{"ip":"212.124.5.53","total_events":47,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["47 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 36,505 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"36,505 bytes sent","bytes_sent":36505,"session_seconds":1,"persistent":false}},"first_seen":"2026-09-20T10:48:10","last_seen":"2026-09-20T10:48:11","events_24h":0,"events_7d":47,"geo":{"country_code":"RU","country_name":"Russia","region":"Ivanovo Oblast","city":"Ivanovo","lat":57.0006,"lon":40.972,"asn":12389,"org":"Rostelecom"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as12389","label":"Rostelecom","category":"isp","url":"https://www.peeringdb.com/asn/12389"},"cve_matches":[],"malware":[],"top_ports":[{"port":90,"proto":"tcp","label":"","count":6},{"port":8888,"proto":"tcp","label":"HTTP-alt","count":6},{"port":37777,"proto":"tcp","label":"","count":6},{"port":9000,"proto":"tcp","label":"Web-alt","count":6},{"port":3000,"proto":"tcp","label":"Web-alt","count":6},{"port":8001,"proto":"tcp","label":"","count":6},{"port":8085,"proto":"tcp","label":"","count":6},{"port":91,"proto":"tcp","label":"","count":5}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[]},"fingerprint_peers":{},"user_agents":["Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5"],"timeline":[{"date":"2026-09-20","count":47}],"recent_events":[{"timestamp":"2026-09-20T10:48:11","port":9000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9000\",\"user-agent\":\"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/image/lgbg.jpg","summary":"","payload_hex":"474554202f696d6167652f6c6762672e6a706720485454502f312e310d0a486f73743a20<HONEYPOT>3a393030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f77733b20553b2057696e646f7773204e5420362e313b20656e2d55533b2072763a312e392e32623129204765636b6f2f32303039313031342046697265666f782f332e36623120475442350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5","ja3":"","session":"ac71a987-da15-4470-9ef7-b8e9f2335e8b","seq":6,"duration_ms":941,"bytes_in":1372,"bytes_out":462},{"timestamp":"2026-09-20T10:48:11","port":37777,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:37777\",\"user-agent\":\"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/image/lgbg.jpg","summary":"","payload_hex":"474554202f696d6167652f6c6762672e6a706720485454502f312e310d0a486f73743a20<HONEYPOT>3a33373737370d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f77733b20553b2057696e646f7773204e5420362e313b20656e2d55533b2072763a312e392e32623129204765636b6f2f32303039313031342046697265666f782f332e36623120475442350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5","ja3":"","session":"74494878-c9ee-42e0-903a-02e7d057b5b3","seq":6,"duration_ms":980,"bytes_in":1378,"bytes_out":462},{"timestamp":"2026-09-20T10:48:11","port":8001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8001\",\"user-agent\":\"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/image/lgbg.jpg","summary":"","payload_hex":"474554202f696d6167652f6c6762672e6a706720485454502f312e310d0a486f73743a20<HONEYPOT>3a383030310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f77733b20553b2057696e646f7773204e5420362e313b20656e2d55533b2072763a312e392e32623129204765636b6f2f32303039313031342046697265666f782f332e36623120475442350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5","ja3":"","session":"6162ce78-521d-465a-ae65-bb79fde5d640","seq":6,"duration_ms":996,"bytes_in":1372,"bytes_out":462},{"timestamp":"2026-09-20T10:48:11","port":8085,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8085\",\"user-agent\":\"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/image/lgbg.jpg","summary":"","payload_hex":"474554202f696d6167652f6c6762672e6a706720485454502f312e310d0a486f73743a20<HONEYPOT>3a383038350d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f77733b20553b2057696e646f7773204e5420362e313b20656e2d55533b2072763a312e392e32623129204765636b6f2f32303039313031342046697265666f782f332e36623120475442350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5","ja3":"","session":"3a679486-f486-4737-8005-c7b37595eac0","seq":6,"duration_ms":938,"bytes_in":1372,"bytes_out":462},{"timestamp":"2026-09-20T10:48:11","port":90,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:90\",\"user-agent\":\"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/image/lgbg.jpg","summary":"","payload_hex":"474554202f696d6167652f6c6762672e6a706720485454502f312e310d0a486f73743a20<HONEYPOT