{"ip":"156.146.55.240","data_as_of":"2026-10-28T14:22:48+00:00","observed":true,"total_events":1165,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"3 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["3 request(s) matched a known exploit path.","Only GET and HEAD requests were seen, with no body, which reads as a check for the vulnerability without a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"366,720 bytes sent","bytes_sent":366720,"session_seconds":10,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-26T21:49:40","last_seen":"2026-10-28T01:18:59","events_24h":1105,"events_7d":1165,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"BG","country_name":"Bulgaria","region":"Sofia-Capital","city":"Sofia","lat":42.6951,"lon":23.325,"asn":212238,"org":"Datacamp Limited"},"source_domain":"unn-156-146-55-240.cdn77.com","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":3790,"proto":"tcp","label":"","count":19},{"port":3000,"proto":"tcp","label":"Web-alt","count":19},{"port":5555,"proto":"tcp","label":"","count":19},{"port":9501,"proto":"tcp","label":"","count":19},{"port":5001,"proto":"tcp","label":"","count":19},{"port":1080,"proto":"tcp","label":"SOCKS","count":19},{"port":8000,"proto":"tcp","label":"HTTP-alt","count":19},{"port":1337,"proto":"tcp","label":"","count":19},{"port":5000,"proto":"tcp","label":"Web-alt","count":19},{"port":6606,"proto":"tcp","label":"","count":19},{"port":5873,"proto":"tcp","label":"","count":19},{"port":888,"proto":"tcp","label":"","count":19},{"port":4321,"proto":"tcp","label":"","count":19},{"port":7707,"proto":"tcp","label":"","count":19},{"port":6080,"proto":"tcp","label":"","count":19}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i1712h1_ab0a1bf427ad_8537cf56674e"],"tls_client_hello":"16030105ed010005e9030354d432679ba0d10b8b4db7fcc73b26947d32fda3ef8f8a8e754f8eb2120a1fe3201734b8e2dbe55b3e7026324b8e49619c2993e745a7431410bab2475237a37c3a0022130213031301c02cc030c02bc02fcca9cca8c024c028c023c027009f009e006b00670100057eff01000100000b000403000102000a0012001011ec001d0017001e00180019010001010010000b000908687474702f312e31001600000017000000310000000d0036003409050906090404030503060308070808081a081b081c0809080a080b080408050806040105010601030303010302040205020602002b00050403040303002d00020101003304ea04e811ec04c01be46c9c72660ce86d06ccc062bb6fb13087b859ce3f9c3751e32c6a139facd7994b0103fe0786c61025485cc87bb6760807972807651891238fd77169bc476932514216af008931b023cec0da6b4eb951ea6124b7b900c1fc963d78790efc2774c9158219394fd0b1d3a32b0891ae6230a39d84bd800b4070e522f508941401becfa055b15a080912aaa7866f4f9b42bc99cb26245bda334c63849b55644a28a56b40121e411c4708266c9711a2af90bd3c418f8073a7d27669958c082f28625c9554befc4c6c5c43117391ec570619c5b67aa6a1f3541083231a91064093f791ab3c6b57520157d336364a8a0ccc968b65542d4565ea818f0747243b9b8553b2c400633e4563624ab9cd85094e26b7cf3332b2106ccde291b4cad413c0ca734c5415e102755970b54e8b9831c1acf5563ca6a985a5d521cb547784f46afe6a7f8c6252e218840d517ea7300908babc2fdac3a8d7ab6ae50bebd75385331f1c0a46d28999c7e259431642ecb22e208b36018015f5f2b0d83a71dbc71fe0ac6fd3b878ff906214d8510f0c0f6ff1265df23e4083483f892570fa15a9a079f89c4ecc475bb904892aa9022d8c7178085cb0907364852d6f9a33054107a7c3affa135e76d850e8d1622c1c8edf420b735086604c4d3e10ba19ca0f8265924b55043c01606602686436b020c423f553ae036534bcdb9c72f3b705245f09fa2aa7689b85db0a01d2031ce6af42e8711b7c07ac8b835e0613c3b18d2f894c6d711c6541c7ffa4706ed7723fb13cec636689862f78826fa2190f95dc84431429bf4169f8472de7b61f686b467afc2cfc04796abb4404d5b0b18b4278494ac4c48e44a6c25c8374f20c94cdcaceecb14a513894f6b8519a7c575436baf2d5760d741be8484539bca06b7717700189515c3ab990aa7a420af5e9893bf97d2d01149f58cccb47357e70c1117c1827ac98c2872a0e82b2ee9c1665db673264a425554c2ff429f30c45a0324a97c0b88f360c349876a30824a5602