{"ip":"185.191.236.38","total_events":188,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"37+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 37 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"49,730 bytes sent","bytes_sent":49730,"session_seconds":2,"persistent":false}},"first_seen":"2026-10-05T19:57:33","last_seen":"2026-10-06T22:32:35","events_24h":153,"events_7d":188,"geo":{"country_code":"CH","country_name":"Switzerland","region":"","city":"","lat":47.1449,"lon":8.1551,"asn":264617,"org":"GRUPO PANAGLOBAL 15 S.A"},"source_domain":"scan.apcosys.cc","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":10,"protocols":[{"protocol":"udp","events":8},{"protocol":"netbios","events":2}],"ports":[{"port":3389,"events":3},{"port":123,"events":2},{"port":139,"events":2},{"port":389,"events":2},{"port":11211,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T22:26:39","last_seen":"2026-10-06T16:30:55","recent":[{"timestamp":"2026-10-06T16:30:55","port":389,"src_port":7228,"proto":"udp","app_proto":"","app_protocol":"ldap","summary":"0�\u0000\u0000\u0000-\u0002\u0001\u0001c�\u0000\u0000\u0000$\u0004\u0000\n\u0001\u0000\n\u0001\u0000\u0002\u0001\u0000\u0002\u0001\u0000\u0001\u0001\u0000�\u000bobjectclass0�\u0000\u0000\u0000\u0000\u0000\n","payload_hex":"30840000002d02010163840000002404000a01000a0100020100020100010100870b6f626a656374636c617373308400000000000a","sni":"","session":"f79cf525-ea78-4407-9585-5bad96110118","bytes_in":53,"source_verified":false,"enriched":{"digest":"9942ca361380b1c4","strings":["objectclass0"]}},{"timestamp":"2026-10-06T16:22:29","port":389,"src_port":10233,"proto":"udp","app_proto":"","app_protocol":"ldap","summary":"0�\u0000\u0000\u0000-\u0002\u0001\u0001c�\u0000\u0000\u0000$\u0004\u0000\n\u0001\u0000\n\u0001\u0000\u0002\u0001\u0000\u0002\u0001\u0000\u0001\u0001\u0000�\u000bobjectclass0�\u0000\u0000\u0000\u0000\u0000\n","payload_hex":"30840000002d02010163840000002404000a01000a0100020100020100010100870b6f626a656374636c617373308400000000000a","sni":"","session":"a05bd8c0-cca9-4c70-96a8-fc7fec4b99f0","bytes_in":53,"source_verified":false,"enriched":{"digest":"9942ca361380b1c4","strings":["objectclass0"]}},{"timestamp":"2026-10-06T15:43:38","port":3389,"src_port":62285,"proto":"udp","app_proto":"","app_protocol":"","summary":"\u0000\u0000\u0000\u0000\u0000\u0000\u0000�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000T\u0006","payload_hex":"00000000000000ff00000000000000005406","sni":"","session":"d7ae457a-aaba-4202-97fd-de0d98a77e4e","bytes_in":18,"source_verified":false},{"timestamp":"2026-10-06T15:28:11","port":3389,"src_port":61691,"proto":"udp","app_proto":"","app_protocol":"","summary":"\u0000\u0000\u0000\u0000\u0000\u0000\u0000�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000T\u0006","payload_hex":"00000000000000ff00000000000000005406","sni":"","session":"b1566db2-d1fb-497f-8c7a-9b8846046987","bytes_in":18,"source_verified":false},{"timestamp":"2026-10-06T15:27:38","port":3389,"src_port":3038,"proto":"udp","app_proto":"","app_protocol":"","summary":"\u0000\u0000\u0000\u0000\u0000\u0000\u0000�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000T\u0006","payload_hex":"00000000000000ff00000000000000005406","sni":"","session":"8b6dc15c-ff26-473b-92dc-5af8599b12de","bytes_in":18,"source_verified":false},{"timestamp":"2026-10-06T01:22:36","port":139,"src_port":4585,"proto":"udp","app_proto":"netbios","app_protocol":"dns","summary":"NetBIOS node status query *","payload_hex":"e5d80000000100000000000020434b4141414141414141414141414141414141414141414141414141414141410000210001","sni":"","session":"e910f905-8660-489e-91da-d5b1c8421e84","bytes_in":50,"source_verified":false,"enriched":{"digest":"5e140ecfd11c0972","strings":["NetBIOS node status query *"]}},{"timestamp":"2026-10-06T01:04:49","port":139,"src_port":2085,"proto":"udp","app_proto":"netbios","app_protocol":"dns","summary":"NetBIOS node status query *","payload_hex":"e5d80000000100000000000020434b4141414141414141414141414141414141414141414141414141414141410000210001","sni":"","session":"fa92ca11-b03c-448f-9ad8-f2a9547d2246","bytes_in":50,"source_verified":false,"enriched":{"digest":"5e140ecfd11c0972","strings":["NetBIOS node status query *"]}},{"timestamp":"2026-10-05T23:40:21","port":123,"src_port":43621,"proto":"udp","app_proto":"","app_protocol":"ntp","summary":"\u0017\u0000\u0003*\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1700032a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","sni":"","session":"77f2583e-b4b5-4ffd-aa26-3ad8578e79f9","bytes_in":192,"source_verified":false},{"timestamp":"2026-10-05T23:40:15","port":123,"src_port":12604,"proto":"udp","app_proto":"","app_protocol":"ntp","summary":"�\u0000\u0004�\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�O#Kq�R�","payload_hex":"e30004fa000100000001000000000000000000000000000000000000000000000000000000000000c54f234b71b152f3","sni":"","session":"a0a11b1c-6e97-4195-9e90-3f45dd368c39","bytes_in":48,"source_verified":false,"enriched":{"digest":"3aab7ca6d5f67dc9","strings":["O#Kq"]}},{"timestamp":"2026-10-05T22:26:39","port":11211,"src_port":11143,"proto":"udp","app_proto":"","app_protocol":"","summary":"ZM\u0000\u0000\u0000\u0001\u0000\u0000stats