{"ip":"118.193.37.50","total_events":621,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"44+ ports swept","confidence":"medium","network_type":null},"first_seen":"2026-06-17T19:20:27","last_seen":"2026-06-26T11:44:31","events_24h":283,"events_7d":537,"geo":{"country_code":"HK","country_name":"Hong Kong","region":"","city":"Hong Kong","lat":22.2842,"lon":114.1759,"asn":135377,"org":"UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"top_ports":[{"port":9876,"proto":"tcp","label":"","count":28},{"port":8000,"proto":"tcp","label":"HTTP-alt","count":28},{"port":8888,"proto":"tcp","label":"HTTP-alt","count":28},{"port":9999,"proto":"tcp","label":"","count":28},{"port":8899,"proto":"tcp","label":"","count":28},{"port":8765,"proto":"tcp","label":"","count":26},{"port":80,"proto":"tcp","label":"HTTP","count":26},{"port":9090,"proto":"tcp","label":"Prometheus","count":24},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":24},{"port":8088,"proto":"tcp","label":"Hadoop","count":24},{"port":24940,"proto":"tcp","label":"","count":12},{"port":5000,"proto":"tcp","label":"Web-alt","count":12},{"port":8787,"proto":"tcp","label":"","count":12},{"port":3002,"proto":"tcp","label":"","count":12},{"port":8082,"proto":"tcp","label":"","count":12}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i311000_e8f1e7e78f70_d41ae481755e","t13i130900_f57a46bbacb6_e7c285222651"],"tls_ja3":["c12b4ccd5320bbb380ca1a9df90f771d","6639916abfac56b9257ca216677085bc"],"ja4h":["ge11nn0400_88d30a62b7ad","ge11nn0500_b61ccdd104e0"]},"fingerprint_peers":{"t13i130900_f57a46bbacb6_e7c285222651":2970,"t13i311000_e8f1e7e78f70_d41ae481755e":606,"ge11nn0500_b61ccdd104e0":354,"ge11nn0400_88d30a62b7ad":7863},"user_agents":["Mozilla/5.0 (compatible; foda-scanner/0.1)"],"timeline":[{"date":"2026-06-17","count":6},{"date":"2026-06-19","count":78},{"date":"2026-06-20","count":40},{"date":"2026-06-21","count":38},{"date":"2026-06-22","count":176},{"date":"2026-06-25","count":140},{"date":"2026-06-26","count":143}],"recent_events":[{"timestamp":"2026-06-26T11:44:31","port":4000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:4000\",\"user-agent\":\"Mozilla/5.0 (compatible; foda-scanner/0.1)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a343030300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20666f64612d7363616e6e65722f302e31290d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; foda-scanner/0.1)","community_id":"1:yQ7GiaERU5BGLlL1H0yjmWAwt4c=","ja3":"6639916abfac56b9257ca216677085bc","session":"86843691-8d54-4da8-a5d7-333b8f3d1674","seq":1,"duration_ms":100,"bytes_in":154,"bytes_out":78},{"timestamp":"2026-06-26T11:44:31","port":4000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:4000\",\"user-agent\":\"Mozilla/5.0 (compatible; foda-scanner/0.1)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a343030300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20666f64612d7363616e6e65722f302e31290d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; foda-scanner/0.1)","community_id":"1:1D8huDpz04LTNkg1gq3+nZebfvw=","ja3":"","session":"d7b379e9-555f-48aa-9999-c28fdc2e6ea4","seq":1,"duration_ms":100,"bytes_in":154,"bytes_out":78},{"timestamp":"2026-06-26T11:43:57","port":8889,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8889\",\"user-agent\":\"Mozilla/5.0 (compatible; foda-scanner/0.1)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383838390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20666f64612d7363616e6e65722f302e31290d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; foda-scanner/0.1)","community_id":"1:X+kwElJBYSfVSo4tYrCls2DrPWQ=","ja3":"6639916abfac56b9257ca216677085bc","session":"f6f4be7d-b20d-47a9-9dc8-f62ea599664e","seq":1,"duration_ms":100,"bytes_in":154,"bytes_out":78},{"timestamp":"2026-06-26T11:43:56","port":8889,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8889\",\"user-agent\":\"Mozilla/5.0 (compatible; foda-scanner/0.1)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383838390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20666f64612d7363616e6e65722f302e31290d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; foda-scanner/0.1)","community_id":"1:KTpYGup5nR4hvBfhDZW2zH5Uqec=","ja3":"","session":"81e72779-cbb7-4bee-9556-91343547494a","seq":1,"duration_ms":100,"bytes_in":154,"bytes_out":78},{"timestamp":"2026-06-26T11:43:32","port":5000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:5000\",\"user-agent\":\"Mozilla/5.0 (compatible; foda-scanner/0.1)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353030300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20666f64612d7363616e6e65722f302e31290d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; foda-scanner/0.1)","community_id":"1:1G7J5c/NrUoZsjfrB0u7z2/XWwk=","ja3":"6639916abfac56b9257ca216677085bc","session":"b0dcd5b4-3ab5-45d1-8d58-684c7b56802c","seq":1,"duration_ms":100,"bytes_in":154,"bytes_out":78},{"timestamp":"2026-06-26T11:43:31","port":5000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:5000\",\"user-agent\":\"Mozilla/5.0 (compatible; foda-scanner/0.1)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353030300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20666f64612d7363616e6e65722f302e31290d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; foda-scanner/0.1)","community_id":"1:sAv0L5VGs88ga5okkYOecEEq4xI=","ja3":"","session":"77ddfcaf-b00e-44b2-b0d9-dab437992681","seq":1,"duration_ms":100,"bytes_in":154,"bytes_out":78},{"timestamp":"2026-06-26T11:41:39","port":8089,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8089\",\"user-agent\":\"Mozilla/5.0 (compatible; foda-scanner/0.1)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20666f64612d7363616e6e65722f302e31290d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; foda-scanner/0.1)","community_id":"1:q83Wunb+VromOcadrPT2wStu8rA=","ja3":"6639916abfac56b9257ca216677085bc","session":"bdc6fe79-13c2-4907-a28e-ffafe2b12917","seq":1,"duration_ms":100,"bytes_in":154,"bytes_out":78},{"timestamp":"2026-06-26T11:41:38","port":8089,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8089\",\"user-agent\":\"Mozilla/5.0 (compatible; foda-scanner/0.1)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20666f64612d7363616e6e65722f302e31290d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; foda-scanner/0.1)","community_id":"1:JQ+6W9mHONYL4HBoesxvTA3cVDE=","ja3":"","session":"2cbc92e8-9b94-46da-a1f9-82b2698bb148","seq":1,"duration_ms":100,"bytes_in":154,"bytes_out":78},{"timestamp":"2026-06-26T11:40:07","port":8765,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8765\",\"user-agent\":\"Mozilla/5.0 (compatible; foda-scanner/0.1)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383736350d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20666f64612d7363616e6e65722f302e31290d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; foda-scanner/0.1)","community_id":"1:1zhKHMzInHeUfOrWNCHGugAMQv8=","ja3":"6639916abfac56b9257ca216677085bc","session":"0443c0b8-acc9-4c9b-9d0f-30b878d00e79","seq":1,"duration_ms":101,"bytes_in":154,"bytes_out":78},{"timestamp":"2026-06-26T11:40:06","port":8765,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8765\",\"user-agent\":\"Mozilla/5.0 (compatible; foda-scanner/0.1)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383736350d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20666f64612d7363616e6e65722f302e31290d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; foda-scanner/0.1)","community_id":"1:/+ZjRDjmDKt0wu+oTVeQafgePwk=","ja3":"","session":"02a3673f-bbd7-4a9d-a9da-412951244c81","seq":1,"duration_ms":100,"bytes_in":154,"bytes_out":78}],"http_methods":[{"method":"GET","count":621}],"distinct_ports_total":44,"top_paths":[{"path":"/","count":621,"ports":44}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:4000","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; foda-scanner/0.1)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-06-26T14:36:18.005463+00:00"}