{"ip":"106.63.26.13","data_as_of":"2026-10-21T15:04:34+00:00","observed":true,"total_events":2,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["2 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"685 bytes sent","bytes_sent":685,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-09-26T01:13:35","last_seen":"2026-10-17T01:28:54","events_24h":0,"events_7d":1,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"CN","country_name":"China","region":"","city":"","lat":34.7732,"lon":113.722,"asn":141679,"org":"China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":1},{"port":443,"proto":"tcp","label":"HTTPS","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d131000_f57a46bbacb6_e7c285222651"],"tls_client_hello":"16030105c5010005c10303844059f470debb5a592f7e35bbab0fb63b0e93d58d86e85a6af0cdf7933d4f562026d1839ed09ac11d54c848647261020fb00afb2aaa1581640b8428e119e0ef74001ac02bc02fc02cc030cca9cca8c009c013c00ac0141301130213030100055e0000001500130000106e6c312e7072696e636875622e636f6d000b00020100ff010001000017000000120000000500050100000000000a000c000a11ec001d001700180019000d001a0018080404030807080508060401050106010503060302010203002b0009080304030303020301003304ea04e811ec04c0241c4aec69c5f3367b94d17c860451fd036c24d843d86c00c88c446373b18d612f6d49bd18122b0ddb2739c6989dd2397a2727e38615a48c64bf19bcc5d5083b06675ef18a40e6103455025350b18e567cd5182fff712ff422128615a948fb80ca38a215b05d5285cfccc10ec331789dc98fcaccab758bacf540af318b41806588c9a4039cd2550da1874b4110ae470a343952654748041a4b9989434270a6feba414c352dc769a31f6a03719b7ffc27aef015b3613b5dbba506e405c7b1b0207e57c7784cca914bbdd0e9178c03b5a3a59613030dc70c58a6f14df4d42d3f80151b90942cb725c319a5171c0f7a400135132c4a98002b8b6f8a4998514b59e7b72233b4814af99c310aa84a121e3295c2ece06c8f5c039230b31aa12d12e0492846150781c4d607687caa84014b7fa36221cb5a4ae10c93a351ce20278ba4036ede7b08fee853a5fc4317641a5edb3a81e23c007acb78e0b71e005d10954075750f140727c0723b198786d069306308767ff53f5f114bcbdc1e27ac5ac61096ead69dada028ffb0495c2416ab25b570970719873e8e1014185414cb07a12c78c7d7f2b06bb6c2e1c1c7b144960b45086dbbba3dbccbec8877d3e55f49569b3537c283150b8bcc294aa9b5a781c2d007154ddc7237095f651747eb203b6978cb57aa6de97ac4d2404b304bae0ea1afb930b3f214696272930af589cb82b9ea045335495b0cc9842754361296a302436d5eb428c94709e73828b40774356703b94928fb90b1894333e9191fb9b0cb58812c98a98a40b41cc9d363838192d7e86fe93468b1336187689a04553c103762e00799f904b1efe18a6541a4f470b00202a609200166b7706d69bbf9b1916cc96ef94c2c18405851733a5119698335b214ea4d49575937f36afe8601c5638b16b019ff3c8c6fbccc9c55bbf8890aa4dab61b7939e9644af9cb4476d74ad8a8745974b44f1a5273155542e5c28ad5cd0cb5550f2468deab9b6b26290b01cb1b977aafea5efdb678bcb50f75812f2ad31d7b5ba1ccd1494e163912096f64cc3a76a272669063044b57f9752c5ebbb668c04214a6273d3b6e570a690d163a40160a5af3a9644a844dfb6f6f5c82da7099c1f1addb341338b3a4a7828230bc7057f6c3a4487fc363685a01bbe21672c9376b81a9214cca6ca852a4402119ec123939588d55273c3660cbca38bebe903430b8558540cf450887736956d718c0a9f3b3d3929156a039ded253ff628fb729affd270b91ea192c6b536c1655082732c10b869dbb7befe88ee55b215f4195dab67f520cb4d6b4ad9e4c28bc5466fa5a42eff935e762ad8ba11444e21d817000f0417b3b570bcc191228947539ac82b9115c03d637d6b4839d7a81e6a79a436bb27d991792801077bac488b57756a7037a7a752d644707087c379bc282ec27de07ae70d37ddfd14fa6abcdfde58cac7c4edb7b1874678347004e3111c999a236f690984ce07125654fb32ab6c022c527f99713291df799720886af5238289f337deda8aea67c9723b066e7747c30528b33c65de84a495c5686c83428c1152d2bf33608658d0c23a069da5decf12aa5367f133b9116e80e719322b05a0546c78b2b5923d2543073d625393cb4bf88b5b8a3ee8730ba838bbccb7fd72f564b301d1848beb336d6ed43ff8c07b6595e8430abf592c34c5355174f59c491463ed03a50ed31001d0020b336d6ed43ff8c07b6595e8430abf592c34c5355174f59c491463e","tls_ja3":["8bee49baa010986785a9e74d688ed7e9"],"http_akin":["b11cun030_00040018_f74a6e72","b11cun050_0004001e_5f886858"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13d131000_f57a46bbacb6_e7c285222651":21,"b11cun050_0004001e_5f886858":496,"b11cun030_00040018_f74a6e72":497},"akin_families":{},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"],"timeline":[{"date":"2026-09-26","count":1},{"date":"2026-10-17","count":1}],"recent_events":[{"timestamp":"2026-10-17T01:28:54","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"nl1.princhub.com","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"nl1.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"nl1.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sitemap.xml","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"8bee49baa010986785a9e74d688ed7e9","session":"0dc2a494-a20b-45c4-a068-a41df7064552","seq":1,"duration_ms":100,"bytes_in":432,"bytes_out":77},{"timestamp":"2026-09-26T01:13:35","port":80,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"nl1.princhub.com","headers":"{\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"nl1.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"nl1.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"8bee49baa010986785a9e74d688ed7e9","session":"9eac6ed9-b6ab-4f2f-b454-62e30856d0cd","seq":1,"duration_ms":100,"bytes_in":253,"bytes_out":77}],"http_methods":[{"method":"GET","count":2}],"distinct_ports_total":2,"top_paths":[{"path":"/","count":1,"ports":1},{"path":"/sitemap.xml","count":1,"ports":1}],"distinct_paths_total":2,"top_snis":[{"value":"nl1.princhub.com","count":2}],"top_hosts":[{"value":"nl1.princhub.com","count":2}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6","notable":false},{"name":"Host","value":"nl1.princhub.com","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","notable":false}],"distinct_sets":2,"events_with_headers":2},"tags":[]}