{"ip":"185.226.197.38","total_events":201,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"bitsight","confidence":"high","network_type":"CDN"},"first_seen":"2026-02-24T01:32:22","last_seen":"2026-06-24T21:56:34","events_24h":1,"events_7d":9,"geo":{"country_code":"PT","country_name":"Portugal","region":"","city":"","lat":38.7057,"lon":-9.1359,"asn":21859,"org":"Zenlayer Inc"},"source_domain":"zl-amsc-nl-gp1-wk129b.internet-census.org","known_scanners":["bitsight","Internet Census"],"scanner_tag":{"key":"internet-census","label":"Internet Census","category":"research","url":"https://internet-census.org/"},"cve_matches":[],"top_ports":[{"port":5060,"proto":"tcp","label":"SIP","count":7},{"port":102,"proto":"tcp","label":"","count":7},{"port":137,"proto":"tcp","label":"NetBIOS","count":6},{"port":2379,"proto":"tcp","label":"","count":6},{"port":8334,"proto":"tcp","label":"","count":5},{"port":992,"proto":"tcp","label":"","count":5},{"port":23023,"proto":"tcp","label":"","count":5},{"port":6881,"proto":"tcp","label":"","count":4},{"port":7071,"proto":"tcp","label":"","count":4},{"port":69,"proto":"tcp","label":"","count":4},{"port":5901,"proto":"tcp","label":"","count":4},{"port":9944,"proto":"tcp","label":"","count":4},{"port":50070,"proto":"tcp","label":"Hadoop","count":3},{"port":3780,"proto":"tcp","label":"","count":3},{"port":3689,"proto":"tcp","label":"","count":3}],"fingerprints":{"ssh_hassh":["864cef7e4d8ad71d4fb1aadfcf0a3189"],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9","t12i330500_5172cef6ed69_021165082e1c"],"tls_ja3":[],"ja4h":["ge11nn0400_88d30a62b7ad"]},"fingerprint_peers":{"t12i330500_5172cef6ed69_021165082e1c":220,"t13i190800_9dc949149365_97f8aa674fd9":4386,"ge11nn0400_88d30a62b7ad":7448,"864cef7e4d8ad71d4fb1aadfcf0a3189":121},"user_agents":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36","Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"],"timeline":[{"date":"2026-03-29","count":2},{"date":"2026-04-01","count":3},{"date":"2026-04-03","count":4},{"date":"2026-04-08","count":2},{"date":"2026-04-11","count":4},{"date":"2026-04-13","count":6},{"date":"2026-04-15","count":5},{"date":"2026-04-16","count":2},{"date":"2026-04-17","count":1},{"date":"2026-04-18","count":11},{"date":"2026-04-19","count":3},{"date":"2026-04-20","count":2},{"date":"2026-04-21","count":6},{"date":"2026-04-22","count":1},{"date":"2026-04-25","count":1},{"date":"2026-04-27","count":1},{"date":"2026-04-28","count":3},{"date":"2026-04-30","count":3},{"date":"2026-05-03","count":6},{"date":"2026-05-05","count":3},{"date":"2026-05-07","count":1},{"date":"2026-05-08","count":3},{"date":"2026-05-09","count":1},{"date":"2026-05-11","count":1},{"date":"2026-05-12","count":3},{"date":"2026-05-14","count":3},{"date":"2026-05-16","count":1},{"date":"2026-05-21","count":1},{"date":"2026-05-22","count":2},{"date":"2026-05-23","count":1},{"date":"2026-05-24","count":3},{"date":"2026-05-25","count":1},{"date":"2026-05-27","count":2},{"date":"2026-05-28","count":2},{"date":"2026-05-30","count":3},{"date":"2026-06-01","count":2},{"date":"2026-06-05","count":2},{"date":"2026-06-06","count":2},{"date":"2026-06-07","count":5},{"date":"2026-06-12","count":2},{"date":"2026-06-13","count":2},{"date":"2026-06-14","count":3},{"date":"2026-06-15","count":2},{"date":"2026-06-20","count":1},{"date":"2026-06-21","count":3},{"date":"2026-06-23","count":4},{"date":"2026-06-24","count":1}],"recent_events":[{"timestamp":"2026-06-24T21:56:34","port":2081,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:2081\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323038310d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132332e302e363331322e3836205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36","community_id":"1:NhHQN8lEGpKTQ2QfXKdjk+38quM=","ja3":"","session":"64784da3-b676-40d1-9a61-ec92ec967ceb","seq":1,"duration_ms":100,"bytes_in":180,"bytes_out":79},{"timestamp":"2026-06-23T23:43:12","port":3551,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0006status","payload_hex":"0006737461747573","method":"","user_agent":"","community_id":"1:oERs6rdQ/s56WASOL37gP5Pwpp0=","ja3":"","session":"1e532759-7976-4eb8-95be-586c8f48e324","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":14,"enriched":{"digest":"6f6a1d628b18e330","strings":["status"]}},{"timestamp":"2026-06-23T20:52:29","port":21025,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:21025\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32313032350d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132332e302e363331322e3836205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36","community