{"ip":"198.199.123.141","total_events":14,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["14 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."]},"first_seen":"2026-05-31T21:27:36","last_seen":"2026-07-04T13:16:20","events_24h":1,"events_7d":1,"geo":{"country_code":"US","country_name":"United States","region":"New Jersey","city":"North Bergen","lat":40.7964,"lon":-74.0203,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":"portscanner-nyc1-04.prod.cyberresilience.io","known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":8085,"proto":"tcp","label":"","count":4},{"port":8089,"proto":"tcp","label":"Splunk","count":2},{"port":80,"proto":"tcp","label":"HTTP","count":2},{"port":7547,"proto":"tcp","label":"TR-069","count":2},{"port":25,"proto":"tcp","label":"SMTP","count":1},{"port":2000,"proto":"tcp","label":"","count":1},{"port":53,"proto":"tcp","label":"DNS","count":1},{"port":21,"proto":"tcp","label":"FTP","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_ja3":["725543c78edf669194c11dc7a039b56e"],"ja4h":["ge11nn0600_be390a788e28"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":5489,"ge11nn0600_be390a788e28":15},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0"],"timeline":[{"date":"2026-05-31","count":1},{"date":"2026-06-01","count":2},{"date":"2026-06-02","count":1},{"date":"2026-06-06","count":1},{"date":"2026-06-07","count":1},{"date":"2026-06-10","count":1},{"date":"2026-06-13","count":1},{"date":"2026-06-15","count":1},{"date":"2026-06-20","count":1},{"date":"2026-06-24","count":2},{"date":"2026-06-25","count":1},{"date":"2026-07-04","count":1}],"recent_events":[{"timestamp":"2026-07-04T13:16:20","port":25,"proto":"tcp","app_proto":"","app_protocol":"smtp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"EHLO\r\n","payload_hex":"45484c4f0d0a","method":"","user_agent":"","community_id":"1:3zLPw8p+q1xh6sNv/2gKQGkEdj4=","ja3":"","session":"f849f342-0e59-41cd-aa04-d417682764ff","seq":1,"duration_ms":100,"bytes_in":6,"bytes_out":40,"enriched":{"digest":"87f781591201aca6","label":"SMTP","strings":["EHLO"]}},{"timestamp":"2026-06-25T18:55:36","port":8085,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","community_id":"1:BvaFKc6OAeQ7JCjgZN2yjhDM/98=","ja3":"","session":"d0e5dc80-6fa8-4666-8ab5-3dad7e1d3330","seq":1,"duration_ms":100,"bytes_in":212,"bytes_out":80},{"timestamp":"2026-06-24T19:19:44","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","community_id":"1:RgfRg8Hw8P/rtzXhA+F4fxjcawA=","ja3":"","session":"604c0f7e-0309-42b2-a5cb-ee5f705ac945","seq":1,"duration_ms":100,"bytes_in":212,"bytes_out":80},{"timestamp":"2026-06-24T08:41:31","port":7547,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","community_id":"1:KEtRkqYSm8WBL0lYj5c66uQ/+XM=","ja3":"","session":"24399892-3051-4e56-ac94-e7c985e12423","seq":1,"duration_ms":100,"bytes_in":212,"bytes_out":80},{"timestamp":"2026-06-20T12:07:19","port":8089,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","community_id":"1:NipPjSiHMhKC1GeqVFVHViZhTkE=","ja3":"725543c78edf669194c11dc7a039b56e","session":"2c09fdf3-aa2c-4cc0-ae95-65e112e21542","seq":1,"duration_ms":100,"bytes_in":212,"bytes_out":80},{"timestamp":"2026-06-15T13:18:44","port":8089,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","community_id":"1:1si5Qwz0/QxMlirRvvPR/qZDN7g=","ja3":"725543c78edf669194c11dc7a039b56e","session":"50bd4e89-860c-4fa2-9924-071e92137924","seq":1,"duration_ms":100,"bytes_in":213,"bytes_out":80},{"timestamp":"2026-06-13T16:40:13","port":8085,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","community_id":"1:75aMB4fE1RwZ3PZDGAYU8CiVmXA=","ja3":"","session":"d984b198-68c1-40fc-82a0-648310ef2534","seq":1,"duration_ms":100,"bytes_in":212,"bytes_out":80},{"timestamp":"2026-06-10T19:17:07","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","community_id":"1:du98t71M3YgauWlz3u/jJbG0gw8=","ja3":"","session":"692e1c75-b180-4de9-9c8b-95b59a1d2158","seq":1,"duration_ms":100,"bytes_in":212,"bytes_out":80},{"timestamp":"2026-06-07T06:21:30","port":8085,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","community_id":"1:ZH/xhaHJ4pH48SCx03asKxS1siQ=","ja3":"","session":"1a557134-3e66-45c4-9edc-acaf0a6ab52c","seq":1,"duration_ms":100,"bytes_in":214,"bytes_out":80},{"timestamp":"2026-06-06T16:39:45","port":8085,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","community_id":"1:ETbojU1RWXUnZ1USJ4uWCBxbUlY=","ja3":"","session":"e90b9f4d-c9cb-42b0-91f2-0867bc4fd7cf","seq":1,"duration_ms":100,"bytes_in":212,"bytes_out":80}],"http_methods":[{"method":"GET","count":12}],"distinct_ports_total":8,"top_paths":[{"path":"/","count":12,"ports":6}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Charset","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Charset","value":"UTF-8","notable":false},{"name":"Accept-Encoding","value":"UTF-8","notable":false},{"name":"Accept-Language","value":"*","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","notable":false}],"distinct_sets":1,"events_with_headers":9},"tags":[],"data_as_of":"2026-07-05T05:40:10.549190+00:00"}