{"ip":"176.65.148.142","total_events":27,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"network services","why":["27 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."]},"first_seen":"2026-06-21T05:22:20","last_seen":"2026-07-21T08:32:29","events_24h":0,"events_7d":6,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"Limburg","city":"Eygelshoven","lat":50.8897,"lon":6.0563,"asn":51396,"org":"Pfcloud UG (haftungsbeschrankt)"},"source_domain":"176.65.148.142.ptr.pfcloud.network","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":26},{"port":25565,"proto":"tcp","label":"Minecraft","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_ja3":["725543c78edf669194c11dc7a039b56e"],"ja4h":["ge11nn0400_9c3956fad5da"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":5787,"ge11nn0400_9c3956fad5da":1448},"user_agents":["Go-http-client/1.1"],"timeline":[{"date":"2026-06-21","count":2},{"date":"2026-06-22","count":1},{"date":"2026-06-23","count":1},{"date":"2026-06-27","count":4},{"date":"2026-06-28","count":2},{"date":"2026-06-29","count":1},{"date":"2026-06-30","count":2},{"date":"2026-07-01","count":2},{"date":"2026-07-02","count":1},{"date":"2026-07-03","count":1},{"date":"2026-07-06","count":1},{"date":"2026-07-08","count":1},{"date":"2026-07-10","count":1},{"date":"2026-07-11","count":1},{"date":"2026-07-15","count":1},{"date":"2026-07-16","count":2},{"date":"2026-07-20","count":2},{"date":"2026-07-21","count":1}],"recent_events":[{"timestamp":"2026-07-21T08:32:29","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/restgui/js/services/resturi.js","summary":"","payload_hex":"474554202f726573746775692f6a732f73657276696365732f726573747572692e6a7320485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","community_id":"1:168rmOZi890QDoBrK8nbb83+xgE=","ja3":"725543c78edf669194c11dc7a039b56e","session":"070d3304-4302-4a05-9e37-c9f3cbba3b0c","seq":1,"duration_ms":101,"bytes_in":147,"bytes_out":79},{"timestamp":"2026-07-20T23:40:41","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/restgui/js/services/resturi.js","summary":"","payload_hex":"474554202f726573746775692f6a732f73657276696365732f726573747572692e6a7320485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","community_id":"1:zgFS8yM7ACbBuc/PApEHyexcyuc=","ja3":"725543c78edf669194c11dc7a039b56e","session":"3003c416-68e1-450a-afbb-4c9b91bc88a2","seq":1,"duration_ms":100,"bytes_in":146,"bytes_out":79},{"timestamp":"2026-07-20T21:20:51","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/restgui/js/services/resturi.js","summary":"","payload_hex":"474554202f726573746775692f6a732f73657276696365732f726573747572692e6a7320485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","community_id":"1:zW5Kv1dQyi7LEb3BnUEFVe+lVHs=","ja3":"725543c78edf669194c11dc7a039b56e","session":"bc9bcb1e-df5b-41c3-b46e-6854f03ad928","seq":1,"duration_ms":101,"bytes_in":146,"bytes_out":79},{"timestamp":"2026-07-16T07:17:14","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/restgui/js/services/resturi.js","summary":"","payload_hex":"474554202f726573746775692f6a732f73657276696365732f726573747572692e6a7320485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","community_id":"1:DadaIpgQwv1eL1NvDoEiZ8EfCC0=","ja3":"725543c78edf669194c11dc7a039b56e","session":"145865d0-78d8-43e5-b3c3-1349a1fd31f6","seq":1,"duration_ms":100,"bytes_in":146,"bytes_out":79},{"timestamp":"2026-07-16T01:17:16","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/restgui/js/services/resturi.js","summary":"","payload_hex":"474554202f726573746775692f6a732f73657276696365732f726573747572692e6a7320485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","community_id":"1:ZIGufuMGZkVl0uKq8CkG52hL/G0=","ja3":"725543c78edf669194c11dc7a039b56e","session":"047fa0c0-a830-49c6-9444-270efeaeca06","seq":1,"duration_ms":101,"bytes_in":146,"bytes_out":79},{"timestamp":"2026-07-15T22:09:18","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/restgui/js/services/resturi.js","summary":"","payload_hex":"474554202f726573746775692f6a732f73657276696365732f726573747572692e6a7320485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","community_id":"1:6FRa/MXuvbBEOChSJeX+bjhWx8Y=","ja3":"725543c78edf669194c11dc7a039b56e","session":"2a468842-162e-4833-a868-a8c983507c83","seq":1,"duration_ms":104,"bytes_in":147,"bytes_out":79},{"timestamp":"2026-07-11T06:57:28","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/restgui/js/services/resturi.js","summary":"","payload_hex":"474554202f726573746775692f6a732f73657276696365732f726573747572692e6a7320485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","community_id":"1:w0uUB0rXQng2AyV9IOxt6PLH79M=","ja3":"725543c78edf669194c11dc7a039b56e","session":"25658dee-e793-4fda-b881-1bdc64d5d59c","seq":1,"duration_ms":100,"bytes_in":146,"bytes_out":79},{"timestamp":"2026-07-10T21:08:29","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/restgui/js/services/resturi.js","summary":"","payload_hex":"474554202f726573746775692f6a732f73657276696365732f726573747572692e6a7320485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","community_id":"1:BvsjnOBbmdiLvCzFKhQzpKChDX4=","ja3":"725543c78edf669194c11dc7a039b56e","session":"fa42a78f-86e9-4f6a-88ee-744ee71f5e89","seq":1,"duration_ms":100,"bytes_in":147,"bytes_out":79},{"timestamp":"2026-07-08T16:40:37","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/restgui/js/services/resturi.js","summary":"","payload_hex":"474554202f726573746775692f6a732f73657276696365732f726573747572692e6a7320485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","community_id":"1:UEa2Ucko26+uJpM8bfGYbMkGjTQ=","ja3":"725543c78edf669194c11dc7a039b56e","session":"ab0eaba9-4911-4b90-bc79-e0599a95e741","seq":1,"duration_ms":100,"bytes_in":146,"bytes_out":79},{"timestamp":"2026-07-06T09:59:23","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013\u0000�\u0005\f<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"1300fb050c<HONEYPOT>63dd010100","method":"","user_agent":"","community_id":"1:0Uws0ADifmJ0oPrwscjscElUpb4=","ja3":"","session":"48779e26-1925-42f3-8296-b515650405a8","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":14,"enriched":{"digest":"1b6c34b6d2169ea7","strings":["<HONEYPOT>c"]}}],"http_methods":[{"method":"GET","count":26}],"distinct_ports_total":2,"top_paths":[{"path":"/restgui/js/services/resturi.js","count":26,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:443","notable":false},{"name":"User-Agent","value":"Go-http-client/1.1","notable":false}],"distinct_sets":1,"events_with_headers":9},"tags":[],"data_as_of":"2026-07-22T17:14:54.687193+00:00"}