{"ip":"45.74.28.203","total_events":6,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["6 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,794 bytes sent","bytes_sent":1794,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-27T22:10:15","last_seen":"2026-09-30T01:46:11","events_24h":2,"events_7d":6,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":219326,"org":"SULAVI LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":17443,"proto":"tcp","label":"","count":2},{"port":9999,"proto":"tcp","label":"","count":2},{"port":8090,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["725543c78edf669194c11dc7a039b56e"],"http_akin":["b11cun060_0004001f_561f323a"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4844,"b11cun060_0004001f_561f323a":150},"akin_families":{"b11cun060_0004001f_561f323a":{"head":"b11cun060_0004001f_561f323a","shapes":2,"ips":152}},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"],"timeline":[{"date":"2026-09-27","count":2},{"date":"2026-09-29","count":2},{"date":"2026-09-30","count":2}],"recent_events":[{"timestamp":"2026-09-30T01:46:11","port":8090,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8090\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"0cee444b-3c5c-4734-8161-8a8be45e7e97","seq":1,"duration_ms":100,"bytes_in":299,"bytes_out":77},{"timestamp":"2026-09-30T01:46:10","port":8090,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8090\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"457a52cf-d13e-47a5-9398-9f9b9db99da2","seq":1,"duration_ms":100,"bytes_in":299,"bytes_out":77},{"timestamp":"2026-09-29T05:21:26","port":9999,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9999\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"4b63c9e5-6afd-4d24-84c8-db93d83e3693","seq":1,"duration_ms":100,"bytes_in":299,"bytes_out":77},{"timestamp":"2026-09-29T05:21:26","port":9999,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9999\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"34c9f315-9ab1-449e-bfac-aa960c4be79a","seq":1,"duration_ms":100,"bytes_in":299,"bytes_out":77},{"timestamp":"2026-09-27T22:10:16","port":17443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:17443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"b867a637-3030-47fa-86b9-52f83f41c568","seq":1,"duration_ms":101,"bytes_in":299,"bytes_out":77},{"timestamp":"2026-09-27T22:10:15","port":17443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:17443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31373434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c696d6167652f61706e672c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"ef012aa7-0b77-4e9f-9dfd-e6614e089e05","seq":1,"duration_ms":101,"bytes_in":299,"bytes_out":77}],"http_methods":[{"method":"GET","count":6}],"distinct_ports_total":3,"top_paths":[{"path":"/","count":6,"ports":3}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:8090","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","notable":false}],"distinct_sets":1,"events_with_headers":6},"tags":[],"data_as_of":"2026-09-30T10:48:32.660681+00:00"}