{"ip":"104.34.83.171","total_events":10,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["10 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,440 bytes sent","bytes_sent":1440,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-17T17:01:25","last_seen":"2026-07-23T21:57:51","events_24h":0,"events_7d":0,"geo":{"country_code":"US","country_name":"United States","region":"California","city":"Canoga Park","lat":34.1994,"lon":-118.5972,"asn":20001,"org":"Charter Communications Inc"},"source_domain":"syn-104-034-083-171.res.spectrum.com","known_scanners":[],"scanner_tag":{"key":"peeringdb:as20001","label":"Charter Communications (20001)","category":"isp","url":"https://www.peeringdb.com/asn/20001"},"cve_matches":[],"malware":[],"top_ports":[{"port":17000,"proto":"tcp","label":"","count":7},{"port":6036,"proto":"tcp","label":"","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-17","count":6},{"date":"2026-07-20","count":2},{"date":"2026-07-21","count":1},{"date":"2026-07-23","count":1}],"recent_events":[{"timestamp":"2026-07-23T21:57:51","port":6036,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111�\u0000\u0000\u0000\u0001\u0001\u0000\u0000\u0000%�\u0011>\n<cx\u0000\u0000\u0000d\u0000\u0000\u0000\u0000\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000123456\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000DESKTOP-DESKTOT\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000RT\u0000\u00111�\u0000\u0000\u0004\u0000\u0000\u0000","payload_hex":"3131313188000000010100000025ad113e0a3c6378000000640000000000000061646d696e000000000000000000000000000000000000000000000000000000000000003132333435360000000000000000000000000000000000000000000000000000000000004445534b544f502d4445534b544f54000000000000000000000000005254001131fe000004000000","method":"","user_agent":"","ja3":"","session":"05cf077c-6ad4-4046-a259-e17e184500a6","seq":1,"duration_ms":100,"bytes_in":144,"bytes_out":13,"enriched":{"digest":"43c66f3cfa4f3f60","strings":["1111","admin","123456","DESKTOP-DESKTOT","<cxdadmin123456DESKTOP-DESKTOTRT"]}},{"timestamp":"2026-07-21T16:04:41","port":6036,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111�\u0000\u0000\u0000\u0001\u0001\u0000\u0000\u0000%�\u0011>\n<cx\u0000\u0000\u0000d\u0000\u0000\u0000\u0000\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000123456\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000DESKTOP-DESKTOT\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000RT\u0000\u00111�\u0000\u0000\u0004\u0000\u0000\u0000","payload_hex":"3131313188000000010100000025ad113e0a3c6378000000640000000000000061646d696e000000000000000000000000000000000000000000000000000000000000003132333435360000000000000000000000000000000000000000000000000000000000004445534b544f502d4445534b544f54000000000000000000000000005254001131fe000004000000","method":"","user_agent":"","ja3":"","session":"b6b626bf-376b-49e5-b1af-69f52b27c6de","seq":1,"duration_ms":100,"bytes_in":144,"bytes_out":13,"enriched":{"digest":"43c66f3cfa4f3f60","strings":["1111","admin","123456","DESKTOP-DESKTOT","<cxdadmin123456DESKTOP-DESKTOTRT"]}},{"timestamp":"2026-07-20T22:37:19","port":6036,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111�\u0000\u0000\u0000\u0001\u0001\u0000\u0000\u0000%�\u0011>\n<cx\u0000\u0000\u0000d\u0000\u0000\u0000\u0000\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000123456\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000DESKTOP-DESKTOT\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000RT\u0000\u00111�\u0000\u0000\u0004\u0000\u0000\u0000","payload_hex":"3131313188000000010100000025ad113e0a3c6378000000640000000000000061646d696e000000000000000000000000000000000000000000000000000000000000003132333435360000000000000000000000000000000000000000000000000000000000004445534b544f502d4445534b544f54000000000000