{"ip":"104.168.132.113","total_events":4,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["4 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"672 bytes sent","bytes_sent":672,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-05T10:40:26","last_seen":"2026-10-05T10:45:17","events_24h":4,"events_7d":4,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":54290,"org":"Hostwinds LLC."},"source_domain":"hwsrv-1336490.hostwindsdns.com","known_scanners":[],"scanner_tag":{"key":"peeringdb:as54290","label":"Hostwinds","category":"cdn","url":"https://www.peeringdb.com/asn/54290"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":6,"protocols":[{"protocol":"udp","events":6}],"ports":[{"port":80,"events":2},{"port":443,"events":2},{"port":8080,"events":2}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T12:07:40","last_seen":"2026-10-05T12:07:42","recent":[{"timestamp":"2026-10-05T12:07:42","port":80,"src_port":56314,"proto":"udp","app_proto":"","app_protocol":"","summary":"0\u0000\u0002\u0000\u0000\u0000\u0000P�\u0003v�\u0000\u0004\u0000\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3000020000000050<HONEYPOT>000400000010000000000000","sni":"","session":"25ff5068-1c13-460d-ba9c-1c0b566e8be7","bytes_in":24,"source_verified":false},{"timestamp":"2026-10-05T12:07:42","port":443,"src_port":56314,"proto":"udp","app_proto":"","app_protocol":"","summary":"0\u0000\u0002\u0000\u0000\u0000\u0001��\u0003v�\u0000\u0004\u0000\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"30000200000001bb<HONEYPOT>000400000010000000000000","sni":"","session":"2c7f4462-25b6-4a2b-88fb-2ee5c4cb76da","bytes_in":24,"source_verified":false},{"timestamp":"2026-10-05T12:07:42","port":8080,"src_port":56314,"proto":"udp","app_proto":"","app_protocol":"","summary":"0\u0000\u0002\u0000\u0000\u0000\u001f��\u0003v�\u0000\u0004\u0000\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3000020000001f90<HONEYPOT>000400000010000000000000","sni":"","session":"7914cacd-3085-4094-9bcc-0c1f6d1f67a9","bytes_in":24,"source_verified":false},{"timestamp":"2026-10-05T12:07:40","port":8080,"src_port":56314,"proto":"udp","app_proto":"","app_protocol":"","summary":"0\u0000\u0002\u0000\u0000\u0000\u001f��\u0003v�\u0000\u0004\u0000\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3000020000001f90<HONEYPOT>000400000010000000000000","sni":"","session":"4abafd71-896d-4031-9961-01ddd309e076","bytes_in":24,"source_verified":false},{"timestamp":"2026-10-05T12:07:40","port":80,"src_port":56314,"proto":"udp","app_proto":"","app_protocol":"","summary":"0\u0000\u0002\u0000\u0000\u0000\u0000P�\u0003v�\u0000\u0004\u0000\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"3000020000000050<HONEYPOT>000400000010000000000000","sni":"","session":"44e664fc-5ca3-4e99-900c-15636855d49d","bytes_in":24,"source_verified":false},{"timestamp":"2026-10-05T12:07:40","port":443,"src_port":56314,"proto":"udp","app_proto":"","app_protocol":"","summary":"0\u0000\u0002\u0000\u0000\u0000\u0001��\u0003v�\u0000\u0004\u0000\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"30000200000001bb<HONEYPOT>000400000010000000000000","sni":"","session":"4e14d013-7aa6-460a-a326-b5512243417d","bytes_in":24,"source_verified":false}]},"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-05","count":4}],"recent_events":[{"timestamp":"2026-10-05T10:45:17","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�̡��.C7�p���-�Dg�NH�\"M)=R|b,I�X.