{"ip":"35.203.210.13","total_events":2545,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"paloaltonetworks","confidence":"high","network_type":null,"why":["Source IP is in a known scanner range (paloaltonetworks).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"payload","label":"Sustained payload","detail":"417,068 bytes sent","bytes_sent":417068,"session_seconds":2,"persistent":false}},"first_seen":"2026-02-17T17:01:33","last_seen":"2026-09-24T09:16:35","events_24h":13,"events_7d":119,"geo":{"country_code":"GB","country_name":"United Kingdom","region":"England","city":"City of London","lat":51.5164,"lon":-0.093,"asn":396982,"org":"Google LLC"},"source_domain":"13.210.203.35.bc.googleusercontent.com","known_scanners":["paloaltonetworks"],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[{"cve_id":"CVE-2026-34197","title":"Apache ActiveMQ - Remote Code Execution","severity":"CRITICAL","actively_exploited":true,"match_field":"url_path","matched_pattern":"/api/jolokia/"}],"malware":[],"top_ports":[{"port":33890,"proto":"tcp","label":"","count":17},{"port":2445,"proto":"tcp","label":"","count":6},{"port":62252,"proto":"tcp","label":"","count":5},{"port":22058,"proto":"tcp","label":"","count":4},{"port":32252,"proto":"tcp","label":"","count":4},{"port":23361,"proto":"tcp","label":"","count":4},{"port":44199,"proto":"tcp","label":"","count":4},{"port":1223,"proto":"tcp","label":"","count":4},{"port":29700,"proto":"tcp","label":"","count":4},{"port":54043,"proto":"tcp","label":"","count":4},{"port":2501,"proto":"tcp","label":"","count":4},{"port":53773,"proto":"tcp","label":"","count":4},{"port":18002,"proto":"tcp","label":"","count":4},{"port":53298,"proto":"tcp","label":"","count":4},{"port":6501,"proto":"tcp","label":"","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i140900_cbb2034c60b8_e7c285222651","t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["1487bd354c20f20dd642bebc7f706e95","2196848d251b217de8b2c037e356c11d"],"http_akin":["a11cun030_0000004c_13ee3d34","a10cun020_00000041_0a8d7f11"]},"fingerprint_peers":{"t13i140900_cbb2034c60b8_e7c285222651":661,"t13i131000_f57a46bbacb6_ab7e3b40a677":5075,"a11cun030_0000004c_13ee3d34":2236,"a10cun020_00000041_0a8d7f11":1489},"akin_families":{"a11cun030_0000004c_13ee3d34":{"head":"a11cun030_0000004c_13ee3d34","shapes":4,"ips":2236}},"user_agents":["Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"],"timeline":[{"date":"2026-06-26","count":1},{"date":"2026-06-27","count":100},{"date":"2026-06-28","count":15},{"date":"2026-06-29","count":11},{"date":"2026-06-30","count":10},{"date":"2026-07-01","count":10},{"date":"2026-07-02","count":21},{"date":"2026-07-03","count":17},{"date":"2026-07-04","count":20},{"date":"2026-07-05","count":16},{"date":"2026-07-06","count":19},{"date":"2026-07-07","count":10},{"date":"2026-07-08","count":17},{"date":"2026-07-09","count":30},{"date":"2026-07-10","count":4},{"date":"2026-07-11","count":26},{"date":"2026-07-12","count":16},{"date":"2026-07-13","count":17},{"date":"2026-07-14","count":18},{"date":"2026-07-15","count":19},{"date":"2026-07-16","count":13},{"date":"2026-07-17","count":14},{"date":"2026-07-18","count":18},{"date":"2026-07-19","count":4},{"date":"2026-07-20","count":11},{"date":"2026-07-21","count":17},{"date":"2026-07-22","count":17},{"date":"2026-07-23","count":24},{"date":"2026-07-24","count":16},{"date":"2026-07-25","count":9},{"date":"2026-07-26","count":14},{"date":"2026-07-27","count":18},{"date":"2026-07-28","count":20},{"date":"2026-07-29","count":23},{"date":"2026-07-30","count":18},{"date":"2026-07-31","count":11},{"date":"2026-08-01","count":30},{"date":"2026-08-02","count":13},{"date":"2026-08-03","count":13},{"date":"2026-08-04","count":27},{"date":"2026-08-05","count":15},{"date":"2026-08-06","count":22},{"date":"2026-08-07","count":19},{"date":"2026-08-08","count":18},{"date":"2026-08-09","count":26},{"date":"2026-08-10","count":27},{"date":"2026-08-11","count":19},{"date":"2026-08-12","count":9},{"date":"2026-08-13","count":25},{"date":"2026-08-14","count":6},{"date":"2026-08-15","count":15},{"date":"2026-08-16","count":24},{"date":"2026-08-17","count":16},{"date":"2026-08-18","count":26},{"date":"2026-08-19","count":10},{"date":"2026-08-20","count":31},{"date":"2026-08-21","count