{"ip":"45.74.28.167","total_events":6,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["6 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,796 bytes sent","bytes_sent":1796,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-27T02:57:08","last_seen":"2026-09-27T12:47:47","events_24h":0,"events_7d":6,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":219326,"org":"SULAVI LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":40443,"proto":"tcp","label":"","count":2},{"port":14443,"proto":"tcp","label":"","count":2},{"port":6443,"proto":"tcp","label":"k8s API","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["725543c78edf669194c11dc7a039b56e"],"http_akin":["a11cun060_0000005f_3e751395"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4978,"a11cun060_0000005f_3e751395":129},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"],"timeline":[{"date":"2026-09-27","count":6}],"recent_events":[{"timestamp":"2026-09-27T12:47:47","port":40443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:40443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"81ce055d-3576-463c-929e-80ea2a7a6b07","seq":1,"duration_ms":100,"bytes_in":299,"bytes_out":77},{"timestamp":"2026-09-27T12:47:46","port":40443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:40443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c696d6167652f61706e672c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"e52d65a0-9e59-42e7-b006-9e201407c860","seq":1,"duration_ms":100,"bytes_in":299,"bytes_out":77},{"timestamp":"2026-09-27T04:37:12","port":6443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"62fe2950-6fda-47c8-a384-8dbd2b81461d","seq":1,"duration_ms":100,"bytes_in":299,"bytes_out":77},{"timestamp":"2026-09-27T04:37:12","port":6443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"a16ccd1d-f869-4a15-bbb2-0d3eda698dd4","seq":1,"duration_ms":100,"bytes_in":299,"bytes_out":77},{"timestamp":"2026-09-27T02:57:09","port":14443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:14443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"47eca702-f25d-43e0-82ca-4563f3f3a123","seq":1,"duration_ms":100,"bytes_in":300,"bytes_out":77},{"timestamp":"2026-09-27T02:57:08","port":14443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:14443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"40bd5359-3ce1-464b-9b7f-3053d1ec8617","seq":1,"duration_ms":101,"bytes_in":300,"bytes_out":77}],"http_methods":[{"method":"GET","count":6}],"distinct_ports_total":3,"top_paths":[{"path":"/","count":6,"ports":3}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:40443","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","notable":false}],"distinct_sets":1,"events_with_headers":6},"tags":[],"data_as_of":"2026-09-28T20:48:04.832174+00:00"}