":587,"proto":"tcp","label":"SMTP","count":1,"sessions":0},{"port":139,"proto":"tcp","label":"SMB","count":0,"sessions":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i251000_b78ed14e2fd0_f50d94e863eb"],"tls_client_hello":"","tls_ja3":["416eca07dcaad72dec6f76d1277b3eff"],"http_akin":["b11cun050_0004001e_6f27235c"],"interactive":{"ssh_hassh":[],"tls_ja4":["t13i251000_b78ed14e2fd0_f50d94e863eb"],"tls_ja3":["416eca07dcaad72dec6f76d1277b3eff"]}},"fingerprint_peers":{"t13i251000_b78ed14e2fd0_f50d94e863eb":50,"b11cun050_0004001e_6f27235c":9},"akin_families":{},"user_agents":["ApcosysBot/1.0 (+https://apcosys.net)"],"timeline":[{"date":"2026-10-17","count":3,"sessions":4},{"date":"2026-10-19","count":0,"sessions":1}],"recent_events":[{"timestamp":"2026-10-19T10:10:58","port":139,"proto":"tcp","app_proto":"smb","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0005�\u0001\u0000\u0005�\u0003\u0003\u0013iH\u000eY��{�8�9\"��\u0005�I%�0CZZ�w\r�L �(Ϊ�\u0005�c\u0006����\r������<\t����B�i\u0016�W\u00002�+�/�,�0̨̩�\t�\u0013�\n�\u0014\u0000�\u0000�\u0000/\u00005�\u0012\u0000\n�#�'\u0000<�\u0007�\u0011\u0000\u0005\u0013\u0001\u0013\u0002\u0013\u0003\u0001\u0000\u0005o\u0000\u000b\u0000\u0002\u0001\u0000�\u0001\u0000\u0001\u0000\u0000\u0017\u0000\u0000\u0000\u0012\u0000\u0000\u0000\u0005\u0000\u0005\u0001\u0000\u0000\u0000\u0000\u0000\n\u0000\u0010\u0000\u000e\u0011�\u0011�\u0011�\u0000\u001d\u0000\u0017\u0000\u0018\u0000\u0019\u0000\r\u0000\u001c\u0000\u001a\t\u0004\t\u0005\t\u0006\b\u0004\u0004\u0003\b\u0007\b\u0005\b\u0006\u0004\u0001\u0005\u0001\u0006\u0001\u0005\u0003\u0006\u0003\u00002\u0000 \u0000\u001e\t\u0004\t\u0005\t\u0006\b\u0004\u0004\u0003\b\u0007\b\u0005\b\u0006\u0004\u0001\u0005\u0001\u0006\u0001\u0005\u0003\u0006\u0003\u0002\u0001\u0002\u0003\u0000+\u0000\t\b\u0003\u0004\u0003\u0003\u0003\u0002\u0003\u0001\u00003\u0004�\u0004�\u0011�\u0004�'�\u0018$1\u001b�|$�!\u001b\u0014\u0010\u0018F�<\u0000ƌ�V1\\��&�~}\\h!W\u001a\\p6�����\f\b�Ó�G��_�+�'�ϳ\u0006��7\"�'7�BztQ���4��hګ]w�>S�8�䛣����ų��5�\u0010�9�lU0�\u001c{��~��!��\u0019��hdk�%w\u0014\u0019�a$X\u001f*�g��D�T\n\\��\u0015;ñ� �$y�(&�\u0018G��,S��G��\u0001p+�V�\bk��\nm�\b\rBS���X۔�\u0015:m����6���G�屈�\u0004�T��f�Z��(�5)���\u0003͜|��z�\n\\I�byS\u001d\u0004�U\\ۮYU\u0005�\n|�g+�@�(O%\u0017K�d\u0019\u0014���qw^A����\u0018({R�K�Q07xA�S\f�y{\u0005\u0006\b��Y����&��u\r�1�/�\u0013�\tH\u0014�|�K=�\u001c&e(_ƸW�d\u0007��st�\u0006e\u0002��|��̗:\u0010ߣ\u0005H�?d�2MSQ�@rH�V�V��\u0016͗���*�1�!W�s���\u001c�x!אa�f\u0006\u0000$S�5��\\��\u001e���z��\u001e�_\u001c[�(e�]\u0012`S#g�8\u0000=ap}�E*@ist���&k\u0018��\u0015��#�\u001b&���p�۽�*����}��\u001a��0�f��\u001e�f%Iv\u0005�\u0001o~�,&�8U%����l�tT�\u001a��Gc�1�9�q\f`zXF\u000f�4��ɂG)\u0015J��-=Hh��.�W\u001aTh��ҍ�e,��ɝ�ƀi�!��d�(�3,1�6�tvdZ\u0004�Fi�PB�+��ª�\f\u0001$U%ʫ���\u0012b\f��@�QVY>*��7Ȕ,�-�;t�\u0017�\u000b<1iYv–}�j�(�t�E\u0001�^9�F��\u0001��N\u0002�)$;\u0002�F���}��\u001f#Yʟ|\u001d\u00048�\t!