{"ip":"134.209.168.206","total_events":10,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["10 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,313 bytes sent","bytes_sent":2313,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-24T01:11:30","last_seen":"2026-09-24T01:11:42","events_24h":10,"events_7d":10,"geo":{"country_code":"US","country_name":"United States","region":"New Jersey","city":"Clifton","lat":40.8364,"lon":-74.1403,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":2},{"port":80,"proto":"tcp","label":"HTTP","count":2},{"port":9000,"proto":"tcp","label":"Web-alt","count":2},{"port":443,"proto":"tcp","label":"HTTPS","count":2},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i251000_b78ed14e2fd0_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["416eca07dcaad72dec6f76d1277b3eff"],"http_akin":["a11cun050_0080004e_3ef9a8f6"]},"fingerprint_peers":{"t13i251000_b78ed14e2fd0_ab7e3b40a677":102,"a11cun050_0080004e_3ef9a8f6":40},"akin_families":{},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8","Mozilla/5.0 (Windows NT 10.0; Win64; x64; WebView/3.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/18.17763","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/58.0.1","Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.2","Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-24","count":10}],"recent_events":[{"timestamp":"2026-09-24T01:11:42","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.2\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e757820693638363b2072763a312e392e362e323029204765636b6f2f2046697265666f782f332e362e320d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.2","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"54938251-28a4-4ee9-a761-bb67348eb305","seq":1,"duration_ms":161,"bytes_in":196,"bytes_out":80},{"timestamp":"2026-09-24T01:11:41","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.2\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e757820693638363b2072763a312e392e362e323029204765636b6f2f2046697265666f782f332e362e320d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.2","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"f42eb726-49c6-4bcd-afd6-440e79dfdd97","seq":1,"duration_ms":105,"bytes_in":181,"bytes_out":80},{"timestamp":"2026-09-24T01:11:38","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; WebView/3.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/18.17763\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b20576562566965772f332e3029204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f36342e302e333238322e313430205361666172692f3533372e333620456467652f31382e31373736330d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; WebView/3.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/18.17763","ja3":"","session":"5aadd354-97dc-4f4c-85cd-af0c4df1d576","seq":1,"duration_ms":100,"bytes_in":276,"bytes_out":80},{"timestamp":"2026-09-24T01:11:37","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; WebView/3.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/18.17763\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b20576562566965772f332e3029204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f36342e302e333238322e313430205361666172692f3533372e333620456467652f31382e31373736330d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; WebView/3.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/18.17763","ja3":"","session":"ac9e5e61-e2f6-4411-ad44-64126983bc5c","seq":1,"duration_ms":100,"bytes_in":265,"bytes_out":80},{"timestamp":"2026-09-24T01:11:31","port":80,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31305f3529204170706c655765624b69742f3630332e332e3820284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31302e312e32205361666172692f3630332e332e380d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"79127472-0425-437a-b554-093cbc922e4c","seq":1,"duration_ms":140,"bytes_in":249,"bytes_out":80},{"timestamp":"2026-09-24T01:11:30","port":9000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9000\",\"user-agent\":\"Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284665646f72613b204c696e7578206936383629204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133302e302e302e30205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36","ja3":"","session":"a2e8cc7a-2677-4440-8aa5-43e9e31f0ff9","seq":1,"duration_ms":100,"bytes_in":225,"bytes_out":80},{"timestamp":"2026-09-24T01:11:30","port":80,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31305f3529204170706c655765624b69742f3630332e332e3820284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31302e312e32205361666172692f3630332e332e380d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"2ee29fe0-49f6-4f0d-99d6-874dbd9ac08a","seq":1,"duration_ms":102,"bytes_in":238,"bytes_out":80},{"timestamp":"2026-09-24T01:11:30","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/58.0.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f292046697265666f782f35382e302e310d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/58.0.1","ja3":"","session":"8d452cbf-9d6a-4269-ad6e-6f2bcdfe166e","seq":1,"duration_ms":101,"bytes_in":218,"bytes_out":80},{"timestamp":"2026-09-24T01:11:30","port":9000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9000\",\"user-agent\":\"Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284665646f72613b204c696e7578206936383629204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133302e302e302e30205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36","ja3":"","session":"3c9f4c14-cb3c-47e1-9957-1ca79d672eb1","seq":1,"duration_ms":100,"bytes_in":236,"bytes_out":80},{"timestamp":"2026-09-24T01:11:30","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/58.0.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f292046697265666f782f35382e302e310d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/58.0.1","ja3":"","session":"034f952b-59fe-4958-bcbd-17cdcb0d5e7d","seq":1,"duration_ms":100,"bytes_in":229,"bytes_out":80}],"http_methods":[{"method":"GET","count":10}],"distinct_ports_total":5,"top_paths":[{"path":"/","count":5,"ports":5},{"path":"/favicon.ico","count":5,"ports":5}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Charset","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Charset","value":"utf-8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:443","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.2","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-24T13:42:16.153090+00:00"}