{"ip":"204.188.254.231","data_as_of":"2026-10-26T12:35:19+00:00","observed":true,"total_events":78,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"synthient","confidence":"high","network_type":"network services","why":["The address is in a published scanner range (synthient).","Known research and commercial scanners are labelled by operator and carry no threat verdict.","Counts include 49 interactive session(s) as well as first-packet events."],"engagement":{"level":"payload","label":"Sustained payload","detail":"13,656 bytes sent","bytes_sent":13656,"session_seconds":2,"persistent":false},"basis":"combined"},"first_seen":"2026-10-01T20:01:49","last_seen":"2026-10-18T11:38:39","events_24h":0,"events_7d":0,"interactive_sessions":49,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[{"protocol":"http","sessions":11},{"protocol":"tls","sessions":4},{"protocol":"socks5","sessions":4},{"protocol":"http-proxy","sessions":3},{"protocol":"pjl","sessions":1}],"geo":{"country_code":"US","country_name":"United States","region":"Illinois","city":"Chicago","lat":41.8483,"lon":-87.6517,"asn":46844,"org":"Sharktech"},"source_domain":"gene-site.accenttrip.com","known_scanners":["synthient"],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":4,"protocols":[{"protocol":"udp","events":4}],"ports":[{"port":161,"events":3},{"port":1194,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-08T13:08:41","last_seen":"2026-10-13T19:17:56","recent":[{"timestamp":"2026-10-13T19:17:56","port":161,"src_port":46611,"proto":"udp","app_proto":"","app_protocol":"snmp","summary":"0:\u0002\u0001\u00030\u000f\u0002\u0002Ji\u0002\u0003\u0000��\u0004\u0001\u0004\u0002\u0001\u0003\u0004\u00100\u000e\u0004\u0000\u0002\u0001\u0000\u0002\u0001\u0000\u0004\u0000\u0004\u0000\u0004\u00000\u0012\u0004\u0000\u0004\u0000�\f\u0002\u00027�\u0002\u0001\u0000\u0002\u0001\u00000\u0000","payload_hex":"303a020103300f02024a69020300ffe30401040201030410300e0400020100020100040004000400301204000400a00c020237f00201000201003000","sni":"","session":"db1d3965-c256-4225-83e7-482a02fc5a3e","bytes_in":60,"source_verified":false},{"timestamp":"2026-10-13T17:31:53","port":161,"src_port":40843,"proto":"udp","app_proto":"","app_protocol":"","summary":"0�\u0002�\u0002\u0001\u0001\u0004\u0006public��\u0002�\u0002\u0002\u0004�\u0002\u0001\u0000\u0002\u0001\u00000�\u0002�0\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0001\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0002\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0003\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0004\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0005\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0006\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0007\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\b\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\t\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\n\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u000b\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\f\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\r\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u000e\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u000f\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0010\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0011\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0012\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0013\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0014\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0001\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0002\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0003\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0004\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0005\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0006\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0007\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\b\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\t\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\n\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u000b\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\f\