{"ip":"95.182.81.180","total_events":3,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["3 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"513 bytes sent","bytes_sent":513,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-25T10:37:31","last_seen":"2026-09-27T13:27:30","events_24h":0,"events_7d":3,"geo":{"country_code":"CZ","country_name":"Czechia","region":"","city":"","lat":50.0848,"lon":14.4112,"asn":211273,"org":"Cloud Software - FZCO"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":3443,"proto":"tcp","label":"","count":1},{"port":50443,"proto":"tcp","label":"","count":1},{"port":7443,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i1310h1_f57a46bbacb6_e7c285222651"],"tls_client_hello":"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","tls_ja3":["faa162b5a653756fba26803ea81b362f"],"http_akin":["a11cun040_0000004e_608dab68"]},"fingerprint_peers":{"t13i1310h1_f57a46bbacb6_e7c285222651":63,"a11cun040_0000004e_608dab68":767},"akin_families":{"a11cun040_0000004e_608dab68":{"head":"a11cun040_0000004e_608dab68","shapes":2,"ips":768}},"user_agents":["Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"],"timeline":[{"date":"2026-09-25","count":1},{"date":"2026-09-26","count":1},{"date":"2026-09-27","count":1}],"recent_events":[{"timestamp":"2026-09-27T13:27:30","port":7443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:7443\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a373434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f36343b2072763a3134302e3029204765636b6f2f32303130303130312046697265666f782f3134302e300d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0","ja3":"faa162b5a653756fba26803ea81b362f","session":"d5d02fa4-bee2-49ea-8caa-8b9eb4fce5bc","seq":1,"duration_ms":100,"bytes_in":171,"bytes_out":78},{"timestamp":"2026-09-26T18:14:37","port":50443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:50443\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a35303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f36343b2072763a3134302e3029204765636b6f2f32303130303130312046697265666f782f3134302e300d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0","ja3":"faa162b5a653756fba26803ea81b362f","session":"11387ae8-919b-4d03-96c4-e201f5a0813f","seq":1,"duration_ms":100,"bytes_in":171,"bytes_out":78},{"timestamp":"2026-09-25T10:37:31","port":3443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3443\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f36343b2072763a3134302e3029204765636b6f2f32303130303130312046697265666f782f3134302e300d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0","ja3":"faa162b5a653756fba26803ea81b362f","session":"dc779ca7-ef79-4d2e-98fe-9ee8f3cfb9d2","seq":1,"duration_ms":100,"bytes_in":171,"bytes_out":78}],"http_methods":[{"method":"GET","count":3}],"distinct_ports_total":3,"top_paths":[{"path":"/","count":3,"ports":3}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"http/1.1","count":3}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:7443","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0","notable":false}],"distinct_sets":1,"events_with_headers":3},"tags":[],"data_as_of":"2026-09-28T23:15:10.316799+00:00"}