{"ip":"106.63.26.22","data_as_of":"2026-10-21T14:01:24+00:00","observed":true,"total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["1 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"431 bytes sent","bytes_sent":431,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-17T01:28:46","last_seen":"2026-10-17T01:28:46","events_24h":0,"events_7d":1,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"CN","country_name":"China","region":"","city":"","lat":34.7732,"lon":113.722,"asn":141679,"org":"China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d131000_f57a46bbacb6_e7c285222651"],"tls_client_hello":"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","tls_ja3":["8bee49baa010986785a9e74d688ed7e9"],"http_akin":["b11cun050_0004001e_5f886858"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13d131000_f57a46bbacb6_e7c285222651":21,"b11cun050_0004001e_5f886858":496},"akin_families":{},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"],"timeline":[{"date":"2026-10-17","count":1}],"recent_events":[{"timestamp":"2026-10-17T01:28:46","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"nl1.princhub.com","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\"nl1.princhub.com\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"nl1.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"8bee49baa010986785a9e74d688ed7e9","session":"2a3118eb-b899-4998-8f14-e243239e9613","seq":1,"duration_ms":100,"bytes_in":431,"bytes_out":77}],"http_methods":[{"method":"GET","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/robots.txt","count":1,"ports":1}],"distinct_paths_total":1,"top_snis":[{"value":"nl1.princhub.com","count":1}],"top_hosts":[{"value":"nl1.princhub.com","count":1}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6","notable":false},{"name":"Host","value":"nl1.princhub.com","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[]}