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\r\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u000e\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u000f\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0010\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0011\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0012\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0013\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0014\u0005\u0000","payload_hex":"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","sni":"","session":"26fb582e-c1b8-46e1-b027-3a4d4e66e983","bytes_in":673,"source_verified":false,"enriched":{"digest":"26f7a40dab277fab","strings":["public"]}},{"timestamp":"2026-10-11T08:10:50","port":161,"src_port":35902,"proto":"udp","app_proto":"","app_protocol":"","summary":"0�\u0002�\u0002\u0001\u0001\u0004\u0006public��\u0002�\u0002\u0002\u0004�\u0002\u0001\u0000\u0002\u0001\u00000�\u0002�0\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0001\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0002\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0003\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0004\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0005\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0006\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0007\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\b\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\t\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\n\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u000b\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\f\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\r\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u000e\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u000f\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0010\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0011\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0012\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0013\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0002\u0014\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0001\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0002\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0003\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0004\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0005\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0006\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0007\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\b\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\t\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\n\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u000b\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\f\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\r\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u000e\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u000f\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0010\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0011\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0012\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0013\u0005\u00000\u000e\u0006\n+\u0006\u0001\u0002\u0001\u0002\u0002\u0001\u0006\u0014\u0005\u0000","payload_hex":"3082029d02010104067075626c6963a082028e020204d202010002010030820280300e060a2b0601020102020102010500300e060a2b0601020102020102020500300e060a2b0601020102020102030500300e060a2b0601020102020102040500300e060a2b0601020102020102050500300e060a2b0601020102020102060500300e060a2b0601020102020102070500300e060a2b0601020102020102080500300e060a2b0601020102020102090500300e060a2b06010201020201020a0500300e060a2b06010201020201020b0500300e060a2b06010201020201020c0500300e060a2b06010201020201020d0500300e060a2b06010201020201020e0500300e060a2b06010201020201020f0500300e060a2b0601020102020102100500300e060a2b0601020102020102110500300e060a2b0601020102020102120500300e060a2b0601020102020102130500300e060a2b0601020102020102140500300e060a2b0601020102020106010500300e060a2b0601020102020106020500300e060a2b0601020102020106030500300e060a2b0601020102020106040500300e060a2b0601020102020106050500300e060a2b0601020102020106060500300e060a2b0601020102020