{"ip":"185.243.5.156","total_events":369,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"123+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 123 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"102,134 bytes sent","bytes_sent":102134,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-01T08:56:18","last_seen":"2026-09-01T09:02:03","events_24h":0,"events_7d":0,"geo":{"country_code":"HK","country_name":"Hong Kong","region":"","city":"","lat":22.2578,"lon":114.1657,"asn":23470,"org":"ReliableSite.Net LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as23470","label":"ReliableSite.Net","category":"cdn","url":"https://www.peeringdb.com/asn/23470"},"cve_matches":[],"malware":[],"top_ports":[{"port":5059,"proto":"tcp","label":"","count":3},{"port":4987,"proto":"tcp","label":"","count":3},{"port":4994,"proto":"tcp","label":"","count":3},{"port":5052,"proto":"tcp","label":"","count":3},{"port":5057,"proto":"tcp","label":"","count":3},{"port":4992,"proto":"tcp","label":"","count":3},{"port":5054,"proto":"tcp","label":"","count":3},{"port":4990,"proto":"tcp","label":"","count":3},{"port":6080,"proto":"tcp","label":"","count":3},{"port":5062,"proto":"tcp","label":"","count":3},{"port":4999,"proto":"tcp","label":"","count":3},{"port":6072,"proto":"tcp","label":"","count":3},{"port":43139,"proto":"tcp","label":"","count":3},{"port":6973,"proto":"tcp","label":"","count":3},{"port":4985,"proto":"tcp","label":"","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i181000_85036bcba153_d41ae481755e"],"tls_client_hello":"","tls_ja3":["8a9d5d0f12f7d43ee3af1c51d2998d99"],"http_akin":[]},"fingerprint_peers":{"t13i181000_85036bcba153_d41ae481755e":56},"user_agents":[],"timeline":[{"date":"2026-09-01","count":369}],"recent_events":[{"timestamp":"2026-09-01T09:02:03","port":65061,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS sip:<HONEYPOT> SIP/2.0\r\nVia: SIP/2.0/TCP <HONEYPOT>:65061;branch=z9hG4bKacc91663\r\nFrom: <sip:admin@<HONEYPOT>>;tag=acc91663\r\nTo: <sip:<HONEYPOT>>\r\nCall-ID: ac-c91663@<HONEYPOT>\r\nCSeq: 1 OPTIONS\r\nUser-Agent: AudioCodes-SBC/7.40A\r\nContent-Length: 0\r\n\r\n","payload_hex":"4f5054494f4e53207369703a<HONEYPOT>205349502f322e300d0a5669613a205349502f322e302f54435020<HONEYPOT>3a36353036313b6272616e63683d7a39684734624b61636339313636330d0a46726f6d3a203c7369703a61646d696e40<HONEYPOT>3e3b7461673d61636339313636330d0a546f3a203c7369703a<HONEYPOT>3e0d0a43616c6c2d49443a2061632d63393136363340<HONEYPOT>0d0a435365713a2031204f5054494f4e530d0a557365722d4167656e743a20417564696f436f6465732d5342432f372e3430410d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","ja3":"","session":"7bfef91b-2261-457d-ab43-04da3bc304d9","seq":1,"duration_ms":100,"bytes_in":268,"bytes_out":78,"enriched":{"digest":"90db13cf98f04bf2","label":"HTTP","strings":["OPTIONS sip:<HONEYPOT> SIP/2.0","Via: SIP/2.0/TCP <HONEYPOT>:65061;branch=z9hG4bKacc91663","From: <sip:admin@<HONEYPOT>>;tag=acc91663","To: <sip:<HONEYPOT>>","Call-ID: ac-c91663@<HONEYPOT>","CSeq: 1 OPTIONS","User-Agent: AudioCodes-SBC/7.40A","Content-Length: 0"],"iocs":{"paths":["/2.0/TCP"]}}},{"timestamp":"2026-09-01T09:02:03","port":65061,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS