{"ip":"80.82.70.40","total_events":157,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"80+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 80 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."]},"first_seen":"2026-04-11T06:41:33","last_seen":"2026-07-26T01:11:01","events_24h":7,"events_7d":37,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"","city":"","lat":52.3824,"lon":4.8995,"asn":202425,"org":"IP Volume inc"},"source_domain":"no-reverse-dns-configured.com","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":1707,"proto":"tcp","label":"","count":5},{"port":1198,"proto":"tcp","label":"","count":5},{"port":4500,"proto":"tcp","label":"","count":5},{"port":9001,"proto":"tcp","label":"Tor","count":4},{"port":4443,"proto":"tcp","label":"","count":4},{"port":1197,"proto":"tcp","label":"","count":3},{"port":9200,"proto":"tcp","label":"Elastic","count":3},{"port":1194,"proto":"tcp","label":"OpenVPN","count":3},{"port":14567,"proto":"tcp","label":"","count":3},{"port":9083,"proto":"tcp","label":"","count":3},{"port":5001,"proto":"tcp","label":"","count":3},{"port":3434,"proto":"tcp","label":"","count":3},{"port":1080,"proto":"tcp","label":"SOCKS","count":3},{"port":9440,"proto":"tcp","label":"","count":3},{"port":777,"proto":"tcp","label":"","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i311000_e8f1e7e78f70_d41ae481755e"],"tls_ja3":["004556e859f3c26c5d19746b3a957c74"],"ja4h":["ge11nr0800_4a9379071f2d"]},"fingerprint_peers":{"t13i311000_e8f1e7e78f70_d41ae481755e":1024,"ge11nr0800_4a9379071f2d":10},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-05-11","count":1},{"date":"2026-05-19","count":1},{"date":"2026-05-21","count":1},{"date":"2026-05-22","count":19},{"date":"2026-05-23","count":5},{"date":"2026-05-24","count":13},{"date":"2026-05-25","count":3},{"date":"2026-05-26","count":6},{"date":"2026-05-27","count":1},{"date":"2026-06-05","count":1},{"date":"2026-06-17","count":1},{"date":"2026-07-10","count":1},{"date":"2026-07-11","count":1},{"date":"2026-07-14","count":2},{"date":"2026-07-15","count":8},{"date":"2026-07-16","count":7},{"date":"2026-07-17","count":3},{"date":"2026-07-18","count":6},{"date":"2026-07-19","count":5},{"date":"2026-07-20","count":4},{"date":"2026-07-21","count":2},{"date":"2026-07-22","count":7},{"date":"2026-07-23","count":9},{"date":"2026-07-24","count":4},{"date":"2026-07-25","count":6},{"date":"2026-07-26","count":1}],"recent_events":[{"timestamp":"2026-07-26T01:11:01","port":9001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/webp,image/apng,image/*,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:9001\",\"referer\":\"http://<HONEYPOT>:9001/\",\"sec-fetch-dest\":\"image\",\"sec-fetch-mode\":\"no-cors\",\"sec-fetch-site\":\"same-origin\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393030310d0a557067726164652d496e7365637572652d52657175657374733a20310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130342e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f776562702c696d6167652f61706e672c696d6167652f2a2c2a2f2a3b713d302e380d0a526566657265723a20687474703a2f2f<HONEYPOT>3a393030312f0d0a5365632d46657463682d446573743a20696d6167650d0a5365632d46657463682d4d6f64653a206e6f2d636f72730d0a5365632d46657463682d536974653a2073616d652d6f726967696e0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36","community_id":"1:4EUETKUwRecOaflpLZSQ9M8WZ64=","ja3":"","session":"c0a6247e-9178-4978-9c34-6b5186bcad8d","seq":1,"duration_ms":100,"bytes_in":403,"bytes_out":76},{"timestamp":"2026-07-25T22:56:59","port":8443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/webp,image/apng,image/*,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:8443\",\"referer\":\"https://<HONEYPOT>:8443/\",\"sec-fetch-dest\":\"image\",\"sec-fetch-mode\":\"no-cors\",\"sec-fetch-site\":\"same-origin\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557067726164652d496e7365637572652d52657175657374733a20310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130342e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f776562702c696d6167652f61706e672c696d6167652f2a2c2a2f2a3b713d302e380d0a526566657265723a2068747470733a2f2f<HONEYPOT>3a383434332f0d0a5365632d46657463682d446573743a20696d6167650d0a5365632d46657463682d4d6f64653a206e6f2d636f72730d0a5365632d46657463682d536974653a2073616d652d6f726967696e0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36","community_id":"1:TviukQDcfWNpTUq47wB2sc6eHJo=","ja3":"004556e859f3c26c5d19746b3a957c74","session":"68526607-a6bc-4fb9-ae7e-a37a11b34b36","seq":1,"duration_ms":100,"bytes_in":406,"bytes_out":76},{"timestamp":"2026-07-25T20:07:12","port":