{"ip":"38.147.164.140","total_events":2,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["2 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"389 bytes sent","bytes_sent":389,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-24T05:44:56","last_seen":"2026-09-24T05:44:57","events_24h":2,"events_7d":2,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":6134,"org":"XNNET LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as6134","label":"XNNET LLC","category":"isp","url":"https://www.peeringdb.com/asn/6134"},"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"16030105c4010005c003030ac001497e2aebbb5f2b6c7cc9f59c19305a21198c50564b19dd55c4499f315a206c25318754f8fcecc495059d344b6af88bfd945014c44e2ec69a18cd395716750032c02bc02fc02cc030cca9cca8c009c013c00ac014009c009d002f0035c012000ac023c027003cc007c011000513011302130301000545000b00020100ff010001000017000000120000000500050100000000000a000c000a11ec001d001700180019000d001a0018080404030807080508060401050106010503060302010203002b0009080304030303020301003304ea04e811ec04c019229c9edb91f42479ed14965da37938da7bc532bdf628b1caf933d064609e27252bca6cfa71c34128c1c8c2a9ed71c75c167b049521f1093b871b7b52e2cbbab49ffa9c98e0445f81a4b53d6c0cc143b6d71926f1821af434bd07d682de6a897b4bcc86e95e4e32279b91182ec62e05d0238e0c6e926354ae0ccb4f0c062ae34f92d16fe2a4992cc15568dacbfb0c634be60785a326342968eec20f97d37ebf15a4ba212a2c27b850ba733cd7533d88898800024e6518bf033ddd1136802925a63235c8528192b3c1871bc12c6a39df6a3519a8688984162e758d6464c6c0a4c14bc0492791c60d739dcf7a122b33ae5dd4913d89c1f4827dee3a24573abf043c2becb8311024111046615de5ab773c714bc985a674111f80ae5eb7b25bb525de9a0ca4b4a26cf58a1b0c9ddca1325a67329ca7992b363146c3bdc7bca6b05816159b7c3e33803e06a5d7cb57363852e0d61d4cdc84c5a4caa3575588530878e571f8301e4f80a78c374eef23a756801f9e0857fe8788310c4bfed84a2c543ef51760b2238130d8bb2f584f46806b0118376d8a71a057827759a736c23bc8638edf77cc2c634e46e9118b23ba9fb1994e1b53f9d939646c1e42a3c1bc994959625769c7a7b3528ffb9461ec4611a816644608502eba1c547805cb171bb6f3a958e973072457f886b9753589c479cf6f859a1d830fc5a12670ec4d636758f7004c95f840c7a6bbae58977d487a303c74683a3bdabc20677769343b702341683599207b8a611669430355aa7304a88b335881e665f15296b898b9a146b5ce4b3f16b25fe578465b10a34b181febac4c74c89e24b10b27873e39f2ca38ca0299dc6d2189ad1cdab5b6567a5a6b9d28d3b3c726095fdbb1013a3d090a80bbc313055b21a830547025279fc87a663b495162476800219fa0cbaa261e8b63139a80bae9293d5c22513f892a3f640837c0c9ffe5967adb6e0afc9487457b70b6cf2de0aae4f73eda1008d62a1dc4a93273a379727a808d69c347837d66e7a7aedba23b1c2060bc3fff54b75261920b65ab2c0153a2d0c07ba659b0018f226a4f111b0a0e179bdb393c072b8d8a60c5cfe1b00acb0f2b3b7011a59d51a03a13b5074dc5cb8a55666a8a6cc686c6933413ac8bcb56f82b3f1c87ecb0098f9539e67476579c4cb1679b09c27c1bb654ca43b678b35d8f70c5bb14b8408c8401d647ff2c77a34ca5ca0a3e04737821b5c019a9433a9427d2f7b3bde9b659eaadad6949066427aac06ccbc64fbb3873dbe0bc150c7e4afca9980b4502f866487239d3923b10540c8bc9a70001873feac04084786aec67a5951a8cb53cd349bdda163948235efc123ca7fc6961d229b8b071a633745070adee3134f3731a0fa86e942b720857b727ec1a4cbc396d05547e25098f0137fe38054c4037d175c98d5a01d27192e1057c22bcc051e03acf474f1ba549afab8da7132229896ffe7a2cf14759762a95dab3bd1326a3943c9c214a30730bbf4a64b451ac37f4ea12c9d5921fe617b961bc697c851882253a12c51c984c19d1ca499190a5ecb60912b30848a393171bb1915757967883434d761a7d48e9930752c8b10c0f3f64436349b55c05222083caa8a9fd5e5ab116b1cc8da29a46e94c4e1b6cb511f5d9dcbf63a81c1e85dfb4cf2d0828a10fea3fc170b0914902c56f4fd232dfd67a491ea73e2629463f50d87e001d00202d0828a10fea3fc170b0914902c56f4fd232dfd67a491ea73e262946","tls_ja3":["9b72665518dedb3531426284fdec8237"],"http_akin":["a11cun050_0080004e_3ef9a8f6"]},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":1961,"a11cun050_0080004e_3ef9a8f6":40},"akin_families":{},"user_agents":["Mozilla/5.0 (Knoppix; Linux i686; rv:121.0) Gecko/20100101 Firefox/121.0"],"timeline":[{"date":"2026-09-24","count":2}],"recent_events":[{"timestamp":"2026-09-24T05:44:57","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Knoppix; Linux i686; rv:121.0) Gecko/20100101 Firefox/121.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284b6e6f707069783b204c696e757820693638363b2072763a3132312e3029204765636b6f2f32303130303130312046697265666f782f3132312e300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Knoppix; Linux i686; rv:121.0) Gecko/20100101 Firefox/121.0","ja3":"9b72665518dedb3531426284fdec8237","session":"13892a0a-5840-4a92-b9c3-47fc51d27ae6","seq":1,"duration_ms":100,"bytes_in":200,"bytes_out":79},{"timestamp":"2026-09-24T05:44:56","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-charset\":\"utf-8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Knoppix; Linux i686; rv:121.0) Gecko/20100101 Firefox/121.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284b6e6f707069783b204c696e757820693638363b2072763a3132312e3029204765636b6f2f32303130303130312046697265666f782f3132312e300d0a4163636570742d436861727365743a207574662d380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Knoppix; Linux i686; rv:121.0) Gecko/20100101 Firefox/121.0","ja3":"9b72665518dedb3531426284fdec8237","session":"140692b7-c0b2-4f67-8699-286d684e74cc","seq":1,"duration_ms":101,"bytes_in":189,"bytes_out":79}],"http_methods":[{"method":"GET","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1},{"path":"/favicon.ico","count":1,"ports":1}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Charset","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Charset","value":"utf-8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Knoppix; Linux i686; rv:121.0) Gecko/20100101 Firefox/121.0","notable":false}],"distinct_sets":1,"events_with_headers":2},"tags":[],"data_as_of":"2026-09-24T14:28:49.061361+00:00"}