e152676c9d3264ae487c4d689a0a108f218490aa50158fc50bf2777d4a1b3f26cb3c81c830d192cdc9bb1b0428335d8af05a47ada14a0fcf9ca0e02bcd477cbccccb2a349a9fe4c03c6f67cd568037c654d02d1441a78a592889c8caa31c1eb4eba9523d69cbda59b5695997f17b98c7fc4a3e4f211f023aa1b2485b49c33fb2b4b04840f65469e6ef114c19a8af7a28ec9f204a8471724d52c1a636d9890172b921b92a8354d952a41d3ae202810517ab1542b82703b679e25c2626238fb7865deb9a19568ab526c129e59ac243784bfca228b0c0d715c87e61374e9e150943543b585c73e3ab5f3380ef7b0a003c34f6b7470f187067467689f2998ee857819ea68565c7ede4a4ff2e57ff3376108568c0d171357232c29157d6750ce7e910bb2ec1b39f52e340c72dae79881a278073c0ded908c4cd4228a750419b398e931924fb328e095682ee3aa7e3058ad23c7b8d86ed9281773188dbff8ab629c4b64b13d565c7e8a5830634a6a9fd59062131b0bb127dc21be2ec461b4e8608862858ccb143b94b2e5c57b039a186a0030972ca606524947a72b6b5b2362f87192609563c92ac138196f8022630dbe6ea8e71cf6ec9085feaf2cc4f0085b46251e23ca1d0cf9c1cc91e5653ec4a0ada45bd182093da51f835ad904cbead0e3888800ed3b0973e5b2d8651349001d00206792639892c4d848475638666e8e98e057c26675b2350c507deba97f5a114168001b0005","tls_ja3":["84330a279f90d61388a8bfc7cb80535f"],"http_akin":["b10cun010_00040000_c4b2c4aa","b11cun050_00040017_976354f0"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"b10cun010_00040000_c4b2c4aa":398,"b11cun050_00040017_976354f0":1240,"t13i1712h1_ab0a1bf427ad_8537cf56674e":3},"akin_families":{"b11cun050_00040017_976354f0":{"head":"b11cun050_00040017_976354f0","shapes":2,"ips":1239}},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-26","count":60},{"date":"2026-10-28","count":1105}],"recent_events":[{"timestamp":"2026-10-28T01:18:59","port":18080,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:18080\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31383038300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132382e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","ja3":"84330a279f90d61388a8bfc7cb80535f","session":"b82de851-66cf-4d29-8509-3580da2d6bfe","seq":1,"duration_ms":600,"bytes_in":249,"bytes_out":79},{"timestamp":"2026-10-28T01:18:58","port":18081,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:18081\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31383038310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132382e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","ja3":"84330a279f90d61388a8bfc7cb80535f","session":"51e59258-d2f8-470f-84cc-c37195248ab5","seq":1,"duration_ms":233,"bytes_in":249,"bytes_out":79},{"timestamp":"2026-10-28T01:18:58","port":60000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:60000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a36303030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132382e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","ja3":"84330a279f90d61388a8bfc7cb80535f","session":"9d60eec1-ed29-4815-b55e-477da848313e","seq":1,"duration_ms":232,"bytes_in":249,"bytes_out":79},{"timestamp":"2026-10-28T01:18:57","port":53362,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:53362\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a35333336320d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132382e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","ja3":"84330a279f90d61388a8bfc7cb80535f","session":"864ddfb1-5b48-45f1-a2cc-230f9d85da3d","seq":1,"duration_ms":738,"bytes_in":249,"bytes_out":79},{"timestamp":"2026-10-28T01:18:57","port":18080,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:18080\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/1/summary","summary":"","payload_hex":"474554202f312f73756d6d61727920485454502f312e310d0a486f73743a20<HONEYPOT>3a31383038300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132382e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","ja3":"84330a279f90d61388a8bfc7cb80535f