{"ip":"5.255.98.120","total_events":1790,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"119+ ports swept","confidence":"medium","network_type":"nsp","why":["No exploit payloads observed.","Swept 119 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"1,062,347 bytes sent","bytes_sent":1062347,"session_seconds":1,"persistent":false}},"first_seen":"2026-08-17T10:55:38","last_seen":"2026-08-17T16:22:21","events_24h":0,"events_7d":1790,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"Flevoland","city":"Dronten","lat":52.5378,"lon":5.6966,"asn":60404,"org":"The Infrastructure Group B.V."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as60404","label":"LiteServer","category":"isp","url":"https://www.peeringdb.com/asn/60404"},"cve_matches":[],"malware":[],"top_ports":[{"port":8884,"proto":"tcp","label":"","count":24},{"port":81,"proto":"tcp","label":"","count":24},{"port":9015,"proto":"tcp","label":"","count":24},{"port":9000,"proto":"tcp","label":"Web-alt","count":24},{"port":8100,"proto":"tcp","label":"","count":24},{"port":9008,"proto":"tcp","label":"","count":24},{"port":8099,"proto":"tcp","label":"","count":24},{"port":9010,"proto":"tcp","label":"","count":24},{"port":8001,"proto":"tcp","label":"","count":24},{"port":8090,"proto":"tcp","label":"","count":24},{"port":10001,"proto":"tcp","label":"","count":24},{"port":9002,"proto":"tcp","label":"","count":24},{"port":8181,"proto":"tcp","label":"","count":24},{"port":9004,"proto":"tcp","label":"","count":24},{"port":20080,"proto":"tcp","label":"","count":24}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":["ge11nn0400_88d30a62b7ad"]},"fingerprint_peers":{"ge11nn0400_88d30a62b7ad":4889},"user_agents":["Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.7 (KHTML, like Gecko) Chrome/16.0.912.63 Safari/535.7xs5D9rRDFpg2g","Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.14 (KHTML, like Gecko) Chrome/24.0.1292.0 Safari/537.14","Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_6; en-us) AppleWebKit/525.27.1 (KHTML, like Gecko) Version/3.1 Safari/525.13","Mozilla/5.0 (Macintosh; U; PPC Mac OS X; de-de) AppleWebKit/125.4 (KHTML, like Gecko) Safari/125.9","Mozilla/5.0 (Linux; Android 4.1.2; GT-N8013 Build/JZO54K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Safari/537.36","Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36 OPR/31.0.1889.174","Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/525.13 (KHTML, like Gecko) Chrome/0.2.149.27 Safari/525.13"],"timeline":[{"date":"2026-08-17","count":1790}],"recent_events":[{"timestamp":"2026-08-17T16:22:21","port":8884,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:8884\",\"user-agent\":\"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET4.0C; .NET4.0E)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383838340d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520382e303b2057696e646f7773204e5420352e313b20574f5736343b2054726964656e742f342e303b20534c4343323b202e4e455420434c5220322e302e35303732373b202e4e4554342e30433b202e4e4554342e3045290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET4.0C; .NET4.0E)","ja3":"","session":"b5d448bd-293c-439a-90ce-8925b1a547c9","seq":6,"duration_ms":1113,"bytes_in":1344,"bytes_out":462},{"timestamp":"2026-08-17T16:22:21","port":8884,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:8884\",\"user-agent\":\"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET4.0C; .NET4.0E)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/configuration","summary":"","payload_hex":"474554202f636f6e66696775726174696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a383838340d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520382e303b2057696e646f7773204e5420352e313b20574f5736343b2054726964656e742f342e303b20534c4343323b202e4e455420434c5220322e302e35303732373b202e4e4554342e30433b202e4e4554342e3045290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET4.0C; .NET4.0E)","ja3":"","session":"b5d448bd-293c-439a-90ce-8925b1a547c9","seq":5,"duration_ms":910,"bytes_in":1125,"bytes_out":385},{"timestamp":"2026-08-17T16:22:21","port":10000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:10000\",\"user-agent\":\"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/533.8 (KHTML, like Gecko) Chrome/6.0.397.0 Safari/533.8\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f77733b20553b2057696e646f7773204e5420352e313b20656e2d555329204170706c655765624b69742f3533332e3820284b48544d4c2c206c696b65204765636b6f29204368726f6d652f362e302e3339372e30205361666172692f3533332e380d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/533.8 (KHTML, like Gecko) Chrome/6.0.397.0 Safari/533.8","ja3":"","session":"720aa658-e243-48e3-8ff3-052fa6ad3ef0","seq":6,"duration_ms":1134,"bytes_in":1338,"bytes_out":462},{"timestamp":"2026-08-17T16:22:21","port":9090,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:9090\",\"user-agent\":\"Opera/9.80 (Windows NT 6.1; U; pl) Presto/2.7.62 Version/11.00\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393039300d0a557365722d4167656e743a204f706572612f392e3830202857696e646f7773204e5420362e313b20553b20706c292050726573746f2f322e372e36322056657273696f6e2f31312e30300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Opera/9.80 (Windows NT 6.1; U; pl) Presto/2.7.62 Version/11.00","ja3":"","session":"bbf74fcd-07b0-42fa-9a1f-6f234ece8f1a","seq":6,"duration_ms":1133,"bytes_in":1014,"bytes_out":462},{"timestamp":"2026-08-17T16:22:21","port":9020,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:9020\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_4; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.127 Safari/534.16\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393032300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20496e74656c204d6163204f5320582031305f365f343b20656e2d555329204170706c655765624b69742f3533342e313620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f31302e302e3634382e313237205361666172692f3533342e31360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_4; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.127 Safari/534.16","ja3":"","session":"e9dc5fcd-02e9-4c4c-b715-aa26ea141c23","seq":6,"duration_ms":1134,"bytes_in":1416,"bytes_out":462},{"timestamp":"2026-08-17T16:22:21","port":9029,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:9029\",\"user-agent\":\"Opera/7.51 (Windows NT 5.1; U) [en]\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393032390d0a557365722d4167656e743a204f706572612f372e3531202857696e646f7773204e5420352e313b205529205b656e5d0d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Opera/7.51 (Windows NT 5.1; U) [en]","ja3":"","session":"523149b8-d563-4851-9f09-ad465df4d6ec","seq":6,"duration_ms":1133,"bytes_in":852,"bytes_out":462},{"timestamp":"2026-08-17T16:22:21","port":9026,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:9026\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; Intel Mac OS X; fr-fr) AppleWebKit/523.10.3 (KHTML, like Gecko) Version/3.0.4 Safari/523.10\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393032360d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20496e74656c204d6163204f5320583b2066722d667229204170706c655765624b69742f3532332e31302e3320284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f332e302e34205361666172692f3532332e31300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; Intel Mac OS X; fr-fr) AppleWebKit/523.10.3 (KHTML, like Gecko) Version/3.0.4 Safari/523.10","ja3":"","session":"496df317-2253-461a-ad4e-f1257169db30","seq":6,"duration_ms":1132,"bytes_in":1350,"bytes_out":462},{"timestamp":"2026-08-17T16:22:21","port":9016,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:9016\",\"user-agent\":\"Mozilla/4.0 (compatible; MSIE 5.0; Windows NT 4.0) Opera 6.02  [en]\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393031360d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520352e303b2057696e646f7773204e5420342e3029204f7065726120362e303220205b656e5d0d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/4.0 (compatible; MSIE 5.0; Windows NT 4.0) Opera 6.02  [en]","ja3":"","session":"927ebcdb-a0c9-406b-8f2b-4463ef13d645","seq":6,"duration_ms":1131,"bytes_in":1044,"bytes_out":462},{"timestamp":"2026-08-17T16:22:21","port":9021,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:9021\",\"user-agent\":\"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393032310d0a557365722d4167656e743a204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520382e303b2057696e646f7773204e5420352e313b20574f5736343b2054726964656e742f342e303b20534c4343323b202e4e455420434c5220322e302e35303732373b202e4e455420434c5220332e352e33303732393b202e4e455420434c5220332e302e33303732393b202e4e4554342e30433b202e4e4554342e3045290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)","ja3":"","session":"f5c33838-d136-4782-8193-4d42f336a5e6","seq":6,"duration_ms":1130,"bytes_in":1584,"bytes_out":462},{"timestamp":"2026-08-17T16:22:21","port":10001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:10001\",\"user-agent\":\"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/3.0.195.1 Safari/532.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303030310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f77733b20553b2057696e646f7773204e5420362e313b20656e2d555329204170706c655765624b69742f3533322e3020284b48544d4c2c206c696b65204765636b6f29204368726f6d652f332e302e3139352e31205361666172692f3533322e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/3.0.195.1 Safari/532.0","ja3":"","session":"0d09e8a6-b698-4a85-bee8-230c423e248a","seq":6,"duration_ms":1129,"bytes_in":1338,"bytes_out":462}],"http_methods":[{"method":"GET","count":1470}],"distinct_ports_total":119,"top_paths":[{"path":"/","count":490,"ports":62},{"path":"/config","count":245,"ports":62},{"path":"/status","count":245,"ports":62},{"path":"/about","count":245,"ports":62},{"path":"/configuration","count":245,"ports":62}],"distinct_paths_total":5,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Host","value":"<HONEYPOT>:8884","notable":false},{"name":"User-Agent","value":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET4.0C; .NET4.0E)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-08-20T17:34:39.839684+00:00"}