{"ip":"115.245.213.218","total_events":64,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["64 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,624 bytes sent","bytes_sent":2624,"session_seconds":0,"persistent":false}},"first_seen":"2026-06-22T10:53:10","last_seen":"2026-09-16T23:56:12","events_24h":2,"events_7d":10,"geo":{"country_code":"IN","country_name":"India","region":"Kerala","city":"Thiruvananthapuram","lat":8.4832,"lon":76.9458,"asn":55836,"org":"Reliance Jio Infocomm Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as55836","label":"Reliance Jio Infocomm NLD Network","category":"isp","url":"https://www.peeringdb.com/asn/55836"},"cve_matches":[],"malware":[],"top_ports":[{"port":1433,"proto":"tcp","label":"MSSQL","count":64}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-06-22","count":3},{"date":"2026-08-13","count":5},{"date":"2026-08-19","count":6},{"date":"2026-08-21","count":2},{"date":"2026-08-22","count":2},{"date":"2026-08-25","count":6},{"date":"2026-08-29","count":4},{"date":"2026-08-30","count":4},{"date":"2026-09-03","count":4},{"date":"2026-09-04","count":4},{"date":"2026-09-08","count":5},{"date":"2026-09-09","count":5},{"date":"2026-09-10","count":4},{"date":"2026-09-11","count":1},{"date":"2026-09-12","count":5},{"date":"2026-09-15","count":1},{"date":"2026-09-16","count":3}],"recent_events":[{"timestamp":"2026-09-16T23:56:12","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000`<\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000603c0000","method":"","user_agent":"","ja3":"","session":"d06e344b-e66b-4e2e-8a36-702d41bdc044","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":15},{"timestamp":"2026-09-16T23:55:28","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000`<\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000603c0000","method":"","user_agent":"","ja3":"","session":"f5c0968f-479f-41ad-9ad8-b978f79518fe","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":15},{"timestamp":"2026-09-16T03:01:39","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000|:\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000007c3a0000","method":"","user_agent":"","ja3":"","session":"2c34f159-7aa1-48fc-b6a0-f88b73cadf8b","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":15},{"timestamp":"2026-09-15T22:21:03","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�?\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000c83f0000","method":"","user_agent":"","ja3":"","session":"305dfa6c-a33b-4437-9426-cd031725c7f0","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":15},{"timestamp":"2026-09-12T23:44:06","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�F\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000c4460000","method":"","user_agent":"","ja3":"","session":"c647ee3a-a69c-4de2-be16-393335d196d4","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":15},{"timestamp":"2026-09-12T23:43:44","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�F\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000c4460000","method":"","user_agent":"","ja3":"","session":"7c898afd-93b8-4a2d-8b3d-446a92333513","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":15},{"timestamp":"2026-09-12T23:43:33","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�F\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000c4460000","method":"","user_agent":"","ja3":"","session":"2486921e-16e3-4bdd-9b0a-314a5444f664","seq":1,"duration_ms":101,"bytes_in":41,"bytes_out":15},{"timestamp":"2026-09-12T03:01:41","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000L\u0016\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000004c160000","method":"","user_agent":"","ja3":"","session":"00e30e7d-b1b4-4ae5-b84a-3092669987ce","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":15},{"timestamp":"2026-09-12T03:01:19","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000L\u0016\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000004c160000","method":"","user_agent":"","ja3":"","session":"1ada9990-f32b-4292-8f02-20ca056fefef","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":15},{"timestamp":"2026-09-11T03:03:54","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000x\u001e\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000781e0000","method":"","user_agent":"","ja3":"","session":"e542ccdc-51cf-4f99-9b68-b236cfc56621","seq":1,"duration_ms":101,"bytes_in":41,"bytes_out":15}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-17T11:36:22.787414+00:00"}