{"ip":"209.38.41.149","data_as_of":"2026-10-20T15:11:39+00:00","observed":true,"total_events":240,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"94+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 94 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range.","Counts include 504 interactive session(s) as well as first-packet events."],"engagement":{"level":"payload","label":"Sustained payload","detail":"74,926 bytes sent","bytes_sent":74926,"session_seconds":30,"persistent":false},"basis":"combined"},"first_seen":"2026-10-16T00:05:35","last_seen":"2026-10-16T00:06:09","events_24h":0,"events_7d":240,"interactive_sessions":504,"interactive_sessions_24h":0,"interactive_sessions_7d":504,"interactive_protocols":[{"protocol":"http","sessions":71},{"protocol":"tls","sessions":57},{"protocol":"redis","sessions":30},{"protocol":"stratum","sessions":8},{"protocol":"winbox","sessions":8}],"geo":{"country_code":"NL","country_name":"The Netherlands","region":"North Holland","city":"Amsterdam","lat":52.352,"lon":4.9392,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":504,"first_seen":"2026-10-16T00:05:35","last_seen":"2026-10-16T00:06:09","verdicts":[{"verdict":"unknown","sessions":297},{"verdict":"scan","sessions":207}],"personas":[{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1","sessions":63},{"persona":"redis@6.2.14","sessions":30},{"persona":"miner@cgminer 4.11.1","sessions":8},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, dlink-dir645@1.03, fortigate@7.2.1","sessions":8},{"persona":"mikrotik@6.49.10","sessions":8}],"services":[{"protocol":"tls","port":8453,"sessions":11},{"protocol":"tcp","port":8089,"sessions":10},{"protocol":"http","port":8004,"sessions":10},{"protocol":"tcp","port":8092,"sessions":10},{"protocol":"http","port":8453,"sessions":10},{"protocol":"tcp","port":8010,"sessions":10},{"protocol":"tcp","port":8069,"sessions":10},{"protocol":"tcp","port":8002,"sessions":10},{"protocol":"http","port":8445,"sessions":10},{"protocol":"http","port":8021,"sessions":10},{"protocol":"http","port":8098,"sessions":9},{"protocol":"tcp","port":8000,"sessions":9}],"logins":[],"commands":[],"downloads":[],"files":[],"attack":[{"technique_id":"T1595","technique_name":"Active Scanning","tactic_id":"TA0043","tactic_name":"Reconnaissance","sessions":207}]},"top_ports":[{"port":8453,"proto":"tcp","label":"TLS","count":0,"sessions":22},{"port":8058,"proto":"tcp","label":"","count":6,"sessions":9},{"port":8190,"proto":"tcp","label":"","count":6,"sessions":8},{"port":8188,"proto":"tcp","label":"","count":6,"sessions":8},{"port":7773,"proto":"tcp","label":"","count":6,"sessions":8},{"port":7171,"proto":"tcp","label":"","count":6,"sessions":8},{"port":8300,"proto":"tcp","label":"","count":6,"sessions":7},{"port":8445,"proto":"tcp","label":"HTTP","count":0,"sessions":11},{"port":8010,"proto":"tcp","label":"","count":0,"sessions":10},{"port":8004,"proto":"tcp","label":"HTTP","count":0,"sessions":10},{"port":8002,"proto":"tcp","label":"","count":0,"sessions":10},{"port":8092,"proto":"tcp","label":"","count":0,"sessions":10},{"port":8021,"proto":"tcp","label":"HTTP","count":0,"sessions":10},{"port":8069,"proto":"tcp","label":"","count":0,"sessions":10},{"port":8089,"proto":"tcp","label":"Splunk","count":0,"sessions":10}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9","t13i1909h2_9dc949149365_97f8aa674fd9","t12d3511h9_66c735deec94_52c4d8bb91c9","t12d6912h9_ea0618708e31_1da015a32102","t12d6912hq_ea0618708e31_1da015a32102"],"tls_client_hello":"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","tls_ja3":["5af43e5eee17271a9eb37dce2ab407a8","e5c250b292fce278a62137836169e18f","013c30c8ce44c8b27e9ceb2a14db7283","03a3ad27040f733ee5c9915e0903d028","db8d4ad49cb378fa370b43a61a9b06b6"],"http_akin":["b11cun040_00040016_aa48e2c8"],"interactive":{"ssh_hassh":[],"tls_ja4":["t12d3511h9_66c735deec94_52c4d8bb91c9","t12d6912h9_ea0618708e31_1da015a32102","t12d6912hq_ea0618708e31_1da015a32102","t13i190800_9dc949149365_97f8aa674fd9","t13i1909h2_9dc949149365_97f8aa674fd9"],"tls_ja3":["013c30c8ce44c8b27e9ceb2a14db7283","03a3ad27040f733ee5c9915e0903d028","5af43e5eee17271a9eb37dce2ab407a8","db8d4ad49cb378fa370b43a61a9b06b6","e5c250b292fce278a62137836169e18f"]}},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