{"ip":"165.154.119.52","total_events":68,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["68 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 17,543 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"17,543 bytes sent","bytes_sent":17543,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-14T18:07:37","last_seen":"2026-09-22T18:27:17","events_24h":0,"events_7d":36,"geo":{"country_code":"TH","country_name":"Thailand","region":"Bangkok","city":"Bangkok","lat":13.7551,"lon":100.5057,"asn":135377,"org":"UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":139,"proto":"tcp","label":"SMB","count":11},{"port":50050,"proto":"tcp","label":"","count":9},{"port":5985,"proto":"tcp","label":"","count":9},{"port":49155,"proto":"tcp","label":"","count":8},{"port":28632,"proto":"tcp","label":"","count":7},{"port":10010,"proto":"tcp","label":"","count":7},{"port":17997,"proto":"tcp","label":"","count":7},{"port":11527,"proto":"tcp","label":"","count":7},{"port":2086,"proto":"tcp","label":"","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i1811h1_85036bcba153_b26ce05bbdd6","t13i130900_f57a46bbacb6_e7c285222651"],"tls_client_hello":"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","tls_ja3":["b885946e72ad51dca6c70abc2f773506","6639916abfac56b9257ca216677085bc"],"http_akin":[]},"fingerprint_peers":{"t13i130900_f57a46bbacb6_e7c285222651":4276,"t13i1811h1_85036bcba153_b26ce05bbdd6":50},"akin_families":{},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_7_6 rv:5.0; he-IL) AppleWebKit/534.36.7 (KHTML, like Gecko) Version/5.1 Safari/534.36.7"],"timeline":[{"date":"2026-09-14","count":14},{"date":"2026-09-15","count":7},{"date":"2026-09-17","count":11},{"date":"2026-09-18","count":7},{"date":"2026-09-19","count":9},{"date":"2026-09-20","count":9},{"date":"2026-09-22","count":11}],"recent_events":[{"timestamp":"2026-09-22T18:27:17","port":2086,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0004\u0000\u0001\u0002�\u0005\u0001\u0000\u0003\ngithub.com\u0000PGET / HTTP/1.0\r\n\r\n","payload_hex":"050400010280050100030a6769746875622e636f6d0050474554202f20485454502f312e300d0a0d0a","method":"","user_agent":"","ja3":"","session":"a525dedc-cfa0-4e98-bfee-0755ce3427bf","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"42fcfca668af15af","label":"SOCKS5","strings":["github.com","PGET / HTTP/1.0","github.comPGET / HTTP/1.0"],"iocs":{"domains":["github.com","github.compget"]}}},{"timestamp":"2026-09-22T18:26:57","port":2086,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u00003.�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Administrator\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"030000332ee00000000000436f6f6b69653a206d737473686173683d41646d696e6973747261746f720d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"86dcf0e7-aa02-4259-9e9f-134b8962ee61","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":14,"enriched":{"digest":"c91e42b831f80102","label":"RDP (X.224)","strings":["Cookie: mstshash=Administrator"]}},{"timestamp":"2026-09-22T18:26:39","port":2086,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u000b\u0006�\u0000\u0000\u0000\u0000\u0000","payload_hex":"0300000b06e00000000000","method":"","user_agent":"","ja3":"","session":"b4cd8bee-6acc-4fa8-b1da-7bd9f5c909d4","seq":1,"duration_ms":100,"bytes_in":11,"bytes_out":14,"enriched":{"digest":"c6ea7c5d89294245","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-09-22T10:36:51","port":49155,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"<HONEYPOT>:49155\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/config.json","summary":"","payload_hex":"474554202f636f6e6669672e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11","ja3":"6639916abfac56b9257ca216677085bc","session":"265559a0-1af3-4fe8-9745-9e8245adc8e7","seq":1,"duration_ms":100,"bytes_in":421,"bytes_out":79},{"timestamp":"2026-09-22T10:36:41","port":49155,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"<HONEYPOT>:49155\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