items\r\n","payload_hex":"5a4d0000000100007374617473206974656d730d0a","sni":"","session":"bcb1f5db-983a-4af8-a42a-fc8a8493fd33","bytes_in":21,"source_verified":false,"enriched":{"digest":"35755f15156d3b12","strings":["stats items"]}}]},"top_ports":[{"port":2049,"proto":"tcp","label":"NFS","count":15},{"port":3128,"proto":"tcp","label":"HTTP-proxy","count":12},{"port":2480,"proto":"tcp","label":"","count":12},{"port":5222,"proto":"tcp","label":"XMPP","count":10},{"port":14343,"proto":"tcp","label":"","count":9},{"port":1521,"proto":"tcp","label":"Oracle","count":9},{"port":2375,"proto":"tcp","label":"Docker","count":9},{"port":4786,"proto":"tcp","label":"Cisco-SCM","count":9},{"port":15672,"proto":"tcp","label":"RabbitMQ","count":9},{"port":389,"proto":"tcp","label":"LDAP","count":6},{"port":515,"proto":"tcp","label":"","count":6},{"port":25565,"proto":"tcp","label":"Minecraft","count":6},{"port":5000,"proto":"tcp","label":"Web-alt","count":6},{"port":49152,"proto":"tcp","label":"","count":6},{"port":3306,"proto":"tcp","label":"MySQL","count":5}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i251000_b78ed14e2fd0_f50d94e863eb"],"tls_client_hello":"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","tls_ja3":["416eca07dcaad72dec6f76d1277b3eff"],"http_akin":["b11cun050_0004001e_6f27235c","b11cun050_00040017_e873236c"]},"fingerprint_peers":{"t13i251000_b78ed14e2fd0_f50d94e863eb":44,"b11cun050_0004001e_6f27235c":3,"b11cun050_00040017_e873236c":757},"akin_families":{"b11cun050_00040017_e873236c":{"head":"b11cun050_00040017_e873236c","shapes":3,"ips":757}},"user_agents":["Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.72 YaBrowser/21.5.1.355 Yowser/2.5 Safari/537.36","Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.182 Safari/537.36","Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.106 Safari/537.36","ApcosysBot/1.0 (+https://apcosys.net)","Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.1 Safari/605.1.15","Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.152 YaBrowser/21.2.3.106 Yowser/2.5 Safari/537.36"],"timeline":[{"date":"2026-10-05","count":35},{"date":"2026-10-06","count":153}],"recent_events":[{"timestamp":"2026-10-06T22:32:35","port":5269,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/plain\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"ApcosysBot/1.0 (+https://apcosys.net)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204170636f737973426f742f312e3020282b68747470733a2f2f6170636f7379732e6e6574290d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570743a20746578742f706c61696e0d0a4163636570742d456e636f64696e673a206964656e746974790d0a0d0a","method":"GET","user_agent":"ApcosysBot/1.0 (+https://apcosys.net)","ja3":"","session":"1abcedf1-70b0-4fbf-a98f-980d7e37a2d0","seq":1,"duration_ms":100,"bytes_in":166,"bytes_out":79},{"timestamp":"2026-10-06T22:32:33","port":5269,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"accept-language\":\"en-US;q=0.8,en;q=0.7\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a206964656e746974790d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31342e30205361666172692f3630352e312e31350d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","ja3":"","session":"254afce9-de8b-4fca-a8cf-cbc286b08c61","seq":2,"duration_ms":1096,"bytes_in":509,"bytes_out":158},{"timestamp":"2026-10-06T22:32:32","port":5269,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"accept-language\":\"en-US;q=0.8,en;q=0.7\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a206964656e746974790d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31342e30205361666172692f3630352e312e31350d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","ja3":"","session":"254afce9-de8b-4fca-a8cf-cbc286b08c61","seq":1,"duration_ms":101,"bytes_in":249,"bytes_out":79},{"timestamp":"2026-10-06T22:23:47","port":5222,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/plain\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"ApcosysBot/1.0 (+https://apcosys.net)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204170636f737973426f742f312e3020282b68747470733a2f2f6170636f7379732e6e6574290d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570743a20746578742f706c61696e0d0a4163636570742d456e636f64696e673a206964656e746974790d0a0d0a","method":"GET","user_agent":"ApcosysBot/1.0 (+https://apcosys.net)","ja3":"","session":"68bc62f9-1f15-4cb1-b413-4ba943db9ed5","seq":1,"duration_ms":101,"bytes_in":165,"bytes_out":79},{"timestamp":"2026-10-06T22:23:45","port":5222,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"accept-language\":\"en-US;q=0.8,en;q=0.7\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.152 YaBrowser/21.2.3.100 Yowser/2.5 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a206964656e746974790d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e370d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f38382e302e343332342e31353220596142726f777365722f32312e322e332e31303020596f777365722f322e35205361666172692f3533372e33360d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.152 YaBrowser/21.2.3.100 Yowser/2.5 Safari/537.36","ja3":"","session":"40e271a8-47c2-4fcb-b7ad-0e5994dfbd38","seq":2,"duration_ms":1096,"bytes_in":567,"bytes_out":158},{"timestamp":"2026-10-06T22:23:44","port":5222,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"accept-language\":\"en-US;q=0.8,en;q=0.7\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.152 YaBrowser/21.2.3.100 Yowser/2.5 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a206964656e746974790d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e370d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f38382e302e343332342e31353220596142726f777365722f32312e322e332e31303020596f777365722f322e35205361666172692f3533372e33360d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.152 YaBrowser/21.2.3.100 Yowser/2.5 Safari/537.36","ja3":"","session":"40e271a8-47c2-4fcb-b7ad-0e5994dfbd38","seq":1,"duration_ms":101,"bytes_in":278,"bytes_out":79},{"timestamp":"2026-10-06T22:18:52","port":5222,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH_8.9\r\n","payload_hex":"5353482d322e302d4f70656e5353485f382e390d0a","method":"","user_agent":"","ja3":"","session":"c6f723fc-b876-46aa-8436-299ad954b837","seq":1,"duration_ms":921,"bytes_in":21,"bytes_out":14,"enriched":{"digest":"ab498fd23302da86","label":"SSH","strings":["SSH-2.0-OpenSSH_8.9"]}},{"timestamp":"2026-10-06T22:15:41","port":5222,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/plain\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"ApcosysBot/1.0 (+https://apcosys.net)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204170636f737973426f742f312e3020282b68747470733a2f2f6170636f7379732e6e6574290d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570743a20746578742f706c61696e0d0a4163636570742d456e636f64696e673a206964656e746974790d0a0d0a","method":"GET","user_agent":"ApcosysBot/1.0 (+https://apcosys.net)","ja3":"","session":"9ad2aa4c-3ae5-40ef-a210-c1d0baa0168d","seq":1,"duration_ms":100,"bytes_in":166,"bytes_out":79},{"timestamp":"2026-10-06T22:15:39","port":5222,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"accept-language\":\"en-US;q=0.8,en;q=0.7\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 YaBrowser/21.8.3.607 Yowser/2.5 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a206964656e746974790d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e370d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b20574f57363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f39322e302e343531352e31353920596142726f777365722f32312e382e332e36303720596f777365722f322e35205361666172692f3533372e33360d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 YaBrowser/21.8.3.607 Yowser/2.5 Safari/537.36","ja3":"","session":"00c6d16e-9fca-4920-b4e4-df10f1fbe37b","seq":2,"duration_ms":1088,"bytes_in":559,"bytes_out":158},{"timestamp":"2026-10-06T22:15:38","port":5222,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"accept-language\":\"en-US;q=0.8,en;q=0.7\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 YaBrowser/21.8.3.607 Yowser/2.5 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a206964656e746974790d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e370d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b20574f57363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f39322e302e343531352e31353920596142726f777365722f32312e382e332e36303720596f777365722f322e35205361666172692f3533372e33360d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 YaBrowser/21.8.3.607 Yowser/2.5 Safari/537.36","ja3":"","session":"00c6d16e-9fca-4920-b4e4-df10f1fbe37b","seq":1,"duration_ms":101,"bytes_in":274,"bytes_out":79}],"http_methods":[{"method":"GET","count":153}],"distinct_ports_total":37,"top_paths":[{"path":"/","count":53,"ports":24},{"path":"/robots.txt","count":50,"ports":23},{"path":"/favicon.ico","count":50,"ports":23}],"distinct_paths_total":3,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[{"value":"SSH-2.0-OpenSSH_8.9","count":2}],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/plain","notable":false},{"name":"Accept-Encoding","value":"identity","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"ApcosysBot/1.0 (+https://apcosys.net)","notable":false}],"distinct_sets":2,"events_with_headers":9},"tags":[],"data_as_of":"2026-10-06T22:52:49.150137+00:00"}