_id":"1:AONQyENGkYXr50ateGVryHxgckU=","ja3":"","session":"851d81de-c776-4a0a-8be5-e8c73077980e","seq":1,"duration_ms":100,"bytes_in":192,"bytes_out":79},{"timestamp":"2026-06-23T20:52:28","port":21025,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:21025\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32313032350d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132332e302e363331322e3836205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36","community_id":"1:bTQVo0/ZPk3wfJ2Vvb6v/g+qBi4=","ja3":"","session":"73d3aae6-a69b-4ab6-9c8d-0ed183197594","seq":1,"duration_ms":100,"bytes_in":192,"bytes_out":79},{"timestamp":"2026-06-23T20:52:17","port":21025,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:21025\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32313032350d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132332e302e363331322e3836205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36","community_id":"1:iDlYNt7or+5vjzrVhDdbCZrECNA=","ja3":"","session":"a2ce6403-eff5-4e5b-9ec3-c12ab7000f69","seq":1,"duration_ms":100,"bytes_in":181,"bytes_out":79},{"timestamp":"2026-06-21T20:00:00","port":11112,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:11112\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31313131320d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132332e302e363331322e3836205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36","community_id":"1:BEBumQKDwx/gJ5BPB/7sh9yZpis=","ja3":"","session":"e298ebb5-c902-470c-96dd-f6eb36a290d5","seq":1,"duration_ms":100,"bytes_in":191,"bytes_out":79},{"timestamp":"2026-06-21T19:59:40","port":11112,"proto":"tcp","app_proto":"","app_protocol":"dicom","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000\u0000\u0000\u0001\u0000\u0000\u0001\u0000\u0000ANY-SCP         FINDSCU         \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000\u00151.2.840.10008.3.1.1.1 \u0000\u0000a\u0001\u0000�\u00000\u0000\u0000\u00161.2.840.10008.5.1.4.31@\u0000\u0000\u00131.2.840.10008.1.2.1@\u0000\u0000\u00131.2.840.10008.1.2.2@\u0000\u0000\u00111.2.840.10008.1.2P\u0000\u0000:Q\u0000\u0000\u0004\u0000\u0000@\u0000R\u0000\u0000\u001b1.2.276.0.7230010.3.0.3.6.0U\u0000\u0000\u000fOFFIS_DCMTK_360","payload_hex":"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","method":"","user_agent":"","community_id":"1:L1Hi5aMxBlYrixdEm6kG6QDimgg=","ja3":"","session":"639dbd99-a752-4935-b6c8-19106ec7dacd","seq":1,"duration_ms":100,"bytes_in":262,"bytes_out":14,"enriched":{"digest":"ffffa7d5878f674c","label":"DICOM","strings":["ANY-SCP         FINDSCU","1.2.840.10008.3.1.1.1","1.2.840.10008.5.1.4.31@","1.2.840.10008.1.2.1@","1.2.840.10008.1.2.2@","1.2.840.10008.1.2P","1.2.276.0.7230010.3.0.3.6.0U","OFFIS_DCMTK_360","1.2.840.10008.3.1.1.1 a","1.2.840.10008.1.2P:Q"]}},{"timestamp":"2026-06-21T05:13:48","port":70,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:70\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a37300d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132332e302e363331322e3836205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36","community_id":"1:YCeMovt9fUxc5BsVIlQJ72xxW6s=","ja3":"","session":"51eb6021-45bc-4ee4-bbed-14a93a676d2c","seq":1,"duration_ms":100,"bytes_in":187,"bytes_out":79},{"timestamp":"2026-06-20T19:18:34","port":82,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:82\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a38320d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132332e302e363331322e3836205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36","community_id":"1:PW0R49APPH+cN0+xaaeWaqUnD78=","ja3":"","session":"b63d7388-1988-4aee-bb1f-399a1caed70d","seq":1,"duration_ms":101,"bytes_in":187,"bytes_out":79},{"timestamp":"2026-06-15T21:21:29","port":2376,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:2376\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323337360d0a557365722d4167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132332e302e363331322e3836205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36","community_id":"1:P0y69HzPAXxrH9CvPX0w+wenWx8=","ja3":"","session":"721584f1-e049-43f0-80e0-b6e9883c327b","seq":1,"duration_ms":100,"bytes_in":189,"bytes_out":79}],"http_methods":[{"method":"GET","count":93}],"distinct_ports_total":89,"top_paths":[{"path":"/favicon.ico","count":50,"ports":43},{"path":"/","count":43,"ports":39}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[{"value":"SSH-2.0-Go","count":3}],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:2081","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":8},"tags":[],"data_as_of":"2026-06-25T11:34:44.447446+00:00"}