{"ip":"45.198.224.91","total_events":82,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["82 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 20,901 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"20,901 bytes sent","bytes_sent":20901,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-29T15:59:10","last_seen":"2026-09-29T21:37:34","events_24h":82,"events_7d":82,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":215925,"org":"Vpsvault.host Ltd"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as215925","label":"VPSVAULTHOST","category":"cdn","url":"https://www.peeringdb.com/asn/215925"},"cve_matches":[],"malware":[],"top_ports":[{"port":631,"proto":"tcp","label":"IPP","count":82}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["b11cun020_00040010_724c10fb","b11cun020_00040002_5ff1c0a9","b11cuq040_00050802_cfad16f7"]},"fingerprint_peers":{"b11cun020_00040010_724c10fb":1414,"b11cun020_00040002_5ff1c0a9":131,"b11cuq040_00050802_cfad16f7":1},"akin_families":{"b11cun020_00040010_724c10fb":{"head":"b11cun020_00040010_724c10fb","shapes":3,"ips":1415},"b11cun020_00040002_5ff1c0a9":{"head":"b11cun020_00040002_5ff1c0a9","shapes":2,"ips":131}},"user_agents":["cve2026-55453-scanner"],"timeline":[{"date":"2026-09-29","count":82}],"recent_events":[{"timestamp":"2026-09-29T21:37:34","port":631,"proto":"tcp","app_proto":"","app_protocol":"http","host":"localhost","headers":"{\"host\":\"localhost\",\"user-agent\":\"cve2026-55453-scanner\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a206c6f63616c686f73740d0a557365722d4167656e743a20637665323032362d35353435332d7363616e6e65720d0a0d0a","method":"GET","user_agent":"cve2026-55453-scanner","ja3":"","session":"677ae1e7-83e4-4178-9e88-97061f817734","seq":1,"duration_ms":100,"bytes_in":70,"bytes_out":78},{"timestamp":"2026-09-29T21:34:50","port":631,"proto":"tcp","app_proto":"","app_protocol":"http","host":"localhost","headers":"{\"host\":\"localhost\",\"user-agent\":\"cve2026-55453-scanner\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a206c6f63616c686f73740d0a557365722d4167656e743a20637665323032362d35353435332d7363616e6e65720d0a0d0a","method":"GET","user_agent":"cve2026-55453-scanner","ja3":"","session":"5c0495a8-3427-4820-9659-a1d96186eb20","seq":1,"duration_ms":100,"bytes_in":70,"bytes_out":78},{"timestamp":"2026-09-29T21:25:42","port":631,"proto":"tcp","app_proto":"","app_protocol":"http","host":"localhost","headers":"{\"host\":\"localhost\",\"user-agent\":\"cve2026-55453-scanner\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a206c6f63616c686f73740d0a557365722d4167656e743a20637665323032362d35353435332d7363616e6e65720d0a0d0a","method":"GET","user_agent":"cve2026-55453-scanner","ja3":"","session":"7b156cf6-f018-41ed-b699-550081e0e823","seq":1,"duration_ms":100,"bytes_in":70,"bytes_out":78},{"timestamp":"2026-09-29T21:24:01","port":631,"proto":"tcp","app_proto":"","app_protocol":"http","host":"localhost","headers":"{\"host\":\"localhost\",\"user-agent\":\"cve2026-55453-scanner\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a206c6f63616c686f73740d0a557365722d4167656e743a20637665323032362d35353435332d7363616e6e65720d0a0d0a","method":"GET","user_agent":"cve2026-55453-scanner","ja3":"","session":"d43fa6d0-e510-46ef-b2ae-30d1e2dc75ea","seq":1,"duration_ms":101,"bytes_in":70,"bytes_out":78},{"timestamp":"2026-09-29T19:19:15","port":631,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"content-length\":\"157\",\"content-type\":\"application/ipp\",\"host\":\"<HONEYPOT>:631\"}","body":"\u0002\u0000\u0000\u000b\u0000\u0000\u0000\u0001\u0001G\u0000\u0012attributes-charset\u0000\u0005utf-8H\u0000\u001battributes-natural-language\u0000\u0002enE\u0000\u000bprinter-uri\u0000)ipp://<HONEYPOT>:631/printers/sharedpsD\u0000\u0014requested-attributes\u0000\u0003all\u0003","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/printers/sharedps","summary":"","payload_hex":"504f5354202f7072696e746572732f736861726564707320485454502f312e310d0a486f73743a20<HONEYPOT>3a3633310d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6970700d0a436f6e74656e742d4c656e6774683a203135370d0a0d0a0200000b0000000101470012617474726962757465732d6368617273657400057574662d3848001b617474726962757465732d6e61747572616c2d6c616e67756167650002656e45000b7072696e7465722d75726900296970703a2f2f<HONEYPOT>3a3633312f7072696e746572732f73686172656470734400147265717565737465642d617474726962757465730003616c6c03","method":"POST","user_agent":"","ja3":"","session":"ebac689e-966b-4b10-9df8-b0a493937525","seq":1,"duration_ms":100,"bytes_in":297,"bytes_out":78},{"timestamp":"2026-09-29T19:19:15","port":631,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"content-length\":\"154\",\"content-type\":\"application/ipp\",\"host\":\"<HONEYPOT>:631\"}","body":"\u0002\u0000\u0000\u000b\u0000\u0000\u0000\u0001\u0001G\u0000\u0012attributes-charset\u0000\u0005utf-8H\u0000\u001battributes-natural-language\u0000\u0002enE\u0000\u000bprinter-uri\u0000&ipp://<HONEYPOT>:631/printers/printD\u0000\u0014requested-attributes\u0000\u0003all\u0003","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/printers/print","summary":"","payload_hex":"504f5354202f7072696e746572732f7072696e7420485454502f312e310d0a486f73743a20<HONEYPOT>3a3633310d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6970700d0a436f6e74656e742d4c656e6774683a203135340d0a0d0a0200000b0000000101470012617474726962757465732d6368617273657400057574662d3848001b617474726962757465732d6e61747572616c2d6c616e67756167650002656e45000b7072696e7465722d75726900266970703a2f2f<HONEYPOT>3a3633312f7072696e746572732f7072696e744400147265717565737465642d617474726962757465730003616c6c03","method":"POST","user_agent":"","ja3":"","session":"3bebad78-b4e0-427b-a141-984263684b62","seq":1,"duration_ms":100,"bytes_in":291,"bytes_out":78},{"timestamp":"2026-09-29T19:19:15","port":631,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"content-length\":\"153\",\"content-type\":\"application/ipp\",\"host\":\"<HONEYPOT>:631\"}","body":"\u0002\u0000\u0000\u000b\u0000\u0000\u0000\u0001\u0001G\u0000\u0012attributes-charset\u0000\u0005utf-8H\u0000\u001battributes-natural-language\u0000\u0002enE\u0000\u000bprinter-uri\u0000%ipp://<HONEYPOT>:631/printers/jobsD\u0000\u0014requested-attributes\u0000\u0003all\u0003","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/printers/jobs","summary":"","payload_hex":"504f5354202f7072696e746572732f6a6f627320485454502f312e310d0a486f73743a20<HONEYPOT>3a3633310d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6970700d0a436f6e74656e742d4c656e6774683a203135330d0a0d0a0200000b0000000101470012617474726962757465732d6368617273657400057574662d3848001b617474726962757465732d6e61747572616c2d6c616e67756167650002656e45000b7072696e7465722d75726900256970703a2f2f<HONEYPOT>3a3633312f7072696e746572732f6a6f62734400147265717565737465642d617474726962757465730003616c6c03","method":"POST","user_agent":"","ja3":"","session":"8ba93701-b31a-48dd-a250-0c45caf741cb","seq":1,"duration_ms":100,"bytes_in":289,"bytes_out":78},{"timestamp":"2026-09-29T19:19:14","port":631,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"content-length\":\"156\",\"content-type\":\"application/ipp\",\"host\":\"<HONEYPOT>:631\"}","body":"\u0002\u0000\u0000\u000b\u0000\u0000\u0000\u0001\u0001G\u0000\u0012attributes-charset\u0000\u0005utf-8H\u0000\u001battributes-natural-language\u0000\u0002enE\u0000\u000bprinter-uri\u0000(ipp://<HONEYPOT>:631/printers/pscleanD\u0000\u0014requested-attributes\u0000\u0003all\u0003","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/printers/psclean","summary":"","payload_hex":"504f5354202f7072696e746572732f7073636c65616e20485454502f312e310d0a486f73743a20<HONEYPOT>3a3633310d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6970700d0a436f6e74656e742d4c656e6774683a203135360d0a0d0a0200000b0000000101470012617474726962757465732d6368617273657400057574662d3848001b617474726962757465732d6e61747572616c2d6c616e67756167650002656e45000b7072696e7465722d75726900286970703a2f2f<HONEYPOT>3a3633312f7072696e746572732f7073636c65616e4400147265717565737465642d617474726962757465730003616c6c03","method":"POST","user_agent":"","ja3":"","session":"930c33b3-5a64-4e17-b7e4-bc7951ae24ed","seq":1,"duration_ms":100,"bytes_in":295,"bytes_out":78},{"timestamp":"2026-09-29T19:19:14","port":631,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"content-length\":\"154\",\"content-type\":\"application/ipp\",\"host\":\"<HONEYPOT>:631\"}","body":"\u0002\u0000\u0000\u000b\u0000\u0000\u0000\u0001\u0001G\u0000\u0012attributes-charset\u0000\u0005utf-8H\u0000\u001battributes-natural-language\u0000\u0002enE\u0000\u000bprinter-uri\u0000&ipp://<HONEYPOT>:631/printers/laserD\u0000\u0014requested-attributes\u0000\u0003all\u0003","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/printers/laser","summary":"","payload_hex":"504f5354202f7072696e746572732f6c6173657220485454502f312e310d0a486f73743a20<HONEYPOT>3a3633310d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6970700d0a436f6e74656e742d4c656e6774683a203135340d0a0d0a0200000b0000000101470012617474726962757465732d6368617273657400057574662d3848001b617474726962757465732d6e61747572616c2d6c616e67756167650002656e45000b7072696e7465722d75726900266970703a2f2f<HONEYPOT>3a3633312f7072696e746572732f6c617365724400147265717565737465642d617474726962757465730003616c6c03","method":"POST","user_agent":"","ja3":"","session":"546353d8-76f8-4de8-b5af-6572ce0451a1","seq":1,"duration_ms":100,"bytes_in":291,"bytes_out":78},{"timestamp":"2026-09-29T19:19:14","port":631,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"content-length\":\"157\",\"content-type\":\"application/ipp\",\"host\":\"<HONEYPOT>:631\"}","body":"\u0002\u0000\u0000\u000b\u0000\u0000\u0000\u0001\u0001G\u0000\u0012attributes-charset\u0000\u0005utf-8H\u0000\u001battributes-natural-language\u0000\u0002enE\u0000\u000bprinter-uri\u0000)ipp://<HONEYPOT>:631/printers/laserjetD\u0000\u0014requested-attributes\u0000\u0003all\u0003","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/printers/laserjet","summary":"","payload_hex":"504f5354202f7072696e746572732f6c617365726a657420485454502f312e310d0a486f73743a20<HONEYPOT>3a3633310d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6970700d0a436f6e74656e742d4c656e6774683a203135370d0a0d0a0200000b0000000101470012617474726962757465732d6368617273657400057574662d3848001b617474726962757465732d6e61747572616c2d6c616e67756167650002656e45000b7072696e7465722d75726900296970703a2f2f<HONEYPOT>3a3633312f7072696e746572732f6c617365726a65744400147265717565737465642d617474726962757465730003616c6c03","method":"POST","user_agent":"","ja3":"","session":"dfb5fc0a-f48c-4b81-ad54-257bf0634264","seq":1,"duration_ms":100,"bytes_in":297,"bytes_out":78}],"http_methods":[{"method":"POST","count":68},{"method":"GET","count":14}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":10,"ports":1},{"path":"/ipp","count":4,"ports":1},{"path":"/printers/ps","count":4,"ports":1},{"path":"/printers/shared","count":4,"ports":1},{"path":"/printers/psc","count":4,"ports":1},{"path":"/printers/laser","count":4,"ports":1},{"path":"/printers/","count":4,"ports":1},{"path":"/printers/lp","count":4,"ports":1},{"path":"/printers/psraw","count":4,"ports":1},{"path":"/printers/hp","count":4,"ports":1},{"path":"/printers/print","count":4,"ports":1},{"path":"/printers/jobs","count":4,"ports":1},{"path":"/printers/printer","count":4,"ports":1},{"path":"/printers/sharedps","count":4,"ports":1},{"path":"/printers/laserjet","count":4,"ports":1}],"distinct_paths_total":19,"top_snis":[],"top_hosts":[{"value":"localhost","count":4}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Content-Length","Content-Type","Host"],"representative":[{"name":"Accept-Encoding","value":"identity","notable":false},{"name":"Content-Length","value":"157","notable":false},{"name":"Content-Type","value":"application/ipp","notable":true},{"name":"Host","value":"<HONEYPOT>:631","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-30T10:48:45.504943+00:00"}