{"ip":"178.128.251.47","total_events":7,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["7 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,120 bytes sent","bytes_sent":1120,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-16T12:52:33","last_seen":"2026-09-30T00:06:36","events_24h":1,"events_7d":4,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"North Holland","city":"Amsterdam","lat":52.352,"lon":4.9392,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":"portscanner-ams3-02.prod.cyberresilience.io","known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":2},{"port":25,"proto":"tcp","label":"SMTP","count":1},{"port":8089,"proto":"tcp","label":"Splunk","count":1},{"port":80,"proto":"tcp","label":"HTTP","count":1},{"port":2000,"proto":"tcp","label":"","count":1},{"port":53,"proto":"tcp","label":"DNS","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_f50d94e863eb"],"tls_client_hello":"16030105d2010005ce0303da5a4a76eb06d40e98336fd7b98b4ca0fb1c676b69434d302f11a3372558df68207c4151d860178ca416d9143db1eb00736fd996fe0436aa2e1d49323049c9661f001ac02bc02fc02cc030cca9cca8c009c013c00ac0141301130213030100056b000b00020100ff010001000017000000120000000500050100000000000a0010000e11ec11eb11ed001d001700180019000d001c001a090409050906080404030807080508060401050106010503060300320020001e090409050906080404030807080508060401050106010503060302010203002b00050403040303003304ea04e811ec04c0d85c6d887608d2a7a43279638588a585aaacc228a059e40f602b3bac27b25ff4928d99467199c71010567530bfa9094141469baf30ab3931b6e10386060193cbb859a76508659029af52b7b5112233c798b26346804733dac229d4417e8ab685589545721841a8eabd6d896f3c325e19b86459d8635b711e113cc20c6bab291aba2ed2a128e11b9aa2763910c0dd71b4e1a5b0f3a3ae3e381c142981cb4105976296d210314661481415a46a0b35956caafaf59a62c8c4977c1bcefba3e14ac8c78c2e7e932c605a91ee7a1bb326174e193b20f720b6143d6c79aff7826667f9bfb8f63a99a9890432a7cc56c67073bfa4a3cda9140348a34528878efc4368ab50115079a3a7cbac93fa0e3864838d67aad8e6570b2242962309751824365b46c073cad5e77f2c3b111e831dc0c681ca743390fbba0ba9539b925a4f31b63b3935488c81a7088cc5dc9791b381853682ce113b85d44cc66cb84e0232c5ecb2eea1821aea85296acfb2e2b10fdc3942752c5915be202a1c04f1c04c249d22c800c63101eff0125f7aaef24358ac452a5532559ee2677fe3b85bfc2d6f9797d5d015b6158be17b4c22e750dec97e99264f96373dfb71cc2dc92d07e6c1fbdb01090088b3678d77911de7fa2521267074b57b016521350748ae4b6f642453c9c90dea2750466720371cadfe5272ae631aef56af4574943a944ab658baeed92c657833e69884d597c066b9242a73c09ebaa47f24bc8be069219313b884b1d4052bc9a25139929df0fb391a6236b0258871b8b775794f94371dc58270a18570a2d6b606d28c9ccbc46dd573867bb361014bd6d7c908846c63375764a127e1b749805086676b4c401a77d99b7f288023d851aa7c20454ec52926727d6d280e1488a6797954ef065ad0fa47c5e4a459a27d1875236c196975607a2f9b0341ba22007279ba03b57f2576e2703dfc3a8ce9a094b6a2baada6bce1073616c683bf198c3fc08329c08777237f970175445b30f82a526359a8daa873a049b7fc7072c0b5ce8a780bcba7cbd25cc4a60b0e6cdc5165f42ef4a87dcd68190cd58839f8850dfb6144111f84e1a9ebba0a44970dd894a2c051ca4144007c9866c583bc59a12388fc722fa112e2a3bd24b29ab9a33dc102a2a3823628788cca2428368c411c4b7921f6bdb74b2b6e073dceb0adff787f28052fe1ac8aa756050e648e47391feab99c5dc167a57b91c4b1a9aa96014b8033b123a9e9f7a2421076f614ca726c31ca58bb889b21feca2da202bef3e05d06606cf5eab2421434faf6726215ac5ed7060878c0950c80838b91c9bccd9f01580a53071b675021a95021c48aa1b47b9401178968bc7444666c744e72b8c6a0180e369a2ed0213d077619c96a02093a69e45989ce31304a466e7950bda13cb50ca936161c7000fa7b23607282e21320e0b8a46063c5e96c3febb82a78a1cecc2d11c516d4c89aa061501a6b8e027868a2066c7daa0226c866d51c0c4e022b41e16b31951c8b809231eab94d2c577e8a1e38fc9