{"ip":"207.57.126.68","total_events":78,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"20 exploit-path probe(s)","confidence":"medium","network_type":"network services","why":["20 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"15,833 bytes sent","bytes_sent":15833,"session_seconds":6,"persistent":false}},"first_seen":"2026-09-24T16:22:30","last_seen":"2026-09-29T10:51:48","events_24h":72,"events_7d":78,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":139659,"org":"LUCIDACLOUD LIMITED"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":9443,"proto":"tcp","label":"","count":25},{"port":81,"proto":"tcp","label":"","count":25},{"port":10255,"proto":"tcp","label":"","count":4},{"port":2380,"proto":"tcp","label":"","count":4},{"port":2181,"proto":"tcp","label":"","count":4},{"port":27017,"proto":"tcp","label":"MongoDB","count":3},{"port":11211,"proto":"tcp","label":"Memcached","count":2},{"port":5432,"proto":"tcp","label":"Postgres","count":2},{"port":9300,"proto":"tcp","label":"Elastic-tr","count":2},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":1},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":1},{"port":443,"proto":"tcp","label":"HTTPS","count":1},{"port":8888,"proto":"tcp","label":"HTTP-alt","count":1},{"port":445,"proto":"tcp","label":"SMB","count":1},{"port":8000,"proto":"tcp","label":"HTTP-alt","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i251000_b78ed14e2fd0_ab7e3b40a677","t13i311000_e8f1e7e78f70_d41ae481755e"],"tls_client_hello":"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","tls_ja3":["c12b4ccd5320bbb380ca1a9df90f771d","416eca07dcaad72dec6f76d1277b3eff"],"http_akin":["a11cun050_0000005d_7266f93a","a11cun030_0000004a_c91eaf54","a11cun040_0080004a_0e46e402","a11cun040_0000004b_a4cdfabf"]},"fingerprint_peers":{"t13i251000_b78ed14e2fd0_ab7e3b40a677":103,"t13i311000_e8f1e7e78f70_d41ae481755e":799,"a11cun050_0000005d_7266f93a":50,"a11cun030_0000004a_c91eaf54":241,"a11cun040_0080004a_0e46e402":3,"a11cun040_0000004b_a4cdfabf":19},"akin_families":{"a11cun030_0000004a_c91eaf54":{"head":"a11cun030_0000004a_c91eaf54","shapes":3,"ips":244},"a11cun040_0080004a_0e46e402":{"head":"a11cun030_0000004a_c91eaf54","shapes":3,"ips":244},"a11cun040_0000004b_a4cdfabf":{"head":"a11cun030_0000004a_c91eaf54","shapes":3,"ips":244}},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.3 Safari/605.1.15","Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","Mozilla/5.0 (X11; Linux x86_64; rv:103.0) Gecko/20100101 Firefox/103.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0","Mozilla/5.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64)"],"timeline":[{"date":"2026-09-24","count":6},{"date":"2026-09-29","count":72}],"recent_events":[{"timestamp":"2026-09-29T10:51:48","port":10255,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>:10255\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"48454144202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303235350d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"HEAD","user_agent":"Mozilla/5.0","ja3":"","session":"4fb8af81-28f1-4ecd-9ff2-6f90a45a5b06","seq":1,"duration_ms":100,"bytes_in":91,"bytes_out":78},{"timestamp":"2026-09-29T10:50:19","port":11211,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>:11211\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"48454144202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31313231310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"HEAD","user_agent":"Mozilla/5.0","ja3":"","session":"d5905dee-1641-4b6c-a43f-a1b75dadce44","seq":1,"duration_ms":100,"bytes_in":91,"bytes_out":78},{"timestamp":"2026-09-29T10:49:54","port":10255,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>:10255\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/healthz","summary":"","payload_hex":"474554202f6865616c74687a20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303235350d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"66ec0d94-19c4-4e5f-b6f2-75bf83fb5a6b","seq":1,"duration_ms":100,"bytes_in":97,"bytes_out":78},{"timestamp":"2026-09-29T10:49:53","port":10255,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>:10255\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/pods","summary":"","payload_hex":"474554202f706f647320485454502f312e310d0a486f73743a20<HONEYPOT>3a31303235350d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"c76ca9e3-07dc-46b2-9548-e98e87ec9ff7","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":78},{"timestamp":"2026-09-29T10:49:53","port":10255,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>:10255\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/pods","summary":"","payload_hex":"474554202f706f647320485454502f312e310d0a486f73743a20<HONEYPOT>3a31303235350d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"f9485bfc-09b5-4f4b-9e79-3324c0c81c8e","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":78},{"timestamp":"2026-09-29T10:49:43","port":11211,"proto":"tcp","app_proto":"","app_protocol":"memcached","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"stats\r\n\r\nquit\r\n","payload_hex":"73746174730d0a0d0a717569740d0a","method":"","user_agent":"","ja3":"","session":"3bb9dc32-181b-48ec-904c-d565c9ac475a","seq":1,"duration_ms":100,"bytes_in":15,"bytes_out":13,"enriched":{"digest":"1cb9daa66b451937","label":"Memcached","strings":["stats","quit"]}},{"timestamp":"2026-09-29T10:47:19","port":2380,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>:2380\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"48454144202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323338300d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"HEAD","user_agent":"Mozilla/5.0","ja3":"","session":"8fa07e39-63e7-4451-a7e9-30eaf35b8fe4","seq":1,"duration_ms":100,"bytes_in":90,"bytes_out":78},{"timestamp":"2026-09-29T10:47:19","port":2380,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>:2380\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"48454144202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323338300d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"HEAD","user_agent":"Mozilla/5.0","ja3":"","session":"d0585adb-6645-4b54-8926-0dcc768a966e","seq":1,"duration_ms":100,"bytes_in":90,"bytes_out":78},{"timestamp":"2026-09-29T10:46:10","port":2380,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>:2380\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/version","summary":"","payload_hex":"474554202f76657273696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a323338300d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"95d0bd02-f298-4cc4-abea-85615bdd8fcd","seq":1,"duration_ms":100,"bytes_in":96,"bytes_out":78},{"timestamp":"2026-09-29T10:46:10","port":2380,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>:2380\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/health","summary":"","payload_hex":"474554202f6865616c746820485454502f312e310d0a486f73743a20<HONEYPOT>3a323338300d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"7149c69e-cdba-4f50-9555-e03386ccfccd","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":78}],"http_methods":[{"method":"GET","count":56},{"method":"HEAD","count":17}],"distinct_ports_total":16,"top_paths":[{"path":"/","count":28,"ports":16},{"path":"/.env.local","count":2,"ports":2},{"path":"/.env_1","count":2,"ports":2},{"path":"/pods","count":2,"ports":1},{"path":"/.env.www","count":2,"ports":2},{"path":"/.env.prod.local","count":2,"ports":2},{"path":"/.env.stage","count":2,"ports":2},{"path":"/.env.prod","count":2,"ports":2},{"path":"/api/.env","count":2,"ports":2},{"path":"/.env","count":2,"ports":2},{"path":"/.env.dev","count":2,"ports":2},{"path":"/.env.dev.local","count":2,"ports":2},{"path":"/.env.example","count":2,"ports":2},{"path":"/.env_sample","count":2,"ports":2},{"path":"/.env.backup","count":2,"ports":2}],"distinct_paths_total":25,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Connection","Host","User-Agent"],"representative":[{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:10255","notable":false},{"name":"User-Agent","value":"Mozilla/5.0","notable":false}],"distinct_sets":1,"events_with_headers":9},"tags":[],"data_as_of":"2026-09-30T03:54:41.455903+00:00"}