{"ip":"8.219.222.66","data_as_of":"2026-10-24T10:59:35+00:00","observed":true,"total_events":137,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"hunter","confidence":"high","network_type":"CDN","why":["The address is in a published scanner range (hunter).","Known research and commercial scanners are labelled by operator and carry no threat verdict.","Counts include 6 interactive session(s) as well as first-packet events."],"engagement":{"level":"payload","label":"Sustained payload","detail":"9,393 bytes sent","bytes_sent":9393,"session_seconds":24,"persistent":false},"basis":"combined"},"first_seen":"2026-02-22T10:11:03","last_seen":"2026-10-23T14:38:43","events_24h":3,"events_7d":7,"interactive_sessions":6,"interactive_sessions_24h":0,"interactive_sessions_7d":6,"interactive_protocols":[{"protocol":"mongodb","sessions":4},{"protocol":"ssh","sessions":2}],"geo":{"country_code":"SG","country_name":"Singapore","region":"","city":"","lat":1.3667,"lon":103.8,"asn":45102,"org":"Alibaba (US) Technology Co., Ltd."},"source_domain":null,"known_scanners":["hunter"],"scanner_tag":{"key":"peeringdb:as45102","label":"Alibaba","category":"cdn","url":"https://www.peeringdb.com/asn/45102"},"cve_matches":[],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":6,"first_seen":"2026-10-21T03:05:32","last_seen":"2026-10-22T12:52:42","verdicts":[{"verdict":"scan","sessions":4},{"verdict":"unknown","sessions":2}],"personas":[{"persona":"mongodb@7.0.5","sessions":4},{"persona":"linux-ubuntu@24.04","sessions":2}],"services":[{"protocol":"mongodb","port":27017,"sessions":4},{"protocol":"ssh","port":22,"sessions":2}],"logins":[],"commands":[],"downloads":[],"files":[],"attack":[{"technique_id":"T1595","technique_name":"Active Scanning","tactic_id":"TA0043","tactic_name":"Reconnaissance","sessions":4}]},"top_ports":[{"port":1433,"proto":"tcp","label":"MSSQL","count":34,"sessions":0},{"port":3306,"proto":"tcp","label":"MySQL","count":33,"sessions":0},{"port":3389,"proto":"tcp","label":"RDP","count":26,"sessions":0},{"port":22,"proto":"tcp","label":"SSH","count":20,"sessions":2},{"port":27017,"proto":"tcp","label":"MongoDB","count":18,"sessions":4},{"port":6379,"proto":"tcp","label":"Redis","count":6,"sessions":0}],"fingerprints":{"ssh_hassh":["16443846184eafde36765c9bab2f4397"],"tls_ja4":["t13i1311h2_f57a46bbacb6_ab7e3b40a677","t13i131000_f57a46bbacb6_ab7e3b40a677","t13i190800_9dc949149365_97f8aa674fd9"],"tls_client_hello":"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","tls_ja3":["8c5b2f378e481f94b4f82c131798f4d4","2196848d251b217de8b2c037e356c11d","19e29534fd49dd27d09234e639c4057e"],"http_akin":["b11cun040_00040013_608dab68","b11cun030_00040014_54d07b6d"],"interactive":{"ssh_hassh":["16443846184eafde36765c9bab2f4397"],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677","t13i190800_9dc949149365_97f8aa674fd9"],"tls_ja3":["19e29534fd49dd27d09234e639c4057e","2196848d251b217de8b2c037e356c11d"]}},"fingerprint_peers":{"t13i1311h2_f57a46bbacb6_ab7e3b40a677":33,"t13i131000_f57a46bbacb6_ab7e3b40a677":3144,"t13i190800_9dc949149365_97f8aa674fd9":3247,"16443846184eafde36765c9bab2f4397":44,"b11cun040_00040013_608dab68":4344,"b11cun030_00040014_54d07b6d":3808},"akin_families":{},"user_agents":["curl/7.74.0","curl/7.64.1"],"timeline":[{"date":"2026-07-29","count":1,"sessions":0},{"date":"2026-07-31","count":5,"sessions":0},{"date":"2026-08-03","count":3,"sessions":0},{"date":"2026-08-06","count":2,"sessions":0},{"date