000000000000005254001131fe000004000000","method":"","user_agent":"","ja3":"","session":"827b5d77-7325-4202-99bf-9db0e0664ce3","seq":1,"duration_ms":100,"bytes_in":144,"bytes_out":13,"enriched":{"digest":"43c66f3cfa4f3f60","strings":["1111","admin","123456","DESKTOP-DESKTOT","<cxdadmin123456DESKTOP-DESKTOTRT"]}},{"timestamp":"2026-07-20T06:01:24","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111�\u0000\u0000\u0000\u0001\u0001\u0000\u0000\u0000%�\u0011>\n<cx\u0000\u0000\u0000d\u0000\u0000\u0000\u0000\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000123456\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000DESKTOP-DESKTOT\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000RT\u0000\u00111�\u0000\u0000\u0004\u0000\u0000\u0000","payload_hex":"3131313188000000010100000025ad113e0a3c6378000000640000000000000061646d696e000000000000000000000000000000000000000000000000000000000000003132333435360000000000000000000000000000000000000000000000000000000000004445534b544f502d4445534b544f54000000000000000000000000005254001131fe000004000000","method":"","user_agent":"","ja3":"","session":"e6607b5c-e97f-46b2-8bd2-2d12841a9d36","seq":1,"duration_ms":100,"bytes_in":144,"bytes_out":13,"enriched":{"digest":"43c66f3cfa4f3f60","strings":["1111","admin","123456","DESKTOP-DESKTOT","<cxdadmin123456DESKTOP-DESKTOTRT"]}},{"timestamp":"2026-07-17T17:01:54","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111�\u0000\u0000\u0000\u0001\u0001\u0000\u0000\u0000%�\u0011>\n<cx\u0000\u0000\u0000d\u0000\u0000\u0000\u0000\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000123456\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000DESKTOP-DESKTOT\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000RT\u0000\u00111�\u0000\u0000\u0004\u0000\u0000\u0000","payload_hex":"3131313188000000010100000025ad113e0a3c6378000000640000000000000061646d696e000000000000000000000000000000000000000000000000000000000000003132333435360000000000000000000000000000000000000000000000000000000000004445534b544f502d4445534b544f54000000000000000000000000005254001131fe000004000000","method":"","user_agent":"","ja3":"","session":"addb9f80-fd97-4ef8-9fae-02cdd5c24b28","seq":1,"duration_ms":100,"bytes_in":144,"bytes_out":13,"enriched":{"digest":"43c66f3cfa4f3f60","strings":["1111","admin","123456","DESKTOP-DESKTOT","<cxdadmin123456DESKTOP-DESKTOTRT"]}},{"timestamp":"2026-07-17T17:01:38","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111�\u0000\u0000\u0000\u0001\u0001\u0000\u0000\u0000%�\u0011>\n<cx\u0000\u0000\u0000d\u0000\u0000\u0000\u0000\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000123456\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000DESKTOP-DESKTOT\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000RT\u0000\u00111�\u0000\u0000\u0004\u0000\u0000\u0000","payload_hex":"3131313188000000010100000025ad113e0a3c6378000000640000000000000061646d696e000000000000000000000000000000000000000000000000000000000000003132333435360000000000000000000000000000000000000000000000000000000000004445534b544f502d4445534b544f54000000000000000000000000005254001131fe000004000000","method":"","user_agent":"","ja3":"","session":"1e99cf2c-dc72-4731-9dff-a9c3d1ff5243","seq":1,"duration_ms":100,"bytes_in":144,"bytes_out":13,"enriched":{"digest":"43c66f3cfa4f3f60","strings":["1111","admin","123456","DESKTOP-DESKTOT","<cxdadmin123456DESKTOP-DESKTOTRT"]}},{"timestamp":"2026-07-17T17:01:34","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111�\u0000\u0000\u0000\u0001\u0001\u0000\u0000\u0000%�\u0011>\n<cx\u0000\u0000\u0000d\u0000\u0000\u0000\u0000\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000123456\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000DESKTOP-DESKTOT\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000RT\u0000\u00111�\u0000\u0000\u0004\u0000\u0