{"ip":"178.16.55.133","total_events":10,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["10 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,542 bytes sent","bytes_sent":1542,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-28T13:10:36","last_seen":"2026-10-02T00:05:14","events_24h":6,"events_7d":10,"geo":{"country_code":"US","country_name":"United States","region":"New York","city":"New York","lat":40.7503,"lon":-74.0014,"asn":202412,"org":"Omegatech LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":22222,"proto":"tcp","label":"","count":4},{"port":17583,"proto":"tcp","label":"","count":2},{"port":447,"proto":"tcp","label":"","count":2},{"port":10004,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i200900_2b729b4bf6f3_29829a46703f"],"tls_client_hello":"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","tls_ja3":["4d5efa96609dc906f796e63cff009c2a"],"http_akin":["b11cun030_00040003_21fe282e","b11cun020_00040002_5ff1c0a9"]},"fingerprint_peers":{"t13i200900_2b729b4bf6f3_29829a46703f":4,"b11cun030_00040003_21fe282e":14,"b11cun020_00040002_5ff1c0a9":128},"akin_families":{"b11cun030_00040003_21fe282e":{"head":"b11cun020_00040002_5ff1c0a9","shapes":2,"ips":128},"b11cun020_00040002_5ff1c0a9":{"head":"b11cun020_00040002_5ff1c0a9","shapes":2,"ips":128}},"user_agents":[],"timeline":[{"date":"2026-09-28","count":4},{"date":"2026-10-01","count":4},{"date":"2026-10-02","count":2}],"recent_events":[{"timestamp":"2026-10-02T00:05:14","port":10004,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\"<HONEYPOT>:10004\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/remote/login?lang=en","summary":"","payload_hex":"474554202f72656d6f74652f6c6f67696e3f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303030340d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"","ja3":"4d5efa96609dc906f796e63cff009c2a","session":"bed821a3-1e74-4e30-b6cb-a16dbeda6aea","seq":1,"duration_ms":100,"bytes_in":111,"bytes_out":78},{"timestamp":"2026-10-02T00:05:14","port":10004,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:10004\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/remote/login?lang=en","summary":"","payload_hex":"474554202f72656d6f74652f6c6f67696e3f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303030340d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"","ja3":"4d5efa96609dc906f796e63cff009c2a","session":"bed821a3-1e74-4e30-b6cb-a16dbeda6aea","seq":2,"duration_ms":371,"bytes_in":198,"bytes_out":156},{"timestamp":"2026-10-01T22:37:36","port":447,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:447\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/remote/login?lang=en","summary":"","payload_hex":"474554202f72656d6f74652f6c6f67696e3f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a3434370d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"","ja3":"4d5efa96609dc906f796e63cff009c2a","session":"91d2b085-6a0f-4f39-a2bf-f0f6bb39767a","seq":2,"duration_ms":395,"bytes_in":194,"bytes_out":156},{"timestamp":"2026-10-01T22:37:35","port":447,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\"<HONEYPOT>:447\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/remote/login?lang=en","summary":"","payload_hex":"474554202f72656d6f74652f6c6f67696e3f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a3434370d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"","ja3":"4d5efa96609dc906f796e63cff009c2a","session":"91d2b085-6a0f-4f39-a2bf-f0f6bb39767a","seq":1,"duration_ms":100,"bytes_in":109,"bytes_out":78},{"timestamp":"2026-10-01T21:41:25","port":17583,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\"<HONEYPOT>:17583\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/remote/login?lang=en","summary":"","payload_hex":"474554202f72656d6f74652f6c6f67696e3f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a31373538330d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"","ja3":"4d5efa96609dc906f796e63cff009c2a","session":"9a89cccf-9735-4048-a592-cbddff816108","seq":1,"duration_ms":101,"bytes_in":111,"bytes_out":78},{"timestamp":"2026-10-01T21:41:25","port":17583,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:17583\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/remote/login?lang=en","summary":"","payload_hex":"474554202f72656d6f74652f6c6f67696e3f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a31373538330d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"","ja3":"4d5efa96609dc906f796e63cff009c2a","session":"9a89cccf-9735-4048-a592-cbddff816108","seq":2,"duration_ms":370,"bytes_in":198,"bytes_out":156},{"timestamp":"2026-09-28T15:44:00","port":22222,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\"<HONEYPOT>:22222\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/remote/login?lang=en","summary":"","payload_hex":"474554202f72656d6f74652f6c6f67696e3f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a32323232320d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"","ja3":"4d5efa96609dc906f796e63cff009c2a","session":"1a58f0cb-f168-42f8-9116-b4d0741e3d3c","seq":1,"duration_ms":100,"bytes_in":112,"bytes_out":78},{"timestamp":"2026-09-28T15:44:00","port":22222,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:22222\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/remote/login?lang=en","summary":"","payload_hex":"474554202f72656d6f74652f6c6f67696e3f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a32323232320d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"","ja3":"4d5efa96609dc906f796e63cff009c2a","session":"1a58f0cb-f168-42f8-9116-b4d0741e3d3c","seq":2,"duration_ms":309,"bytes_in":200,"bytes_out":156},{"timestamp":"2026-09-28T13:10:36","port":22222,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\"<HONEYPOT>:22222\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/remote/login?lang=en","summary":"","payload_hex":"474554202f72656d6f74652f6c6f67696e3f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a32323232320d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"","ja3":"4d5efa96609dc906f796e63cff009c2a","session":"2ef7d7f2-382b-4aea-8c9e-af127a543cfc","seq":1,"duration_ms":100,"bytes_in":111,"bytes_out":78},{"timestamp":"2026-09-28T13:10:36","port":22222,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:22222\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/remote/login?lang=en","summary":"","payload_hex":"474554202f72656d6f74652f6c6f67696e3f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a32323232320d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"","ja3":"4d5efa96609dc906f796e63cff009c2a","session":"2ef7d7f2-382b-4aea-8c9e-af127a543cfc","seq":2,"duration_ms":369,"bytes_in":198,"bytes_out":156}],"http_methods":[{"method":"GET","count":10}],"distinct_ports_total":4,"top_paths":[{"path":"/remote/login?lang=en","count":10,"ports":4}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"Keep-Alive","notable":false},{"name":"Host","value":"<HONEYPOT>:10004","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[],"data_as_of":"2026-10-02T00:18:29.494791+00:00"}