{"ip":"47.251.188.82","total_events":1261,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"hunter","confidence":"high","network_type":"CDN","why":["Source IP is in a known scanner range (hunter).","Known research and commercial scanners are labelled as such, not as threats."]},"first_seen":"2026-02-24T17:38:10","last_seen":"2026-07-13T21:22:16","events_24h":8,"events_7d":47,"geo":{"country_code":"US","country_name":"United States","region":"California","city":"","lat":34.0544,"lon":-118.244,"asn":45102,"org":"Alibaba (US) Technology Co., Ltd."},"source_domain":null,"known_scanners":["hunter"],"scanner_tag":{"key":"peeringdb:as45102","label":"Alibaba","category":"cdn","url":"https://www.peeringdb.com/asn/45102"},"cve_matches":[{"cve_id":"CVE-2021-28169","title":"Eclipse Jetty ConcatServlet - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/static"}],"malware":[],"top_ports":[{"port":22,"proto":"tcp","label":"SSH","count":9},{"port":448,"proto":"tcp","label":"","count":6},{"port":9044,"proto":"tcp","label":"","count":5},{"port":12120,"proto":"tcp","label":"","count":5},{"port":445,"proto":"tcp","label":"SMB","count":5},{"port":9098,"proto":"tcp","label":"","count":5},{"port":8969,"proto":"tcp","label":"","count":5},{"port":6000,"proto":"tcp","label":"X11","count":5},{"port":12434,"proto":"tcp","label":"","count":5},{"port":16060,"proto":"tcp","label":"","count":4},{"port":9222,"proto":"tcp","label":"","count":4},{"port":2202,"proto":"tcp","label":"","count":4},{"port":5050,"proto":"tcp","label":"","count":4},{"port":3115,"proto":"tcp","label":"","count":4},{"port":58000,"proto":"tcp","label":"","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i1515h2_8daaf6152771_02713d6af862","t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_ja3":["f302ce0ff22bcdfe24cc549d34a622c4","36a674f5fb9e42dd60c028117af5e146","523add32c005976564471acb3ee9585d","dc3eeb01195220cf8eca10711705b254"],"ja4h":["ge11nn15en_b231b0024544","ge11nn0400_9c3956fad5da"]},"fingerprint_peers":{"t13i1515h2_8daaf6152771_02713d6af862":65,"t13i131000_f57a46bbacb6_ab7e3b40a677":5879,"ge11nn0400_9c3956fad5da":1404,"ge11nn15en_b231b0024544":60},"user_agents":["Go-http-client/1.1","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-04-15","count":3},{"date":"2026-04-16","count":48},{"date":"2026-04-17","count":94},{"date":"2026-04-18","count":146},{"date":"2026-04-19","count":187},{"date":"2026-04-20","count":122},{"date":"2026-04-21","count":107},{"date":"2026-04-22","count":119},{"date":"2026-04-23","count":21},{"date":"2026-04-24","count":3},{"date":"2026-04-28","count":1},{"date":"2026-05-01","count":3},{"date":"2026-05-02","count":2},{"date":"2026-05-03","count":1},{"date":"2026-05-04","count":2},{"date":"2026-05-05","count":1},{"date":"2026-05-06","count":3},{"date":"2026-05-07","count":2},{"date":"2026-05-08","count":4},{"date":"2026-05-09","count":4},{"date":"2026-05-10","count":2},{"date":"2026-05-11","count":5},{"date":"2026-05-12","count":5},{"date":"2026-05-13","count":3},{"date":"2026-05-14","count":3},{"date":"2026-05-15","count":3},{"date":"2026-05-16","count":1},{"date":"2026-05-17","count":2},{"date":"2026-05-18","count":3},{"date":"2026-05-19","count":4},{"date":"2026-05-20","count":1},{"date":"2026-05-21","count":1},{"date":"2026-05-22","count":3},{"date":"2026-05-23","count":1},{"date":"2026-05-24","count":1},{"date":"2026-05-25","count":5},{"date":"2026-05-26","count":1},{"date":"2026-05-27","count":2},{"date":"2026-05-30","count":2},{"date":"2026-05-31","count":1},{"date":"2026-06-01","count":2},{"date":"2026-06-02","count":1},{"date":"2026-06-03","count":3},{"date":"2026-06-04","count":9