{"ip":"192.210.137.238","total_events":15,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["15 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,627 bytes sent","bytes_sent":1627,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-16T04:04:04","last_seen":"2026-09-18T23:03:15","events_24h":0,"events_7d":0,"geo":{"country_code":"US","country_name":"United States","region":"Georgia","city":"Marietta","lat":33.9521,"lon":-84.5475,"asn":36352,"org":"HostPapa"},"source_domain":"cooperative-35.jewelrygolddesign.info","known_scanners":[],"scanner_tag":{"key":"peeringdb:as36352","label":"ColoCrossing","category":"isp","url":"https://www.peeringdb.com/asn/36352"},"cve_matches":[],"malware":[],"top_ports":[{"port":61983,"proto":"tcp","label":"","count":5},{"port":17018,"proto":"tcp","label":"","count":5},{"port":23504,"proto":"tcp","label":"","count":5}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d311000_e8f1e7e78f70_1f22a2ca17c4"],"tls_client_hello":"","tls_ja3":["a3afc2c46ba4a7d7fbe1cfb7a3031c2f"],"http_akin":["b10cun040_00040015_4c87b06e","b11cun030_00040014_54d07b6d"]},"fingerprint_peers":{"b10cun040_00040015_4c87b06e":16,"b11cun030_00040014_54d07b6d":3675,"t13d311000_e8f1e7e78f70_1f22a2ca17c4":2},"akin_families":{},"user_agents":["curl/8.5.0","frigate-hunter/2.0"],"timeline":[{"date":"2026-09-16","count":8},{"date":"2026-09-17","count":4},{"date":"2026-09-18","count":3}],"recent_events":[{"timestamp":"2026-09-18T23:03:15","port":23504,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:23504\",\"user-agent\":\"curl/8.5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/config","summary":"","payload_hex":"474554202f6170692f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a32333530340d0a557365722d4167656e743a206375726c2f382e352e300d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.5.0","ja3":"","session":"76be1295-7eeb-4e59-afe0-7792f83a652f","seq":1,"duration_ms":100,"bytes_in":92,"bytes_out":80},{"timestamp":"2026-09-18T21:51:09","port":61983,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:61983\",\"user-agent\":\"curl/8.5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/config","summary":"","payload_hex":"474554202f6170692f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a36313938330d0a557365722d4167656e743a206375726c2f382e352e300d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.5.0","ja3":"","session":"13bac3ed-fd5c-4773-9b09-c8b283f46176","seq":1,"duration_ms":101,"bytes_in":91,"bytes_out":80},{"timestamp":"2026-09-18T19:19:51","port":17018,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:17018\",\"user-agent\":\"curl/8.5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/config","summary":"","payload_hex":"474554202f6170692f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a31373031380d0a557365722d4167656e743a206375726c2f382e352e300d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.5.0","ja3":"","session":"84dc5b71-2419-447b-a14f-a474ff336c09","seq":1,"duration_ms":100,"bytes_in":92,"bytes_out":80},{"timestamp":"2026-09-17T00:49:04","port":23504,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"frigate-hunter/2.0\"}","body":"","sni":"<HONEYPOT>","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e300d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a20667269676174652d68756e7465722f322e300d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"frigate-hunter/2.0","ja3":"a3afc2c46ba4a7d7fbe1cfb7a3031c2f","session":"9a727bc5-0474-4af4-9bcb-8a5720db5294","seq":1,"duration_ms":223,"bytes_in":114,"bytes_out":80},{"timestamp":"2026-09-17T00:48:56","port":23504,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"frigate-hunter/2.0\"}","body":"","sni":"<HONEYPOT>","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/api/stats","summary":"","payload_hex":"474554202f6170692f737461747320485454502f312e300d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a20667269676174652d68756e7465722f322e300d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"frigate-hunter/2.0","ja3":"a3afc2c46ba4a7d7fbe1cfb7a3031c2f","session":"1e239e7b-fd64-4981-ac45-31133d214c20","seq":1,"duration_ms":225,"bytes_in":112,"bytes_out":80},{"timestamp":"2026-09-17T00:48:48","port":23504,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"frigate-hunter/2.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e300d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a20667269676174652d68756e7465722f322e300d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"frigate-hunter/2.0","ja3":"","session":"f4e3371d-3e03-4b57-be33-d5f6fa312c12","seq":1,"duration_ms":101,"bytes_in":114,"bytes_out":80},{"timestamp":"2026-09-17T00:48:41","port":23504,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"frigate-hunter/2.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/stats","summary":"","payload_hex":"474554202f6170692f737461747320485454502f312e300d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a20667269676174652d68756e7465722f322e300d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"frigate-hunter/2.0","ja3":"","session":"b9d44bc6-566a-4519-95a0-d973b9eb8465","seq":1,"duration_ms":100,"bytes_in":112,"bytes_out":80},{"timestamp":"2026-09-16T18:11:34","port":61983,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"frigate-hunter/2.0\"}","body":"","sni":"<HONEYPOT>","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e300d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a20667269676174652d68756e7465722f322e300d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"frigate-hunter/2.0","ja3":"a3afc2c46ba4a7d7fbe1cfb7a3031c2f","session":"7992b10a-4bd0-4892-8b4d-f847200e82f8","seq":1,"duration_ms":136,"bytes_in":113,"bytes_out":80},{"timestamp":"2026-09-16T18:11:27","port":61983,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"frigate-hunter/2.0\"}","body":"","sni":"<HONEYPOT>","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/api/stats","summary":"","payload_hex":"474554202f6170692f737461747320485454502f312e300d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a20667269676174652d68756e7465722f322e300d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"frigate-hunter/2.0","ja3":"a3afc2c46ba4a7d7fbe1cfb7a3031c2f","session":"d7025d46-2e8c-48a4-9df7-530bff754e73","seq":1,"duration_ms":139,"bytes_in":111,"bytes_out":80},{"timestamp":"2026-09-16T18:11:19","port":61983,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"frigate-hunter/2.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e300d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a20667269676174652d68756e7465722f322e300d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"frigate-hunter/2.0","ja3":"","session":"d032d6dd-fec0-4fb4-b15e-a6d184f02980","seq":1,"duration_ms":100,"bytes_in":113,"bytes_out":80}],"http_methods":[{"method":"GET","count":15}],"distinct_ports_total":3,"top_paths":[{"path":"/api/stats","count":6,"ports":3},{"path":"/favicon.ico","count":6,"ports":3},{"path":"/api/config","count":3,"ports":3}],"distinct_paths_total":3,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"frigate-hunter/2.0","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[],"data_as_of":"2026-10-01T14:36:59.895086+00:00"}