{"ip":"106.63.26.147","data_as_of":"2026-10-21T14:01:33+00:00","observed":true,"total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["1 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"432 bytes sent","bytes_sent":432,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-17T01:28:43","last_seen":"2026-10-17T01:28:43","events_24h":0,"events_7d":1,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"CN","country_name":"China","region":"","city":"","lat":34.7732,"lon":113.722,"asn":141679,"org":"China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d131000_f57a46bbacb6_e7c285222651"],"tls_client_hello":"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","tls_ja3":["8bee49baa010986785a9e74d688ed7e9"],"http_akin":["b11cun050_0004001e_5f886858"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13d131000_f57a46bbacb6_e7c285222651":21,"b11cun050_0004001e_5f886858":496},"akin_families":{},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"],"timeline":[{"date":"2026-10-17","count":1}],"recent_events":[{"timestamp":"2026-10-17T01:28:43","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"nl1.princhub.com","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"nl1.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"nl1.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"8bee49baa010986785a9e74d688ed7e9","session":"2037f5a0-bfe4-4b54-a16b-3c5f534a9892","seq":1,"duration_ms":130,"bytes_in":432,"bytes_out":78}],"http_methods":[{"method":"GET","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/favicon.ico","count":1,"ports":1}],"distinct_paths_total":1,"top_snis":[{"value":"nl1.princhub.com","count":1}],"top_hosts":[{"value":"nl1.princhub.com","count":1}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6","notable":false},{"name":"Host","value":"nl1.princhub.com","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[]}