{"ip":"45.153.34.119","total_events":27,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["27 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"801 bytes sent","bytes_sent":801,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-28T15:19:56","last_seen":"2026-09-30T20:18:25","events_24h":6,"events_7d":27,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"North Holland","city":"Amsterdam","lat":52.3716,"lon":4.8883,"asn":197170,"org":"TechTies Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":25565,"proto":"tcp","label":"Minecraft","count":27}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-28","count":6},{"date":"2026-09-29","count":12},{"date":"2026-09-30","count":9}],"recent_events":[{"timestamp":"2026-09-30T20:18:25","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�","payload_hex":"fe","method":"","user_agent":"","ja3":"","session":"89d4fe6d-0d15-45df-8d1c-1c95af84c668","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-09-30T20:18:22","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0017\u0000����\u000f\r<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"1700ffffffff0f0d<HONEYPOT>63dd010100","method":"","user_agent":"","ja3":"","session":"f4a28d19-5280-4a93-8047-0ee9306a528a","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":13,"enriched":{"digest":"50ffa3da3f52e270","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-30T20:18:22","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001�\u0000\u000b\u0000M\u0000C\u0000|\u0000P\u0000i\u0000n\u0000g\u0000H\u0000o\u0000s\u0000t\u0000!I\u0000\r\u00001\u00009\u00002\u0000.\u00003\u0000.\u00001\u00001\u00008\u0000.\u00001\u00004\u00006\u0000\u0000c�","payload_hex":"fe01fa000b004d0043007c00500069006e00670048006f00730074002149000d003100390032002e0033002e003100310038002e003100340036000063dd","method":"","user_agent":"","ja3":"","session":"679a098b-26fa-47aa-9c31-1eb898ef7586","seq":1,"duration_ms":100,"bytes_in":62,"bytes_out":13,"enriched":{"digest":"1f9527fa8ff51f70","strings":["MC|PingHost!I","192.3.118.146c"],"iocs":{"ips":["192.3.118.146"]}}},{"timestamp":"2026-09-30T09:41:54","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001�\u0000\u000b\u0000M\u0000C\u0000|\u0000P\u0000i\u0000n\u0000g\u0000H\u0000o\u0000s\u0000t\u0000!I\u0000\r\u00001\u00009\u00002\u0000.\u00003\u0000.\u00001\u00001\u00008\u0000.\u00001\u00004\u00006\u0000\u0000c�","payload_hex":"fe01fa000b004d0043007c00500069006e00670048006f00730074002149000d003100390032002e0033002e003100310038002e003100340036000063dd","method":"","user_agent":"","ja3":"","session":"1c376999-27aa-459b-8793-e8f198b74a58","seq":1,"duration_ms":100,"bytes_in":62,"bytes_out":13,"enriched":{"digest":"1f9527fa8ff51f70","strings":["MC|PingHost!I","192.3.118.146c"],"iocs":{"ips":["192.3.118.146"]}}},{"timestamp":"2026-09-30T09:41:54","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�","payload_hex":"fe","method":"","user_agent":"","ja3":"","session":"774a2369-3846-4836-aedd-af24a5b328c2","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-09-30T09:41:53","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0017\u0000����\u000f\r<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"1700ffffffff0f0d<HONEYPOT>63dd010100","method":"","user_agent":"","ja3":"","session":"a13dc105-dd21-43e2-a20d-1584fc5b537e","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":13,"enriched":{"digest":"50ffa3da3f52e270","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-30T00:31:42","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001�\u0000\u000b\u0000M\u0000C\u0000|\u0000P\u0000i\u0000n\u0000g\u0000H\u0000o\u0000s\u0000t\u0000!I\u0000\r\u00001\u00009\u00002\u0000.\u00003\u0000.\u00001\u00001\u00008\u0000.\u00001\u00004\u00006\u0000\u0000c�","payload_hex":"fe01fa000b004d0043007c00500069006e00670048006f00730074002149000d003100390032002e0033002e003100310038002e003100340036000063dd","method":"","user_agent":"","ja3":"","session":"801bc77a-69c7-4dad-aad4-21e3d0478b08","seq":1,"duration_ms":100,"bytes_in":62,"bytes_out":13,"enriched":{"digest":"1f9527fa8ff51f70","strings":["MC|PingHost!I","192.3.118.146c"],"iocs":{"ips":["192.3.118.146"]}}},{"timestamp":"2026-09-30T00:31:42","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�","payload_hex":"fe","method":"","user_agent":"","ja3":"","session":"5fbde5cc-f3e1-4972-b825-72901ae7814d","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-09-30T00:31:41","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0017\u0000����\u000f\r<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"1700ffffffff0f0d<HONEYPOT>63dd010100","method":"","user_agent":"","ja3":"","session":"3717931a-f768-49fa-a836-336b3834347d","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":13,"enriched":{"digest":"50ffa3da3f52e270","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-29T23:24:49","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�","payload_hex":"fe","method":"","user_agent":"","ja3":"","session":"875d1d07-d921-4567-97e2-6d3f8e68eaae","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-01T02:36:06.196244+00:00"}