{"ip":"188.166.247.75","total_events":8,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["8 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,604 bytes sent","bytes_sent":1604,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-31T20:04:30","last_seen":"2026-08-31T20:04:34","events_24h":0,"events_7d":0,"geo":{"country_code":"SG","country_name":"Singapore","region":"","city":"Singapore","lat":1.314,"lon":103.6839,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":2082,"proto":"tcp","label":"","count":2},{"port":2087,"proto":"tcp","label":"","count":2},{"port":2086,"proto":"tcp","label":"","count":2},{"port":2083,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i3111h1_e8f1e7e78f70_b26ce05bbdd6"],"tls_client_hello":"","tls_ja3":["78f0dc5ac5b19daf131a133cfdee9691"],"http_akin":["b11cun060_00440017_a9482ae2","b11cun050_00040017_976354f0"]},"fingerprint_peers":{"t13i3111h1_e8f1e7e78f70_b26ce05bbdd6":22,"b11cun050_00040017_976354f0":1283,"b11cun060_00440017_a9482ae2":1},"akin_families":{"b11cun050_00040017_976354f0":{"head":"b11cun050_00040017_976354f0","shapes":2,"ips":1282}},"user_agents":["python-requests/2.31.0"],"timeline":[{"date":"2026-08-31","count":8}],"recent_events":[{"timestamp":"2026-08-31T20:04:34","port":2086,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:2086\",\"user-agent\":\"python-requests/2.31.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"48454144202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323038360d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33312e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"HEAD","user_agent":"python-requests/2.31.0","ja3":"78f0dc5ac5b19daf131a133cfdee9691","session":"8374f673-3c44-4b88-866e-32ddf699311a","seq":1,"duration_ms":100,"bytes_in":150,"bytes_out":79},{"timestamp":"2026-08-31T20:04:34","port":2086,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"authorization\":\"Basic YWRtaW4NCmhhc3Jvb3Q9MQ0KdXNlcj1yb290OnJlZHRlYW1fYXVkaXRfMjAyNg==\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:2086\",\"user-agent\":\"python-requests/2.31.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/json-api/whoami","summary":"","payload_hex":"474554202f6a736f6e2d6170692f77686f616d6920485454502f312e310d0a486f73743a20<HONEYPOT>3a323038360d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33312e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a417574686f72697a6174696f6e3a20426173696320595752746157344e436d686863334a76623351394d51304b64584e6c636a3179623239304f6e4a6c5a48526c595731665958566b615852664d6a41794e673d3d0d0a0d0a","method":"GET","user_agent":"python-requests/2.31.0","ja3":"78f0dc5ac5b19daf131a133cfdee9691","session":"2150fe56-4b53-446b-b6dc-9edb6fcf6662","seq":1,"duration_ms":100,"bytes_in":251,"bytes_out":79},{"timestamp":"2026-08-31T20:04:33","port":2082,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"authorization\":\"Basic YWRtaW4NCmhhc3Jvb3Q9MQ0KdXNlcj1yb290OnJlZHRlYW1fYXVkaXRfMjAyNg==\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:2082\",\"user-agent\":\"python-requests/2.31.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/json-api/whoami","summary":"","payload_hex":"474554202f6a736f6e2d6170692f77686f616d6920485454502f312e310d0a486f73743a20<HONEYPOT>3a323038320d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33312e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a417574686f72697a6174696f6e3a20426173696320595752746157344e436d686863334a76623351394d51304b64584e6c636a3179623239304f6e4a6c5a48526c595731665958566b615852664d6a41794e673d3d0d0a0d0a","method":"GET","user_agent":"python-requests/2.31.0","ja3":"78f0dc5ac5b19daf131a133cfdee9691","session":"2599c6d7-415f-4279-8ebe-c4d5b0818906","seq":1,"duration_ms":100,"bytes_in":251,"bytes_out":79},{"timestamp":"2026-08-31T20:04:32","port":2087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"authorization\":\"Basic YWRtaW4NCmhhc3Jvb3Q9MQ0KdXNlcj1yb290OnJlZHRlYW1fYXVkaXRfMjAyNg==\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:2087\",\"user-agent\":\"python-requests/2.31.