{"ip":"172.86.114.38","total_events":27,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["27 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"496 bytes sent","bytes_sent":496,"session_seconds":7,"persistent":false}},"first_seen":"2026-04-13T12:11:18","last_seen":"2026-09-11T08:37:11","events_24h":9,"events_7d":9,"geo":{"country_code":"US","country_name":"United States","region":"Texas","city":"Dallas","lat":32.7212,"lon":-96.6765,"asn":14956,"org":"RouterHosting LLC"},"source_domain":"38.114.86.172.static.cloudzy.com","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":25565,"proto":"tcp","label":"Minecraft","count":27}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-12","count":2},{"date":"2026-08-11","count":6},{"date":"2026-09-11","count":9}],"recent_events":[{"timestamp":"2026-09-11T08:37:11","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013\u0000/\r<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"13002f0d<HONEYPOT>63dd010100","method":"","user_agent":"","ja3":"","session":"865b4614-6b53-468f-8b7d-a0f97719123f","seq":1,"duration_ms":101,"bytes_in":22,"bytes_out":13,"enriched":{"digest":"a1742bbe7ffa52ed","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-11T08:37:09","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013\u0000/\r<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"13002f0d<HONEYPOT>63dd010100","method":"","user_agent":"","ja3":"","session":"60cbb274-8899-434a-b7bb-f0ea6ae19591","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":13,"enriched":{"digest":"a1742bbe7ffa52ed","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-11T08:37:06","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013\u0000/\r<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"13002f0d<HONEYPOT>63dd010100","method":"","user_agent":"","ja3":"","session":"1de78c6a-cdb0-4dea-9d20-bab57f2de7a1","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":13,"enriched":{"digest":"a1742bbe7ffa52ed","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-11T03:59:49","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013\u0000/\r<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"13002f0d<HONEYPOT>63dd010100","method":"","user_agent":"","ja3":"","session":"d0a50f93-3cea-45c2-8848-c0318d39d20b","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":13,"enriched":{"digest":"a1742bbe7ffa52ed","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-11T03:59:47","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013\u0000/\r<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"13002f0d<HONEYPOT>63dd010100","method":"","user_agent":"","ja3":"","session":"d268c444-c01f-4b96-b320-69d8b18588f3","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":13,"enriched":{"digest":"a1742bbe7ffa52ed","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-11T03:59:44","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013\u0000/\r<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"13002f0d<HONEYPOT>63dd010100","method":"","user_agent":"","ja3":"","session":"bcf9da13-8dd6-47cd-ac9f-3898c7532c0f","seq":1,"duration_ms":101,"bytes_in":22,"bytes_out":13,"enriched":{"digest":"a1742bbe7ffa52ed","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-11T00:22:46","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013\u0000/\r<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"13002f0d<HONEYPOT>63dd010100","method":"","user_agent":"","ja3":"","session":"9b902510-f724-48f0-9715-b5ce42ef1d25","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":13,"enriched":{"digest":"a1742bbe7ffa52ed","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-11T00:22:43","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013\u0000/\r<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"13002f0d<HONEYPOT>63dd010100","method":"","user_agent":"","ja3":"","session":"c07a5e0b-e388-4a21-a5a7-9165a94f36e7","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":13,"enriched":{"digest":"a1742bbe7ffa52ed","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-11T00:22:41","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013\u0000/\r<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"13002f0d<HONEYPOT>63dd010100","method":"","user_agent":"","ja3":"","session":"6733c01e-33e9-4b91-8680-83bfe171111c","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":13,"enriched":{"digest":"a1742bbe7ffa52ed","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-08-11T12:38:19","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013\u0000/\r<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"13002f0d<HONEYPOT>63dd010100","method":"","user_agent":"","ja3":"","session":"7d4647ad-8125-48ce-ab69-3b04f9bd0a70","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":13,"enriched":{"digest":"a1742bbe7ffa52ed","strings":["<HONEYPOT>c"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T09:52:42.826975+00:00"}