{"ip":"38.207.136.30","total_events":125,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["125 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 17,440 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"17,440 bytes sent","bytes_sent":17440,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-25T16:25:20","last_seen":"2026-09-25T16:31:33","events_24h":0,"events_7d":125,"geo":{"country_code":"JP","country_name":"Japan","region":"Hyōgo","city":"","lat":34.6922,"lon":135.1816,"asn":51847,"org":"Nearoute Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as51847","label":"Nearoute Limited","category":"isp","url":"https://www.peeringdb.com/asn/51847"},"cve_matches":[],"malware":[],"top_ports":[{"port":51821,"proto":"tcp","label":"","count":55},{"port":5001,"proto":"tcp","label":"","count":42},{"port":8123,"proto":"tcp","label":"","count":28}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["a10cun040_0000004b_4c87b06e"]},"fingerprint_peers":{"a10cun040_0000004b_4c87b06e":6},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64)"],"timeline":[{"date":"2026-09-25","count":125}],"recent_events":[{"timestamp":"2026-09-25T16:31:33","port":5001,"proto":"tcp","app_proto":"","app_protocol":"targusdataspeed","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:5001\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20<HONEYPOT>3a353030310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"825d2d24-1b21-44b3-b4f8-44d405bddb06","seq":1,"duration_ms":100,"bytes_in":131,"bytes_out":78},{"timestamp":"2026-09-25T16:31:21","port":5001,"proto":"tcp","app_proto":"","app_protocol":"targusdataspeed","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:5001\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20<HONEYPOT>3a353030310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"75cc16da-35d0-43a4-b334-badd072ff14e","seq":1,"duration_ms":101,"bytes_in":131,"bytes_out":78},{"timestamp":"2026-09-25T16:31:17","port":5001,"proto":"tcp","app_proto":"","app_protocol":"targusdataspeed","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:5001\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20<HONEYPOT>3a353030310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"7d68afbc-db2c-474e-8801-4d3cb19e55c7","seq":1,"duration_ms":100,"bytes_in":130,"bytes_out":78},{"timestamp":"2026-09-25T16:31:05","port":5001,"proto":"tcp","app_proto":"","app_protocol":"targusdataspeed","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:5001\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20<HONEYPOT>3a353030310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"286b3f69-e241-4482-b793-8e9f75116ea6","seq":1,"duration_ms":100,"bytes_in":132,"bytes_out":78},{"timestamp":"2026-09-25T16:31:05","port":5001,"proto":"tcp","app_proto":"","app_protocol":"targusdataspeed","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:5001\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20<HONEYPOT>3a353030310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"4802846f-d742-4faa-ae47-9c7ae48aabcb","seq":1,"duration_ms":101,"bytes_in":132,"bytes_out":78},{"timestamp":"2026-09-25T16:31:04","port":5001,"proto":"tcp","app_proto":"","app_protocol":"targusdataspeed","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:5001\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20<HONEYPOT>3a353030310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"30c4ad67-f56b-4281-9526-ea87a440bf93","seq":1,"duration_ms":101,"bytes_in":132,"bytes_out":78},{"timestamp":"2026-09-25T16:30:48","port":5001,"proto":"tcp","app_proto":"","app_protocol":"targusdataspeed","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:5001\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20<HONEYPOT>3a353030310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"075fb7e5-d731-4a84-a014-2be0f6e8b051","seq":1,"duration_ms":100,"bytes_in":131,"bytes_out":78},{"timestamp":"2026-09-25T16:30:36","port":5001,"proto":"tcp","app_proto":"","app_protocol":"targusdataspeed","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:5001\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20<HONEYPOT>3a353030310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"5a8bb027-6500-436b-b874-480da937a13b","seq":1,"duration_ms":100,"bytes_in":131,"bytes_out":78},{"timestamp":"2026-09-25T16:30:32","port":5001,"proto":"tcp","app_proto":"","app_protocol":"targusdataspeed","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:5001\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20<HONEYPOT>3a353030310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"fde37f01-842c-4993-af41-99faea09c99f","seq":1,"duration_ms":100,"bytes_in":130,"bytes_out":78},{"timestamp":"2026-09-25T16:30:20","port":5001,"proto":"tcp","app_proto":"","app_protocol":"targusdataspeed","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:5001\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20<HONEYPOT>3a353030310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b20783634290d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","ja3":"","session":"3c5c6227-c1f6-466e-b6e8-017fbdd65d36","seq":1,"duration_ms":100,"bytes_in":132,"bytes_out":78}],"http_methods":[{"method":"GET","count":125}],"distinct_ports_total":3,"top_paths":[{"path":"/api/session","count":55,"ports":1},{"path":"/","count":42,"ports":1},{"path":"/manifest.json","count":28,"ports":1}],"distinct_paths_total":3,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:5001","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-30T01:06:23.598415+00:00"}