{"ip":"192.3.165.146","total_events":125,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["125 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 7,734 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"7,734 bytes sent","bytes_sent":7734,"session_seconds":0,"persistent":false}},"first_seen":"2026-04-14T14:21:03","last_seen":"2026-09-27T15:08:49","events_24h":0,"events_7d":9,"geo":{"country_code":"US","country_name":"United States","region":"New York","city":"Buffalo","lat":42.8864,"lon":-78.8784,"asn":36352,"org":"HostPapa"},"source_domain":"inner-visions.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as36352","label":"ColoCrossing","category":"isp","url":"https://www.peeringdb.com/asn/36352"},"cve_matches":[],"malware":[],"top_ports":[{"port":8642,"proto":"tcp","label":"","count":98},{"port":9119,"proto":"tcp","label":"","count":24},{"port":8787,"proto":"tcp","label":"","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["a11cun020_0000000a_4e1a3733"]},"fingerprint_peers":{"a11cun020_0000000a_4e1a3733":3},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-08-21","count":1},{"date":"2026-08-22","count":7},{"date":"2026-08-23","count":6},{"date":"2026-08-25","count":7},{"date":"2026-08-26","count":7},{"date":"2026-08-30","count":6},{"date":"2026-08-31","count":8},{"date":"2026-09-01","count":1},{"date":"2026-09-04","count":5},{"date":"2026-09-05","count":8},{"date":"2026-09-06","count":2},{"date":"2026-09-09","count":4},{"date":"2026-09-10","count":8},{"date":"2026-09-11","count":4},{"date":"2026-09-14","count":3},{"date":"2026-09-15","count":8},{"date":"2026-09-16","count":3},{"date":"2026-09-19","count":2},{"date":"2026-09-20","count":7},{"date":"2026-09-21","count":8},{"date":"2026-09-22","count":1},{"date":"2026-09-24","count":1},{"date":"2026-09-25","count":2},{"date":"2026-09-26","count":3},{"date":"2026-09-27","count":3}],"recent_events":[{"timestamp":"2026-09-27T15:08:49","port":8642,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8642\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383634320d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"5448d46c-6822-4821-a3dc-fd5a7791f7de","seq":1,"duration_ms":100,"bytes_in":67,"bytes_out":78},{"timestamp":"2026-09-27T08:08:26","port":8642,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8642\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383634320d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"9d5345dc-fda3-4de9-86ff-80b03ae508bd","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":78},{"timestamp":"2026-09-27T00:43:02","port":8642,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8642\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383634320d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"3b9b2fb2-3aa7-468a-a679-613d55a95c02","seq":1,"duration_ms":100,"bytes_in":67,"bytes_out":78},{"timestamp":"2026-09-26T17:45:27","port":8642,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8642\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383634320d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"934ab7ef-9f98-4048-bf8f-301f2ba0bb0b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":78},{"timestamp":"2026-09-26T09:23:46","port":8642,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8642\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383634320d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"594c39e1-6c6e-4259-b2c5-00cb06ef5527","seq":1,"duration_ms":100,"bytes_in":67,"bytes_out":78},{"timestamp":"2026-09-26T02:23:54","port":8642,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8642\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383634320d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"fda2153f-502a-4028-8e2b-36cd98333147","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":78},{"timestamp":"2026-09-25T19:01:08","port":8642,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8642\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383634320d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"359a41d2-8209-4559-8eaf-eaea121852ed","seq":1,"duration_ms":100,"bytes_in":67,"bytes_out":78},{"timestamp":"2026-09-25T12:01:34","port":8642,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8642\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383634320d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"c09cca77-23b8-4f12-a242-afb12a5bd40d","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":78},{"timestamp":"2026-09-24T19:25:18","port":8642,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8642\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383634320d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"36c4bf12-d210-43ef-81af-5298ce38f3d4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":78},{"timestamp":"2026-09-22T04:30:23","port":8642,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8642\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383634320d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"34184059-36e9-44a5-94ce-64946f69c85d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":78}],"http_methods":[{"method":"GET","count":115}],"distinct_ports_total":3,"top_paths":[{"path":"/","count":115,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Connection","Host"],"representative":[{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"<HONEYPOT>:8642","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-29T14:52:31.431126+00:00"}