{"ip":"135.136.98.233","data_as_of":"2026-10-24T03:19:19+00:00","observed":true,"total_events":10,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"network service provider","why":["10 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"3,506 bytes sent","bytes_sent":3506,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-16T06:10:58","last_seen":"2026-10-16T08:42:01","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"SG","country_name":"Singapore","region":"","city":"Singapore","lat":1.3024,"lon":103.7857,"asn":9009,"org":"M247 Europe SRL"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as9009","label":"M247 Global","category":"isp","url":"https://www.peeringdb.com/asn/9009"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":5601,"proto":"tcp","label":"Kibana","count":10}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i1811h1_85036bcba153_b26ce05bbdd6"],"tls_client_hello":"1603010200010001fc0303cf73207a4d6cda5efa0003b56e107fbdde414359aba2210e62d7f9483668cb7e202f7ddd22205658729b6d19be925b4a45594513673b3f8e56d08ac6c4f647020d0024130213031301c02cc030c02bc02fcca9cca8c024c028c023c027009f009e006b006700ff0100018f000b000403000102000a00160014001d0017001e00190018010001010102010301040010000b000908687474702f312e31001600000017000000310000000d002a0028040305030603080708080809080a080b080408050806040105010601030303010302040205020602002b00050403040303002d00020101003300260024001d0020be34b0182ef6c3a6e326ff8bb8e3320149946e2949acc5f8c33c87b5125fa546001500e7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","tls_ja3":["b885946e72ad51dca6c70abc2f773506"],"http_akin":["b11cuq071_00040817_84631ec5_x4ce9","b11cun061_00040017_e1dbd7f1_x4ce9"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13i1811h1_85036bcba153_b26ce05bbdd6":58,"b11cuq071_00040817_84631ec5_x4ce9":1,"b11cun061_00040017_e1dbd7f1_x4ce9":1},"akin_families":{},"user_agents":["ES-ExposureMonitor/1.0"],"timeline":[{"date":"2026-10-16","count":10}],"recent_events":[{"timestamp":"2026-10-16T08:42:01","port":5601,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"connection\":\"keep-alive\",\"content-length\":\"0\",\"host\":\"<HONEYPOT>:5601\",\"kbn-xsrf\":\"true\",\"user-agent\":\"ES-ExposureMonitor/1.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/api/console/proxy?path=%2F_cat%2Findices%3Fformat%3Djson%26bytes%3Db%26h%3Dindex%2Chealth%2Cstatus%2Cstore.size%2Cdocs.count&method=GET","summary":"","payload_hex":"504f5354202f6170692f636f6e736f6c652f70726f78793f706174683d2532465f636174253246696e6469636573253346666f726d61742533446a736f6e25323662797465732533446225323668253344696e6465782532436865616c746825324373746174757325324373746f72652e73697a65253243646f63732e636f756e74266d6574686f643d47455420485454502f312e310d0a486f73743a20<HONEYPOT>3a353630310d0a557365722d4167656e743a2045532d4578706f737572654d6f6e69746f722f312e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062722c207a7374640d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a6b626e2d787372663a20747275650d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"POST","user_agent":"ES-ExposureMonitor/1.0","ja3":"b885946e72ad51dca6c70abc2f773506","session":"bd3fac89-8585-4bc3-acbe-a07d1171e8e5","seq":2,"duration_ms":352,"bytes_in":515,"bytes_out":158},{"timestamp":"2026-10-16T08:42:01","port":5601,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5601\",\"kbn-xsrf\":\"true\",\"user-agent\":\"ES-ExposureMonitor/1.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/api/status","summary":"","payload_hex":"474554202f6170692f73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>3a353630310d0a557365722d4167656e743a2045532d4578706f737572654d6f6e69746f722f312e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062722c207a7374640d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a6b626e2d787372663a20747275650d0a0d0a","method":"GET","user_agent":"ES-ExposureMonitor/1.0","ja3":"b885946e72ad51dca6c70abc2f773506","session":"bd3fac89-8585-4bc3-acbe-a07d1171e8e5","seq":1,"duration_ms":103,"bytes_in":185,"bytes_out":79},{"timestamp":"2026-10-16T07:48:42","port":5601,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"connection\":\"keep-alive\",\"content-length\":\"0\",\"host\":\"<HONEYPOT>:5601\",\"kbn-xsrf\":\"true\",\"user-agent\":\"ES-ExposureMonitor/