{"ip":"77.239.124.106","total_events":11,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["11 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,962 bytes sent","bytes_sent":1962,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-08T11:42:20","last_seen":"2026-09-23T03:14:29","events_24h":0,"events_7d":4,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":198364,"org":"Banatsync Srl"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":7681,"proto":"tcp","label":"","count":4},{"port":56575,"proto":"tcp","label":"","count":4},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"16030105c6010005c20303a6cb14197ed3cdf7056ca81c1393da5d7cd445218610b77ca52a864ee0e93c332068f38e05e8e226347359db12654f2085668889e69549614b17cdf0b2f0f14c0b001ac02bc02fc02cc030cca9cca8c009c013c00ac0141301130213030100055f000b00020100ff010001000017000000120000000500050100000000000a0010000e11ec11eb11ed001d001700180019000d0016001408040403080708050806040105010601050306030032001a0018080404030807080508060401050106010503060302010203002b00050403040303003304ea04e811ec04c060530ed7fba4b6f87dacfa362cc7940569b711989ce097c3c1e62691fc1779865acfe707ca467b53364010c993775625d3099003f6c73d3256b7799f6f9b0c95364fb441a4ce2591a5e796f6bc6470cc1a85a69bee0516c010cbda4c296a30cf9eca8aa398c807c39f539b560f9a9085d254560b847a645d07bc64c3e58151892d1c05be573981d959a58a79c204973c28e75b03f80ec6c179f86085330b252914348ae8a22972a27b03888b797d95cc15eca7cf8ed7912e51bf828c5ef1e891627a0922f26119a86a817387d233bf6091594fb09eacc241a3b7805b9168b1d4c2c75018edf92e8fd22349c83b5bb96c03d8bb5a170802123c2cf2328d601773444fc7ac648360006e700d3468c21ab7410ed090f633413a6204ad9b55d70c64d459a759a913b8e15df5060664a06b3c0ab916686405fc249f5a2cf5eca985647669c426c594a5a4c96084f57a58a2cc7e3766d3f2c4269272080b9eedfca7a8369c45e75bc0477bb8040f24a86cc50b29bfc369582c7ebe3988e6629f92b3801a38811a8003fe3a55435a9ad7124b608777738658534516b5bb848f007b6a82363a33a8a5800fba48c58d48157c5413d11accf60c0a7fd7c4cf227dd17abd894253c7bb197ad9c711c75fe0f83705052814318cd2a38325b6943b4183a4db9eb3fc2066653dcc0576308c1e1ec96e16f054fd598c554c7b3b572a3936c286366a67b0018bca927e7c12aff8508db339ea766808abc96a84c1ff2b4192825994562638e828ffb289b8282d78c5b78ae25803e0649b7b8705cb7c37109a0a7097bb5312cd04224592bae53174c7520b9a5bc7b3e3c67f71a20241ca2392c072592da1c69c5bd55ee8f98c90221b35b48c3ea701c586b51945246cb18421a274f1698be078a3691c73217802f7c25d2dcc82f513764d7b199c8c10ac767bddf27a9dd2b00416c1c3b42abc03a82eb0260ec10d2ce55d522c4dd14952651c8e99fb790c079351f797be010531f880359139f08b2584334f5ce899d57480be6c48c30c8ccea2331ff1674d47529b325ffd912e5933bda91c06d889b6463736741bbbce773e70119fb13c7ced9064bc6c5145d6a6670c55e4291a74d4abd5ac4108153ffcd611ee622fbc79c68eb891a2bb1f466ac79bf54407da777b207b4c807c66214c3c850c3a2c6a8856070cc2939fba60be49073e3970cb4037b8506833fb00b2dc1a53f2418a51483eec49f8840e2f8340bfa63d3d29af9a613eb6d3b2fc88191d943343d58354b112be32408f7c175f18311ad07ea0124cb2e56454077495f4267be6858b0721e52331d87bbffda056cc6a5c20c29ac05938135b1258641ce3a41f1c208139804c16b5a08360a8979bba1a7c16609630ba3c29265c16da1191cbc66256f48e35c89959acbfbfd5571c0c1815b6130087537facca6db5cc215ac095c1ae953048f44923cb2a01d2437b4e4c712949c864f889cf6ca79921bbfa8c5438b14e9af4374f486a0a7b551101ccb85c75493161757988a5f1756f7641d1974df913a54536ba592a1a10351b9f992a20e579db2950fe775aa5f16418aa55df7ca067e9a348750d571b0ade98810fda07900b29382b0bcb967a20b650a2efb6c9c4570ba058811e40b47042e1bacf859e367285c55c64e7d64e08c97c7f19130898e2d364f666e73a2a5cf6b086f80348a4fa8f6845a2089b86d33c21001d00207f19130898e2d364f666e73a2a5cf6b086f80348a4fa8f6845a2089b","tls_ja3":["725543c78edf669194c11dc7a039b56e"],"http_akin":["a11cun101_e400114a_f5d02f95"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4975,"a11cun101_e400114a_f5d02f95":4},"akin_families":{},"user_agents":["Go-http-client/1.1","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