{"ip":"1.12.229.231","observed":true,"total_events":43,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["43 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,061 bytes sent","bytes_sent":2061,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-06-14T07:02:24","last_seen":"2026-10-15T13:21:36","events_24h":0,"events_7d":8,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"CN","country_name":"China","region":"Guangdong","city":"Guangzhou","lat":23.1181,"lon":113.2539,"asn":45090,"org":"Shenzhen Tencent Computer Systems Company Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as45090","label":"Tencent-CN","category":"cdn","url":"https://www.peeringdb.com/asn/45090"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":3080,"proto":"tcp","label":"","count":23},{"port":2080,"proto":"tcp","label":"","count":20}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["b11cun020_00040010_724c10fb"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"b11cun020_00040010_724c10fb":1599},"akin_families":{"b11cun020_00040010_724c10fb":{"head":"b11cun030_00040014_54d07b6d","shapes":2,"ips":3736}},"user_agents":["Go-http-client/1.1"],"timeline":[{"date":"2026-07-27","count":19},{"date":"2026-10-04","count":8},{"date":"2026-10-15","count":8}],"recent_events":[{"timestamp":"2026-10-15T13:21:36","port":3080,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"www.baidu.com","headers":"{\"host\":\"www.baidu.com:443\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"www.baidu.com:443","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"CONNECT","user_agent":"Go-http-client/1.1","ja3":"","session":"29ce959e-0019-4ca5-a149-7b8f160f1415","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":12},{"timestamp":"2026-10-15T13:21:32","port":2080,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"www.baidu.com","headers":"{\"host\":\"www.baidu.com:443\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"www.baidu.com:443","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"CONNECT","user_agent":"Go-http-client/1.1","ja3":"","session":"247cb9de-3dbc-4802-85b0-9059f3ab6e54","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":12},{"timestamp":"2026-10-15T13:21:24","port":3080,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"www.baidu.com","headers":"{\"host\":\"www.baidu.com:443\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"www.baidu.com:443","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"CONNECT","user_agent":"Go-http-client/1.1","ja3":"","session":"e342e348-b23d-4ec8-b921-87ccf8141626","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":12},{"timestamp":"2026-10-15T13:21:21","port":2080,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"www.baidu.com","headers":"{\"host\":\"www.baidu.com:443\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"www.baidu.com:443","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"CONNECT","user_agent":"Go-http-client/1.1","ja3":"","session":"c046cf3f-a1a5-4db5-bd78-c7713102414e","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":12},{"timestamp":"2026-10-15T13:17:30","port":3080,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"004e5cf4-0c5a-437b-824f-5e9327015c75","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-10-15T13:17:29","port":3080,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"5d62811f-13a4-4992-b93f-149c3ea528a6","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-10-15T13:16:41","port":2080,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"35578bf5-2dda-4f53-9132-ef99c7ac68f5","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-10-15T13:16:40","port":2080,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"01da78c6-7b03-41e4-9ad3-d7661169ded6","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-10-04T10:31:49","port":3080,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"e4ec5d22-6a76-475f-8988-8d5cf52dad62","seq":1,"duration_ms":101,"bytes_in":95,"bytes_out":12,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-10-04T10:31:49","port":2080,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"efe06b74-f1dd-460a-9b32-cb7abdf9a0a4","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":12,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}}],"http_methods":[{"method":"CONNECT","count":4}],"distinct_ports_total":2,"top_paths":[{"path":"www.baidu.com:443","count":4,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[{"value":"www.baidu.com","count":4}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Host","User-Agent"],"representative":[{"name":"Host","value":"www.baidu.com:443","notable":false},{"name":"User-Agent","value":"Go-http-client/1.1","notable":false}],"distinct_sets":1,"events_with_headers":4},"tags":[],"data_as_of":"2026-10-17T05:25:01.315367+00:00"}