{"ip":"178.62.209.33","total_events":2,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["2 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,260 bytes sent","bytes_sent":1260,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-23T00:24:40","last_seen":"2026-09-23T00:24:40","events_24h":2,"events_7d":2,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"North Holland","city":"Amsterdam","lat":52.352,"lon":4.9392,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":993,"proto":"tcp","label":"IMAPS","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d301300_1d37bd780c83_5ae85263eb3b"],"tls_client_hello":"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","tls_ja3":["9524fdc98d5b2c3efd160e8906158fa8"],"http_akin":["a11cun150_101ce87f_80239852","a11cun160_105ce87f_6f8bab43"]},"fingerprint_peers":{"t13d301300_1d37bd780c83_5ae85263eb3b":310,"a11cun150_101ce87f_80239852":46,"a11cun160_105ce87f_6f8bab43":46},"akin_families":{"a11cun150_101ce87f_80239852":{"head":"a11cun150_101ce87f_80239852","shapes":2,"ips":46},"a11cun160_105ce87f_6f8bab43":{"head":"a11cun150_101ce87f_80239852","shapes":2,"ips":46}},"user_agents":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-23","count":2}],"recent_events":[{"timestamp":"2026-09-23T00:24:40","port":993,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"sec-ch-ua\":\"\\\"Chromium\\\";v=\\\"142\\\", \\\"Not:A-Brand\\\";v=\\\"24\\\", \\\"Brave\\\";v=\\\"142\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"Linux\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"sec-gpc\":\"1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36\"}","body":"","sni":"<HONEYPOT>","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36","ja3":"9524fdc98d5b2c3efd160e8906158fa8","session":"5f028e31-5331-4734-a145-d5489de28a08","seq":1,"duration_ms":106,"bytes_in":606,"bytes_out":20},{"timestamp":"2026-09-23T00:24:40","port":993,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate\",\"accept-language\":\"en-US,en;q=0.5\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"referer\":\"https://<HONEYPOT>:993/\",\"sec-ch-ua\":\"\\\"Chromium\\\";v=\\\"142\\\", \\\"Not:A-Brand\\\";v=\\\"24\\\", \\\"Brave\\\";v=\\\"142\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"Linux\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"sec-gpc\":\"1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36\"}","body":"","sni":"<HONEYPOT>","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>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<HONEYPOT>3a3939332f0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36","ja3":"9524fdc98d5b2c3efd160e8906158fa8","session":"66fa3b0a-b412-417c-a66a-488993767155","seq":1,"duration_ms":107,"bytes_in":654,"bytes_out":20}],"http_methods":[{"method":"GET","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1},{"path":"/favicon.ico","count":1,"ports":1}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Connection","Host","Referer","Sec-Ch-Ua","Sec-Ch-Ua-Mobile","Sec-Ch-Ua-Platform","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","Sec-Fetch-User","Sec-Gpc","Upgrade-Insecure-Requests","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.5","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"Referer","value":"https://<HONEYPOT>:993/","notable":true},{"name":"Sec-Ch-Ua","value":"\"Chromium\";v=\"142\", \"Not:A-Brand\";v=\"24\", \"Brave\";v=\"142\"","notable":false},{"name":"Sec-Ch-Ua-Mobile","value":"?0","notable":false},{"name":"Sec-Ch-Ua-Platform","value":"\"Linux\"","notable":false},{"name":"Sec-Fetch-Dest","value":"document","notable":false},{"name":"Sec-Fetch-Mode","value":"navigate","notable":false},{"name":"Sec-Fetch-Site","value":"none","notable":false},{"name":"Sec-Fetch-User","value":"?1","notable":false},{"name":"Sec-Gpc","value":"1","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36","notable":false}],"distinct_sets":2,"events_with_headers":2},"tags":[],"data_as_of":"2026-09-23T16:01:26.633404+00:00"}