{"ip":"89.58.47.1","total_events":27,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"1 exploit-path probe(s)","confidence":"medium","network_type":"CDN","why":["1 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"33,570 bytes sent","bytes_sent":33570,"session_seconds":2,"persistent":false}},"first_seen":"2026-09-25T17:14:14","last_seen":"2026-09-25T17:14:20","events_24h":0,"events_7d":27,"geo":{"country_code":"DE","country_name":"Germany","region":"Bavaria","city":"Nuremberg","lat":49.4527,"lon":11.0783,"asn":197540,"org":"netcup GmbH"},"source_domain":"v2202609421125522628.megasrv.de","known_scanners":[],"scanner_tag":{"key":"peeringdb:as197540","label":"netcup GmbH","category":"cdn","url":"https://www.peeringdb.com/asn/197540"},"cve_matches":[],"malware":[],"top_ports":[{"port":3000,"proto":"tcp","label":"Web-alt","count":27}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["2196848d251b217de8b2c037e356c11d"],"http_akin":["b11cun040_00040016_c5bb04c5"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4844,"b11cun040_00040016_c5bb04c5":65},"akin_families":{},"user_agents":["Go-http-client/1.1","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-25","count":27}],"recent_events":[{"timestamp":"2026-09-25T17:14:20","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/trpc/settings.ai?batch=1&input=%7B%7D","summary":"","payload_hex":"474554202f6170692f747270632f73657474696e67732e61693f62617463683d3126696e7075743d25374225374420485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"c8a354ab-dc8d-4f7c-a20f-81e6f658281b","seq":5,"duration_ms":919,"bytes_in":764,"bytes_out":375},{"timestamp":"2026-09-25T17:14:20","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/auth/get-session","summary":"","payload_hex":"474554202f6170692f617574682f6765742d73657373696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"c8a354ab-dc8d-4f7c-a20f-81e6f658281b","seq":4,"duration_ms":715,"bytes_in":585,"bytes_out":300},{"timestamp":"2026-09-25T17:14:20","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"c8a354ab-dc8d-4f7c-a20f-81e6f658281b","seq":3,"duration_ms":511,"bytes_in":427,"bytes_out":225},{"timestamp":"2026-09-25T17:14:20","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/register","summary":"","payload_hex":"474554202f726567697374657220485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"c8a354ab-dc8d-4f7c-a20f-81e6f658281b","seq":2,"duration_ms":306,"bytes_in":284,"bytes_out":150},{"timestamp":"2026-09-25T17:14:19","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/server-status","summary":"","payload_hex":"474554202f7365727665722d73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"372a0e24-7c44-47ef-a066-259276dd0284","seq":9,"duration_ms":1800,"bytes_in":2147,"bytes_out":675},{"timestamp":"2026-09-25T17:14:19","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/manager/html","summary":"","payload_hex":"474554202f6d616e616765722f68746d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"372a0e24-7c44-47ef-a066-259276dd0284","seq":10,"duration_ms":2009,"bytes_in":2390,"bytes_out":750},{"timestamp":"2026-09-25T17:14:19","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/wp-login.php","summary":"","payload_hex":"474554202f77702d6c6f67696e2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"372a0e24-7c44-47ef-a066-259276dd0284","seq":11,"duration_ms":2218,"bytes_in":2633,"bytes_out":825},{"timestamp":"2026-09-25T17:14:19","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"c8a354ab-dc8d-4f7c-a20f-81e6f658281b","seq":1,"duration_ms":101,"bytes_in":138,"bytes_out":75},{"timestamp":"2026-09-25T17:14:18","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/api/config","summary":"","payload_hex":"474554202f6170692f636f6e66696720485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"372a0e24-7c44-47ef-a066-259276dd0284","seq":6,"duration_ms":1152,"bytes_in":1423,"bytes_out":450},{"timestamp":"2026-09-25T17:14:18","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/json,*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/api/status","summary":"","payload_hex":"474554202f6170692f73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f6a736f6e2c2a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"2196848d251b217de8b2c037e356c11d","session":"372a0e24-7c44-47ef-a066-259276dd0284","seq":7,"duration_ms":1361,"bytes_in":1664,"bytes_out":525}],"http_methods":[{"method":"GET","count":27}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":3,"ports":1},{"path":"/login","count":3,"ports":1},{"path":"/register","count":3,"ports":1},{"path":"/admin","count":2,"ports":1},{"path":"/manager/html","count":2,"ports":1},{"path":"/wp-login.php","count":2,"ports":1},{"path":"/server-status","count":2,"ports":1},{"path":"/api/trpc","count":2,"ports":1},{"path":"/api/config","count":2,"ports":1},{"path":"/dashboard","count":2,"ports":1},{"path":"/api/status","count":2,"ports":1},{"path":"/api/auth/get-session","count":1,"ports":1},{"path":"/api/trpc/settings.ai?batch=1&input=%7B%7D","count":1,"ports":1}],"distinct_paths_total":13,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/json,*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:3000","notable":false},{"name":"User-Agent","value":"Go-http-client/1.1","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-30T11:26:56.903625+00:00"}