{"ip":"157.230.159.66","observed":true,"total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["1 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"224 bytes sent","bytes_sent":224,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-09-23T03:24:13","last_seen":"2026-09-23T03:24:13","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"US","country_name":"United States","region":"California","city":"Santa Clara","lat":37.3486,"lon":-121.9732,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i1711h1_ab0a1bf427ad_882d495ac381"],"tls_client_hello":"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","tls_ja3":["fb0c9cea0478d6132076f4cdcb0d5224"],"http_akin":["b11cun050_00040017_976354f0"]},"fingerprint_peers":{"b11cun050_00040017_976354f0":1270,"t13i1711h1_ab0a1bf427ad_882d495ac381":29},"akin_families":{"b11cun050_00040017_976354f0":{"head":"b11cun050_00040017_976354f0","shapes":2,"ips":1270}},"user_agents":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-23","count":1}],"recent_events":[{"timestamp":"2026-09-23T03:24:13","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3135302e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36","ja3":"fb0c9cea0478d6132076f4cdcb0d5224","session":"5ec3634d-b161-43a9-b438-9bac72f376d5","seq":1,"duration_ms":100,"bytes_in":224,"bytes_out":79}],"http_methods":[{"method":"GET","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"http/1.1","count":1}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-10-15T06:18:01.314075+00:00"}