a67622ce6bc80b6e11325f4a8c00b8ca339cb0d02702f332b7947156e394c55392c9046348737830ac7762db7c6ebd584d746b190b9520f758046973d5a34c0c359d38f47027db12d058ddb03ebd3dffc0179ad30c34b9fdd838fb41460e7d999a81df43d683b91a44d5296430f6f55ee1e2a9a2f407e0513389732ad58ba50001d002099a81df43d683b91a44d5296430f6f55ee1e2a9a2f407e0513389732ad58ba50","tls_ja3":["725543c78edf669194c11dc7a039b56e"],"http_akin":["b11cun060_0006001e_5399dcc7"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_f50d94e863eb":2741,"b11cun060_0006001e_5399dcc7":30},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0"],"timeline":[{"date":"2026-09-16","count":1},{"date":"2026-09-17","count":1},{"date":"2026-09-23","count":1},{"date":"2026-09-26","count":1},{"date":"2026-09-27","count":1},{"date":"2026-09-28","count":1},{"date":"2026-09-30","count":1}],"recent_events":[{"timestamp":"2026-09-30T00:06:36","port":25,"proto":"tcp","app_proto":"","app_protocol":"smtp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"EHLO\r\n","payload_hex":"45484c4f0d0a","method":"","user_agent":"","ja3":"","session":"5a20e9ee-3837-4ced-bdf0-2b8adb1714aa","seq":1,"duration_ms":101,"bytes_in":6,"bytes_out":40,"enriched":{"digest":"87f781591201aca6","label":"SMTP","strings":["EHLO"]}},{"timestamp":"2026-09-28T17:06:09","port":8089,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","ja3":"725543c78edf669194c11dc7a039b56e","session":"212b4810-656e-486c-a87b-696758c61f75","seq":1,"duration_ms":100,"bytes_in":214,"bytes_out":79},{"timestamp":"2026-09-27T22:00:20","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","ja3":"725543c78edf669194c11dc7a039b56e","session":"2e71a238-5bb0-4edb-bc38-ff67222079c9","seq":1,"duration_ms":100,"bytes_in":213,"bytes_out":79},{"timestamp":"2026-09-26T21:51:42","port":2000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","ja3":"","session":"6466f26d-7c38-43a9-b190-158b3d870727","seq":1,"duration_ms":100,"bytes_in":214,"bytes_out":79},{"timestamp":"2026-09-23T19:33:28","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","ja3":"","session":"3bcfe4ab-2d51-46ae-bde1-44eb8cbf20f9","seq":1,"duration_ms":100,"bytes_in":212,"bytes_out":79},{"timestamp":"2026-09-17T11:15:42","port":53,"proto":"tcp","app_proto":"","app_protocol":"dns","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000/|$\u0000 \u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0001\u000fcyberresilience\u0002io\u0000\u0000\u0001\u0000\u0001\u0000\u0000)\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"002f7c24002000010000000000010f6379626572726573696c69656e636502696f00000100010000291000000000000000","method":"","user_agent":"","ja3":"","session":"d2318caa-d809-48bd-8954-084b2321f1a6","seq":1,"duration_ms":100,"bytes_in":49,"bytes_out":14,"enriched":{"digest":"5aad29ae89ca93ed","strings":["cyberresilience"]}},{"timestamp":"2026-09-16T12:52:33","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","ja3":"725543c78edf669194c11dc7a039b56e","session":"38989ec6-db71-45e9-a944-7de33de69ccb","seq":1,"duration_ms":100,"bytes_in":212,"bytes_out":79}],"http_methods":[{"method":"GET","count":5}],"distinct_ports_total":6,"top_paths":[{"path":"/","count":5,"ports":4}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Charset","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Charset","value":"UTF-8","notable":false},{"name":"Accept-Encoding","value":"UTF-8","notable":false},{"name":"Accept-Language","value":"*","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","notable":false}],"distinct_sets":1,"events_with_headers":5},"tags":[],"data_as_of":"2026-09-30T19:47:37.489083+00:00"}