{"ip":"47.74.20.117","total_events":73,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"hunter","confidence":"high","network_type":"CDN","why":["Source IP is in a known scanner range (hunter).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"request","label":"Request traffic","detail":"3,861 bytes sent","bytes_sent":3861,"session_seconds":0,"persistent":false}},"first_seen":"2026-03-09T16:30:16","last_seen":"2026-09-29T22:04:25","events_24h":2,"events_7d":2,"geo":{"country_code":"JP","country_name":"Japan","region":"Tokyo","city":"Tokyo","lat":35.6893,"lon":139.6899,"asn":45102,"org":"Alibaba (US) Technology Co., Ltd."},"source_domain":null,"known_scanners":["hunter"],"scanner_tag":{"key":"peeringdb:as45102","label":"Alibaba","category":"cdn","url":"https://www.peeringdb.com/asn/45102"},"cve_matches":[],"malware":[],"top_ports":[{"port":8003,"proto":"tcp","label":"","count":3},{"port":21,"proto":"tcp","label":"FTP","count":3},{"port":9100,"proto":"tcp","label":"Printer","count":3},{"port":9953,"proto":"tcp","label":"","count":2},{"port":12191,"proto":"tcp","label":"","count":2},{"port":10258,"proto":"tcp","label":"","count":2},{"port":8765,"proto":"tcp","label":"","count":2},{"port":10004,"proto":"tcp","label":"","count":2},{"port":86,"proto":"tcp","label":"","count":2},{"port":50999,"proto":"tcp","label":"","count":2},{"port":2057,"proto":"tcp","label":"","count":2},{"port":6748,"proto":"tcp","label":"","count":2},{"port":3102,"proto":"tcp","label":"","count":2},{"port":12357,"proto":"tcp","label":"","count":2},{"port":3104,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i1311h2_f57a46bbacb6_ab7e3b40a677","t13i131000_f57a46bbacb6_f50d94e863eb","t13i1311h2_f57a46bbacb6_f50d94e863eb","t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["8c5b2f378e481f94b4f82c131798f4d4","2196848d251b217de8b2c037e356c11d"],"http_akin":["b11cun040_00040013_608dab68","b11cun040_00040015_4c87b06e","b11cun030_00040014_54d07b6d"]},"fingerprint_peers":{"t13i1311h2_f57a46bbacb6_ab7e3b40a677":2088,"t13i131000_f57a46bbacb6_f50d94e863eb":2738,"t13i1311h2_f57a46bbacb6_f50d94e863eb":2526,"t13i131000_f57a46bbacb6_ab7e3b40a677":4844,"b11cun040_00040013_608dab68":4305,"b11cun040_00040015_4c87b06e":1521,"b11cun030_00040014_54d07b6d":3665},"akin_families":{"b11cun040_00040013_608dab68":{"head":"b11cun040_00040013_608dab68","shapes":2,"ips":4304},"b11cun040_00040015_4c87b06e":{"head":"b11cun040_00040015_4c87b06e","shapes":4,"ips":1521},"b11cun030_00040014_54d07b6d":{"head":"b11cun030_00040014_54d07b6d","shapes":2,"ips":3665}},"user_agents":["curl/7.74.0","curl/7.64.1"],"timeline":[{"date":"2026-07-03","count":3},{"date":"2026-07-05","count":2},{"date":"2026-07-07","count":2},{"date":"2026-07-10","count":2},{"date":"2026-07-18","count":2},{"date":"2026-08-05","count":2},{"date":"2026-08-14","count":2},{"date":"2026-08-17","count":2},{"date":"2026-08-24","count":4},{"date":"2026-08-26","count":2},{"date":"2026-08-27","count":2},{"date":"2026-09-05","count":2},{"date":"2026-09-08","count":2},{"date":"2026-09-19","count":2},{"date":"2026-09-29","count":2}],"recent_events":[{"timestamp":"2026-09-29T22:04:25","port":28658,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:28658\",\"user-agent\":\"curl/7.74.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32383635380d0a557365722d4167656e743a206375726c2f372e37342e300d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"curl/7.74.0","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"5d3a5095-5c8a-4978-b908-e10bd67afffe","seq":1,"duration_ms":100,"bytes_in":113,"bytes_out":77},{"timestamp":"2026-09-29T22:04:05","port":28658,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:28658\",\"user-agent\":\"curl/7.64.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32383635380d0a557365722d4167656e743a206375726c2f372e36342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/7.64.1","ja3":"2196848d251b217de8b2c037e356c11d","session":"7a916f62-18c6-4a76-8bde-da3cbe9fc9c0","seq":1,"duration_ms":100,"bytes_in":84,"bytes_out":77},{"timestamp":"2026-09-19T10:24:01","port":8057,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8057\",\"user-agent\":\"curl/7.74.