{"ip":"185.126.82.201","total_events":3306,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"hunter","confidence":"high","network_type":"nsp"},"first_seen":"2026-02-19T08:49:21","last_seen":"2026-06-23T12:05:01","events_24h":13,"events_7d":66,"geo":{"country_code":"US","country_name":"United States","region":"New York","city":"New York","lat":40.7126,"lon":-74.0066,"asn":63473,"org":"HostHatch, LLC"},"source_domain":null,"known_scanners":["hunter"],"scanner_tag":{"key":"peeringdb:as63473","label":"HostHatch","category":"isp","url":"https://www.peeringdb.com/asn/63473"},"cve_matches":[{"cve_id":"CVE-2021-28169","title":"Eclipse Jetty ConcatServlet - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/static"}],"top_ports":[{"port":22,"proto":"tcp","label":"SSH","count":14},{"port":1022,"proto":"tcp","label":"","count":8},{"port":18789,"proto":"tcp","label":"","count":7},{"port":9109,"proto":"tcp","label":"","count":7},{"port":14101,"proto":"tcp","label":"","count":7},{"port":1433,"proto":"tcp","label":"MSSQL","count":7},{"port":6467,"proto":"tcp","label":"","count":6},{"port":8014,"proto":"tcp","label":"","count":6},{"port":8027,"proto":"tcp","label":"","count":6},{"port":3306,"proto":"tcp","label":"MySQL","count":6},{"port":52230,"proto":"tcp","label":"","count":6},{"port":10020,"proto":"tcp","label":"","count":6},{"port":5523,"proto":"tcp","label":"","count":6},{"port":9009,"proto":"tcp","label":"","count":6},{"port":2121,"proto":"tcp","label":"","count":6}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9","t13i1515h2_8daaf6152771_02713d6af862","t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_ja3":["f35ddeb0b437ba3a25422e33ce90583b","f3c45656f14e4b6e19a78bbba727aad6","8f791f01c281f864ec6b52329e0a8b3e","6180003581d60b70a4df93d05c0ea209"],"ja4h":["ge11nn09en_ff318d2708e7","ge11nn15en_b231b0024544","ge11nn0400_9c3956fad5da"]},"fingerprint_peers":{"t13i1515h2_8daaf6152771_02713d6af862":65,"t13i131000_f57a46bbacb6_ab7e3b40a677":5559,"t13i190800_9dc949149365_97f8aa674fd9":4282,"ge11nn09en_ff318d2708e7":6,"ge11nn0400_9c3956fad5da":1415,"ge11nn15en_b231b0024544":60},"user_agents":["Go-http-client/1.1","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36"],"timeline":[{"date":"2026-03-26","count":1},{"date":"2026-03-27","count":4},{"date":"2026-03-28","count":14},{"date":"2026-03-29","count":38},{"date":"2026-03-30","count":52},{"date":"2026-03-31","count":46},{"date":"2026-04-01","count":37},{"date":"2026-04-02","count":59},{"date":"2026-04-03","count":75},{"date":"2026-04-04","count":72},{"date":"2026-04-05","count":66},{"date":"2026-04-06","count":75},{"date":"2026-04-07","count":64},{"date":"2026-04-08","count":54},{"date":"2026-04-09","count":33},{"date":"2026-04-10","count":61},{"date":"2026-04-11","count":91},{"date":"2026-04-12","count":104},{"date":"2026-04-13","count":26},{"date":"2026-04-14","count":30},{"date":"2026-04-15","count":11},{"date":"2026-04-16","count":72},{"date":"2026-04-17","count":131},{"date":"2026-04-18","count":138},{"date":"2026-04-19","count":185},{"date":"2026-04-20","count":170},{"date":"2026-04-21","count":130},{"date":"2026-04-22","count":142},{"date":"2026-04-23","count":44},{"date":"2026-04-24","count":6},{"date":"2026-04-25","count":9},{"date":"2026-04-26","count":7},{"date":"2026-04-27","count":6},{"date":"2026-04-28","count":4},{"date":"2026-04-29","count":8},{"date":"2026-04-30","count":6},{"date":"2026-05-01","count":2},{"date":"2026-05-02","count":5},{"date":"2026-05-03","count":5},{"date":"2026-05-04","count":4},{"date":"2026-05-05","count":4},{"date":"2026-05-06","count":11},{"date":"2026-05-07","count":6},{"date":"2026-05-08","count":9},{"date":"2026-05-09","count":4},{"date":"2026-05-10","count":8},{"date":"2026-05-11","count":16},{"date":"2026-05-12","count":4},{"date":"2026-05-13","count":5},{"date":"2026-05-14","count":8},{"date":"2026-05-15","count":5},{"date":"2026-05-16","count":3},{"date":"2026-05-18","count":2},{"date":"2026-05-19","count":7},{"date":