{"ip":"96.9.207.18","total_events":8,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["8 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 10,358 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"10,358 bytes sent","bytes_sent":10358,"session_seconds":4,"persistent":false}},"first_seen":"2026-08-02T02:58:04","last_seen":"2026-09-22T23:09:35","events_24h":2,"events_7d":2,"geo":{"country_code":"US","country_name":"United States","region":"Illinois","city":"Chicago","lat":41.8879,"lon":-88.1998,"asn":20278,"org":"Nexeon Technologies, Inc."},"source_domain":"18-207-9-96.reverse-dns.chicago","known_scanners":[],"scanner_tag":{"key":"peeringdb:as20278","label":"Nexeon Technologies","category":"isp","url":"https://www.peeringdb.com/asn/20278"},"cve_matches":[],"malware":[],"top_ports":[{"port":5601,"proto":"tcp","label":"Kibana","count":6},{"port":8436,"proto":"tcp","label":"","count":1},{"port":1220,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i1714h1_5b57614c22b0_5c2c66f702b0","t13i1515h1_8daaf6152771_d8a2da3f94cd"],"tls_client_hello":"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","tls_ja3":["640390fa365a98654c92baf7ebdbe363","a4a7efb11da858ab9c34dc7fbb241bcb"],"http_akin":["a11cun030_0000004c_13ee3d34"]},"fingerprint_peers":{"t13i1714h1_5b57614c22b0_5c2c66f702b0":3,"t13i1515h1_8daaf6152771_d8a2da3f94cd":3,"a11cun030_0000004c_13ee3d34":1782},"akin_families":{},"user_agents":["Mozilla/5.0 (iPhone; CPU iPhone OS 18_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Mobile/15E148 Safari/604.1","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0","Mozilla/5.0 (X11; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:135.0) Gecko/20100101 Firefox/135.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"],"timeline":[{"date":"2026-08-02","count":6},{"date":"2026-09-22","count":2}],"recent_events":[{"timestamp":"2026-09-22T23:09:35","port":8436,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8436\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383433360d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"640390fa365a98654c92baf7ebdbe363","session":"86364c04-917b-440b-96b4-d90cafb46147","seq":1,"duration_ms":100,"bytes_in":140,"bytes_out":76},{"timestamp":"2026-09-22T22:14:23","port":1220,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1220\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313232300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"a4a7efb11da858ab9c34dc7fbb241bcb","session":"c199c27b-6f03-4ad9-a310-cb9ba1a640cc","seq":1,"duration_ms":100,"bytes_in":140,"bytes_out":76},{"timestamp":"2026-08-02T02:58:08","port":5601,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:5601\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (iPhone; CPU iPhone OS 18_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Mobile/15E148 Safari/604.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/saved_objects/_find?type=search&per_page=100","summary":"","payload_hex":"474554202f6170692f73617665645f6f626a656374732f5f66696e643f747970653d736561726368267065725f706167653d31303020485454502f312e310d0a486f73743a20<HONEYPOT>3a353630310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286950686f6e653b20435055206950686f6e65204f532031385f33206c696b65204d6163204f53205829204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31382e33204d6f62696c652f313545313438205361666172692f3630342e310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c2a2f2a3b713d302e380d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062720d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a5365632d46657463682d446573743a20646f63756d656e740d0a5365632d46657463682d4d6f64653a206e617669676174650d0a5365632d46657463682d536974653a206e6f6e650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (iPhone; CPU iPhone OS 18_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Mobile/15E148 Safari/604.1","ja3":"","session":"9ab338fe-cf39-487e-9984-ea87d2a5dae9","seq":5,"duration_ms":3929,"bytes_in":2454,"bytes_out":380},{"timestamp":"2026-08-02T02:58:08","port":5601,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"accept-language\":\"en-US,en;q=0.5\",\"content-length\":\"212\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>:5601\",\"kbn-xsrf\":\"true\",\"sec-fetch-dest\":\"empty\",\"sec-fetch-mode\":\"cors\",\"sec-fetch-site\":\"same-origin\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0\"}","body":"{\"query\":{\"bool\":{\"should\":[{\"match_phrase\":{\"_all\":\"wallet\"}},{\"match_phrase\":{\"_all\":\"mnemonic\"}},{\"match_phrase\":{\"_all\":\"seed\"}},{\"match_phrase\":{\"_all\":\"private_key\"}}],\"minimum_should_match\":1}},\"size\":100}","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/console/proxy?path=_search&method=POST","summary":"","payload_hex":"504f5354202f6170692f636f6e736f6c652f70726f78793f706174683d5f736561726368266d6574686f643d504f535420485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0","ja3":"","session":"9ab338fe-cf39-487e-9984-ea87d2a5dae9","seq":6,"duration_ms":4373,"bytes_in":3068,"bytes_out":456},{"timestamp":"2026-08-02T02:58:07","port":5601,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:5601\",\"sec-ch-ua\":\"\\\"Microsoft