1707,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/webp,image/apng,image/*,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:1707\",\"referer\":\"https://<HONEYPOT>:1707/\",\"sec-fetch-dest\":\"image\",\"sec-fetch-mode\":\"no-cors\",\"sec-fetch-site\":\"same-origin\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313730370d0a557067726164652d496e7365637572652d52657175657374733a20310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130342e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f776562702c696d6167652f61706e672c696d6167652f2a2c2a2f2a3b713d302e380d0a526566657265723a2068747470733a2f2f<HONEYPOT>3a313730372f0d0a5365632d46657463682d446573743a20696d6167650d0a5365632d46657463682d4d6f64653a206e6f2d636f72730d0a5365632d46657463682d536974653a2073616d652d6f726967696e0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36","community_id":"1:sosO/mHzo++SBy2X0V6AOFUEAzU=","ja3":"004556e859f3c26c5d19746b3a957c74","session":"efa37b3c-1441-4bf2-b111-a20d9e298e4f","seq":1,"duration_ms":102,"bytes_in":408,"bytes_out":76},{"timestamp":"2026-07-25T13:55:00","port":1197,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/webp,image/apng,image/*,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:1197\",\"referer\":\"http://<HONEYPOT>:1197/\",\"sec-fetch-dest\":\"image\",\"sec-fetch-mode\":\"no-cors\",\"sec-fetch-site\":\"same-origin\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313139370d0a557067726164652d496e7365637572652d52657175657374733a20310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130342e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f776562702c696d6167652f61706e672c696d6167652f2a2c2a2f2a3b713d302e380d0a526566657265723a20687474703a2f2f<HONEYPOT>3a313139372f0d0a5365632d46657463682d446573743a20696d6167650d0a5365632d46657463682d4d6f64653a206e6f2d636f72730d0a5365632d46657463682d536974653a2073616d652d6f726967696e0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36","community_id":"1:soGLGneKuiW+wYCkafu+35T/OBg=","ja3":"","session":"63632c0a-4b13-4a31-83b8-67b7e4c08858","seq":1,"duration_ms":100,"bytes_in":403,"bytes_out":76},{"timestamp":"2026-07-25T13:15:50","port":1198,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/webp,image/apng,image/*,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:1198\",\"referer\":\"http://<HONEYPOT>:1198/\",\"sec-fetch-dest\":\"image\",\"sec-fetch-mode\":\"no-cors\",\"sec-fetch-site\":\"same-origin\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313139380d0a557067726164652d496e7365637572652d52657175657374733a20310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130342e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f776562702c696d6167652f61706e672c696d6167652f2a2c2a2f2a3b713d302e380d0a526566657265723a20687474703a2f2f<HONEYPOT>3a313139382f0d0a5365632d46657463682d446573743a20696d6167650d0a5365632d46657463682d4d6f64653a206e6f2d636f72730d0a5365632d46657463682d536974653a2073616d652d6f726967696e0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36","community_id":"1:0PIIaOzex1kznpxTI/Tem2D0tNk=","ja3":"","session":"2ef1c0e5-0d96-4938-bb0a-cac5cbdd1289","seq":1,"duration_ms":100,"bytes_in":403,"bytes_out":76},{"timestamp":"2026-07-25T12:29:42","port":60000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/webp,image/apng,image/*,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:60000\",\"referer\":\"http://<HONEYPOT>:60000/\",\"sec-fetch-dest\":\"image\",\"sec-fetch-mode\":\"no-cors\",\"sec-fetch-site\":\"same-origin\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a36303030300d0a557067726164652d496e7365637572652d52657175657374733a20310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130342e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f776562702c696d6167652f61706e672c696d6167652f2a2c2a2f2a3b713d302e380d0a526566657265723a20687474703a2f2f<HONEYPOT>3a36303030302f0d0a5365632d46657463682d446573743a20696d6167650d0a5365632d46657463682d4d6f64653a206e6f2d636f72730d0a5365632d46657463682d536974653a2073616d652d6f726967696e0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36","community_id":"1:0fmuwT8I2W5/mNGpKkUHJiX4REY=","ja3":"","session":"15398944-9f8d-4809-8c44-912de029cb63","seq":1,"duration_ms":100,"bytes_in":405,"bytes_out":76},{"timestamp":"2026-07-25T11:42:12","port":9440,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/webp,image/apng,image/*,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:9440\",\"referer\":\"http://<HONEYPOT>:9440/\",\"sec-fetch-dest\":\"image\",\"sec-fetch-mode\":\"no-cors\",\"sec-fetch-site\":\"same-origin\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393434300d0a557067726