{"ip":"36.32.3.210","total_events":2,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["2 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"117 bytes sent","bytes_sent":117,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-01T17:34:09","last_seen":"2026-09-28T14:03:28","events_24h":0,"events_7d":1,"geo":{"country_code":"CN","country_name":"China","region":"","city":"","lat":34.7732,"lon":113.722,"asn":140726,"org":"UNICOM AnHui province network"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":10108,"proto":"tcp","label":"","count":1},{"port":12240,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i130900_f57a46bbacb6_e7c285222651"],"tls_client_hello":"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","tls_ja3":["6639916abfac56b9257ca216677085bc"],"http_akin":["b11cun020_00040004_0a8d7f11"]},"fingerprint_peers":{"t13i130900_f57a46bbacb6_e7c285222651":3786,"b11cun020_00040004_0a8d7f11":3922},"akin_families":{"b11cun020_00040004_0a8d7f11":{"head":"b11cun020_00040004_0a8d7f11","shapes":2,"ips":3921}},"user_agents":[],"timeline":[{"date":"2026-09-28","count":1}],"recent_events":[{"timestamp":"2026-09-28T14:03:28","port":10108,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:10108\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303130380d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"","ja3":"6639916abfac56b9257ca216677085bc","session":"436a890c-50b2-4d53-b785-e56509a2f0e2","seq":1,"duration_ms":100,"bytes_in":58,"bytes_out":76},{"timestamp":"2026-07-01T17:34:09","port":12240,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:12240\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31323234300d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"","ja3":"6639916abfac56b9257ca216677085bc","session":"eec1c8ec-609b-4090-9816-c3e50d953418","seq":1,"duration_ms":100,"bytes_in":59,"bytes_out":76}],"http_methods":[{"method":"GET","count":2}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":2,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Host"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Host","value":"<HONEYPOT>:10108","notable":false}],"distinct_sets":1,"events_with_headers":2},"tags":[],"data_as_of":"2026-10-01T14:44:05.556045+00:00"}