{"ip":"80.94.92.237","total_events":37,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["37 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,571 bytes sent","bytes_sent":2571,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-08T10:23:25","last_seen":"2026-09-25T07:09:00","events_24h":0,"events_7d":4,"geo":{"country_code":"RO","country_name":"Romania","region":"","city":"","lat":45.9968,"lon":24.997,"asn":47890,"org":"Unmanaged Ltd"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":8000,"proto":"tcp","label":"HTTP-alt","count":33},{"port":7000,"proto":"tcp","label":"","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["a11cun030_0000004c_13ee3d34"]},"fingerprint_peers":{"a11cun030_0000004c_13ee3d34":2719},"akin_families":{"a11cun030_0000004c_13ee3d34":{"head":"a11cun030_0000004c_13ee3d34","shapes":3,"ips":2732}},"user_agents":["Go-http-client/1.1"],"timeline":[{"date":"2026-09-08","count":2},{"date":"2026-09-09","count":4},{"date":"2026-09-19","count":9},{"date":"2026-09-20","count":6},{"date":"2026-09-22","count":12},{"date":"2026-09-25","count":4}],"recent_events":[{"timestamp":"2026-09-25T07:09:00","port":7000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:7000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/CMS.js","summary":"","payload_hex":"474554202f434d532e6a7320485454502f312e310d0a486f73743a20<HONEYPOT>3a373030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"5fe25ad8-1acc-4c3c-8166-5dc926b29441","seq":1,"duration_ms":100,"bytes_in":105,"bytes_out":77},{"timestamp":"2026-09-25T04:11:54","port":7000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:7000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/CMS.js","summary":"","payload_hex":"474554202f434d532e6a7320485454502f312e310d0a486f73743a20<HONEYPOT>3a373030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"65cd7a62-52bb-41b3-9034-6ff56a8b3190","seq":1,"duration_ms":100,"bytes_in":105,"bytes_out":77},{"timestamp":"2026-09-25T02:51:51","port":7000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:7000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/CMS.js","summary":"","payload_hex":"474554202f434d532e6a7320485454502f312e310d0a486f73743a20<HONEYPOT>3a373030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"ce19d2ed-fac1-472b-b0d5-a624ee78a347","seq":1,"duration_ms":101,"bytes_in":104,"bytes_out":77},{"timestamp":"2026-09-25T02:06:31","port":7000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:7000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/CMS.js","summary":"","payload_hex":"474554202f434d532e6a7320485454502f312e310d0a486f73743a20<HONEYPOT>3a373030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"344404a9-e09f-471c-93d9-86ca040025a3","seq":1,"duration_ms":100,"bytes_in":106,"bytes_out":77},{"timestamp":"2026-09-22T10:45:12","port":8000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Z��\u0000\u0000\u0000\u0000pޭӠ��\u000fSf�}�\u000b+xg\u0019 \u001aG\u001d���\n`�ʇ���\u0013�\b��\fR�@/��y�\u0011������$�~\u0017�\u0004Y\b\u001c\u001f7�F��{L�����V�\u0010�&�.���\t�\u0012@h?r�;������\u000f����%��>J","payload_hex":"5aa5810000000070deadd3a0e4a10f5366a47dfd0b2b786719201a471d7fbda3a70a60f3ca8788d2db13df089e940c52c2402ff2fb799911d9eaf2f6accf24eb7e17f004597f081c1f37b94682b67b4c809490e6e156bd10d126ab2e9f86bf09b71240683f729c3ba484a28fe3ed0fa6f5faee258ac23e4a","method":"","user_agent":"","ja3":"","session":"5f289dcd-b2b0-46b2-b6d1-4b5cef98ff51","seq":1,"duration_ms":100,"bytes_in":120,"bytes_out":12,"enriched":{"digest":"53615fa37cda0f8c","strings":["@h?r"]}},{"timestamp":"2026-09-22T10:44:42","port":8000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Z�\u0001\u0000\u0000\u0000\u0000\u0019\u0001\u0000\u0000\u0005\u0000\u0000\u0000\u0003j�\\\u001a\u0000\u0000\u0000\u0005\u0000\u0000\u0000\u0000R6M.