{"ip":"45.74.28.213","total_events":6,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["6 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,792 bytes sent","bytes_sent":1792,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-27T01:49:45","last_seen":"2026-09-30T08:07:34","events_24h":2,"events_7d":6,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":219326,"org":"SULAVI LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":44300,"proto":"tcp","label":"","count":2},{"port":446,"proto":"tcp","label":"","count":2},{"port":9999,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["725543c78edf669194c11dc7a039b56e"],"http_akin":["b11cun060_0004001f_561f323a"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4844,"b11cun060_0004001f_561f323a":150},"akin_families":{"b11cun060_0004001f_561f323a":{"head":"b11cun060_0004001f_561f323a","shapes":2,"ips":152}},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"],"timeline":[{"date":"2026-09-27","count":4},{"date":"2026-09-30","count":2}],"recent_events":[{"timestamp":"2026-09-30T08:07:34","port":446,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:446\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"0b3d311a-507a-4806-b2df-1a3271f74bbb","seq":1,"duration_ms":100,"bytes_in":298,"bytes_out":77},{"timestamp":"2026-09-30T08:07:34","port":446,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:446\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3434360d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c696d6167652f61706e672c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"8481a48d-2423-45a5-b4f9-d0754c5ca51a","seq":1,"duration_ms":100,"bytes_in":298,"bytes_out":77},{"timestamp":"2026-09-27T20:08:47","port":9999,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9999\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"2dc5bed8-e0bb-4da2-ae1c-86bbb1eed59a","seq":1,"duration_ms":100,"bytes_in":298,"bytes_out":77},{"timestamp":"2026-09-27T20:08:47","port":9999,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9999\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393939390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c696d6167652f61706e672c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"c8d3e782-e0fb-44f2-9587-93b34240a147","seq":1,"duration_ms":100,"bytes_in":298,"bytes_out":77},{"timestamp":"2026-09-27T01:49:45","port":44300,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:44300\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"86231f55-b8d8-406d-9b43-19673e361a6b","seq":1,"duration_ms":100,"bytes_in":300,"bytes_out":77},{"timestamp":"2026-09-27T01:49:45","port":44300,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:44300\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34343330300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c696d6167652f61706e672c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"0e2d92dc-4ad7-4d62-a247-1e0c422bdff0","seq":1,"duration_ms":100,"bytes_in":300,"bytes_out":77}],"http_methods":[{"method":"GET","count":6}],"distinct_ports_total":3,"top_paths":[{"path":"/","count":6,"ports":3}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:446","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","notable":false}],"distinct_sets":1,"events_with_headers":6},"tags":[],"data_as_of":"2026-09-30T10:48:39.119079+00:00"}