{"ip":"104.152.52.60","data_as_of":"2026-10-27T13:08:44+00:00","observed":true,"total_events":591,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"internettl","confidence":"high","network_type":"non-profit","why":["The address is in a published scanner range (internettl).","Known research and commercial scanners are labelled by operator and carry no threat verdict.","Counts include 82 interactive session(s) as well as first-packet events."],"engagement":{"level":"payload","label":"Sustained payload","detail":"46,152 bytes sent","bytes_sent":46152,"session_seconds":15,"persistent":false},"basis":"combined"},"first_seen":"2026-02-22T03:31:16","last_seen":"2026-10-27T06:01:14","events_24h":1,"events_7d":29,"interactive_sessions":82,"interactive_sessions_24h":19,"interactive_sessions_7d":72,"interactive_protocols":[{"protocol":"tls","sessions":25},{"protocol":"http","sessions":17},{"protocol":"ssh","sessions":15},{"protocol":"socks4","sessions":2},{"protocol":"socks5","sessions":2},{"protocol":"postgres","sessions":1},{"protocol":"smtp","sessions":1},{"protocol":"rtsp","sessions":1}],"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":14987,"org":"Rethem Hosting LLC"},"source_domain":"internettl.org","known_scanners":["internettl","Internettl Org"],"scanner_tag":{"key":"auto:internettl_org","label":"Internettl Org","category":"commercial","url":""},"cve_matches":[],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":82,"first_seen":"2026-10-19T05:27:10","last_seen":"2026-10-27T06:01:14","verdicts":[{"verdict":"unknown","sessions":56},{"verdict":"scan","sessions":26}],"personas":[{"persona":"linux-ubuntu@24.04","sessions":15},{"persona":"nginx@1.24.0, wordpress@6.5.2, leaks@2, miner@bfgminer 5.5.0, elasticsearch@6.8.23, winrm@Windows Server 2016, fortigate@7.0.5, gitlab@19.4.2, plex@1.43.2.10687","sessions":6},{"persona":"nginx@1.24.0, wordpress@6.5.2, leaks@2, miner@bfgminer 5.5.0, elasticsearch@6.8.23, winrm@Windows Server 2016, fortigate@7.0.5, gitlab@19.4.2","sessions":6},{"persona":"nginx@1.24.0, wordpress@6.5.2, leaks@2, miner@bfgminer 5.5.0, elasticsearch@6.8.23, winrm@Windows Server 2016, fortigate@7.0.5, docker@25.0.3","sessions":5},{"persona":"proxy@squid/4.13","sessions":4},{"persona":"postgres@16.2","sessions":1},{"persona":"smtp@3.8.6","sessions":1},{"persona":"rtsp@GStreamer RTSP server","sessions":1}],"services":[{"protocol":"tls","port":9722,"sessions":2},{"protocol":"tcp","port":3388,"sessions":2},{"protocol":"tcp","port":20653,"sessions":2},{"protocol":"tls","port":8761,"sessions":1},{"protocol":"tls","port":20963,"sessions":1},{"protocol":"tls","port":20692,"sessions":1},{"protocol":"http","port":44,"sessions":1},{"protocol":"ssh","port":8715,"sessions":1},{"protocol":"socks4","port":2841,"sessions":1},{"protocol":"ssh","port":9067,"sessions":1},{"protocol":"tcp","port":8386,"sessions":1},{"protocol":"tcp","port":9711,"sessions":1}],"logins":[],"commands":[],"downloads":[],"files":[],"attack":[{"technique_id":"T1595","technique_name":"Active Scanning","tactic_id":"TA0043","tactic_name":"Reconnaissance","sessions":26}]},"top_ports":[{"port":1057,"proto":"tcp","label":"","count":6,"sessions":0},{"port":8988,"proto":"tcp","label":"","count":5,"sessions":0},{"port":8561,"proto":"tcp","label":"","count":4,"sessions":0},{"port":1443,"proto":"tcp","label":"","count":4,"sessions":0},{"port":2556,"proto":"tcp","label":"","count":4,"sessions":0},{"port":1749,"proto":"tcp","label":"","count":4,"sessions":0},{"port":5396,"proto":"tcp","label":"","count":4,"sessions":0},{"port":1740,"proto":"tcp","label":"","count":4,"sessions":0},{"port":2228,"proto":"tcp","label":"","count":3,"sessions":0},{"port":580,"proto":"tcp","label":"","count":3,"sessions":0},{"port":506,"proto":"tcp","label":"","count":3,"sessions":0},{"port":424,"proto":"tcp","label":"","count":3,"sessions":0},{"port":2693,"proto":"tcp","label":"","count":3,"sessions":0},{"port":30135,"proto":"tcp","label":"","count":3,"sessions":0},{"port":2434,"proto":"tcp","label":"","count":3,"sessions":0}],"fingerprints":{"ssh_hassh":["e54ef3ec27fe1fea7ab64d3fa05359fd"],"tls_ja4":["t13i131000_f57a46bbacb6_f50d94e863eb","t13i131000_f57a46bbacb6_e5728521abd4","t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["725543c78edf669194c11dc7a039b56e","2196848d251b217de8b2c037e356c11d"],"http_akin":["b11cuq040_00040811_2daa70d6","b11cun040_00040015_4c87b06e","b11cuq060_02050811_e545b78f"],"interactive":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_f50d94e863eb"],"tls_ja3":["725543c78edf669194c11dc7a039b56e"]}},"fingerprint_peers":{"t13i131000_f57a46bbacb6_f50d94e863eb":2807,"t13i131000_f57a46bbacb6_e5728521abd4":73,"t13i131000_f57a46bbacb6_ab7e3b40a677":3144,"e54ef3ec27fe1fea7ab64d3fa05359fd":641,"b11cuq040_00040811_2daa70d6":548,"b11cun040_00040015_4c87b06e":363,"b11cuq060_02050811_e545b78f":114},"akin_families":{"b11cun040_00040015_4c87b06e":{"head":"b11cun040_00040015_4c87b06e","shapes":5,"ips":363}},"user_agents":["Microsoft