{"ip":"140.245.52.216","total_events":48,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["48 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,596 bytes sent","bytes_sent":2596,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-24T22:32:34","last_seen":"2026-09-24T22:32:51","events_24h":0,"events_7d":48,"geo":{"country_code":"SG","country_name":"Singapore","region":"","city":"Singapore","lat":1.3254,"lon":103.7433,"asn":31898,"org":"Oracle Corporation"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as31898","label":"Oracle Cloud Infrastructure","category":"cdn","url":"https://www.peeringdb.com/asn/31898"},"cve_matches":[],"malware":[],"top_ports":[{"port":3000,"proto":"tcp","label":"Web-alt","count":6},{"port":9119,"proto":"tcp","label":"","count":6},{"port":9121,"proto":"tcp","label":"","count":6},{"port":9122,"proto":"tcp","label":"","count":6},{"port":443,"proto":"tcp","label":"HTTPS","count":6},{"port":9118,"proto":"tcp","label":"","count":6},{"port":9120,"proto":"tcp","label":"","count":6},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":6}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i3012h2_1d37bd780c83_8537cf56674e"],"tls_client_hello":"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","tls_ja3":["7587a1ac9a4f17b4e4e5fe226716f4df"],"http_akin":["a11cun030_00000049_54d07b6d"]},"fingerprint_peers":{"t13i3012h2_1d37bd780c83_8537cf56674e":22,"a11cun030_00000049_54d07b6d":2469},"akin_families":{"a11cun030_00000049_54d07b6d":{"head":"a11cun030_00000049_54d07b6d","shapes":3,"ips":2473}},"user_agents":["curl/8.14.1"],"timeline":[{"date":"2026-09-24","count":48}],"recent_events":[{"timestamp":"2026-09-24T22:32:51","port":443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"","session":"a9004c36-3b21-452d-b61d-722112b3f52c","seq":1,"duration_ms":101,"bytes_in":80,"bytes_out":79},{"timestamp":"2026-09-24T22:32:51","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"7587a1ac9a4f17b4e4e5fe226716f4df","session":"a2eb1084-6fe0-429e-b3b4-38a57417b4c3","seq":1,"duration_ms":100,"bytes_in":76,"bytes_out":79},{"timestamp":"2026-09-24T22:32:50","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","ja3":"","session":"fa2a5817-8c04-448e-b64b-d74b4f91aaca","seq":1,"duration_ms":0,"bytes_in":1,"bytes_out":14},{"timestamp":"2026-09-24T22:32:50","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"7587a1ac9a4f17b4e4e5fe226716f4df","session":"e8fc797c-a401-4576-b874-89f5f62c435d","seq":1,"duration_ms":100,"bytes_in":76,"bytes_out":79},{"timestamp":"2026-09-24T22:32:49","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"","session":"1ce9bf0a-0921-4884-8dda-a2db4385f70d","seq":1,"duration_ms":101,"bytes_in":81,"bytes_out":79},{"timestamp":"2026-09-24T22:32:49","port":8080,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"7587a1ac9a4f17b4e4e5fe226716f4df","session":"36d38d75-17b9-48a2-af05-892ad06a9824","seq":1,"duration_ms":100,"bytes_in":81,"bytes_out":79},{"timestamp":"2026-09-24T22:32:48","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"7587a1ac9a4f17b4e4e5fe226716f4df","session":"f4af417c-b49a-44b6-975d-61f14882b619","seq":1,"duration_ms":101,"bytes_in":81,"bytes_out":79},{"timestamp":"2026-09-24T22:32:48","port":8080,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","ja3":"","session":"4d69b941-34a9-4593-952f-d883e92903d5","seq":1,"duration_ms":0,"bytes_in":1,"bytes_out":14},{"timestamp":"2026-09-24T22:32:47","port":3000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","ja3":"","session":"db4cb057-0d10-4aa2-bec1-62bed36a9066","seq":1,"duration_ms":0,"bytes_in":1,"bytes_out":14},{"timestamp":"2026-09-24T22:32:47","port":8080,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"7587a1ac9a4f17b4e4e5fe226716f4df","session":"c467ca4f-2c47-46b8-a69b-abd70fff9010","seq":1,"duration_ms":101,"bytes_in":81,"bytes_out":79}],"http_methods":[{"method":"GET","count":32}],"distinct_ports_total":8,"top_paths":[{"path":"/","count":32,"ports":8}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":16}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Host","value":"<HONEYPOT>:443","notable":false},{"name":"User-Agent","value":"curl/8.14.1","notable":false}],"distinct_sets":1,"events_with_headers":7},"tags":[],"data_as_of":"2026-09-28T20:50:47.706527+00:00"}