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/console/proxy?path=%2F_cat%2Findices%3Fformat%3Djson%26bytes%3Db%26h%3Dindex%2Chealth%2Cstatus%2Cstore.size%2Cdocs.count&method=GET","summary":"","payload_hex":"504f5354202f6170692f636f6e736f6c652f70726f78793f706174683d2532465f636174253246696e6469636573253346666f726d61742533446a736f6e25323662797465732533446225323668253344696e6465782532436865616c746825324373746174757325324373746f72652e73697a65253243646f63732e636f756e74266d6574686f643d47455420485454502f312e310d0a486f73743a20<HONEYPOT>3a353630310d0a557365722d4167656e743a2045532d4578706f737572654d6f6e69746f722f312e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062722c207a7374640d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a6b626e2d787372663a20747275650d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"POST","user_agent":"ES-ExposureMonitor/1.0","ja3":"","session":"e58cf7eb-d0a7-42a1-a30c-911c255552d8","seq":2,"duration_ms":415,"bytes_in":515,"bytes_out":158},{"timestamp":"2026-10-16T07:48:42","port":5601,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5601\",\"kbn-xsrf\":\"true\",\"user-agent\":\"ES-ExposureMonitor/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/status","summary":"","payload_hex":"474554202f6170692f73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>3a353630310d0a557365722d4167656e743a2045532d4578706f737572654d6f6e69746f722f312e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062722c207a7374640d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a6b626e2d787372663a20747275650d0a0d0a","method":"GET","user_agent":"ES-ExposureMonitor/1.0","ja3":"","session":"e58cf7eb-d0a7-42a1-a30c-911c255552d8","seq":1,"duration_ms":101,"bytes_in":185,"bytes_out":79},{"timestamp":"2026-10-16T07:33:24","port":5601,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"connection\":\"keep-alive\",\"content-length\":\"0\",\"host\":\"<HONEYPOT>:5601\",\"kbn-xsrf\":\"true\",\"user-agent\":\"ES-ExposureMonitor/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/console/proxy?path=%2F_cat%2Findices%3Fformat%3Djson%26bytes%3Db%26h%3Dindex%2Chealth%2Cstatus%2Cstore.size%2Cdocs.count&method=GET","summary":"","payload_hex":"504f5354202f6170692f636f6e736f6c652f70726f78793f706174683d2532465f636174253246696e6469636573253346666f726d61742533446a736f6e25323662797465732533446225323668253344696e6465782532436865616c746825324373746174757325324373746f72652e73697a65253243646f63732e636f756e74266d6574686f643d47455420485454502f312e310d0a486f73743a20<HONEYPOT>3a353630310d0a557365722d4167656e743a2045532d4578706f737572654d6f6e69746f722f312e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062722c207a7374640d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a6b626e2d787372663a20747275650d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"POST","user_agent":"ES-ExposureMonitor/1.0","ja3":"","session":"be82caba-09d9-46e8-8669-920783532141","seq":2,"duration_ms":412,"bytes_in":515,"bytes_out":158},{"timestamp":"2026-10-16T07:33:24","port":5601,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5601\",\"kbn-xsrf\":\"true\",\"user-agent\":\"ES-ExposureMonitor/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/status","summary":"","payload_hex":"474554202f6170692f73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>3a353630310d0a557365722d4167656e743a2045532d4578706f737572654d6f6e69746f722f312e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062722c207a7374640d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a6b626e2d787372663a20747275650d0a0d0a","method":"GET","user_agent":"ES-ExposureMonitor/1.0","ja3":"","session":"be82caba-09d9-46e8-8669-920783532141","seq":1,"duration_ms":100,"bytes_in":185,"bytes_out":79},{"timestamp":"2026-10-16T06:17:58","port":5601,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"connection\":\"keep-alive\",\"content-length\":\"0\",\"host\":\"<HONEYPOT>:5601\",\"kbn-xsrf\":\"true\",\"user-agent\":\"ES-ExposureMonitor/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/console/proxy?path=%2F_cat%2Findices%3Fformat%3Djson%26bytes%3Db%26h%3Dindex%2Chealth%2Cstatus%2Cstore.size%2Cdocs.count&method=GET","summary":"","payload_hex":"504f5354202f6170692f636f6e736f6c652f70726f78793f706174683d2532465f636174253246696e6469636573253346666f726