\u0000��3\\�]�X*\u000e:R��7\"�\u0014B�\u0000\u0011)Āa��&lx{\u001fV\u0002G��2x5� ��4��g�\u0010�t�屺'\u0001��\u0013�\u0004i�s'q�\u0007\u0004�{ �\"*�\\9���V0f�RU�\u0015��(Y�k6\u0016�B�\u0015��W\u0014Q\u0006:B&\u001d�f.��\u001d\b�T�6���cs�Ɇ1\u0003ԧ�d��i3\u0014��\u0010�au~����\u001b\u00125�-�]\u0012X�\u0003��&sH���7֔|i6l�,2A\u000b��}t\u0003wɃeB�3`c\u00017��X\u0014����.p=�Ѐ���\u0002F2��/a�>\u0001�tд�\u0002�\bB��wRZ\u000ej�\u0017ؗh�\t���|\u001a�oi�z�w�i��`\u0003�U-�;'{Ë�{�}&�(,�\u0013|\u0016�t�\u0011\"9\r�W�\u0018\u0007-\u0000+pe\r\u0002\u0014aaW��4��t��H-���B\u0005�*c ��:B�f#s\u0003w�n���Q;\u000f�4�\f���\u0012r�V,=\u0011���L�e���'\u0019�W��T�72q¤\u001ef�K�LK5��\u00117������\u001c�b/��T��Ac�����+R,��)R\tχW���W+N�gy��/4��K/\u001a��:�\u000e�-l��Q��\u0005\u000fF-\u0006�\u0014\u0000����M�e�R|J\u001f�?8�;C�\\l\u0010��Q\b\r�\u0013����T�<\u0000\u001d\u0000 M�e�R|J\u001f�?8�;C�\\l\u0010��Q\b\r�\u0013����T�<","payload_hex":"16030105ee010005ea03031369480e599cbf7bb738993922b7f305de4925bb30435a5a89770dfaee80b74c208d28ceaafe05e863068ee084f30da7eae2c0c5cb3c09beeaccd842d36916f9570032c02bc02fc02cc030cca9cca8c009c013c00ac014009c009d002f0035c012000ac023c027003cc007c01100051301130213030100056f000b00020100ff010001000017000000120000000500050100000000000a0010000e11ec11eb11ed001d001700180019000d001c001a090409050906080404030807080508060401050106010503060300320020001e090409050906080404030807080508060401050106010503060302010203002b0009080304030303020301003304ea04e811ec04c027f11824311b967c24f8211b14101846aa3c00c68caf56315cf3cb26d17e7d5c6821571a5c7036d8fb9ca5960c08acc393b44787a05fb12ba227d3cfb3068bf63722d52737e5427a745184ddd034f3b368daab5d77b43e53bc38c1e49ba3fca8d2e0c5b3f1bb35d710dd399e6c5530fb1c7b84d47ec7e12198d119bffa68646ba525771419f06124581f2a8667a79744bb540a5cfca8153bc3b1a220ec2479e52826a5184784852c53999647989501702be956a1086b9ab40a6dab080d425390969858db9497153a6d82c6c1e73699fe964785e5b188c804d3549f7f9b66e85ab79528a2352981bef403cd9c7caae47af20a5c49986279531d04a9555cdbae595505f20a7ceb677f2bd54085284f25174bcb641914e691fd71775e419296828618287b52e74bdf513037784192530cda797b0506089ca1599da0b8b826c196750db131b82ff4139c094814a97ce94b3d881c2665285fc6b857b064077fb7c373749906650285aa7cf9a9cc973a10dfa30548c23f64fa324d5351f24072489a56e3569ded16cd97e39de62a9c31c22157fb7398acbd1cc77821d79061d76606002453d335ece85c8ae81e9d9a997ae08f1ea95f1c5bc12865bf5d1260532367a538003d61707db0452a40697374a39de7266b18aed815c7e923ac1b26c0b9c77092dbbd852a95a896ad7df0a51a88bf30ac66ece01ed86625497605d6016f7eb32c26b7385525a898e4bd6cdc7454ba1a81ca4763cc31b939b1710c607a58460fc1348fa0c982477f29154a81d02d3d486880d72e99571a546897c6d28dcf652cbf86c99df3c68069b82187ca64812887332c31ab36f77476645a04cf4669f45042942b80b0c2aad10c01245525caabccf4a612620ca49940b15156593e2ac5c837c8942cbb2dc63b74cb17e30