{"ip":"107.174.145.158","total_events":35,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"3 exploit-path probe(s)","confidence":"medium","network_type":"nsp","why":["3 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"9,484 bytes sent","bytes_sent":9484,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-09T13:19:39","last_seen":"2026-09-09T13:19:52","events_24h":0,"events_7d":0,"geo":{"country_code":"US","country_name":"United States","region":"New York","city":"Buffalo","lat":42.8864,"lon":-78.8784,"asn":36352,"org":"HostPapa"},"source_domain":"107-174-145-158-host.colocrossing.com","known_scanners":[],"scanner_tag":{"key":"peeringdb:as36352","label":"ColoCrossing","category":"isp","url":"https://www.peeringdb.com/asn/36352"},"cve_matches":[],"malware":[],"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":17},{"port":443,"proto":"tcp","label":"HTTPS","count":17},{"port":554,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i181100_2fc7df0f2c24_ecd0401ec68b","t13i1812h1_2fc7df0f2c24_ecd0401ec68b"],"tls_client_hello":"","tls_ja3":["ef030e85aeb2c1e50dfc9c2dbe6b8b21","b93497076a0eb04c88af558ba70cf55e","929e7dd1bcf20bfee5947ad34567ee3f","35dca9918fe2bc6efe24fba0ce1098f9"],"http_akin":["b11cun050_00040017_67f56447","b11cun050_0004001d_7129ba85"]},"fingerprint_peers":{"t13i181100_2fc7df0f2c24_ecd0401ec68b":2,"t13i1812h1_2fc7df0f2c24_ecd0401ec68b":2,"b11cun050_0004001d_7129ba85":2,"b11cun050_00040017_67f56447":2},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-09","count":35}],"recent_events":[{"timestamp":"2026-09-09T13:19:52","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/img/snapshot.cgi","summary":"","payload_hex":"474554202f696d672f736e617073686f742e63676920485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f617669662c696d6167652f776562702c2a2f2a3b713d302e380d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"42b4dbb6fcd0a54a369398c639a3106e","session":"69b72735-08b3-4d53-8f98-3e70a3eaba0e","seq":1,"duration_ms":101,"bytes_in":271,"bytes_out":80},{"timestamp":"2026-09-09T13:19:51","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/img/snapshot.cgi","summary":"","payload_hex":"474554202f696d672f736e617073686f742e63676920485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f617669662c696d6167652f776562702c2a2f2a3b713d302e380d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"","session":"4dd25e4d-575b-453a-b030-fd7d8c1fc24d","seq":1,"duration_ms":100,"bytes_in":270,"bytes_out":80},{"timestamp":"2026-09-09T13:19:51","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/jpg/image.jpg","summary":"","payload_hex":"474554202f6a70672f696d6167652e6a706720485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f617669662c696d6167652f776562702c2a2f2a3b713d302e380d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"268c17a3e3ed453a3199d3637a82ff3a","session":"ff44bb7f-c188-4e9f-be3a-c8b1cb09ea67","seq":1,"duration_ms":102,"bytes_in":268,"bytes_out":80},{"timestamp":"2026-09-09T13:19:51","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/cgi-bin/snapshot.cgi","summary":"","payload_hex":"474554202f6367692d62696e2f736e617073686f742e63676920485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f617669662c696d6167652f776562702c2a2f2a3b713d302e380d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"233d10e31e1b0ac324676d0b02964d64","session":"f19d78bc-e928-4a85-967f-492e7438e31b","seq":1,"duration_ms":100,"bytes_in":275,"bytes_out":80},{"timestamp":"2026-09-09T13:19:50","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/cgi-bin/snapshot.cgi","summary":"","payload_hex":"474554202f6367692d62696e2f736e617073686f742e63676920485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f617669662c696d6167652f776562702c2a2f2a3b713d302e380d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"","session":"13711fb0-8cff-40ee-8d20-47e18638132d","seq":1,"duration_ms":100,"bytes_in":274,"bytes_out":80},{"timestamp":"2026-09-09T13:19:50","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/image.jpg","summary":"","payload_hex":"474554202f696d6167652e6a706720485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f617669662c696d6167652f776562702c2a2f2a3b713d302e380d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"ad370d6879b6751302280295693077d1","session":"0f1caa8a-abf4-4908-88f1-1134bbf4a065","seq":1,"duration_ms":100,"bytes_in":264,"bytes_out":80},{"timestamp":"2026-09-09T13:19:49","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/snapshot.jpg","summary":"","payload_hex":"474554202f736e617073686f742e6a706720485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f617669662c696d6167652f776562702c2a2f2a3b713d302e380d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"994e57ce7613c1ade25fd4293dd337d1","session":"666de2d1-869b-42c2-9a10-efec40decca8","seq":1,"duration_ms":100,"bytes_in":267,"bytes_out":80},{"timestamp":"2026-09-09T13:19:49","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/image.jpg","summary":"","payload_hex":"474554202f696d6167652e6a706720485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f617669662c696d6167652f776562702c2a2f2a3b713d302e380d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"","session":"f059aaaf-f7e3-4bcf-8ffc-f9d8b18722c0","seq":1,"duration_ms":100,"bytes_in":263,"bytes_out":80},{"timestamp":"2026-09-09T13:19:49","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/jpg/image.jpg","summary":"","payload_hex":"474554202f6a70672f696d6167652e6a706720485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f617669662c696d6167652f776562702c2a2f2a3b713d302e380d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"","session":"a40f92fb-b759-4577-8bbb-7f28c9f3fbd7","seq":1,"duration_ms":100,"bytes_in":267,"bytes_out":80},{"timestamp":"2026-09-09T13:19:49","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/snap.jpg","summary":"","payload_hex":"474554202f736e61702e6a706720485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a20696d6167652f617669662c696d6167652f776562702c2a2f2a3b713d302e380d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"c310bc006f3662c63acd881436399229","session":"4a287b12-35ce-413e-8b2c-62859b08173c","seq":1,"duration_ms":101,"bytes_in":263,"bytes_out":80}],"http_methods":[{"method":"GET","count":34}],"distinct_ports_total":3,"top_paths":[{"path":"/","count":2,"ports":2},{"path":"/snap.jpg","count":2,"ports":2},{"path":"/jpg/image.jpg","count":2,"ports":2},{"path":"/image/jpeg.cgi","count":2,"ports":2},{"path":"/snapshot.jpg","count":2,"ports":2},{"path":"/image.jpg","count":2,"ports":2},{"path":"/img/snapshot.cgi","count":2,"ports":2},{"path":"/axis-cgi/jpg/image.cgi","count":2,"ports":2},{"path":"/cgi-bin/snapshot.cgi","count":2,"ports":2},{"path":"/oneshotimage.jpg","count":2,"ports":2},{"path":"/-wvhttp-01-/image.cgi","count":2,"ports":2},{"path":"/onvif-http/snapshot","count":2,"ports":2},{"path":"/record/current.jpg","count":2,"ports":2},{"path":"/ISAPI/Streaming/channels/101/picture","count":2,"ports":2},{"path":"/cgi-bin/api.cgi?cmd=Snap&channel=0","count":2,"ports":2}],"distinct_paths_total":17,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"http/1.1","count":13}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"image/avif,image/webp,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"identity","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:443","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-10-01T14:38:49.487168+00:00"}