000\u0000","payload_hex":"3131313188000000010100000025ad113e0a3c6378000000640000000000000061646d696e000000000000000000000000000000000000000000000000000000000000003132333435360000000000000000000000000000000000000000000000000000000000004445534b544f502d4445534b544f54000000000000000000000000005254001131fe000004000000","method":"","user_agent":"","ja3":"","session":"51f7ddcd-4e87-4647-bd2e-b64fceec10c1","seq":1,"duration_ms":100,"bytes_in":144,"bytes_out":13,"enriched":{"digest":"43c66f3cfa4f3f60","strings":["1111","admin","123456","DESKTOP-DESKTOT","<cxdadmin123456DESKTOP-DESKTOTRT"]}},{"timestamp":"2026-07-17T17:01:26","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111�\u0000\u0000\u0000\u0001\u0001\u0000\u0000\u0000%�\u0011>\n<cx\u0000\u0000\u0000d\u0000\u0000\u0000\u0000\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000123456\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000DESKTOP-DESKTOT\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000RT\u0000\u00111�\u0000\u0000\u0004\u0000\u0000\u0000","payload_hex":"3131313188000000010100000025ad113e0a3c6378000000640000000000000061646d696e000000000000000000000000000000000000000000000000000000000000003132333435360000000000000000000000000000000000000000000000000000000000004445534b544f502d4445534b544f54000000000000000000000000005254001131fe000004000000","method":"","user_agent":"","ja3":"","session":"c3fc2747-87d9-47fe-869d-68370e05cefb","seq":1,"duration_ms":100,"bytes_in":144,"bytes_out":13,"enriched":{"digest":"43c66f3cfa4f3f60","strings":["1111","admin","123456","DESKTOP-DESKTOT","<cxdadmin123456DESKTOP-DESKTOTRT"]}},{"timestamp":"2026-07-17T17:01:26","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111�\u0000\u0000\u0000\u0001\u0001\u0000\u0000\u0000%�\u0011>\n<cx\u0000\u0000\u0000d\u0000\u0000\u0000\u0000\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000123456\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000DESKTOP-DESKTOT\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000RT\u0000\u00111�\u0000\u0000\u0004\u0000\u0000\u0000","payload_hex":"3131313188000000010100000025ad113e0a3c6378000000640000000000000061646d696e000000000000000000000000000000000000000000000000000000000000003132333435360000000000000000000000000000000000000000000000000000000000004445534b544f502d4445534b544f54000000000000000000000000005254001131fe000004000000","method":"","user_agent":"","ja3":"","session":"f8c17492-245b-4253-b7e9-7589139cc42d","seq":1,"duration_ms":100,"bytes_in":144,"bytes_out":13,"enriched":{"digest":"43c66f3cfa4f3f60","strings":["1111","admin","123456","DESKTOP-DESKTOT","<cxdadmin123456DESKTOP-DESKTOTRT"]}},{"timestamp":"2026-07-17T17:01:25","port":17000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1111�\u0000\u0000\u0000\u0001\u0001\u0000\u0000\u0000%�\u0011>\n<cx\u0000\u0000\u0000d\u0000\u0000\u0000\u0000\u0000\u0000\u0000admin\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000123456\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000DESKTOP-DESKTOT\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000RT\u0000\u00111�\u0000\u0000\u0004\u0000\u0000\u0000","payload_hex":"3131313188000000010100000025ad113e0a3c6378000000640000000000000061646d696e000000000000000000000000000000000000000000000000000000000000003132333435360000000000000000000000000000000000000000000000000000000000004445534b544f502d4445534b544f54000000000000000000000000005254001131fe000004000000","method":"","user_agent":"","ja3":"","session":"c1ead1b3-6893-4645-b3a6-8f343f244ede","seq":1,"duration_ms":100,"bytes_in":144,"bytes_out":13,"enriched":{"digest":"43c66f3cfa4f3f60","strings":["1111","admin","123456","DESKTOP-DESKTOT","<cxdadmin123456DESKTOP-DESKTOTRT"]}}],"http_methods":[],"distinct_ports_total":2,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-26T01:13:50.229338+00:00"}