":"2026-08-08","count":2,"sessions":0},{"date":"2026-08-31","count":2,"sessions":0},{"date":"2026-09-06","count":3,"sessions":0},{"date":"2026-09-08","count":2,"sessions":0},{"date":"2026-09-10","count":2,"sessions":0},{"date":"2026-09-18","count":5,"sessions":0},{"date":"2026-09-28","count":3,"sessions":0},{"date":"2026-09-30","count":2,"sessions":0},{"date":"2026-10-04","count":2,"sessions":0},{"date":"2026-10-05","count":2,"sessions":0},{"date":"2026-10-06","count":3,"sessions":0},{"date":"2026-10-07","count":2,"sessions":0},{"date":"2026-10-08","count":2,"sessions":0},{"date":"2026-10-16","count":2,"sessions":0},{"date":"2026-10-21","count":2,"sessions":2},{"date":"2026-10-22","count":2,"sessions":4},{"date":"2026-10-23","count":3,"sessions":0}],"recent_events":[{"timestamp":"2026-10-23T14:38:43","port":1433,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:1433\",\"user-agent\":\"curl/7.74.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313433330d0a557365722d4167656e743a206375726c2f372e37342e300d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"curl/7.74.0","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"182e62f0-2b3a-4eeb-9a1f-30be8c8abd96","seq":1,"duration_ms":101,"bytes_in":110,"bytes_out":77},{"timestamp":"2026-10-23T14:38:13","port":1433,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:1433\",\"user-agent\":\"curl/7.64.1\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313433330d0a557365722d4167656e743a206375726c2f372e36342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/7.64.1","ja3":"2196848d251b217de8b2c037e356c11d","session":"fb39934d-ca78-4b49-b8fc-ff4781d41390","seq":1,"duration_ms":100,"bytes_in":81,"bytes_out":77},{"timestamp":"2026-10-23T14:37:56","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000C\u0000\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0006\u0001\u0000\u0016\u0000\u0001\u0005\u0000\u0017\u0000$�\t\u0004\u0000\u0000\u0000\u0000\u0000��*Qb��K���a����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201004300000000000010000601001600010500170024ff09040000000000fdd42a516287874b8edad561fddedfea0000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"748fadc3-6b4f-4a75-8015-6cc56e2cd456","seq":1,"duration_ms":100,"bytes_in":67,"bytes_out":12},{"timestamp":"2026-10-22T19:11:14","port":27017,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:27017\",\"user-agent\":\"curl/7.74.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32373031370d0a557365722d4167656e743a206375726c2f372e37342e300d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"curl/7.74.0","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"eeb73a27-3c6a-47b8-b944-a57290f45070","seq":1,"duration_ms":101,"bytes_in":113,"bytes_out":77},{"timestamp":"2026-10-22T19:10:44","port":27017,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:27017\",\"user-agent\":\"curl/7.64.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32373031370d0a557365722d4167656e743a206375726c2f372e36342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/7.64.1","ja3":"2196848d251b217de8b2c037e356c11d","session":"be559ecc-093e-49b8-9cdc-df8a32ee4d55","seq":1,"duration_ms":100,"bytes_in":84,"bytes_out":77},{"timestamp":"2026-10-22T12:52:18","port":27017,"proto":"tcp","app_proto":"mongodb","app_protocol":"mongodb","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"=\u0000\u0000\u0000\u0007\u0000\u0000\u0000\u0000\u0000\u0000\u0000�\u0007\u0000\u0000\u0004\u0000\u0000\u0000admin.