{"ip":"8.221.139.48","data_as_of":"2026-10-24T11:02:46+00:00","observed":true,"total_events":141,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"hunter","confidence":"high","network_type":"CDN","why":["The address is in a published scanner range (hunter).","Known research and commercial scanners are labelled by operator and carry no threat verdict.","Counts include 3 interactive session(s) as well as first-packet events."],"engagement":{"level":"payload","label":"Sustained payload","detail":"8,235 bytes sent","bytes_sent":8235,"session_seconds":3,"persistent":false},"basis":"combined"},"first_seen":"2026-02-19T02:14:25","last_seen":"2026-10-23T12:42:41","events_24h":3,"events_7d":8,"interactive_sessions":3,"interactive_sessions_24h":0,"interactive_sessions_7d":3,"interactive_protocols":[{"protocol":"rdp","sessions":3}],"geo":{"country_code":"JP","country_name":"Japan","region":"Tokyo","city":"Tokyo","lat":35.6893,"lon":139.6899,"asn":45102,"org":"Alibaba (US) Technology Co., Ltd."},"source_domain":null,"known_scanners":["hunter"],"scanner_tag":{"key":"peeringdb:as45102","label":"Alibaba","category":"cdn","url":"https://www.peeringdb.com/asn/45102"},"cve_matches":[],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":3,"first_seen":"2026-10-18T13:43:23","last_seen":"2026-10-18T13:43:33","verdicts":[{"verdict":"scan","sessions":3}],"personas":[{"persona":"rdp@Windows Server 2016","sessions":3}],"services":[{"protocol":"rdp","port":3389,"sessions":3}],"logins":[],"commands":[],"downloads":[],"files":[],"attack":[{"technique_id":"T1595","technique_name":"Active Scanning","tactic_id":"TA0043","tactic_name":"Reconnaissance","sessions":3}]},"top_ports":[{"port":1433,"proto":"tcp","label":"MSSQL","count":37,"sessions":0},{"port":3306,"proto":"tcp","label":"MySQL","count":25,"sessions":0},{"port":3389,"proto":"tcp","label":"RDP","count":22,"sessions":3},{"port":22,"proto":"tcp","label":"SSH","count":22,"sessions":0},{"port":27017,"proto":"tcp","label":"MongoDB","count":18,"sessions":0},{"port":6379,"proto":"tcp","label":"Redis","count":17,"sessions":0}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i1311h2_f57a46bbacb6_ab7e3b40a677","t13i131000_f57a46bbacb6_ab7e3b40a677","t13i190800_9dc949149365_97f8aa674fd9"],"tls_client_hello":"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","tls_ja3":["8c5b2f378e481f94b4f82c131798f4d4","2196848d251b217de8b2c037e356c11d","19e29534fd49dd27d09234e639c4057e"],"http_akin":["b11cun040_00040013_608dab68","b11cun030_00040014_54d07b6d"],"interactive":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677","t13i190800_9dc949149365_97f8aa674fd9"],"tls_ja3":["19e29534fd49dd27d09234e639c4057e","2196848d251b217de8b2c037e356c11d"]}},"fingerprint_peers":{"t13i1311h2_f57a46bbacb6_ab7e3b40a677":33,"t13i190800_9dc949149365_97f8aa674fd9":3247,"b11cun040_00040013_608dab68":4344,"b11cun030_00040014_54d07b6d":3808,"t13i131000_f57a46bbacb6_ab7e3b40a677":3144},"akin_families":{},"user_agents":["curl/7.74.0","curl/7.64.1"],"timeline":[{"date":"2026-07-30","count":3,"sessions":0},{"date":"2026-07-31","count":2,"sessions":0},{"date":"2026-08-09","count":2,"sessions":0},{"date":"2026-08-26","count":2,"sessions":0},{"date":"2026-08-28","count":3,"sessions":0},{"date":"2026-09-03","count":2,"sessions":0},{"date":"2026-09-06","count":3,"sessions":0},{"date":"2026-09-07","count":3,"sessions":0},{"date":"2026-09-19","count":1,"sessions":0},{"date":"2026-09-20","count":5,"sessions":0},{"date":"2026-09-22","count":3,"sessions":0},{"date":"2026-09-23","count":2,"sessions":0},{"date":"2026-09-26","count":3,"sessions":0},{"date":"2026-10-04","count":2,"sessions":0},{"date":"2026-10-07","count":3,"sessions":0},{"date":"2026-10-12","count":2,"sessions":0},{"date":"2026-10-18","count":0,"sessions":3},{"date":"2026-10-19","count":5,"sessions":0},{"date":"2026-10-23","count":3,"sessions":0}],"recent_events":[{"timestamp":"2026-10-23T12:42:41","port":1433,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:1433\",\"user-agent\":\"curl/7.74.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313433330d0a557365722d4167656e743a206375726c2f372e37342e300d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"curl/7.74.0","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"11ea414c-534d-4dfb-b1d8-a20284b59a38","seq":1,"duration_ms":100,"bytes_in":110,"bytes_out":77},{"timestamp":"2026-10-23T12:42:11","port":1433,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:1433\",\"user-agent\":\"curl/7.64.1\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313433330d0a557365722d4167656e743a206375726c2f372e36342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/7.64.1","ja3":"2196848d251b217de8b2c037e356c11d","session":"49587c0b-74dc-417a-8e4c-4212f7a77a38","seq":1,"duration_ms":100,"bytes_in":81,"bytes_out":77},{"timestamp":"2026-10-23T12:41:54","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000C\u0000\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0006\u0001\u0000\u0016\u0000\u0001\u0005\u0000\u0017\u0000$�\t\u0004\u0000\u0000\u0000\u0000\u0000��*Qb��K���a����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201004300000000000010000601001600010500170024ff09040000000000fdd42a516287874b8edad561fddedfea0000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"9e8e6f79-64df-4de3-9ac5-9edd1372f6eb","seq":1,"duration_ms":100,"bytes_in":67,"bytes_out":12},{"timestamp":"2026-10-19T21:31:58","port":3389,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:3389\",\"user-agent\":\"curl/7.74.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333338390d0a557365722d4167656e743a206375726c2f372e37342e300d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"curl/7.74.0","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"bca98cdd-969b-4bbd-930f-bbd559ccdbe8","seq":1,"duration_ms":100,"bytes_in":111,"bytes_out":77},{"timestamp":"2026-10-19T21:31:28","port":3389,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:3389\",\"user-agent\":\"curl/7.64.