{"ip":"194.48.248.73","total_events":9,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["9 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,748 bytes sent","bytes_sent":2748,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-04T06:40:37","last_seen":"2026-08-31T11:33:42","events_24h":0,"events_7d":3,"geo":{"country_code":"BG","country_name":"Bulgaria","region":"","city":"","lat":42.696,"lon":23.332,"asn":200019,"org":"Alexhost Srl"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as200019","label":"AlexHost","category":"enterprise","url":"https://www.peeringdb.com/asn/200019"},"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":9}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i251000_b78ed14e2fd0_ab7e3b40a677"],"tls_ja3":["416eca07dcaad72dec6f76d1277b3eff","11a384388ad36777e1a2e121495037fe"],"ja4h":["po11nr07en_54c3c9ac5135","ge11nn05en_813e32c09d15","he11nn0400_baec784d6bb1"]},"fingerprint_peers":{"t13i251000_b78ed14e2fd0_ab7e3b40a677":82,"po11nr07en_54c3c9ac5135":0,"ge11nn05en_813e32c09d15":82,"he11nn0400_baec784d6bb1":3},"user_agents":["Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.4 Safari/605.1.15","Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/117.0 Safari/537.36","Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36","Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/16.3 Safari/605.1.15","Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:109.0) Gecko/20100101 Firefox/113.0","Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.20"],"timeline":[{"date":"2026-08-04","count":6},{"date":"2026-08-31","count":3}],"recent_events":[{"timestamp":"2026-08-31T11:33:42","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/images/favicon.ico","summary":"","payload_hex":"474554202f696d616765732f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e313b20574f57363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f36362e302e333335392e313831205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"d4e1d48f-3391-40b0-aada-4a0e5506005d","seq":2,"duration_ms":259,"bytes_in":462,"bytes_out":156},{"timestamp":"2026-08-31T11:33:42","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284665646f72613b204c696e7578206936383629204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134322e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"d4e1d48f-3391-40b0-aada-4a0e5506005d","seq":1,"duration_ms":100,"bytes_in":224,"bytes_out":78},{"timestamp":"2026-08-31T09:35:04","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:109.0) Gecko/20100101 Firefox/113.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"48454144202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031302e31343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131332e300d0a4163636570742d436861727365743a207574662d380d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"HEAD","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:109.0) Gecko/20100101 Firefox/113.0","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"7c296b04-1847-487e-b5e3-de821665a937","seq":1,"duration_ms":100,"bytes_in":181,"bytes_out":78},{"timestamp":"2026-08-04T12:44:51","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json, text/plain, */*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.5\",\"content-length\":\"35\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>\",\"referer\":\"https://<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.20\"}","body":"{\"user\":\"admin\",\"password\":\"admin\"}","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"504f5354202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e757820693638363b2072763a312e392e352e323029204765636b6f2f2046697265666f782f332e362e32300d0a436f6e74656e742d4c656e6774683a2033350d0a4163636570743a206170706c69636174696f6e2f6a736f6e2c20746578742f706c61696e2c202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a526566657265723a2068747470733a2f2f<HONEYPOT>0d0a636f6e74656e742d747970653a206170706c69636174696f6e2f6a736f6e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a7b2275736572223a2261646d696e222c2270617373776f7264223a2261646d696e227d","method":"POST","user_agent":"Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.20","ja3":"11a384388ad36777e1a2e121495037fe","session":"9619a9c3-91fb-4933-90ac-2e3f662c9f63","seq":1,"duration_ms":101,"bytes_in":343,"bytes_out":78},{"timestamp":"2026-08-04T12:44:51","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json, text/plain, */*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.5\",\"content-length\":\"43\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>\",\"referer\":\"https://<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/16.3 Safari/605.1.15\"}","body":"{\"user\":\"admin\",\"password\":\"prom-operator\"}","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"504f5354202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e31352056657273696f6e2f31362e33205361666172692f3630352e312e31350d0a436f6e74656e742d4c656e6774683a2034330d0a4163636570743a206170706c69636174696f6e2f6a736f6e2c20746578742f706c61696e2c202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a526566657265723a2068747470733a2f2f<HONEYPOT>0d0a636f6e74656e742d747970653a206170706c69636174696f6e2f6a736f6e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a7b2275736572223a2261646d696e222c2270617373776f7264223a2270726f6d2d6f70657261746f72227d","method":"POST","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/16.3 Safari/605.1.15","ja3":"11a384388ad36777e1a2e121495037fe","session":"a5008188-80b5-446b-8e20-65586c35ca2e","seq":1,"duration_ms":101,"bytes_in":384,"bytes_out":78},{"timestamp":"2026-08-04T10:17:33","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:140.0) Gecko/20100101 Firefox/140.