{"ip":"2.26.60.113","total_events":81,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"1 exploit-path probe(s)","confidence":"medium","network_type":"enterprise","why":["1 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"101,004 bytes sent","bytes_sent":101004,"session_seconds":2,"persistent":false}},"first_seen":"2026-09-26T01:14:21","last_seen":"2026-09-28T10:51:00","events_24h":0,"events_7d":81,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"","lat":50.1169,"lon":8.6837,"asn":215590,"org":"DpkgSoft International Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as215590","label":"DpkgSoft International Limited","category":"enterprise","url":"https://www.peeringdb.com/asn/215590"},"cve_matches":[],"malware":[],"top_ports":[{"port":3000,"proto":"tcp","label":"Web-alt","count":81}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["2196848d251b217de8b2c037e356c11d"],"http_akin":["a11cun040_0000004d_c5bb04c5"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4881,"a11cun040_0000004d_c5bb04c5":33},"akin_families":{},"user_agents":["Go-http-client/1.1","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-26","count":27},{"date":"2026-09-27","count":27},{"date":"2026-09-28","count":27}],"recent_events":[{"timestamp":"2026-09-28T10:51:00","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/trpc/settings.ai?batch=1&input=%7B%7D","summary":"","payload_hex":"474554202f6170692f747270632f73657474696e67732e61693f62617463683d3126696e7075743d25374225374420485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"4af649b4-f6cc-4907-99b8-b8e47f9ed9e6","seq":5,"duration_ms":972,"bytes_in":764,"bytes_out":380},{"timestamp":"2026-09-28T10:51:00","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/auth/get-session","summary":"","payload_hex":"474554202f6170692f617574682f6765742d73657373696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"4af649b4-f6cc-4907-99b8-b8e47f9ed9e6","seq":4,"duration_ms":757,"bytes_in":585,"bytes_out":304},{"timestamp":"2026-09-28T10:51:00","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"4af649b4-f6cc-4907-99b8-b8e47f9ed9e6","seq":3,"duration_ms":546,"bytes_in":427,"bytes_out":228},{"timestamp":"2026-09-28T10:51:00","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"4af649b4-f6cc-4907-99b8-b8e47f9ed9e6","seq":1,"duration_ms":101,"bytes_in":138,"bytes_out":76},{"timestamp":"2026-09-28T10:51:00","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/register","summary":"","payload_hex":"474554202f726567697374657220485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"4af649b4-f6cc-4907-99b8-b8e47f9ed9e6","seq":2,"duration_ms":328,"bytes_in":284,"bytes_out":152},{"timestamp":"2026-09-28T10:50:59","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-login.php","summary":"","payload_hex":"474554202f77702d6c6f67696e2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"8096ef89-a5b1-4c40-b61e-2f0bbc9ac359","seq":11,"duration_ms":2261,"bytes_in":2633,"bytes_out":836},{"timestamp":"2026-09-28T10:50:59","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/api/trpc","summary":"","payload_hex":"474554202f6170692f7472706320485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"8096ef89-a5b1-4c40-b61e-2f0bbc9ac359","seq":8,"duration_ms":1617,"bytes_in":1903,"bytes_out":608},{"timestamp":"2026-09-28T10:50:59","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/server-status","summary":"","payload_hex":"474554202f7365727665722d73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"8096ef89-a5b1-4c40-b61e-2f0bbc9ac359","seq":9,"duration_ms":1840,"bytes_in":2147,"bytes_out":684},{"timestamp":"2026-09-28T10:50:59","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/manager/html","summary":"","payload_hex":"474554202f6d616e616765722f68746d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"8096ef89-a5b1-4c40-b61e-2f0bbc9ac359","seq":10,"duration_ms":2052,"bytes_in":2390,"bytes_out":760},{"timestamp":"2026-09-28T10:50:58","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/api/config","summary":"","payload_hex":"474554202f6170692f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"8096ef89-a5b1-4c40-b61e-2f0bbc9ac359","seq":6,"duration_ms":1182,"bytes_in":1423,"bytes_out":456}],"http_methods":[{"method":"GET","count":81}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":9,"ports":1},{"path":"/login","count":9,"ports":1},{"path":"/register","count":9,"ports":1},{"path":"/admin","count":6,"ports":1},{"path":"/manager/html","count":6,"ports":1},{"path":"/wp-login.php","count":6,"ports":1},{"path":"/server-status","count":6,"ports":1},{"path":"/api/trpc","count":6,"ports":1},{"path":"/api/config","count":6,"ports":1},{"path":"/dashboard","count":6,"ports":1},{"path":"/api/status","count":6,"ports":1},{"path":"/api/auth/get-session","count":3,"ports":1},{"path":"/api/trpc/settings.ai?batch=1&input=%7B%7D","count":3,"ports":1}],"distinct_paths_total":13,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/json,*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:3000","notable":false},{"name":"User-Agent","value":"Go-http-client/1.1","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-30T01:05:51.075533+00:00"}