},{"date":"2026-06-05","count":4},{"date":"2026-06-06","count":11},{"date":"2026-06-07","count":11},{"date":"2026-06-08","count":10},{"date":"2026-06-09","count":10},{"date":"2026-06-10","count":13},{"date":"2026-06-11","count":6},{"date":"2026-06-12","count":6},{"date":"2026-06-15","count":9},{"date":"2026-06-16","count":10},{"date":"2026-06-17","count":6},{"date":"2026-06-18","count":10},{"date":"2026-06-19","count":6},{"date":"2026-06-20","count":4},{"date":"2026-06-21","count":6},{"date":"2026-06-22","count":3},{"date":"2026-06-24","count":8},{"date":"2026-06-25","count":7},{"date":"2026-06-26","count":8},{"date":"2026-06-27","count":7},{"date":"2026-06-28","count":13},{"date":"2026-06-29","count":7},{"date":"2026-06-30","count":5},{"date":"2026-07-01","count":5},{"date":"2026-07-02","count":11},{"date":"2026-07-03","count":5},{"date":"2026-07-04","count":3},{"date":"2026-07-05","count":9},{"date":"2026-07-06","count":7},{"date":"2026-07-07","count":3},{"date":"2026-07-08","count":7},{"date":"2026-07-09","count":6},{"date":"2026-07-10","count":10},{"date":"2026-07-11","count":7},{"date":"2026-07-12","count":7},{"date":"2026-07-13","count":8}],"recent_events":[{"timestamp":"2026-07-13T21:22:16","port":10010,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"<HONEYPOT>:10010\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","community_id":"1:+C1rQduBZTjB10T0m2WPkr2mrQE=","ja3":"348c723cc7fc5ff4283b7eab3fdd3821","session":"1e007101-edc7-480a-b7d1-bd3c872cc45a","seq":1,"duration_ms":100,"bytes_in":665,"bytes_out":78},{"timestamp":"2026-07-13T18:05:07","port":11211,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"<HONEYPOT>:11211\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","community_id":"1:I8LQOkXGQrAZGegnjXbQY/6kQSQ=","ja3":"8933e2e0c58356a2880d7db3d5cd8e62","session":"84b749bf-ab6d-4062-9803-2d882b92e684","seq":1,"duration_ms":100,"bytes_in":665,"bytes_out":78},{"timestamp":"2026-07-13T10:26:10","port":21300,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"<HONEYPOT>:21300\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","community_id":"1:eFwSxjb2iWdJQyI/3RhEHw3IQ+g=","ja3":"6f4af9f1a5460e9f8d265e192123e047","session":"4af9b4c5-6677-4ca8-af5d-7d1ba056120c","seq":1,"duration_ms":100,"bytes_in":676,"bytes_out":78},{"timestamp":"2026-07-13T09:52:25","port":8605,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"<HONEYPOT>:8605\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","community_id":"1:x2Ku1ziJWQe/fIaIU7lhoRjv3Q4=","ja3":"782de07ba5f86fda2abd5acd05c4503a","session":"0f236315-629a-4ab9-9d0c-b320758c2891","seq":1,"duration_ms":100,"bytes_in":675,"bytes_out":78},{"timestamp":"2026-07-13T07:03:45","port":9211,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"<HONEYPOT>:9211\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","community_id":"1:OYfnlzIMbCfIs73AT7uNp70Ir6Y=","ja3":"c5d03f30e7fee8b30e125d26374f63b9","session":"7a2d9652-12f2-426e-b587-45d02c0687c3","seq":1,"duration_ms":100,"bytes_in":664,"bytes_out":78},{"timestamp":"2026-07-13T06:00:16","port":9991,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"<HONEYPOT>:9991\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","community_id":"1:8At39CTNQbZLyBGVr/xfSvPLOmg=","ja3":"e6eeafd10c29b0006cc0d7f3d6513a9e","session":"3c638ff3-3bba-4d6d-acc5-2c99e584a863","seq":1,"duration_ms":100,"bytes_in":677,"bytes_out":78},{"timestamp":"2026-07-13T02:46:12","port":51003,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"<HONEYPOT>:51003\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","community_id":"1:v3EPs4nBHmGGlJeAstXmPYHGgM8=","ja3":"2643cfb36f52c5ebea035ff212015