106070500300e060a2b0601020102020106080500300e060a2b0601020102020106090500300e060a2b06010201020201060a0500300e060a2b06010201020201060b0500300e060a2b06010201020201060c0500300e060a2b06010201020201060d0500300e060a2b06010201020201060e0500300e060a2b06010201020201060f0500300e060a2b0601020102020106100500300e060a2b0601020102020106110500300e060a2b0601020102020106120500300e060a2b0601020102020106130500300e060a2b0601020102020106140500","sni":"","session":"931343cc-e0bd-4f7d-920e-37537be455f4","bytes_in":673,"source_verified":false,"enriched":{"digest":"26f7a40dab277fab","strings":["public"]}},{"timestamp":"2026-10-08T13:08:41","port":1194,"src_port":50922,"proto":"udp","app_proto":"","app_protocol":"","summary":"8z�n*dH.S\u0000\u0000\u0000\u0000\u0000","payload_hex":"387af36e2a64482e530000000000","sni":"","session":"9dd622cb-31ea-4a02-b27b-2b71e310a187","bytes_in":14,"source_verified":false,"enriched":{"digest":"d9dd1ad54396da59","strings":["n*dH.S"]}}]},"interaction":{"window_days":90,"sessions":49,"first_seen":"2026-10-18T06:56:41","last_seen":"2026-10-18T11:38:39","verdicts":[{"verdict":"unknown","sessions":29},{"verdict":"scan","sessions":20}],"personas":[{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1","sessions":7},{"persona":"proxy@squid/5.7","sessions":7},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, dlink-dir645@1.03, fortigate@7.2.1","sessions":2},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, dlink-dns@1.10, fortigate@7.2.1","sessions":2},{"persona":"printer@HP LaserJet 400 M401dn","sessions":1}],"services":[{"protocol":"tcp","port":4443,"sessions":3},{"protocol":"tcp","port":8886,"sessions":2},{"protocol":"tcp","port":19999,"sessions":2},{"protocol":"tcp","port":64249,"sessions":2},{"protocol":"http","port":80,"sessions":2},{"protocol":"tcp","port":2083,"sessions":2},{"protocol":"tcp","port":1337,"sessions":2},{"protocol":"tcp","port":65535,"sessions":2},{"protocol":"http","port":5000,"sessions":2},{"protocol":"tcp","port":7778,"sessions":2},{"protocol":"tcp","port":9443,"sessions":2},{"protocol":"socks5","port":1080,"sessions":2}],"logins":[],"commands":[],"downloads":[],"files":[{"sha256":"64c48e339afa9e6ec0a0dd1f67081fffe09bdc94258245772e0ecdd3f098d5ce","name":"job-1","size":130,"mime_type":"text/plain","kind":"print-job","times":1,"first_seen":"2026-10-18T07:05:28","last_seen":"2026-10-18T07:05:28","virustotal":null}],"attack":[{"technique_id":"T1595","technique_name":"Active Scanning","tactic_id":"TA0043","tactic_name":"Reconnaissance","sessions":20}]},"top_ports":[{"port":5000,"proto":"tcp","label":"Web-alt","count":4,"sessions":2},{"port":1194,"proto":"tcp","label":"OpenVPN","count":4,"sessions":0},{"port":20013,"proto":"tcp","label":"","count":4,"sessions":0},{"port":59210,"proto":"tcp","label":"","count":3,"sessions":1},{"port":59060,"proto":"tcp","label":"","count":3,"sessions":1},{"port":59100,"proto":"tcp","label":"","count":3,"sessions":1},{"port":32325,"proto":"tcp","label":"","count":3,"sessions":1},{"port":12333,"proto":"tcp","label":"","count":2,"sessions":2},{"port":2677,"proto":"tcp","label":"","count":3,"sessions":0},{"port":2100,"proto":"tcp","label":"","count":3,"sessions":0},{"port":62345,"proto":"tcp","label":"","count":2,"sessions":1},{"port":4443,"proto":"tcp","label":"","count":0,"sessions":3},{"port":64249,"proto":"tcp","label":"HTTP","count":0,"sessions":3},{"port":12345,"proto":"tcp","label":"","count":2,"sessions":0},{"port":992,"proto":"tcp","label":"","count":2,"sessions":0}],"fingerprints":{"ssh_hassh":["16443846184eafde36765c9bab2f4397"],"tls_ja4":["t13i131000_f57a46bbacb6_e5728521abd4"],"tls_client_hello":"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","tls_ja3":["2196848d251b217de8b2c037e356c11d"],"http_akin":["b11cuq041_00040801_6f214d87_x83e1","b11cun030_00040011_c91eaf54"],"interactive":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_e5728521abd4"],"tls_ja3":["2196848d251b217de8b2c037e356c11d"]}},"fingerprint_peers":{"t13i131000_f57a46bbacb6_e5728521abd4":70,"16443846184eafde36765c9bab2f4397":45,"b11cuq041_00040801_6f214d87_x83e1":15,"b11cun030_00040011_c91eaf54":976},"akin_families":{"b11cun030_00040011_c91eaf54":{"head":"b11cun030_00040011_c91eaf54","shapes":3,"ips":976}},"user_agents":["Synthient-Research-Scanner/1.0"],"timeline":[{"date":"2026-10-01","count":5,"sessions":0},{"date":"2026-10-02","count":4,"sessions":0},{"date":"2026-10-04","count":3,"sessions":0},{"date":"2026-10-08","count":1,"sessions":0},{"date":"2026-10-09","count":3,"sessions":0},{"date":"2026-10-18","count":62,"sessions":49}],"recent_events":[{"timestamp":"2026-10-18T11:38:38","port":63260,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"1.3","alpn":[],"url_path":"","summary":"SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1\r\nHost: <HONEYPOT>\r\nSSTPCORRELATIONID: 9d2753af708ca7ce7fe616fbec0a8129\r\nContent-Length: 18446744073709551615\r\nConnection: close\r\n\r\n","payload_hex":"535354505f4455504c45585f504f5354202f7372615f7b42413139353938302d434434392d343538622d394532332d4338344545304144434437357d2f20485454502f312e310d0a486f73743a203c484f4e4559504f543e0d0a53535450434f5252454c4154494f4e49443a2039643237353361663730386361376365376665363136666265633061383132390d0a436f6e74656e742d4c656e6774683a2031383434363734343037333730393535313631350d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"","user_agent":"","ja3":"2196848d251b217de8b2c037e356c11d","session":"e14e60e4-8ab0-4d9c-acea-404d1a3afbc8-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"d51517167efa79be","strings":["SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1","Host: <HONEYPOT>","SSTPCORRELATIONID: 9d2753af708ca7ce7fe616fbec0a8129","Content-Length: 18446744073709551615","Connection: close"]},"interactive":true},{"timestamp":"2026-10-18T11:38:30","port":59060,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"content-length\":\"18446744073709551615\",\"host\":\"<HONEYPOT>\",\"sstpcorrelationid\":\"208a6c71aaf2b3560ad501671c1e02ff\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/","summary":"SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1\r\nHost: <HONEYPOT>\r\nSSTPCORRELATIONID: 208a6c71aaf2b3560ad501671c1e02ff\r\nContent-Length: 18446744073709551615\r\nConnection: close\r\n\r\n","payload_hex":"535354505f4455504c45585f504f5354202f7372615f7b42413139353938302d434434392d343538622d394532332d4338344545304144434437357d2f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a53535450434f5252454c4154494f4e49443a2032303861366337316161663262333536306164353031363731633165303266660d0a436f6e74656e742d4c656e6774683a2031383434363734343037333730393535313631350d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"SSTP_DUPLEX_POST","user_agent":"","ja3":"2196848d251b217de8b2c037e356c11d","session":"ef8b15c2-0562-4d8b-8fa8-5a90021749f2","seq":1,"duration_ms":100,"bytes_in":206,"bytes_out":15},{"timestamp":"2026-10-18T11:38:30","port":59060,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"1.3","alpn":[],"url_path":"","summary":"SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1\r\nHost: <HONEYPOT>\r\nSSTPCORRELATIONID: 3c5d49545073471629c38c33a7b194f0\r\nContent-Length: 18446744073709551615\r\nConnection: close\r\n\r\n","payload_hex":"535354505f4455504c45585f504f5354202f7372615f7b42413139353938302d434434392d343538622d394532332d4338344545304144434437357d2f20485454502f312e310d0a486f73743a203c484f4e4559504f543e0d0a53535450434f5252454c4154494f4e49443a2033633564343935343530373334373136323963333863333361376231393466300d0a436f6e74656e742d4c656e6774683a2031383434363734343037333730393535313631350d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"","user_agent":"","ja3":"2196848d251b217de8b2c037e356c11d","session":"a316ec17-7667-42a9-becb-8beb13467c7a-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"023771d0747fead9","strings":["SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1","Host: <HONEYPOT>","SSTPCORRELATIONID: 3c5d49545073471629c38c33a7b194f0","Content-Length: 18446744073709551615","Connection: close"]},"interactive":true},{"timestamp":"2026-10-18T11:38:25","port":49233,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"content-length\":\"18446744073709551615\",\"host\":\"<HONEYPOT>\",\"sstpcorrelationid\":\"985f7836527df185e0c5f1f6ba44488b\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/","summary":"SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1\r\nHost: <HONEYPOT>\r\nSSTPCORRELATIONID: 