b3c31695976c2967df56afa28b574a94501a15e39f846859c01afd94e028c29243b02ba4693e2a87db3f31f2359ca9f7c1d0438c609210085e8335c965df7582a0e3a52f3993722bb144295001129c48061bbcd266c787b1f560247bda1327835b720e9a634a5a067e510b574c4e5b1ba2701aae613b4046985732771e807048d7b2092222ae75c399ac0aa563066cd5255ec1594b22859806b3616a942f315a0c0571451063a42261d9f662ea4b31d08c4548a3686c8d0637383c9863103d4a78e648983693314819a10c661757ef7a981f81b1235c82d935d12588b039992267348b094b637d6947c69366ca72c32410bcad17d740377c9836542c33360630137b4815814a3b0b0bb2e703db8d080e5f2ce024632dcd92f618a3e01b974d0b4c702e30842f7b977525a0e6a9117d89768a609c5e1c77c1acc6f69967ac577dc69b5936003f4552df43b277bc38bcf7b897d26af282cba137c16d474981122390dc457a718072d002b70650d0214616157bdef34adf474b7e3482da9849742059a2a6320c0a13a42fa6623730377806ea7f593513b0ff434c40ccbc6c5127293562c3d11b8f5ab4cbd65bbaaaa271992579c9a54f9373271c2a41e66a34b894c4b35beca11379a9399c0b5bc1c89622f978b54a79a4163c5f282a8d02b522ce29f295209cf8757fb82b0572b4ea767798de12f34fbe94b2f1abc8c3ad80eb62d6cea8251f494050f462d067f9e1400e4eff5924dd565b1527c4a1f8e3f38d73b43a95c6c10a89251080da113d8d7cdde54e63c001d00204dd565b1527c4a1f8e3f38d73b43a95c6c10a89251080da113d8d7cdde54e63c","method":"","user_agent":"","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"5119a160-7cf8-4f88-a3b3-47c74b572b1d-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"253fc6abe4946825","label":"TLS/SSL","strings":["0CZZ","~}\\h!W","BztQ","qw^A","Q07xA","&e(_","2MSQ","`S#g","=ap}","E*@ist"]},"interactive":true},{"timestamp":"2026-10-17T18:47:21","port":9100,"proto":"tcp","app_proto":"pjl","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0005�\u0001\u0000\u0005�\u0003\u0003���7KD��e���\u0018Nd��Nx��\t�\u0015���2x)\u0011? r���/T��\u0003\u001d\u0016�\u001aZ�3 ���\u0005��ܻa�z�U\u000ec\u00002�+�/�,�0̨̩�\t�\u0013�\n�\u0014\u0000�\u0000�\u0000/\u00005�\u0012\u0000\n�#�'\u0000<�\u0007�\u0011\u0000\u0005\u0013\u0001\u0013\u0002\u0013\u0003\u0001\u0000\u0005o\u0000\u000b\u0000\u0002\u0001\u0000�\u0001\u0000\u0001\u0000\u0000\u0017\u0000\u0000\u0000\u0012\u0000\u0000\u0000\u0005\u0000\u0005\u0001\u0000\u0000\u0000\u0000\u0000\n\u0000\u0010\u0000\u000e\u0011�\u0011�\u0011�\u0000\u001d\u0000\u0017\u0000\u0018\u0000\u0019\u0000\r\u0000\u001c\u0000\u001a\t\u0004\t\u0005\t\u0006\b\u0004\u0004\u0003\b\u0007\b\u0005\b\u0006\u0004\u0001\u0005\u0001\u0006\u0001\u0005\u0003\u0006\u0003\u00002\u0000 \u0000\u001e\t\u0004\t\u0005\t\u0006\b\u0004\u0004\u0003\b\u0007\b\u0005\b\u0006\u0004\u0001\u0005\u0001\u0006\u0001\u0005\u0003\u0006\u0003\u0002\u0001\u0002\u0003\u0000+\u0000\t\b\u0003\u0004\u0003\u0003\u0003\u0002\u0003\u0001\u00003\u0004�\u0004�\u0011�\u0004�P�P�+z\u001c�b&�J�By\u0011H�\u001f�1)��\u000e��\u001b�;\u001c�n¡;�t\u0004�\u0005R\u0016�\b�\u0010��P8������R*���]�\"\b3h\u0006a��\u000f87�y�\u0010\u0017j\u001b'�PV7L�G�ӈ��p�u�e$\t��\u000b\u0015y��ј{�_�!