{"ip":"67.215.253.71","total_events":72,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["72 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"3,942 bytes sent","bytes_sent":3942,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-25T17:18:31","last_seen":"2026-09-25T17:21:36","events_24h":0,"events_7d":72,"geo":{"country_code":"US","country_name":"United States","region":"California","city":"Los Angeles","lat":34.0544,"lon":-118.244,"asn":36352,"org":"HostPapa"},"source_domain":"opmx5.opussend.com","known_scanners":[],"scanner_tag":{"key":"peeringdb:as36352","label":"ColoCrossing","category":"isp","url":"https://www.peeringdb.com/asn/36352"},"cve_matches":[],"malware":[],"top_ports":[{"port":3000,"proto":"tcp","label":"Web-alt","count":9},{"port":9119,"proto":"tcp","label":"","count":9},{"port":9121,"proto":"tcp","label":"","count":9},{"port":9122,"proto":"tcp","label":"","count":9},{"port":443,"proto":"tcp","label":"HTTPS","count":9},{"port":9118,"proto":"tcp","label":"","count":9},{"port":9120,"proto":"tcp","label":"","count":9},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":9}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i3012h2_1d37bd780c83_8537cf56674e"],"tls_client_hello":"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","tls_ja3":["7587a1ac9a4f17b4e4e5fe226716f4df"],"http_akin":["a11cun030_00000049_54d07b6d"]},"fingerprint_peers":{"t13i3012h2_1d37bd780c83_8537cf56674e":22,"a11cun030_00000049_54d07b6d":2469},"akin_families":{"a11cun030_00000049_54d07b6d":{"head":"a11cun030_00000049_54d07b6d","shapes":3,"ips":2473}},"user_agents":["curl/8.14.1"],"timeline":[{"date":"2026-09-25","count":72}],"recent_events":[{"timestamp":"2026-09-25T17:21:36","port":8080,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"7587a1ac9a4f17b4e4e5fe226716f4df","session":"4f94d344-0509-414f-9cae-a78d45c91250","seq":1,"duration_ms":100,"bytes_in":82,"bytes_out":78},{"timestamp":"2026-09-25T17:21:36","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","ja3":"","session":"626e0ca8-9f71-470c-8879-118440f4b213","seq":1,"duration_ms":0,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-09-25T17:21:36","port":443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"","session":"15722647-72e2-4da3-bd94-b363ca4b15d7","seq":1,"duration_ms":100,"bytes_in":81,"bytes_out":78},{"timestamp":"2026-09-25T17:21:36","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"7587a1ac9a4f17b4e4e5fe226716f4df","session":"edb308a6-7de9-4499-8039-bb1bcb6f1180","seq":1,"duration_ms":100,"bytes_in":77,"bytes_out":78},{"timestamp":"2026-09-25T17:21:35","port":9122,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9122\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393132320d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"7587a1ac9a4f17b4e4e5fe226716f4df","session":"1150c721-2c76-4740-a225-a9015872b5cb","seq":1,"duration_ms":102,"bytes_in":82,"bytes_out":78},{"timestamp":"2026-09-25T17:21:35","port":3000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","ja3":"","session":"5ca5f8cc-afe6-462c-b9fa-14452dc3e256","seq":1,"duration_ms":0,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-09-25T17:21:35","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"","session":"3d736288-5604-437e-8e20-d1df047ae2a5","seq":1,"duration_ms":100,"bytes_in":82,"bytes_out":78},{"timestamp":"2026-09-25T17:21:35","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"7587a1ac9a4f17b4e4e5fe226716f4df","session":"6610f1b3-7cc0-44cb-9d86-fcec8cfe7e93","seq":1,"duration_ms":100,"bytes_in":82,"bytes_out":78},{"timestamp":"2026-09-25T17:21:35","port":8080,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","ja3":"","session":"47fa88dc-97a3-47fe-b4ba-99ff66b02f9f","seq":1,"duration_ms":0,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-09-25T17:21:35","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"","session":"b3098251-1d89-423d-a9bb-07a6513073a0","seq":1,"duration_ms":100,"bytes_in":82,"bytes_out":78}],"http_methods":[{"method":"GET","count":48}],"distinct_ports_total":8,"top_paths":[{"path":"/","count":48,"ports":8}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":24}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Host","value":"<HONEYPOT>:8080","notable":false},{"name":"User-Agent","value":"curl/8.14.1","notable":false}],"distinct_sets":1,"events_with_headers":7},"tags":[],"data_as_of":"2026-09-28T20:50:45.951779+00:00"}