b6e","session":"12b0c099-f5ec-47cf-9971-cf7361a230e2","seq":1,"duration_ms":100,"bytes_in":665,"bytes_out":78},{"timestamp":"2026-07-13T02:38:15","port":12292,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"<HONEYPOT>:12292\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","community_id":"1:1ttFynagxPd4EVtKxRfybCC/Mns=","ja3":"155d9461b179d114b20999c9d4f7abc8","session":"f4aaf9e9-2c72-4408-af18-c7065e88610e","seq":1,"duration_ms":100,"bytes_in":676,"bytes_out":78},{"timestamp":"2026-07-12T15:41:54","port":8415,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"<HONEYPOT>:8415\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","community_id":"1:IM3bcpPFItRYeNfGHYa8NPUeQtQ=","ja3":"3b5bd0389c2310d5b33d34d7da234869","session":"39f1e08d-6569-4594-a208-7e548ba77a96","seq":1,"duration_ms":100,"bytes_in":664,"bytes_out":78},{"timestamp":"2026-07-12T13:38:02","port":8767,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"<HONEYPOT>:8767\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","community_id":"1:tltZxA7gZp9S+u3cR31KbSfHBE8=","ja3":"05640921c2cd1d01c57ab86e353c24de","session":"6b675d3d-aedf-496d-8611-032e1eaa5f72","seq":1,"duration_ms":100,"bytes_in":675,"bytes_out":78}],"http_methods":[{"method":"GET","count":1261}],"distinct_ports_total":823,"top_paths":[{"path":"/","count":229,"ports":215},{"path":"/favicon.ico","count":223,"ports":205},{"path":"/static/goindex/group.html","count":88,"ports":87},{"path":"/group.html","count":85,"ports":85},{"path":"/test/tuiliu/group.html","count":80,"ports":79},{"path":"/xmweb/group.html","count":77,"ports":77},{"path":"/static/goindex/tuiliu/group.html","count":75,"ports":75},{"path":"/details/group.html","count":73,"ports":73},{"path":"/gogo/list.html","count":70,"ports":70},{"path":"/list.html","count":69,"ports":69},{"path":"/88k4ez/group.html","count":69,"ports":68},{"path":"/tuiliu/group.html","count":69,"ports":69},{"path":"/static/analytics.html","count":54,"ports":54}],"distinct_paths_total":13,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":442}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Cache-Control","Host","Pragma","Sec-Ch-Ua","Sec-Ch-Ua-Mobile","Sec-Ch-Ua-Platform","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","Sec-Fetch-User","Upgrade-Insecure-Requests","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en;q=0.9","notable":false},{"name":"Cache-Control","value":"no-cache","notable":false},{"name":"Host","value":"<HONEYPOT>:10010","notable":false},{"name":"Pragma","value":"no-cache","notable":false},{"name":"Sec-Ch-Ua","value":"\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"","notable":false},{"name":"Sec-Ch-Ua-Mobile","value":"?0","notable":false},{"name":"Sec-Ch-Ua-Platform","value":"\"macOS\"","notable":false},{"name":"Sec-Fetch-Dest","value":"document","notable":false},{"name":"Sec-Fetch-Mode","value":"navigate","notable":false},{"name":"Sec-Fetch-Site","value":"none","notable":false},{"name":"Sec-Fetch-User","value":"?1","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2021-28169","tag_type":"cve","title":"Eclipse Jetty ConcatServlet - Information Disclosure","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/static","reference_urls":["https://twitter.com/sec715/status/1406787963569065988","https://github.com/eclipse/jetty.project/security/advisories/GHSA-gwcr-j4wh-j3cq","https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E","https://nvd.nist.gov/vuln/detail/CVE-2021-28169","https://lists.apache.org/thread.html/r04a4b4553a23aff26f42635a6ae388c3b162aab30a88d12e59d05168@%3Cjira.kafka.apache.org%3E"]}],"data_as_of":"2026-07-14T01:42:40.774635+00:00"}