{"ip":"94.103.3.131","total_events":8,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["8 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"98 bytes sent","bytes_sent":98,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-25T01:07:03","last_seen":"2026-09-26T05:14:04","events_24h":0,"events_7d":8,"geo":{"country_code":"RU","country_name":"Russia","region":"Novosibirsk Oblast","city":"Novosibirsk","lat":55.0386,"lon":82.9425,"asn":207713,"org":"Global Internet Solutions LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as207713","label":"GLOBAL INTERNET SOLUTIONS","category":"cdn","url":"https://www.peeringdb.com/asn/207713"},"cve_matches":[],"malware":[],"top_ports":[{"port":25566,"proto":"tcp","label":"","count":4},{"port":25565,"proto":"tcp","label":"Minecraft","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-25","count":4},{"date":"2026-09-26","count":4}],"recent_events":[{"timestamp":"2026-09-26T05:14:04","port":25566,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001","payload_hex":"fe01","method":"","user_agent":"","ja3":"","session":"7271150a-c26c-48b2-86c6-1a8aae318f97","seq":1,"duration_ms":100,"bytes_in":2,"bytes_out":12},{"timestamp":"2026-09-26T05:14:03","port":25566,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0014\u0000�\u0005\r<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"1400fd050d<HONEYPOT>63de010100","method":"","user_agent":"","ja3":"","session":"c2ef31b9-cf45-47a8-a231-f4b08cde55e0","seq":1,"duration_ms":100,"bytes_in":23,"bytes_out":12,"enriched":{"digest":"1e752a26315aacfb","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-26T05:14:02","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001","payload_hex":"fe01","method":"","user_agent":"","ja3":"","session":"b5a09320-c180-4593-aea8-23d25b6b122b","seq":1,"duration_ms":100,"bytes_in":2,"bytes_out":12},{"timestamp":"2026-09-26T05:14:01","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0014\u0000�\u0005\r<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"1400fd050d<HONEYPOT>63dd010100","method":"","user_agent":"","ja3":"","session":"46a07cd2-dfc4-49bd-9f0e-53e281770c0d","seq":1,"duration_ms":100,"bytes_in":23,"bytes_out":12,"enriched":{"digest":"1e752a26315aacfb","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-25T01:07:06","port":25566,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001","payload_hex":"fe01","method":"","user_agent":"","ja3":"","session":"39f938b5-e3fd-4bb9-8559-0235e23fe3e8","seq":1,"duration_ms":100,"bytes_in":2,"bytes_out":12},{"timestamp":"2026-09-25T01:07:05","port":25566,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013\u0000�\u0005\f<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"1300fd050c<HONEYPOT>63de010100","method":"","user_agent":"","ja3":"","session":"736b7161-e774-47d7-930d-30108231ea2d","seq":1,"duration_ms":101,"bytes_in":22,"bytes_out":12,"enriched":{"digest":"1b6c34b6d2169ea7","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-25T01:07:04","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001","payload_hex":"fe01","method":"","user_agent":"","ja3":"","session":"367c7b4c-caec-4a3a-9297-274c81f01747","seq":1,"duration_ms":101,"bytes_in":2,"bytes_out":12},{"timestamp":"2026-09-25T01:07:03","port":25565,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013\u0000�\u0005\f<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"1300fd050c<HONEYPOT>63dd010100","method":"","user_agent":"","ja3":"","session":"14a0f05e-14d0-4445-91fc-d3d7a5ff8975","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":12,"enriched":{"digest":"1b6c34b6d2169ea7","strings":["<HONEYPOT>c"]}}],"http_methods":[],"distinct_ports_total":2,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-29T21:27:08.621429+00:00"}