{"ip":"82.158.131.39","total_events":17,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"13+ ports swept","confidence":"medium","network_type":"nsp","why":["No exploit payloads observed.","Swept 13 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,840 bytes sent","bytes_sent":2840,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-27T15:52:41","last_seen":"2026-09-27T16:12:00","events_24h":0,"events_7d":17,"geo":{"country_code":"ID","country_name":"Indonesia","region":"West Java","city":"Depok","lat":-6.3936,"lon":106.8917,"asn":9341,"org":"PT INDONESIA COMNETS PLUS"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as9341","label":"Indonesia Comnets Plus AS9341","category":"isp","url":"https://www.peeringdb.com/asn/9341"},"cve_matches":[],"malware":[],"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":5},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":1},{"port":34567,"proto":"tcp","label":"","count":1},{"port":554,"proto":"tcp","label":"","count":1},{"port":8000,"proto":"tcp","label":"HTTP-alt","count":1},{"port":37777,"proto":"tcp","label":"","count":1},{"port":9000,"proto":"tcp","label":"Web-alt","count":1},{"port":445,"proto":"tcp","label":"SMB","count":1},{"port":3389,"proto":"tcp","label":"RDP","count":1},{"port":443,"proto":"tcp","label":"HTTPS","count":1},{"port":4370,"proto":"tcp","label":"","count":1},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":1},{"port":8899,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i911000_0d5420ba6086_ec21bdc2dd35"],"tls_client_hello":"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","tls_ja3":["da2e319a5accae0c10cc3d156bbfa65e"],"http_akin":["b11cun080_000c041f_fd60b9a2","b11cun080_000c003f_f8e703ee","b11cun050_00040017_d1f380a6","b11cun050_00040017_6b90553b"]},"fingerprint_peers":{"t13i911000_0d5420ba6086_ec21bdc2dd35":2,"b11cun080_000c041f_fd60b9a2":1,"b11cun080_000c003f_f8e703ee":2,"b11cun050_00040017_d1f380a6":4,"b11cun050_00040017_6b90553b":1262},"akin_families":{"b11cun050_00040017_6b90553b":{"head":"b11cun050_00040017_6b90553b","shapes":11,"ips":1263}},"user_agents":["python-requests/2.32.5","CARIDAH-Scanner/1.0","Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"],"timeline":[{"date":"2026-09-27","count":17}],"recent_events":[{"timestamp":"2026-09-27T16:12:00","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"CARIDAH-Scanner/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a4163636570742d456e636f64696e673a206964656e746974790d0a557365722d4167656e743a20434152494441482d5363616e6e65722f312e300d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"CARIDAH-Scanner/1.0","ja3":"","session":"b3747428-1ddd-4cf5-b304-2e8401e66ff6","seq":1,"duration_ms":100,"bytes_in":136,"bytes_out":78},{"timestamp":"2026-09-27T16:11:59","port":4370,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:4370\",\"user-agent\":\"CARIDAH-Scanner/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a343337300d0a4163636570742d456e636f64696e673a206964656e746974790d0a557365722d4167656e743a20434152494441482d5363616e6e65722f312e300d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"CARIDAH-Scanner/1.0","ja3":"","session":"025f40e5-d6d8-490b-8ad4-5034d028a0f2","seq":1,"duration_ms":101,"bytes_in":136,"bytes_out":78},{"timestamp":"2026-09-27T16:11:58","port":3389,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3389\",\"user-agent\":\"CARIDAH-Scanner/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333338390d0a4163636570742d456e636f64696e673a206964656e746974790d0a557365722d4167656e743a20434152494441482d5363616e6e65722f312e300d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"CARIDAH-Scanner/1.0","ja3":"","session":"143dfd8c-47b0-4581-a34f-a6cbb13dbc5e","seq":1,"duration_ms":100,"bytes_in":136,"bytes_out":78},{"timestamp":"2026-09-27T16:11:51","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"CARIDAH-Scanner/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