{"ip":"47.57.242.119","total_events":11,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["11 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,470 bytes sent","bytes_sent":1470,"session_seconds":0,"persistent":false}},"first_seen":"2026-06-15T17:15:30","last_seen":"2026-09-29T16:13:19","events_24h":9,"events_7d":10,"geo":{"country_code":"HK","country_name":"Hong Kong","region":"","city":"Hong Kong","lat":22.2842,"lon":114.1759,"asn":45102,"org":"Alibaba (US) Technology Co., Ltd."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as45102","label":"Alibaba","category":"cdn","url":"https://www.peeringdb.com/asn/45102"},"cve_matches":[],"malware":[],"top_ports":[{"port":13000,"proto":"tcp","label":"","count":2},{"port":3002,"proto":"tcp","label":"","count":2},{"port":80,"proto":"tcp","label":"HTTP","count":1},{"port":3010,"proto":"tcp","label":"","count":1},{"port":3389,"proto":"tcp","label":"RDP","count":1},{"port":3003,"proto":"tcp","label":"","count":1},{"port":2375,"proto":"tcp","label":"Docker","count":1},{"port":13001,"proto":"tcp","label":"","count":1},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["b11cun050_00040017_38043d51","b11cun040_00040015_a4cdfabf"]},"fingerprint_peers":{"b11cun050_00040017_38043d51":32,"b11cun040_00040015_a4cdfabf":34},"akin_families":{"b11cun040_00040015_a4cdfabf":{"head":"b11cun040_00040015_a4cdfabf","shapes":2,"ips":34}},"user_agents":["Mozilla/5.0 (compatible; asset-scan)","python-requests/2.32.5"],"timeline":[{"date":"2026-09-26","count":1},{"date":"2026-09-29","count":9}],"recent_events":[{"timestamp":"2026-09-29T16:13:19","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; asset-scan)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/status","summary":"","payload_hex":"474554202f6170692f73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2061737365742d7363616e290d0a4163636570743a206170706c69636174696f6e2f6a736f6e0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; asset-scan)","ja3":"","session":"3fe4a842-d6fe-449a-a517-5c8698583093","seq":1,"duration_ms":100,"bytes_in":143,"bytes_out":78},{"timestamp":"2026-09-29T16:13:19","port":13000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; asset-scan)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/status","summary":"","payload_hex":"474554202f6170692f73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2061737365742d7363616e290d0a4163636570743a206170706c69636174696f6e2f6a736f6e0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; asset-scan)","ja3":"","session":"8e876796-aa8e-4417-beff-9a3ece1618aa","seq":1,"duration_ms":101,"bytes_in":143,"bytes_out":78},{"timestamp":"2026-09-29T16:13:19","port":3002,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; asset-scan)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/status","summary":"","payload_hex":"474554202f6170692f73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2061737365742d7363616e290d0a4163636570743a206170706c69636174696f6e2f6a736f6e0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; asset-scan)","ja3":"","session":"3797aa2a-9b35-414e-a981-9866e0cfc8c8","seq":1,"duration_ms":100,"bytes_in":143,"bytes_out":78},{"timestamp":"2026-09-29T15:35:50","port":3010,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; asset-scan)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/status","summary":"","payload_hex":"474554202f6170692f73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2061737365742d7363616e290d0a4163636570743a206170706c69636174696f6e2f6a736f6e0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; asset-scan)","ja3":"","session":"aac6b645-2388-4bfb-b65c-25c787f1f3d1","seq":1,"duration_ms":100,"bytes_in":144,"bytes_out":78},{"timestamp":"2026-09-29T15:35:50","port":13001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; asset-scan)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/status","summary":"","payload_hex":"474554202f6170692f73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2061737365742d7363616e290d0a4163636570743a206170706c69636174696f6e2f6a736f6e0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; asset-scan)","ja3":"","session":"30f48f7f-7096-4c21-af0a-12923f221034","seq":1,"duration_ms":103,"bytes_in":144,"bytes_out":78},{"timestamp":"2026-09-29T15:35:50","port":3002,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; asset-scan)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/status","summary":"","payload_hex":"474554202f6170692f73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2061737365742d7363616e290d0a4163636570743a206170706c69636174696f6e2f6a736f6e0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; asset-scan)","ja3":"","session":"9875d74e-1692-4333-9253-af335f8d9239","seq":1,"duration_ms":104,"bytes_in":144,"bytes_out":78},{"timestamp":"2026-09-29T15:35:50","port":3003,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; asset-scan)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/status","summary":"","payload_hex":"474554202f6170692f73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2061737365742d7363616e290d0a4163636570743a206170706c69636174696f6e2f6a736f6e0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; asset-scan)","ja3":"","session":"226f04f9-606a-42dd-9990-e18149946afd","seq":1,"duration_ms":103,"bytes_in":144,"bytes_out":78},{"timestamp":"2026-09-29T15:35:50","port":13000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; asset-scan)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/status","summary":"","payload_hex":"474554202f6170692f73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2061737365742d7363616e290d0a4163636570743a206170706c69636174696f6e2f6a736f6e0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; asset-scan)","ja3":"","session":"3c9a47d4-aa63-4976-9c31-9b5afc502aa1","seq":1,"duration_ms":100,"bytes_in":144,"bytes_out":78},{"timestamp":"2026-09-29T13:08:33","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"application/json\",\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; asset-scan)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/status","summary":"","payload_hex":"474554202f6170692f73746174757320485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2061737365742d7363616e290d0a4163636570743a206170706c69636174696f6e2f6a736f6e0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; asset-scan)","ja3":"","session":"db633c5f-4975-4b38-90ab-7bb43fd520c2","seq":1,"duration_ms":100,"bytes_in":143,"bytes_out":78},{"timestamp":"2026-09-26T20:23:44","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080003000000","method":"","user_agent":"","ja3":"","session":"ae6ad31a-788a-449d-8a3f-19f51c9fab9a","seq":1,"duration_ms":101,"bytes_in":19,"bytes_out":13,"enriched":{"digest":"fa962c48ab1145cc","label":"RDP (X.224)"}}],"http_methods":[{"method":"GET","count":10}],"distinct_ports_total":9,"top_paths":[{"path":"/api/status","count":9,"ports":7},{"path":"/version","count":1,"ports":1}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"application/json","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; asset-scan)","notable":false}],"distinct_sets":1,"events_with_headers":9},"tags":[],"data_as_of":"2026-09-30T12:03:34.391656+00:00"}