{"ip":"112.124.59.239","total_events":236,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"61+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 61 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"21,472 bytes sent","bytes_sent":21472,"session_seconds":3,"persistent":false}},"first_seen":"2026-03-29T10:28:46","last_seen":"2026-10-05T16:44:59","events_24h":234,"events_7d":234,"geo":{"country_code":"CN","country_name":"China","region":"Zhejiang","city":"Hangzhou","lat":30.2943,"lon":120.1663,"asn":37963,"org":"Hangzhou Alibaba Advertising Co.,Ltd."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as37963","label":"Alibaba (China)","category":"cdn","url":"https://www.peeringdb.com/asn/37963"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":8,"protocols":[{"protocol":"udp","events":8}],"ports":[{"port":34876,"events":4},{"port":43116,"events":4}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T16:41:29","last_seen":"2026-10-05T16:42:14","recent":[{"timestamp":"2026-10-05T16:42:14","port":34876,"src_port":36052,"proto":"udp","app_proto":"","app_protocol":"","summary":"CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC","payload_hex":"434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343","sni":"","session":"e1de121a-2c9d-42ea-a3ce-336c61a47576","bytes_in":300,"source_verified":false,"enriched":{"digest":"e49ae53336ce7b5b","strings":["CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC…"]}},{"timestamp":"2026-10-05T16:42:07","port":34876,"src_port":36052,"proto":"udp","app_proto":"","app_protocol":"","summary":"CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC","payload_hex":"434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343","sni":"","session":"85b80435-b88f-4eca-922c-d01d22719554","bytes_in":300,"source_verified":false,"enriched":{"digest":"e49ae53336ce7b5b","strings":["CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC…"]}},{"timestamp":"2026-10-05T16:42:00","port":34876,"src_port":36052,"proto":"udp","app_proto":"","app_protocol":"","summary":"CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC","payload_hex":"434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343","sni":"","session":"195707a7-1037-4302-a02a-86a64846b9d4","bytes_in":300,"source_verified":false,"enriched":{"digest":"e49ae53336ce7b5b","strings":["CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC…"]}},{"timestamp":"2026-10-05T16:41:55","port":34876,"src_port":36052,"proto":"udp","app_proto":"","app_protocol":"","summary":"CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC","payload_hex":"434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343","sni":"","session":"6fa0e63b-50c3-4641-81b4-dc488a70a1a6","bytes_in":300,"source_verified":false,"enriched":{"digest":"e49ae53336ce7b5b","strings":["CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC…"]}},{"timestamp":"2026-10-05T16:41:38","port":43116,"src_port":36052,"proto":"udp","app_proto":"","app_protocol":"","summary":"CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC","payload_hex":"434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343","sni":"","session":"cdb6a5fc-a7cd-4c9f-81e3-5b644a962b44","bytes_in":300,"source_verified":false,"enriched":{"digest":"e49ae53336ce7b5b","strings":["CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC…"]}},{"timestamp":"2026-10-05T16:41:35","port":43116,"src_port":36052,"proto":"udp","app_proto":"","app_protocol":"","summary":"CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC","payload_hex":"434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343","sni":"","session":"4233c2ea-cd9f-4aea-a4d3-8759089d647a","bytes_in":300,"source_verified":false,"enriched":{"digest":"e49ae53336ce7b5b","strings":["CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC…"]}},{"timestamp":"2026-10-05T16:41:32","port":43116,"src_port":36052,"proto":"udp","app_proto":"","app_protocol":"","summary":"CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC","payload_hex":"434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343","sni":"","session":"5a8dab35-06b9-460c-b6c2-10e04b1b4a5f","bytes_in":300,"source_verified":false,"enriched":{"digest":"e49ae53336ce7b5b","strings":["CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC…"]}},{"timestamp":"2026-10-05T16:41:29","port":43116,"src_port":36052,"proto":"udp","app_proto":"","app_protocol":"","summary":"CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC","payload_hex":"434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343","sni":"","session":"1906e3d0-5746-48a6-b46c-5d173675838c","bytes_in":300,"source_verified":false,"enriched":{"digest":"e49ae53336ce7b5b","strings":["CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC…"]}}]},"top_ports":[{"port":9797,"proto":"tcp","label":"","count":12},{"port":21443,"proto":"tcp","label":"","count":12},{"port":2150,"proto":"tcp","label":"","count":11},{"port":11738,"proto":"tcp","label":"","count":11},{"port":5922,"proto":"tcp","label":