{"ip":"185.201.163.209","total_events":85,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"2 exploit-path probe(s)","confidence":"medium","network_type":"nsp","why":["2 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"78,968 bytes sent","bytes_sent":78968,"session_seconds":15,"persistent":false}},"first_seen":"2026-09-21T14:57:42","last_seen":"2026-09-24T07:02:37","events_24h":42,"events_7d":85,"geo":{"country_code":"DE","country_name":"Germany","region":"Bavaria","city":"Nuremberg","lat":49.4527,"lon":11.0783,"asn":42366,"org":"TerraTransit AG"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as42366","label":"TerraTransit","category":"isp","url":"https://www.peeringdb.com/asn/42366"},"cve_matches":[],"malware":[],"top_ports":[{"port":2406,"proto":"tcp","label":"","count":16},{"port":50100,"proto":"tcp","label":"Cassandra","count":15},{"port":2002,"proto":"tcp","label":"","count":12},{"port":8822,"proto":"tcp","label":"","count":8},{"port":19200,"proto":"tcp","label":"","count":7},{"port":8436,"proto":"tcp","label":"","count":6},{"port":5656,"proto":"tcp","label":"","count":6},{"port":30444,"proto":"tcp","label":"","count":6},{"port":1220,"proto":"tcp","label":"","count":6},{"port":30443,"proto":"tcp","label":"","count":2},{"port":880,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i2013h1_a09f3c656075_14788d8d241b","t13i1514h1_8daaf6152771_de4a06bb82e3","t13i1714h1_5b57614c22b0_5c2c66f702b0","t13i1515h1_8daaf6152771_d8a2da3f94cd"],"tls_client_hello":"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","tls_ja3":["b592adaa596bb72a5c1ccdbecae52e3f","5bc362746ed95210bff24b877a920c11","5a527c775ff4ae29b4f0c77b113f9625","a4a7efb11da858ab9c34dc7fbb241bcb"],"http_akin":["a11cun080_0000687c_10e2d77a","a11cun110_001c687c_f6a99d51","a11cun080_0000687c_c2f2b898"]},"fingerprint_peers":{"t13i2013h1_a09f3c656075_14788d8d241b":3,"t13i1514h1_8daaf6152771_de4a06bb82e3":2,"t13i1714h1_5b57614c22b0_5c2c66f702b0":3,"t13i1515h1_8daaf6152771_d8a2da3f94cd":3,"a11cun080_0000687c_10e2d77a":1,"a11cun110_001c687c_f6a99d51":1,"a11cun080_0000687c_c2f2b898":1},"akin_families":{},"user_agents":["Mozilla/5.0 (iPhone; CPU iPhone OS 18_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Mobile/15E148 Safari/604.1","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0","Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0","Mozilla/5.0 (X11; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15","Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Mobile Safari/537.36"],"timeline":[{"date":"2026-09-21","count":43},{"date":"2026-09-23","count":26},{"date":"2026-09-24","count":16}],"recent_events":[{"timestamp":"2026-09-24T07:02:37","port":50100,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip, deflate, br, zstd\",\"accept-language\":\"en-US,en;q=0.5\",\"host\":\"<HONEYPOT>:50100\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:135.0) Gecko/20100101 Firefox/135.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/panel/","summary":"","payload_hex":"474554202f70616e656c2f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:135.0) Gecko/20100101 Firefox/135.0","ja3":"","session":"5ba01924-e4fe-4634-bed8-3bf0d3f55711","seq":6,"duration_ms":13459,"bytes_in":2249,"bytes_out":480},{"timestamp":"2026-09-24T07:02:36","port":50100,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip, deflate, br, zstd\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:50100\",\"sec-ch-ua\":\"\\\"Chromium\\\";v=\\\"133\\\", \\\"Not:A-Brand\\\";v=\\\"24\\\", \\\"Google Chrome\\\";v=\\\"133\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"Windows\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/panel","summary":"","payload_hex":"474554202f70616e656c20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36","ja3":"","session":"5ba01924-e4fe-4634-bed8-3bf0d3f55711","seq":5,"duration_ms":13050,"bytes_in":1926,"bytes_out":400},{"timestamp":"2026-09-24T07:02:29","port":50100,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip, deflate, br, zstd\",\"accept-language\":\"en-US,en;q=0.5\",\"host\":\"<HONEYPOT>:50100\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/admin/login","summary":"","payload_hex":"474554202f61646d696e2f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>3a35303130300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3133362e3029204765636b6f2f32303130303130312046697265666f782f3133362e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062722c207a7374640d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a5365632d46657463682d446573743a20646f63756d656e740d0a5365632d46657463682d4d6f64653a206e617669676174650d0a5365632d46657463682d536974653a206e6f6e650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0","ja3":"","session":"5ba01924-e4fe-4634-bed8-3bf0d3f55711","seq":4,"duration_ms":5900,"bytes_in":1442,"bytes_out":320},{"timestamp":"2026-09-24T07:02:26","port":50100,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip, deflate, br, zstd\",\"accept-language\":\"en-US,en;q=0.5\",\"host\":\"<HONEYPOT>:50100\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/admin/","summary":"","payload_hex":"474554202f61646d696e2f20485454502f312e310d0a486f73743a20<HONEYPOT>3a35303130300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f36343b2072763a3133352e3029204765636b6f2f32303130303130312046697265666f782f3133352e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062722c207a7374640d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a5365632d46657463682d446573743a20646f63756d656e740d0a5365632d46657463682d4d6f64653a206e617669676174650d0a5365632d46657463682d536974653a206e6f6e650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0","ja3":"","session":"5ba01924-e4fe-4634-bed8-3bf0d3f55711","seq":3,"duration_ms":2587,"bytes_in":1114,"bytes_out":240},{"timestamp":"2026-09-24T07:02:24","port":50100,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip, deflate, br, zstd\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:50100\",\"sec-ch-ua\":\"\\\"Chromium\\\";v=\\\"133\\\", \\\"Not:A-Brand\\\";v=\\\"24\\\", \\\"Google