{"ip":"45.74.28.187","total_events":2,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["2 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"594 bytes sent","bytes_sent":594,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-26T21:50:01","last_seen":"2026-09-26T21:50:01","events_24h":0,"events_7d":2,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":219326,"org":"SULAVI LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":442,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["725543c78edf669194c11dc7a039b56e"],"http_akin":["a11cun060_0000005f_3e751395"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4889,"a11cun060_0000005f_3e751395":144},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"],"timeline":[{"date":"2026-09-26","count":2}],"recent_events":[{"timestamp":"2026-09-26T21:50:01","port":442,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:442\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"9b468212-3d2b-41be-89fb-ad42eb127b39","seq":1,"duration_ms":100,"bytes_in":297,"bytes_out":77},{"timestamp":"2026-09-26T21:50:01","port":442,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:442\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"c0f2890d-2613-4926-b659-df4283345bdd","seq":1,"duration_ms":100,"bytes_in":297,"bytes_out":77}],"http_methods":[{"method":"GET","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":2,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:442","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","notable":false}],"distinct_sets":1,"events_with_headers":2},"tags":[],"data_as_of":"2026-09-29T23:07:06.867186+00:00"}