$cmd\u0000\u0000\u0000\u0000\u0000����\u0016\u0000\u0000\u0000\u0002buildInfo\u0000\u0002\u0000\u0000\u00001\u0000\u0000","payload_hex":"3d0000000700000000000000d40700000400000061646d696e2e24636d640000000000ffffffff16000000026275696c64496e666f0002000000310000","method":"","user_agent":"","ja3":"","session":"e53e4d42-985b-4c96-b353-ceb5848eadc6-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"d4f7bf8d8f047cb0","strings":["admin.$cmd","buildInfo"]},"interactive":true},{"timestamp":"2026-10-22T12:52:17","port":27017,"proto":"tcp","app_proto":"mongodb","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0005�\u0001\u0000\u0005�\u0003\u0003 T�\u0000h�]�\f4�_�?��}��\u00055�>�\u001e̔��Y�� W3��}�*��ґH�눫tc>���`���\u0016[<�Ք\u0000\u001a�+�/�,�0̨̩�\t�\u0013�\n�\u0014\u0013\u0001\u0013\u0002\u0013\u0003\u0001\u0000\u0005_\u0000\u000b\u0000\u0002\u0001\u0000�\u0001\u0000\u0001\u0000\u0000\u0017\u0000\u0000\u0000\u0012\u0000\u0000\u0000\u0005\u0000\u0005\u0001\u0000\u0000\u0000\u0000\u0000\n\u0000\f\u0000\n\u0011�\u0000\u001d\u0000\u0017\u0000\u0018\u0000\u0019\u0000\r\u0000\u0016\u0000\u0014\b\u0004\u0004\u0003\b\u0007\b\u0005\b\u0006\u0004\u0001\u0005\u0001\u0006\u0001\u0005\u0003\u0006\u0003\u00002\u0000\u001a\u0000\u0018\b\u0004\u0004\u0003\b\u0007\b\u0005\b\u0006\u0004\u0001\u0005\u0001\u0006\u0001\u0005\u0003\u0006\u0003\u0002\u0001\u0002\u0003\u0000+\u0000\t\b\u0003\u0004\u0003\u0003\u0003\u0002\u0003\u0001\u00003\u0004�\u0004�\u0011�\u0004���'���\u0011r\u001alHO��\\S��\u001a\u0012X�*\n|7\u0007\u0016��/�V���Ҙ\rk�>��\u001f�\u000b'bٗ�W��z\u0011�(7��q��hs�9\tCU��=��UC��R����G�\u0017&�(\u0018\n�w�Ǧ\u001d8�\u0017��.���4U\u0002�:�\u0016�bt?�Y\u0003H��ȶ\u0007�8m\"�&\thL��NB��9Y�����q\u0012u\u0001*�X�\u000b����\u0007��m�h�$Ec�QA��1�;�y\u0012�8ό\u0001����+ƨ���bAs��\u001b�lq�xx\tw�U��b�?�U��\u0007�\u001e2\u0015�ZHOЋ@��\u0017���4���)�'�T�\u0005+\u0000#���f\u001a���r�#��`��\u0017\u000en8Ɠ����r�ʼn2�.�6�\"8\\c\u0002��y\t�v\u0006p����8��W�1�Ul�-�-Ƞ�)u\u0013G1\u001d\u0004\u0003b\fk\bv���\u0007�\u0011��+�W��`\u0002��$���i;ٵp\r8�\u0007�\t����\u001cq\\7T�����c\"�\u0005$|�$LP��\u0005KP'��g%�.v\u000ba��F�\u001b���g9*�`�\u0002Y\u0010#����\u0015����\u001d�\u0006f�r\tj+�)u�d�1W��T\u000f�k(O�dh���kR$]�H���E�!\u0003��X��\u0010c�\b�\bCZ�Fr̫��E\u000b�k�Jx��O�0\u0006��E\u0012�;\u0004e\u0012�\u001a\u0006�[+}|>��\u000fv�Azf��\"=��;ޥ6��\u0011��jN�!����27�'!=h���\u000b�8V�:�N��b\u0015Z�F�7&T�b�G�<Y�\\���Z\t��{Ŗ�F�`G\u0013�V2��ǣb�\u001c��AL\u0011��4\u0004�LgU\u0011[c:\u0011s��E�\u0013����K\u001a\u0004����\t\f�\u001b\u0000/3\u0007��\r���MfL�EΕ�\t��\u0014q�\u0019�\u001a}ƚ\\KSH\b��o�a�[��Q\u0016��0\u0014kW�\"wc\f;�d�Q�3�⢅����99Q=\u0000����\u0005�l\u0003\u0014*���X�d|8@(�a�k�t��n�\u0006w�\u001bt��g�\u001b��Wc�\u0010\u0019�R�]@�#b�=\u001a�\u001e\b�_rf�����\u0013�#|FJ�n����\u0014�f�QRw�h\u0004 �wH�\u001c��\t\"|DŽ�*k�'�XO\u0003,\u0011{в��A�{�1YK\u001a\u001c�\bѡ*�\u001c\u0011�\u000e��^Ϫxj�.�X\u001e�i\u0019�ŏdیЄ\u001b�����υL�\u001ab�#�<Kt�V��\u0001\u0013\r�\"�`A.�l\bՀy�\u0019:��Z��3\u0007z\u000bɳ�`�Ρ�k\n�T�\f���Kпo�D�Lr�p��Y����À{����\u0017\u001aӒ���@�\u0014]\u00173\u001c�KY�\u0019O;�\u0019:�~\u0015�X<Vo#�j�Wh\u0003پ��\t_h����¶v���󰊤vB��.���H�ZXE��$�\u000eW\u0014�|�m�&O�z�����\"�kg,�9��a��\u0012�\u0000).�M��NJs+=\u001b#'u\\�6�����%UQ���\u0018�q:�%;�Y��\u0007��G�5��\u0017 K\t�P��\\v�\u0000_�wU\u0016��D�QT�\u0010��\u001b\u001f\b���֪�1`�,!�Z[f��X�K��\u001bH\u0002c\u0000\u001d\u0000 \u0010��\u001b\u001f\b���֪�1`�,!