{"ip":"168.119.35.2","total_events":8,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["8 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"488 bytes sent","bytes_sent":488,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-04T14:55:04","last_seen":"2026-08-14T13:41:04","events_24h":3,"events_7d":5,"geo":{"country_code":"DE","country_name":"Germany","region":"Saxony","city":"Falkenstein","lat":50.4777,"lon":12.3649,"asn":24940,"org":"Hetzner Online GmbH"},"source_domain":"static.2.35.119.168.clients.your-server.de","known_scanners":[],"scanner_tag":{"key":"hetzner","label":"Hetzner","category":"hosting_provider","url":"https://www.hetzner.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":20002,"proto":"tcp","label":"","count":2},{"port":9410,"proto":"tcp","label":"","count":2},{"port":9337,"proto":"tcp","label":"","count":1},{"port":9232,"proto":"tcp","label":"","count":1},{"port":9444,"proto":"tcp","label":"","count":1},{"port":3100,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":["ge11nn0200_e1391afd0c9d"]},"fingerprint_peers":{"ge11nn0200_e1391afd0c9d":56},"user_agents":[],"timeline":[{"date":"2026-08-04","count":3},{"date":"2026-08-10","count":2},{"date":"2026-08-14","count":3}],"recent_events":[{"timestamp":"2026-08-14T13:41:04","port":9337,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9337\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/json","summary":"","payload_hex":"474554202f6a736f6e20485454502f312e310d0a6163636570743a202a2f2a0d0a686f73743a20<HONEYPOT>3a393333370d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"67f09e66-978a-4201-9ef0-14954a8cfc6c","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":77},{"timestamp":"2026-08-14T10:59:11","port":9410,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9410\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/json","summary":"","payload_hex":"474554202f6a736f6e20485454502f312e310d0a6163636570743a202a2f2a0d0a686f73743a20<HONEYPOT>3a393431300d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"35c9505c-1286-4d2d-87ad-0f83aba42061","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":77},{"timestamp":"2026-08-14T10:52:50","port":9410,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9410\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/json","summary":"","payload_hex":"474554202f6a736f6e20485454502f312e310d0a6163636570743a202a2f2a0d0a686f73743a20<HONEYPOT>3a393431300d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"12f90a50-a570-4a12-9679-62887a1fc4de","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":77},{"timestamp":"2026-08-10T09:17:17","port":9232,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9232\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/json","summary":"","payload_hex":"474554202f6a736f6e20485454502f312e310d0a6163636570743a202a2f2a0d0a686f73743a20<HONEYPOT>3a393233320d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"c6ec881b-05f2-4ddb-922f-c5c418b42f32","seq":1,"duration_ms":100,"bytes_in":61,"bytes_out":77},{"timestamp":"2026-08-10T07:25:42","port":9444,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9444\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/json","summary":"","payload_hex":"474554202f6a736f6e20485454502f312e310d0a6163636570743a202a2f2a0d0a686f73743a20<HONEYPOT>3a393434340d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"7bdbf48b-3142-4b64-9af8-909626f6bdfa","seq":1,"duration_ms":100,"bytes_in":62,"bytes_out":77},{"timestamp":"2026-08-04T16:21:48","port":20002,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:20002\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/json","summary":"","payload_hex":"474554202f6a736f6e20485454502f312e310d0a6163636570743a202a2f2a0d0a686f73743a20<HONEYPOT>3a32303030320d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"059234b6-0d92-41c8-87cd-3e4c30193e40","seq":1,"duration_ms":100,"bytes_in":62,"bytes_out":77},{"timestamp":"2026-08-04T16:10:37","port":20002,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:20002\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/json","summary":"","payload_hex":"474554202f6a736f6e20485454502f312e310d0a6163636570743a202a2f2a0d0a686f73743a20<HONEYPOT>3a32303030320d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"9b78f625-821f-4449-9046-0ecca0828b53","seq":1,"duration_ms":100,"bytes_in":63,"bytes_out":77},{"timestamp":"2026-08-04T14:55:04","port":3100,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:3100\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/json","summary":"","payload_hex":"474554202f6a736f6e20485454502f312e310d0a6163636570743a202a2f2a0d0a686f73743a20<HONEYPOT>3a333130300d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"0f3aa0ba-1338-4676-8d59-ab4c8c125d3a","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":77}],"http_methods":[{"method":"GET","count":8}],"distinct_ports_total":6,"top_paths":[{"path":"/json","count":8,"ports":6}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Host"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Host","value":"<HONEYPOT>:9337","notable":false}],"distinct_sets":1,"events_with_headers":8},"tags":[],"data_as_of":"2026-08-15T08:45:48.985865+00:00"}