{"ip":"152.32.206.107","total_events":139,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"17+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 17 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"38,169 bytes sent","bytes_sent":38169,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-15T06:55:33","last_seen":"2026-09-29T03:01:10","events_24h":0,"events_7d":50,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Reston","lat":38.9653,"lon":-77.338,"asn":135377,"org":"UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":9091,"proto":"tcp","label":"","count":18},{"port":2379,"proto":"tcp","label":"","count":11},{"port":9100,"proto":"tcp","label":"Printer","count":10},{"port":6000,"proto":"tcp","label":"X11","count":8},{"port":8087,"proto":"tcp","label":"","count":8},{"port":37443,"proto":"tcp","label":"","count":7},{"port":2012,"proto":"tcp","label":"","count":7},{"port":9305,"proto":"tcp","label":"","count":7},{"port":6443,"proto":"tcp","label":"k8s API","count":7},{"port":8058,"proto":"tcp","label":"","count":7},{"port":8006,"proto":"tcp","label":"","count":7},{"port":8089,"proto":"tcp","label":"Splunk","count":7},{"port":60149,"proto":"tcp","label":"","count":7},{"port":49502,"proto":"tcp","label":"","count":7},{"port":2052,"proto":"tcp","label":"","count":7}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i130900_f57a46bbacb6_e7c285222651"],"tls_client_hello":"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","tls_ja3":["6639916abfac56b9257ca216677085bc"],"http_akin":["b11cun010_00040000_c4b2c4aa","b11cun030_00040018_f74a6e72","b11cun050_0004001e_5f886858","b11cun050_00040017_976354f0"]},"fingerprint_peers":{"t13i130900_f57a46bbacb6_e7c285222651":3786,"b11cun010_00040000_c4b2c4aa":655,"b11cun030_00040018_f74a6e72":564,"b11cun050_0004001e_5f886858":562,"b11cun050_00040017_976354f0":1280},"akin_families":{"b11cun050_00040017_976354f0":{"head":"b11cun050_00040017_976354f0","shapes":2,"ips":1280}},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"],"timeline":[{"date":"2026-09-15","count":7},{"date":"2026-09-16","count":28},{"date":"2026-09-19","count":15},{"date":"2026-09-20","count":18},{"date":"2026-09-21","count":7},{"date":"2026-09-22","count":7},{"date":"2026-09-24","count":7},{"date":"2026-09-25","count":7},{"date":"2026-09-27","count":11},{"date":"2026-09-28","count":14},{"date":"2026-09-29","count":18}],"recent_events":[{"timestamp":"2026-09-29T03:01:10","port":9091,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"<HONEYPOT>:9091\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/config.json","summary":"","payload_hex":"474554202f636f6e6669672e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11","ja3":"6639916abfac56b9257ca216677085bc","session":"6fe7d37b-dc88-4738-b48e-f6068cbe4ca3","seq":1,"duration_ms":100,"bytes_in":421,"bytes_out":79},{"timestamp":"2026-09-29T03:01:04","port":9091,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"<HONEYPOT>:9091\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sitemap.xml","summary":"","payload_hex":"474554202f736974656d61702e786d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a393039310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132302e302e302e30205361666172692f3533372e3336204564672f3132302e302e302e300d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c696d6167652f61706e672c2a2f2a3b713d302e382c6170706c69636174696f6e2f7369676e65642d65786368616e67653b763d62333b713d302e370d0a4163636570742d4c616e67756167653a207a682d434e2c7a683b713d302e392c656e3b713d302e382c656e2d47423b713d302e372c656e2d55533b713d302e360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"6639916abfac56b9257ca216677085bc","session":"a539b8d3-e5a0-44de-bbce-5a2290d703dc","seq":1,"duration_ms":100,"bytes_in":434,"bytes_out":79},{"timestamp":"2026-09-29T03:01:03","port":9091,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"<HONEYPOT>:9091\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"6639916abfac56b9257ca216677085bc","session":"bf2d2784-f688-4bc3-92eb-4655fe36d560","seq":1,"duration_ms":100,"bytes_in":434,"bytes_out":79},{"timestamp":"2026-09-29T03:01:03","port":9091,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"<HONEYPOT>:9091\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a393039310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132302e302e302e30205361666172692f3533372e3336204564672f3132302e302e302e300d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c696d6167652f61706e672c2a2f2a3b713d302e382c6170706c69636174696f6e2f7369676e65642d65786368616e67653b763d62333b713d302e370d0a4163636570742d4c616e67756167653a207a682d434e2c7a683b713d302e392c656e3b713d302e382c656e2d47423b713d302e372c656e2d55533b713d302e360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"6639916abfac56b9257ca216677085bc","session":"6a5baefe-6fb1-44ec-bb80-fc384a16b7c0","seq":1,"duration_ms":100,"bytes_in":433,"bytes_out":79},{"timestamp":"2026-09-29T03:00:44","port":9091,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"<HONEYPOT>:9091\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393039310d0a4163