570742d456e636f64696e673a206964656e746974790d0a557365722d4167656e743a20434152494441482d5363616e6e65722f312e300d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"CARIDAH-Scanner/1.0","ja3":"","session":"8adca6b7-83d1-4dea-8532-ef813fa034cc","seq":1,"duration_ms":100,"bytes_in":131,"bytes_out":78},{"timestamp":"2026-09-27T16:11:44","port":37777,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:37777\",\"user-agent\":\"CARIDAH-Scanner/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a33373737370d0a4163636570742d456e636f64696e673a206964656e746974790d0a557365722d4167656e743a20434152494441482d5363616e6e65722f312e300d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"CARIDAH-Scanner/1.0","ja3":"","session":"04486a41-517d-4669-aee8-fb6ee86e224e","seq":1,"duration_ms":101,"bytes_in":137,"bytes_out":78},{"timestamp":"2026-09-27T16:11:43","port":9000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9000\",\"user-agent\":\"CARIDAH-Scanner/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393030300d0a4163636570742d456e636f64696e673a206964656e746974790d0a557365722d4167656e743a20434152494441482d5363616e6e65722f312e300d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"CARIDAH-Scanner/1.0","ja3":"","session":"0a02be2e-2227-4bfe-88b9-0a1a16e25af5","seq":1,"duration_ms":100,"bytes_in":136,"bytes_out":78},{"timestamp":"2026-09-27T16:11:42","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"CARIDAH-Scanner/1.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570742d456e636f64696e673a206964656e746974790d0a557365722d4167656e743a20434152494441482d5363616e6e65722f312e300d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"CARIDAH-Scanner/1.0","ja3":"da2e319a5accae0c10cc3d156bbfa65e","session":"bf4ae00d-a3f4-4408-8eda-fb3464d25cc8","seq":1,"duration_ms":100,"bytes_in":131,"bytes_out":78},{"timestamp":"2026-09-27T16:11:41","port":8443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8443\",\"user-agent\":\"CARIDAH-Scanner/1.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a4163636570742d456e636f64696e673a206964656e746974790d0a557365722d4167656e743a20434152494441482d5363616e6e65722f312e300d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"CARIDAH-Scanner/1.0","ja3":"da2e319a5accae0c10cc3d156bbfa65e","session":"230c70ba-d7d3-4492-8542-5dafea889efd","seq":1,"duration_ms":100,"bytes_in":136,"bytes_out":78},{"timestamp":"2026-09-27T16:11:34","port":445,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:445\",\"user-agent\":\"CARIDAH-Scanner/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3434350d0a4163636570742d456e636f64696e673a206964656e746974790d0a557365722d4167656e743a20434152494441482d5363616e6e65722f312e300d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"CARIDAH-Scanner/1.0","ja3":"","session":"8208918f-49c0-40c8-98fd-56d4bc621b96","seq":1,"duration_ms":101,"bytes_in":135,"bytes_out":78},{"timestamp":"2026-09-27T16:11:32","port":8000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8000\",\"user-agent\":\"CARIDAH-Scanner/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383030300d0a4163636570742d456e636f64696e673a206964656e746974790d0a557365722d4167656e743a20434152494441482d5363616e6e65722f312e300d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"CARIDAH-Scanner/1.0","ja3":"","session":"4b782df6-ad5d-4c69-85fd-98e7ce268dfd","seq":1,"duration_ms":100,"bytes_in":136,"bytes_out":78}],"http_methods":[{"method":"GET","count":16}],"distinct_ports_total":13,"top_paths":[{"path":"/","count":13,"ports":12},{"path":"/ISAPI/System/deviceInfo","count":2,"ports":1},{"path":"/favicon.ico","count":1,"ports":1}],"distinct_paths_total":3,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"identity","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:8080","notable":false},{"name":"User-Agent","value":"CARIDAH-Scanner/1.0","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-30T10:48:26.142451+00:00"}