{"ip":"45.156.128.57","total_events":275,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"bitsight","confidence":"high","network_type":null,"why":["Source IP is in a known scanner range (bitsight).","Known research and commercial scanners are labelled as such, not as threats."]},"first_seen":"2026-02-21T09:05:20","last_seen":"2026-07-25T00:26:14","events_24h":0,"events_7d":11,"geo":{"country_code":"PT","country_name":"Portugal","region":"","city":"","lat":38.7057,"lon":-9.1359,"asn":211680,"org":"Sistemas Informaticos, S.A."},"source_domain":"sh-ams-nl-gp1-wk112b.internet-census.org","known_scanners":["bitsight","Internet Census"],"scanner_tag":{"key":"internet-census","label":"Internet Census","category":"research","url":"https://internet-census.org/"},"cve_matches":[],"malware":[],"top_ports":[{"port":53,"proto":"tcp","label":"DNS","count":8},{"port":631,"proto":"tcp","label":"IPP","count":7},{"port":8554,"proto":"tcp","label":"","count":7},{"port":21025,"proto":"tcp","label":"","count":6},{"port":55554,"proto":"tcp","label":"","count":6},{"port":992,"proto":"tcp","label":"","count":6},{"port":9981,"proto":"tcp","label":"","count":6},{"port":3551,"proto":"tcp","label":"","count":6},{"port":311,"proto":"tcp","label":"","count":5},{"port":8800,"proto":"tcp","label":"","count":5},{"port":2323,"proto":"tcp","label":"","count":5},{"port":49,"proto":"tcp","label":"","count":5},{"port":10000,"proto":"tcp","label":"Webmin","count":5},{"port":5007,"proto":"tcp","label":"","count":5},{"port":1723,"proto":"tcp","label":"PPTP","count":5}],"fingerprints":{"ssh_hassh":["864cef7e4d8ad71d4fb1aadfcf0a3189"],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9","t12i330500_5172cef6ed69_021165082e1c"],"tls_ja3":["35fa0a83e466acbec1cfbb9016d550ab","02f32644e1b0655c19aaa3a2d6778b1e"],"ja4h":["ge11nn0400_88d30a62b7ad"]},"fingerprint_peers":{"t12i330500_5172cef6ed69_021165082e1c":238,"t13i190800_9dc949149365_97f8aa674fd9":3118,"ge11nn0400_88d30a62b7ad":5178,"864cef7e4d8ad71d4fb1aadfcf0a3189":129},"user_agents":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36","Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"],"timeline":[{"date":"2026-04-27","count":3},{"date":"2026-04-28","count":2},{"date":"2026-04-29","count":5},{"date":"2026-04-30","count":2},{"date":"2026-05-01","count":5},{"date":"2026-05-02","count":1},{"date":"2026-05-03","count":3},{"date":"2026-05-05","count":1},{"date":"2026-05-06","count":1},{"date":"2026-05-08","count":1},{"date":"2026-05-09","count":1},{"date":"2026-05-12","count":3},{"date":"2026-05-13","count":1},{"date":"2026-05-16","count":3},{"date":"2026-05-17","count":1},{"date":"2026-05-19","count":1},{"date":"2026-05-24","count":2},{"date":"2026-05-26","count":1},{"date":"2026-05-28","count":1},{"date":"2026-06-01","count":3},{"date":"2026-06-02","count":2},{"date":"2026-06-05","count":2},{"date":"2026-06-06","count":2},{"date":"2026-06-10","count":5},{"date":"2026-06-11","count":3},{"date":"2026-06-12","count":2},{"date":"2026-06-13","count":1},{"date":"2026-06-14","count":3},{"date":"2026-06-15","count":4},{"date":"2026-06-17","count":2},{"date":"2026-06-18","count":2},{"date":"2026-06-19","count":1},{"date":"2026-06-21","count":2},{"date":"2026-06-23","count":1},{"date":"2026-06-27","count":6},{"date":"2026-06-28","count":3},{"date":"2026-06-29","count":2},{"date":"2026-07-01","count":4},{"date":"2026-07-02","count":4},{"date":"2026-07-03","count":2},{"date":"2026-07-04","count":2},{"date":"2026-07-05","count":5},{"date":"2026-07-06","count":1},{"date":"2026-07-07","count":6},{"date":"2026-07-08","count":6},{"date":"2026-07-09","count":2},{"date":"2026-07-11","count":2},{"date":"2026-07-12","count":1},{"date":"2026-07-13","count":1},{"date":"2026-07-16","count":3},{"date":"2026-07-17","count":1},{"date":"2026-07-19","count":2},{"date":"2026-07-20","count":3},{"date":"2026-07-22","count":3},{"date":"2026-07-23","count":2},{"date":"2026-07-25","count":1}],"recent_events":[{"timestamp":"2026-07-25T00:26:14","port":53,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-Go\r\n\u0000\u0000\u0003,\u0012\u00141��LN\u001d�Eg��'9G�\u0000\u0000\u0000�curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1\u0000\u0000\u0001-ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-rsa,ssh-dss,ssh-ed25519\u0000\u0000\u0000iaes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc\u0000\u0000\u0000iaes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc\u0000\u0000\u0000$hmac-sha2-256,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000$hmac-sha2-256,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��ܶ�<\u000f\u001c\b}���L\\���","payload_hex":"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","method":"","user_agent":"","community_id":"1:cKhJ3VN0S8Kc2Ub8zJQTEwAWzbc=","ja3":"","session":"3aa63b82-2903-4a5b-9b7c-5dfb91f4631d","seq":1,"duration_ms":110,"bytes_in":828,"bytes_out":13,"enriched":{"digest":"d4277484c900665e","label":"SSH","strings":["SSH-2.0-Go","curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nis…","-ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-c…","iaes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,a…","$hmac-sha2-256,hmac-sha1,hmac-sha1-96","none"],"iocs":{"domains":["libssh.org","openssh.com"]}}},{"timestamp":"2026-07-23T18:12:22","port":4040,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:4040\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a343034300d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132332e302e363331322e3836205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36","community_id":"1:66wE7sg8C/AoEcCUn+nipvnysNI=","ja3":"","session":"bf38168c-e6fb-4ac1-a302-f1c2b351b332","seq":1,"duration_ms":100,"bytes_in":179,"bytes_out":78},{"timestamp":"2026-07-23T06:24:42","port":53,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:53\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a35330d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132332e302e363331322e3836205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36","community_id":"1:0ZYkTJ9F7/RDfqhB7PE5eCrSqgI=","ja3":"","session":"706b4286-5871-40db-99ea-e543b9ee2d91","seq":1,"duration_ms":100,"bytes_in":177,"bytes_out":78},{"timestamp":"2026-07-22T04:01:18","port":70,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-Go\r\n\u0000\u0000\u0003,\u0012\u0014AgMB!r�z\u0013Ro����\u0011\u0000\u0000\u0000�curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1\u0000\u0000\u0001-ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-rsa,ssh-dss,ssh-ed25519\u0000\u0000\u0000iaes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc\u0000\u0000\u0000iaes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc\u0000\u0000\u0000$hmac-sha2-256,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000$hmac-sha2-256,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000fvN��ߜ��,��o:\u000f�%I","payload_hex":"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","method":"","user_agent":"","community_id":"1:+6FqEKTDoGK9TvutsaX5scu/9iY=","ja3":"","session":"3c3205f1-5a67-4e37-8789-882107b8e667","seq":1,"duration_ms":110,"bytes_in":828,"bytes_out":13,"enriched":{"digest":"3caad1e615a51f2d","label":"SSH","strings":["SSH-2.0-Go","AgMB!r","curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nis…","-ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-c…","iaes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,a…","$hmac-sha2-256,hmac-sha1,hmac-sha1-96","none","nonefvN"],"iocs":{"domains":["libssh.org","openssh.com"]}}},{"timestamp":"2026-07-22T04:00:57","port":70,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-Go\r\n\u0000\u0000\u0003,\u0012\u0014�V��+(�ߍ�G\u0017�,�&\u0000\u0000\u0000�curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1\u0000\u0000\u0001-ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-rsa,ssh-dss,ssh-ed25519\u0000\u0000\u0000iaes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc\u0000\u0000\u0000iaes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc\u0000\u0000\u0000$hmac-sha2-256,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000$hmac-sha2-256,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000=8�!����P�\u0011\u0006�\u0006k�yu","payload_hex":"5353482d322e302d476f0d0a0000032c1214a656ecc22b28c7df8d9e4717972cc9260000008c637572766532353531392d736861323536406c69627373682e6f72672c656364682d736861322d6e697374703235362c656364682d736861322d6e697374703338342c656364682d736861322d6e697374703532312c6469666669652d68656c6c6d616e2d67726f757031342d736861312c6469666669652d68656c6c6d616e2d67726f7570312d736861310000012d7373682d7273612d636572742d763031406f70656e7373682e636f6d2c7373682d6473732d636572742d763031406f70656e7373682e636f6d2c65636473612d736861322d6e697374703235362d636572742d763031406f70656e7373682e636f6d2c65636473612d736861322d6e697374703338342d636572742d763031406f70656e7373682e636f6d2c65636473612d736861322d6e697374