{"ip":"81.69.250.100","observed":true,"total_events":21,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["21 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,149 bytes sent","bytes_sent":1149,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-10T15:10:33","last_seen":"2026-10-10T15:10:58","events_24h":0,"events_7d":21,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"CN","country_name":"China","region":"Shanghai","city":"Shanghai","lat":31.2222,"lon":121.4581,"asn":45090,"org":"Shenzhen Tencent Computer Systems Company Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as45090","label":"Tencent-CN","category":"cdn","url":"https://www.peeringdb.com/asn/45090"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":3000,"proto":"tcp","label":"Web-alt","count":3},{"port":9119,"proto":"tcp","label":"","count":3},{"port":9121,"proto":"tcp","label":"","count":3},{"port":443,"proto":"tcp","label":"HTTPS","count":3},{"port":9118,"proto":"tcp","label":"","count":3},{"port":9120,"proto":"tcp","label":"","count":3},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i3012h2_1d37bd780c83_8537cf56674e"],"tls_client_hello":"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","tls_ja3":["7587a1ac9a4f17b4e4e5fe226716f4df"],"http_akin":["b11cun030_00040014_54d07b6d"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"b11cun030_00040014_54d07b6d":3738,"t13i3012h2_1d37bd780c83_8537cf56674e":28},"akin_families":{},"user_agents":["curl/8.14.1"],"timeline":[{"date":"2026-10-10","count":21}],"recent_events":[{"timestamp":"2026-10-10T15:10:58","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"7587a1ac9a4f17b4e4e5fe226716f4df","session":"08038613-54bf-45f7-92bf-d8cd71ca6a72","seq":1,"duration_ms":100,"bytes_in":77,"bytes_out":78},{"timestamp":"2026-10-10T15:10:56","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","ja3":"","session":"399f72ba-5420-4890-85d4-eecefb92a64d","seq":1,"duration_ms":0,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-10-10T15:10:56","port":443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:443\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3434330d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"","session":"2c9df91c-7eea-4b59-8c97-cd391e35ee00","seq":1,"duration_ms":101,"bytes_in":81,"bytes_out":78},{"timestamp":"2026-10-10T15:10:54","port":8080,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"7587a1ac9a4f17b4e4e5fe226716f4df","session":"53815b46-5ad6-42da-a8bd-b4e2c7ea38ec","seq":1,"duration_ms":100,"bytes_in":82,"bytes_out":78},{"timestamp":"2026-10-10T15:10:52","port":8080,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","ja3":"","session":"5e770b28-a307-4ace-9f73-595a02f08eb7","seq":1,"duration_ms":0,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-10-10T15:10:52","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"","session":"af0bc4c6-79ca-4627-88bf-67a2f1b66278","seq":1,"duration_ms":100,"bytes_in":82,"bytes_out":78},{"timestamp":"2026-10-10T15:10:51","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"7587a1ac9a4f17b4e4e5fe226716f4df","session":"8989b707-97fa-43e3-ba68-d22abbe102bc","seq":1,"duration_ms":100,"bytes_in":82,"bytes_out":78},{"timestamp":"2026-10-10T15:10:48","port":3000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","ja3":"","session":"608bcc64-28fe-42d7-b6c3-5171015efafa","seq":1,"duration_ms":0,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-10-10T15:10:48","port":3000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"","session":"637279ef-deb2-4465-a407-5f83d9a1eba9","seq":1,"duration_ms":100,"bytes_in":82,"bytes_out":78},{"timestamp":"2026-10-10T15:10:46","port":9121,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9121\",\"user-agent\":\"curl/8.14.1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393132310d0a557365722d4167656e743a206375726c2f382e31342e310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"curl/8.14.1","ja3":"7587a1ac9a4f17b4e4e5fe226716f4df","session":"edc13006-bd19-40e3-a3a1-0efe5aece194","seq":1,"duration_ms":100,"bytes_in":82,"bytes_out":78}],"http_methods":[{"method":"GET","count":14}],"distinct_ports_total":7,"top_paths":[{"path":"/","count":14,"ports":7}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":7}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"curl/8.14.1","notable":false}],"distinct_sets":1,"events_with_headers":7},"tags":[],"data_as_of":"2026-10-17T07:09:17.701686+00:00"}