{"ip":"170.64.142.108","total_events":52,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["52 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 6,443 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"6,443 bytes sent","bytes_sent":6443,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-19T06:48:13","last_seen":"2026-09-27T23:56:55","events_24h":0,"events_7d":10,"geo":{"country_code":"AU","country_name":"Australia","region":"New South Wales","city":"Sydney","lat":-33.8978,"lon":151.1899,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":8081,"proto":"tcp","label":"","count":19},{"port":1880,"proto":"tcp","label":"","count":11},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":11},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":3},{"port":8082,"proto":"tcp","label":"","count":3},{"port":9999,"proto":"tcp","label":"","count":2},{"port":9090,"proto":"tcp","label":"Prometheus","count":2},{"port":60001,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_f50d94e863eb"],"tls_client_hello":"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","tls_ja3":["725543c78edf669194c11dc7a039b56e"],"http_akin":["b11cun030_00040012_13ee3d34","b11cun030_00040410_e62b6d85","b11cun040_00040013_608dab68"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_f50d94e863eb":2741,"b11cun030_00040012_13ee3d34":5046,"b11cun030_00040410_e62b6d85":19,"b11cun040_00040013_608dab68":4310},"akin_families":{"b11cun030_00040012_13ee3d34":{"head":"b11cun030_00040012_13ee3d34","shapes":2,"ips":5042}},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64)","Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","Go-http-client/1.1"],"timeline":[{"date":"2026-09-19","count":7},{"date":"2026-09-20","count":12},{"date":"2026-09-21","count":9},{"date":"2026-09-22","count":9},{"date":"2026-09-23","count":5},{"date":"2026-09-25","count":2},{"date":"2026-09-27","count":8}],"recent_events":[{"timestamp":"2026-09-27T23:56:55","port":1880,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1880\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313838300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"504eb59c-3d88-485d-8411-ae200af5c13a","seq":1,"duration_ms":100,"bytes_in":121,"bytes_out":79},{"timestamp":"2026-09-27T23:56:55","port":1880,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1880\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313838300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"725543c78edf669194c11dc7a039b56e","session":"bb12e8e7-e58c-479c-9c42-00716d05d948","seq":1,"duration_ms":100,"bytes_in":121,"bytes_out":79},{"timestamp":"2026-09-27T23:55:23","port":1880,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1880\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313838300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"725543c78edf669194c11dc7a039b56e","session":"57151b29-22fd-416b-89f4-401bd9ae5635","seq":1,"duration_ms":101,"bytes_in":123,"bytes_out":79},{"timestamp":"2026-09-27T23:55:22","port":1880,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1880\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313838300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"983c93e1-7633-4c16-b579-5d4a1b4dd01e","seq":1,"duration_ms":101,"bytes_in":123,"bytes_out":79},{"timestamp":"2026-09-27T23:43:04","port":1880,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1880\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313838300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"725543c78edf669194c11dc7a039b56e","session":"b486188f-bfc3-4f03-be3d-f7e8b3f6a40b","seq":1,"duration_ms":100,"bytes_in":122,"bytes_out":79},{"timestamp":"2026-09-27T23:43:03","port":1880,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1880\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313838300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"b46764ec-63a2-4cc1-a51f-4cb4be63ad8d","seq":1,"duration_ms":100,"bytes_in":122,"bytes_out":79},{"timestamp":"2026-09-27T23:30:47","port":1880,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1880\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313838300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"42d4f7ad-f15d-48c9-affa-a71e348c3b2b","seq":1,"duration_ms":100,"bytes_in":122,"bytes_out":79},{"timestamp":"2026-09-27T23:30:47","port":1880,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1880\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313838300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"725543c78edf669194c11dc7a039b56e","session":"30e28b7f-7f2e-4b9f-bbc1-78d3a9c7d680","seq":1,"duration_ms":100,"bytes_in":122,"bytes_out":79},{"timestamp":"2026-09-25T08:44:04","port":60001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:60001\",\"referer\":\"http://<HONEYPOT>:60001/\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a36303030310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a526566657265723a20687474703a2f2f<HONEYPOT>3a36303030312f0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"","session":"d2051081-2a64-433a-ac68-3940938a4f49","seq":1,"duration_ms":100,"bytes_in":200,"bytes_out":79},{"timestamp":"2026-09-25T07:14:58","port":1880,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1880\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313838300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"146a71a7-5c53-4e3c-8297-c3617235c2d3","seq":1,"duration_ms":100,"bytes_in":122,"bytes_out":79}],"http_methods":[{"method":"GET","count":52}],"distinct_ports_total":8,"top_paths":[{"path":"/login","count":40,"ports":6},{"path":"/","count":12,"ports":2}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:1880","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-30T18:04:33.703382+00:00"}