{"ip":"217.60.97.49","data_as_of":"2026-10-28T02:11:26+00:00","observed":true,"total_events":34,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["45 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 9,016 bytes to few ports with no known exploit path, which is focused interaction with one service.","Counts include 11 interactive session(s) as well as first-packet events."],"engagement":{"level":"payload","label":"Sustained payload","detail":"9,016 bytes sent","bytes_sent":9016,"session_seconds":0,"persistent":false},"basis":"combined"},"first_seen":"2026-10-07T23:10:17","last_seen":"2026-10-27T19:47:50","events_24h":1,"events_7d":11,"interactive_sessions":11,"interactive_sessions_24h":0,"interactive_sessions_7d":4,"interactive_protocols":[{"protocol":"http","sessions":11}],"geo":{"country_code":"AE","country_name":"United Arab Emirates","region":"","city":"","lat":23.75,"lon":54.5,"asn":399486,"org":"12651980 CANADA INC."},"source_domain":"daikima.com","known_scanners":[],"scanner_tag":{"key":"peeringdb:as399486","label":"Virtuo.Host (AS399486)","category":"cdn","url":"https://www.peeringdb.com/asn/399486"},"cve_matches":[],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":11,"first_seen":"2026-10-20T14:27:04","last_seen":"2026-10-24T16:15:31","verdicts":[{"verdict":"scan","sessions":8},{"verdict":"unknown","sessions":3}],"personas":[{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, dlink-dir645@1.03, fortigate@7.2.1","sessions":3},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1","sessions":3},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1, gitlab@19.4.2","sessions":2},{"persona":"nginx@1.24.0, wordpress@6.5.2, leaks@2, miner@bfgminer 5.5.0, elasticsearch@6.8.23, winrm@Windows Server 2016, dlink-dir645@1.01, fortigate@7.0.5, gitlab@19.4.2","sessions":2},{"persona":"nginx@1.24.0, wordpress@6.5.2, leaks@2, miner@bfgminer 5.5.0, elasticsearch@6.8.23, winrm@Windows Server 2016, fortigate@7.0.5","sessions":1}],"services":[{"protocol":"http","port":443,"sessions":6},{"protocol":"http","port":80,"sessions":4},{"protocol":"http","port":8080,"sessions":1}],"logins":[],"commands":[],"downloads":[],"files":[],"attack":[{"technique_id":"T1595","technique_name":"Active Scanning","tactic_id":"TA0043","tactic_name":"Reconnaissance","sessions":8}]},"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":19,"sessions":6},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":9,"sessions":1},{"port":80,"proto":"tcp","label":"HTTP","count":6,"sessions":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i251000_b78ed14e2fd0_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["416eca07dcaad72dec6f76d1277b3eff"],"http_akin":["b11cun050_00060013_3ef9a8f6"],"interactive":{"ssh_hassh":[],"tls_ja4":["t13i251000_b78ed14e2fd0_ab7e3b40a677"],"tls_ja3":["416eca07dcaad72dec6f76d1277b3eff"]}},"fingerprint_peers":{"t13i251000_b78ed14e2fd0_ab7e3b40a677":103,"b11cun050_00060013_3ef9a8f6":162},"akin_families":{},"user_agents":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/125.0","Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/11.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0","Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4.1 Safari/605.1.15","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Mobile/15E148 Safari/604.1","Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 13_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.15","Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.75 Safari/537.36","Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15","Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.6.10","Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0","Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_5; en-us) AppleWebKit/525.25 (KHTML, like Gecko) Version/3.2 Safari/525.25","Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:141.0) Gecko/20100101 Firefox/141.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:103.0) Gecko/20100101 Firefox/103.0"],"timeline":[{"date":"2026-10-07","count":4,"sessions":0},{"date":"2026-10-08","count":4,"sessions":0},{"date":"2026-10-09","count":4,"sessions":0},{"date":"2026-10-10","count":2,"sessions":0},{"date":"2026-10-11","count":1,"sessions":0},{"date":"2026-10-15","count":1,"sessions":0},{"date":"2026-10-16","count":2,"sessions":0},{"date":"2026-10-20","count":4,"sessions":7},{"date":"2026-10-21","count":1,"sessions":0},{"date":"2026-10-22","count":6,"sessions":2},{"date":"2026-10-23","count":2,"sessions":1},{"date":"2026-10-24","count":0,"sessions":1},{"date":"2026-10-25","count":1,"sessions":0},{"date":"2026-10-26","count":1,"sessions":0},{"date":"2026-10-27","count":1,"sessions":0}],"recent_events":[{"timestamp":"2026-10-27T19:47:50","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/11.