{H-\u000f�mK�","payload_hex":"ddcca1dbd42e4337cf70e5adcf2dab7f4467cc4e48d2224d293d527c622c49d4582e7b482d0f956d4b9e","method":"","user_agent":"","ja3":"","session":"702941a4-d182-4742-b222-94a8381bde92","seq":1,"duration_ms":101,"bytes_in":42,"bytes_out":15,"enriched":{"digest":"8cbeafd0e3d08ab6","strings":["\"M)=R|b,I","X.{H-"]}},{"timestamp":"2026-10-05T10:45:01","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0017\u0003\u0003\u0001!f�\u0010�\n��G���;\u0012�\u001cova��\u001aud���h�\"]���103*E��\u000e���2-<\u000f�\u0001��:\u0015�7\u001ei�+B��_��P�J�\u0014�.9\u0018{R�\\����#Z���>\t��b����qpsj�4'N�8\u001brm|O�A\u0000�zU�w^��k�=\f��\u0011�\u0013�%T�nyX��\r���� c���\u0017~I�\u000b��,?\u0006�����tg�\u0019x[����\u0016�@\u0003��\u0004���\b��}L�&Q�S�e�\u0007�����M�/6!`��5$W��(K�\u001dlF����\u0005���Y������V��C��D��)H�\u0002��\u001ff�2�N��0f`r��P��!(��I6%ٰ�:�\"]���","payload_hex":"1703030121669110930aa5d447eef9d83b128d1c6f7661a0e31a756497fec9688b225dacbf863130332a45f4e70e99f8db322d3c0f9601c0833a1584371e69882b42fdcc5fa6d150d34ae514872e39187b52cd5cafb6a1e0235ab5a4d73e09a8cb629decffc67170736a8534274ed9381b726d7c4fd64100c37a55c4775ea9c86b823d0c9fe61190138a2554c76e7958bb920d9ceff6e120639af5e4177e49e80ba2dd2c3f06b1b0b3aac574678e19785bb2adbc8f16814003ba9504b79ee908abc27d4cdf2651d053ca659407aeb998fbd24ddc2f362160a3da352457be89284be21d6c7f46f1f0f3ea05b4a7ce59b89bf2edfccf56c18043fad544f7de2948eb02bd8c1f668032a04ef0b23066607280de50f2902128eece493625d9b08c3a8b225dacbf86","method":"","user_agent":"","ja3":"","session":"7a72238f-7e1c-4ba2-a671-71fe43bf33f7","seq":1,"duration_ms":100,"bytes_in":294,"bytes_out":15,"enriched":{"digest":"3e044ad330fa8f85","strings":["103*E","qpsj","rm|O","/6!`","0f`r"]}},{"timestamp":"2026-10-05T10:40:42","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"<-@:\u0019�\u000f7.����-�Dg�NH�\"M)=R|b,I�X.{H-\u000f�mK�","payload_hex":"3c2d403a19af0f372edde5adcf2dab7f4467cc4e48d2224d293d527c622c49d4582e7b482d0f956d4b9e","method":"","user_agent":"","ja3":"","session":"05ff7f40-37ff-4f76-88b1-f82c389d9a0d","seq":1,"duration_ms":100,"bytes_in":42,"bytes_out":15,"enriched":{"digest":"bfc48fd65d7d1532","strings":["\"M)=R|b,I","X.{H-"]}},{"timestamp":"2026-10-05T10:40:26","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0017\u0003\u0003\u0001!f�\u0010�\n��G���;\u0012�\u001cova��\u001aud���h�\"]���103*E��\u000e���2-<\u000f�\u0001��:\u0015�7\u001ei�+B��_��P�J�\u0014�.9\u0018{R�\\����#Z���>\t��b����qpsj�4'N�8\u001brm|O�A\u0000�zU�w^��k�=\f��\u0011�\u0013�%T�nyX��\r���� c���\u0017~I�\u000b��,?\u0006�����tg�\u0019x[����\u0016�@\u0003��\u0004���\b��}L�&Q�S�e�\u0007�����M�/6!`��5$W��(K�\u001dlF����\u0005���Y������V��C��D��)H�\u0002��\u001ff�2�N��0f`r��P��!(��I6%ٰ�:�\"]���","payload_hex":"1703030121669110930aa5d447eef9d83b128d1c6f7661a0e31a756497fec9688b225dacbf863130332a45f4e70e99f8db322d3c0f9601c0833a1584371e69882b42fdcc5fa6d150d34ae514872e39187b52cd5cafb6a1e0235ab5a4d73e09a8cb629decffc67170736a8534274ed9381b726d7c4fd64100c37a55c4775ea9c86b823d0c9fe61190138a2554c76e7958bb920d9ceff6e120639af5e4177e49e80ba2dd2c3f06b1b0b3aac574678e19785bb2adbc8f16814003ba9504b79ee908abc27d4cdf2651d053ca659407aeb998fbd24ddc2f362160a3da352457be89284be21d6c7f46f1f0f3ea05b4a7ce59b89bf2edfccf56c18043fad544f7de2948eb02bd8c1f668032a04ef0b23066607280de50f2902128eece493625d9b08c3a8b225dacbf86","method":"","user_agent":"","ja3":"","session":"d9a36c62-a299-440f-898f-4f9b50fb8567","seq":1,"duration_ms":100,"bytes_in":294,"bytes_out":15,"enriched":{"digest":"3e044ad330fa8f85","strings":["103*E","qpsj","rm|O","/6!`","0f`r"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T20:54:16.407168+00:00"}