sitemap.xml","summary":"","payload_hex":"474554202f736974656d61702e786d6c20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"6639916abfac56b9257ca216677085bc","session":"69e0589f-79bf-4c26-84f3-e772f54e525a","seq":1,"duration_ms":100,"bytes_in":434,"bytes_out":79},{"timestamp":"2026-09-22T10:36:40","port":49155,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"<HONEYPOT>:49155\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"6639916abfac56b9257ca216677085bc","session":"9b40131c-7697-4d4e-8eb7-b77787cde823","seq":1,"duration_ms":100,"bytes_in":433,"bytes_out":79},{"timestamp":"2026-09-22T10:36:39","port":49155,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"<HONEYPOT>:49155\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"6639916abfac56b9257ca216677085bc","session":"aac49b18-a97e-489b-934a-7992e8d35a3d","seq":1,"duration_ms":100,"bytes_in":434,"bytes_out":79},{"timestamp":"2026-09-22T10:36:20","port":49155,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"<HONEYPOT>:49155\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34393135350d0a4163636570742d4c616e67756167653a207a682d434e2c7a683b713d302e392c656e3b713d302e382c656e2d47423b713d302e372c656e2d55533b713d302e360d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132302e302e302e30205361666172692f3533372e3336204564672f3132302e302e302e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"6639916abfac56b9257ca216677085bc","session":"a0df71b7-b20b-4386-b77d-28f26363e420","seq":1,"duration_ms":101,"bytes_in":255,"bytes_out":79},{"timestamp":"2026-09-22T10:36:02","port":49155,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000��SMBr\u0000\u0000\u0000\u0000\b\u0001@\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000@\u0006\u0000\u0000\u0001\u0000\u0000�\u0000\u0002PC NETWORK PROGRAM 1.0\u0000\u0002MICROSOFT NETWORKS 1.03\u0000\u0002MICROSOFT NETWORKS 3.0\u0000\u0002LANMAN1.0\u0000\u0002LM1.2X002\u0000\u0002Samba\u0000\u0002NT LANMAN 1.0\u0000\u0002NT LM 0.12\u0000","payload_hex":"000000a4ff534d4272000000000801400000000000000000000000000000400600000100008100025043204e4554574f524b2050524f4752414d20312e3000024d4943524f534f4654204e4554574f524b5320312e303300024d4943524f534f4654204e4554574f524b5320332e3000024c414e4d414e312e3000024c4d312e3258303032000253616d626100024e54204c414e4d414e20312e3000024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"79cd5b29-e38d-44e2-b9fd-ef7dae9b1d4e","seq":1,"duration_ms":100,"bytes_in":168,"bytes_out":14,"enriched":{"digest":"517d6cf13ba58442","strings":["SMBr","PC NETWORK PROGRAM 1.0","MICROSOFT NETWORKS 1.03","MICROSOFT NETWORKS 3.0","LANMAN1.0","LM1.2X002","Samba","NT LANMAN 1.0","NT LM 0.12"]}},{"timestamp":"2026-09-22T10:35:43","port":49155,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u00003.�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Administrator\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"030000332ee00000000000436f6f6b69653a206d737473686173683d41646d696e6973747261746f720d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"5274be20-aa2b-48c5-b259-e19dce73817f","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":14,"enriched":{"digest":"c91e42b831f80102","label":"RDP (X.224)","strings":["Cookie: mstshash=Administrator"]}}],"http_methods":[{"method":"GET","count":40},{"method":"POST","count":2}],"distinct_ports_total":9,"top_paths":[{"path":"/","count":8,"ports":8},{"path":"/config.json","count":8,"ports":8},{"path":"/robots.txt","count":8,"ports":8},{"path":"/sitemap.xml","count":8,"ports":8},{"path":"/favicon.ico","count":8,"ports":8},{"path":"/wsman","count":2,"ports":1}],"distinct_paths_total":6,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"http/1.1","count":1}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6","notable":false},{"name":"Host","value":"<HONEYPOT>:49155","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11","notable":false}],"distinct_sets":2,"events_with_headers":5},"tags":[],"data_as_of":"2026-09-24T15:30:35.273489+00:00"}