{"ip":"62.164.211.80","total_events":189,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"1 exploit-path probe(s)","confidence":"medium","network_type":"CDN","why":["1 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"235,284 bytes sent","bytes_sent":235284,"session_seconds":2,"persistent":false}},"first_seen":"2026-08-26T20:22:10","last_seen":"2026-09-25T11:21:49","events_24h":0,"events_7d":54,"geo":{"country_code":"DE","country_name":"Germany","region":"Baden-Wurttemberg","city":"Karlsruhe","lat":48.9999,"lon":8.3732,"asn":51167,"org":"Contabo GmbH"},"source_domain":"vmi2350369.contaboserver.net","known_scanners":[],"scanner_tag":{"key":"contabo","label":"Contabo","category":"hosting_provider","url":"https://contabo.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":3000,"proto":"tcp","label":"Web-alt","count":189}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["2196848d251b217de8b2c037e356c11d"],"http_akin":["a11cun040_0000004d_c5bb04c5"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4878,"a11cun040_0000004d_c5bb04c5":33},"akin_families":{},"user_agents":["Go-http-client/1.1","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-08-26","count":27},{"date":"2026-08-30","count":27},{"date":"2026-08-31","count":27},{"date":"2026-09-16","count":27},{"date":"2026-09-21","count":27},{"date":"2026-09-23","count":27},{"date":"2026-09-25","count":27}],"recent_events":[{"timestamp":"2026-09-25T11:21:49","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/trpc/settings.ai?batch=1&input=%7B%7D","summary":"","payload_hex":"474554202f6170692f747270632f73657474696e67732e61693f62617463683d3126696e7075743d25374225374420485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"ede9b2d7-37e8-4c56-a343-66c13d3daa0c","seq":5,"duration_ms":928,"bytes_in":769,"bytes_out":390},{"timestamp":"2026-09-25T11:21:49","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/auth/get-session","summary":"","payload_hex":"474554202f6170692f617574682f6765742d73657373696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"ede9b2d7-37e8-4c56-a343-66c13d3daa0c","seq":4,"duration_ms":721,"bytes_in":589,"bytes_out":312},{"timestamp":"2026-09-25T11:21:48","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"ede9b2d7-37e8-4c56-a343-66c13d3daa0c","seq":3,"duration_ms":514,"bytes_in":430,"bytes_out":234},{"timestamp":"2026-09-25T11:21:48","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-login.php","summary":"","payload_hex":"474554202f77702d6c6f67696e2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"2ab4a288-8c6b-4aa2-9fe7-16dd01fa08b7","seq":11,"duration_ms":2168,"bytes_in":2644,"bytes_out":858},{"timestamp":"2026-09-25T11:21:48","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"ede9b2d7-37e8-4c56-a343-66c13d3daa0c","seq":1,"duration_ms":100,"bytes_in":139,"bytes_out":78},{"timestamp":"2026-09-25T11:21:48","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/register","summary":"","payload_hex":"474554202f726567697374657220485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"ede9b2d7-37e8-4c56-a343-66c13d3daa0c","seq":2,"duration_ms":308,"bytes_in":286,"bytes_out":156},{"timestamp":"2026-09-25T11:21:47","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/api/status","summary":"","payload_hex":"474554202f6170692f73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"2ab4a288-8c6b-4aa2-9fe7-16dd01fa08b7","seq":7,"duration_ms":1338,"bytes_in":1671,"bytes_out":546},{"timestamp":"2026-09-25T11:21:47","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/api/trpc","summary":"","payload_hex":"474554202f6170692f7472706320485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"2ab4a288-8c6b-4aa2-9fe7-16dd01fa08b7","seq":8,"duration_ms":1544,"bytes_in":1911,"bytes_out":624},{"timestamp":"2026-09-25T11:21:47","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/api/config","summary":"","payload_hex":"474554202f6170692f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"2ab4a288-8c6b-4aa2-9fe7-16dd01fa08b7","seq":6,"duration_ms":1132,"bytes_in":1429,"bytes_out":468},{"timestamp":"2026-09-25T11:21:47","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/manager/html","summary":"","payload_hex":"474554202f6d616e616765722f68746d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"2ab4a288-8c6b-4aa2-9fe7-16dd01fa08b7","seq":10,"duration_ms":1962,"bytes_in":2400,"bytes_out":780}],"http_methods":[{"method":"GET","count":189}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":21,"ports":1},{"path":"/login","count":21,"ports":1},{"path":"/register","count":21,"ports":1},{"path":"/admin","count":14,"ports":1},{"path":"/manager/html","count":14,"ports":1},{"path":"/wp-login.php","count":14,"ports":1},{"path":"/server-status","count":14,"ports":1},{"path":"/api/trpc","count":14,"ports":1},{"path":"/api/config","count":14,"ports":1},{"path":"/dashboard","count":14,"ports":1},{"path":"/api/status","count":14,"ports":1},{"path":"/api/auth/get-session","count":7,"ports":1},{"path":"/api/trpc/settings.ai?batch=1&input=%7B%7D","count":7,"ports":1}],"distinct_paths_total":13,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/json,*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:3000","notable":false},{"name":"User-Agent","value":"Go-http-client/1.1","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-30T02:06:08.129894+00:00"}