{"ip":"103.82.192.212","data_as_of":"2026-10-24T22:57:34+00:00","observed":true,"total_events":92,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["92 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"3,956 bytes sent","bytes_sent":3956,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-08T10:32:38","last_seen":"2026-10-10T09:54:11","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"VN","country_name":"Vietnam","region":"","city":"","lat":16.1667,"lon":107.8333,"asn":135905,"org":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP"},"source_domain":"api992309.vicktorlarsson.site","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":3389,"proto":"tcp","label":"RDP","count":92}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-08","count":27},{"date":"2026-10-09","count":45},{"date":"2026-10-10","count":20}],"recent_events":[{"timestamp":"2026-10-10T09:54:11","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"606836e2-fa77-4fc9-b53b-243bea34b256","seq":1,"duration_ms":101,"bytes_in":43,"bytes_out":14,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}},{"timestamp":"2026-10-10T09:23:25","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"768fe8a6-09be-4d98-88bf-aa95e1497d2d","seq":1,"duration_ms":101,"bytes_in":43,"bytes_out":14,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}},{"timestamp":"2026-10-10T08:52:17","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"d2787f07-e5a3-4b37-a860-c66cd3f12833","seq":1,"duration_ms":100,"bytes_in":43,"bytes_out":14,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}},{"timestamp":"2026-10-10T08:21:23","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"1effa597-7f06-478d-8350-de8831575a02","seq":1,"duration_ms":100,"bytes_in":43,"bytes_out":14,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}},{"timestamp":"2026-10-10T07:50:09","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"38f56d0f-a6ef-4c13-8bc1-dcde9b0c2ef8","seq":1,"duration_ms":100,"bytes_in":43,"bytes_out":14,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}},{"timestamp":"2026-10-10T07:19:13","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"7adcd842-da65-4732-84e1-f6fb110855d5","seq":1,"duration_ms":100,"bytes_in":43,"bytes_out":14,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}},{"timestamp":"2026-10-10T06:48:03","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"eceebb63-aa82-4491-abc5-04c56c22f6f8","seq":1,"duration_ms":100,"bytes_in":43,"bytes_out":14,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}},{"timestamp":"2026-10-10T06:16:48","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"4cf720a7-7df6-45ab-956e-1d7c3e4aade2","seq":1,"duration_ms":100,"bytes_in":43,"bytes_out":14,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}},{"timestamp":"2026-10-10T05:45:02","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"7d3a72cc-b5d5-43dd-b720-ffd5348d41b1","seq":1,"duration_ms":100,"bytes_in":43,"bytes_out":14,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}},{"timestamp":"2026-10-10T05:12:40","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"d0f9f3c0-4638-4d1e-98e2-74f4a0e788a0","seq":1,"duration_ms":100,"bytes_in":43,"bytes_out":14,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}