sip:<HONEYPOT>:65061 SIP/2.0\r\nVia: SIP/2.0/TCP <HONEYPOT>:65061;branch=z9hG4bKc91663;rport\r\nFrom: <sip:ping@<HONEYPOT>>;tag=c91663\r\nTo: <sip:<HONEYPOT>>\r\nCall-ID: cisco-c91663@<HONEYPOT>\r\nCSeq: 101 OPTIONS\r\nUser-Agent: Cisco-RTC/9.3.0\r\nContent-Length: 0\r\n\r\n","payload_hex":"4f5054494f4e53207369703a<HONEYPOT>3a3635303631205349502f322e300d0a5669613a205349502f322e302f54435020<HONEYPOT>3a36353036313b6272616e63683d7a39684734624b6339313636333b72706f72740d0a46726f6d3a203c7369703a70696e6740<HONEYPOT>3e3b7461673d6339313636330d0a546f3a203c7369703a<HONEYPOT>3e0d0a43616c6c2d49443a20636973636f2d63393136363340<HONEYPOT>0d0a435365713a20313031204f5054494f4e530d0a557365722d4167656e743a20436973636f2d5254432f392e332e300d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","ja3":"","session":"359ffc5b-208c-49b7-8740-f4954d138f41","seq":1,"duration_ms":100,"bytes_in":275,"bytes_out":78,"enriched":{"digest":"baa0c173da024979","label":"HTTP","strings":["OPTIONS sip:<HONEYPOT>:65061 SIP/2.0","Via: SIP/2.0/TCP <HONEYPOT>:65061;branch=z9hG4bKc91663;rport","From: <sip:ping@<HONEYPOT>>;tag=c91663","To: <sip:<HONEYPOT>>","Call-ID: cisco-c91663@<HONEYPOT>","CSeq: 101 OPTIONS","User-Agent: Cisco-RTC/9.3.0","Content-Length: 0"],"iocs":{"paths":["/2.0/TCP"]}}},{"timestamp":"2026-09-01T09:02:03","port":65061,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS sip:<HONEYPOT> SIP/2.0\r\nVia: SIP/2.0/TCP <HONEYPOT>:65061;branch=z9hG4bK-scan-c91663\r\nFrom: <sip:scanner@<HONEYPOT>>;tag=scan1\r\nTo: <sip:<HONEYPOT>>\r\nCall-ID: scan-c91663@<HONEYPOT>\r\nCSeq: 1 OPTIONS\r\nMax-Forwards: 70\r\nUser-Agent: SIP-Discovery-Engine\r\nContent-Length: 0\r\n\r\n","payload_hex":"4f5054494f4e53207369703a<HONEYPOT>205349502f322e300d0a5669613a205349502f322e302f54435020<HONEYPOT>3a36353036313b6272616e63683d7a39684734624b2d7363616e2d6339313636330d0a46726f6d3a203c7369703a7363616e6e657240<HONEYPOT>3e3b7461673d7363616e310d0a546f3a203c7369703a<HONEYPOT>3e0d0a43616c6c2d49443a207363616e2d63393136363340<HONEYPOT>0d0a435365713a2031204f5054494f4e530d0a4d61782d466f7277617264733a2037300d0a557365722d4167656e743a205349502d446973636f766572792d456e67696e650d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","ja3":"","session":"07aca580-84bc-48d8-bed5-a9478fe93827","seq":1,"duration_ms":101,"bytes_in":291,"bytes_out":78,"enriched":{"digest":"f3dc765017dea00b","label":"HTTP","strings":["OPTIONS sip:<HONEYPOT> SIP/2.0","Via: SIP/2.0/TCP <HONEYPOT>:65061;branch=z9hG4bK-scan-c91663","From: <sip:scanner@<HONEYPOT>>;tag=scan1","To: <sip:<HONEYPOT>>","Call-ID: scan-c91663@<HONEYPOT>","CSeq: 1 OPTIONS","Max-Forwards: 70","User-Agent: SIP-Discovery-Engine","Content-Length: 0"],"iocs":{"paths":["/2.0/TCP"]}}},{"timestamp":"2026-09-01T09:02:00","port":65060,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS sip:<HONEYPOT> SIP/2.0\r\nVia: SIP/2.0/TCP <HONEYPOT>:65060;branch=z9hG4bKacb0b457\r\nFrom: <sip:admin@<HONEYPOT>>;tag=acb0b457\r\nTo: <sip:<HONEYPOT>>\r\nCall-ID: ac-b0b457@<HONEYPOT>\r\nCSeq: 1 OPTIONS\r\nUser-Agent: AudioCodes-SBC/7.40A\r\nContent-Length: 0\r\n\r\n","payload_hex":"4f5054494f4e53207369703a<HONEYPOT>205349502f322e300d0a5669613a205349502f322e302f54435020<HONEYPOT>3a36353036303b6272616e63683d7a39684734624b61636230623435370d0a46726f6d3a203c7369703a61646d696e40<HONEYPOT>3e3b7461673d61636230623435370d0a546f3a203c7369703a<HONEYPOT>3e0d0a43616c6c2d49443a2061632d62306234353740<HONEYPOT>0d0a435365713a2031204f5054494f4e530d0a557365722d4167656e743a20417564696f436f6465732d5342432f372e3430410d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","ja3":"","session":"53fc19db-25ec-4807-94bc-0ed79f8226ce","seq":1,"duration_ms":100,"bytes_in":268,"bytes_out":78,"enriched":{"digest":"cb87742a621a6d9c","label":"HTTP","strings":["OPTIONS sip:<HONEYPOT> SIP/2.0","Via: SIP/2.0/TCP <HONEYPOT>:65060;branch=z9hG4bKacb0b457","From: <sip:admin@<HONEYPOT>>;tag=acb0b457","To: <sip:<HONEYPOT>>","Call-ID: ac-b0b457@<HONEYPOT>","CSeq: 1 OPTIONS","User-Agent: AudioCodes-SBC/7.40A","Content-Length: 0"],"iocs":{"paths":["/2.0/TCP"]}}},{"timestamp":"2026-09-01T09:02:00","port":65060,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS sip:<HONEYPOT>:65060 SIP/2.0\r\nVia: SIP/2.0/TCP <HONEYPOT>:65060;branch=z9hG4bKb0b457;rport\r\nFrom: <sip:ping@<HONEYPOT>>;tag=b0b457\r\nTo: <sip:<HONEYPOT>>\r\nCall-ID: cisco-b0b457@<HONEYPOT>\r\nCSeq: 101 OPTIONS\r\nUser-Agent: Cisco-RTC/9.3.0\r\nContent-Length: 0\r\n\r\n","payload_hex":"4f5054494f4e53207369703a<HONEYPOT>3a3635303630205349502f322e300d0a5669613a205349502f322e302f54435020<HONEYPOT>3a36353036303b6272616e63683d7a39684734624b6230623435373b72706f72740d0a46726f6d3a203c7369703a70696e6740<HONEYPOT>3e3b7461673d6230623435370d0a546f3a203c7369703a<HONEYPOT>3e0d0a43616c6c2d49443a20636973636f2d62306234353740<HONEYPOT>0d0a435365713a20313031204f5054494f4e530d0a557365722d4167656e743a20436973636f2d5254432f392e332e300d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","ja3":"","session":"7a5256f3-7ce5-467b-90ad-def52b0f9f71","seq":1,"duration_ms":101,"bytes_in":275,"bytes_out":78,"enriched":{"digest":"d245eb01541083fd","label":"HTTP","strings":["OPTIONS sip:<HONEYPOT>:65060 SIP/2.0","Via: SIP/2.0/TCP <HONEYPOT>:65060;branch=z9hG4bKb0b457;rport","From: <sip:ping@<HONEYPOT>>;tag=b0b457","To: <sip:<HONEYPOT>>","Call-ID: cisco-b0b457@<HONEYPOT>","CSeq: 101 OPTIONS","User-Agent: Cisco-RTC/9.3.0","Content-Length: 0"],"iocs":{"paths":["/2.0/TCP"]}}},{"timestamp":"2026-09-01T09:02:00","port":65060,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS sip:<HONEYPOT> SIP/2.0\r\nVia: SIP/2.0/TCP <HONEYPOT>:65060;branch=z9hG4bK-scan-b0b457\r\nFrom: <sip:scanner@<HONEYPOT>>;tag=scan1\r\nTo: <sip:<HONEYPOT>>\r\nCall-ID: scan-b0b457@<HONEYPOT>\r\nCSeq: 1 OPTIONS\r\nMax-Forwards: 70\r\nUser-Agent: SIP-Discovery-Engine\r\nContent-Length: 0\r\n\r\n","payload_hex":"4f5054494f4e53207369703a<HONEYPOT>205349502f322e300d0a5669613a205349502f322e302f54435020<HONEYPOT>3a36353036303b6272616e63683d7a39684734624b2d7363616e2d6230623435370d0a46726f6d3a203c7369703a7363616e6e657240<HONEYPOT>3e3b7461673d7363616e310d0a546f3a203c7369703a<HONEYPOT>3e0d0a43616c6c2d49443a207363616e2d62306234353740<HONEYPOT>0d0a435365713a2031204f5054494f4e530d0a4d61782d466f7277617264733a2037300d0a557365722d4167656e743a205349502d446973636f766572792d456e67696e650d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","ja3":"","session":"b6cdbe75-8d99-4c37-aa3b-56a619a8bd8b","seq":1,"duration_ms":101,"bytes_in":291,"bytes_out":78,"enriched":{"digest":"baf70a16f6cf76a8","label":"HTTP","strings":["OPTIONS