{"ip":"165.154.36.108","total_events":38,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["38 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 8,965 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"8,965 bytes sent","bytes_sent":8965,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-14T22:12:54","last_seen":"2026-09-23T07:00:57","events_24h":16,"events_7d":23,"geo":{"country_code":"US","country_name":"United States","region":"California","city":"Los Angeles","lat":34.0544,"lon":-118.244,"asn":135377,"org":"UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":587,"proto":"tcp","label":"SMTP","count":8},{"port":2121,"proto":"tcp","label":"","count":8},{"port":2107,"proto":"tcp","label":"","count":8},{"port":17000,"proto":"tcp","label":"","count":7},{"port":28272,"proto":"tcp","label":"","count":7}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i130900_f57a46bbacb6_e7c285222651"],"tls_client_hello":"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","tls_ja3":["6639916abfac56b9257ca216677085bc"],"http_akin":["a11cun030_00000058_f74a6e72","a11cun050_0000005d_361dcb62"]},"fingerprint_peers":{"t13i130900_f57a46bbacb6_e7c285222651":4416,"a11cun030_00000058_f74a6e72":103,"a11cun050_0000005d_361dcb62":100},"akin_families":{},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"],"timeline":[{"date":"2026-09-14","count":7},{"date":"2026-09-16","count":8},{"date":"2026-09-17","count":7},{"date":"2026-09-23","count":16}],"recent_events":[{"timestamp":"2026-09-23T07:00:57","port":2121,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"<HONEYPOT>:2121\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/config.json","summary":"","payload_hex":"474554202f636f6e6669672e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11","ja3":"6639916abfac56b9257ca216677085bc","session":"44756fdd-2c66-480d-96a1-dbbd5cb00331","seq":1,"duration_ms":100,"bytes_in":420,"bytes_out":79},{"timestamp":"2026-09-23T07:00:52","port":2121,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"<HONEYPOT>:2121\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"6639916abfac56b9257ca216677085bc","session":"46ef7978-b251-44e4-adc3-79353c1530f6","seq":1,"duration_ms":101,"bytes_in":432,"bytes_out":79},{"timestamp":"2026-09-23T07:00:52","port":2121,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"<HONEYPOT>:2121\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sitemap.xml","summary":"","payload_hex":"474554202f736974656d61702e786d6c20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"6639916abfac56b9257ca216677085bc","session":"55032253-6af6-4bda-9f77-e548fffcab23","seq":1,"duration_ms":100,"bytes_in":433,"bytes_out":79},{"timestamp":"2026-09-23T07:00:51","port":2121,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"<HONEYPOT>:2121\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323132310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132302e302e302e30205361666172692f3533372e3336204564672f3132302e302e302e300d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c696d6167652f61706e672c2a2f2a3b713d302e382c6170706c69636174696f6e2f7369676e65642d65786368616e67653b763d62333b713d302e370d0a4163636570742d4c616e67756167653a207a682d434e2c7a683b713d302e392c656e3b713d302e382c656e2d47423b713d302e372c656e2d55533b713d302e360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"6639916abfac56b9257ca216677085bc","session":"f5277a87-87dc-4d4c-af18-e823b386d390","seq":1,"duration_ms":100,"bytes_in":433,"bytes_out":79},{"timestamp":"2026-09-23T07:00:33","port":2121,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"<HONEYPOT>:2121\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323132310d0a4163636570742d4c616e67756167653a207a682d434e2c7a683b713d302e392c656e3b713d302e382c656e2d47423b713d302e372c656e2d55533b713d302e360d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132302e302e302e30205361666172692f3533372e3336204564672f3132302e302e302e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"6639916abfac56b9257ca216677085bc","session":"d8e29f25-9b3b-446e-aa37-28130579cbfc","seq":1,"duration_ms":100,"bytes_in":254,"bytes_out":79},{"timestamp":"2026-09-23T07:00:15","port":2121,"proto":"tcp","app_proto":"","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*1\r\n$4\r\ninfo\r\n","payload_hex":"2a310d0a24340d0a696e666f0d0a","method":"","user_agent":"","ja3":"","session":"d85ee71a-a999-4384-bde3-ae42eb838273","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":5,"enriched":{"digest":"4e3644f68e18a478","label":"Redis (RESP)","strings":["info"]}},{"timestamp":"2026-09-23T06:59:57","port":2121,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u00003.�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Administrator\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"030000332ee00000000000436f6f6b69653a206d737473686173683d41646d696e6973747261746f720d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"82a6754a-7b4f-4159-b9a2-eb103e75539f","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":14,"enriched":{"digest":"c91e42b831f80102","label":"RDP (X.224)","strings":["Cookie: mstshash=Administrator"]}},{"timestamp":"2026-09-23T06:59:38","port":2121,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u000b\u0006�\u0000\u0000\u0000\u0000\u0000","payload_hex":"0300000b06e00000000000","method":"","user_agent":"","ja3":"","session":"67cc1a5e-efb8-430d-9c58-812e67fcca25","seq":1,"duration_ms":101,"bytes_in":11,"bytes_out":14,"enriched":{"digest":"c6ea7c5d89294245","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-09-23T03:31:01","port":2107,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"<HONEYPOT>:2107\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/config.json","summary":"","payload_hex":"474554202f636f6e6669672e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11","ja3":"6639916abfac56b9257ca216677085bc","session":"ae16e72c-3995-4d68-ac76-0383253999e5","seq":1,"duration_ms":100,"bytes_in":421,"bytes_out":79},{"timestamp":"2026-09-23T03:30:53","port":2107,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"<HONEYPOT>:2107\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"6639916abfac56b9257ca216677085bc","session":"518ba603-2793-4839-a698-daa6f8bc8f24","seq":1,"duration_ms":100,"bytes_in":433,"bytes_out":79}],"http_methods":[{"method":"GET","count":22}],"distinct_ports_total":5,"top_paths":[{"path":"/","count":6,"ports":5},{"path":"/config.json","count":4,"ports":4},{"path":"/robots.txt","count":4,"ports":4},{"path":"/sitemap.xml","count":4,"ports":4},{"path":"/favicon.ico","count":4,"ports":4}],"distinct_paths_total":5,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6","notable":false},{"name":"Host","value":"<HONEYPOT>:2121","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11","notable":false}],"distinct_sets":2,"events_with_headers":7},"tags":[],"data_as_of":"2026-09-23T15:12:46.523710+00:00"}