-08-08","count":2},{"date":"2026-08-09","count":2},{"date":"2026-09-18","count":1},{"date":"2026-09-19","count":2},{"date":"2026-09-22","count":2},{"date":"2026-09-23","count":2}],"recent_events":[{"timestamp":"2026-09-23T03:14:29","port":7681,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"cache-control\":\"no-cache\",\"connection\":\"Upgrade\",\"host\":\"<HONEYPOT>:7681\",\"origin\":\"http://<HONEYPOT>:7681\",\"pragma\":\"no-cache\",\"sec-websocket-key\":\"eWj8FI0Qi8C6uF5XWVpdRw==\",\"sec-websocket-protocol\":\"tty\",\"sec-websocket-version\":\"13\",\"upgrade\":\"websocket\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/ws","summary":"","payload_hex":"474554202f777320485454502f312e310d0a486f73743a20<HONEYPOT>3a373638310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133352e302e302e30205361666172692f3533372e33360d0a43616368652d436f6e74726f6c3a206e6f2d63616368650d0a436f6e6e656374696f6e3a20557067726164650d0a4f726967696e3a20687474703a2f2f<HONEYPOT>3a373638310d0a507261676d613a206e6f2d63616368650d0a5365632d576562536f636b65742d4b65793a2065576a384649305169384336754635585756706452773d3d0d0a5365632d576562536f636b65742d50726f746f636f6c3a207474790d0a5365632d576562536f636b65742d56657273696f6e3a2031330d0a557067726164653a20776562736f636b65740d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36","ja3":"","session":"d451d7a8-5154-4916-9a2e-ecdcc7a2f018","seq":1,"duration_ms":100,"bytes_in":391,"bytes_out":79},{"timestamp":"2026-09-23T03:14:29","port":7681,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"cache-control\":\"no-cache\",\"connection\":\"Upgrade\",\"host\":\"<HONEYPOT>:7681\",\"origin\":\"https://<HONEYPOT>:7681\",\"pragma\":\"no-cache\",\"sec-websocket-key\":\"KDYjEL3k4PfNQuFWrHEO0g==\",\"sec-websocket-protocol\":\"tty\",\"sec-websocket-version\":\"13\",\"upgrade\":\"websocket\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/ws","summary":"","payload_hex":"474554202f777320485454502f312e310d0a486f73743a20<HONEYPOT>3a373638310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133352e302e302e30205361666172692f3533372e33360d0a43616368652d436f6e74726f6c3a206e6f2d63616368650d0a436f6e6e656374696f6e3a20557067726164650d0a4f726967696e3a2068747470733a2f2f<HONEYPOT>3a373638310d0a507261676d613a206e6f2d63616368650d0a5365632d576562536f636b65742d4b65793a204b44596a454c336b3450664e517546577248454f30673d3d0d0a5365632d576562536f636b65742d50726f746f636f6c3a207474790d0a5365632d576562536f636b65742d56657273696f6e3a2031330d0a557067726164653a20776562736f636b65740d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"6a1df9b3-123b-4bf8-9622-777766fea813","seq":1,"duration_ms":100,"bytes_in":392,"bytes_out":79},{"timestamp":"2026-09-22T17:46:54","port":7681,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"cache-control\":\"no-cache\",\"connection\":\"Upgrade\",\"host\":\"<HONEYPOT>:7681\",\"origin\":\"http://<HONEYPOT>:7681\",\"pragma\":\"no-cache\",\"sec-websocket-key\":\"GuVPJA4ghXMK7AjDiTXDbQ==\",\"sec-websocket-protocol\":\"tty\",\"sec-websocket-version\":\"13\",\"upgrade\":\"websocket\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/ws","summary":"","payload_hex":"474554202f777320485454502f312e310d0a486f73743a20<HONEYPOT>3a373638310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133352e302e302e30205361666172692f3533372e33360d0a43616368652d436f6e74726f6c3a206e6f2d63616368650d0a436f6e6e656374696f6e3a20557067726164650d0a4f726967696e3a20687474703a2f2f<HONEYPOT>3a373638310d0a507261676d613a206e6f2d63616368650d0a5365632d576562536f636b65742d4b65793a20477556504a41346768584d4b37416a446954584462513d3d0d0a5365632d576562536f636b65742d50726f746f636f6c3a207474790d0a5365632d576562536f636b65742d56657273696f6e3a2031330d0a557067726164653a20776562736f636b65740d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36","ja3":"","session":"f872c89d-5d56