{"ip":"152.32.141.98","total_events":116,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"39+ ports swept","confidence":"medium","network_type":null},"first_seen":"2026-05-12T17:03:36","last_seen":"2026-06-12T08:45:05","events_24h":6,"events_7d":26,"geo":{"country_code":"NG","country_name":"Nigeria","region":"Lagos","city":"Lagos","lat":6.4474,"lon":3.3903,"asn":135377,"org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"top_ports":[{"port":1145,"proto":"tcp","label":"","count":3},{"port":4683,"proto":"tcp","label":"","count":3},{"port":2816,"proto":"tcp","label":"","count":3},{"port":10522,"proto":"tcp","label":"","count":3},{"port":4119,"proto":"tcp","label":"","count":3},{"port":765,"proto":"tcp","label":"","count":3},{"port":1727,"proto":"tcp","label":"","count":3},{"port":1216,"proto":"tcp","label":"","count":3},{"port":1788,"proto":"tcp","label":"","count":3},{"port":2615,"proto":"tcp","label":"","count":3},{"port":51234,"proto":"tcp","label":"","count":3},{"port":1295,"proto":"tcp","label":"","count":3},{"port":2793,"proto":"tcp","label":"","count":3},{"port":3304,"proto":"tcp","label":"","count":3},{"port":2661,"proto":"tcp","label":"","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i190900_9dc949149365_e7c285222651"],"tls_ja3":["9460af62ae0af667130bf0d36514f084"],"ja4h":["ge11nn0300_72be10f4ec6f"]},"fingerprint_peers":{"t13i190900_9dc949149365_e7c285222651":2584,"ge11nn0300_72be10f4ec6f":248},"user_agents":["curl/7.29.0"],"timeline":[{"date":"2026-05-12","count":6},{"date":"2026-05-14","count":9},{"date":"2026-05-15","count":6},{"date":"2026-05-16","count":3},{"date":"2026-05-17","count":6},{"date":"2026-05-18","count":6},{"date":"2026-05-20","count":9},{"date":"2026-05-23","count":6},{"date":"2026-05-25","count":3},{"date":"2026-05-26","count":3},{"date":"2026-05-29","count":3},{"date":"2026-05-30","count":3},{"date":"2026-05-31","count":12},{"date":"2026-06-02","count":3},{"date":"2026-06-03","count":6},{"date":"2026-06-05","count":3},{"date":"2026-06-06","count":3},{"date":"2026-06-07","count":6},{"date":"2026-06-08","count":6},{"date":"2026-06-09","count":2},{"date":"2026-06-11","count":6},{"date":"2026-06-12","count":6}],"recent_events":[{"timestamp":"2026-06-12T08:45:05","port":1077,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"t3 12.1.2\nAS:2048\nHL:19\n\n","payload_hex":"74332031322e312e320a41533a323034380a484c3a31390a0a","method":"","user_agent":"","community_id":"1:bVc2FdLltcijxuVLUpgnjlh90WU=","ja3":"9460af62ae0af667130bf0d36514f084","session":"36404c2d-ced0-4b74-9e41-9d60171f2ca1","seq":1,"duration_ms":114,"bytes_in":25,"bytes_out":13,"enriched":{"digest":"6a386c43d019ddd0","strings":["t3 12.1.2","AS:2048","HL:19"]}},{"timestamp":"2026-06-12T08:45:02","port":1077,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"curl/7.29.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a557365722d4167656e743a206375726c2f372e32392e300d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/7.29.0","community_id":"1:7bfUCCijLdFbObNaL3ppgtNx3I0=","ja3":"9460af62ae0af667130bf0d36514f084","session":"bb5e6d8d-9565-41ad-bbe0-25596aa3e888","seq":1,"duration_ms":111,"bytes_in":76,"bytes_out":78},{"timestamp":"2026-06-12T08:44:53","port":1077,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"curl/7.29.