{"ip":"216.226.78.30","total_events":58,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"27+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 27 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"16,796 bytes sent","bytes_sent":16796,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-24T14:37:37","last_seen":"2026-09-28T16:19:15","events_24h":17,"events_7d":58,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":50219,"org":"Valence Technology Co."},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":20000,"proto":"tcp","label":"","count":4},{"port":10011,"proto":"tcp","label":"","count":4},{"port":2202,"proto":"tcp","label":"","count":3},{"port":10001,"proto":"tcp","label":"","count":3},{"port":1723,"proto":"tcp","label":"PPTP","count":3},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":2},{"port":26,"proto":"tcp","label":"","count":2},{"port":5357,"proto":"tcp","label":"","count":2},{"port":8889,"proto":"tcp","label":"","count":2},{"port":1900,"proto":"tcp","label":"","count":2},{"port":8093,"proto":"tcp","label":"","count":2},{"port":10443,"proto":"tcp","label":"","count":2},{"port":5800,"proto":"tcp","label":"VNC-HTTP","count":2},{"port":888,"proto":"tcp","label":"","count":2},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":2}],"fingerprints":{"ssh_hassh":["9052c4ab4164c78256e71143dcfc7eac"],"tls_ja4":["t13i3012h2_1d37bd780c83_8537cf56674e","t13i190900_9dc949149365_18e8a06d9b2d","t13i150900_8daaf6152771_18e8a06d9b2d"],"tls_client_hello":"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","tls_ja3":["47d7390b9f272110a0418056b344d65f","02fc9e6401d2c8c1bf8f91bd21b8e17e","7587a1ac9a4f17b4e4e5fe226716f4df"],"http_akin":["a11cun030_00000049_54d07b6d","a11cun040_0000004d_aa48e2c8"]},"fingerprint_peers":{"a11cun030_00000049_54d07b6d":2476,"a11cun040_0000004d_aa48e2c8":3281,"t13i3012h2_1d37bd780c83_8537cf56674e":22,"t13i150900_8daaf6152771_18e8a06d9b2d":26,"t13i190900_9dc949149365_18e8a06d9b2d":18,"9052c4ab4164c78256e71143dcfc7eac":83},"akin_families":{"a11cun030_00000049_54d07b6d":{"head":"a11cun030_00000049_54d07b6d","shapes":3,"ips":2479},"a11cun040_0000004d_aa48e2c8":{"head":"a11cun040_0000004d_aa48e2c8","shapes":4,"ips":3286}},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-24","count":16},{"date":"2026-09-25","count":17},{"date":"2026-09-26","count":7},{"date":"2026-09-27","count":3},{"date":"2026-09-28","count":15}],"recent_events":[{"timestamp":"2026-09-28T16:19:15","port":8889,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:8889\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383838390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3135332e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","ja3":"7587a1ac9a4f17b4e4e5fe226716f4df","session":"e12bf6d9-bbd0-43c1-91f3-78c935ed77fb","seq":1,"duration_ms":100,"bytes_in":193,"bytes_out":78},{"timestamp":"2026-09-28T16:18:57","port":8889,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8889\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383838390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3135332e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","ja3":"02fc9e6401d2c8c1bf8f91bd21b8e17e","session":"0fd35987-06e8-4447-ab08-cba68660a8ca","seq":1,"duration_ms":100,"bytes_in":205,"bytes_out":78},{"timestamp":"2026-09-28T14:33:43","port":10001,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:10001\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303030310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3135332e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","ja3":"7587a1ac9a4f17b4e4e5fe226716f4df","session":"da7ae3ba-73fa-410e-9087-8e35a1e70514","seq":1,"duration_ms":100,"bytes_in":194,"bytes_out":78},{"timestamp":"2026-09-28T14:33:00","port":10001,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:10001\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303030310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3135332e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","ja3":"02fc9e6401d2c8c1bf8f91bd21b8e17e","session":"5876ccea-ad96-401e-98fc-dfc82103c34f","seq":1,"duration_ms":100,"bytes_in":206,"bytes_out":78},{"timestamp":"2026-09-28T14:17:24","port":10001,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u7\r\n\u0000\u0000\u0007�\f\u0014�e_\u001a�H\u001dI�VȚ���k\u0000\u0000\u0001�curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c\u0000\u0000\u0003\u0017rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dss,ssh-ed25519,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dss,ssh-ed25519\u0000\u0000\u0001=aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc\u0000\u0000\u0001=aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc\u0000\u0000\u0000Bhmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000Bhmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000|�\u0013��\u0014Y�ϴ�H","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"aec7f501-2245-4802-8035-ea5cbf3203f8","seq":1,"duration_ms":360,"bytes_in":2072,"bytes_out":13,"enriched":{"digest":"f92183d80b9c17da","label":"SSH","strings":["SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u7","curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nist…","rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert…","=aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,…","Bhmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96","none","none|"],"iocs":{"domains":["libssh.org","openssh.com"]}}},{"timestamp":"2026-09-28T10:20:06","port":5986,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:5986\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353938360d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3135332e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","ja3":"7587a1ac9a4f17b4e4e5fe226716f4df","session":"14bf1ad5-8c33-44b8-abba-60d2b873a699","seq":1,"duration_ms":100,"bytes_in":193,"bytes_out":78},{"timestamp":"2026-09-28T10:19:45","port":5986,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:5986\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353938360d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3135332e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","ja3":"02fc9e6401d2c8c1bf8f91bd21b8e17e","session":"148bf8c5-0089-4fb4-a172-adce6b005267","seq":1,"duration_ms":100,"bytes_in":205,"bytes_out":78},{"timestamp":"2026-09-28T10:00:30","port":26,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:26\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32360d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3135332e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","ja3":"7587a1ac9a4f17b4e4e5fe226716f4df","session":"a7ac51a6-64b3-4dfa-84c5-85203a316866","seq":1,"duration_ms":100,"bytes_in":191,"bytes_out":78},{"timestamp":"2026-09-28T10:00:06","port":26,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:26\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32360d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3135332e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","ja3":"02fc9e6401d2c8c1bf8f91bd21b8e17e","session":"c2d619e7-2676-46e3-898d-38ca05e9678b","seq":1,"duration_ms":100,"bytes_in":203,"bytes_out":78},{"timestamp":"2026-09-28T09:08:42","port":888,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:888\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3838380d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3135332e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","ja3":"","session":"d16f8b72-1c88-479d-8577-a1d40713e705","seq":1,"duration_ms":101,"bytes_in":191,"bytes_out":78}],"http_methods":[{"method":"GET","count":52}],"distinct_ports_total":27,"top_paths":[{"path":"/","count":26,"ports":24},{"path":"/favicon.ico","count":26,"ports":24}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":18}],"banners":[{"value":"SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u7","count":3}],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:8889","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36","notable":false}],"distinct_sets":2,"events_with_headers":9},"tags":[],"data_as_of":"2026-09-28T21:34:42.021579+00:00"}