{"ip":"134.122.114.23","data_as_of":"2026-10-24T11:08:21+00:00","observed":true,"total_events":528,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"20+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 20 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"48,258 bytes sent","bytes_sent":48258,"session_seconds":1,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-13T03:14:29","last_seen":"2026-10-13T21:40:33","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"US","country_name":"United States","region":"New Jersey","city":"North Bergen","lat":40.7964,"lon":-74.0203,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":9443,"proto":"tcp","label":"","count":52},{"port":9909,"proto":"tcp","label":"","count":26},{"port":2083,"proto":"tcp","label":"","count":25},{"port":4443,"proto":"tcp","label":"","count":25},{"port":2096,"proto":"tcp","label":"","count":25},{"port":6667,"proto":"tcp","label":"IRC","count":25},{"port":40056,"proto":"tcp","label":"","count":25},{"port":1604,"proto":"tcp","label":"","count":25},{"port":8074,"proto":"tcp","label":"","count":25},{"port":1139,"proto":"tcp","label":"","count":25},{"port":444,"proto":"tcp","label":"","count":25},{"port":7007,"proto":"tcp","label":"","count":25},{"port":6663,"proto":"tcp","label":"","count":25},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":25},{"port":1133,"proto":"tcp","label":"","count":25}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i311000_e8f1e7e78f70_24695f2957a7"],"tls_client_hello":"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","tls_ja3":["c12b4ccd5320bbb380ca1a9df90f771d"],"http_akin":["b11cun063_40040001_ffe60107_x9f62a4acfdb1","b11cun020_00040001_78f1f19c","b11cun040_00040016_aa48e2c8","b11cun050_00040017_976354f0"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13i311000_e8f1e7e78f70_24695f2957a7":579,"b11cun020_00040001_78f1f19c":33,"b11cun040_00040016_aa48e2c8":5467,"b11cun050_00040017_976354f0":1244,"b11cun063_40040001_ffe60107_x9f62a4acfdb1":6},"akin_families":{"b11cun063_40040001_ffe60107_x9f62a4acfdb1":{"head":"b11cun020_00040001_78f1f19c","shapes":3,"ips":33},"b11cun020_00040001_78f1f19c":{"head":"b11cun020_00040001_78f1f19c","shapes":3,"ips":33}},"user_agents":["Mozilla/5.0 zgrab/0.x","Mozilla/5.0","python-httpx/0.28.1"],"timeline":[{"date":"2026-10-13","count":528}],"recent_events":[{"timestamp":"2026-10-13T21:40:33","port":3790,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:3790\",\"user-agent\":\"python-httpx/0.28.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/swt","summary":"","payload_hex":"474554202f73777420485454502f312e310d0a486f73743a20<HONEYPOT>3a333739300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a20707974686f6e2d68747470782f302e32382e310d0a0d0a","method":"GET","user_agent":"python-httpx/0.28.1","ja3":"","session":"b3b071c8-5f37-4968-9dc3-20280f4d2477","seq":1,"duration_ms":100,"bytes_in":149,"bytes_out":79},{"timestamp":"2026-10-13T21:40:32","port":3790,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:3790\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/e59a3d1780cb","summary":"","payload_hex":"474554202f65353961336431373830636220485454502f312e310d0a486f73743a20<HONEYPOT>3a333739300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"bbcab78e-f4bf-4104-8b50-82d3407071db","seq":1,"duration_ms":100,"bytes_in":150,"bytes_out":79},{"timestamp":"2026-10-13T21:40:32","port":3790,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:3790\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/hp-sliver-probe","summary":"","payload_hex":"474554202f68702d736c697665722d70726f626520485454502f312e310d0a486f73743a20<HONEYPOT>3a333739300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"6fde9dc7-f5ef-4339-8ec0-0a3c5cf66c50","seq":1,"duration_ms":101,"bytes_in":153,"bytes_out":79},{"timestamp":"2026-10-13T21:40:32","port":3790,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:3790\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/global/favicon.png","summary":"","payload_hex":"474554202f676c6f62616c2f66617669636f6e2e706e6720485454502f312e310d0a486f73743a20<HONEYPOT>3a333739300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"7ef6d901-4996-4849-b5b0-19fb4cc7ec06","seq":1,"duration_ms":100,"bytes_in":156,"bytes_out":79},{"timestamp":"2026-10-13T21:40:32","port":3790,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:3790\",\"user-agent\":\"python-httpx/0.28.