{"ip":"138.68.73.85","total_events":7,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["7 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,325 bytes sent","bytes_sent":1325,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-19T12:24:34","last_seen":"2026-09-30T19:33:28","events_24h":2,"events_7d":4,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":"portscanner-fra1-03.prod.cyberresilience.io","known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":8089,"proto":"tcp","label":"Splunk","count":1},{"port":80,"proto":"tcp","label":"HTTP","count":1},{"port":443,"proto":"tcp","label":"HTTPS","count":1},{"port":53,"proto":"tcp","label":"DNS","count":1},{"port":5060,"proto":"tcp","label":"SIP","count":1},{"port":21,"proto":"tcp","label":"FTP","count":1},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_f50d94e863eb"],"tls_client_hello":"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","tls_ja3":["725543c78edf669194c11dc7a039b56e"],"http_akin":["b11cun060_0006001e_5399dcc7"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_f50d94e863eb":2741,"b11cun060_0006001e_5399dcc7":30},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0"],"timeline":[{"date":"2026-09-19","count":2},{"date":"2026-09-21","count":1},{"date":"2026-09-27","count":2},{"date":"2026-09-30","count":2}],"recent_events":[{"timestamp":"2026-09-30T19:33:28","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","ja3":"","session":"71803c01-7a05-499b-b4a4-0bb9ba631ad6","seq":1,"duration_ms":100,"bytes_in":212,"bytes_out":77},{"timestamp":"2026-09-30T09:27:18","port":5060,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","ja3":"","session":"35e4bab8-816d-4aea-91d7-94bb57907057","seq":1,"duration_ms":101,"bytes_in":213,"bytes_out":77},{"timestamp":"2026-09-27T19:26:14","port":53,"proto":"tcp","app_proto":"","app_protocol":"dns","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000/|$\u0000 \u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0001\u000fcyberresilience\u0002io\u0000\u0000\u0001\u0000\u0001\u0000\u0000)\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"002f7c24002000010000000000010f6379626572726573696c69656e636502696f00000100010000291000000000000000","method":"","user_agent":"","ja3":"","session":"d21b5934-1f68-439e-b5de-3a6de62f8587","seq":1,"duration_ms":100,"bytes_in":49,"bytes_out":12,"enriched":{"digest":"5aad29ae89ca93ed","strings":["cyberresilience"]}},{"timestamp":"2026-09-27T09:33:01","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","ja3":"725543c78edf669194c11dc7a039b56e","session":"708cf206-f7f9-48e8-8942-0124824dedb8","seq":1,"duration_ms":100,"bytes_in":213,"bytes_out":77},{"timestamp":"2026-09-21T23:54:01","port":21,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","ja3":"","session":"c3e6316c-50e0-4b55-9b26-14ab56372baa","seq":1,"duration_ms":100,"bytes_in":214,"bytes_out":34},{"timestamp":"2026-09-19T17:00:27","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","ja3":"","session":"47e16d5d-a72b-40b1-869f-a4fcc78deb1b","seq":1,"duration_ms":100,"bytes_in":212,"bytes_out":77},{"timestamp":"2026-09-19T12:24:34","port":8089,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","ja3":"725543c78edf669194c11dc7a039b56e","session":"344c02a1-553c-4352-aca3-5e2ec67e9a01","seq":1,"duration_ms":100,"bytes_in":212,"bytes_out":77}],"http_methods":[{"method":"GET","count":6}],"distinct_ports_total":7,"top_paths":[{"path":"/","count":6,"ports":6}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Charset","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Charset","value":"UTF-8","notable":false},{"name":"Accept-Encoding","value":"UTF-8","notable":false},{"name":"Accept-Language","value":"*","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","notable":false}],"distinct_sets":1,"events_with_headers":6},"tags":[],"data_as_of":"2026-09-30T19:47:34.118711+00:00"}