-4ea7-a25a-bb6a34175ddc","seq":1,"duration_ms":100,"bytes_in":389,"bytes_out":79},{"timestamp":"2026-09-22T17:46:54","port":7681,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"cache-control\":\"no-cache\",\"connection\":\"Upgrade\",\"host\":\"<HONEYPOT>:7681\",\"origin\":\"https://<HONEYPOT>:7681\",\"pragma\":\"no-cache\",\"sec-websocket-key\":\"3Lj/U0PBGDl3sKGKZA/SSw==\",\"sec-websocket-protocol\":\"tty\",\"sec-websocket-version\":\"13\",\"upgrade\":\"websocket\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/ws","summary":"","payload_hex":"474554202f777320485454502f312e310d0a486f73743a20<HONEYPOT>3a373638310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133352e302e302e30205361666172692f3533372e33360d0a43616368652d436f6e74726f6c3a206e6f2d63616368650d0a436f6e6e656374696f6e3a20557067726164650d0a4f726967696e3a2068747470733a2f2f<HONEYPOT>3a373638310d0a507261676d613a206e6f2d63616368650d0a5365632d576562536f636b65742d4b65793a20334c6a2f5530504247446c33734b474b5a412f5353773d3d0d0a5365632d576562536f636b65742d50726f746f636f6c3a207474790d0a5365632d576562536f636b65742d56657273696f6e3a2031330d0a557067726164653a20776562736f636b65740d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36","ja3":"725543c78edf669194c11dc7a039b56e","session":"c4c3037f-5fab-466c-984e-eb3ec370fdec","seq":1,"duration_ms":101,"bytes_in":390,"bytes_out":79},{"timestamp":"2026-09-19T00:31:42","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"5d486a16-9dcc-4f94-8f9c-c930425b761a","seq":1,"duration_ms":100,"bytes_in":122,"bytes_out":79},{"timestamp":"2026-09-19T00:02:57","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"c578ec13-4de5-4c42-8d9f-049e23adb7e5","seq":1,"duration_ms":100,"bytes_in":123,"bytes_out":79},{"timestamp":"2026-09-18T21:32:31","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"c28687fd-76dc-44d6-a98e-5c12949db473","seq":1,"duration_ms":100,"bytes_in":122,"bytes_out":79},{"timestamp":"2026-08-09T06:25:56","port":56575,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"A\r\n","payload_hex":"410d0a","method":"","user_agent":"","ja3":"","session":"1eeff21d-b0dc-46b0-ba55-2d71902f815b","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":14},{"timestamp":"2026-08-09T06:23:41","port":56575,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"A\r\n","payload_hex":"410d0a","method":"","user_agent":"","ja3":"","session":"8787e987-36cb-4b34-ba17-bd0e6f0ee695","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":14},{"timestamp":"2026-08-08T15:56:20","port":56575,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"A\r\n","payload_hex":"410d0a","method":"","user_agent":"","ja3":"","session":"242afa16-5fcf-4230-b896-fff1343fb006","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":14}],"http_methods":[{"method":"GET","count":7}],"distinct_ports_total":3,"top_paths":[{"path":"/ws","count":4,"ports":1},{"path":"/login","count":3,"ports":1}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Cache-Control","Connection","Host","Origin","Pragma","Sec-Websocket-Key","Sec-Websocket-Protocol","Sec-Websocket-Version","Upgrade","User-Agent"],"representative":[{"name":"Cache-Control","value":"no-cache","notable":false},{"name":"Connection","value":"Upgrade","notable":false},{"name":"Host","value":"<HONEYPOT>:7681","notable":false},{"name":"Origin","value":"http://<HONEYPOT>:7681","notable":true},{"name":"Pragma","value":"no-cache","notable":false},{"name":"Sec-Websocket-Key","value":"eWj8FI0Qi8C6uF5XWVpdRw==","notable":false},{"name":"Sec-Websocket-Protocol","value":"tty","notable":false},{"name":"Sec-Websocket-Version","value":"13","notable":false},{"name":"Upgrade","value":"websocket","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36","notable":false}],"distinct_sets":2,"events_with_headers":7},"tags":[],"data_as_of":"2026-09-28T22:26:39.195132+00:00"}