{"ip":"143.110.144.167","total_events":2,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["2 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"902 bytes sent","bytes_sent":902,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-22T18:44:54","last_seen":"2026-09-22T18:45:01","events_24h":2,"events_7d":2,"geo":{"country_code":"US","country_name":"United States","region":"California","city":"Santa Clara","lat":37.3931,"lon":-121.962,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":465,"proto":"tcp","label":"SMTPS","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d301300_1d37bd780c83_5ae85263eb3b"],"tls_client_hello":"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","tls_ja3":["9524fdc98d5b2c3efd160e8906158fa8"],"http_akin":["a11cun121_0000e87f_84206899","a11cun131_0040e87f_2b71f833"]},"fingerprint_peers":{"t13d301300_1d37bd780c83_5ae85263eb3b":310,"a11cun121_0000e87f_84206899":30,"a11cun131_0040e87f_2b71f833":30},"akin_families":{"a11cun121_0000e87f_84206899":{"head":"a11cun121_0000e87f_84206899","shapes":2,"ips":30},"a11cun131_0040e87f_2b71f833":{"head":"a11cun121_0000e87f_84206899","shapes":2,"ips":30}},"user_agents":["Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"],"timeline":[{"date":"2026-09-22","count":2}],"recent_events":[{"timestamp":"2026-09-22T18:45:01","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"priority\":\"u=0, i\",\"referer\":\"https://<HONEYPOT>:465/\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0\"}","body":"","sni":"<HONEYPOT>","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>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<HONEYPOT>3a3436352f0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0","ja3":"9524fdc98d5b2c3efd160e8906158fa8","session":"983427ef-4233-4146-9641-0a41fafba0a9","seq":1,"duration_ms":258,"bytes_in":475,"bytes_out":40},{"timestamp":"2026-09-22T18:44:54","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"priority\":\"u=0, i\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0\"}","body":"","sni":"<HONEYPOT>","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0","ja3":"9524fdc98d5b2c3efd160e8906158fa8","session":"0c9643cc-55b6-450e-9f1b-b1c1541a18fb","seq":1,"duration_ms":253,"bytes_in":427,"bytes_out":40}],"http_methods":[{"method":"GET","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1},{"path":"/favicon.ico","count":1,"ports":1}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Connection","Host","Priority","Referer","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","Sec-Fetch-User","Upgrade-Insecure-Requests","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.5","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"Priority","value":"u=0, i","notable":false},{"name":"Referer","value":"https://<HONEYPOT>:465/","notable":true},{"name":"Sec-Fetch-Dest","value":"document","notable":false},{"name":"Sec-Fetch-Mode","value":"navigate","notable":false},{"name":"Sec-Fetch-Site","value":"none","notable":false},{"name":"Sec-Fetch-User","value":"?1","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0","notable":false}],"distinct_sets":2,"events_with_headers":2},"tags":[],"data_as_of":"2026-09-23T16:53:28.550952+00:00"}