"2026-05-20","count":6},{"date":"2026-05-21","count":5},{"date":"2026-05-22","count":4},{"date":"2026-05-23","count":11},{"date":"2026-05-24","count":14},{"date":"2026-05-25","count":13},{"date":"2026-05-26","count":10},{"date":"2026-05-27","count":6},{"date":"2026-05-28","count":7},{"date":"2026-05-29","count":4},{"date":"2026-05-30","count":8},{"date":"2026-05-31","count":6},{"date":"2026-06-01","count":2},{"date":"2026-06-02","count":2},{"date":"2026-06-03","count":23},{"date":"2026-06-04","count":12},{"date":"2026-06-05","count":18},{"date":"2026-06-06","count":14},{"date":"2026-06-07","count":21},{"date":"2026-06-08","count":21},{"date":"2026-06-09","count":9},{"date":"2026-06-10","count":18},{"date":"2026-06-11","count":13},{"date":"2026-06-12","count":7},{"date":"2026-06-13","count":4},{"date":"2026-06-14","count":10},{"date":"2026-06-15","count":12},{"date":"2026-06-16","count":22},{"date":"2026-06-17","count":13},{"date":"2026-06-18","count":9},{"date":"2026-06-19","count":4},{"date":"2026-06-20","count":4},{"date":"2026-06-21","count":7},{"date":"2026-06-22","count":12},{"date":"2026-06-23","count":9}],"recent_events":[{"timestamp":"2026-06-23T12:05:01","port":8119,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"<HONEYPOT>:8119\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","community_id":"1:k7PM5JaTFCM25Ye0Hjydp3UUjKo=","ja3":"ef2ffe544ad0dfd0cbaca4c4238ff5d2","session":"6d30b64e-63d3-4a07-9106-1361f9b804e2","seq":1,"duration_ms":100,"bytes_in":675,"bytes_out":79},{"timestamp":"2026-06-23T09:37:32","port":8999,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"max-age=0\",\"dnt\":\"1\",\"host\":\"<HONEYPOT>:8999\",\"sec-gpc\":\"1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383939390d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f39362e302e343636342e313130205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c696d6167652f61706e672c2a2f2a3b713d302e382c6170706c69636174696f6e2f7369676e65642d65786368616e67653b763d62333b713d302e390d0a4163636570742d4c616e67756167653a20656e3b713d302e390d0a43616368652d436f6e74726f6c3a206d61782d6167653d300d0a446e743a20310d0a5365632d4770633a20310d0a557067726164652d496e7365637572652d52657175657374733a20310d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","community_id":"1:ArmjbrCY6r7ZSWmOYUs7J/uPMR8=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"f3fd00cb-30f4-4333-bc5b-0778280abf1e","seq":1,"duration_ms":100,"bytes_in":460,"bytes_out":79},{"timestamp":"2026-06-23T09:37:31","port":8999,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"max-age=0\",\"dnt\":\"1\",\"host\":\"<HONEYPOT>:8999\",\"sec-gpc\":\"1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","community_id":"1:FEzSJ8WfGly2Q1+glzKYQ89U5mE=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"26455c76-9cac-40cf-9400-b0bcae58d953","seq":1,"duration_ms":101,"bytes_in":449,"bytes_out":79},{"timestamp":"2026-06-23T08:59:40","port":9505,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"max-age=0\",\"dnt\":\"1\",\"host\":\"<HONEYPOT>:9505\",\"sec-gpc\":\"1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","community_id":"1:l5EgNSviJZlOOeC8FmxTBIPCzb4=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"06241787-4236-47ad-b1e9-953306248ac7","seq":1,"duration_ms":101,"bytes_in":460,"bytes_out":79},{"timestamp":"2026-06-23T08:59:38","port":9505,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"max-age=0\",\"dnt\":\"1\",\"host\":\"<HONEYPOT>:9505\",\"sec-gpc\":\"1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","community_id":"1:ghD6dRJ5dHLmpdvMlAuSxebkKac=","ja3":"19e29534fd49dd27d09234e639c4057e","session":"2441f929-4d49-46b8-b463-b6ed4c937d0f","seq":1,"duration_ms":100,"bytes_in":449,"bytes_out":79},{"timestamp":"2026-06-23T08:06:57","port":3443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"<HONEYPOT>:3443\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","community_id":"1:pwdkCRtokp1vPzk+2wKumd01CP8=","ja3":"80fb914de03b6d8bc508468a7626a39b","session":