sip:<HONEYPOT> SIP/2.0","Via: SIP/2.0/TCP <HONEYPOT>:65060;branch=z9hG4bK-scan-b0b457","From: <sip:scanner@<HONEYPOT>>;tag=scan1","To: <sip:<HONEYPOT>>","Call-ID: scan-b0b457@<HONEYPOT>","CSeq: 1 OPTIONS","Max-Forwards: 70","User-Agent: SIP-Discovery-Engine","Content-Length: 0"],"iocs":{"paths":["/2.0/TCP"]}}},{"timestamp":"2026-09-01T09:01:57","port":55061,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS sip:<HONEYPOT> SIP/2.0\r\nVia: SIP/2.0/TCP <HONEYPOT>:55061;branch=z9hG4bKac2eff5d\r\nFrom: <sip:admin@<HONEYPOT>>;tag=ac2eff5d\r\nTo: <sip:<HONEYPOT>>\r\nCall-ID: ac-2eff5d@<HONEYPOT>\r\nCSeq: 1 OPTIONS\r\nUser-Agent: AudioCodes-SBC/7.40A\r\nContent-Length: 0\r\n\r\n","payload_hex":"4f5054494f4e53207369703a<HONEYPOT>205349502f322e300d0a5669613a205349502f322e302f54435020<HONEYPOT>3a35353036313b6272616e63683d7a39684734624b61633265666635640d0a46726f6d3a203c7369703a61646d696e40<HONEYPOT>3e3b7461673d61633265666635640d0a546f3a203c7369703a<HONEYPOT>3e0d0a43616c6c2d49443a2061632d32656666356440<HONEYPOT>0d0a435365713a2031204f5054494f4e530d0a557365722d4167656e743a20417564696f436f6465732d5342432f372e3430410d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","ja3":"","session":"0441cefe-52dc-4b62-85f5-aae86c779926","seq":1,"duration_ms":100,"bytes_in":268,"bytes_out":78,"enriched":{"digest":"998f84dec9f3b1f1","label":"HTTP","strings":["OPTIONS sip:<HONEYPOT> SIP/2.0","Via: SIP/2.0/TCP <HONEYPOT>:55061;branch=z9hG4bKac2eff5d","From: <sip:admin@<HONEYPOT>>;tag=ac2eff5d","To: <sip:<HONEYPOT>>","Call-ID: ac-2eff5d@<HONEYPOT>","CSeq: 1 OPTIONS","User-Agent: AudioCodes-SBC/7.40A","Content-Length: 0"],"iocs":{"paths":["/2.0/TCP"]}}},{"timestamp":"2026-09-01T09:01:57","port":55061,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS sip:<HONEYPOT>:55061 SIP/2.0\r\nVia: SIP/2.0/TCP <HONEYPOT>:55061;branch=z9hG4bK2eff5d;rport\r\nFrom: <sip:ping@<HONEYPOT>>;tag=2eff5d\r\nTo: <sip:<HONEYPOT>>\r\nCall-ID: cisco-2eff5d@<HONEYPOT>\r\nCSeq: 101 OPTIONS\r\nUser-Agent: Cisco-RTC/9.3.0\r\nContent-Length: 0\r\n\r\n","payload_hex":"4f5054494f4e53207369703a<HONEYPOT>3a3535303631205349502f322e300d0a5669613a205349502f322e302f54435020<HONEYPOT>3a35353036313b6272616e63683d7a39684734624b3265666635643b72706f72740d0a46726f6d3a203c7369703a70696e6740<HONEYPOT>3e3b7461673d3265666635640d0a546f3a203c7369703a<HONEYPOT>3e0d0a43616c6c2d49443a20636973636f2d32656666356440<HONEYPOT>0d0a435365713a20313031204f5054494f4e530d0a557365722d4167656e743a20436973636f2d5254432f392e332e300d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","ja3":"","session":"94736089-ab49-4ad7-bd9e-46c2194f0d41","seq":1,"duration_ms":100,"bytes_in":275,"bytes_out":78,"enriched":{"digest":"44e01eb09e3e80dd","label":"HTTP","strings":["OPTIONS sip:<HONEYPOT>:55061 SIP/2.0","Via: SIP/2.0/TCP <HONEYPOT>:55061;branch=z9hG4bK2eff5d;rport","From: <sip:ping@<HONEYPOT>>;tag=2eff5d","To: <sip:<HONEYPOT>>","Call-ID: cisco-2eff5d@<HONEYPOT>","CSeq: 101 OPTIONS","User-Agent: Cisco-RTC/9.3.0","Content-Length: 0"],"iocs":{"paths":["/2.0/TCP"]}}},{"timestamp":"2026-09-01T09:01:57","port":55061,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS sip:<HONEYPOT> SIP/2.0\r\nVia: SIP/2.0/TCP <HONEYPOT>:55061;branch=z9hG4bK-scan-2eff5d\r\nFrom: <sip:scanner@<HONEYPOT>>;tag=scan1\r\nTo: <sip:<HONEYPOT>>\r\nCall-ID: scan-2eff5d@<HONEYPOT>\r\nCSeq: 1 OPTIONS\r\nMax-Forwards: 70\r\nUser-Agent: SIP-Discovery-Engine\r\nContent-Length: 0\r\n\r\n","payload_hex":"4f5054494f4e53207369703a<HONEYPOT>205349502f322e300d0a5669613a205349502f322e302f54435020<HONEYPOT>3a35353036313b6272616e63683d7a39684734624b2d7363616e2d3265666635640d0a46726f6d3a203c7369703a7363616e6e657240<HONEYPOT>3e3b7461673d7363616e310d0a546f3a203c7369703a<HONEYPOT>3e0d0a43616c6c2d49443a207363616e2d32656666356440<HONEYPOT>0d0a435365713a2031204f5054494f4e530d0a4d61782d466f7277617264733a2037300d0a557365722d4167656e743a205349502d446973636f766572792d456e67696e650d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","ja3":"","session":"3fd25604-f7de-466b-83ed-c524d5b4ff1f","seq":1,"duration_ms":100,"bytes_in":291,"bytes_out":78,"enriched":{"digest":"e3374d13633551a8","label":"HTTP","strings":["OPTIONS sip:<HONEYPOT> SIP/2.0","Via: SIP/2.0/TCP <HONEYPOT>:55061;branch=z9hG4bK-scan-2eff5d","From: <sip:scanner@<HONEYPOT>>;tag=scan1","To: <sip:<HONEYPOT>>","Call-ID: scan-2eff5d@<HONEYPOT>","CSeq: 1 OPTIONS","Max-Forwards: 70","User-Agent: SIP-Discovery-Engine","Content-Length: 0"],"iocs":{"paths":["/2.0/TCP"]}}},{"timestamp":"2026-09-01T09:01:55","port":51060,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS sip:<HONEYPOT> SIP/2.0\r\nVia: SIP/2.0/TCP <HONEYPOT>:51060;branch=z9hG4bKac27b498\r\nFrom: <sip:admin@<HONEYPOT>>;tag=ac27b498\r\nTo: <sip:<HONEYPOT>>\r\nCall-ID: ac-27b498@<HONEYPOT>\r\nCSeq: 1 OPTIONS\r\nUser-Agent: AudioCodes-SBC/7.40A\r\nContent-Length: 0\r\n\r\n","payload_hex":"4f5054494f4e53207369703a<HONEYPOT>205349502f322e300d0a5669613a205349502f322e302f54435020<HONEYPOT>3a35313036303b6272616e63683d7a39684734624b61633237623439380d0a46726f6d3a203c7369703a61646d696e40<HONEYPOT>3e3b7461673d61633237623439380d0a546f3a203c7369703a<HONEYPOT>3e0d0a43616c6c2d49443a2061632d32376234393840<HONEYPOT>0d0a435365713a2031204f5054494f4e530d0a557365722d4167656e743a20417564696f436f6465732d5342432f372e3430410d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"","user_agent":"","ja3":"","session":"9f8cd177-6310-4cb8-867e-b6194b29640c","seq":1,"duration_ms":100,"bytes_in":268,"bytes_out":78,"enriched":{"digest":"cd164b4ae0bb86d4","label":"HTTP","strings":["OPTIONS sip:<HONEYPOT> SIP/2.0","Via: SIP/2.0/TCP <HONEYPOT>:51060;branch=z9hG4bKac27b498","From: <sip:admin@<HONEYPOT>>;tag=ac27b498","To: <sip:<HONEYPOT>>","Call-ID: ac-27b498@<HONEYPOT>","CSeq: 1 OPTIONS","User-Agent: AudioCodes-SBC/7.40A","Content-Length: 0"],"iocs":{"paths":["/2.0/TCP"]}}}],"http_methods":[],"distinct_ports_total":123,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-23T01:35:52.469426+00:00"}