{"ip":"3.129.187.38","total_events":65014,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"visionheight","confidence":"high","network_type":"enterprise","why":["Source IP is in a known scanner range (visionheight).","Known research and commercial scanners are labelled as such, not as threats."]},"first_seen":"2026-02-17T04:35:41","last_seen":"2026-07-04T23:09:20","events_24h":163,"events_7d":1435,"geo":{"country_code":"US","country_name":"United States","region":"Ohio","city":"Columbus","lat":39.9587,"lon":-82.9987,"asn":16509,"org":"Amazon.com, Inc."},"source_domain":"scan.visionheight.com","known_scanners":["visionheight","VisionHeight"],"scanner_tag":{"key":"visionheight","label":"VisionHeight","category":"research","url":"https://visionheight.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":5678,"proto":"tcp","label":"","count":574},{"port":445,"proto":"tcp","label":"SMB","count":528},{"port":6379,"proto":"tcp","label":"Redis","count":516},{"port":8086,"proto":"tcp","label":"InfluxDB","count":505},{"port":4443,"proto":"tcp","label":"","count":502},{"port":27017,"proto":"tcp","label":"MongoDB","count":501},{"port":10080,"proto":"tcp","label":"","count":486},{"port":5432,"proto":"tcp","label":"Postgres","count":483},{"port":1701,"proto":"tcp","label":"","count":470},{"port":8200,"proto":"tcp","label":"","count":457},{"port":19000,"proto":"tcp","label":"","count":456},{"port":58000,"proto":"tcp","label":"","count":452},{"port":53,"proto":"tcp","label":"DNS","count":451},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":448},{"port":30002,"proto":"tcp","label":"","count":436}],"fingerprints":{"ssh_hassh":["e54ef3ec27fe1fea7ab64d3fa05359fd","084386fa7ae5039bcf6f07298a05a227"],"tls_ja4":["t12i130500_2d7513195f68_e51b7354d87f","t13i1909h2_9dc949149365_97f8aa674fd9"],"tls_ja3":["7c1e207beb00684bbbe144f1b0abe1d5"],"ja4h":["ge11nn0400_88d30a62b7ad","po11nn0600_ed383ed8462e"]},"fingerprint_peers":{"t13i1909h2_9dc949149365_97f8aa674fd9":1616,"t12i130500_2d7513195f68_e51b7354d87f":2390,"po11nn0600_ed383ed8462e":331,"ge11nn0400_88d30a62b7ad":7832,"e54ef3ec27fe1fea7ab64d3fa05359fd":303,"084386fa7ae5039bcf6f07298a05a227":606},"user_agents":["Mozilla/5.0 zgrab/0.x","visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-04-06","count":306},{"date":"2026-04-07","count":652},{"date":"2026-04-08","count":551},{"date":"2026-04-09","count":869},{"date":"2026-04-10","count":742},{"date":"2026-04-11","count":304},{"date":"2026-04-12","count":376},{"date":"2026-04-13","count":884},{"date":"2026-04-14","count":729},{"date":"2026-04-15","count":626},{"date":"2026-04-16","count":927},{"date":"2026-04-17","count":792},{"date":"2026-04-18","count":571},{"date":"2026-04-19","count":693},{"date":"2026-04-20","count":646},{"date":"2026-04-21","count":799},{"date":"2026-04-22","count":852},{"date":"2026-04-23","count":1036},{"date":"2026-04-24","count":831},{"date":"2026-04-25","count":964},{"date":"2026-04-26","count":1277},{"date":"2026-04-27","count":493},{"date":"2026-04-28","count":343},{"date":"2026-04-29","count":727},{"date":"2026-04-30","count":606},{"date":"2026-05-01","count":564},{"date":"2026-05-02","count":591},{"date":"2026-05-03","count":381},{"date":"2026-05-04","count":397},{"date":"2026-05-05","count":383},{"date":"2026-05-06","count":272},{"date":"2026-05-07","count":339},{"date":"2026-05-08","count":499},{"date":"2026-05-09","count":486},{"date":"2026-05-10","count":440},{"date":"2026-05-11","count":451},{"date":"2026-05-12","count":167},{"date":"2026-05-13","count":404},{"date":"2026-05-14","count":505},{"date":"2026-05-15","count":445},{"date":"2026-05-16","count":294},{"date":"2026-05-17","count":398},{"date":"2026-05-18","count":322},{"date":"2026-05-19","count":386},{"date":"2026-05-20","count":278},{"date":"2026-05-21","count":397},{"date":"2026-05-22","count":325},{"date":"2026-05-23","count":133},{"date":"2026-05-24","count":140},{"date":"2026-06-16","count":103},{"date":"2026-06-17","count":478},{"date":"2026-06-18","count":398},{"date":"2026-06-19","count":402},{"date":"2026-06-20","count":435},{"date":"2026-06-21","count":403},{"date":"2026-06-22","count":351},{"date":"2026-06-23","count":341},{"date":"2026-06-24","count":463},{"date":"2026-06-25","count":499},{"date":"2026-06-26","count":539},{"date":"2026-06-27","count":211},{"date":"2026-06-28","count":376},{"date":"2026-06-29","count":320},{"date":"2026-06-30","count":299},{"date":"2026-07-01","count":157},{"date":"2026-07-02","count":223},{"date":"2026-07-04","count":163}],"recent_events":[{"timestamp":"2026-07-04T23:09:20","port":1701,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1701\",\"user-agent\":\"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313730310d0a557365722d4167656e743a20766973696f6e6865696768742e636f6d2f7363616e204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36","community_id":"1:yzaK11UqbfDgl6TP4IysNyU+N6M=","ja3":"7c1e207beb00684bbbe144f1b0abe1d5","session":"f4