":3161,"t13i1909h2_9dc949149365_97f8aa674fd9":770,"t12d3511h9_66c735deec94_52c4d8bb91c9":0,"t12d6912h9_ea0618708e31_1da015a32102":0,"t12d6912hq_ea0618708e31_1da015a32102":0,"b11cun040_00040016_aa48e2c8":5486},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-16","count":240,"sessions":504}],"recent_events":[{"timestamp":"2026-10-16T00:06:04","port":8300,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8300\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a383330300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"e31c1b70-2051-4dbb-926e-32617e68e031","seq":1,"duration_ms":112,"bytes_in":218,"bytes_out":78},{"timestamp":"2026-10-16T00:06:04","port":7443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:7443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a373434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"e0f0f4c3-436c-4001-ac10-10d5b588ed78","seq":1,"duration_ms":101,"bytes_in":218,"bytes_out":78},{"timestamp":"2026-10-16T00:06:04","port":7989,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:7989\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a373938390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"d85bfecf-a140-447e-b0ab-e5334b685530","seq":1,"duration_ms":103,"bytes_in":218,"bytes_out":78},{"timestamp":"2026-10-16T00:06:04","port":8300,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8300\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.well-known/security.txt","summary":"","payload_hex":"474554202f2e77656c6c2d6b6e6f776e2f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a383330300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"b958b37a-3e1d-467c-8237-05fadb95e479","seq":1,"duration_ms":100,"bytes_in":230,"bytes_out":78},{"timestamp":"2026-10-16T00:06:04","port":8300,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8300\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a383330300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"06e2756b-32e7-4e7e-9c6b-5a854657e56b","seq":1,"duration_ms":100,"bytes_in":216,"bytes_out":78},{"timestamp":"2026-10-16T00:06:04","port":8300,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8300\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383330300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"52210009-8cbe-4b65-af2c-8df3ef8b938a","seq":1,"duration_ms":101,"bytes_in":217,"bytes_out":78},{"timestamp":"2026-10-16T00:06:04","port":8444,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8444\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a383434340d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"3230cdaf-1df2-42de-a073-f2fbfbc63cff","seq":1,"duration_ms":100,"bytes_in":218,"bytes_out":78},{"timestamp":"2026-10-16T00:06:04","port":7657,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:7657\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a373635370d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"6d418192-fab9-4bec-91f2-4462d3e05b86","seq":1,"duration_ms":101,"bytes_in":218,"bytes_out":78},{"timestamp":"2026-10-16T00:06:04","port":7775,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:7775\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a373737350d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"fac67691-338e-4f8e-8120-b99687a56590","seq":1,"duration_ms":100,"bytes_in":218,"bytes_out":78},{"timestamp":"2026-10-16T00:06:04","port":8104,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8104\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a383130340d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"5d2633f4-d89b-448b-ba7e-ad1dd498c131","seq":1,"duration_ms":100,"bytes_in":218,"bytes_out":78}],"http_methods":[{"method":"GET","count":171}],"distinct_ports_total":94,"top_paths":[{"path":"/","count":39,"ports":39},{"path":"/favicon.ico","count":36,"ports":36},{"path":"/robots.txt","count":31,"ports":31},{"path":"/.well-known/security.txt","count":29,"ports":29},{"path":"/security.txt","count":27,"ports":27},{"path":"/favicon","count":5,"ports":5},{"path":"/.well-known/robots.txt","count":4,"ports":4}],"distinct_paths_total":7,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":97}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:8300","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[]}