{"ip":"62.210.158.41","total_events":36,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["36 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"3,700 bytes sent","bytes_sent":3700,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-04T19:01:40","last_seen":"2026-08-15T10:05:56","events_24h":0,"events_7d":18,"geo":{"country_code":"FR","country_name":"France","region":"Île-de-France","city":"Paris","lat":48.8558,"lon":2.3494,"asn":12876,"org":"Scaleway SAS"},"source_domain":"864ef592-92f1-4dc6-9517-82e734526b76.fr-par-1.baremetal.scw.cloud","known_scanners":[],"scanner_tag":{"key":"scaleway","label":"Scaleway","category":"hosting_provider","url":"https://www.scaleway.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":8554,"proto":"tcp","label":"","count":12},{"port":9554,"proto":"tcp","label":"","count":12},{"port":10554,"proto":"tcp","label":"","count":10},{"port":554,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-04","count":4},{"date":"2026-08-05","count":4},{"date":"2026-08-06","count":6},{"date":"2026-08-07","count":2},{"date":"2026-08-08","count":2},{"date":"2026-08-10","count":4},{"date":"2026-08-11","count":2},{"date":"2026-08-12","count":2},{"date":"2026-08-13","count":4},{"date":"2026-08-14","count":4},{"date":"2026-08-15","count":2}],"recent_events":[{"timestamp":"2026-08-15T10:05:56","port":554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:554/ RTSP/1.0\r\nCSeq: 2\r\nUser-Agent: rtsp-fingerprint/1.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a3535342f20525453502f312e300d0a435365713a20320d0a557365722d4167656e743a20727473702d66696e6765727072696e742f312e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","ja3":"","session":"ef2adf8c-ef42-41dc-a66f-e2778c33e4d6","seq":1,"duration_ms":100,"bytes_in":115,"bytes_out":13,"enriched":{"digest":"a3444e01b9f8851e","strings":["DESCRIBE rtsp://<HONEYPOT>:554/ RTSP/1.0","CSeq: 2","User-Agent: rtsp-fingerprint/1.0","Accept: application/sdp"]}},{"timestamp":"2026-08-15T10:05:56","port":554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS rtsp://<HONEYPOT>:554/ RTSP/1.0\r\nCSeq: 1\r\nUser-Agent: rtsp-fingerprint/1.0\r\n\r\n","payload_hex":"4f5054494f4e5320727473703a2f2f<HONEYPOT>3a3535342f20525453502f312e300d0a435365713a20310d0a557365722d4167656e743a20727473702d66696e6765727072696e742f312e300d0a0d0a","method":"","user_agent":"","ja3":"","session":"f4da036c-3816-40a9-932b-e9189d5b63f7","seq":1,"duration_ms":100,"bytes_in":89,"bytes_out":78,"enriched":{"digest":"2c04f659b815ebea","label":"HTTP","strings":["OPTIONS rtsp://<HONEYPOT>:554/ RTSP/1.0","CSeq: 1","User-Agent: rtsp-fingerprint/1.0"]}},{"timestamp":"2026-08-14T04:41:09","port":10554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:10554/ RTSP/1.0\r\nCSeq: 2\r\nUser-Agent: rtsp-fingerprint/1.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a31303535342f20525453502f312e300d0a435365713a20320d0a557365722d4167656e743a20727473702d66696e6765727072696e742f312e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","ja3":"","session":"23002ae6-5db4-4d1f-a7b0-8dad31f469d2","seq":1,"duration_ms":100,"bytes_in":116,"bytes_out":13,"enriched":{"digest":"f52fc8bc7c64285d","strings":["DESCRIBE rtsp://<HONEYPOT>:10554/ RTSP/1.0","CSeq: 2","User-Agent: rtsp-fingerprint/1.0","Accept: application/sdp"]}},{"timestamp":"2026-08-14T04:41:09","port":10554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS rtsp://<HONEYPOT>:10554/ RTSP/1.0\r\nCSeq: 1\r\nUser-Agent: rtsp-fingerprint/1.0\r\n\r\n","payload_hex":"4f5054494f4e5320727473703a2f2f<HONEYPOT>3a31303535342f20525453502f312e300d0a435365713a20310d0a557365722d4167656e743a20727473702d66696e6765727072696e742f312e300d0a0d0a","method":"","user_agent":"","ja3":"","session":"2d2ebfa3-28a2-4cd7-8093-0719b15c6a94","seq":1,"duration_ms":100,"bytes_in":90,"bytes_out":78,"enriched":{"digest":"a7c5c23c2b0fbad2","label":"HTTP","strings":["OPTIONS rtsp://<HONEYPOT>:10554/ RTSP/1.0","CSeq: 1","User-Agent: rtsp-fingerprint/1.0"]}},{"timestamp":"2026-08-14T00:33:28","port":9554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:9554/ RTSP/1.0\r\nCSeq: 2\r\nUser-Agent: rtsp-fingerprint/1.