{"ip":"170.64.209.118","total_events":1004,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["1004 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."]},"first_seen":"2026-03-04T10:07:57","last_seen":"2026-07-08T13:06:46","events_24h":0,"events_7d":0,"geo":{"country_code":"AU","country_name":"Australia","region":"New South Wales","city":"Sydney","lat":-33.8978,"lon":151.1899,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":554,"proto":"tcp","label":"","count":1004}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-06-11","count":251},{"date":"2026-06-25","count":251},{"date":"2026-07-08","count":251}],"recent_events":[{"timestamp":"2026-07-08T13:06:46","port":554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:554/video4.sdp RTSP/1.0\r\nCSeq: 251\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a3535342f766964656f342e73647020525453502f312e300d0a435365713a203235310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","community_id":"1:ToSaRe3vTh+GdSOcPl+bI6Xm/DU=","ja3":"","session":"d4818439-3a08-43ab-9e4a-c827baa3a66c","seq":251,"duration_ms":74629,"bytes_in":30080,"bytes_out":3514,"enriched":{"digest":"860c80f4bab94f2d","strings":["DESCRIBE rtsp://<HONEYPOT>:554/video4.sdp RTSP/1.0","CSeq: 251","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"domains":["video4.sdp"]}}},{"timestamp":"2026-07-08T13:06:46","port":554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:554/video3.sdp RTSP/1.0\r\nCSeq: 250\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a3535342f766964656f332e73647020525453502f312e300d0a435365713a203235300d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","community_id":"1:ToSaRe3vTh+GdSOcPl+bI6Xm/DU=","ja3":"","session":"d4818439-3a08-43ab-9e4a-c827baa3a66c","seq":250,"duration_ms":74331,"bytes_in":29963,"bytes_out":3500,"enriched":{"digest":"67ed9756c8cfa408","strings":["DESCRIBE rtsp://<HONEYPOT>:554/video3.sdp RTSP/1.0","CSeq: 250","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"domains":["video3.sdp"]}}},{"timestamp":"2026-07-08T13:06:46","port":554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:554/video2.sdp RTSP/1.0\r\nCSeq: 249\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a3535342f766964656f322e73647020525453502f312e300d0a435365713a203234390d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","community_id":"1:ToSaRe3vTh+GdSOcPl+bI6Xm/DU=","ja3":"","session":"d4818439-3a08-43ab-9e4a-c827baa3a66c","seq":249,"duration_ms":74033,"bytes_in":29846,"bytes_out":3486,"enriched":{"digest":"b6736a127010c809","strings":["DESCRIBE rtsp://<HONEYPOT>:554/video2.sdp RTSP/1.0","CSeq: 249","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"domains":["video2.sdp"]}}},{"timestamp":"2026-07-08T13:06:45","port":554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:554/4/h264/preview RTSP/1.0\r\nCSeq: 248\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a3535342f342f683236342f7072657669657720525453502f312e300d0a435365713a203234380d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","community_id":"1:ToSaRe3vTh+GdSOcPl+bI6Xm/DU=","ja3":"","session":"d4818439-3a08-43ab-9e4a-c827baa3a66c","seq":248,"duration_ms":73735,"bytes_in":29729,"bytes_out":3472,"enriched":{"digest":"a20fc5f8d2a8d5ca","strings":["DESCRIBE rtsp://<HONEYPOT>:554/4/h264/preview RTSP/1.0","CSeq: 248","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"paths":["/4/h264/preview"]}}},{"timestamp":"2026-07-08T13:06:45","port":554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:554/3/h264/preview RTSP/1.0\r\nCSeq: 247\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a3535342f332f683236342f7072657669657720525453502f312e300d0a435365713a203234370d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","community_id":"1:ToSaRe3vTh+GdSOcPl+bI6Xm/DU=","ja3":"","session":"d4818439-3a08-43ab-9e4a-c827baa3a66c","seq":247,"duration_ms":73437,"bytes_in":29608,"bytes_out":3458,"enriched":{"digest":"a1fe5cb6e60d18ef","strings":["DESCRIBE