{"ip":"110.83.135.17","total_events":18,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["18 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,158 bytes sent","bytes_sent":1158,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-12T16:39:32","last_seen":"2026-08-15T16:10:30","events_24h":6,"events_7d":18,"geo":{"country_code":"CN","country_name":"China","region":"","city":"","lat":34.7732,"lon":113.722,"asn":4134,"org":"Chinanet"},"source_domain":"17.135.83.110.broad.nd.fj.dynamic.163data.com.cn","known_scanners":[],"scanner_tag":{"key":"peeringdb:as4134","label":"China Telecom","category":"isp","url":"https://www.peeringdb.com/asn/4134"},"cve_matches":[],"malware":[],"top_ports":[{"port":2000,"proto":"tcp","label":"","count":18}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i191000_9dc949149365_e5728521abd4"],"tls_ja3":["96458b3de39df5d47bc5c4a9f10f8f26"],"ja4h":[]},"fingerprint_peers":{"t13i191000_9dc949149365_e5728521abd4":161},"user_agents":[],"timeline":[{"date":"2026-08-12","count":12},{"date":"2026-08-15","count":6}],"recent_events":[{"timestamp":"2026-08-15T16:10:30","port":2000,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"510fb61a-1528-4da2-a1c6-5fe17961e773","seq":1,"duration_ms":101,"bytes_in":95,"bytes_out":13,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-08-15T16:10:18","port":2000,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"e61d3ddd-c5ed-4ad3-a3b1-b28e9a01a6cf","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":13,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-08-15T16:09:28","port":2000,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"d59838ee-dbb6-4610-b030-9bade95292de","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":13,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-08-15T16:09:16","port":2000,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"4ce95a92-00af-4373-874f-471808f38e31","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":13,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-08-15T16:08:14","port":2000,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"a6e05291-5a73-4e8f-8c0b-4be22d0d41de","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":13,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-08-15T16:08:13","port":2000,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"d3b7456d-3068-4ec0-a8fe-81a0d8d7b52a","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":13,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-08-12T16:39:53","port":2000,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"82e83344-ff17-4400-b883-09d406b979d0","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":13,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-08-12T16:39:52","port":2000,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"c81cccc4-f965-45b4-b774-b190a3ecf688","seq":1,"duration_ms":101,"bytes_in":95,"bytes_out":13,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-08-12T16:39:48","port":2000,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"2d246a60-ac52-48b1-aba1-a23135e80eca","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":13,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-08-12T16:39:47","port":2000,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"f03ca6ff-c7c0-4f32-9351-1eb1d028dfb8","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":13,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-16T00:39:59.444153+00:00"}