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383035370d0a557365722d4167656e743a206375726c2f372e37342e300d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"curl/7.74.0","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"c0385631-a8ea-451d-a993-79f8a58d2943","seq":1,"duration_ms":100,"bytes_in":110,"bytes_out":77},{"timestamp":"2026-09-19T10:23:41","port":8057,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:8057\",\"user-agent\":\"curl/7.64.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383035370d0a557365722d4167656e743a206375726c2f372e36342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/7.64.1","ja3":"2196848d251b217de8b2c037e356c11d","session":"b6e6dfb1-4811-4f15-b27f-18503cda1e29","seq":1,"duration_ms":100,"bytes_in":81,"bytes_out":77},{"timestamp":"2026-09-08T17:37:16","port":35531,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:35531\",\"user-agent\":\"curl/7.74.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a33353533310d0a557365722d4167656e743a206375726c2f372e37342e300d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"curl/7.74.0","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"45601746-ea21-48a8-a44d-931fab7ce5b2","seq":1,"duration_ms":100,"bytes_in":111,"bytes_out":77},{"timestamp":"2026-09-08T17:36:56","port":35531,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:35531\",\"user-agent\":\"curl/7.64.1\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a33353533310d0a557365722d4167656e743a206375726c2f372e36342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/7.64.1","ja3":"2196848d251b217de8b2c037e356c11d","session":"e50abd87-a48c-4342-8e34-e962c361f2c9","seq":1,"duration_ms":100,"bytes_in":82,"bytes_out":77},{"timestamp":"2026-09-05T14:10:46","port":86,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:86\",\"user-agent\":\"curl/7.74.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a38360d0a557365722d4167656e743a206375726c2f372e37342e300d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"curl/7.74.0","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"8aaf85d9-dccf-46d8-a012-8e77edc415d8","seq":1,"duration_ms":100,"bytes_in":108,"bytes_out":77},{"timestamp":"2026-09-05T14:10:26","port":86,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:86\",\"user-agent\":\"curl/7.64.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a38360d0a557365722d4167656e743a206375726c2f372e36342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/7.64.1","ja3":"2196848d251b217de8b2c037e356c11d","session":"fb44ce83-61d7-4a19-bc1e-c3408d079ca5","seq":1,"duration_ms":101,"bytes_in":79,"bytes_out":77},{"timestamp":"2026-08-27T12:40:38","port":10004,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:10004\",\"user-agent\":\"curl/7.74.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303030340d0a557365722d4167656e743a206375726c2f372e37342e300d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"curl/7.74.0","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"1184154c-52c6-4dbd-bb98-4c39db785c58","seq":1,"duration_ms":101,"bytes_in":111,"bytes_out":77},{"timestamp":"2026-08-27T12:40:18","port":10004,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:10004\",\"user-agent\":\"curl/7.64.1\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303030340d0a557365722d4167656e743a206375726c2f372e36342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/7.64.1","ja3":"2196848d251b217de8b2c037e356c11d","session":"1f7616c7-41c8-4366-80e5-155c5134bbc5","seq":1,"duration_ms":100,"bytes_in":82,"bytes_out":77}],"http_methods":[{"method":"GET","count":70}],"distinct_ports_total":36,"top_paths":[{"path":"/","count":70,"ports":36}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":34}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:28658","notable":false},{"name":"User-Agent","value":"curl/7.74.0","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-30T10:48:46.075524+00:00"}