{"ip":"45.79.128.205","total_events":411,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"bufferoverrun","confidence":"high","network_type":"CDN","why":["Source IP is in a known scanner range (bufferoverrun).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"payload","label":"Sustained payload","detail":"22,756 bytes sent","bytes_sent":22756,"session_seconds":0,"persistent":false}},"first_seen":"2026-02-16T22:56:54","last_seen":"2026-08-14T18:28:31","events_24h":1,"events_7d":13,"geo":{"country_code":"US","country_name":"United States","region":"New Jersey","city":"Cedar Knolls","lat":40.8229,"lon":-74.4592,"asn":63949,"org":"Akamai Connected Cloud"},"source_domain":"lisbon.scan.bufferover.run","known_scanners":["bufferoverrun","Bufferover Run"],"scanner_tag":{"key":"auto:bufferover_run","label":"Bufferover Run","category":"commercial","url":""},"cve_matches":[],"malware":[],"top_ports":[{"port":593,"proto":"tcp","label":"","count":7},{"port":2083,"proto":"tcp","label":"","count":7},{"port":113,"proto":"tcp","label":"","count":6},{"port":221,"proto":"tcp","label":"","count":6},{"port":978,"proto":"tcp","label":"","count":6},{"port":3232,"proto":"tcp","label":"","count":6},{"port":1111,"proto":"tcp","label":"","count":6},{"port":211,"proto":"tcp","label":"","count":6},{"port":7443,"proto":"tcp","label":"","count":6},{"port":993,"proto":"tcp","label":"IMAPS","count":5},{"port":427,"proto":"tcp","label":"","count":5},{"port":808,"proto":"tcp","label":"","count":4},{"port":80,"proto":"tcp","label":"HTTP","count":4},{"port":43,"proto":"tcp","label":"","count":4},{"port":444,"proto":"tcp","label":"","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t12i130500_2d7513195f68_e51b7354d87f"],"tls_ja3":["cba7f34191ef2379c1325641f6c6c4f4"],"ja4h":["ge11nn0400_88d30a62b7ad"]},"fingerprint_peers":{"t12i130500_2d7513195f68_e51b7354d87f":2150,"ge11nn0400_88d30a62b7ad":4817},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-05-18","count":1},{"date":"2026-05-19","count":4},{"date":"2026-05-21","count":1},{"date":"2026-05-22","count":1},{"date":"2026-05-25","count":4},{"date":"2026-05-27","count":4},{"date":"2026-05-28","count":1},{"date":"2026-05-29","count":6},{"date":"2026-05-30","count":1},{"date":"2026-06-01","count":3},{"date":"2026-06-02","count":2},{"date":"2026-06-04","count":1},{"date":"2026-06-05","count":3},{"date":"2026-06-07","count":1},{"date":"2026-06-08","count":1},{"date":"2026-06-09","count":2},{"date":"2026-06-11","count":1},{"date":"2026-06-12","count":3},{"date":"2026-06-13","count":1},{"date":"2026-06-18","count":2},{"date":"2026-06-19","count":3},{"date":"2026-06-20","count":3},{"date":"2026-06-22","count":1},{"date":"2026-06-24","count":2},{"date":"2026-06-25","count":3},{"date":"2026-06-26","count":5},{"date":"2026-06-28","count":1},{"date":"2026-06-29","count":3},{"date":"2026-07-01","count":2},{"date":"2026-07-02","count":2},{"date":"2026-07-03","count":2},{"date":"2026-07-05","count":1},{"date":"2026-07-06","count":1},{"date":"2026-07-07","count":2},{"date":"2026-07-08","count":2},{"date":"2026-07-09","count":1},{"date":"2026-07-11","count":2},{"date":"2026-07-12","count":2},{"date":"2026-07-14","count":4},{"date":"2026-07-15","count":2},{"date":"2026-07-17","count":5},{"date":"2026-07-19","count":1},{"date":"2026-07-20","count":2},{"date":"2026-07-21","count":3},{"date":"2026-07-22","count":4},{"date":"2026-07-23","count":1},{"date":"2026-07-24","count":1},{"date":"2026-07-26","count":2},{"date":"2026-07-27","count":1},{"date":"2026-07-28","count":1},{"date":"2026-07-30","count":3},{"date":"2026-07-31","count":1},{"date":"2026-08-01","count":3},{"date":"2026-08-02","count":3},{"date":"2026-08-03","count":2},{"date":"2026-08-04","count":2},{"date":"2026-08-05","count":3},{"date":"2026-08-06","count":2},{"date":"2026-08-08","count":3},{"date":"2026-08-10","count":2},{"date":"2026-08-11","count":2},{"date":"2026-08-13","count":3},{"date":"2026-08-14","count":3}],"recent_events":[{"timestamp":"2026-08-14T18:28:31","port":5091,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:5091\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353039310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031335f3129204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130382e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36","ja3":"","session":"b78053e5-1d7c-469b-b583-984f480c6918","seq":1,"duration_ms":100,"bytes_in":207,"bytes_out":78},{"timestamp