{"ip":"216.226.78.20","total_events":61,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"28+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 28 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"28,631 bytes sent","bytes_sent":28631,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-25T00:15:14","last_seen":"2026-09-28T20:02:51","events_24h":18,"events_7d":61,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":50219,"org":"Valence Technology Co."},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":23,"proto":"tcp","label":"Telnet","count":4},{"port":5656,"proto":"tcp","label":"","count":3},{"port":8822,"proto":"tcp","label":"","count":3},{"port":2332,"proto":"tcp","label":"","count":3},{"port":24442,"proto":"tcp","label":"","count":3},{"port":6001,"proto":"tcp","label":"","count":3},{"port":1022,"proto":"tcp","label":"","count":3},{"port":1337,"proto":"tcp","label":"","count":3},{"port":143,"proto":"tcp","label":"IMAP","count":2},{"port":8004,"proto":"tcp","label":"","count":2},{"port":89,"proto":"tcp","label":"","count":2},{"port":8099,"proto":"tcp","label":"","count":2},{"port":8084,"proto":"tcp","label":"","count":2},{"port":9092,"proto":"tcp","label":"Kafka","count":2},{"port":9090,"proto":"tcp","label":"Prometheus","count":2}],"fingerprints":{"ssh_hassh":["9052c4ab4164c78256e71143dcfc7eac"],"tls_ja4":["t13i3012h2_1d37bd780c83_8537cf56674e","t13i190900_9dc949149365_18e8a06d9b2d","t13i150900_8daaf6152771_18e8a06d9b2d"],"tls_client_hello":"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","tls_ja3":["47d7390b9f272110a0418056b344d65f","02fc9e6401d2c8c1bf8f91bd21b8e17e","7587a1ac9a4f17b4e4e5fe226716f4df"],"http_akin":["a11cun030_00000049_54d07b6d","a11cun040_0000004d_aa48e2c8"]},"fingerprint_peers":{"t13i3012h2_1d37bd780c83_8537cf56674e":22,"t13i190900_9dc949149365_18e8a06d9b2d":18,"t13i150900_8daaf6152771_18e8a06d9b2d":26,"9052c4ab4164c78256e71143dcfc7eac":83,"a11cun030_00000049_54d07b6d":2469,"a11cun040_0000004d_aa48e2c8":3281},"akin_families":{"a11cun030_00000049_54d07b6d":{"head":"a11cun030_00000049_54d07b6d","shapes":3,"ips":2473},"a11cun040_0000004d_aa48e2c8":{"head":"a11cun040_0000004d_aa48e2c8","shapes":4,"ips":3280}},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-25","count":10},{"date":"2026-09-26","count":20},{"date":"2026-09-27","count":15},{"date":"2026-09-28","count":16}],"recent_events":[{"timestamp":"2026-09-28T20:02:51","port":47001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:47001\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34373030310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3135332e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","ja3":"","session":"1b88169c-1883-4030-88b1-d45ad8e8d97f","seq":1,"duration_ms":100,"bytes_in":194,"bytes_out":78},{"timestamp":"2026-09-28T20:02:25","port":47001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:47001\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34373030310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3135332e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","ja3":"","session":"4720b050-cc81-473a-8454-52c6a46f2ff0","seq":1,"duration_ms":100,"bytes_in":206,"bytes_out":78},{"timestamp":"2026-09-28T19:30:47","port":1022,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:1022\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313032320d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3135332e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","ja3":"7587a1ac9a4f17b4e4e5fe226716f4df","session":"48658f11-ef56-4f0e-8b12-e6056d90765d","seq":1,"duration_ms":100,"bytes_in":193,"bytes_out":78},{"timestamp":"2026-09-28T19:30:23","port":1022,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1022\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313032320d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3135332e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","ja3":"02fc9e6401d2c8c1bf8f91bd21b8e17e","session":"687c79b8-7ac0-4c84-b73e-f66b80e208f6","seq":1,"duration_ms":100,"bytes_in":205,"bytes_out":78},{"timestamp":"2026-09-28T19:14:42","port":1022,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u7\r\n\u0000\u0000\u0007�\f\u0014�a��KI��\u001a��Hl���\u0000\u0000\u0001�curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c\u0000\u0000\u0003\u0017rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dss,ssh-ed25519,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dss,ssh-ed25519\u0000\u0000\u0001=aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc\u0000\u0000\u0001=aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc\u0000\u0000\u0000Bhmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000Bhmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�}��\u0013��}��N�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"40fa3ae1-3b83-4ba5-b7ac-da130694167a","seq":1,"duration_ms":354,"bytes_in":2072,"bytes_out":13,"enriched":{"digest":"df3c84381cff1390","label":"SSH","strings":["SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u7","curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nist…","rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert…","=aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,…","Bhmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96","none"],"iocs":{"domains":["libssh.org","openssh.com"]}}},{"timestamp":"2026-09-28T19:02:25","port":23,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:23\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3135332e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","ja3":"","session":"ea9da327-1559-4411-a302-213d505036ed","seq":1,"duration_ms":100,"bytes_in":203,"bytes_out":12},{"timestamp":"2026-09-28T18:46:56","port":23,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:23\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3135332e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","ja3":"02fc9e6401d2c8c1bf8f91bd21b8e17e","session":"6e982906-9dbb-4c39-aa04-9bf5ce854e95","seq":1,"duration_ms":100,"bytes_in":203,"bytes_out":12},{"timestamp":"2026-09-28T15:53:08","port":23,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:23\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3135332e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","ja3":"","session":"b336ac01-4f46-4c64-a518-ff48fc02f7b1","seq":1,"duration_ms":100,"bytes_in":202,"bytes_out":12},{"timestamp":"2026-09-28T15:52:01","port":2083,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","ja3":"","session":"faab8125-8a86-4819-8ceb-c91cab8a7b50","seq":1,"duration_ms":101,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-09-28T15:37:37","port":23,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:23\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3135332e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","ja3":"02fc9e6401d2c8c1bf8f91bd21b8e17e","session":"6ab53334-bb0b-4ab0-aea3-92314e74183f","seq":1,"duration_ms":100,"bytes_in":202,"bytes_out":12}],"http_methods":[{"method":"GET","count":50}],"distinct_ports_total":28,"top_paths":[{"path":"/","count":28,"ports":24},{"path":"/favicon.ico","count":22,"ports":22}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":13}],"banners":[{"value":"SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u7","count":9}],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:47001","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","notable":false}],"distinct_sets":2,"events_with_headers":8},"tags":[],"data_as_of":"2026-09-28T20:50:16.759161+00:00"}