{"ip":"45.74.28.195","total_events":2,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["2 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"600 bytes sent","bytes_sent":600,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-28T12:47:44","last_seen":"2026-09-28T12:47:44","events_24h":2,"events_7d":2,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":219326,"org":"SULAVI LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":14007,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["725543c78edf669194c11dc7a039b56e"],"http_akin":["a11cun060_0000005f_3e751395"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4975,"a11cun060_0000005f_3e751395":130},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"],"timeline":[{"date":"2026-09-28","count":2}],"recent_events":[{"timestamp":"2026-09-28T12:47:44","port":14007,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:14007\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"d8798aba-2dd4-4c67-a8dc-f5f86502f455","seq":1,"duration_ms":101,"bytes_in":300,"bytes_out":77},{"timestamp":"2026-09-28T12:47:44","port":14007,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:14007\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31343030370d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c696d6167652f61706e672c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"7e630db6-26a7-455a-8baf-3888b577c38e","seq":1,"duration_ms":100,"bytes_in":300,"bytes_out":77}],"http_methods":[{"method":"GET","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":2,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:14007","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","notable":false}],"distinct_sets":1,"events_with_headers":2},"tags":[],"data_as_of":"2026-09-28T21:34:59.577557+00:00"}