{"ip":"2.59.163.159","total_events":4,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["4 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"594 bytes sent","bytes_sent":594,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-22T18:01:59","last_seen":"2026-09-22T21:13:32","events_24h":4,"events_7d":4,"geo":{"country_code":"PL","country_name":"Poland","region":"Mazovia","city":"Warsaw","lat":52.2299,"lon":21.0093,"asn":215540,"org":"Global Connectivity Solutions Llp"},"source_domain":"50890.ip-ptr.tech","known_scanners":[],"scanner_tag":{"key":"peeringdb:as215540","label":"GLOBAL CONNECTIVITY SOLUTIONS LLP","category":"cdn","url":"https://www.peeringdb.com/asn/215540"},"cve_matches":[],"malware":[],"top_ports":[{"port":10443,"proto":"tcp","label":"","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d911100_0d5420ba6086_c30a07ab750d"],"tls_client_hello":"160301066701000663030313846025995307eaf314abe6077524d87d06e4f6e4330a5f7e577d9c6c3bd4800000b6130213031301c02cc03000a3009fcca9cca8ccaac0adc09fc05dc061c057c05300a7c02bc02f00a2009ec0acc09ec05cc060c056c05200a6c0afc0aec0a3c0a2c024c028006b006ac073c07700c400c3006d00c5c023c02700670040c072c07600be00bd006c00bfc00ac0140039003800880087c019003a0089c009c01300330032009a009900450044c0180034009b0046009dc09dc051009cc09cc050c0a1c0a0003d00c0003c00ba00350084002f0096004100ff0100058400000011000f00000c32332e39342e33372e323237000b000403000102000a0012001011ec001d0017001e001800190100010100230000001600000017000000310000000d003c003a09050906090404030503060308070808081a081b081c0809080a080b080408050806040105010601030302030301020103020202040205020602002b0009080304030303020301002d00020101003304ea04e811ec04c03d6b2210b42f5222542b631c72e8b9f8d610bc105288805ce6174d4a4652b231400f9babb1c3c926627aca885b03ac07c0521982b13ccea1337cf65d046992d0f0a7cb47a7b5e1c957e3c43e0a2709ea5e038271a128308d030639270d5d400c019c3552590666639f306c21fcc9580983493b944e6c24cd6ae11041e47106457b2541a44b9a8ed8acad4f337f51b592477abc3bbb6ee00cb6c6fa37d4aabfc5e4c4aca866d1d6ac08412590734070bbbb2c4c0ce6a91e5d6089acb6976cd8081e4bca07b078b0580d1bc300e80043574427132b60c5297a35d5480e7a8175bc9135887b6286c093436fcc377459815761221d0fe4a2973c8aa8c23e9dec577271685b6abd656a24a3663dfdd9893e88b8d840aaf99864c21b4b83898a31b368470bb01598afbf6554dd384220542b8df1c69a16b793e814af73a979da824e74b28b7a89b3d1715f9832bec3bc75e663aff414cad0b64b989ff706a40490ac0ac25c2b170182b4c996db8a35ea291260120de09a509a76e4810ac6a847e17619c63a6d30783002481abb05cb2f116cb8826a8662a004904b8a509d262386967008f56ac6999b1865d328cc6148d3218da0606f9250695d694acc143b81146a1c4505af626b3d63a92176614c917f01e15b4a567a08594e614b140af5b9f94209d5676129837a17750f39e649098253e469c3adf20faedb8c8ff50cea5243e21b2625442d959b1538b5b7e6059f90d9939a26989407106435ac15065dc0775d0090ccb7e033cadc5af9f78dd5597ec844a9aa16a9f4878c9d782476e14097e7305636bc541056990a344f6327ef48ce50327ecd842ec754231cc1255e220ca6c3bcc0c7701b4139d9ea3d98799d8535b0ee9050960ba8ec851ef9aa5df710c327f54481a5c741d65171587cef788442e88ae6dabed11787287c552df111aa65aa4606c48df1ac281727de9bc447f7b7feb4adac2362bb2908da6895562910a73089a9545ba48781a77c58fa35cd3544b3bea195a6e640f08a77028a75dfc7af2b33723d131989e8ce49b3427b35261f770d6838c5d5e67e467436ff8269fcabc616743f7c50a1d3c714b5d29f41d43091821e316528e55a23ef0400ea0251828838ce7052bed5432a9519f353997e16905b50be0fd2031d421fa8e901b0787731d760bd97ab413492b7234debc238da17b17f3510a420006d152bb69c4265b4a4a044512c7a7d0e333e86f813a6161b917cb12a6a7b17c75aa0e72fe2d277c1c3b368145214bbb358489211b601aa12a947298900c469ca9221e2509790e2a7fb413b7294b4a857994843be0e1162882083de1a357289949ea3808607aab9e4434cb24ffc5093dfe97fc5f00108e563180936580c4ad3871a7687082a7a92f0917d5dc92f482b1094763f45a01ad0cc227bb80d5006d03ad5a34b6b06a953aba8cba99c7352ab8b9eec59873c28b6e52bcca284448023406c62175a1921ef4111a84acc1af80cf35b02287338d43c7dafbabde07525c2e158d3a0267969c520257956694d0d231aef5b4a7fc7cd2f7b2d596ac3141b9e2d5b9d863085b6f08103b497eda5131bf548ad6a0428ac12a5193d7ab1770f9b9c2d1920a021c0fb595f8739d819294070befec57790546a600a49d811c571e2178f6c844cc1d209671a3694e980298e8f308d7e27b6ed203ed6ec1c065182c6d15476cce81b3ac42247001d002045cb43a036b6e8d65bf6412e31829b8fc66f28fd8338c6110e992f","tls_ja3":["5cfea888cff86b1032e4dd7050546027"],"http_akin":["a11cun020_00000048_724c10fb"]},"fingerprint_peers":{"a11cun020_00000048_724c10fb":97,"t13d911100_0d5420ba6086_c30a07ab750d":2},"akin_families":{"a11cun020_00000048_724c10fb":{"head":"a11cun020_00000048_724c10fb","shapes":4,"ips":97}},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"],"timeline":[{"date":"2026-09-22","count":4}],"recent_events":[{"timestamp":"2026-09-22T21:13:32","port":10443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0\"}","body":"","sni":"<HONEYPOT>","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/remote/login?lang=en","summary":"","payload_hex":"474554202f72656d6f74652f6c6f67696e3f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3133332e3029204765636b6f2f32303130303130312046697265666f782f3133332e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0","ja3":"5cfea888cff86b1032e4dd7050546027","session":"6efc9673-ae71-4b70-a498-ad8eee82788e","seq":1,"duration_ms":221,"bytes_in":158,"bytes_out":77},{"timestamp":"2026-09-22T21:13:31","port":10443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0\"}","body":"","sni":"<HONEYPOT>","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3133332e3029204765636b6f2f32303130303130312046697265666f782f3133332e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0","ja3":"5cfea888cff86b1032e4dd7050546027","session":"68048cfa-568c-4d58-9d49-1b40a18aa05b","seq":1,"duration_ms":217,"bytes_in":138,"bytes_out":77},{"timestamp":"2026-09-22T18:01:59","port":10443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0\"}","body":"","sni":"<HONEYPOT>","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3133332e3029204765636b6f2f32303130303130312046697265666f782f3133332e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0","ja3":"5cfea888cff86b1032e4dd7050546027","session":"248b8d3c-0a6f-4064-b98b-76f1cf755cc3","seq":1,"duration_ms":122,"bytes_in":139,"bytes_out":77},{"timestamp":"2026-09-22T18:01:59","port":10443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0\"}","body":"","sni":"<HONEYPOT>","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/remote/login?lang=en","summary":"","payload_hex":"474554202f72656d6f74652f6c6f67696e3f6c616e673d656e20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3133332e3029204765636b6f2f32303130303130312046697265666f782f3133332e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0","ja3":"5cfea888cff86b1032e4dd7050546027","session":"bf740db3-8d89-4ead-8297-0514c91b6930","seq":1,"duration_ms":122,"bytes_in":159,"bytes_out":77}],"http_methods":[{"method":"GET","count":4}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":2,"ports":1},{"path":"/remote/login?lang=en","count":2,"ports":1}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Host","User-Agent"],"representative":[{"name":"Host","value":"<HONEYPOT>:10443","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0","notable":false}],"distinct_sets":1,"events_with_headers":4},"tags":[],"data_as_of":"2026-09-23T13:42:44.395209+00:00"}