{"ip":"165.22.87.155","total_events":12,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN"},"first_seen":"2026-05-29T15:17:12","last_seen":"2026-06-01T12:30:02","events_24h":0,"events_7d":12,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"top_ports":[{"port":1180,"proto":"tcp","label":"","count":3},{"port":10801,"proto":"tcp","label":"","count":2},{"port":50000,"proto":"tcp","label":"SAP","count":2},{"port":20000,"proto":"tcp","label":"","count":2},{"port":40000,"proto":"tcp","label":"","count":2},{"port":60000,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"ja4h":["ge11nn0400_88d30a62b7ad"]},"fingerprint_peers":{"ge11nn0400_88d30a62b7ad":5646},"user_agents":["Mozilla/5.0 zgrab/0.x"],"timeline":[{"date":"2026-05-29","count":9},{"date":"2026-06-01","count":3}],"recent_events":[{"timestamp":"2026-06-01T12:30:02","port":1180,"proto":"tcp","app_proto":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","method":"","user_agent":"","enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-06-01T12:29:59","port":10801,"proto":"tcp","app_proto":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","method":"","user_agent":"","enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-06-01T12:29:33","port":10801,"proto":"tcp","app_proto":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","method":"","user_agent":"","enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-05-29T15:17:34","port":50000,"proto":"tcp","app_proto":"","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:50000\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/squid-internal-mgr/cachemgr.cgi","summary":"","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x"},{"timestamp":"2026-05-29T15:17:26","port":20000,"proto":"tcp","app_proto":"","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:20000\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/squid-internal-mgr/cachemgr.cgi","summary":"","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x"},{"timestamp":"2026-05-29T15:17:24","port":60000,"proto":"tcp","app_proto":"","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:60000\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/squid-internal-mgr/cachemgr.cgi","summary":"","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x"},{"timestamp":"2026-05-29T15:17:22","port":40000,"proto":"tcp","app_proto":"","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:40000\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/squid-internal-mgr/cachemgr.cgi","summary":"","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x"},{"timestamp":"2026-05-29T15:17:19","port":20000,"proto":"tcp","app_proto":"","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:20000\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/squid-internal-mgr/cachemgr.cgi","summary":"","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x"},{"timestamp":"2026-05-29T15:17:17","port":1180,"proto":"tcp","app_proto":"","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1180\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/squid-internal-mgr/cachemgr.cgi","summary":"","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x"},{"timestamp":"2026-05-29T15:17:15","port":50000,"proto":"tcp","app_proto":"","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:50000\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/squid-internal-mgr/cachemgr.cgi","summary":"","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x"}],"http_methods":[{"method":"GET","count":9}],"distinct_ports_total":6,"top_paths":[{"path":"/squid-internal-mgr/cachemgr.cgi","count":9,"ports":5}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:50000","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 zgrab/0.x","notable":false}],"distinct_sets":1,"events_with_headers":7},"tags":[],"data_as_of":"2026-06-04T19:28:52.275742+00:00"}