{"ip":"93.49.0.112","total_events":47,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["47 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,874 bytes sent","bytes_sent":1874,"session_seconds":0,"persistent":false}},"first_seen":"2026-02-22T00:47:16","last_seen":"2026-10-01T21:31:42","events_24h":3,"events_7d":3,"geo":{"country_code":"IT","country_name":"Italy","region":"Lombardy","city":"","lat":45.4722,"lon":9.1922,"asn":12874,"org":"Fastweb"},"source_domain":"93-49-0-112.ip317.fastwebnet.it","known_scanners":[],"scanner_tag":{"key":"peeringdb:as12874","label":"Fastweb","category":"isp","url":"https://www.peeringdb.com/asn/12874"},"cve_matches":[],"malware":[],"top_ports":[{"port":1984,"proto":"tcp","label":"","count":31},{"port":5000,"proto":"tcp","label":"Web-alt","count":8},{"port":8083,"proto":"tcp","label":"","count":7},{"port":5001,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i250900_b78ed14e2fd0_e7c285222651"],"tls_client_hello":"","tls_ja3":[],"http_akin":["b11cun050_00060013_3ef9a8f6","b11cun030_00040003_57ba74d4"]},"fingerprint_peers":{"t13i250900_b78ed14e2fd0_e7c285222651":1973,"b11cun050_00060013_3ef9a8f6":601,"b11cun030_00040003_57ba74d4":7},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15","Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-07-15","count":2},{"date":"2026-07-31","count":1},{"date":"2026-08-08","count":1},{"date":"2026-08-09","count":3},{"date":"2026-08-25","count":1},{"date":"2026-08-26","count":1},{"date":"2026-09-06","count":3},{"date":"2026-09-07","count":1},{"date":"2026-09-08","count":3},{"date":"2026-10-01","count":3}],"recent_events":[{"timestamp":"2026-10-01T21:31:42","port":5000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"adaa2461-4e21-4148-8ca7-d0428bab6d7c","seq":1,"duration_ms":100,"bytes_in":86,"bytes_out":76},{"timestamp":"2026-10-01T21:31:42","port":8083,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"2df60f70-0c8b-4c3d-97e3-bee2ebe3ecff","seq":1,"duration_ms":100,"bytes_in":86,"bytes_out":76},{"timestamp":"2026-10-01T17:36:17","port":8083,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"d52c06a9-5261-4a54-a964-94962e079fb6","seq":1,"duration_ms":100,"bytes_in":86,"bytes_out":76},{"timestamp":"2026-09-08T01:36:29","port":1984,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"11e88622-0f3a-4f7f-859c-1c90f75ce6c0","seq":1,"duration_ms":100,"bytes_in":85,"bytes_out":76},{"timestamp":"2026-09-08T01:36:29","port":8083,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"f0126680-8924-44c9-a6b9-b1e8e977a31d","seq":1,"duration_ms":101,"bytes_in":85,"bytes_out":76},{"timestamp":"2026-09-08T01:36:29","port":5000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"390772c2-cae7-442e-959a-d7b3f55d8462","seq":1,"duration_ms":100,"bytes_in":85,"bytes_out":76},{"timestamp":"2026-09-07T22:59:52","port":5000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"ef24c394-7563-4cc0-bc0a-a5576b0e596c","seq":1,"duration_ms":100,"bytes_in":85,"bytes_out":76},{"timestamp":"2026-09-06T23:51:30","port":5000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"96c920f8-37ce-4975-8930-a2aa2a5f8a91","seq":1,"duration_ms":100,"bytes_in":85,"bytes_out":76},{"timestamp":"2026-09-06T10:19:05","port":1984,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"86865271-3a1d-42b9-b47b-7ca04a84c1ed","seq":1,"duration_ms":100,"bytes_in":85,"bytes_out":76},{"timestamp":"2026-09-06T10:19:05","port":8083,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a4163636570742d456e636f64696e673a206964656e746974790d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"fb6ebca6-fdff-4d29-adff-5595bdd9901f","seq":1,"duration_ms":101,"bytes_in":85,"bytes_out":76}],"http_methods":[{"method":"GET","count":32}],"distinct_ports_total":4,"top_paths":[{"path":"/","count":32,"ports":4}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host"],"representative":[{"name":"Accept-Encoding","value":"identity","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-10-02T01:08:39.151687+00:00"}