{"ip":"124.88.113.115","total_events":6,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["6 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"586 bytes sent","bytes_sent":586,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-13T04:56:53","last_seen":"2026-09-23T21:06:31","events_24h":0,"events_7d":1,"geo":{"country_code":"CN","country_name":"China","region":"Xinjiang","city":"Ürümqi","lat":43.8006,"lon":87.6012,"asn":4837,"org":"CHINA UNICOM China169 Backbone"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as4837","label":"China Unicom","category":"isp","url":"https://www.peeringdb.com/asn/4837"},"cve_matches":[],"malware":[],"top_ports":[{"port":6050,"proto":"tcp","label":"","count":1},{"port":18016,"proto":"tcp","label":"","count":1},{"port":10005,"proto":"tcp","label":"","count":1},{"port":5000,"proto":"tcp","label":"Web-alt","count":1},{"port":12326,"proto":"tcp","label":"","count":1},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i130900_f57a46bbacb6_e7c285222651"],"tls_client_hello":"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","tls_ja3":["6639916abfac56b9257ca216677085bc"],"http_akin":["b11cun020_00040004_0a8d7f11","b11cun030_00040011_c91eaf54","b11cuq050_00450804_6eb31df9"]},"fingerprint_peers":{"t13i130900_f57a46bbacb6_e7c285222651":3800,"b11cun020_00040004_0a8d7f11":3946,"b11cun030_00040011_c91eaf54":546,"b11cuq050_00450804_6eb31df9":18},"akin_families":{"b11cun020_00040004_0a8d7f11":{"head":"b11cun020_00040004_0a8d7f11","shapes":3,"ips":3946},"b11cun030_00040011_c91eaf54":{"head":"b11cun030_00040011_c91eaf54","shapes":2,"ips":547}},"user_agents":["Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36"],"timeline":[{"date":"2026-07-13","count":1},{"date":"2026-08-09","count":1},{"date":"2026-08-16","count":1},{"date":"2026-08-22","count":1},{"date":"2026-09-12","count":1},{"date":"2026-09-23","count":1}],"recent_events":[{"timestamp":"2026-09-23T21:06:31","port":18016,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:18016\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31383031360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"","ja3":"6639916abfac56b9257ca216677085bc","session":"c6f8b4b7-d6ce-4dab-83d8-106a107df366","seq":1,"duration_ms":101,"bytes_in":58,"bytes_out":79},{"timestamp":"2026-09-12T02:21:54","port":8080,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"authorization\":\"Bearer root:Milvus\",\"content-length\":\"2\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>:8080\"}","body":"{}","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/v2/vectordb/collections/describe","summary":"","payload_hex":"504f5354202f76322f766563746f7264622f636f6c6c656374696f6e732f646573637269626520485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a4163636570743a202a2f2a0d0a417574686f72697a6174696f6e3a2042656172657220726f6f743a4d696c7675730d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6a736f6e0d0a436f6e74656e742d4c656e6774683a20320d0a0d0a7b7d","method":"POST","user_agent":"","ja3":"6639916abfac56b9257ca216677085bc","session":"45252c8a-29e0-4885-83ff-5a82a122ebd4","seq":1,"duration_ms":388,"bytes_in":177,"bytes_out":79},{"timestamp":"2026-08-22T07:05:52","port":6050,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:6050\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a363035300d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"fd0305db-c443-4175-8d5d-c3f71b688acc","seq":1,"duration_ms":100,"bytes_in":58,"bytes_out":79},{"timestamp":"2026-08-16T14:41:32","port":5000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:5000\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353030300d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"155fce93-5721-4cf6-ad69-4d8a4c09b2ff","seq":1,"duration_ms":100,"bytes_in":56,"bytes_out":79},{"timestamp":"2026-08-09T10:12:30","port":12326,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:12326\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31323332360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"","ja3":"6639916abfac56b9257ca216677085bc","session":"1e7c524d-e628-49d1-b034-024986f7f0f8","seq":1,"duration_ms":101,"bytes_in":57,"bytes_out":79},{"timestamp":"2026-07-13T04:56:53","port":10005,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>:10005\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303030350d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e3129204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f34392e302e323632332e313132205361666172692f3533372e33360d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36","ja3":"","session":"53bf7152-fb3e-4f94-a58f-0bade36faf69","seq":1,"duration_ms":100,"bytes_in":180,"bytes_out":79}],"http_methods":[{"method":"GET","count":5},{"method":"POST","count":1}],"distinct_ports_total":6,"top_paths":[{"path":"/","count":5,"ports":5},{"path":"/v2/vectordb/collections/describe","count":1,"ports":1}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Authorization","Content-Length","Content-Type","Host"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Authorization","value":"Bearer root:Milvus","notable":true},{"name":"Content-Length","value":"2","notable":false},{"name":"Content-Type","value":"application/json","notable":true},{"name":"Host","value":"<HONEYPOT>:8080","notable":false}],"distinct_sets":3,"events_with_headers":6},"tags":[],"data_as_of":"2026-09-30T16:52:53.221903+00:00"}