rtsp://<HONEYPOT>:554/3/h264/preview RTSP/1.0","CSeq: 247","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"paths":["/3/h264/preview"]}}},{"timestamp":"2026-07-08T13:06:45","port":554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:554/2/h264/preview RTSP/1.0\r\nCSeq: 246\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a3535342f322f683236342f7072657669657720525453502f312e300d0a435365713a203234360d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","community_id":"1:ToSaRe3vTh+GdSOcPl+bI6Xm/DU=","ja3":"","session":"d4818439-3a08-43ab-9e4a-c827baa3a66c","seq":246,"duration_ms":73139,"bytes_in":29487,"bytes_out":3444,"enriched":{"digest":"8be4188e68b5d951","strings":["DESCRIBE rtsp://<HONEYPOT>:554/2/h264/preview RTSP/1.0","CSeq: 246","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"paths":["/2/h264/preview"]}}},{"timestamp":"2026-07-08T13:06:44","port":554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:554/1/h264/preview RTSP/1.0\r\nCSeq: 245\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a3535342f312f683236342f7072657669657720525453502f312e300d0a435365713a203234350d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","community_id":"1:ToSaRe3vTh+GdSOcPl+bI6Xm/DU=","ja3":"","session":"d4818439-3a08-43ab-9e4a-c827baa3a66c","seq":245,"duration_ms":72841,"bytes_in":29366,"bytes_out":3430,"enriched":{"digest":"ad1dc04d0a8e82f0","strings":["DESCRIBE rtsp://<HONEYPOT>:554/1/h264/preview RTSP/1.0","CSeq: 245","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"paths":["/1/h264/preview"]}}},{"timestamp":"2026-07-08T13:06:44","port":554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:554/Streaming/Channels/4/Preview RTSP/1.0\r\nCSeq: 244\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a3535342f53747265616d696e672f4368616e6e656c732f342f5072657669657720525453502f312e300d0a435365713a203234340d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","community_id":"1:ToSaRe3vTh+GdSOcPl+bI6Xm/DU=","ja3":"","session":"d4818439-3a08-43ab-9e4a-c827baa3a66c","seq":244,"duration_ms":72543,"bytes_in":29245,"bytes_out":3416,"enriched":{"digest":"4772ca37dadcb727","strings":["DESCRIBE rtsp://<HONEYPOT>:554/Streaming/Channels/4/Preview RTSP/1.0","CSeq: 244","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"paths":["/Streaming/Channels/4/Preview"]}}},{"timestamp":"2026-07-08T13:06:44","port":554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:554/Streaming/Channels/3/Preview RTSP/1.0\r\nCSeq: 243\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a3535342f53747265616d696e672f4368616e6e656c732f332f5072657669657720525453502f312e300d0a435365713a203234330d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","community_id":"1:ToSaRe3vTh+GdSOcPl+bI6Xm/DU=","ja3":"","session":"d4818439-3a08-43ab-9e4a-c827baa3a66c","seq":243,"duration_ms":72245,"bytes_in":29110,"bytes_out":3402,"enriched":{"digest":"09b45d4f4b3db88b","strings":["DESCRIBE rtsp://<HONEYPOT>:554/Streaming/Channels/3/Preview RTSP/1.0","CSeq: 243","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"paths":["/Streaming/Channels/3/Preview"]}}},{"timestamp":"2026-07-08T13:06:43","port":554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:554/Streaming/Channels/2/Preview RTSP/1.0\r\nCSeq: 242\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a3535342f53747265616d696e672f4368616e6e656c732f322f5072657669657720525453502f312e300d0a435365713a203234320d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","community_id":"1:ToSaRe3vTh+GdSOcPl+bI6Xm/DU=","ja3":"","session":"d4818439-3a08-43ab-9e4a-c827baa3a66c","seq":242,"duration_ms":71947,"bytes_in":28975,"bytes_out":3388,"enriched":{"digest":"cd3ff31da20c880b","strings":["DESCRIBE rtsp://<HONEYPOT>:554/Streaming/Channels/2/Preview RTSP/1.0","CSeq: 242","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"paths":["/Streaming/Channels/2/Preview"]}}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-27T14:47:35.689545+00:00"}