{"ip":"23.97.62.133","total_events":7,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["7 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"338 bytes sent","bytes_sent":338,"session_seconds":0,"persistent":false}},"first_seen":"2026-04-06T17:39:19","last_seen":"2026-09-11T04:57:26","events_24h":0,"events_7d":0,"geo":{"country_code":"SG","country_name":"Singapore","region":"","city":"Singapore","lat":1.2872,"lon":103.8507,"asn":8075,"org":"Microsoft Corporation"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as8075","label":"Microsoft","category":"cdn","url":"https://www.peeringdb.com/asn/8075"},"cve_matches":[],"malware":[],"top_ports":[{"port":8006,"proto":"tcp","label":"","count":6},{"port":22,"proto":"tcp","label":"SSH","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i1010h1_61a7ad8aa9b6_3a8073edd8ef"],"tls_client_hello":"","tls_ja3":["988b50ecd27bb7a5e492a64433e96b87","e9d352a3e2e56c91c0e8784b86754766","aad1f7dfc2a36fa0b1a45a3ed2aafc93","12448ad4fa8346d4359196f91338cf41","de492df828a75c5d4acd911e76f67b9d"],"http_akin":["b11cun020_00040004_1cae80d4"]},"fingerprint_peers":{"t13i1010h1_61a7ad8aa9b6_3a8073edd8ef":2970,"b11cun020_00040004_1cae80d4":14},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-11","count":6}],"recent_events":[{"timestamp":"2026-09-11T04:57:26","port":8006,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:8006\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a6163636570743a202a2f2a0d0a686f73743a20<HONEYPOT>3a383030360d0a0d0a","method":"GET","user_agent":"","ja3":"b520d036d78a142d975f401dbb3f30dd","session":"b9e0cd9a-2639-4eba-9bf9-af41619072b1","seq":1,"duration_ms":101,"bytes_in":56,"bytes_out":77},{"timestamp":"2026-09-11T04:26:38","port":8006,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:8006\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a6163636570743a202a2f2a0d0a686f73743a20<HONEYPOT>3a383030360d0a0d0a","method":"GET","user_agent":"","ja3":"988b50ecd27bb7a5e492a64433e96b87","session":"692d6316-6cb9-4ace-8b92-34177b0a170b","seq":1,"duration_ms":100,"bytes_in":56,"bytes_out":77},{"timestamp":"2026-09-11T03:38:38","port":8006,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:8006\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a6163636570743a202a2f2a0d0a686f73743a20<HONEYPOT>3a383030360d0a0d0a","method":"GET","user_agent":"","ja3":"e9d352a3e2e56c91c0e8784b86754766","session":"63300c81-50c2-4ec5-9a9b-0cf87f15e20a","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":77},{"timestamp":"2026-09-11T03:00:02","port":8006,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:8006\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a6163636570743a202a2f2a0d0a686f73743a20<HONEYPOT>3a383030360d0a0d0a","method":"GET","user_agent":"","ja3":"aad1f7dfc2a36fa0b1a45a3ed2aafc93","session":"ea7af422-8ff5-4997-9a0c-c17022ffa16c","seq":1,"duration_ms":101,"bytes_in":56,"bytes_out":77},{"timestamp":"2026-09-11T02:29:21","port":8006,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:8006\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a6163636570743a202a2f2a0d0a686f73743a20<HONEYPOT>3a383030360d0a0d0a","method":"GET","user_agent":"","ja3":"de492df828a75c5d4acd911e76f67b9d","session":"713f5707-8782-47d6-9825-a250c3d2e9a8","seq":1,"duration_ms":101,"bytes_in":56,"bytes_out":77},{"timestamp":"2026-09-11T01:41:23","port":8006,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:8006\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a6163636570743a202a2f2a0d0a686f73743a20<HONEYPOT>3a383030360d0a0d0a","method":"GET","user_agent":"","ja3":"12448ad4fa8346d4359196f91338cf41","session":"f0373491-7eab-4c7e-92c2-9253871e3d59","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":77},{"timestamp":"2026-04-06T17:39:19","port":22,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SH-2.0-Go\r\n","payload_hex":"5353482d322e302d476f0d0a","method":"","user_agent":"","ja3":"","session":"17021854-5962-4265-98b5-71707c4c9ddf","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"6f76c6b5ed845f94","strings":["SH-2.0-Go"]}}],"http_methods":[{"method":"GET","count":6}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":6,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"http/1.1","count":6}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Host"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Host","value":"<HONEYPOT>:8006","notable":false}],"distinct_sets":1,"events_with_headers":6},"tags":[],"data_as_of":"2026-10-01T14:36:55.563682+00:00"}