{"ip":"62.171.128.157","total_events":81,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"1 exploit-path probe(s)","confidence":"medium","network_type":"CDN","why":["1 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"100,710 bytes sent","bytes_sent":100710,"session_seconds":2,"persistent":false}},"first_seen":"2026-09-11T05:44:04","last_seen":"2026-09-24T23:26:36","events_24h":0,"events_7d":27,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":51167,"org":"Contabo GmbH"},"source_domain":"vmi3553447.contaboserver.net","known_scanners":[],"scanner_tag":{"key":"contabo","label":"Contabo","category":"hosting_provider","url":"https://contabo.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":3000,"proto":"tcp","label":"Web-alt","count":81}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["2196848d251b217de8b2c037e356c11d"],"http_akin":["b11cun040_00040016_c5bb04c5"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4844,"b11cun040_00040016_c5bb04c5":65},"akin_families":{},"user_agents":["Go-http-client/1.1","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-11","count":27},{"date":"2026-09-18","count":27},{"date":"2026-09-24","count":27}],"recent_events":[{"timestamp":"2026-09-24T23:26:36","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/trpc/settings.ai?batch=1&input=%7B%7D","summary":"","payload_hex":"474554202f6170692f747270632f73657474696e67732e61693f62617463683d3126696e7075743d25374225374420485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"43cebd48-9ba9-4041-8ee4-67acb53bf7d6","seq":5,"duration_ms":922,"bytes_in":764,"bytes_out":395},{"timestamp":"2026-09-24T23:26:35","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"43cebd48-9ba9-4041-8ee4-67acb53bf7d6","seq":1,"duration_ms":100,"bytes_in":138,"bytes_out":79},{"timestamp":"2026-09-24T23:26:35","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/register","summary":"","payload_hex":"474554202f726567697374657220485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"43cebd48-9ba9-4041-8ee4-67acb53bf7d6","seq":2,"duration_ms":305,"bytes_in":284,"bytes_out":158},{"timestamp":"2026-09-24T23:26:35","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"43cebd48-9ba9-4041-8ee4-67acb53bf7d6","seq":3,"duration_ms":510,"bytes_in":427,"bytes_out":237},{"timestamp":"2026-09-24T23:26:35","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/auth/get-session","summary":"","payload_hex":"474554202f6170692f617574682f6765742d73657373696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"43cebd48-9ba9-4041-8ee4-67acb53bf7d6","seq":4,"duration_ms":716,"bytes_in":585,"bytes_out":316},{"timestamp":"2026-09-24T23:26:34","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/api/status","summary":"","payload_hex":"474554202f6170692f73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"824b4961-b36d-45fc-996b-6fc576c1a7ba","seq":7,"duration_ms":1325,"bytes_in":1664,"bytes_out":553},{"timestamp":"2026-09-24T23:26:34","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/api/trpc","summary":"","payload_hex":"474554202f6170692f7472706320485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"824b4961-b36d-45fc-996b-6fc576c1a7ba","seq":8,"duration_ms":1528,"bytes_in":1903,"bytes_out":632},{"timestamp":"2026-09-24T23:26:34","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/server-status","summary":"","payload_hex":"474554202f7365727665722d73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"824b4961-b36d-45fc-996b-6fc576c1a7ba","seq":9,"duration_ms":1732,"bytes_in":2147,"bytes_out":711},{"timestamp":"2026-09-24T23:26:34","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/manager/html","summary":"","payload_hex":"474554202f6d616e616765722f68746d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"824b4961-b36d-45fc-996b-6fc576c1a7ba","seq":10,"duration_ms":1936,"bytes_in":2390,"bytes_out":790},{"timestamp":"2026-09-24T23:26:34","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-login.php","summary":"","payload_hex":"474554202f77702d6c6f67696e2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"824b4961-b36d-45fc-996b-6fc576c1a7ba","seq":11,"duration_ms":2142,"bytes_in":2633,"bytes_out":869}],"http_methods":[{"method":"GET","count":81}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":9,"ports":1},{"path":"/login","count":9,"ports":1},{"path":"/register","count":9,"ports":1},{"path":"/admin","count":6,"ports":1},{"path":"/manager/html","count":6,"ports":1},{"path":"/wp-login.php","count":6,"ports":1},{"path":"/server-status","count":6,"ports":1},{"path":"/api/trpc","count":6,"ports":1},{"path":"/api/config","count":6,"ports":1},{"path":"/dashboard","count":6,"ports":1},{"path":"/api/status","count":6,"ports":1},{"path":"/api/auth/get-session","count":3,"ports":1},{"path":"/api/trpc/settings.ai?batch=1&input=%7B%7D","count":3,"ports":1}],"distinct_paths_total":13,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/json,*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:3000","notable":false},{"name":"User-Agent","value":"Go-http-client/1.1","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-30T11:33:20.078158+00:00"}