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333338390d0a557365722d4167656e743a206375726c2f372e36342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/7.64.1","ja3":"2196848d251b217de8b2c037e356c11d","session":"9e39c9fc-5300-49e9-84f8-0f07b4d43896","seq":1,"duration_ms":101,"bytes_in":82,"bytes_out":77},{"timestamp":"2026-10-19T21:31:11","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080003000000","method":"","user_agent":"","ja3":"","session":"3c940a3b-0920-4cac-b0ec-6000584cee99","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":12,"enriched":{"digest":"fa962c48ab1145cc","label":"RDP (X.224)"}},{"timestamp":"2026-10-19T21:08:25","port":22,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:22\",\"user-agent\":\"curl/7.74.0\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32320d0a557365722d4167656e743a206375726c2f372e37342e300d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"curl/7.74.0","ja3":"8c5b2f378e481f94b4f82c131798f4d4","session":"da84ec5d-f1e7-4254-9bcf-bc502c88280e","seq":1,"duration_ms":100,"bytes_in":109,"bytes_out":77},{"timestamp":"2026-10-19T21:07:55","port":22,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:22\",\"user-agent\":\"curl/7.64.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32320d0a557365722d4167656e743a206375726c2f372e36342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/7.64.1","ja3":"2196848d251b217de8b2c037e356c11d","session":"99bc85ce-277c-40ab-9fc0-c1fad533a030","seq":1,"duration_ms":100,"bytes_in":80,"bytes_out":77},{"timestamp":"2026-10-18T13:43:33","port":3389,"proto":"tcp","app_proto":"rdp","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0000�\u0001\u0000\u0000�\u0003\u0003I\u0006����i�Y���e-�Ud]\u000e��b8�g��9dZ8f g��i���˰�\u0019Nֽ�g|p��<Z��T���8'O;\u0000&�+�/�,�0̨̩�\t�\u0013�\n�\u0014\u0000�\u0000�\u0000/\u00005�\u0012\u0000\n\u0013\u0001\u0013\u0002\u0013\u0003\u0001\u0000\u0000{\u0000\u0005\u0000\u0005\u0001\u0000\u0000\u0000\u0000\u0000\n\u0000\n\u0000\b\u0000\u001d\u0000\u0017\u0000\u0018\u0000\u0019\u0000\u000b\u0000\u0002\u0001\u0000\u0000\r\u0000\u001a\u0000\u0018\b\u0004\u0004\u0003\b\u0007\b\u0005\b\u0006\u0004\u0001\u0005\u0001\u0006\u0001\u0005\u0003\u0006\u0003\u0002\u0001\u0002\u0003�\u0001\u0000\u0001\u0000\u0000\u0012\u0000\u0000\u0000+\u0000\t\b\u0003\u0004\u0003\u0003\u0003\u0002\u0003\u0001\u00003\u0000&\u0000$\u0000\u001d\u0000 �<'�Vʑ��t���m-�߅��@���+33�:�H","payload_hex":"16030100ee010000ea03034906b2f9bc9969c059fbf8ba652d8355645d0e8db76238b467c6dd39645a38662067c18169b3f6f2cbb0a9194ed6bd95677c70fce93c5aa19054b7e9a538274f3b0026c02bc02fc02cc030cca9cca8c009c013c00ac014009c009d002f0035c012000a1301130213030100007b000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d0020ed3c27cf56ca91f2b5749adcf77f6d2de6df85dac640a8b9c22b3333d43ab648","method":"","user_agent":"","ja3":"19e29534fd49dd27d09234e639c4057e","session":"b8551e25-d58b-46e9-ba38-30d3ac676cf1-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"01603be45f3d3502","label":"TLS/SSL","strings":["9dZ8f g","8'O;","8'O;&"]},"interactive":true},{"timestamp":"2026-10-18T13:43:23","port":3389,"proto":"tcp","app_proto":"rdp","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0005�\u0001\u0000\u0005�\u0003\u0003�u�c�q>�ST��d]0\u001bh�Ni��6����+�H�! �ih�J�\nᯬ\u0010\u0001\u0018\u001d�/�!