Chrome\\\";v=\\\"133\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"Windows\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/admin","summary":"","payload_hex":"474554202f61646d696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36","ja3":"","session":"5ba01924-e4fe-4634-bed8-3bf0d3f55711","seq":2,"duration_ms":799,"bytes_in":801,"bytes_out":160},{"timestamp":"2026-09-24T07:02:23","port":50100,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip, deflate, br, zstd\",\"accept-language\":\"en-US,en;q=0.5\",\"host\":\"<HONEYPOT>:50100\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:135.0) Gecko/20100101 Firefox/135.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a35303130300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3133352e3029204765636b6f2f32303130303130312046697265666f782f3133352e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062722c207a7374640d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a5365632d46657463682d446573743a20646f63756d656e740d0a5365632d46657463682d4d6f64653a206e617669676174650d0a5365632d46657463682d536974653a206e6f6e650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:135.0) Gecko/20100101 Firefox/135.0","ja3":"","session":"5ba01924-e4fe-4634-bed8-3bf0d3f55711","seq":1,"duration_ms":100,"bytes_in":317,"bytes_out":80},{"timestamp":"2026-09-24T04:26:21","port":880,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip, deflate, br, zstd\",\"accept-language\":\"en-US,en;q=0.5\",\"host\":\"<HONEYPOT>:880\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0","ja3":"","session":"2100bf72-1e62-484c-9549-adfb1c005c77","seq":1,"duration_ms":101,"bytes_in":305,"bytes_out":80},{"timestamp":"2026-09-24T04:24:16","port":19200,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip, deflate, br, zstd\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:19200\",\"sec-ch-ua\":\"\\\"Microsoft Edge\\\";v=\\\"135\\\", \\\"Chromium\\\";v=\\\"135\\\", \\\"Not-A.Brand\\\";v=\\\"8\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"Windows\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/cp","summary":"","payload_hex":"474554202f637020485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0","ja3":"5a527c775ff4ae29b4f0c77b113f9625","session":"1e75f67c-5d7c-4393-9aeb-da4a4a898260","seq":1,"duration_ms":100,"bytes_in":495,"bytes_out":80},{"timestamp":"2026-09-24T04:23:05","port":19200,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip, deflate, br, zstd\",\"accept-language\":\"en-US,en;q=0.5\",\"host\":\"<HONEYPOT>:19200\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0","ja3":"4bb0c1053fb1725039991f05bf3a96dc","session":"97c70ea6-51a4-4311-ba96-813e8df2463e","seq":1,"duration_ms":136,"bytes_in":326,"bytes_out":80},{"timestamp":"2026-09-24T04:22:51","port":19200,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip, deflate, br, zstd\",\"accept-language\":\"en-US,en;q=0.5\",\"host\":\"<HONEYPOT>:19200\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/dashboard/","summary":"","payload_hex":"474554202f64617368626f6172642f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0","ja3":"a4a7efb11da858ab9c34dc7fbb241bcb","session":"1e1cf0dd-8068-46ab-bce4-108057344c6d","seq":1,"duration_ms":100,"bytes_in":327,"bytes_out":80}],"http_methods":[{"method":"GET","count":85}],"distinct_ports_total":11,"top_paths":[{"path":"/","count":16,"ports":11},{"path":"/panel/","count":10,"ports":8},{"path":"/admin/login","count":10,"ports":8},{"path":"/admin","count":9,"ports":8},{"path":"/admin/","count":9,"ports":8},{"path":"/panel","count":8,"ports":6},{"path":"/dashboard/","count":4,"ports":4},{"path":"/login","count":3,"ports":3},{"path":"/panel/login","count":3,"ports":2},{"path":"/cpanel","count":2,"ports":2},{"path":"/cp","count":2,"ports":2},{"path":"/panel.php","count":2,"ports":2},{"path":"/api/","count":1,"ports":1},{"path":"/manager","count":1,"ports":1},{"path":"/backend","count":1,"ports":1}],"distinct_paths_total":19,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"http/1.1","count":39}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Accept-Language","Host","Sec-Ch-Ua","Sec-Ch-Ua-Mobile","Sec-Ch-Ua-Platform","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","Upgrade-Insecure-Requests","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip, deflate, br, zstd","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Host","value":"<HONEYPOT>:50100","notable":false},{"name":"Sec-Ch-Ua","value":"\"Chromium\";v=\"133\", \"Not:A-Brand\";v=\"24\", \"Google Chrome\";v=\"133\"","notable":false},{"name":"Sec-Ch-Ua-Mobile","value":"?0","notable":false},{"name":"Sec-Ch-Ua-Platform","value":"\"Windows\"","notable":false},{"name":"Sec-Fetch-Dest","value":"document","notable":false},{"name":"Sec-Fetch-Mode","value":"navigate","notable":false},{"name":"Sec-Fetch-Site","value":"none","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-24T14:48:06.889173+00:00"}