{"ip":"45.74.28.234","total_events":4,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["4 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,196 bytes sent","bytes_sent":1196,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-27T05:05:18","last_seen":"2026-09-27T18:29:38","events_24h":0,"events_7d":4,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":219326,"org":"SULAVI LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":64443,"proto":"tcp","label":"","count":2},{"port":442,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["725543c78edf669194c11dc7a039b56e"],"http_akin":["a11cun060_0000005f_3e751395"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4975,"a11cun060_0000005f_3e751395":130},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"],"timeline":[{"date":"2026-09-27","count":4}],"recent_events":[{"timestamp":"2026-09-27T18:29:38","port":442,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:442\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"32a71b07-08c8-491c-bd90-39cebbe53688","seq":1,"duration_ms":100,"bytes_in":298,"bytes_out":77},{"timestamp":"2026-09-27T18:29:38","port":442,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:442\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"d727a5ca-6924-4014-b3da-90718a35886e","seq":1,"duration_ms":100,"bytes_in":298,"bytes_out":77},{"timestamp":"2026-09-27T05:05:18","port":64443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:64443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"84500597-8a29-4062-9d12-bab925fca9bb","seq":1,"duration_ms":100,"bytes_in":300,"bytes_out":77},{"timestamp":"2026-09-27T05:05:18","port":64443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:64443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"7cac96e8-fe1f-4968-91e3-da0ec6891c3a","seq":1,"duration_ms":100,"bytes_in":300,"bytes_out":77}],"http_methods":[{"method":"GET","count":4}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":4,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:442","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","notable":false}],"distinct_sets":1,"events_with_headers":4},"tags":[],"data_as_of":"2026-09-28T21:35:03.451178+00:00"}