{"ip":"192.241.120.184","total_events":331,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["331 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 149,829 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"149,829 bytes sent","bytes_sent":149829,"session_seconds":2,"persistent":false}},"first_seen":"2026-07-07T15:03:37","last_seen":"2026-09-24T17:23:55","events_24h":0,"events_7d":15,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"North Holland","city":"Halfweg","lat":52.3862,"lon":4.7506,"asn":55286,"org":"B2 Net Solutions Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as55286","label":"ServerMania Inc","category":"cdn","url":"https://www.peeringdb.com/asn/55286"},"cve_matches":[],"malware":[],"top_ports":[{"port":9119,"proto":"tcp","label":"","count":232},{"port":23,"proto":"tcp","label":"Telnet","count":56},{"port":11235,"proto":"tcp","label":"","count":20},{"port":3000,"proto":"tcp","label":"Web-alt","count":8},{"port":1880,"proto":"tcp","label":"","count":8},{"port":7860,"proto":"tcp","label":"","count":5},{"port":10000,"proto":"tcp","label":"Webmin","count":1},{"port":443,"proto":"tcp","label":"HTTPS","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i3111h2_e8f1e7e78f70_b26ce05bbdd6"],"tls_client_hello":"","tls_ja3":["78f0dc5ac5b19daf131a133cfdee9691"],"http_akin":["b11cun040_00040016_4110f156","b11cun040_00040015_4c87b06e","b11cun020_00040004_0a8d7f11","b11cun030_00040014_54d07b6d"]},"fingerprint_peers":{"t13i3111h2_e8f1e7e78f70_b26ce05bbdd6":17,"b11cun040_00040016_4110f156":289,"b11cun040_00040015_4c87b06e":1518,"b11cun020_00040004_0a8d7f11":3922,"b11cun030_00040014_54d07b6d":3675},"akin_families":{"b11cun040_00040016_4110f156":{"head":"b11cun040_00040016_4110f156","shapes":9,"ips":289},"b11cun040_00040015_4c87b06e":{"head":"b11cun040_00040015_4c87b06e","shapes":2,"ips":1518},"b11cun020_00040004_0a8d7f11":{"head":"b11cun020_00040004_0a8d7f11","shapes":2,"ips":3921}},"user_agents":["Mozilla/5.0 (compatible; HermesScanner/2.4)","Mozilla/5.0 (compatible; Crawl4AI-Scanner/1.0)","Mozilla/5.0 (compatible; Scanner/1.0)","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","Mozilla/5.0","Mozilla/5.0 (compatible; HermesScanner/2.5)","Mozilla/5.0 (Windows NT 10.0; Win64; x64)"],"timeline":[{"date":"2026-07-07","count":6},{"date":"2026-07-08","count":29},{"date":"2026-07-09","count":15},{"date":"2026-07-10","count":20},{"date":"2026-07-11","count":15},{"date":"2026-07-12","count":20},{"date":"2026-07-13","count":44},{"date":"2026-07-14","count":77},{"date":"2026-07-15","count":14},{"date":"2026-07-16","count":10},{"date":"2026-07-17","count":6},{"date":"2026-07-18","count":11},{"date":"2026-07-19","count":11},{"date":"2026-07-24","count":2},{"date":"2026-07-25","count":2},{"date":"2026-08-07","count":13},{"date":"2026-08-16","count":1},{"date":"2026-08-18","count":2},{"date":"2026-08-21","count":8},{"date":"2026-09-24","count":25}],"recent_events":[{"timestamp":"2026-09-24T17:23:55","port":9119,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9119\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/chat","summary":"","payload_hex":"474554202f6368617420485454502f312e310d0a486f73743a20<HONEYPOT>3a393131390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"0cb8a5f7-c87a-44a9-bb77-def7d3ea1cd4","seq":1,"duration_ms":100,"bytes_in":135,"bytes_out":80},{"timestamp":"2026-09-24T17:23:55","port":9119,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9119\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/config","summary":"","payload_hex":"474554202f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a393131390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"27874169-6402-40ba-b6c9-37f8e768a511","seq":1,"duration_ms":100,"bytes_in":137,"bytes_out":80},{"timestamp":"2026-09-24T17:23:54","port":9119,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9119\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/sessions","summary":"","payload_hex":"474554202f73657373696f6e7320485454502f312e310d0a486f73743a20<HONEYPOT>3a393131390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"d12198c2-f188-4883-bc2f-c1bf90f82570","seq":1,"duration_ms":100,"bytes_in":139,"bytes_out":80},{"timestamp":"2026-09-24T17:23:53","port":9119,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9119\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"48454144202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393131390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"HEAD","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"eea88f93-2fec-4547-aa32-2969f46fc749","seq":1,"duration_ms":100,"bytes_in":132,"bytes_out":80},{"timestamp":"2026-09-24T17:23:53","port":9119,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9119\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/env","summary":"","payload_hex":"474554202f656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a393131390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"f8fc7a82-f74c-41d9-aaad-532664fa4a40","seq":1,"duration_ms":100,"bytes_in":134,"bytes_out":80},{"timestamp":"2026-09-24T17:17:05","port":9119,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9119\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/config","summary":"","payload_hex":"474554202f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a393131390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"b0cbeebc-f968-4974-a725-31fadc9ab201","seq":1,"duration_ms":100,"bytes_in":136,"bytes_out":80},{"timestamp":"2026-09-24T17:17:04","port":9119,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9119\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/chat","summary":"","payload_hex":"474554202f6368617420485454502f312e310d0a486f73743a20<HONEYPOT>3a393131390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"73c1d47d-55cb-477c-b0bf-65335cedd043","seq":1,"duration_ms":100,"bytes_in":134,"bytes_out":80},{"timestamp":"2026-09-24T17:17:03","port":9119,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9119\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/env","summary":"","payload_hex":"474554202f656e7620485454502f312e310d0a486f73743a20<HONEYPOT>3a393131390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"08aacbad-2028-4af1-9f43-9f806a005990","seq":1,"duration_ms":100,"bytes_in":133,"bytes_out":80},{"timestamp":"2026-09-24T17:17:03","port":9119,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9119\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/sessions","summary":"","payload_hex":"474554202f73657373696f6e7320485454502f312e310d0a486f73743a20<HONEYPOT>3a393131390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"c56ca858-c15b-4c78-b40d-af06cd27d184","seq":1,"duration_ms":100,"bytes_in":138,"bytes_out":80},{"timestamp":"2026-09-24T17:17:02","port":9119,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9119\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"48454144202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393131390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"HEAD","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"72132e73-65b4-41d7-87c1-5610b035eb23","seq":1,"duration_ms":100,"bytes_in":131,"bytes_out":80}],"http_methods":[{"method":"GET","count":254},{"method":"HEAD","count":21}],"distinct_ports_total":8,"top_paths":[{"path":"/","count":86,"ports":7},{"path":"/env","count":25,"ports":1},{"path":"/chat","count":24,"ports":1},{"path":"/config","count":24,"ports":1},{"path":"/sessions","count":24,"ports":1},{"path":"/api/health","count":19,"ports":1},{"path":"/api/info","count":19,"ports":1},{"path":"/api/status","count":19,"ports":1},{"path":"/login","count":15,"ports":1},{"path":"/dashboard","count":15,"ports":1},{"path":"/api/v1/version","count":4,"ports":1},{"path":"/crawl","count":1,"ports":1}],"distinct_paths_total":12,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":1}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:9119","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-10-01T15:33:30.059098+00:00"}