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e757820693638363b2072763a312e392e362e323029204765636b6f2f2046697265666f782f31312e300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/11.0","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"11d3cd85-81a1-4e2d-a9c6-4ee623e95e4e","seq":1,"duration_ms":100,"bytes_in":180,"bytes_out":77},{"timestamp":"2026-10-26T07:05:56","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31372e33205361666172692f3630352e312e31350d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15","ja3":"","session":"5b96f278-0006-4e90-b91c-7cd4464090db","seq":1,"duration_ms":100,"bytes_in":235,"bytes_out":77},{"timestamp":"2026-10-25T21:59:34","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133342e302e302e30205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"08b27e4c-b62e-4b93-a2fd-440ef23f4606","seq":1,"duration_ms":119,"bytes_in":234,"bytes_out":77},{"timestamp":"2026-10-24T16:15:31","port":80,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203c484f4e4559504f543e0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a38392e3029204765636b6f2f32303130303130312046697265666f782f38392e300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0","ja3":"","session":"be523956-8893-416a-8bfe-70092ec86ae9-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-23T17:47:02","port":8080,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203c484f4e4559504f543e3a383038300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133382e302e302e30205361666172692f3533372e33360d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36","ja3":"","session":"d9782cd7-2d64-43ac-85ed-8d037daaf2f9-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-23T15:30:38","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e757820693638363b2072763a312e392e362e323029204765636b6f2f2046697265666f782f332e362e31350d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.15","ja3":"","session":"ad7b2341-45d5-4658-84b2-124d9dc93eaf","seq":1,"duration_ms":100,"bytes_in":181,"bytes_out":77},{"timestamp":"2026-10-23T01:02:14","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4.1 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31362e342e31205361666172692f3630352e312e31350d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4.1 Safari/605.1.15","ja3":"","session":"4080255b-d421-471a-b750-3955204e6a6b","seq":1,"duration_ms":100,"bytes_in":237,"bytes_out":77},{"timestamp":"2026-10-22T13:54:44","port":443,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:103.0) Gecko/20100101 Firefox/103.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203c484f4e4559504f543e0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130332e3029204765636b6f2f32303130303130312046697265666f782f3130332e300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:103.0) Gecko/20100101 Firefox/103.0","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"1a8db95e-ecc2-41c4-8c70-cbf33aa8c45a-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-22T13:49:15","port":443,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:141.0) Gecko/20100101 Firefox/141.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203c484f4e4559504f543e0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031302e31353b2072763a3134312e3029204765636b6f2f32303130303130312046697265666f782f3134312e300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:141.0) Gecko/20100101 Firefox/141.0","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"a356f04d-a1ed-49b5-a06c-785d3824e864-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-22T10:00:11","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031335f3329204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31362e33205361666172692f3630352e312e31350d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.15","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"c12d8001-e9e6-4076-8859-d156a58c4ba9","seq":1,"duration_ms":154,"bytes_in":232,"bytes_out":77}],"http_methods":[{"method":"GET","count":42}],"distinct_ports_total":3,"top_paths":[{"path":"/","count":42,"ports":3}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Charset","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Charset","value":"utf-8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/11.0","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[]}