{"ip":"157.245.82.127","data_as_of":"2026-10-24T10:07:31+00:00","observed":true,"total_events":35,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"18+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 18 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,295 bytes sent","bytes_sent":2295,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-11T14:17:20","last_seen":"2026-10-11T14:17:35","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"US","country_name":"United States","region":"New Jersey","city":"North Bergen","lat":40.7964,"lon":-74.0203,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":5252,"proto":"tcp","label":"","count":6},{"port":5443,"proto":"tcp","label":"","count":5},{"port":5435,"proto":"tcp","label":"","count":5},{"port":6443,"proto":"tcp","label":"k8s API","count":5},{"port":5271,"proto":"tcp","label":"","count":1},{"port":5269,"proto":"tcp","label":"XMPP-S2S","count":1},{"port":6699,"proto":"tcp","label":"","count":1},{"port":6688,"proto":"tcp","label":"","count":1},{"port":5433,"proto":"tcp","label":"","count":1},{"port":7000,"proto":"tcp","label":"","count":1},{"port":6020,"proto":"tcp","label":"","count":1},{"port":5986,"proto":"tcp","label":"","count":1},{"port":7014,"proto":"tcp","label":"","count":1},{"port":5991,"proto":"tcp","label":"","count":1},{"port":5256,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9","t13i1909h2_9dc949149365_97f8aa674fd9"],"tls_client_hello":"16030105cc010005c8030355e8782071486818d638c5cd73235aeae75c718a263027c74c466394130320f320bf4a28b7a5300152ac65960517789e7a4bf0ed2076bbce2e0d3b2657ad42d5420026cca8cca9c02fc030c02bc02cc013c009c014c00a009c009d002f0035c012000a13031301130201000559000500050100000000000a0012001011ec11ed11eb0202001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff010001000010000e000c02683208687474702f312e3100120000002b0009080304030303020301003304ea04e811ec04c06283c67a8103b33c79569c26a1d24fc3b3253161a4ec9960777a106810bb8b065a2bc69019556b3f29a0a0c1b5c3296363a5254f3108f19a9c6da240e5761db34947aff1009b83743c3caacd8cb1f279963738298ef2715eabbc8c805ac97cb5fb06557a553ee868bbf3f1214940c85035192b1baa982c1c2918438bf0738a5596e496a309e0b9ad8a480a917768e31bb3ec27a2759cfd1ba9fab255742bab81912f1e35c3d00c0dbf8b497f124e8274753699c9c5010c856334cc6869194a7e8fc25f53214e8264bc9ad37fd3e5846be5b96d2964427870e6db7199c97ad9c282f8c7b49a674329f16259e79e2db03fa8b572ede1c13775b69f93905de63142b08274525fe63244e0e4171b53a00bbb0500738785c0311d2936bc6527c079ca9a81a5bafa62489b9d0bf650af094396788e882599a8a754abbc14e1896f40934f4f0c292c8c329f7588ebeb34893838243473fd22bff846c938ea3f0d51cd7ec2a5e3aa8092326a01358dc9475e0914527c44201131596ea66723a01095575b3cc9ae8e5747bee732add090c7401c00095df3cc4b2bcc0e99d622d9255de979716d0198d6fba72a7c09c4b5906647000672a3a5406355d863bd545953796c6ce0886281cca4f99d12927299c22702d595d52566bdf03ae00c9eb6a1b9e54925c14641cf4572e806a84434c89b16750ef3b9aaa92d794c700406279d7938669b0109e33a47f071f9dc8f1d7a67b926200dc7974e45a2333b97314b5032dacca68b07fd14a4590965f3891689521cb53bc261da6a24b736d7176da1502931a5aa7daa94061ba1f5d042e079a5541317ab49530a3845b1d0630ef00389a4432df74e2f822a8d20c84fc61e1905969d0b75877bcc0acb372ac6495ce49a8ebc43573b212f0a166177c15b89bb1d397976bc02b01623306a9b8aa2840e65048db24cba3166a33c18ec5008a6a65129ea26f6440c6ee83cbec1a4c1754cdf68ad51766f1b5aa2fcda1ae2986a8c184cc2e1a8b38c26e8d05c6659a19b584a72ab7cac9bbd659b6785ac3f4470be4c17318e54ad4cca2c05d13b63b160427c410a60c14327ba29c852b1955fdbd18168b66111797104030d9c90c3ccc40a24b5339fdbc7a1a2224ef84db842841465bf4a26b5feb3c25ceb9dc0d73b62ea2e83996876460529c1c0914a31b8bb67c7a369814aae3b896f02051aeb902174b38b61d5b6bc97cd2f62878414aba047a46392433d2435da587cb0a827b095959c14030798944859a2fb882a7636cd23fc27a15a466f127c4e6a976cc418e8f51cdd470db0c210da7c6006e6ae69364b93e33e3bf7336c14ae40aa7073029537a793ae5208e5363cb4d1975fb566c0f2c31d8044c6e65520ca3c4c956527f074413546254170dd4957a04671f2487f61766ffc491f5923985b04a3d5d90830a5b4de38649d970ebbc08928822aff1a3b8b867a90fa5708a269aef8cb1ff02b825160e99c71ac1b340fe06f1b2c6f82db61ab7a14770bc437d6c379e11aab53ca84b63fbf147ed39635e8135e74e9cdb67c1ff8a170ddf90486f76ab50024286cc0782c7f1bd88cc14595e6079b73856e1b4803f52006fd2472b11b6f879190591388e7b403e0242e7a6826c6a00eea997220ea2ff2c43c1da9e9b2cc586aa76a5febc960805f52fc6203dd83a76e6be7af5c6cf7e079460c1a0b075436337fbd6f1369567a001d00201de04b3d63ff05ec20fa02b082ced5cd377da0a6dc4804637abcb5d7","tls_ja3":["5af43e5eee17271a9eb37dce2ab407a8","e5c250b292fce278a62137836169e18f"],"http_akin":["b11cun040_00040016_aa48