\u0011�\b��\u0019�$��S8/\u0000\u001a�+�/�,�0̨̩�\t�\u0013�\n�\u0014\u0013\u0001\u0013\u0002\u0013\u0003\u0001\u0000\u0005_\u0000\u000b\u0000\u0002\u0001\u0000�\u0001\u0000\u0001\u0000\u0000\u0017\u0000\u0000\u0000\u0012\u0000\u0000\u0000\u0005\u0000\u0005\u0001\u0000\u0000\u0000\u0000\u0000\n\u0000\f\u0000\n\u0011�\u0000\u001d\u0000\u0017\u0000\u0018\u0000\u0019\u0000\r\u0000\u0016\u0000\u0014\b\u0004\u0004\u0003\b\u0007\b\u0005\b\u0006\u0004\u0001\u0005\u0001\u0006\u0001\u0005\u0003\u0006\u0003\u00002\u0000\u001a\u0000\u0018\b\u0004\u0004\u0003\b\u0007\b\u0005\b\u0006\u0004\u0001\u0005\u0001\u0006\u0001\u0005\u0003\u0006\u0003\u0002\u0001\u0002\u0003\u0000+\u0000\t\b\u0003\u0004\u0003\u0003\u0003\u0002\u0003\u0001\u00003\u0004�\u0004�\u0011�\u0004��,�r�\u0017A'��yB��g߸RH����=0���9��b$�ӟ�v�b\u001a�N�by�A�V^�\u0007�\u0013���I\u0019vK`�\u0000�\u0004����ΐd���O1�3:�[òz)\u0014D�7���L$B�K�n7;��\u0014���S�ч���U�\u0002F�\u001e�¨\\ڵ�9;�����?��p8�İ�\u000f3�\u0010X��0l|�\u0016�YR���Q+'I�`��\u001a'fq�\u0010dA���|\nd�ƅ\u0001��\u0014�Ow�\u001b\u001c��\b�- _��\b\u00062�\u001a��\u001fI[���§&�P��D͟��^�]|f�R$\n�Wq\r�q\u0003�4?�Ƿ�P\u0001*�P���|U�ħ\u0005P\u0013\u0000���\u0017\u0015\u0004L�\u0013\"�@���˭$1\u000b=)'�F._\f�k\u0001]���A�Rnh�`�'. \u0003a\u0012�\u001fv�N�*&59S\u0016�H�)϶�%�\u0018�&K��_ժ�\u0000\u0010#$&9Ol��[Q\u0004v��\u0014���\u0015��\b�VN��\u001d��aFEh����\tv꧷\u0015&��@N0ilxC�&\u0018Q\u001e`@ ��P*%�0�{�.����v�R�b�\t|��mp�U*�\u0019��2��6#8\u001e����F4m�aV�u.+�~�[w SS\u0010\u000e-83?W�Ya,&<��A3\u0018�\u0016Ѻ9\u001f��O�\u001a\u00123��It�A�O�!�i!��ȱ�t\u0001ȗ\u001e��\u0016�4`�.{,9�C�\u0006��-��Vx.��c\u0001&Lh�\u0007��g��M�\u0005\u0018�|\r�B��,\u00165�(yt��к��\b@��X�h��xEl\u0018��MuJ��&�����!�<�\u0014�颰w��\u0017�8|��B}��\b�k\u000e�\u0011��Ls/\u00131��\\��W����6NyY���E�B5_���kj\\f�\u0015$f\u001bXGC�<��xarο�#'��X:��\u001c� �L�e���,��\u0003L(Ea\b6�\u0015�\n�\t��uI\u0015e�du\\�[��[Y�\u001e1e\fŐ��w��cf��M��\u000f�z}��J�ZC���i�IbJ\u000e��\u0005�7\u0007��\u0016`Ś\u0000YF���/T�˔���\\�p_��2��W��O*t\u001f�V3Ӊ\\�Bg���\u0016W&I��1����S̵)^�U^\u0012.q�9\u001c\u0011�XqC:t\u001bE\u0003-mT\u0019���f\u0004�\u001aȯ,���G��ť�[Vٓ\u0004\u0019S:?6J\u000e�X;cɘY���InWr&jjؤ\u0000\u001c�\u0010��\u000e7�W�C�r����\u001a\u0019�&0L\u000eU�ņW\u0004\u0007\tf�\u0015\u001c��m@8\fx�6}����'N\u0015� %�vk���.\u0007>:r�+�;^�\u0002��N0v0�\u0002��{O��LI\u0019(\u0011p!���§H\nYX����BC��\u0018�\u0017�\u0002�\u000b5i\u0016��\rc�G8��S*\\\r�\u0013���T9>F)�P0��Z\u0018�'@�\\�C��u����O��\u0012l\u0005\u001a�\u0019 ~�E��\n��\u0019��\u0001bw��F}�`?Gԝ^�(E\u0001K\u0011Ap�V�\"$N��'\b+�T������\u0001v����\u0005���X\u0014\"\u0019�U�\"��\r�\u001c��];)+T�VY�DF��Y`�݉�����/�5\u0000\u001d\u0000 �\r�\u001c��];)+T�VY�DF��Y`�݉�����/�5","payload_hex":"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","method":"","user_agent":"","ja3":"2196848d251b217de8b2c037e356c11d","session":"7a491419-2511-4162-81c7-eefe16197ea2-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"d1b67aaa84644f0d","label":"TLS/SSL","strings":["Q+'I","*&59S","#$&9Ol","aFEh","@N0ilxC","[w SS","-83?W","Ya,&<",".{,9","6NyY"]},"interactive":true}],"http_methods":[{"method":"GET","count":110}],"distinct_ports_total":6,"top_paths":[{"path":"/","count":110,"ports":6}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":49}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:1433","notable":false},{"name":"User-Agent","value":"curl/7.74.0","notable":false}],"distinct_sets":2,"events_with_headers":6},"tags":[]}