636570742d4c616e67756167653a207a682d434e2c7a683b713d302e392c656e3b713d302e382c656e2d47423b713d302e372c656e2d55533b713d302e360d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132302e302e302e30205361666172692f3533372e3336204564672f3132302e302e302e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"6639916abfac56b9257ca216677085bc","session":"f5a27cc5-99a5-46e0-98b8-7be1c8d4705d","seq":1,"duration_ms":100,"bytes_in":255,"bytes_out":79},{"timestamp":"2026-09-29T03:00:26","port":9091,"proto":"tcp","app_proto":"","app_protocol":"drda","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u00002�\u0001\u0000\u0001\u0000,\u0010A\u0000\u0004\u0011^\u0000\u0004\u0011m\u0000\u0004\u0011Z\u0000\u0018\u0014\u0004\u0014\u0003\u0000\u0007$\u0007\u0000\b$\u000f\u0000\b\u0014@\u0000\b\u0014t\u0000\b\u0000\u0004\u0011G","payload_hex":"0032d0010001002c10410004115e0004116d0004115a001814041403000724070008240f0008144000081474000800041147","method":"","user_agent":"","ja3":"","session":"710e4085-4f66-4f8d-b3aa-8fc43bea3901","seq":1,"duration_ms":100,"bytes_in":50,"bytes_out":14},{"timestamp":"2026-09-29T03:00:08","port":9091,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000�\u0001<\u0000\u0000\u0000d\u0000e\u0000\u0000\u0000=\u0000\u0006IEEEM\u0000\u0000lsqlexec\u0000\u0000\u0000\u0000\u0000\u0000\u00069.280\u0000\u0000\fRDS#R000000\u0000\u0000\u0005sqli\u0000\u0000\u0000\u00013\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0005nmap\u0000\u0000\u0005nmap\u0000ol\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000=tlitcp\u0000\u0000\u0000\u0000\u0000\u0001\u0000h\u0000\u000b\u0000\u0000\u0000\u0003\u0000\u0005nmap\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000j\u0000\u0000\u0000","payload_hex":"0094013c0000006400650000003d0006494545454d00006c73716c6578656300000000000006392e32383000000c524453235230303030303000000573716c6900000001330000000000000000000100056e6d61700000056e6d6170006f6c0000000000000000003d746c697463700000000000010068000b0000000300056e6d61700000000000000000000000006a0000007f","method":"","user_agent":"","ja3":"","session":"24ddc3af-c87c-4e39-8e72-6a42405516ed","seq":1,"duration_ms":101,"bytes_in":148,"bytes_out":14,"enriched":{"digest":"023569519d51bb8c","strings":["IEEEM","lsqlexec","9.280","RDS#R000000","sqli","nmap","=tlitcp","<de=","IEEEMlsqlexec","nmapol=tlitcp"]}},{"timestamp":"2026-09-29T02:59:50","port":9091,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u00003.�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Administrator\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"030000332ee00000000000436f6f6b69653a206d737473686173683d41646d696e6973747261746f720d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"701079c7-a0e2-4710-b477-de964a9210ce","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":14,"enriched":{"digest":"c91e42b831f80102","label":"RDP (X.224)","strings":["Cookie: mstshash=Administrator"]}},{"timestamp":"2026-09-29T02:59:31","port":9091,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u000b\u0006�\u0000\u0000\u0000\u0000\u0000","payload_hex":"0300000b06e00000000000","method":"","user_agent":"","ja3":"","session":"1014a705-4683-4315-b498-799194fe1de6","seq":1,"duration_ms":100,"bytes_in":11,"bytes_out":14,"enriched":{"digest":"c6ea7c5d89294245","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-09-29T02:58:06","port":9091,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"<HONEYPOT>:9091\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/config.json","summary":"","payload_hex":"474554202f636f6e6669672e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a393039310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f375f3029204170706c655765624b69742f3533352e313120284b48544d4c2c206c696b65204765636b6f29204368726f6d652f31372e302e3936332e3536205361666172692f3533352e31310d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c696d6167652f61706e672c2a2f2a3b713d302e382c6170706c69636174696f6e2f7369676e65642d65786368616e67653b763d62333b713d302e370d0a4163636570742d4c616e67756167653a207a682d434e2c7a683b713d302e392c656e3b713d302e382c656e2d47423b713d302e372c656e2d55533b713d302e360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11","ja3":"6639916abfac56b9257ca216677085bc","session":"a953c8bb-e44b-4608-9d61-57161577b0b0","seq":1,"duration_ms":100,"bytes_in":421,"bytes_out":79}],"http_methods":[{"method":"GET","count":94}],"distinct_ports_total":17,"top_paths":[{"path":"/","count":18,"ports":17},{"path":"/config.json","count":18,"ports":17},{"path":"/robots.txt","count":18,"ports":17},{"path":"/sitemap.xml","count":18,"ports":17},{"path":"/favicon.ico","count":18,"ports":17},{"path":"/version","count":2,"ports":1},{"path":"/v2/stats/self","count":1,"ports":1},{"path":"//v2/members","count":1,"ports":1}],"distinct_paths_total":8,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6","notable":false},{"name":"Host","value":"<HONEYPOT>:9091","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11","notable":false}],"distinct_sets":2,"events_with_headers":6},"tags":[],"data_as_of":"2026-10-01T15:31:33.836054+00:00"}