Honeypot hidden services and nginx that logs the connections. Stem script listens HS_DESC events.