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"48454144202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031302e31313b2072763a3134302e3029204765636b6f2f32303130303130312046697265666f782f3134302e300d0a4163636570742d436861727365743a207574662d380d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"HEAD","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:140.0) Gecko/20100101 Firefox/140.0","ja3":"11a384388ad36777e1a2e121495037fe","session":"4f858744-710e-4ae9-abcb-57490f1ba3fb","seq":1,"duration_ms":100,"bytes_in":181,"bytes_out":78},{"timestamp":"2026-08-04T08:22:58","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json, text/plain, */*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.5\",\"content-length\":\"35\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>\",\"referer\":\"https://<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/117.0 Safari/537.36\"}","body":"{\"user\":\"admin\",\"password\":\"admin\"}","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"504f5354202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163204f5320582031335f3229204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f2920456467652f3131372e30205361666172692f3533372e33360d0a436f6e74656e742d4c656e6774683a2033350d0a4163636570743a206170706c69636174696f6e2f6a736f6e2c20746578742f706c61696e2c202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a526566657265723a2068747470733a2f2f<HONEYPOT>0d0a636f6e74656e742d747970653a206170706c69636174696f6e2f6a736f6e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a7b2275736572223a2261646d696e222c2270617373776f7264223a2261646d696e227d","method":"POST","user_agent":"Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/117.0 Safari/537.36","ja3":"11a384388ad36777e1a2e121495037fe","session":"d9e5673c-1ec8-44a2-81ba-5f94ce9ae9d1","seq":1,"duration_ms":101,"bytes_in":368,"bytes_out":78},{"timestamp":"2026-08-04T08:22:58","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json, text/plain, */*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.5\",\"content-length\":\"43\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>\",\"referer\":\"https://<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36\"}","body":"{\"user\":\"admin\",\"password\":\"prom-operator\"}","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"504f5354202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284b7562756e74753b204c696e7578207838365f363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133342e302e302e30205361666172692f3533372e33360d0a436f6e74656e742d4c656e6774683a2034330d0a4163636570743a206170706c69636174696f6e2f6a736f6e2c20746578742f706c61696e2c202a2f2a0d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a526566657265723a2068747470733a2f2f<HONEYPOT>0d0a636f6e74656e742d747970653a206170706c69636174696f6e2f6a736f6e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a7b2275736572223a2261646d696e222c2270617373776f7264223a2270726f6d2d6f70657261746f72227d","method":"POST","user_agent":"Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36","ja3":"11a384388ad36777e1a2e121495037fe","session":"995808e0-c3d8-449f-9738-1863207ad649","seq":1,"duration_ms":100,"bytes_in":390,"bytes_out":78},{"timestamp":"2026-08-04T06:40:37","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.4 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"48454144202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31372e312e34205361666172692f3630352e312e31350d0a4163636570742d436861727365743a207574662d380d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"HEAD","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.4 Safari/605.1.15","ja3":"11a384388ad36777e1a2e121495037fe","session":"3cb081a0-bd41-4ff7-8db1-13d6c62d362a","seq":1,"duration_ms":100,"bytes_in":215,"bytes_out":78}],"http_methods":[{"method":"POST","count":4},{"method":"HEAD","count":3},{"method":"GET","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/login","count":4,"ports":1},{"path":"/","count":3,"ports":1},{"path":"/favicon.ico","count":1,"ports":1},{"path":"/images/favicon.ico","count":1,"ports":1}],"distinct_paths_total":4,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Content-Length","Content-Type","Host","Referer","User-Agent"],"representative":[{"name":"Accept","value":"application/json, text/plain, */*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.5","notable":false},{"name":"Content-Length","value":"35","notable":false},{"name":"Content-Type","value":"application/json","notable":true},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"Referer","value":"https://<HONEYPOT>","notable":true},{"name":"User-Agent","value":"Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.20","notable":false}],"distinct_sets":3,"events_with_headers":9},"tags":[],"data_as_of":"2026-09-06T15:34:56.155055+00:00"}