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/json-api/whoami","summary":"","payload_hex":"474554202f6a736f6e2d6170692f77686f616d6920485454502f312e310d0a486f73743a20<HONEYPOT>3a323038370d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33312e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a417574686f72697a6174696f6e3a20426173696320595752746157344e436d686863334a76623351394d51304b64584e6c636a3179623239304f6e4a6c5a48526c595731665958566b615852664d6a41794e673d3d0d0a0d0a","method":"GET","user_agent":"python-requests/2.31.0","ja3":"78f0dc5ac5b19daf131a133cfdee9691","session":"97716b84-4dce-4c12-b354-9a1c7ee766b6","seq":1,"duration_ms":101,"bytes_in":251,"bytes_out":79},{"timestamp":"2026-08-31T20:04:32","port":2082,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:2082\",\"user-agent\":\"python-requests/2.31.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"48454144202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323038320d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33312e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"HEAD","user_agent":"python-requests/2.31.0","ja3":"78f0dc5ac5b19daf131a133cfdee9691","session":"92facca5-4fde-4aeb-a3c5-3f4ff1755156","seq":1,"duration_ms":100,"bytes_in":150,"bytes_out":79},{"timestamp":"2026-08-31T20:04:31","port":2083,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"authorization\":\"Basic YWRtaW4NCmhhc3Jvb3Q9MQ0KdXNlcj1yb290OnJlZHRlYW1fYXVkaXRfMjAyNg==\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:2083\",\"user-agent\":\"python-requests/2.31.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/json-api/whoami","summary":"","payload_hex":"474554202f6a736f6e2d6170692f77686f616d6920485454502f312e310d0a486f73743a20<HONEYPOT>3a323038330d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33312e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a417574686f72697a6174696f6e3a20426173696320595752746157344e436d686863334a76623351394d51304b64584e6c636a3179623239304f6e4a6c5a48526c595731665958566b615852664d6a41794e673d3d0d0a0d0a","method":"GET","user_agent":"python-requests/2.31.0","ja3":"78f0dc5ac5b19daf131a133cfdee9691","session":"e93f85d1-deb1-4099-817a-5ca6a07aa234","seq":1,"duration_ms":100,"bytes_in":251,"bytes_out":79},{"timestamp":"2026-08-31T20:04:31","port":2087,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:2087\",\"user-agent\":\"python-requests/2.31.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"48454144202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323038370d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33312e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"HEAD","user_agent":"python-requests/2.31.0","ja3":"78f0dc5ac5b19daf131a133cfdee9691","session":"6e2ead99-362b-4d22-b355-f49129d0a713","seq":1,"duration_ms":100,"bytes_in":150,"bytes_out":79},{"timestamp":"2026-08-31T20:04:30","port":2083,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:2083\",\"user-agent\":\"python-requests/2.31.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"48454144202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323038330d0a557365722d4167656e743a20707974686f6e2d72657175657374732f322e33312e300d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"HEAD","user_agent":"python-requests/2.31.0","ja3":"78f0dc5ac5b19daf131a133cfdee9691","session":"9fab2b71-845a-4d30-bd0f-af66f735a3c3","seq":1,"duration_ms":100,"bytes_in":150,"bytes_out":79}],"http_methods":[{"method":"GET","count":4},{"method":"HEAD","count":4}],"distinct_ports_total":4,"top_paths":[{"path":"/","count":4,"ports":4},{"path":"/json-api/whoami","count":4,"ports":4}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"http/1.1","count":8}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Authorization","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Authorization","value":"Basic YWRtaW4NCmhhc3Jvb3Q9MQ0KdXNlcj1yb290OnJlZHRlYW1fYXVkaXRfMjAyNg==","notable":true},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"<HONEYPOT>:2086","notable":false},{"name":"User-Agent","value":"python-requests/2.31.0","notable":false}],"distinct_sets":2,"events_with_headers":8},"tags":[],"data_as_of":"2026-09-30T18:46:50.739118+00:00"}