136c34-73ac-4f50-951d-bba99f43d94d","seq":1,"duration_ms":100,"bytes_in":195,"bytes_out":77},{"timestamp":"2026-07-04T23:06:56","port":1701,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1701\",\"user-agent\":\"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313730310d0a557365722d4167656e743a20766973696f6e6865696768742e636f6d2f7363616e204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36","community_id":"1:E0AtBGapks/Uqt3LIWHIQXKnkKY=","ja3":"","session":"879461d5-91b9-4b0e-9305-7f2f3b1bc140","seq":1,"duration_ms":101,"bytes_in":195,"bytes_out":77},{"timestamp":"2026-07-04T23:06:45","port":1701,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1701\",\"user-agent\":\"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313730310d0a557365722d4167656e743a20766973696f6e6865696768742e636f6d2f7363616e204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36","community_id":"1:uomM1/17yVZUOxPZ0dFQtUQBEeg=","ja3":"","session":"dbdbf6f1-6ad3-4d5f-8040-9d04766f5c75","seq":1,"duration_ms":100,"bytes_in":195,"bytes_out":77},{"timestamp":"2026-07-04T22:57:03","port":8084,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8084\",\"user-agent\":\"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038340d0a557365722d4167656e743a20766973696f6e6865696768742e636f6d2f7363616e204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36","community_id":"1:CKpqMc1CrHwT4XmBagX6e1DD45k=","ja3":"7c1e207beb00684bbbe144f1b0abe1d5","session":"feb92479-bb09-4bef-8a29-a3823afdff9d","seq":1,"duration_ms":100,"bytes_in":193,"bytes_out":77},{"timestamp":"2026-07-04T22:56:56","port":8084,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8084\",\"user-agent\":\"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038340d0a557365722d4167656e743a20766973696f6e6865696768742e636f6d2f7363616e204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36","community_id":"1:PAcL+c8bKfopYON0bEdiVYxvXuw=","ja3":"7c1e207beb00684bbbe144f1b0abe1d5","session":"5643887a-9382-4924-93f6-73f3d901c013","seq":1,"duration_ms":100,"bytes_in":193,"bytes_out":77},{"timestamp":"2026-07-04T22:56:56","port":8084,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8084\",\"user-agent\":\"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038340d0a557365722d4167656e743a20766973696f6e6865696768742e636f6d2f7363616e204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36","community_id":"1:jd73PECqPeQwb5NXFAgLdRC4xJk=","ja3":"7c1e207beb00684bbbe144f1b0abe1d5","session":"8a20d45a-be65-49df-a0c3-e2b2ee930db9","seq":1,"duration_ms":100,"bytes_in":194,"bytes_out":77},{"timestamp":"2026-07-04T22:55:34","port":8084,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8084\",\"user-agent\":\"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038340d0a557365722d4167656e743a20766973696f6e6865696768742e636f6d2f7363616e204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36","community_id":"1:xQlXUupq07iD+3eODyERXmo719I=","ja3":"","session":"d9506641-8d4c-4eaf-ae2c-0272e5d4f338","seq":1,"duration_ms":100,"bytes_in":193,"bytes_out":77},{"timestamp":"2026-07-04T22:55:27","port":8084,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8084\",\"user-agent\":\"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038340d0a557365722d4167656e743a20766973696f6e6865696768742e636f6d2f7363616e204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36","community_id":"1:gT1r4ue6iZrdBU/Rzm8HqIKfOao=","ja3":"","session":"dd863929-f5e9-460a-9916-600a232dced7","seq":1,"duration_ms":100,"bytes_in":193,"bytes_out":77},{"timestamp":"2026-07-04T22:55:27","port":8084,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8084\",\"user-agent\":\"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038340d0a557365722d4167656e743a20766973696f6e6865696768742e636f6d2f7363616e204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36","community_id":"1:2oh+74Graq/RQVDpTPgyyA1IRxs=","ja3":"","session":"21f90c2d-e118-4b47-945b-e5dcb0228d33","seq":1,"duration_ms":100,"bytes_in":194,"bytes_out":77},{"timestamp":"2026-07-04T22:54:34","port":8084,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8084\",\"user-agent\":\"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038340d0a557365722d4167656e743a20766973696f6e6865696768742e636f6d2f7363616e204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36","community_id":"1:/G8S90V+NzpJn5SFDNnb3rDbto8=","ja3":"","session":"91a077d3-76f6-4c01-9c79-14d3deeec6b3","seq":1,"duration_ms":100,"bytes_in":193,"bytes_out":77}],"http_methods":[{"method":"GET","count":18231},{"method":"POST","count":18}],"distinct_ports_total":209,"top_paths":[{"path":"/","count":18231,"ports":205},{"path":"/ipp","count":18,"ports":1}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":1664}],"banners":[{"value":"SSH-2.0-Go","count":141}],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:1701","notable":false},{"name":"User-Agent","value":"visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-07-05T06:04:14.531691+00:00"}