{"ip":"145.14.139.235","total_events":2,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp"},"first_seen":"2026-06-03T18:50:46","last_seen":"2026-06-03T18:50:57","events_24h":0,"events_7d":0,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":42366,"org":"TerraTransit AG"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as42366","label":"TerraTransit","category":"isp","url":"https://www.peeringdb.com/asn/42366"},"cve_matches":[],"top_ports":[{"port":22555,"proto":"tcp","label":"","count":1},{"port":8546,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":["po11nn0500_b4ba55311b46"]},"fingerprint_peers":{"po11nn0500_b4ba55311b46":382},"user_agents":["Go-http-client/1.1"],"timeline":[{"date":"2026-06-03","count":2}],"recent_events":[{"timestamp":"2026-06-03T18:50:57","port":8546,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"66\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>:8546\",\"user-agent\":\"Go-http-client/1.1\"}","body":"{\"jsonrpc\":\"2.0\",\"method\":\"web3_clientVersion\",\"params\":[],\"id\":1}","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383534360d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a436f6e74656e742d4c656e6774683a2036360d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6a736f6e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a7b226a736f6e727063223a22322e30222c226d6574686f64223a22776562335f636c69656e7456657273696f6e222c22706172616d73223a5b5d2c226964223a317d","method":"POST","user_agent":"Go-http-client/1.1","community_id":"1:Jh5uRuSLEYl+ACs0kA/A88tBfMs=","ja3":"","session":"dc2d2171-7667-4a9e-a3d5-c53c95b692bc","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0},{"timestamp":"2026-06-03T18:50:46","port":22555,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"content-length\":\"58\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>:22555\",\"user-agent\":\"Go-http-client/1.1\"}","body":"{\"jsonrpc\":\"2.0\",\"method\":\"getbalance\",\"params\":[],\"id\":1}","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32323535350d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a436f6e74656e742d4c656e6774683a2035380d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6a736f6e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a7b226a736f6e727063223a22322e30222c226d6574686f64223a2267657462616c616e6365222c22706172616d73223a5b5d2c226964223a317d","method":"POST","user_agent":"Go-http-client/1.1","community_id":"1:gUN/17fqtKNYcbbJKWEjtlALPS0=","ja3":"","session":"245b92ae-5dae-4dc3-9e69-2e5b5b776185","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0}],"http_methods":[{"method":"POST","count":2}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":2,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Content-Length","Content-Type","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Content-Length","value":"66","notable":false},{"name":"Content-Type","value":"application/json","notable":true},{"name":"Host","value":"<HONEYPOT>:8546","notable":false},{"name":"User-Agent","value":"Go-http-client/1.1","notable":false}],"distinct_sets":1,"events_with_headers":2},"tags":[],"data_as_of":"2026-06-13T08:02:14.874550+00:00"}