�Z[f��X�K��\u001bH\u0002c","payload_hex":"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","method":"","user_agent":"","ja3":"2196848d251b217de8b2c037e356c11d","session":"211f3c21-83e4-48f1-bd14-eb48a60f01ce-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"bfda53fac5eba2f3","label":"TLS/SSL","strings":["\"8\\c","q\\7T","'!=h","\\KSH","99Q=","d|8@(","#|FJ","X<Vo#","NJs+=","#'u\\"]},"interactive":true},{"timestamp":"2026-10-22T12:52:17","port":27017,"proto":"tcp","app_proto":"mongodb","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"GET / HTTP/1.1\r\nHost: <HONEYPOT>:27017\r\nUser-Agent: curl/7.64.1\r\nAccept: */*\r\n\r\n","payload_hex":"474554202f20485454502f312e310d0a486f73743a203c484f4e4559504f543e3a32373031370d0a557365722d4167656e743a206375726c2f372e36342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"","user_agent":"","ja3":"","session":"c2f265d3-066d-4134-81ae-6d069eb6179e-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"e780f2da48da501a","label":"HTTP","strings":["GET / HTTP/1.1","Host: <HONEYPOT>:27017","User-Agent: curl/7.64.1","Accept: */*"]},"interactive":true},{"timestamp":"2026-10-22T12:52:07","port":27017,"proto":"tcp","app_proto":"mongodb","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0000�\u0001\u0000\u0000�\u0003\u0003I\u0006����i�Y���e-�Ud]\u000e��b8�g��9dZ8f g��i���˰�\u0019Nֽ�g|p��<Z��T���8'O;\u0000&�+�/�,�0̨̩�\t�\u0013�\n�\u0014\u0000�\u0000�\u0000/\u00005�\u0012\u0000\n\u0013\u0001\u0013\u0002\u0013\u0003\u0001\u0000\u0000{\u0000\u0005\u0000\u0005\u0001\u0000\u0000\u0000\u0000\u0000\n\u0000\n\u0000\b\u0000\u001d\u0000\u0017\u0000\u0018\u0000\u0019\u0000\u000b\u0000\u0002\u0001\u0000\u0000\r\u0000\u001a\u0000\u0018\b\u0004\u0004\u0003\b\u0007\b\u0005\b\u0006\u0004\u0001\u0005\u0001\u0006\u0001\u0005\u0003\u0006\u0003\u0002\u0001\u0002\u0003�\u0001\u0000\u0001\u0000\u0000\u0012\u0000\u0000\u0000+\u0000\t\b\u0003\u0004\u0003\u0003\u0003\u0002\u0003\u0001\u00003\u0000&\u0000$\u0000\u001d\u0000 �<'�Vʑ��t���m-�߅��@���+33�:�H","payload_hex":"16030100ee010000ea03034906b2f9bc9969c059fbf8ba652d8355645d0e8db76238b467c6dd39645a38662067c18169b3f6f2cbb0a9194ed6bd95677c70fce93c5aa19054b7e9a538274f3b0026c02bc02fc02cc030cca9cca8c009c013c00ac014009c009d002f0035c012000a1301130213030100007b000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d0020ed3c27cf56ca91f2b5749adcf77f6d2de6df85dac640a8b9c22b3333d43ab648","method":"","user_agent":"","ja3":"19e29534fd49dd27d09234e639c4057e","session":"21310898-35e5-4cd8-8b28-09d0d783a966-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"01603be45f3d3502","label":"TLS/SSL","strings":["9dZ8f g","8'O;","8'O;&"]},"interactive":true},{"timestamp":"2026-10-21T12:51:06","port":3306,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3306\",\"user-agent\":\"curl/7.74.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333330360d0a557365722d4167656e743a206375726c2f372e37342e300d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"curl/7.74.0","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"c00abedf-db9a-4ad1-8c3c-e1460b97dad6","seq":1,"duration_ms":101,"bytes_in":112,"bytes_out":77}],"http_methods":[{"method":"GET","count":113}],"distinct_ports_total":6,"top_paths":[{"path":"/","count":113,"ports":6}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":51}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:1433","notable":false},{"name":"User-Agent","value":"curl/7.74.0","notable":false}],"distinct_sets":2,"events_with_headers":5},"tags":[]}