WinRM Client","curl/7.61.1"],"timeline":[{"date":"2026-07-30","count":3,"sessions":0},{"date":"2026-07-31","count":12,"sessions":0},{"date":"2026-08-01","count":3,"sessions":0},{"date":"2026-08-02","count":2,"sessions":0},{"date":"2026-08-03","count":4,"sessions":0},{"date":"2026-08-04","count":1,"sessions":0},{"date":"2026-08-05","count":2,"sessions":0},{"date":"2026-08-06","count":1,"sessions":0},{"date":"2026-08-08","count":7,"sessions":0},{"date":"2026-08-09","count":2,"sessions":0},{"date":"2026-08-11","count":2,"sessions":0},{"date":"2026-08-12","count":2,"sessions":0},{"date":"2026-08-13","count":16,"sessions":0},{"date":"2026-08-15","count":12,"sessions":0},{"date":"2026-08-16","count":3,"sessions":0},{"date":"2026-08-17","count":5,"sessions":0},{"date":"2026-08-18","count":6,"sessions":0},{"date":"2026-08-20","count":1,"sessions":0},{"date":"2026-08-21","count":4,"sessions":0},{"date":"2026-08-22","count":5,"sessions":0},{"date":"2026-08-23","count":1,"sessions":0},{"date":"2026-08-24","count":2,"sessions":0},{"date":"2026-08-25","count":16,"sessions":0},{"date":"2026-08-26","count":11,"sessions":0},{"date":"2026-08-27","count":4,"sessions":0},{"date":"2026-08-28","count":4,"sessions":0},{"date":"2026-08-29","count":3,"sessions":0},{"date":"2026-08-31","count":1,"sessions":0},{"date":"2026-09-01","count":2,"sessions":0},{"date":"2026-09-02","count":3,"sessions":0},{"date":"2026-09-03","count":3,"sessions":0},{"date":"2026-09-04","count":2,"sessions":0},{"date":"2026-09-05","count":1,"sessions":0},{"date":"2026-09-06","count":1,"sessions":0},{"date":"2026-09-07","count":2,"sessions":0},{"date":"2026-09-08","count":5,"sessions":0},{"date":"2026-09-09","count":2,"sessions":0},{"date":"2026-09-10","count":2,"sessions":0},{"date":"2026-09-11","count":16,"sessions":0},{"date":"2026-09-12","count":2,"sessions":0},{"date":"2026-09-13","count":3,"sessions":0},{"date":"2026-09-14","count":4,"sessions":0},{"date":"2026-09-15","count":4,"sessions":0},{"date":"2026-09-16","count":2,"sessions":0},{"date":"2026-09-17","count":2,"sessions":0},{"date":"2026-09-18","count":11,"sessions":0},{"date":"2026-09-19","count":2,"sessions":0},{"date":"2026-09-20","count":3,"sessions":0},{"date":"2026-09-21","count":1,"sessions":0},{"date":"2026-09-22","count":1,"sessions":0},{"date":"2026-09-23","count":4,"sessions":0},{"date":"2026-09-24","count":6,"sessions":0},{"date":"2026-09-26","count":2,"sessions":0},{"date":"2026-09-28","count":3,"sessions":0},{"date":"2026-10-01","count":2,"sessions":0},{"date":"2026-10-02","count":1,"sessions":0},{"date":"2026-10-03","count":1,"sessions":0},{"date":"2026-10-04","count":1,"sessions":0},{"date":"2026-10-05","count":2,"sessions":0},{"date":"2026-10-07","count":2,"sessions":0},{"date":"2026-10-08","count":1,"sessions":0},{"date":"2026-10-13","count":3,"sessions":0},{"date":"2026-10-15","count":2,"sessions":0},{"date":"2026-10-16","count":3,"sessions":0},{"date":"2026-10-18","count":2,"sessions":0},{"date":"2026-10-19","count":3,"sessions":6},{"date":"2026-10-20","count":2,"sessions":4},{"date":"2026-10-21","count":0,"sessions":11},{"date":"2026-10-22","count":9,"sessions":14},{"date":"2026-10-23","count":3,"sessions":7},{"date":"2026-10-24","count":2,"sessions":2},{"date":"2026-10-25","count":6,"sessions":2},{"date":"2026-10-26","count":8,"sessions":17},{"date":"2026-10-27","count":1,"sessions":19}],"recent_events":[{"timestamp":"2026-10-27T06:01:04","port":9114,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"curl/7.61.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203c484f4e4559504f543e0d0a557365722d4167656e743a206375726c2f372e36312e310d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"curl/7.61.1","ja3":"","session":"b36e52b0-fd3f-4c70-b425-c9eeab4f186b-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-27T06:01:03","port":733,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"curl/7.61.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203c484f4e4559504f543e0d0a557365722d4167656e743a206375726c2f372e36312e310d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"curl/7.61.1","ja3":"","session":"aefef897-c201-4615-a625-55f72ccc2258-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-27T06:01:02","port":2762,"proto":"tcp","app_proto":"","app_protocol":"cassandra","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000\u0000\u0000\u0000�\u0000\u0001\u0000\u0000ANY-SCP         ECHOSCU         \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000\u00151.2.840.10008.3.1.1.1 \u0000\u0000.