","session":"4220f634-2a1f-4041-baf8-881fa0812284","seq":1,"duration_ms":226,"bytes_in":247,"bytes_out":79},{"timestamp":"2026-10-28T01:18:55","port":53362,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:53362\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/1/summary","summary":"","payload_hex":"474554202f312f73756d6d61727920485454502f312e310d0a486f73743a20<HONEYPOT>3a35333336320d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132382e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","ja3":"84330a279f90d61388a8bfc7cb80535f","session":"3766bec8-116b-447e-b5c4-ab2cd3a6b3a6","seq":1,"duration_ms":282,"bytes_in":247,"bytes_out":79},{"timestamp":"2026-10-28T01:18:55","port":60000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:60000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/1/summary","summary":"","payload_hex":"474554202f312f73756d6d61727920485454502f312e310d0a486f73743a20<HONEYPOT>3a36303030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132382e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","ja3":"84330a279f90d61388a8bfc7cb80535f","session":"f52e33a7-3403-4581-b3a1-b59e799a62b2","seq":1,"duration_ms":234,"bytes_in":247,"bytes_out":79},{"timestamp":"2026-10-28T01:18:55","port":18081,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:18081\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/1/summary","summary":"","payload_hex":"474554202f312f73756d6d61727920485454502f312e310d0a486f73743a20<HONEYPOT>3a31383038310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132382e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","ja3":"84330a279f90d61388a8bfc7cb80535f","session":"656dfac0-28a3-42ee-9245-21bffb82e5f0","seq":1,"duration_ms":226,"bytes_in":247,"bytes_out":79},{"timestamp":"2026-10-28T01:18:55","port":18080,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:18080\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/submit.php","summary":"","payload_hex":"474554202f7375626d69742e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a31383038300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132382e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","ja3":"84330a279f90d61388a8bfc7cb80535f","session":"d80b25ac-ea49-4dce-bac6-8243469d0bc3","seq":1,"duration_ms":227,"bytes_in":248,"bytes_out":79},{"timestamp":"2026-10-28T01:18:54","port":19999,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:19999\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31393939390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132382e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","ja3":"84330a279f90d61388a8bfc7cb80535f","session":"f6b23020-f386-4f35-a0b9-6b610fe6fcc3","seq":1,"duration_ms":232,"bytes_in":249,"bytes_out":79}],"http_methods":[{"method":"GET","count":1165}],"distinct_ports_total":69,"top_paths":[{"path":"/","count":188,"ports":69},{"path":"/login","count":66,"ports":66},{"path":"/SayHello2Modlishka/","count":66,"ports":66},{"path":"/covenantuser/login","count":65,"ports":65},{"path":"/admin/console/index.html","count":65,"ports":65},{"path":"/api/v1/stats","count":64,"ports":64},{"path":"/api/v2/health","count":63,"ports":63},{"path":"/favicon.ico","count":62,"ports":62},{"path":"/webpanel/panel/login.php","count":61,"ports":61},{"path":"/panel/pb-fire","count":60,"ports":60},{"path":"/new/login","count":60,"ports":60},{"path":"/panel/","count":59,"ports":59},{"path":"/sign-in","count":58,"ports":58},{"path":"/gate.php","count":57,"ports":57},{"path":"/aaa9","count":56,"ports":56}],"distinct_paths_total":19,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"http/1.1","count":1069}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"<HONEYPOT>:18080","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[]}