{"ip":"45.74.28.131","total_events":6,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["6 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,796 bytes sent","bytes_sent":1796,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-26T21:49:00","last_seen":"2026-09-28T08:55:45","events_24h":2,"events_7d":6,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":219326,"org":"SULAVI LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":40443,"proto":"tcp","label":"","count":4},{"port":15443,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["725543c78edf669194c11dc7a039b56e"],"http_akin":["a11cun060_0000005f_3e751395"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4978,"a11cun060_0000005f_3e751395":129},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"],"timeline":[{"date":"2026-09-26","count":2},{"date":"2026-09-27","count":2},{"date":"2026-09-28","count":2}],"recent_events":[{"timestamp":"2026-09-28T08:55:45","port":15443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:15443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"aca60875-31d8-4234-b15f-e5eb1ff28378","seq":1,"duration_ms":100,"bytes_in":299,"bytes_out":77},{"timestamp":"2026-09-28T08:55:44","port":15443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:15443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"ac13a897-6cb7-4559-9c39-c877e2bde721","seq":1,"duration_ms":100,"bytes_in":299,"bytes_out":77},{"timestamp":"2026-09-27T18:03:43","port":40443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:40443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"07939f91-cc8a-4e63-ba63-4893bf1c75c5","seq":1,"duration_ms":100,"bytes_in":299,"bytes_out":77},{"timestamp":"2026-09-27T18:03:42","port":40443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:40443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"9b40c752-16f2-40bc-92a5-89a355e1a167","seq":1,"duration_ms":100,"bytes_in":299,"bytes_out":77},{"timestamp":"2026-09-26T21:49:00","port":40443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:40443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c696d6167652f61706e672c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"d256874c-0a23-47d1-bdea-d33961447868","seq":1,"duration_ms":101,"bytes_in":300,"bytes_out":77},{"timestamp":"2026-09-26T21:49:00","port":40443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:40443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"0e23c26b-7f19-4386-8f2d-44da42174ad3","seq":1,"duration_ms":103,"bytes_in":300,"bytes_out":77}],"http_methods":[{"method":"GET","count":6}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":6,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:15443","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","notable":false}],"distinct_sets":1,"events_with_headers":6},"tags":[],"data_as_of":"2026-09-28T20:48:30.218772+00:00"}