{"ip":"159.89.27.23","total_events":2,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"1 exploit-path probe(s)","confidence":"medium","network_type":"CDN","why":["1 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"610 bytes sent","bytes_sent":610,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-24T08:44:01","last_seen":"2026-09-24T08:44:01","events_24h":0,"events_7d":2,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":"ierakstikraukski.cipsi.lv","known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":1},{"port":443,"proto":"tcp","label":"HTTPS","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_f50d94e863eb"],"tls_client_hello":"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","tls_ja3":["725543c78edf669194c11dc7a039b56e"],"http_akin":["b11cun050_0004001d_e6fe1ac3"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_f50d94e863eb":2740,"b11cun050_0004001d_e6fe1ac3":40},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-24","count":2}],"recent_events":[{"timestamp":"2026-09-24T08:44:01","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-login.php","summary":"","payload_hex":"474554202f77702d6c6f67696e2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132352e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"be6380a7-0d8b-4b65-8ee6-619aa2b5e5a4","seq":1,"duration_ms":100,"bytes_in":305,"bytes_out":77},{"timestamp":"2026-09-24T08:44:01","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-language\":\"en-US,en;q=0.9\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/wp-login.php","summary":"","payload_hex":"474554202f77702d6c6f67696e2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132352e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36","ja3":"","session":"e12fbcd1-82f2-4c07-bb10-b5edbcbb0664","seq":1,"duration_ms":100,"bytes_in":305,"bytes_out":77}],"http_methods":[{"method":"GET","count":2}],"distinct_ports_total":2,"top_paths":[{"path":"/wp-login.php","count":2,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Language","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":2},"tags":[],"data_as_of":"2026-09-30T16:17:51.548006+00:00"}