Edge\\\";v=\\\"134\\\", \\\"Chromium\\\";v=\\\"134\\\", \\\"Not:A-Brand\\\";v=\\\"24\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"Windows\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/console/proxy?path=_cat/indices&method=GET","summary":"","payload_hex":"474554202f6170692f636f6e736f6c652f70726f78793f706174683d5f6361742f696e6469636573266d6574686f643d47455420485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0","ja3":"","session":"9ab338fe-cf39-487e-9984-ea87d2a5dae9","seq":4,"duration_ms":2666,"bytes_in":1945,"bytes_out":304},{"timestamp":"2026-08-02T02:58:06","port":5601,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"accept-language\":\"en-US,en;q=0.5\",\"host\":\"<HONEYPOT>:5601\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:135.0) Gecko/20100101 Firefox/135.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/kibana/settings","summary":"","payload_hex":"474554202f6170692f6b6962616e612f73657474696e677320485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:135.0) Gecko/20100101 Firefox/135.0","ja3":"","session":"9ab338fe-cf39-487e-9984-ea87d2a5dae9","seq":3,"duration_ms":1972,"bytes_in":1310,"bytes_out":228},{"timestamp":"2026-08-02T02:58:05","port":5601,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"accept-language\":\"en-US,en;q=0.5\",\"host\":\"<HONEYPOT>:5601\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/saved_objects/_find?type=index-pattern&per_page=100","summary":"","payload_hex":"474554202f6170692f73617665645f6f626a656374732f5f66696e643f747970653d696e6465782d7061747465726e267065725f706167653d31303020485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0","ja3":"","session":"9ab338fe-cf39-487e-9984-ea87d2a5dae9","seq":2,"duration_ms":1101,"bytes_in":879,"bytes_out":152},{"timestamp":"2026-08-02T02:58:04","port":5601,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"accept-language\":\"en-US,en;q=0.5\",\"host\":\"<HONEYPOT>:5601\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/status","summary":"","payload_hex":"474554202f6170692f73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>3a353630310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3133362e3029204765636b6f2f32303130303130312046697265666f782f3133362e300d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c2a2f2a3b713d302e380d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062722c207a7374640d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e350d0a5365632d46657463682d446573743a20646f63756d656e740d0a5365632d46657463682d4d6f64653a206e617669676174650d0a5365632d46657463682d536974653a206e6f6e650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0","ja3":"","session":"9ab338fe-cf39-487e-9984-ea87d2a5dae9","seq":1,"duration_ms":100,"bytes_in":422,"bytes_out":76}],"http_methods":[{"method":"GET","count":7},{"method":"POST","count":1}],"distinct_ports_total":3,"top_paths":[{"path":"/","count":2,"ports":2},{"path":"/api/status","count":1,"ports":1},{"path":"/api/kibana/settings","count":1,"ports":1},{"path":"/api/console/proxy?path=_search&method=POST","count":1,"ports":1},{"path":"/api/saved_objects/_find?type=index-pattern&per_page=100","count":1,"ports":1},{"path":"/api/console/proxy?path=_cat/indices&method=GET","count":1,"ports":1},{"path":"/api/saved_objects/_find?type=search&per_page=100","count":1,"ports":1}],"distinct_paths_total":7,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"http/1.1","count":2}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Host","Sec-Ch-Ua","Sec-Ch-Ua-Mobile","Sec-Ch-Ua-Platform","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","Upgrade-Insecure-Requests","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate, br, zstd","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Host","value":"<HONEYPOT>:5601","notable":false},{"name":"Sec-Ch-Ua","value":"\"Microsoft Edge\";v=\"134\", \"Chromium\";v=\"134\", \"Not:A-Brand\";v=\"24\"","notable":false},{"name":"Sec-Ch-Ua-Mobile","value":"?0","notable":false},{"name":"Sec-Ch-Ua-Platform","value":"\"Windows\"","notable":false},{"name":"Sec-Fetch-Dest","value":"document","notable":false},{"name":"Sec-Fetch-Mode","value":"navigate","notable":false},{"name":"Sec-Fetch-Site","value":"none","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0","notable":false}],"distinct_sets":4,"events_with_headers":8},"tags":[],"data_as_of":"2026-09-23T16:01:08.162959+00:00"}