{"ip":"85.25.172.249","total_events":220,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"1 exploit-path probe(s)","confidence":"medium","network_type":"CDN","why":["1 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."]},"first_seen":"2026-03-28T11:17:56","last_seen":"2026-07-21T01:02:39","events_24h":0,"events_7d":83,"geo":{"country_code":"FR","country_name":"France","region":"Grand Est","city":"Strasbourg","lat":48.5848,"lon":7.7419,"asn":29066,"org":"velia.net Internetdienste GmbH"},"source_domain":"batty1158.startdedicated.com","known_scanners":[],"scanner_tag":{"key":"peeringdb:as29066","label":"velia.net","category":"cdn","url":"https://www.peeringdb.com/asn/29066"},"cve_matches":[],"malware":[],"top_ports":[{"port":8080,"proto":"tcp","label":"HTTP-alt","count":74},{"port":8888,"proto":"tcp","label":"HTTP-alt","count":64},{"port":80,"proto":"tcp","label":"HTTP","count":26},{"port":4430,"proto":"tcp","label":"","count":23},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":17},{"port":443,"proto":"tcp","label":"HTTPS","count":16}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_ja3":["2196848d251b217de8b2c037e356c11d"],"ja4h":["ge11nn0100_4740ae6347b0"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":5787,"ge11nn0100_4740ae6347b0":698},"user_agents":[],"timeline":[{"date":"2026-07-19","count":1},{"date":"2026-07-20","count":76},{"date":"2026-07-21","count":6}],"recent_events":[{"timestamp":"2026-07-21T01:02:39","port":8888,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:8888\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/cgi-bin/luci/;stok=/locale","summary":"","payload_hex":"474554202f6367692d62696e2f6c7563692f3b73746f6b3d2f6c6f63616c6520485454502f312e310d0a486f73743a20<HONEYPOT>3a383838380d0a0d0a","method":"GET","user_agent":"","community_id":"1:NlO+5wI/Ob0xZRvIcX1e1+0XSEA=","ja3":"","session":"1bf40d59-54e8-4087-8bd2-a5dcc8ca1ed3","seq":1,"duration_ms":100,"bytes_in":69,"bytes_out":78},{"timestamp":"2026-07-21T01:00:09","port":8888,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:8888\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/cgi-bin/luci/;stok=/locale","summary":"","payload_hex":"474554202f6367692d62696e2f6c7563692f3b73746f6b3d2f6c6f63616c6520485454502f312e310d0a486f73743a20<HONEYPOT>3a383838380d0a0d0a","method":"GET","user_agent":"","community_id":"1:huvEhNzEWupwVuPvjOrJN/CqsqA=","ja3":"","session":"547e8304-04d0-467a-853b-a922a4737e61","seq":1,"duration_ms":100,"bytes_in":70,"bytes_out":78},{"timestamp":"2026-07-21T00:47:09","port":8888,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:8888\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/cgi-bin/luci/;stok=/locale","summary":"","payload_hex":"474554202f6367692d62696e2f6c7563692f3b73746f6b3d2f6c6f63616c6520485454502f312e310d0a486f73743a20<HONEYPOT>3a383838380d0a0d0a","method":"GET","user_agent":"","community_id":"1:qgnROJNc4nufjxhtiGh1BXbw5Og=","ja3":"","session":"78a133cd-a756-46a5-aa23-a59ceed5affc","seq":1,"duration_ms":100,"bytes_in":69,"bytes_out":78},{"timestamp":"2026-07-21T00:27:55","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:8080\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/cgi-bin/luci/;stok=/locale","summary":"","payload_hex":"474554202f6367692d62696e2f6c7563692f3b73746f6b3d2f6c6f63616c6520485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a0d0a","method":"GET","user_agent":"","community_id":"1:JEIXOkg99peaygYhovRRbx6HDUI=","ja3":"","session":"44773027-5902-4c9a-a2f1-4d7768b8161f","seq":1,"duration_ms":101,"bytes_in":69,"bytes_out":78},{"timestamp":"2026-07-21T00:18:17","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:8080\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/cgi-bin/luci/;stok=/locale","summary":"","payload_hex":"474554202f6367692d62696e2f6c7563692f3b73746f6b3d2f6c6f63616c6520485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a0d0a","method":"GET","user_agent":"","community_id":"1:Hl6s58o/ZkpcE5MFS9B4zquZi9Q=","ja3":"","session":"2228daec-82e0-4d27-a420-b460eb437d4d","seq":1,"duration_ms":100,"bytes_in":71,"bytes_out":78},{"timestamp":"2026-07-21T00:15:43","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:8080\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/cgi-bin/luci/;stok=/locale","summary":"","payload_hex":"474554202f6367692d62696e2f6c7563692f3b73746f6b3d2f6c6f63616c6520485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a0d0a","method":"GET","user_agent":"","community_id":"1:2xjeJTKgoltWaY3m1vqWklJ/udE=","ja3":"","session":"c5541a89-d6a2-4d70-93ba-586e94a17fe6","seq":1,"duration_ms":100,"bytes_in":70,"bytes_out":78},{"timestamp":"2026-07-20T23:58:20","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:8080\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/cgi-bin/luci/;stok=/locale","summary":"","payload_hex":"474554202f6367692d62696e2f6c7563692f3b73746f6b3d2f6c6f63616c6520485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a0d0a","method":"GET","user_agent":"","community_id":"1:4Unx5dNNLSNS3VbvRCIP0A4mA4I=","ja3":"","session":"bacfa22a-1424-4352-b140-c5b4338bf456","seq":1,"duration_ms":100,"bytes_in":69,"bytes_out":78},{"timestamp":"2026-07-20T23:19:55","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:443\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/cgi-bin/luci/;stok=/locale","summary":"","payload_hex":"474554202f6367692d62696e2f6c7563692f3b73746f6b3d2f6c6f63616c6520485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a0d0a","method":"GET","user_agent":"","community_id":"1:VYZqLq6YURMtZ6JFc0Vup8sbyTs=","ja3":"2196848d251b217de8b2c037e356c11d","session":"3fd4d4b4-dc7f-4681-a5ba-93cd8d1bebbb","seq":1,"duration_ms":107,"bytes_in":70,"bytes_out":78},{"timestamp":"2026-07-20T22:32:35","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:80\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/cgi-bin/luci/;stok=/locale","summary":"","payload_hex":"474554202f6367692d62696e2f6c7563692f3b73746f6b3d2f6c6f63616c6520485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a0d0a","method":"GET","user_agent":"","community_id":"1:JopydOMP/FIbyxVTiSDU8+iKn6E=","ja3":"","session":"3c3b493b-67b6-4870-9909-5585efea76c1","seq":1,"duration_ms":100,"bytes_in":69,"bytes_out":78},{"timestamp":"2026-07-20T21:39:23","port":8443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:8443\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/cgi-bin/luci/;stok=/locale","summary":"","payload_hex":"474554202f6367692d62696e2f6c7563692f3b73746f6b3d2f6c6f63616c6520485454502f312e310d0a486f73743a20<HONEYPOT>3a383434330d0a0d0a","method":"GET","user_agent":"","community_id":"1:M0evFnR6cAQDVJxhLdfiXjlyfTQ=","ja3":"2196848d251b217de8b2c037e356c11d","session":"6f291b8d-12fc-45a8-ba9d-70544517204f","seq":1,"duration_ms":116,"bytes_in":71,"bytes_out":78}],"http_methods":[{"method":"GET","count":106}],"distinct_ports_total":6,"top_paths":[{"path":"/cgi-bin/luci/;stok=/locale","count":106,"ports":6}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Host"],"representative":[{"name":"Host","value":"<HONEYPOT>:8888","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-07-22T15:19:57.752928+00:00"}