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a393535342f20525453502f312e300d0a435365713a20320d0a557365722d4167656e743a20727473702d66696e6765727072696e742f312e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","ja3":"","session":"bc91373a-5a01-4a9e-8091-78d3c32e3bbf","seq":1,"duration_ms":100,"bytes_in":115,"bytes_out":13,"enriched":{"digest":"ef0ec665ab4ea449","strings":["DESCRIBE rtsp://<HONEYPOT>:9554/ RTSP/1.0","CSeq: 2","User-Agent: rtsp-fingerprint/1.0","Accept: application/sdp"]}},{"timestamp":"2026-08-14T00:33:28","port":9554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS rtsp://<HONEYPOT>:9554/ RTSP/1.0\r\nCSeq: 1\r\nUser-Agent: rtsp-fingerprint/1.0\r\n\r\n","payload_hex":"4f5054494f4e5320727473703a2f2f<HONEYPOT>3a393535342f20525453502f312e300d0a435365713a20310d0a557365722d4167656e743a20727473702d66696e6765727072696e742f312e300d0a0d0a","method":"","user_agent":"","ja3":"","session":"a68034bb-62ff-42c2-b397-a33316fa3683","seq":1,"duration_ms":100,"bytes_in":89,"bytes_out":78,"enriched":{"digest":"f8634273714cf181","label":"HTTP","strings":["OPTIONS rtsp://<HONEYPOT>:9554/ RTSP/1.0","CSeq: 1","User-Agent: rtsp-fingerprint/1.0"]}},{"timestamp":"2026-08-13T15:54:17","port":10554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:10554/ RTSP/1.0\r\nCSeq: 2\r\nUser-Agent: rtsp-fingerprint/1.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a31303535342f20525453502f312e300d0a435365713a20320d0a557365722d4167656e743a20727473702d66696e6765727072696e742f312e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","ja3":"","session":"3063bd2a-b6ee-4c46-b3e2-8de03b37c41a","seq":1,"duration_ms":100,"bytes_in":116,"bytes_out":13,"enriched":{"digest":"f52fc8bc7c64285d","strings":["DESCRIBE rtsp://<HONEYPOT>:10554/ RTSP/1.0","CSeq: 2","User-Agent: rtsp-fingerprint/1.0","Accept: application/sdp"]}},{"timestamp":"2026-08-13T15:54:17","port":10554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS rtsp://<HONEYPOT>:10554/ RTSP/1.0\r\nCSeq: 1\r\nUser-Agent: rtsp-fingerprint/1.0\r\n\r\n","payload_hex":"4f5054494f4e5320727473703a2f2f<HONEYPOT>3a31303535342f20525453502f312e300d0a435365713a20310d0a557365722d4167656e743a20727473702d66696e6765727072696e742f312e300d0a0d0a","method":"","user_agent":"","ja3":"","session":"824d7bed-6793-482d-bc6d-4e381306e767","seq":1,"duration_ms":100,"bytes_in":90,"bytes_out":78,"enriched":{"digest":"a7c5c23c2b0fbad2","label":"HTTP","strings":["OPTIONS rtsp://<HONEYPOT>:10554/ RTSP/1.0","CSeq: 1","User-Agent: rtsp-fingerprint/1.0"]}},{"timestamp":"2026-08-13T06:28:24","port":8554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:8554/ RTSP/1.0\r\nCSeq: 2\r\nUser-Agent: rtsp-fingerprint/1.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a383535342f20525453502f312e300d0a435365713a20320d0a557365722d4167656e743a20727473702d66696e6765727072696e742f312e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","ja3":"","session":"587bdf76-0510-48e1-91bb-e8e1ae62c649","seq":1,"duration_ms":100,"bytes_in":115,"bytes_out":13,"enriched":{"digest":"fca8cf28d7ed2d90","strings":["DESCRIBE rtsp://<HONEYPOT>:8554/ RTSP/1.0","CSeq: 2","User-Agent: rtsp-fingerprint/1.0","Accept: application/sdp"]}},{"timestamp":"2026-08-13T06:28:23","port":8554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS rtsp://<HONEYPOT>:8554/ RTSP/1.0\r\nCSeq: 1\r\nUser-Agent: rtsp-fingerprint/1.0\r\n\r\n","payload_hex":"4f5054494f4e5320727473703a2f2f<HONEYPOT>3a383535342f20525453502f312e300d0a435365713a20310d0a557365722d4167656e743a20727473702d66696e6765727072696e742f312e300d0a0d0a","method":"","user_agent":"","ja3":"","session":"8acb68a7-63f7-43bb-aacf-845f30861df1","seq":1,"duration_ms":100,"bytes_in":89,"bytes_out":78,"enriched":{"digest":"55822ed54f6502a4","label":"HTTP","strings":["OPTIONS rtsp://<HONEYPOT>:8554/ RTSP/1.0","CSeq: 1","User-Agent: rtsp-fingerprint/1.0"]}}],"http_methods":[],"distinct_ports_total":4,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-16T12:58:14.428731+00:00"}