{"ip":"82.156.249.126","total_events":7,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["7 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,080 bytes sent","bytes_sent":1080,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-26T14:48:03","last_seen":"2026-09-26T21:30:18","events_24h":0,"events_7d":7,"geo":{"country_code":"CN","country_name":"China","region":"Beijing","city":"Beijing","lat":39.911,"lon":116.395,"asn":45090,"org":"Shenzhen Tencent Computer Systems Company Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as45090","label":"Tencent-CN","category":"cdn","url":"https://www.peeringdb.com/asn/45090"},"cve_matches":[],"malware":[],"top_ports":[{"port":1984,"proto":"tcp","label":"","count":7}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["b11cun040_00040013_608dab68","b11cun050_00440013_2619b3ac"]},"fingerprint_peers":{"b11cun040_00040013_608dab68":4310,"b11cun050_00440013_2619b3ac":13},"akin_families":{},"user_agents":["curl/8.5.0","Python-urllib/3.11"],"timeline":[{"date":"2026-09-26","count":7}],"recent_events":[{"timestamp":"2026-09-26T21:30:18","port":1984,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"authorization\":\"Basic a2FtOkt4OS1QcjB4eS00NDE3LVpx\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:1984\",\"user-agent\":\"Python-urllib/3.11\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/config","summary":"","payload_hex":"474554202f6170692f636f6e66696720485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a313938340d0a557365722d4167656e743a20507974686f6e2d75726c6c69622f332e31310d0a417574686f72697a6174696f6e3a20426173696320613246744f6b74344f533151636a4234655330304e4445334c5670780d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Python-urllib/3.11","ja3":"","session":"fbd46ee0-3518-45e9-85b5-037b5a222f7a","seq":1,"duration_ms":100,"bytes_in":182,"bytes_out":79},{"timestamp":"2026-09-26T21:30:17","port":1984,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"authorization\":\"Basic YWRtaW46RHEyZWFWZVF3eHg3bTd6RUdJUVkyaGhYRGhzWg==\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:1984\",\"user-agent\":\"Python-urllib/3.11\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/config","summary":"","payload_hex":"474554202f6170692f636f6e66696720485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a313938340d0a557365722d4167656e743a20507974686f6e2d75726c6c69622f332e31310d0a417574686f72697a6174696f6e3a204261736963205957527461573436524845795a5746575a56463365486733625464365255644a55566b79614768595247687a57673d3d0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Python-urllib/3.11","ja3":"","session":"4d17393a-6407-4c6a-93cb-f3fb58f28821","seq":1,"duration_ms":100,"bytes_in":202,"bytes_out":79},{"timestamp":"2026-09-26T21:30:11","port":1984,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"authorization\":\"Basic YWRtaW46NVhRNHFaQlNDb2l3VEdueldVT0xGQWVwYmRXOA==\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:1984\",\"user-agent\":\"Python-urllib/3.11\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/config","summary":"","payload_hex":"474554202f6170692f636f6e66696720485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a313938340d0a557365722d4167656e743a20507974686f6e2d75726c6c69622f332e31310d0a417574686f72697a6174696f6e3a2042617369632059575274615734364e5668524e484661516c4e4462326c3356456475656c64565430784751575677596d52584f413d3d0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Python-urllib/3.11","ja3":"","session":"aa94c447-324d-4d91-94ff-287eac83680c","seq":1,"duration_ms":100,"bytes_in":202,"bytes_out":79},{"timestamp":"2026-09-26T21:30:09","port":1984,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:1984\",\"user-agent\":\"Python-urllib/3.11\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api/config","summary":"","payload_hex":"474554202f6170692f636f6e66696720485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a313938340d0a557365722d4167656e743a20507974686f6e2d75726c6c69622f332e31310d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Python-urllib/3.11","ja3":"","session":"a0254141-4fda-4f18-8661-87555f3ef1fa","seq":1,"duration_ms":100,"bytes_in":131,"bytes_out":79},{"timestamp":"2026-09-26T20:23:57","port":1984,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:1984\",\"user-agent\":\"Python-urllib/3.11\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api","summary":"","payload_hex":"474554202f61706920485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a313938340d0a557365722d4167656e743a20507974686f6e2d75726c6c69622f332e31310d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Python-urllib/3.11","ja3":"","session":"73b4bd2f-ba59-4eb1-a750-6015f0de8ccf","seq":1,"duration_ms":100,"bytes_in":125,"bytes_out":79},{"timestamp":"2026-09-26T20:23:57","port":1984,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:1984\",\"user-agent\":\"Python-urllib/3.11\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a313938340d0a557365722d4167656e743a20507974686f6e2d75726c6c69622f332e31310d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Python-urllib/3.11","ja3":"","session":"336740d8-3b26-462e-ab9b-f881d18cb048","seq":1,"duration_ms":100,"bytes_in":122,"bytes_out":79},{"timestamp":"2026-09-26T14:48:03","port":1984,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:1984\",\"user-agent\":\"curl/8.5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/api","summary":"","payload_hex":"474554202f61706920485454502f312e310d0a4163636570742d456e636f64696e673a206964656e746974790d0a486f73743a20<HONEYPOT>3a313938340d0a557365722d4167656e743a206375726c2f382e352e300d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"curl/8.5.0","ja3":"","session":"a7ef0760-bf70-4fa2-8543-1c05326c3c0a","seq":1,"duration_ms":100,"bytes_in":116,"bytes_out":79}],"http_methods":[{"method":"GET","count":7}],"distinct_ports_total":1,"top_paths":[{"path":"/api/config","count":4,"ports":1},{"path":"/api","count":2,"ports":1},{"path":"/","count":1,"ports":1}],"distinct_paths_total":3,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Authorization","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"identity","notable":false},{"name":"Authorization","value":"Basic a2FtOkt4OS1QcjB4eS00NDE3LVpx","notable":true},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:1984","notable":false},{"name":"User-Agent","value":"Python-urllib/3.11","notable":false}],"distinct_sets":2,"events_with_headers":7},"tags":[],"data_as_of":"2026-09-30T17:59:19.813260+00:00"}