{"ip":"157.245.223.223","total_events":10,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["10 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,237 bytes sent","bytes_sent":2237,"session_seconds":1,"persistent":false}},"first_seen":"2026-09-24T01:28:56","last_seen":"2026-09-24T01:29:40","events_24h":10,"events_7d":10,"geo":{"country_code":"US","country_name":"United States","region":"New Jersey","city":"Clifton","lat":40.8364,"lon":-74.1403,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":2},{"port":80,"proto":"tcp","label":"HTTP","count":2},{"port":9000,"proto":"tcp","label":"Web-alt","count":2},{"port":443,"proto":"tcp","label":"HTTPS","count":2},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i251000_b78ed14e2fd0_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["416eca07dcaad72dec6f76d1277b3eff"],"http_akin":["a11cun050_0080004e_3ef9a8f6"]},"fingerprint_peers":{"t13i251000_b78ed14e2fd0_ab7e3b40a677":100,"a11cun050_0080004e_3ef9a8f6":38},"akin_families":{},"user_agents":["Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko) Version/5.1.9 Safari/534.59.10","WMS/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36","Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/7.0"],"timeline":[{"date":"2026-09-24","count":10}],"recent_events":[{"timestamp":"2026-09-24T01:29:40","port":80,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3629204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133352e302e302e30205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"4d714a48-87fc-4bd4-8673-9e5ec270b04c","seq":1,"duration_ms":796,"bytes_in":248,"bytes_out":80},{"timestamp":"2026-09-24T01:29:34","port":80,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3629204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133352e302e302e30205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"3ccded20-1915-478e-a920-7f0da8824676","seq":1,"duration_ms":240,"bytes_in":237,"bytes_out":80},{"timestamp":"2026-09-24T01:29:32","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko) Version/5.1.9 Safari/534.59.10\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f365f3829204170706c655765624b69742f3533342e35392e313020284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f352e312e39205361666172692f3533342e35392e31300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko) Version/5.1.9 Safari/534.59.10","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"501309e4-53a1-4bfd-be4f-673344d539e3","seq":1,"duration_ms":685,"bytes_in":251,"bytes_out":80},{"timestamp":"2026-09-24T01:29:27","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko) Version/5.1.9 Safari/534.59.10\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f365f3829204170706c655765624b69742f3533342e35392e313020284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f352e312e39205361666172692f3533342e35392e31300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko) Version/5.1.9 Safari/534.59.10","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"319064a0-cd15-40eb-b055-ab1ef3b1a7e2","seq":1,"duration_ms":130,"bytes_in":236,"bytes_out":80},{"timestamp":"2026-09-24T01:29:17","port":9000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9000\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/7.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f36343b2072763a312e392e362e323029204765636b6f2f2046697265666f782f372e300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/7.0","ja3":"","session":"77bda99b-4134-4dd4-b599-58af1cc1d7f2","seq":1,"duration_ms":100,"bytes_in":196,"bytes_out":80},{"timestamp":"2026-09-24T01:29:14","port":9000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9000\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/7.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f36343b2072763a312e392e362e323029204765636b6f2f2046697265666f782f372e300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/7.0","ja3":"","session":"21d424a6-ab2d-49e8-a97e-8bb4133a86ea","seq":1,"duration_ms":100,"bytes_in":185,"bytes_out":80},{"timestamp":"2026-09-24T01:28:57","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f36343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131372e300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0","ja3":"","session":"95994267-65f4-4103-9bb3-c0ada40a0591","seq":1,"duration_ms":100,"bytes_in":203,"bytes_out":80},{"timestamp":"2026-09-24T01:28:57","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"WMS/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a557365722d4167656e743a20574d532f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3229204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37392e302e333934352e313330205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"WMS/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36","ja3":"","session":"478c1d90-6b62-42d8-92b1-aa7f7c76b355","seq":1,"duration_ms":100,"bytes_in":250,"bytes_out":80},{"timestamp":"2026-09-24T01:28:56","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f36343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131372e300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0","ja3":"","session":"5325be4f-af7e-4415-bcf7-b35b09258e83","seq":1,"duration_ms":100,"bytes_in":192,"bytes_out":80},{"timestamp":"2026-09-24T01:28:56","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"WMS/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a557365722d4167656e743a20574d532f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3229204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37392e302e333934352e313330205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"WMS/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36","ja3":"","session":"cc8ba8c0-1605-4546-9418-87dd84a2d5a8","seq":1,"duration_ms":100,"bytes_in":239,"bytes_out":80}],"http_methods":[{"method":"GET","count":10}],"distinct_ports_total":5,"top_paths":[{"path":"/","count":5,"ports":5},{"path":"/favicon.ico","count":5,"ports":5}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Charset","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Charset","value":"utf-8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:80","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-24T13:04:54.586605+00:00"}