{"ip":"141.98.11.8","data_as_of":"2026-10-23T03:14:52+00:00","observed":true,"total_events":23,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["23 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,720 bytes sent","bytes_sent":2720,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-12T00:43:33","last_seen":"2026-10-20T23:29:00","events_24h":0,"events_7d":13,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"LT","country_name":"Lithuania","region":"Vilnius","city":"Vilnius","lat":54.6876,"lon":25.2806,"asn":209605,"org":"UAB Host Baltic"},"source_domain":"srv-141-98-11-8.serveroffer.net","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":8081,"proto":"tcp","label":"","count":13},{"port":80,"proto":"tcp","label":"HTTP","count":10}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["b11cun040_00040013_608dab68"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"b11cun040_00040013_608dab68":4346},"akin_families":{},"user_agents":["Mozilla/5.0"],"timeline":[{"date":"2026-10-12","count":10},{"date":"2026-10-20","count":13}],"recent_events":[{"timestamp":"2026-10-20T23:29:00","port":8081,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8081\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/bak/","summary":"","payload_hex":"474554202f62616b2f20485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a383038310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"6a7bcb36-eb56-4bf7-8c14-47e7a90ac648","seq":1,"duration_ms":100,"bytes_in":118,"bytes_out":76},{"timestamp":"2026-10-20T23:29:00","port":8081,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8081\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/logs/","summary":"","payload_hex":"474554202f6c6f67732f20485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a383038310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"d29a890c-193f-4fb8-b25e-803096530bb0","seq":1,"duration_ms":100,"bytes_in":119,"bytes_out":76},{"timestamp":"2026-10-20T23:28:59","port":8081,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8081\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/log/","summary":"","payload_hex":"474554202f6c6f672f20485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a383038310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"880251c8-d53d-47c9-9a00-050aed34297b","seq":1,"duration_ms":100,"bytes_in":118,"bytes_out":76},{"timestamp":"2026-10-20T23:28:59","port":8081,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8081\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/web/","summary":"","payload_hex":"474554202f7765622f20485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a383038310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"285f6021-5ab0-49d2-bd5d-a67ea915252d","seq":1,"duration_ms":100,"bytes_in":118,"bytes_out":76},{"timestamp":"2026-10-20T23:28:58","port":8081,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8081\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/bkp/","summary":"","payload_hex":"474554202f626b702f20485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a383038310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"43e55fdb-9482-40d4-9660-0ac7b02026c0","seq":1,"duration_ms":100,"bytes_in":118,"bytes_out":76},{"timestamp":"2026-10-20T23:28:58","port":8081,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8081\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/dumps/","summary":"","payload_hex":"474554202f64756d70732f20485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a383038310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"1eacef19-ddea-49c1-bfe8-07ca0138102d","seq":1,"duration_ms":100,"bytes_in":120,"bytes_out":76},{"timestamp":"2026-10-20T23:28:58","port":8081,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8081\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/dump/","summary":"","payload_hex":"474554202f64756d702f20485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a383038310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"40fca847-6a25-48c9-8fea-a83f90feb595","seq":1,"duration_ms":101,"bytes_in":119,"bytes_out":76},{"timestamp":"2026-10-20T23:28:57","port":8081,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8081\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/backup/","summary":"","payload_hex":"474554202f6261636b75702f20485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a383038310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"df8ff968-c6bc-43ea-8e62-0b6e3631b7e0","seq":1,"duration_ms":100,"bytes_in":121,"bytes_out":76},{"timestamp":"2026-10-20T23:28:57","port":8081,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8081\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/backups/","summary":"","payload_hex":"474554202f6261636b7570732f20485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a383038310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"8b969994-07f7-4352-89fa-12fe7ff3273a","seq":1,"duration_ms":100,"bytes_in":122,"bytes_out":76},{"timestamp":"2026-10-20T23:28:57","port":8081,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8081\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/admin/","summary":"","payload_hex":"474554202f61646d696e2f20485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a383038310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"d7ef3452-8bf0-48ca-a0a6-bef6a40793d8","seq":1,"duration_ms":100,"bytes_in":120,"bytes_out":76}],"http_methods":[{"method":"GET","count":23}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":2,"ports":2},{"path":"/bkp/","count":2,"ports":2},{"path":"/admin/","count":2,"ports":2},{"path":"/log/","count":2,"ports":2},{"path":"/logs/","count":2,"ports":2},{"path":"/web/","count":2,"ports":2},{"path":"/files/","count":2,"ports":2},{"path":"/www/","count":2,"ports":2},{"path":"/backups/","count":2,"ports":2},{"path":"/bak/","count":1,"ports":1},{"path":"/dump/","count":1,"ports":1},{"path":"/app/","count":1,"ports":1},{"path":"/backup/","count":1,"ports":1},{"path":"/dumps/","count":1,"ports":1}],"distinct_paths_total":14,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"identity","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:8081","notable":false},{"name":"User-Agent","value":"Mozilla/5.0","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[]}