{"ip":"45.74.28.221","total_events":6,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["6 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,796 bytes sent","bytes_sent":1796,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-28T14:27:54","last_seen":"2026-09-30T04:43:12","events_24h":2,"events_7d":6,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":219326,"org":"SULAVI LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":19443,"proto":"tcp","label":"","count":2},{"port":55443,"proto":"tcp","label":"","count":2},{"port":44300,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["725543c78edf669194c11dc7a039b56e"],"http_akin":["b11cun060_0004001f_561f323a"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4844,"b11cun060_0004001f_561f323a":150},"akin_families":{"b11cun060_0004001f_561f323a":{"head":"b11cun060_0004001f_561f323a","shapes":2,"ips":152}},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"],"timeline":[{"date":"2026-09-28","count":2},{"date":"2026-09-29","count":2},{"date":"2026-09-30","count":2}],"recent_events":[{"timestamp":"2026-09-30T04:43:12","port":44300,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:44300\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"a800e916-b5d8-4d09-a2c4-84cd17f62d08","seq":1,"duration_ms":100,"bytes_in":300,"bytes_out":77},{"timestamp":"2026-09-30T04:43:12","port":44300,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:44300\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"9cc8c30a-a449-4b4e-bb88-5473772e1b39","seq":1,"duration_ms":100,"bytes_in":300,"bytes_out":77},{"timestamp":"2026-09-29T08:32:27","port":55443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:55443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"298ad863-7d61-4953-bb03-44c6bba28592","seq":1,"duration_ms":100,"bytes_in":299,"bytes_out":77},{"timestamp":"2026-09-29T08:32:27","port":55443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:55443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"61e96230-9655-4dbf-b91b-c47a536620e5","seq":1,"duration_ms":100,"bytes_in":299,"bytes_out":77},{"timestamp":"2026-09-28T14:27:54","port":19443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:19443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31393434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c696d6167652f61706e672c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"572e5a8f-9d56-49a0-bbce-2cc9cb96dd3b","seq":1,"duration_ms":101,"bytes_in":299,"bytes_out":77},{"timestamp":"2026-09-28T14:27:54","port":19443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:19443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"1f2a8ce9-b625-4290-9c23-ce3cb234c115","seq":1,"duration_ms":100,"bytes_in":299,"bytes_out":77}],"http_methods":[{"method":"GET","count":6}],"distinct_ports_total":3,"top_paths":[{"path":"/","count":6,"ports":3}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:44300","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","notable":false}],"distinct_sets":1,"events_with_headers":6},"tags":[],"data_as_of":"2026-09-30T10:48:34.897519+00:00"}