\u0001\u0000\u0000\u00000\u0000\u0000\u00111.2.840.10008.1.1@\u0000\u0000\u00111.2.840.10008.1.2P\u0000\u0000:Q\u0000\u0000\u0004\u0000\u0000@\u0000R\u0000\u0000\u001b1.2.276.0.7230010.3.0.3.6.2U\u0000\u0000\u000fOFFIS_DCMTK_362","payload_hex":"0100000000cd00010000414e592d5343502020202020202020204543484f534355202020202020202020000000000000000000000000000000000000000000000000000000000000000010000015312e322e3834302e31303030382e332e312e312e312000002e0100000030000011312e322e3834302e31303030382e312e3140000011312e322e3834302e31303030382e312e325000003a51000004000040005200001b312e322e3237362e302e373233303031302e332e302e332e362e325500000f4f464649535f44434d544b5f333632","method":"","user_agent":"","ja3":"","session":"9094aaeb-0f3c-4cbc-a036-1d74c46ef49f-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"486890a9693556b7","label":"DICOM","strings":["ANY-SCP         ECHOSCU","1.2.840.10008.3.1.1.1","1.2.840.10008.1.1@","1.2.840.10008.1.2P","1.2.276.0.7230010.3.0.3.6.2U","OFFIS_DCMTK_362","1.2.840.10008.3.1.1.1 .","1.2.840.10008.1.2P:Q"]},"interactive":true},{"timestamp":"2026-10-27T06:01:02","port":20936,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"curl/7.61.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203c484f4e4559504f543e0d0a557365722d4167656e743a206375726c2f372e36312e310d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"curl/7.61.1","ja3":"","session":"ad3d9b77-e4e6-4f85-8592-8b37bb4b0da1-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-27T06:01:02","port":2537,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"curl/7.61.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203c484f4e4559504f543e0d0a557365722d4167656e743a206375726c2f372e36312e310d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"curl/7.61.1","ja3":"","session":"edda5ffc-1b6e-4f94-8214-08ca6af38f92-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-27T06:01:02","port":44,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"curl/7.61.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203c484f4e4559504f543e0d0a557365722d4167656e743a206375726c2f372e36312e310d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"curl/7.61.1","ja3":"","session":"4a5136e8-507d-403f-bcba-b663a8618c65-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-27T06:01:02","port":20804,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"curl/7.61.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203c484f4e4559504f543e0d0a557365722d4167656e743a206375726c2f372e36312e310d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"curl/7.61.1","ja3":"","session":"313d40bd-cb47-44e2-8824-11f913c79d99-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-27T00:19:31","port":596,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"curl/7.61.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a206375726c2f372e36312e310d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"curl/7.61.1","ja3":"","session":"cb496460-ef38-43d1-8d9c-1630fd8564d1","seq":1,"duration_ms":0,"bytes_in":96,"bytes_out":78},{"timestamp":"2026-10-26T05:47:52","port":9437,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"curl/7.61.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203c484f4e4559504f543e0d0a557365722d4167656e743a206375726c2f372e36312e310d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"curl/7.61.1","ja3":"","session":"49eb60c5-b264-4254-a07e-9cb94c87938f-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-26T05:47:51","port":2708,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"curl/7.61.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203c484f4e4559504f543e0d0a557365722d4167656e743a206375726c2f372e36312e310d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"curl/7.61.1","ja3":"","session":"bb2e0ddc-1afd-4824-817a-3b5e770ceb21-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true}],"http_methods":[{"method":"GET","count":195},{"method":"POST","count":54}],"distinct_ports_total":515,"top_paths":[{"path":"/","count":192,"ports":170},{"path":"/wsman","count":54,"ports":28},{"path":"/get_info","count":3,"ports":3}],"distinct_paths_total":3,"top_snis":[],"top_hosts":[{"value":"localhost","count":28}],"top_alpns":[],"banners":[{"value":"SSH-2.0-Go","count":8}],"credentials":[],"header_profile":{"signature":["Accept","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"curl/7.61.1","notable":false}],"distinct_sets":1,"events_with_headers":9},"tags":[]}