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/b7e42a19c3f8","summary":"","payload_hex":"474554202f62376534326131396333663820485454502f312e310d0a486f73743a20<HONEYPOT>3a333739300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a20707974686f6e2d68747470782f302e32382e310d0a0d0a","method":"GET","user_agent":"python-httpx/0.28.1","ja3":"","session":"dcad6fdb-0661-43f2-becc-052649338057","seq":1,"duration_ms":100,"bytes_in":158,"bytes_out":79},{"timestamp":"2026-10-13T21:40:32","port":3790,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:3790\",\"user-agent\":\"python-httpx/0.28.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/slt","summary":"","payload_hex":"474554202f736c7420485454502f312e310d0a486f73743a20<HONEYPOT>3a333739300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a20707974686f6e2d68747470782f302e32382e310d0a0d0a","method":"GET","user_agent":"python-httpx/0.28.1","ja3":"","session":"7d8c57bf-235e-42e7-a023-8f59f0897952","seq":1,"duration_ms":100,"bytes_in":149,"bytes_out":79},{"timestamp":"2026-10-13T21:40:23","port":3790,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010\u0000\u0000","payload_hex":"100000","method":"","user_agent":"","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"597122e7-611c-4314-a7cf-693e0e4a7248","seq":1,"duration_ms":104,"bytes_in":3,"bytes_out":14},{"timestamp":"2026-10-13T21:40:23","port":3790,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"{���x�������p�@���x��","payload_hex":"7b88888878878888d0f4e9e8708b40888887788887","method":"","user_agent":"","ja3":"","session":"87b18528-6771-4295-9a34-57490d9e9614","seq":1,"duration_ms":100,"bytes_in":21,"bytes_out":14},{"timestamp":"2026-10-13T21:40:23","port":3790,"proto":"tcp","app_proto":"","app_protocol":"http","host":"h","headers":"{\"connection\":\"Upgrade\",\"host\":\"h\",\"sec-websocket-key\":\"8GoKgsbFxiajqM2Ehgv9vw==\",\"sec-websocket-version\":\"13\",\"upgrade\":\"websocket\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20680d0a557067726164653a20776562736f636b65740d0a436f6e6e656374696f6e3a20557067726164650d0a5365632d576562536f636b65742d4b65793a2038476f4b677362467869616a714d32456867763976773d3d0d0a5365632d576562536f636b65742d56657273696f6e3a2031330d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"458f8c94-91e3-4185-b4f4-01127187ac7f","seq":1,"duration_ms":100,"bytes_in":140,"bytes_out":79},{"timestamp":"2026-10-13T21:40:22","port":3790,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"{���x������G�����;��?","payload_hex":"7b88888878878888d0f491479882f887883bf8883f","method":"","user_agent":"","ja3":"","session":"2ff2beb2-a781-4fb3-baec-816e173ca018","seq":1,"duration_ms":100,"bytes_in":21,"bytes_out":14}],"http_methods":[{"method":"GET","count":276}],"distinct_ports_total":20,"top_paths":[{"path":"/","count":108,"ports":20},{"path":"/global/favicon.png","count":21,"ports":20},{"path":"/slt","count":21,"ports":20},{"path":"/hp-sliver-probe","count":21,"ports":20},{"path":"/favicon.ico","count":21,"ports":20},{"path":"/b7e42a19c3f8","count":21,"ports":20},{"path":"/swt","count":21,"ports":20},{"path":"/e59a3d1780cb","count":21,"ports":20},{"path":"/4752d85775f9","count":1,"ports":1},{"path":"/207f7e9e14f4","count":1,"ports":1},{"path":"/78bfaaf7cb8a","count":1,"ports":1},{"path":"/49d9313a7c7d","count":1,"ports":1},{"path":"/758fb169749d","count":1,"ports":1},{"path":"/c99b5afde1c6","count":1,"ports":1},{"path":"/e31f0d9d3e54","count":1,"ports":1}],"distinct_paths_total":29,"top_snis":[],"top_hosts":[{"value":"h","count":42},{"value":"127.0.0.1","count":42}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"<HONEYPOT>:3790","notable":false},{"name":"User-Agent","value":"python-httpx/0.28.1","notable":false}],"distinct_sets":2,"events_with_headers":7},"tags":[]}