"","count":10},{"port":3501,"proto":"tcp","label":"","count":10},{"port":20206,"proto":"tcp","label":"","count":10},{"port":15029,"proto":"tcp","label":"","count":9},{"port":50221,"proto":"tcp","label":"","count":9},{"port":9802,"proto":"tcp","label":"","count":9},{"port":44445,"proto":"tcp","label":"","count":9},{"port":31024,"proto":"tcp","label":"","count":9},{"port":14016,"proto":"tcp","label":"","count":8},{"port":8906,"proto":"tcp","label":"","count":8},{"port":12309,"proto":"tcp","label":"","count":7}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t12i990600_a40d17a72bcb_4446390ac224","t13i3612h1_bcee18a5b459_e10b9050f4c9"],"tls_client_hello":"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","tls_ja3":["548f8886dcfeeab8d28d3346a63b70c5","382bf461327b7a16e4205fb4b5d1bf09"],"http_akin":["b11cun030_00040011_c91eaf54","b11cun010_00040000_c4b2c4aa","b11cuq040_00040811_2daa70d6","b10cun000_00000000_334359b9"]},"fingerprint_peers":{"t12i990600_a40d17a72bcb_4446390ac224":44,"t13i3612h1_bcee18a5b459_e10b9050f4c9":134,"b11cun030_00040011_c91eaf54":641,"b11cun010_00040000_c4b2c4aa":665,"b11cuq040_00040811_2daa70d6":276,"b10cun000_00000000_334359b9":2187},"akin_families":{},"user_agents":["Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36"],"timeline":[{"date":"2026-10-05","count":234}],"recent_events":[{"timestamp":"2026-10-05T16:44:59","port":3501,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"9111498b-aab4-416a-83c3-b890c5e796eb","seq":1,"duration_ms":100,"bytes_in":38,"bytes_out":79},{"timestamp":"2026-10-05T16:44:55","port":3501,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a0d0a","method":"GET","user_agent":"","ja3":"548f8886dcfeeab8d28d3346a63b70c5","session":"18a8f009-ba1e-461e-9939-e06046c230b8","seq":1,"duration_ms":380,"bytes_in":18,"bytes_out":79},{"timestamp":"2026-10-05T16:44:47","port":20206,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"b6de0014-c4a3-47b7-b1ec-5788ce82f56f","seq":1,"duration_ms":101,"bytes_in":38,"bytes_out":79},{"timestamp":"2026-10-05T16:44:45","port":31024,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"cb6a1d59-d15b-4878-aeb0-09a259f57cd2","seq":1,"duration_ms":100,"bytes_in":38,"bytes_out":79},{"timestamp":"2026-10-05T16:44:44","port":8704,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"9b2d7542-b6ee-4ba7-adc8-e15a650ac65f","seq":1,"duration_ms":100,"bytes_in":38,"bytes_out":79},{"timestamp":"2026-10-05T16:44:44","port":9797,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"a3c5ac27-4195-4767-a8a8-0dfd35fa2352","seq":1,"duration_ms":100,"bytes_in":38,"bytes_out":79},{"timestamp":"2026-10-05T16:44:43","port":25060,"proto":"tcp","app_proto":"","app_protocol":"nfs","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000(\u001b�XN\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0001��\u0000\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"800000281bfe584e0000000000000002000186a0000000020000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"55155045-9967-437d-a50c-55b210863767","seq":1,"duration_ms":100,"bytes_in":44,"bytes_out":14},{"timestamp":"2026-10-05T16:44:43","port":20206,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"89c957a0-885a-4558-827a-4674c63697e9","seq":1,"duration_ms":100,"bytes_in":18,"bytes_out":79},{"timestamp":"2026-10-05T16:44:43","port":11029,"proto":"tcp","app_proto":"","app_protocol":"nfs","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000(\u000f�!�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0001��\u0000\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"800000280fc821cc0000000000000002000186a0000000020000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"c5a84e66-cca0-425a-a11a-97ef39eca7c5","seq":1,"duration_ms":100,"bytes_in":44,"bytes_out":14},{"timestamp":"2026-10-05T16:44:42","port":9797,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"fc5e51a1-4468-44db-917e-5c09cc4591a2","seq":1,"duration_ms":100,"bytes_in":18,"bytes_out":79}],"http_methods":[{"method":"GET","count":131},{"method":"POST","count":12},{"method":"OPTIONS","count":10}],"distinct_ports_total":61,"top_paths":[{"path":"/","count":81,"ports":31},{"path":"/nmaplowercheck1791218541","count":14,"ports":14},{"path":"/sdk","count":12,"ports":11},{"path":"/HNAP1","count":11,"ports":10},{"path":"/Nmap/folder/check1791218541","count":11,"ports":11},{"path":"/NmapUpperCheck1791218541","count":10,"ports":9},{"path":"/evox/about","count":8,"ports":8},{"path":"/NmapUpperCheck1791218540","count":3,"ports":2},{"path":"/nmaplowercheck1791218540","count":2,"ports":2},{"path":"/Nmap/folder/check1791218540","count":1,"ports":1}],"distinct_paths_total":10,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"http/1.1","count":2}],"banners":[],"credentials":[],"header_profile":{"signature":["Host"],"representative":[{"name":"Host","value":"<HONEYPOT>","notable":false}],"distinct_sets":1,"events_with_headers":5},"tags":[],"data_as_of":"2026-10-05T18:51:30.983955+00:00"}