{"ip":"185.12.59.116","total_events":11,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["11 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"904 bytes sent","bytes_sent":904,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-28T16:42:59","last_seen":"2026-09-28T19:07:20","events_24h":0,"events_7d":11,"geo":{"country_code":"NO","country_name":"Norway","region":"Oslo","city":"Oslo","lat":59.9133,"lon":10.7389,"asn":50304,"org":"Blix Solutions AS"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as50304","label":"Blix Solutions AS","category":"isp","url":"https://www.peeringdb.com/asn/50304"},"cve_matches":[],"malware":[],"top_ports":[{"port":6969,"proto":"tcp","label":"","count":6},{"port":80,"proto":"tcp","label":"HTTP","count":5}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["a11cun020_00000048_724c10fb"]},"fingerprint_peers":{"a11cun020_00000048_724c10fb":692},"akin_families":{"a11cun020_00000048_724c10fb":{"head":"a11cun020_00000048_724c10fb","shapes":3,"ips":697}},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3"],"timeline":[{"date":"2026-09-28","count":11}],"recent_events":[{"timestamp":"2026-09-28T19:07:20","port":6969,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000\u0001\u0003adb","payload_hex":"0000000103616462","method":"","user_agent":"","ja3":"","session":"1f064613-5d18-4547-81d2-71dcf237afb1","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":13},{"timestamp":"2026-09-28T18:39:28","port":6969,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000\u0001\u0003adb","payload_hex":"0000000103616462","method":"","user_agent":"","ja3":"","session":"2d8bb3a3-1445-41ce-9166-7ee2e6ba4b54","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":13},{"timestamp":"2026-09-28T18:35:14","port":6969,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000\u0001\u0003adb","payload_hex":"0000000103616462","method":"","user_agent":"","ja3":"","session":"af3ad611-0186-47c6-965b-397e1a4af050","seq":1,"duration_ms":101,"bytes_in":8,"bytes_out":13},{"timestamp":"2026-09-28T18:33:29","port":6969,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000\u0001\u0003adb","payload_hex":"0000000103616462","method":"","user_agent":"","ja3":"","session":"36821015-8538-4514-918c-4b25305e6c3f","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":13},{"timestamp":"2026-09-28T18:22:34","port":6969,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000\u0001\u0003adb","payload_hex":"0000000103616462","method":"","user_agent":"","ja3":"","session":"86274525-0112-41b2-be07-0a35bcab899c","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":13},{"timestamp":"2026-09-28T18:19:41","port":6969,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000\u0001\u0003adb","payload_hex":"0000000103616462","method":"","user_agent":"","ja3":"","session":"920055d0-73bf-4e15-bb1b-30a0fab7f081","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":13},{"timestamp":"2026-09-28T17:09:09","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132392e302e302e30205361666172692f3533372e330d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3","ja3":"","session":"431ffd10-3319-4cf3-913b-b013da3d41cf","seq":1,"duration_ms":100,"bytes_in":171,"bytes_out":78},{"timestamp":"2026-09-28T17:04:49","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132392e302e302e30205361666172692f3533372e330d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3","ja3":"","session":"f8c0ed04-5e9f-420c-af4c-3bd10ccd843b","seq":1,"duration_ms":100,"bytes_in":170,"bytes_out":78},{"timestamp":"2026-09-28T17:03:01","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132392e302e302e30205361666172692f3533372e330d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3","ja3":"","session":"cfd65a61-825b-4d39-993f-9f9c3883cee2","seq":1,"duration_ms":100,"bytes_in":172,"bytes_out":78},{"timestamp":"2026-09-28T16:51:55","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132392e302e302e30205361666172692f3533372e330d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3","ja3":"","session":"2129c1c9-2827-4dba-9920-7bb020d866e7","seq":1,"duration_ms":100,"bytes_in":171,"bytes_out":78}],"http_methods":[{"method":"GET","count":5}],"distinct_ports_total":2,"top_paths":[{"path":"/login","count":5,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Host","User-Agent"],"representative":[{"name":"Host","value":"<HONEYPOT>:80","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3","notable":false}],"distinct_sets":1,"events_with_headers":4},"tags":[],"data_as_of":"2026-09-30T04:42:10.461319+00:00"}