"8a9c009e-b4b6-4a2f-b480-47904d0fcc84","seq":1,"duration_ms":100,"bytes_in":675,"bytes_out":79},{"timestamp":"2026-06-23T07:17:12","port":9595,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"<HONEYPOT>:9595\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","community_id":"1:OLg6SXJNabnNvUVbBB6LdBfeCY0=","ja3":"4bb3a9237540290ce24b6235b472e04b","session":"95385d0f-d336-4bf0-ba13-4cb3a5aff581","seq":1,"duration_ms":100,"bytes_in":664,"bytes_out":79},{"timestamp":"2026-06-23T06:00:04","port":8607,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"<HONEYPOT>:8607\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","community_id":"1:T4gQJ8nUrDgVgamDVyzKDqWuvcI=","ja3":"0d0093dc4f208089d2d202213b004813","session":"887e2ed8-6e70-4ad9-b386-7c5f6a9e5322","seq":1,"duration_ms":100,"bytes_in":664,"bytes_out":79},{"timestamp":"2026-06-23T01:05:19","port":5523,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"<HONEYPOT>:5523\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","community_id":"1:aeZD3p2U+uCxnDwoDHJuBm+/Fvo=","ja3":"9558abf8c80f48ce52fb187c9e234f11","session":"2b746a35-a5ee-46b7-a462-945fb4d5af33","seq":1,"duration_ms":100,"bytes_in":664,"bytes_out":79},{"timestamp":"2026-06-22T20:24:50","port":1723,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"<HONEYPOT>:1723\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","community_id":"1:yj97ggPpyO2CeABtyrANgeHnPoM=","ja3":"7246074ca0762ce7519cd48ac2c04da2","session":"d901bb3d-868b-400e-b33d-5e9e3c6617b3","seq":1,"duration_ms":100,"bytes_in":664,"bytes_out":79}],"http_methods":[{"method":"GET","count":3306}],"distinct_ports_total":1832,"top_paths":[{"path":"/","count":1212,"ports":1103},{"path":"/favicon.ico","count":1195,"ports":1089},{"path":"/tuiliu/group.html","count":99,"ports":99},{"path":"/gogo/list.html","count":89,"ports":89},{"path":"/test/tuiliu/group.html","count":89,"ports":89},{"path":"/static/goindex/group.html","count":87,"ports":87},{"path":"/xmweb/group.html","count":85,"ports":85},{"path":"/group.html","count":83,"ports":83},{"path":"/details/group.html","count":79,"ports":79},{"path":"/list.html","count":77,"ports":77},{"path":"/static/goindex/tuiliu/group.html","count":73,"ports":73},{"path":"/static/analytics.html","count":70,"ports":70},{"path":"/88k4ez/group.html","count":68,"ports":68}],"distinct_paths_total":13,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":1692}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Cache-Control","Host","Pragma","Sec-Ch-Ua","Sec-Ch-Ua-Mobile","Sec-Ch-Ua-Platform","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","Sec-Fetch-User","Upgrade-Insecure-Requests","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en;q=0.9","notable":false},{"name":"Cache-Control","value":"no-cache","notable":false},{"name":"Host","value":"<HONEYPOT>:8119","notable":false},{"name":"Pragma","value":"no-cache","notable":false},{"name":"Sec-Ch-Ua","value":"\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"","notable":false},{"name":"Sec-Ch-Ua-Mobile","value":"?0","notable":false},{"name":"Sec-Ch-Ua-Platform","value":"\"macOS\"","notable":false},{"name":"Sec-Fetch-Dest","value":"document","notable":false},{"name":"Sec-Fetch-Mode","value":"navigate","notable":false},{"name":"Sec-Fetch-Site","value":"none","notable":false},{"name":"Sec-Fetch-User","value":"?1","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[{"tag_id":"CVE-2021-28169","tag_type":"cve","title":"Eclipse Jetty ConcatServlet - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/static","reference_urls":["https://twitter.com/sec715/status/1406787963569065988","https://github.com/eclipse/jetty.project/security/advisories/GHSA-gwcr-j4wh-j3cq","https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E","https://nvd.nist.gov/vuln/detail/CVE-2021-28169","https://lists.apache.org/thread.html/r04a4b4553a23aff26f42635a6ae388c3b162aab30a88d12e59d05168@%3Cjira.kafka.apache.org%3E"]}],"data_as_of":"2026-06-23T15:04:50.574297+00:00"}