{"ip":"157.254.75.50","total_events":23,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"11+ ports swept","confidence":"medium","network_type":"nsp","why":["No exploit payloads observed.","Swept 11 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"3,227 bytes sent","bytes_sent":3227,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-19T07:55:13","last_seen":"2026-09-21T16:19:56","events_24h":0,"events_7d":23,"geo":{"country_code":"US","country_name":"United States","region":"New York","city":"New York","lat":40.7126,"lon":-74.0066,"asn":9009,"org":"M247 Europe SRL"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as9009","label":"M247 Global","category":"isp","url":"https://www.peeringdb.com/asn/9009"},"cve_matches":[],"malware":[],"top_ports":[{"port":8822,"proto":"tcp","label":"","count":4},{"port":30444,"proto":"tcp","label":"","count":3},{"port":2406,"proto":"tcp","label":"","count":2},{"port":3050,"proto":"tcp","label":"","count":2},{"port":50100,"proto":"tcp","label":"Cassandra","count":2},{"port":30443,"proto":"tcp","label":"","count":2},{"port":19200,"proto":"tcp","label":"","count":2},{"port":880,"proto":"tcp","label":"","count":2},{"port":1220,"proto":"tcp","label":"","count":2},{"port":8436,"proto":"tcp","label":"","count":1},{"port":2002,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i1714h1_5b57614c22b0_5c2c66f702b0","t13i2013h1_a09f3c656075_14788d8d241b","t13i1514h1_8daaf6152771_de4a06bb82e3","t13i1515h1_8daaf6152771_d8a2da3f94cd"],"tls_client_hello":"","tls_ja3":["01cbc710f8ab7f8ce70efef42f1036c9","6c7f93cfba4f8e99679bc46b120d4f3a","b592adaa596bb72a5c1ccdbecae52e3f","5a527c775ff4ae29b4f0c77b113f9625","a4a7efb11da858ab9c34dc7fbb241bcb"],"http_akin":[]},"fingerprint_peers":{"t13i2013h1_a09f3c656075_14788d8d241b":2,"t13i1514h1_8daaf6152771_de4a06bb82e3":2,"t13i1515h1_8daaf6152771_d8a2da3f94cd":3,"t13i1714h1_5b57614c22b0_5c2c66f702b0":3},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"],"timeline":[{"date":"2026-09-19","count":6},{"date":"2026-09-21","count":17}],"recent_events":[{"timestamp":"2026-09-21T16:19:56","port":50100,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:50100\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a35303130300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"5ce4d48bdd22be5b59c51957363173da","session":"404213e9-7553-4d34-a9e8-b8b33feea02c","seq":1,"duration_ms":423,"bytes_in":141,"bytes_out":78},{"timestamp":"2026-09-21T16:19:53","port":50100,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:50100\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a35303130300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"5a527c775ff4ae29b4f0c77b113f9625","session":"6452aae1-8871-4e1d-993f-897134e516db","seq":1,"duration_ms":100,"bytes_in":141,"bytes_out":78},{"timestamp":"2026-09-21T16:17:32","port":2406,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:2406\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323430360d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"4f277ec575c3c58b28adaff7175099f2","session":"09f92409-f634-4f2c-a708-3b32b602dc51","seq":1,"duration_ms":101,"bytes_in":140,"bytes_out":78},{"timestamp":"2026-09-21T16:17:26","port":2406,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:2406\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323430360d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"b592adaa596bb72a5c1ccdbecae52e3f","session":"6069f074-5ae2-4ac1-ab35-65933dc67ffb","seq":1,"duration_ms":101,"bytes_in":140,"bytes_out":78},{"timestamp":"2026-09-21T15:59:52","port":2002,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:2002\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323030320d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"ed443cea22a9889e870c2b1bd9f6ab09","session":"03f7b218-fbbd-43a7-904e-c63c2395de0b","seq":1,"duration_ms":100,"bytes_in":140,"bytes_out":78},{"timestamp":"2026-09-21T15:57:34","port":880,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:880\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3838300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"9e4063b892a34682bb29e51ff3245490","session":"c8919a03-6cb5-4b4c-b047-3a30eddde02c","seq":1,"duration_ms":101,"bytes_in":139,"bytes_out":78},{"timestamp":"2026-09-21T15:57:34","port":19200,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:19200\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31393230300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"122cd3411ffd0407ac57f09a6550bf81","session":"3751632f-8abd-467e-8c3b-919c599e1a11","seq":1,"duration_ms":101,"bytes_in":141,"bytes_out":78},{"timestamp":"2026-09-21T15:57:34","port":880,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:880\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3838300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"a4a7efb11da858ab9c34dc7fbb241bcb","session":"c19baa21-4239-4691-a768-3ec5b39dcbeb","seq":1,"duration_ms":100,"bytes_in":139,"bytes_out":78},{"timestamp":"2026-09-21T15:57:34","port":19200,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:19200\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31393230300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"3bf2fdbe6c84eb1ba10305f5d2bd6a4f","session":"88fdf6a5-5a79-459b-9b96-63fdd1af92e0","seq":1,"duration_ms":101,"bytes_in":141,"bytes_out":78},{"timestamp":"2026-09-21T15:29:58","port":3050,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3050\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333035300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"a4a7efb11da858ab9c34dc7fbb241bcb","session":"9f281c99-88cb-4b3c-86c4-b8a256eddd3e","seq":1,"duration_ms":100,"bytes_in":140,"bytes_out":78}],"http_methods":[{"method":"GET","count":23}],"distinct_ports_total":11,"top_paths":[{"path":"/","count":23,"ports":11}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"http/1.1","count":23}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:50100","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-23T16:15:34.621329+00:00"}