e2c8"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":3244,"b11cun040_00040016_aa48e2c8":5465,"t13i1909h2_9dc949149365_97f8aa674fd9":769},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-11","count":35}],"recent_events":[{"timestamp":"2026-10-11T14:17:35","port":5252,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:5252\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a353235320d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"df531448-eaa6-4163-99cd-e511e8f3f3a2","seq":1,"duration_ms":100,"bytes_in":217,"bytes_out":79},{"timestamp":"2026-10-11T14:17:33","port":6443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:6443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.well-known/robots.txt","summary":"","payload_hex":"474554202f2e77656c6c2d6b6e6f776e2f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a363434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"7979037f-3658-41fd-abe0-38c46f249117","seq":1,"duration_ms":100,"bytes_in":227,"bytes_out":79},{"timestamp":"2026-10-11T14:17:33","port":6443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:6443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a363434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"745b88b9-f7a8-4419-b3c9-f553dfa156e3","seq":1,"duration_ms":101,"bytes_in":217,"bytes_out":79},{"timestamp":"2026-10-11T14:17:33","port":5252,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:5252\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353235320d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"a466e100-ac61-4358-b848-dbade55b8cef","seq":1,"duration_ms":100,"bytes_in":216,"bytes_out":79},{"timestamp":"2026-10-11T14:17:32","port":5252,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:5252\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.well-known/security.txt","summary":"","payload_hex":"474554202f2e77656c6c2d6b6e6f776e2f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a353235320d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"e2ab2a00-6275-4448-a4ae-403609bf57af","seq":1,"duration_ms":100,"bytes_in":229,"bytes_out":79},{"timestamp":"2026-10-11T14:17:32","port":5252,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:5252\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a353235320d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"29efa95b-fc56-43b5-8727-19e054705a79","seq":1,"duration_ms":101,"bytes_in":215,"bytes_out":79},{"timestamp":"2026-10-11T14:17:30","port":6443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:6443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a363434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"de6ea37c-bdf4-4aed-8c41-4a53f5d95fc0","seq":1,"duration_ms":100,"bytes_in":216,"bytes_out":79},{"timestamp":"2026-10-11T14:17:30","port":5443,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"e5c250b292fce278a62137836169e18f","session":"63a5c760-1505-4c55-b285-a4c43bccfe55","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":7,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]}},{"timestamp":"2026-10-11T14:17:30","port":5443,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nINFO\r\n","payload_hex":"2a310d0a24340d0a494e464f0d0a","method":"","user_agent":"","ja3":"e5c250b292fce278a62137836169e18f","session":"63a5c760-1505-4c55-b285-a4c43bccfe55","seq":2,"duration_ms":222,"bytes_in":28,"bytes_out":12,"enriched":{"digest":"2c31890b53b348f2","label":"Redis (RESP)","strings":["INFO"]}},{"timestamp":"2026-10-11T14:17:30","port":5443,"proto":"tcp","app_proto":"tls","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"*1\r\n$11\r\nNONEXISTENT\r\n","payload_hex":"2a310d0a2431310d0a4e4f4e4558495354454e540d0a","method":"","user_agent":"","ja3":"e5c250b292fce278a62137836169e18f","session":"63a5c760-1505-4c55-b285-a4c43bccfe55","seq":3,"duration_ms":342,"bytes_in":50,"bytes_out":17,"enriched":{"digest":"6a74b11849fd84cf","label":"Redis (RESP)","strings":["NONEXISTENT"]}}],"http_methods":[{"method":"GET","count":9}],"distinct_ports_total":18,"top_paths":[{"path":"/","count":2,"ports":2},{"path":"/favicon.ico","count":2,"ports":2},{"path":"/security.txt","count":2,"ports":2},{"path":"/robots.txt","count":1,"ports":1},{"path":"/.well-known/robots.txt","count":1,"ports":1},{"path":"/.well-known/security.txt","count":1,"ports":1}],"distinct_paths_total":6,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":9}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:5252","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":7},"tags":[]}