>3a39300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f77733b20553b2057696e646f7773204e5420362e313b20656e2d55533b2072763a312e392e32623129204765636b6f2f32303039313031342046697265666f782f332e36623120475442350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5","ja3":"","session":"cc660cdf-7a87-4cb8-9d5b-b5945e3e33ab","seq":6,"duration_ms":934,"bytes_in":1360,"bytes_out":462},{"timestamp":"2026-09-20T10:48:11","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/image/lgbg.jpg","summary":"","payload_hex":"474554202f696d6167652f6c6762672e6a706720485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f77733b20553b2057696e646f7773204e5420362e313b20656e2d55533b2072763a312e392e32623129204765636b6f2f32303039313031342046697265666f782f332e36623120475442350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5","ja3":"","session":"63356c69-3b66-4a0c-b731-b48f7154bde3","seq":6,"duration_ms":944,"bytes_in":1372,"bytes_out":462},{"timestamp":"2026-09-20T10:48:11","port":8888,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8888\",\"user-agent\":\"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/image/lgbg.jpg","summary":"","payload_hex":"474554202f696d6167652f6c6762672e6a706720485454502f312e310d0a486f73743a20<HONEYPOT>3a383838380d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f77733b20553b2057696e646f7773204e5420362e313b20656e2d55533b2072763a312e392e32623129204765636b6f2f32303039313031342046697265666f782f332e36623120475442350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5","ja3":"","session":"6ece91b6-c391-46f4-8f82-1d9ef20c71a6","seq":6,"duration_ms":895,"bytes_in":1372,"bytes_out":462},{"timestamp":"2026-09-20T10:48:11","port":91,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:91\",\"user-agent\":\"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/image/lgbg.jpg","summary":"","payload_hex":"474554202f696d6167652f6c6762672e6a706720485454502f312e310d0a486f73743a20<HONEYPOT>3a39310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f77733b20553b2057696e646f7773204e5420362e313b20656e2d55533b2072763a312e392e32623129204765636b6f2f32303039313031342046697265666f782f332e36623120475442350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5","ja3":"","session":"fb2b38bf-07db-41f9-8f32-07b602445201","seq":5,"duration_ms":804,"bytes_in":1138,"bytes_out":385},{"timestamp":"2026-09-20T10:48:11","port":9000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9000\",\"user-agent\":\"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/skin/default_1/images/logo.png","summary":"","payload_hex":"474554202f736b696e2f64656661756c745f312f696d616765732f6c6f676f2e706e6720485454502f312e310d0a486f73743a20<HONEYPOT>3a393030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f77733b20553b2057696e646f7773204e5420362e313b20656e2d55533b2072763a312e392e32623129204765636b6f2f32303039313031342046697265666f782f332e36623120475442350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5","ja3":"","session":"ac71a987-da15-4470-9ef7-b8e9f2335e8b","seq":5,"duration_ms":776,"bytes_in":1143,"bytes_out":385},{"timestamp":"2026-09-20T10:48:11","port":37777,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:37777\",\"user-agent\":\"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/skin/default_1/images/logo.png","summary":"","payload_hex":"474554202f736b696e2f64656661756c745f312f696d616765732f6c6f676f2e706e6720485454502f312e310d0a486f73743a20<HONEYPOT>3a33373737370d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f77733b20553b2057696e646f7773204e5420362e313b20656e2d55533b2072763a312e392e32623129204765636b6f2f32303039313031342046697265666f782f332e36623120475442350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5","ja3":"","session":"74494878-c9ee-42e0-903a-02e7d057b5b3","seq":5,"duration_ms":804,"bytes_in":1148,"bytes_out":385}],"http_methods":[{"method":"GET","count":47}],"distinct_ports_total":8,"top_paths":[{"path":"/","count":8,"ports":8},{"path":"/image/lgbg.jpg","count":8,"ports":8},{"path":"/favicon.ico","count":8,"ports":8},{"path":"/nobody/favicon.ico","count":8,"ports":8},{"path":"/skin/default_1/images/logo.png","count":8,"ports":8},{"path":"/login.rsp","count":7,"ports":7}],"distinct_paths_total":6,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:9000","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b1) Gecko/20091014 Firefox/3.6b1 GTB5","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-22T04:37:58.979388+00:00"}