{"ip":"109.238.87.243","total_events":432,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"120+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 120 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"134,263 bytes sent","bytes_sent":134263,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-29T07:17:01","last_seen":"2026-10-02T14:41:14","events_24h":94,"events_7d":432,"geo":{"country_code":"US","country_name":"United States","region":"New York","city":"Buffalo","lat":42.8864,"lon":-78.8781,"asn":55286,"org":"B2 Net Solutions Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as55286","label":"ServerMania Inc","category":"cdn","url":"https://www.peeringdb.com/asn/55286"},"cve_matches":[],"malware":[],"top_ports":[{"port":500,"proto":"tcp","label":"","count":5},{"port":4583,"proto":"tcp","label":"","count":5},{"port":11443,"proto":"tcp","label":"","count":5},{"port":2443,"proto":"tcp","label":"","count":5},{"port":777,"proto":"tcp","label":"","count":4},{"port":12443,"proto":"tcp","label":"","count":4},{"port":50000,"proto":"tcp","label":"SAP","count":4},{"port":63555,"proto":"tcp","label":"","count":4},{"port":44344,"proto":"tcp","label":"","count":4},{"port":446,"proto":"tcp","label":"","count":4},{"port":7734,"proto":"tcp","label":"","count":4},{"port":4343,"proto":"tcp","label":"","count":4},{"port":5555,"proto":"tcp","label":"","count":4},{"port":21443,"proto":"tcp","label":"","count":4},{"port":55443,"proto":"tcp","label":"","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i130900_f57a46bbacb6_e7c285222651"],"tls_client_hello":"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","tls_ja3":["674c9b60629e4885877f5ec76f21723e"],"http_akin":["b11cun050_00040017_ee17dab1"]},"fingerprint_peers":{"t13i130900_f57a46bbacb6_e7c285222651":3677,"b11cun050_00040017_ee17dab1":4},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-29","count":122},{"date":"2026-09-30","count":151},{"date":"2026-10-01","count":103},{"date":"2026-10-02","count":56}],"recent_events":[{"timestamp":"2026-10-02T14:41:14","port":41769,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:41769\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"fd41b881-550e-4b82-b3b8-1a27721d61be","seq":1,"duration_ms":100,"bytes_in":312,"bytes_out":79},{"timestamp":"2026-10-02T13:54:23","port":50491,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:50491\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"e164abd4-8380-4c1b-9422-2360c8056039","seq":1,"duration_ms":101,"bytes_in":311,"bytes_out":79},{"timestamp":"2026-10-02T13:40:16","port":64443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:64443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"e47a8712-8f95-4bed-b0f1-2c645de786b5","seq":1,"duration_ms":102,"bytes_in":312,"bytes_out":79},{"timestamp":"2026-10-02T13:25:29","port":8080,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"56a4025d-3083-4838-b9ec-660d4e748aef","seq":1,"duration_ms":100,"bytes_in":310,"bytes_out":79},{"timestamp":"2026-10-02T13:14:22","port":60443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:60443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"223cc691-c327-4635-8f3f-ec990d572910","seq":1,"duration_ms":101,"bytes_in":312,"bytes_out":79},{"timestamp":"2026-10-02T12:56:13","port":9443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"1a296144-a0b8-4d3b-939a-b2d6d4e0468d","seq":1,"duration_ms":100,"bytes_in":310,"bytes_out":79},{"timestamp":"2026-10-02T12:25:40","port":55443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:55443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"08025b4e-7064-492b-b1ac-a678a046ca39","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":79},{"timestamp":"2026-10-02T12:24:34","port":30664,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:30664\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>3a33303636340d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c2a2f2a3b713d302e380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"39538332-6ddf-4864-9978-6d56efc5252f","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":79},{"timestamp":"2026-10-02T11:05:57","port":1839,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:1839\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>3a313833390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c2a2f2a3b713d302e380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"afb1c101-6266-44c1-b22e-142e2ca7cb1a","seq":1,"duration_ms":100,"bytes_in":310,"bytes_out":79},{"timestamp":"2026-10-02T10:53:34","port":6191,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6191\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"a9148090-163a-4bcc-94bd-35ac34be75ee","seq":1,"duration_ms":101,"bytes_in":311,"bytes_out":79}],"http_methods":[{"method":"GET","count":432}],"distinct_ports_total":120,"top_paths":[{"path":"/login","count":432,"ports":120}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:41769","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-10-02T15:45:34.490480+00:00"}