":"2026-08-14T04:19:50","port":3388,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3388\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333338380d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031335f3129204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130382e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36","ja3":"","session":"07d7406c-e553-4fcd-b826-f21f9781fe12","seq":1,"duration_ms":101,"bytes_in":207,"bytes_out":78},{"timestamp":"2026-08-14T04:19:50","port":123,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:123\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3132330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031335f3129204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130382e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36","ja3":"","session":"0dc1c4c8-1d46-49dc-a85d-b329cd131496","seq":1,"duration_ms":101,"bytes_in":206,"bytes_out":78},{"timestamp":"2026-08-13T22:22:55","port":6009,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:6009\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a363030390d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031335f3129204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130382e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36","ja3":"","session":"9011133a-52f0-4fb6-9161-df2399df8e57","seq":1,"duration_ms":100,"bytes_in":207,"bytes_out":78},{"timestamp":"2026-08-13T16:22:57","port":631,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:631\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3633310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031335f3129204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130382e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36","ja3":"","session":"77af9b59-c4bc-4b1b-b387-b07d6368ae1d","seq":1,"duration_ms":101,"bytes_in":206,"bytes_out":78},{"timestamp":"2026-08-13T06:28:01","port":6668,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:6668\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a363636380d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031335f3129204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130382e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36","ja3":"","session":"f5b78d30-9f86-4fe0-96fd-3a2168b36ef1","seq":1,"duration_ms":101,"bytes_in":207,"bytes_out":78},{"timestamp":"2026-08-11T18:33:16","port":2482,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:2482\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323438320d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031335f3129204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130382e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36","ja3":"","session":"954aec4c-1139-4510-a89c-2f7f861fc53d","seq":1,"duration_ms":100,"bytes_in":207,"bytes_out":78},{"timestamp":"2026-08-11T10:21:18","port":3790,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3790\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333739300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031335f3129204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130382e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36","ja3":"","session":"8c1d0b05-b78a-4ed6-85c1-838c822181a1","seq":1,"duration_ms":100,"bytes_in":207,"bytes_out":78},{"timestamp":"2026-08-10T16:21:16","port":1167,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1167\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313136370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031335f3129204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130382e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36","ja3":"","session":"55677515-a565-49a5-a1ee-f733af1912e2","seq":1,"duration_ms":100,"bytes_in":207,"bytes_out":78},{"timestamp":"2026-08-10T00:21:31","port":1088,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1088\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313038380d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031335f3129204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130382e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36","ja3":"","session":"6b950223-792b-4a08-b602-ec53c93ef249","seq":1,"duration_ms":100,"bytes_in":207,"bytes_out":78}],"http_methods":[{"method":"GET","count":245}],"distinct_ports_total":204,"top_paths":[{"path":"/","count":245,"ports":204}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:5091","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-08-15T07:44:45.409571+00:00"}