":13},{"date":"2026-08-22","count":22},{"date":"2026-08-23","count":24},{"date":"2026-08-24","count":26},{"date":"2026-08-25","count":23},{"date":"2026-08-26","count":12},{"date":"2026-08-27","count":25},{"date":"2026-08-28","count":22},{"date":"2026-08-29","count":27},{"date":"2026-08-30","count":13},{"date":"2026-08-31","count":25},{"date":"2026-09-01","count":25},{"date":"2026-09-02","count":22},{"date":"2026-09-03","count":18},{"date":"2026-09-04","count":22},{"date":"2026-09-05","count":18},{"date":"2026-09-06","count":20},{"date":"2026-09-07","count":37},{"date":"2026-09-08","count":13},{"date":"2026-09-09","count":27},{"date":"2026-09-10","count":17},{"date":"2026-09-11","count":21},{"date":"2026-09-12","count":23},{"date":"2026-09-13","count":22},{"date":"2026-09-14","count":17},{"date":"2026-09-15","count":27},{"date":"2026-09-16","count":22},{"date":"2026-09-17","count":17},{"date":"2026-09-18","count":19},{"date":"2026-09-19","count":16},{"date":"2026-09-20","count":23},{"date":"2026-09-21","count":15},{"date":"2026-09-22","count":11},{"date":"2026-09-23","count":16},{"date":"2026-09-24","count":9}],"recent_events":[{"timestamp":"2026-09-24T09:16:35","port":57426,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a2048656c6c6f2066726f6d2050616c6f20416c746f204e6574776f726b732c2066696e64206f7574206d6f72652061626f7574206f7572207363616e7320696e2068747470733a2f2f646f63732d636f727465782e70616c6f616c746f6e6574776f726b732e636f6d2f722f312f436f727465782d5870616e73652f5363616e6e696e672d61637469766974790d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity","ja3":"","session":"90d41541-f6f3-44ac-a61f-95d763501e39","seq":1,"duration_ms":100,"bytes_in":185,"bytes_out":78},{"timestamp":"2026-09-24T09:16:35","port":57426,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a2048656c6c6f2066726f6d2050616c6f20416c746f204e6574776f726b732c2066696e64206f7574206d6f72652061626f7574206f7572207363616e7320696e2068747470733a2f2f646f63732d636f727465782e70616c6f616c746f6e6574776f726b732e636f6d2f722f312f436f727465782d5870616e73652f5363616e6e696e672d61637469766974790d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity","ja3":"","session":"ad37f478-5420-421e-8fbb-f6946b8bcdc9","seq":1,"duration_ms":101,"bytes_in":185,"bytes_out":78},{"timestamp":"2026-09-24T06:19:59","port":8004,"proto":"tcp","app_proto":"","app_protocol":"http","host":"192.3.118.146","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"192.3.118.146:8004\",\"user-agent\":\"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203139322e332e3131382e3134363a383030340d0a557365722d4167656e743a2048656c6c6f2066726f6d2050616c6f20416c746f204e6574776f726b732c2066696e64206f7574206d6f72652061626f7574206f7572207363616e7320696e2068747470733a2f2f646f63732d636f727465782e70616c6f616c746f6e6574776f726b732e636f6d2f722f312f436f727465782d5870616e73652f5363616e6e696e672d61637469766974790d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity","ja3":"","session":"89c97c30-fa32-4a6d-b249-284e6eede33f","seq":1,"duration_ms":100,"bytes_in":221,"bytes_out":78},{"timestamp":"2026-09-24T05:17:51","port":29537,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a2048656c6c6f2066726f6d2050616c6f20416c746f204e6574776f726b732c2066696e64206f7574206d6f72652061626f7574206f7572207363616e7320696e2068747470733a2f2f646f63732d636f727465782e70616c6f616c746f6e6574776f726b732e636f6d2f722f312f436f727465782d5870616e73652f5363616e6e696e672d61637469766974790d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity","ja3":"","session":"110dd042-5757-475f-ba15-5c7e538ccee1","seq":1,"duration_ms":101,"bytes_in":185,"bytes_out":78},{"timestamp":"2026-09-24T01:56:22","port":21166,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a2048656c6c6f2066726f6d2050616c6f20416c746f204e6574776f726b732c2066696e64206f7574206d6f72652061626f7574206f7572207363616e7320696e2068747470733a2f2f646f63732d636f727465782e70616c6f616c746f6e6574776f726b732e636f6d2f722f312f436f727465782d5870616e73652f5363616e6e696e672d61637469766974790d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity","ja3":"","session":"a9db8508-c4c1-4adc-90c0-b6f37e2ea6ea","seq":1,"duration_ms":100,"bytes_in":185,"bytes_out":78},{"timestamp":"2026-09-24T01:46:47","port":24759,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:24759\",\"user-agent\":