703532312d636572742d763031406f70656e7373682e636f6d2c7373682d656432353531392d636572742d763031406f70656e7373682e636f6d2c65636473612d736861322d6e697374703235362c65636473612d736861322d6e697374703338342c65636473612d736861322d6e697374703532312c7373682d7273612c7373682d6473732c7373682d65643235353139000000696165733132382d6374722c6165733139322d6374722c6165733235362d6374722c6165733132382d67636d406f70656e7373682e636f6d2c617263666f75723235362c617263666f75723132382c617263666f75722c6165733132382d6362632c336465732d636263000000696165733132382d6374722c6165733139322d6374722c6165733235362d6374722c6165733132382d67636d406f70656e7373682e636f6d2c617263666f75723235362c617263666f75723132382c617263666f75722c6165733132382d6362632c336465732d63626300000024686d61632d736861322d3235362c686d61632d736861312c686d61632d736861312d393600000024686d61632d736861322d3235362c686d61632d736861312c686d61632d736861312d3936000000046e6f6e65000000046e6f6e65000000000000000000000000003d38cf21bcd1ea8050f21106eb066ba07975","method":"","user_agent":"","community_id":"1:bZcbGiPXsZ4kXvt87IM9uWi8BYg=","ja3":"","session":"638bbb83-3fc7-4e4c-96a6-7fcd889936a9","seq":1,"duration_ms":110,"bytes_in":828,"bytes_out":13,"enriched":{"digest":"1d2c761dfd691827","label":"SSH","strings":["SSH-2.0-Go","curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nis…","-ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-c…","iaes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,a…","$hmac-sha2-256,hmac-sha1,hmac-sha1-96","none","none=8"],"iocs":{"domains":["libssh.org","openssh.com"]}}},{"timestamp":"2026-07-22T01:57:56","port":10000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:10000\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132332e302e363331322e3836205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36","community_id":"1:LvcrKFVxC21A+p61HD+DrtmfhIU=","ja3":"","session":"0ce8eb2b-2c1b-4b66-84df-65af90213f5a","seq":1,"duration_ms":100,"bytes_in":191,"bytes_out":78},{"timestamp":"2026-07-20T22:49:54","port":1521,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1521\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313532310d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132332e302e363331322e3836205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36","community_id":"1:m3q52Gtn9Z1OeGfJd6O8dUHV/ho=","ja3":"","session":"5f675472-68c8-4ef8-a5f4-7782e0b977af","seq":1,"duration_ms":100,"bytes_in":178,"bytes_out":78},{"timestamp":"2026-07-20T21:58:04","port":8181,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8181\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383138310d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132332e302e363331322e3836205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36","community_id":"1:dk1ddkRTs8Lb8zpcrcwSqAxFtk0=","ja3":"","session":"b47b0170-d980-4034-8d9f-e3b9894034e2","seq":1,"duration_ms":101,"bytes_in":189,"bytes_out":78},{"timestamp":"2026-07-20T21:57:47","port":8181,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8181\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383138310d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132332e302e363331322e3836205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36","community_id":"1:dJBPBdw69ZsoayLsfp5x3XfSN60=","ja3":"","session":"49edb7e0-fdeb-4b62-8750-88384eac6c79","seq":1,"duration_ms":100,"bytes_in":178,"bytes_out":78},{"timestamp":"2026-07-19T21:46:12","port":102,"proto":"tcp","app_proto":"","app_protocol":"s7comm","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0016\u0011�\u0000\u0000\u0000\u0001\u0000�\u0002\u0000\u0000�\u0002\u0000\u0001�\u0001\n","payload_hex":"0300001611e00000000100c1020000c2020001c0010a","method":"","user_agent":"","community_id":"1:bFbquo921rNmU4Y6diH5fISJimY=","ja3":"","session":"fa2afbbf-c1af-4df6-b78f-03d55b8366f2","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":13,"enriched":{"digest":"11dd8665e30c08b9","label":"S7comm / COTP (ISO-TSAP)"}}],"http_methods":[{"method":"GET","count":146}],"distinct_ports_total":112,"top_paths":[{"path":"/favicon.ico","count":79,"ports":67},{"path":"/","count":66,"ports":57},{"path":"/ms/1.0/","count":1,"ports":1}],"distinct_paths_total":3,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[{"value":"SSH-2.0-Go","count":9}],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:4040","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":6},"tags":[],"data_as_of":"2026-07-26T02:15:53.366185+00:00"}