985f7836527df185e0c5f1f6ba44488b\r\nContent-Length: 18446744073709551615\r\nConnection: close\r\n\r\n","payload_hex":"535354505f4455504c45585f504f5354202f7372615f7b42413139353938302d434434392d343538622d394532332d4338344545304144434437357d2f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a53535450434f5252454c4154494f4e49443a2039383566373833363532376466313835653063356631663662613434343838620d0a436f6e74656e742d4c656e6774683a2031383434363734343037333730393535313631350d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"SSTP_DUPLEX_POST","user_agent":"","ja3":"2196848d251b217de8b2c037e356c11d","session":"a4fa7fda-df2d-4868-905d-25a68426ae77","seq":1,"duration_ms":101,"bytes_in":206,"bytes_out":15},{"timestamp":"2026-10-18T11:38:25","port":49233,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"1.3","alpn":[],"url_path":"","summary":"SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1\r\nHost: <HONEYPOT>\r\nSSTPCORRELATIONID: 51aff75d582144df7f9bcc6596eba39a\r\nContent-Length: 18446744073709551615\r\nConnection: close\r\n\r\n","payload_hex":"535354505f4455504c45585f504f5354202f7372615f7b42413139353938302d434434392d343538622d394532332d4338344545304144434437357d2f20485454502f312e310d0a486f73743a203c484f4e4559504f543e0d0a53535450434f5252454c4154494f4e49443a2035316166663735643538323134346466376639626363363539366562613339610d0a436f6e74656e742d4c656e6774683a2031383434363734343037333730393535313631350d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"","user_agent":"","ja3":"2196848d251b217de8b2c037e356c11d","session":"9e965155-4626-4b18-9d88-f11f359054d6-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"3a956774d2bee346","strings":["SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1","Host: <HONEYPOT>","SSTPCORRELATIONID: 51aff75d582144df7f9bcc6596eba39a","Content-Length: 18446744073709551615","Connection: close"]},"interactive":true},{"timestamp":"2026-10-18T11:38:16","port":32345,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"content-length\":\"18446744073709551615\",\"host\":\"<HONEYPOT>\",\"sstpcorrelationid\":\"3d327f1fbab8591f0e39457de478592b\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/","summary":"SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1\r\nHost: <HONEYPOT>\r\nSSTPCORRELATIONID: 3d327f1fbab8591f0e39457de478592b\r\nContent-Length: 18446744073709551615\r\nConnection: close\r\n\r\n","payload_hex":"535354505f4455504c45585f504f5354202f7372615f7b42413139353938302d434434392d343538622d394532332d4338344545304144434437357d2f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a53535450434f5252454c4154494f4e49443a2033643332376631666261623835393166306533393435376465343738353932620d0a436f6e74656e742d4c656e6774683a2031383434363734343037333730393535313631350d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"SSTP_DUPLEX_POST","user_agent":"","ja3":"2196848d251b217de8b2c037e356c11d","session":"832ff5ae-0c93-4018-b7ea-41d07cc038b4","seq":1,"duration_ms":100,"bytes_in":206,"bytes_out":15},{"timestamp":"2026-10-18T11:38:16","port":32233,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"1.3","alpn":[],"url_path":"","summary":"SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1\r\nHost: <HONEYPOT>\r\nSSTPCORRELATIONID: 9978bf7e5b04379afe3e6982feb41ec5\r\nContent-Length: 18446744073709551615\r\nConnection: close\r\n\r\n","payload_hex":"535354505f4455504c45585f504f5354202f7372615f7b42413139353938302d434434392d343538622d394532332d4338344545304144434437357d2f20485454502f312e310d0a486f73743a203c484f4e4559504f543e0d0a53535450434f5252454c4154494f4e49443a2039393738626637653562303433373961666533653639383266656234316563350d0a436f6e74656e742d4c656e6774683a2031383434363734343037333730393535313631350d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"","user_agent":"","ja3":"2196848d251b217de8b2c037e356c11d","session":"04da9c98-991f-41ba-b74f-3174abf53b50-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"f93d9ae2d4c2b577","strings":["SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1","Host: <HONEYPOT>","SSTPCORRELATIONID: 9978bf7e5b04379afe3e6982feb41ec5","Content-Length: 18446744073709551615","Connection: close"]},"interactive":true},{"timestamp":"2026-10-18T11:37:57","port":20007,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"content-length\":\"18446744073709551615\",\"host\":\"<HONEYPOT>\",\"sstpcorrelationid\":\"34233cbbcca4bb07739e45e74f2db120\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/","summary":"SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1\r\nHost: <HONEYPOT>\r\nSSTPCORRELATIONID: 34233cbbcca4bb07739e45e74f2db120\r\nContent-Length: 18446744073709551615\r\nConnection: close\r\n\r\n","payload_hex":"535354505f4455504c45585f504f5354202f7372615f7b42413139353938302d434434392d343538622d394532332d4338344545304144434437357d2f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a53535450434f5252454c4154494f4e49443a2033343233336362626363613462623037373339653435653734663264623132300d0a436f6e74656e742d4c656e6774683a2031383434363734343037333730393535313631350d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"SSTP_DUPLEX_POST","user_agent":"","ja3":"2196848d251b217de8b2c037e356c11d","session":"2cfe3a55-a1ac-4709-a295-42de6c0d7cb3","seq":1,"duration_ms":100,"bytes_in":206,"bytes_out":15},{"timestamp":"2026-10-18T11:37:31","port":10801,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"content-length\":\"18446744073709551615\",\"host\":\"<HONEYPOT>\",\"sstpcorrelationid\":\"4ca49d008033a13aa3b32170420530b9\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/","summary":"SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1\r\nHost: <HONEYPOT>\r\nSSTPCORRELATIONID: 4ca49d008033a13aa3b32170420530b9\r\nContent-Length: 18446744073709551615\r\nConnection: close\r\n\r\n","payload_hex":"535354505f4455504c45585f504f5354202f7372615f7b42413139353938302d434434392d343538622d394532332d4338344545304144434437357d2f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a53535450434f5252454c4154494f4e49443a2034636134396430303830333361313361613362333231373034323035333062390d0a436f6e74656e742d4c656e6774683a2031383434363734343037333730393535313631350d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"SSTP_DUPLEX_POST","user_agent":"","ja3":"2196848d251b217de8b2c037e356c11d","session":"64d7a7d7-ef39-4051-8d8c-3f8d868e9e3c","seq":1,"duration_ms":101,"bytes_in":206,"bytes_out":15},{"timestamp":"2026-10-18T11:37:14","port":10011,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"content-length\":\"18446744073709551615\",\"host\":\"<HONEYPOT>\",\"sstpcorrelationid\":\"dfd17bf5af14896015d3611a2b501b75\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/","summary":"SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1\r\nHost: <HONEYPOT>\r\nSSTPCORRELATIONID: dfd17bf5af14896015d3611a2b501b75\r\nContent-Length: 18446744073709551615\r\nConnection: close\r\n\r\n","payload_hex":"535354505f4455504c45585f504f5354202f7372615f7b42413139353938302d434434392d343538622d394532332d4338344545304144434437357d2f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a53535450434f5252454c4154494f4e49443a2064666431376266356166313438393630313564333631316132623530316237350d0a436f6e74656e742d4c656e6774683a2031383434363734343037333730393535313631350d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"SSTP_DUPLEX_POST","user_agent":"","ja3":"2196848d251b217de8b2c037e356c11d","session":"96bd0b0e-120d-4847-89e8-b828c2c339d4","seq":1,"duration_ms":101,"bytes_in":206,"bytes_out":15}],"http_methods":[{"method":"GET","count":56},{"method":"SSTP_DUPLEX_POST","count":11}],"distinct_ports_total":55,"top_paths":[{"path":"/","count":32,"ports":18},{"path":"http://probe.invalid/","count":21,"ports":19},{"path":"/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/","count":11,"ports":11},{"path":"/metrics?collect%5B%5D=uname","count":2,"ports":1},{"path":"/server-info","count":1,"ports":1}],"distinct_paths_total":5,"top_snis":[],"top_hosts":[{"value":"probe.invalid","count":24}],"top_alpns":[],"banners":[{"value":"SSH-2.0-synthient","count":3}],"credentials":[],"header_profile":{"signature":["Connection","Content-Length","Host","Sstpcorrelationid"],"representative":[{"name":"Connection","value":"close","notable":false},{"name":"Content-Length","value":"18446744073709551615","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"Sstpcorrelationid","value":"208a6c71aaf2b3560ad501671c1e02ff","notable":false}],"distinct_sets":1,"events_with_headers":6},"tags":[]}