\u0002","payload_hex":"5aa501000000001901000005000000036ab25c1a000000050000000052364d2e02","method":"","user_agent":"","ja3":"","session":"00f70107-4c1b-4894-98d3-057fe5aec081","seq":1,"duration_ms":100,"bytes_in":33,"bytes_out":12,"enriched":{"digest":"cddac8fdae14ede5","strings":["R6M."]}},{"timestamp":"2026-09-22T10:44:12","port":8000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Z�\u0002\u0000\u0000\u0000\u0000\u001bfname:/proc/cpuinfo mode:r\u0000","payload_hex":"5aa502000000001b666e616d653a2f70726f632f637075696e666f206d6f64653a7200","method":"","user_agent":"","ja3":"","session":"da92f06c-ea7f-454b-99cd-13720926ee61","seq":1,"duration_ms":100,"bytes_in":35,"bytes_out":12,"enriched":{"digest":"d424667812a80abb","strings":["fname:/proc/cpuinfo mode:r"],"iocs":{"paths":["/proc/cpuinfo"]}}},{"timestamp":"2026-09-22T09:41:49","port":8000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Z��\u0000\u0000\u0000\u0000pxQ�i�\f�N� H/�9�Ɓ�3�\u0005K��lx�*v+$-d!)Tj��3��\u001e��m��{�x�\u0015�QA�����\u0010��sGZ�\u000b\u0000y���L_\u0010���v�\u0016�\u000e\u000b-\t\u001c�`��>\u001b�\"��\u0003\u0014��[!��0/շ�","payload_hex":"5aa581000000007078518f69e90ccd4e8d20482fd23998c681a03389054b8be46c78c02a762b242d642129546ac7ea33e1a71eecaa6d9f847b9578e5159951418cbc9fb8ad10b8d373475ac80b0079b7f2984c5f10a7838a76a716980e0b2d091ccf60e9b93e1b9a2280f5031499af5b21a6fd302fd5b7e2","method":"","user_agent":"","ja3":"","session":"5ffbce7f-12d5-498e-a0cf-e4fd53285b61","seq":1,"duration_ms":100,"bytes_in":120,"bytes_out":12,"enriched":{"digest":"e12e9778654c353b","strings":["*v+$-d!)Tj"]}},{"timestamp":"2026-09-22T09:41:25","port":8000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Z��\u0000\u0000\u0000\u0000p�\u000bVn\"X���eb�*\u001e(\u001f�\u0019��\u0014\\�kze\u0013�k[�˥`\u001e��0�L�y>L�C@W��R����2�\u0002\u0019�����^�\u0003=��P��\u0005tq\f��H�\u0013\u0000�0R��R�Y�\u0017\u0017�bh��\u0006\u000bԵK\u0016�\t}\u0006��","payload_hex":"5aa5810000000070f00b566e225887b3d765628f2a1e281f8c19edac145c8f6b7a6513b96b5bb5cba5601e8d8530c74cf8793e4cfa43405781e052e1edacae329702197fb2fbf7f1805e8b033dc4c450e0c80574710c98eb48911300eb3052d3f552be59f91717d06268b5b8060bd4b54b16c5097d06c1bc","method":"","user_agent":"","ja3":"","session":"013d90eb-82c0-425c-bf32-e5dc4cad3f83","seq":1,"duration_ms":100,"bytes_in":120,"bytes_out":12,"enriched":{"digest":"c707bc338b9bf730","strings":["Vn\"X"]}},{"timestamp":"2026-09-22T09:41:19","port":8000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Z�\u0001\u0000\u0000\u0000\u0000\u0019\u0001\u0000\u0000\u0005\u0000\u0000\u0000\u0003j�M?\u0000\u0000\u0000\u0005\u0000\u0000\u0000\u0000R6M.\u0002","payload_hex":"5aa501000000001901000005000000036ab24d3f000000050000000052364d2e02","method":"","user_agent":"","ja3":"","session":"8a07daf6-6234-47fa-bd25-9f9994d5aaaa","seq":1,"duration_ms":100,"bytes_in":33,"bytes_out":12,"enriched":{"digest":"59f5073efbe07a35","strings":["R6M."]}}],"http_methods":[{"method":"GET","count":4}],"distinct_ports_total":2,"top_paths":[{"path":"/CMS.js","count":4,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:7000","notable":false},{"name":"User-Agent","value":"Go-http-client/1.1","notable":false}],"distinct_sets":1,"events_with_headers":4},"tags":[],"data_as_of":"2026-09-30T04:41:09.087693+00:00"}