\"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32343735390d0a557365722d4167656e743a2048656c6c6f2066726f6d2050616c6f20416c746f204e6574776f726b732c2066696e64206f7574206d6f72652061626f7574206f7572207363616e7320696e2068747470733a2f2f646f63732d636f727465782e70616c6f616c746f6e6574776f726b732e636f6d2f722f312f436f727465782d5870616e73652f5363616e6e696e672d61637469766974790d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity","ja3":"","session":"dcb65a1a-e17e-4dbd-ab58-bc6afff97b80","seq":1,"duration_ms":100,"bytes_in":222,"bytes_out":78},{"timestamp":"2026-09-24T01:45:55","port":2242,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-ZGrab ZGrab SSH Survey\r\n","payload_hex":"5353482d322e302d5a47726162205a4772616220535348205375727665790d0a","method":"","user_agent":"","ja3":"","session":"567c909d-9353-4121-a425-83b2e03fd900","seq":1,"duration_ms":2101,"bytes_in":32,"bytes_out":13,"enriched":{"digest":"5192d527e0eab129","label":"SSH","strings":["SSH-2.0-ZGrab ZGrab SSH Survey"]}},{"timestamp":"2026-09-24T01:21:28","port":23626,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a2048656c6c6f2066726f6d2050616c6f20416c746f204e6574776f726b732c2066696e64206f7574206d6f72652061626f7574206f7572207363616e7320696e2068747470733a2f2f646f63732d636f727465782e70616c6f616c746f6e6574776f726b732e636f6d2f722f312f436f727465782d5870616e73652f5363616e6e696e672d61637469766974790d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity","ja3":"","session":"a508ac6e-43c0-42da-86d8-930b414a4045","seq":1,"duration_ms":100,"bytes_in":185,"bytes_out":78},{"timestamp":"2026-09-24T00:21:45","port":686,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"185.228.81.201","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"185.228.81.201:686\",\"user-agent\":\"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203138352e3232382e38312e3230313a3638360d0a557365722d4167656e743a2048656c6c6f2066726f6d2050616c6f20416c746f204e6574776f726b732c2066696e64206f7574206d6f72652061626f7574206f7572207363616e7320696e2068747470733a2f2f646f63732d636f727465782e70616c6f616c746f6e6574776f726b732e636f6d2f722f312f436f727465782d5870616e73652f5363616e6e696e672d61637469766974790d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity","ja3":"2196848d251b217de8b2c037e356c11d","session":"a70e0aa3-a14d-45d8-ba48-b053ce3c6c99","seq":1,"duration_ms":100,"bytes_in":221,"bytes_out":78},{"timestamp":"2026-09-23T21:27:41","port":26222,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a2048656c6c6f2066726f6d2050616c6f20416c746f204e6574776f726b732c2066696e64206f7574206d6f72652061626f7574206f7572207363616e7320696e2068747470733a2f2f646f63732d636f727465782e70616c6f616c746f6e6574776f726b732e636f6d2f722f312f436f727465782d5870616e73652f5363616e6e696e672d61637469766974790d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity","ja3":"","session":"777e7659-129d-4ab7-93c8-dbe45fc1b486","seq":1,"duration_ms":101,"bytes_in":185,"bytes_out":78}],"http_methods":[{"method":"GET","count":2382}],"distinct_ports_total":2000,"top_paths":[{"path":"/","count":2104,"ports":1634},{"path":"/.well-known/security.txt","count":86,"ports":86},{"path":"/actuator/jolokia/version","count":29,"ports":29},{"path":"/jolokia/exec","count":23,"ports":23},{"path":"/api/jolokia/version","count":23,"ports":22},{"path":"/jolokia/write","count":22,"ports":22},{"path":"/api/jolokia","count":22,"ports":22},{"path":"/jolokia/version","count":20,"ports":20},{"path":"/api/jolokia/list","count":20,"ports":20},{"path":"/jolokia","count":17,"ports":17},{"path":"/jolokia/list","count":16,"ports":16}],"distinct_paths_total":11,"top_snis":[],"top_hosts":[{"value":"185.228.81.201","count":1},{"value":"192.3.118.146","count":1}],"top_alpns":[],"banners":[{"value":"SSH-2.0-ZGrab ZGrab SSH Survey","count":72}],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"192.3.118.146:8004","notable":false},{"name":"User-Agent","value":"Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity","notable":false}],"distinct_sets":2,"events_with_headers":9},"tags":[{"tag_id":"CVE-2026-34197","tag_type":"cve","title":"Apache ActiveMQ - Remote Code Execution","severity":"CRITICAL","actively_exploited":true,"match_field":"url_path","matched_pattern":"/api/jolokia/","reference_urls":[]}],"data_as_of":"2026-09-24T14:27:59.679075+00:00"}