{"ip":"81.70.194.80","total_events":25,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["25 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,403 bytes sent","bytes_sent":1403,"session_seconds":0,"persistent":false}},"first_seen":"2026-03-03T21:29:58","last_seen":"2026-08-19T01:26:37","events_24h":0,"events_7d":8,"geo":{"country_code":"CN","country_name":"China","region":"Beijing","city":"Beijing","lat":39.911,"lon":116.395,"asn":45090,"org":"Shenzhen Tencent Computer Systems Company Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as45090","label":"Tencent-CN","category":"cdn","url":"https://www.peeringdb.com/asn/45090"},"cve_matches":[],"malware":[],"top_ports":[{"port":2375,"proto":"tcp","label":"Docker","count":14},{"port":2376,"proto":"tcp","label":"Docker-TLS","count":11}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":["ge11nn0400_88d30a62b7ad"]},"fingerprint_peers":{"ge11nn0400_88d30a62b7ad":4889},"user_agents":["Mozilla/5.0 zgrab/0.x"],"timeline":[{"date":"2026-06-02","count":2},{"date":"2026-06-13","count":1},{"date":"2026-06-19","count":2},{"date":"2026-08-16","count":4},{"date":"2026-08-19","count":4}],"recent_events":[{"timestamp":"2026-08-19T01:26:37","port":2376,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:2376\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/v1.16/version","summary":"","payload_hex":"474554202f76312e31362f76657273696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a323337360d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x","ja3":"","session":"724ba90c-d525-474b-93a9-e019eabd61db","seq":1,"duration_ms":100,"bytes_in":127,"bytes_out":77},{"timestamp":"2026-08-19T01:26:37","port":2376,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:2376\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/v1.16/version","summary":"","payload_hex":"474554202f76312e31362f76657273696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a323337360d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x","ja3":"","session":"82c5c9d7-5143-48af-9216-8a88d0e0caf9","seq":1,"duration_ms":100,"bytes_in":127,"bytes_out":77},{"timestamp":"2026-08-19T01:25:30","port":2375,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:2375\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/v1.16/version","summary":"","payload_hex":"474554202f76312e31362f76657273696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a323337350d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x","ja3":"","session":"88aa1f78-1354-4537-a1f9-9ca72d821af4","seq":1,"duration_ms":100,"bytes_in":127,"bytes_out":77},{"timestamp":"2026-08-19T01:25:30","port":2375,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:2375\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/v1.16/version","summary":"","payload_hex":"474554202f76312e31362f76657273696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a323337350d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x","ja3":"","session":"1f16ef9b-1d20-4ce9-afef-97bdeca9dc75","seq":1,"duration_ms":100,"bytes_in":127,"bytes_out":77},{"timestamp":"2026-08-16T11:59:16","port":2376,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:2376\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/v1.16/version","summary":"","payload_hex":"474554202f76312e31362f76657273696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a323337360d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x","ja3":"","session":"6c3cf501-48e9-4885-9c3b-34318b6d241c","seq":1,"duration_ms":101,"bytes_in":127,"bytes_out":77},{"timestamp":"2026-08-16T11:59:16","port":2376,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:2376\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/v1.16/version","summary":"","payload_hex":"474554202f76312e31362f76657273696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a323337360d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x","ja3":"","session":"9ff295c3-0983-4495-9445-5f0dcdc2e9ec","seq":1,"duration_ms":100,"bytes_in":127,"bytes_out":77},{"timestamp":"2026-08-16T11:58:08","port":2375,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:2375\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/v1.16/version","summary":"","payload_hex":"474554202f76312e31362f76657273696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a323337350d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x","ja3":"","session":"6ee40d06-da96-4ba3-9ac0-12a04711f9c9","seq":1,"duration_ms":101,"bytes_in":127,"bytes_out":77},{"timestamp":"2026-08-16T11:58:08","port":2375,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:2375\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/v1.16/version","summary":"","payload_hex":"474554202f76312e31362f76657273696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a323337350d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x","ja3":"","session":"da0cab1f-f701-4153-bd85-177a242ff14b","seq":1,"duration_ms":101,"bytes_in":127,"bytes_out":77},{"timestamp":"2026-06-19T19:20:13","port":2375,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:2375\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/v1.16/version","summary":"","payload_hex":"474554202f76312e31362f76657273696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a323337350d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x","ja3":"","session":"25a3bf10-5c53-454b-bcb7-59e27cbb1016","seq":1,"duration_ms":100,"bytes_in":129,"bytes_out":77},{"timestamp":"2026-06-19T19:20:13","port":2375,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:2375\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/v1.16/version","summary":"","payload_hex":"474554202f76312e31362f76657273696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a323337350d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x","ja3":"","session":"f48f686e-81a1-4438-885c-315e735cccc7","seq":1,"duration_ms":100,"bytes_in":129,"bytes_out":77}],"http_methods":[{"method":"GET","count":17}],"distinct_ports_total":2,"top_paths":[{"path":"/v1.16/version","count":17,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:2376","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 zgrab/0.x","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-08-20T22:11:44.266579+00:00"}