\t\u0019��:�\u0000,���\u0005�O2�\u0011�p�k���r��\u0015�I\u000e���D�?{��.f�\\R�k�\u0012\u0000�\u001e[�p0��\u000f\u0014T��\\ݒ<�l����~hˏb)�`$ce�h0Jt�E�#�\u0004%*n��q7$�3W��*O�2H�hl\u0012���i��)�b��\u0017�4\fS��\f�gj��'��4^k\\#,]�� Ѷ��(_y�.�Q6\u0017���:�\u0018{�4���j,v�?Y�o�B\u001b\u001c�gӖ{a[��I�\u0003+��ȳ�\nQr��(��';\u001a�0����\u0016%�+?��P\u0019$P��#s#���6\u0010���+.n�xۇF�,�\u0011\u001aJ�e������%\u0004�'�w�n&�syW��!-�u�tw��\u0015�%�ﱍ\u0015\u001c�AIp\u000e�{'��\u0011\u001c\u001c\u0003��^Q\u0007.��\u0016 \u0016M��+LŽ\u0013�|�\u0006!�\u001c��ǻ�����og\u0015��\u0006t����T��:��1�����ֹ7\u0002�?g�\u001c\u0011[b�I�Ҟ��<�D',\u0001������!�������Y�<���84[A�f#\u0000T%�\r8A)e\"��+\u0013w���w\u0005H[�\u0006�I�l\f���|H�\u0014ʯ[K���څ}��C/�\u001a��\rW�$\u001c�O�A�I����y�����1\u0018\u000bŔC&7;}C��̦�t��~�\u001cY\u000b\u0018\u0018dby�\u00149�+ ����E�$l��P:�K\u0016�\u000b��y�6A�(\u0010�0P��\b��aN�U�6\t�\u0017a�\t|SƕU����pɓ|�8\u0017�\u0018\u001f�b\u001f�\\4����Z��w\u00116\u0003Q��*�ջeѡy�\u000e��4zE;��4����VS1H�;u,���V�B\u0000���\t\u0016N`\u00195�b��\u001d\u0011\u0003�G���\t$\f:y\u0000(E\u000b���\u0013l\u001a�\u0001���C��\u0001�\u0016{:��AC��B\u0018���Fk��l���\b�uެg�Gu�paVR�L�\u0018��\u000f��\f�q\u000f������RI�_�C��1\u0018{��a�%����-��l�\t�Y\u0013�)Ѧ�Z\u0013�%\nij4\"���f��Ӆ��1\u0015ג��-F�I�,��DM����kq�La��Yt�W�@��h�Y�g��*�W{H��\\��.B��D\u001dвRYA5�85��<�h8���@ѫG�\u0006\u001d�B�\u001cn��1� I\u0014\tȸ��v�6x)o&��-��\u0012�O��O��\u0006���\u0002 �|�����\u000f<Χ��d\u0006^�'\u0005?��~�k�z\u0013v�Ahh�iSv�Uv]�h��q3�Q5�)��du#~熄�9����\u001c\n�ߺ\u0003\u0002\u0007���\u0014��\u001b\fr\u0018W�\u0012�T\u0019\u001aH���x��� \u0013���b�\u000f����!����\u0007�*��(����\u0000h\u0018to�b,����rc�`CJ�Y�\u0013@}���d\u0000\u001d\u0000 ����\u0000h\u0018to�b,����rc�`CJ�Y�\u0013@}���d","payload_hex":"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","method":"","user_agent":"","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"97f5c4cd-05c8-41f9-8b95-a08319896dc8-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"23d4114332612ef4","label":"TLS/SSL","strings":["PV7L","`$ce","h0Jt","4^k\\#,]","84[A","8A)e\"","C&7;}C","4zE;","VS1H","paVR"]},"interactive":true},{"timestamp":"2026-10-17T18:47:10","port":9100,"proto":"tcp","app_proto":"pjl","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"GET / HTTP/1.1\r\nHost: <HONEYPOT>\r\nAccept: */*\r\nAccept-Encoding: identity\r\nAccept-Language: en-US;q=0.8,en;q=0.7\r\nUser-Agent: ApcosysBot/1.0 (+https://apcosys.net)\r\n\r\n","payload_hex":"474554202f20485454502f312e310d0a486f73743a203c484f4e4559504f543e0d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a206964656e746974790d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e370d0a557365722d4167656e743a204170636f737973426f742f312e3020282b68747470733a2f2f6170636f7379732e6e6574290d0a0d0a","method":"","user_agent":"","ja3":"","session":"4b81deeb-000f-49ec-9640-5dc894a6b65f-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"e6affdeb6921906d","label":"HTTP","strings":["GET / HTTP/1.1","Host: <HONEYPOT>","Accept: */*","Accept-Encoding: identity","Accept-Language: en-US;q=0.8,en;q=0.7","User-Agent: ApcosysBot/1.0 (+https://apcosys.net)"],"iocs":{"urls":["https://apcosys.net)"],"domains":["apcosys.net"]}},"interactive":true},{"timestamp":"2026-10-17T07:13:32","port":27017,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"accept-language\":\"en-US;q=0.8,en;q=0.7\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"ApcosysBot/1.0 (+https://apcosys.net)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a206964656e746974790d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e370d0a557365722d4167656e743a204170636f737973426f742f312e3020282b68747470733a2f2f6170636f7379732e6e6574290d0a0d0a","method":"GET","user_agent":"ApcosysBot/1.0 (+https://apcosys.net)","ja3":"","session":"f7b41bcc-0505-4383-9f93-d98c8b2c693b","seq":2,"duration_ms":1751,"bytes_in":349,"bytes_out":158},{"timestamp":"2026-10-17T07:13:31","port":27017,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"accept-language\":\"en-US;q=0.8,en;q=0.7\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"ApcosysBot/1.0 (+https://apcosys.net)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a206964656e746974790d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e370d0a557365722d4167656e743a204170636f737973426f742f312e3020282b68747470733a2f2f6170636f7379732e6e6574290d0a0d0a","method":"GET","user_agent":"ApcosysBot/1.0 (+https://apcosys.net)","ja3":"","session":"f7b41bcc-0505-4383-9f93-d98c8b2c693b","seq":1,"duration_ms":100,"bytes_in":169,"bytes_out":79},{"timestamp":"2026-10-17T00:12:45","port":587,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"accept-language\":\"en-US;q=0.8,en;q=0.7\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"ApcosysBot/1.0 (+https://apcosys.net)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a206964656e746974790d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e370d0a557365722d4167656e743a204170636f737973426f742f312e3020282b68747470733a2f2f6170636f7379732e6e6574290d0a0d0a","method":"GET","user_agent":"ApcosysBot/1.0 (+https://apcosys.net)","ja3":"","session":"35b6c538-dfda-4790-8fac-2df60fe49655","seq":1,"duration_ms":101,"bytes_in":170,"bytes_out":40}],"http_methods":[{"method":"GET","count":3}],"distinct_ports_total":5,"top_paths":[{"path":"/","count":2,"ports":2},{"path":"/favicon.ico","count":1,"ports":1}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"identity","notable":false},{"name":"Accept-Language","value":"en-US;q=0.8,en;q=0.7","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"ApcosysBot/1.0 (+https://apcosys.net)","notable":false}],"distinct_sets":1,"events_with_headers":3},"tags":[]}