d61742533446a736f6e25323662797465732533446225323668253344696e6465782532436865616c746825324373746174757325324373746f72652e73697a65253243646f63732e636f756e74266d6574686f643d47455420485454502f312e310d0a486f73743a20<HONEYPOT>3a353630310d0a557365722d4167656e743a2045532d4578706f737572654d6f6e69746f722f312e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062722c207a7374640d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a6b626e2d787372663a20747275650d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"POST","user_agent":"ES-ExposureMonitor/1.0","ja3":"","session":"fa0875f6-a882-42e5-a3eb-8fae2989035b","seq":2,"duration_ms":370,"bytes_in":517,"bytes_out":158},{"timestamp":"2026-10-16T06:17:58","port":5601,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5601\",\"kbn-xsrf\":\"true\",\"user-agent\":\"ES-ExposureMonitor/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/status","summary":"","payload_hex":"474554202f6170692f73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>3a353630310d0a557365722d4167656e743a2045532d4578706f737572654d6f6e69746f722f312e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062722c207a7374640d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a6b626e2d787372663a20747275650d0a0d0a","method":"GET","user_agent":"ES-ExposureMonitor/1.0","ja3":"","session":"fa0875f6-a882-42e5-a3eb-8fae2989035b","seq":1,"duration_ms":100,"bytes_in":186,"bytes_out":79},{"timestamp":"2026-10-16T06:10:59","port":5601,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"connection\":\"keep-alive\",\"content-length\":\"0\",\"host\":\"<HONEYPOT>:5601\",\"kbn-xsrf\":\"true\",\"user-agent\":\"ES-ExposureMonitor/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/console/proxy?path=%2F_cat%2Findices%3Fformat%3Djson%26bytes%3Db%26h%3Dindex%2Chealth%2Cstatus%2Cstore.size%2Cdocs.count&method=GET","summary":"","payload_hex":"504f5354202f6170692f636f6e736f6c652f70726f78793f706174683d2532465f636174253246696e6469636573253346666f726d61742533446a736f6e25323662797465732533446225323668253344696e6465782532436865616c746825324373746174757325324373746f72652e73697a65253243646f63732e636f756e74266d6574686f643d47455420485454502f312e310d0a486f73743a20<HONEYPOT>3a353630310d0a557365722d4167656e743a2045532d4578706f737572654d6f6e69746f722f312e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062722c207a7374640d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a6b626e2d787372663a20747275650d0a436f6e74656e742d4c656e6774683a20300d0a0d0a","method":"POST","user_agent":"ES-ExposureMonitor/1.0","ja3":"","session":"d353011b-25ef-4647-8b13-04d990701f56","seq":2,"duration_ms":370,"bytes_in":517,"bytes_out":158},{"timestamp":"2026-10-16T06:10:58","port":5601,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5601\",\"kbn-xsrf\":\"true\",\"user-agent\":\"ES-ExposureMonitor/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/status","summary":"","payload_hex":"474554202f6170692f73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>3a353630310d0a557365722d4167656e743a2045532d4578706f737572654d6f6e69746f722f312e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062722c207a7374640d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a6b626e2d787372663a20747275650d0a0d0a","method":"GET","user_agent":"ES-ExposureMonitor/1.0","ja3":"","session":"d353011b-25ef-4647-8b13-04d990701f56","seq":1,"duration_ms":100,"bytes_in":186,"bytes_out":79}],"http_methods":[{"method":"GET","count":5},{"method":"POST","count":5}],"distinct_ports_total":1,"top_paths":[{"path":"/api/status","count":5,"ports":1},{"path":"/api/console/proxy?path=%2F_cat%2Findices%3Fformat%3Djson%26bytes%3Db%26h%3Dindex%2Chealth%2Cstatus%2Cstore.size%2Cdocs.count&method=GET","count":5,"ports":1}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"http/1.1","count":2}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Content-Length","Host","Kbn-Xsrf","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate, br, zstd","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Content-Length","value":"0","notable":false},{"name":"Host","value":"<HONEYPOT>:5601","notable":false},{"name":"Kbn-Xsrf","value":"true","notable":false},{"name":"User-Agent","value":"ES-ExposureMonitor/1.0","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[]}