164652d496e7365637572652d52657175657374733a20310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130342e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f776562702c696d6167652f61706e672c696d6167652f2a2c2a2f2a3b713d302e380d0a526566657265723a20687474703a2f2f<HONEYPOT>3a393434302f0d0a5365632d46657463682d446573743a20696d6167650d0a5365632d46657463682d4d6f64653a206e6f2d636f72730d0a5365632d46657463682d536974653a2073616d652d6f726967696e0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36","community_id":"1:ivS3nLCWauVzbv8VsEsAuSF7wIo=","ja3":"","session":"dd83c9fb-f17f-46fc-bb55-f411c52b9c37","seq":1,"duration_ms":100,"bytes_in":403,"bytes_out":76},{"timestamp":"2026-07-24T19:00:11","port":9083,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/webp,image/apng,image/*,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:9083\",\"referer\":\"http://<HONEYPOT>:9083/\",\"sec-fetch-dest\":\"image\",\"sec-fetch-mode\":\"no-cors\",\"sec-fetch-site\":\"same-origin\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393038330d0a557067726164652d496e7365637572652d52657175657374733a20310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130342e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f776562702c696d6167652f61706e672c696d6167652f2a2c2a2f2a3b713d302e380d0a526566657265723a20687474703a2f2f<HONEYPOT>3a393038332f0d0a5365632d46657463682d446573743a20696d6167650d0a5365632d46657463682d4d6f64653a206e6f2d636f72730d0a5365632d46657463682d536974653a2073616d652d6f726967696e0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36","community_id":"1:r/qHkXeaI1dc0NLlskhd6pEWQbE=","ja3":"","session":"f488e698-0e98-44f7-b2c9-d1021b89f2b7","seq":1,"duration_ms":100,"bytes_in":403,"bytes_out":76},{"timestamp":"2026-07-24T18:45:58","port":7000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/webp,image/apng,image/*,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:7000\",\"referer\":\"http://<HONEYPOT>:7000/\",\"sec-fetch-dest\":\"image\",\"sec-fetch-mode\":\"no-cors\",\"sec-fetch-site\":\"same-origin\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a373030300d0a557067726164652d496e7365637572652d52657175657374733a20310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130342e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f776562702c696d6167652f61706e672c696d6167652f2a2c2a2f2a3b713d302e380d0a526566657265723a20687474703a2f2f<HONEYPOT>3a373030302f0d0a5365632d46657463682d446573743a20696d6167650d0a5365632d46657463682d4d6f64653a206e6f2d636f72730d0a5365632d46657463682d536974653a2073616d652d6f726967696e0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36","community_id":"1:ghFbn/ceQYRXPK04KrHo1BfdLtQ=","ja3":"","session":"04f826ef-4f56-4ed0-b233-01ff85d9204b","seq":1,"duration_ms":100,"bytes_in":403,"bytes_out":76},{"timestamp":"2026-07-24T17:38:09","port":3307,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/webp,image/apng,image/*,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:3307\",\"referer\":\"http://<HONEYPOT>:3307/\",\"sec-fetch-dest\":\"image\",\"sec-fetch-mode\":\"no-cors\",\"sec-fetch-site\":\"same-origin\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333330370d0a557067726164652d496e7365637572652d52657175657374733a20310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130342e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f776562702c696d6167652f61706e672c696d6167652f2a2c2a2f2a3b713d302e380d0a526566657265723a20687474703a2f2f<HONEYPOT>3a333330372f0d0a5365632d46657463682d446573743a20696d6167650d0a5365632d46657463682d4d6f64653a206e6f2d636f72730d0a5365632d46657463682d536974653a2073616d652d6f726967696e0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36","community_id":"1:fr7LTsJo/ueSQMmy6BAMcsbFx1k=","ja3":"","session":"4c2f2ecc-1d97-48ee-b6fa-81fcd646e8e3","seq":1,"duration_ms":101,"bytes_in":403,"bytes_out":76}],"http_methods":[{"method":"GET","count":157}],"distinct_ports_total":80,"top_paths":[{"path":"/favicon.ico","count":157,"ports":80}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","Referer","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","Upgrade-Insecure-Requests","User-Agent"],"representative":[{"name":"Accept","value":"image/webp,image/apng,image/*,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Host","value":"<HONEYPOT>:9001","notable":false},{"name":"Referer","value":"http://<HONEYPOT>:9001/","notable":true},{"name":"Sec-Fetch-Dest","value":"image","notable":false},{"name":"Sec-Fetch-Mode","value":"no-cors","notable":false},{"name":"Sec-Fetch-Site","value":"same-origin","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-07-26T03:23:32.957346+00:00"}