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a557365722d4167656e743a206375726c2f372e32392e300d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/7.29.0","community_id":"1:1siauGxearusn0ptOZBT+yyENwA=","ja3":"","session":"7114c106-6fca-4113-9607-670638ace7fd","seq":1,"duration_ms":100,"bytes_in":76,"bytes_out":78},{"timestamp":"2026-06-12T08:39:51","port":2793,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"t3 12.1.2\nAS:2048\nHL:19\n\n","payload_hex":"74332031322e312e320a41533a323034380a484c3a31390a0a","method":"","user_agent":"","community_id":"1:BDBoClWJzBgnCOoVAU7LCa/YrfU=","ja3":"9460af62ae0af667130bf0d36514f084","session":"c2d9389d-f459-4e81-b405-b2b1d1619f36","seq":1,"duration_ms":862,"bytes_in":25,"bytes_out":13,"enriched":{"digest":"6a386c43d019ddd0","strings":["t3 12.1.2","AS:2048","HL:19"]}},{"timestamp":"2026-06-12T08:39:47","port":2793,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"curl/7.29.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a557365722d4167656e743a206375726c2f372e32392e300d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/7.29.0","community_id":"1:xxVF2qa2NvtoJH7ZRFhcwDzaHOM=","ja3":"9460af62ae0af667130bf0d36514f084","session":"bb987b7e-9112-4dc3-8e67-68f8f50329ca","seq":1,"duration_ms":106,"bytes_in":76,"bytes_out":78},{"timestamp":"2026-06-12T08:39:37","port":2793,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"curl/7.29.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a557365722d4167656e743a206375726c2f372e32392e300d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/7.29.0","community_id":"1:LNIbMAFDsa7Y283EtKCyZjnI42s=","ja3":"","session":"88260b9c-ce66-4c66-a6b2-1df39bfca35f","seq":1,"duration_ms":100,"bytes_in":76,"bytes_out":78},{"timestamp":"2026-06-11T19:11:59","port":3759,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"t3 12.1.2\nAS:2048\nHL:19\n\n","payload_hex":"74332031322e312e320a41533a323034380a484c3a31390a0a","method":"","user_agent":"","community_id":"1:G/8ukJaePktgZCVUQCIsnO/76q8=","ja3":"9460af62ae0af667130bf0d36514f084","session":"3ae7a73f-a03d-4246-bf48-875f4eb356b9","seq":1,"duration_ms":111,"bytes_in":25,"bytes_out":13,"enriched":{"digest":"6a386c43d019ddd0","strings":["t3 12.1.2","AS:2048","HL:19"]}},{"timestamp":"2026-06-11T19:11:57","port":3759,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"curl/7.29.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a557365722d4167656e743a206375726c2f372e32392e300d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/7.29.0","community_id":"1:sHuhpInsrD1+dGq35tOBGlhzw5o=","ja3":"9460af62ae0af667130bf0d36514f084","session":"a791a637-f362-4bf0-bc2d-2c9800579c8e","seq":1,"duration_ms":687,"bytes_in":78,"bytes_out":78},{"timestamp":"2026-06-11T19:11:19","port":3759,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","community_id":"1:BRxaXKtgmkUTKV9RaH4OvcExLds=","ja3":"","session":"53f47c0a-55b4-4752-ba7c-05b712703cff","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":13},{"timestamp":"2026-06-11T11:25:55","port":10817,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"t3 12.1.2\nAS:2048\nHL:19\n\n","payload_hex":"74332031322e312e320a41533a323034380a484c3a31390a0a","method":"","user_agent":"","community_id":"1:48bQbGTYbfcUYcDX4wgOZmY5ZYg=","ja3":"9460af62ae0af667130bf0d36514f084","session":"99b88957-26b9-49cb-a3f6-8b769f2442f1","seq":1,"duration_ms":119,"bytes_in":25,"bytes_out":13,"enriched":{"digest":"6a386c43d019ddd0","strings":["t3 12.1.2","AS:2048","HL:19"]}}],"http_methods":[{"method":"GET","count":76}],"distinct_ports_total":39,"top_paths":[{"path":"/","count":76,"ports":39}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"curl/7.29.0","notable":false}],"distinct_sets":1,"events_with_headers":5},"tags":[],"data_as_of":"2026-06-13T08:21:19.046814+00:00"}