{"ip":"64.226.108.113","total_events":8,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["8 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,127 bytes sent","bytes_sent":1127,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-16T09:10:00","last_seen":"2026-09-29T06:21:37","events_24h":0,"events_7d":5,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":"portscanner-fra1-05.prod.cyberresilience.io","known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":25,"proto":"tcp","label":"SMTP","count":2},{"port":8089,"proto":"tcp","label":"Splunk","count":1},{"port":80,"proto":"tcp","label":"HTTP","count":1},{"port":2000,"proto":"tcp","label":"","count":1},{"port":443,"proto":"tcp","label":"HTTPS","count":1},{"port":53,"proto":"tcp","label":"DNS","count":1},{"port":8085,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_f50d94e863eb"],"tls_client_hello":"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","tls_ja3":["725543c78edf669194c11dc7a039b56e"],"http_akin":["b11cun060_0006001e_5399dcc7"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_f50d94e863eb":2741,"b11cun060_0006001e_5399dcc7":30},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0"],"timeline":[{"date":"2026-09-16","count":1},{"date":"2026-09-19","count":1},{"date":"2026-09-20","count":1},{"date":"2026-09-24","count":1},{"date":"2026-09-25","count":1},{"date":"2026-09-26","count":1},{"date":"2026-09-28","count":1},{"date":"2026-09-29","count":1}],"recent_events":[{"timestamp":"2026-09-29T06:21:37","port":25,"proto":"tcp","app_proto":"","app_protocol":"smtp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"EHLO\r\n","payload_hex":"45484c4f0d0a","method":"","user_agent":"","ja3":"","session":"6a8ed24f-4e30-4a24-998b-40ecbe65091e","seq":1,"duration_ms":100,"bytes_in":6,"bytes_out":40,"enriched":{"digest":"87f781591201aca6","label":"SMTP","strings":["EHLO"]}},{"timestamp":"2026-09-28T02:04:14","port":8089,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","ja3":"725543c78edf669194c11dc7a039b56e","session":"bbd71826-cdca-42af-9a1d-48d8115a2622","seq":1,"duration_ms":101,"bytes_in":212,"bytes_out":79},{"timestamp":"2026-09-26T21:38:35","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","ja3":"","session":"ffea193a-27a6-42a6-8ff9-14847a3cf4c0","seq":1,"duration_ms":100,"bytes_in":214,"bytes_out":79},{"timestamp":"2026-09-25T13:59:28","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","ja3":"725543c78edf669194c11dc7a039b56e","session":"bbecd0b8-7ff4-4624-866a-b67efd20e99d","seq":1,"duration_ms":100,"bytes_in":214,"bytes_out":79},{"timestamp":"2026-09-24T08:36:14","port":8085,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","ja3":"","session":"b61053ba-f1b7-40cc-994e-a054c617c7d9","seq":1,"duration_ms":100,"bytes_in":214,"bytes_out":79},{"timestamp":"2026-09-20T19:26:08","port":53,"proto":"tcp","app_proto":"","app_protocol":"dns","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000/|$\u0000 \u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0001\u000fcyberresilience\u0002io\u0000\u0000\u0001\u0000\u0001\u0000\u0000)\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"002f7c24002000010000000000010f6379626572726573696c69656e636502696f00000100010000291000000000000000","method":"","user_agent":"","ja3":"","session":"853be650-139c-4086-b0ba-afdafb2c3b6d","seq":1,"duration_ms":100,"bytes_in":49,"bytes_out":14,"enriched":{"digest":"5aad29ae89ca93ed","strings":["cyberresilience"]}},{"timestamp":"2026-09-19T13:30:26","port":25,"proto":"tcp","app_proto":"","app_protocol":"smtp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"EHLO\r\n","payload_hex":"45484c4f0d0a","method":"","user_agent":"","ja3":"","session":"89b15732-cd9a-45b8-a141-fe285599973e","seq":1,"duration_ms":100,"bytes_in":6,"bytes_out":40,"enriched":{"digest":"87f781591201aca6","label":"SMTP","strings":["EHLO"]}},{"timestamp":"2026-09-16T09:10:00","port":2000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-charset\":\"UTF-8\",\"accept-encoding\":\"UTF-8\",\"accept-language\":\"*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570743a202a2f2a0d0a4163636570742d436861727365743a205554462d380d0a4163636570742d456e636f64696e673a205554462d380d0a4163636570742d4c616e67756167653a202a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131382e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","ja3":"","session":"8d534c32-63e3-493e-9971-1fc7b76c0788","seq":1,"duration_ms":100,"bytes_in":212,"bytes_out":79}],"http_methods":[{"method":"GET","count":5}],"distinct_ports_total":7,"top_paths":[{"path":"/","count":5,"ports":5}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Charset","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Charset","value":"UTF-8","notable":false},{"name":"Accept-Encoding","value":"UTF-8","notable":false},{"name":"Accept-Language","value":"*","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0","notable":false}],"distinct_sets":1,"events_with_headers":5},"tags":[],"data_as_of":"2026-09-30T17:37:18.712761+00:00"}