{"ip":"116.96.44.199","total_events":95,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"1 exploit-path probe(s)","confidence":"medium","network_type":"residential ISP","why":["1 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"29,772 bytes sent","bytes_sent":29772,"session_seconds":5,"persistent":false}},"first_seen":"2026-09-24T14:02:55","last_seen":"2026-09-24T14:05:57","events_24h":0,"events_7d":95,"geo":{"country_code":"VN","country_name":"Vietnam","region":"Hanoi","city":"Hanoi","lat":21.0184,"lon":105.8461,"asn":7552,"org":"Viettel Group"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as7552","label":"Viettel","category":"isp","url":"https://www.peeringdb.com/asn/7552"},"cve_matches":[],"malware":[],"top_ports":[{"port":8085,"proto":"tcp","label":"","count":38},{"port":8081,"proto":"tcp","label":"","count":30},{"port":8090,"proto":"tcp","label":"","count":27}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["a11cun071_0040005d_32f3ede7","a11cun092_0000017d_384217be"]},"fingerprint_peers":{"a11cun071_0040005d_32f3ede7":1,"a11cun092_0000017d_384217be":1},"akin_families":{},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-24","count":95}],"recent_events":[{"timestamp":"2026-09-24T14:05:57","port":8081,"proto":"tcp","app_proto":"","app_protocol":"google","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.google.com:443 HTTP/1.1\r\nHost: www.google.com:443\r\nProxy-Connection: keep-alive\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\r\n\r\n","payload_hex":"434f4e4e454354207777772e676f6f676c652e636f6d3a34343320485454502f312e310d0a486f73743a207777772e676f6f676c652e636f6d3a3434330d0a50726f78792d436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134392e302e302e30205361666172692f3533372e33360d0a0d0a","method":"","user_agent":"","ja3":"","session":"5c8c7d49-08d6-47a8-b3ba-bf9f7b1b15ac","seq":1,"duration_ms":100,"bytes_in":226,"bytes_out":13,"enriched":{"digest":"95d984bcbaa7d67b","label":"HTTP","strings":["CONNECT www.google.com:443 HTTP/1.1","Host: www.google.com:443","Proxy-Connection: keep-alive","User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (…"],"iocs":{"domains":["www.google.com"]}}},{"timestamp":"2026-09-24T14:05:57","port":8081,"proto":"tcp","app_proto":"","app_protocol":"google","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT beacons.gcp.gvt2.com:443 HTTP/1.1\r\nHost: beacons.gcp.gvt2.com:443\r\nProxy-Connection: keep-alive\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\r\n\r\n","payload_hex":"434f4e4e45435420626561636f6e732e6763702e677674322e636f6d3a34343320485454502f312e310d0a486f73743a20626561636f6e732e6763702e677674322e636f6d3a3434330d0a50726f78792d436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134392e302e302e30205361666172692f3533372e33360d0a0d0a","method":"","user_agent":"","ja3":"","session":"eb1c5573-26d9-4366-aab4-21ffeb442bb9","seq":1,"duration_ms":100,"bytes_in":238,"bytes_out":13,"enriched":{"digest":"3a0c2cb9dcb096e9","label":"HTTP","strings":["CONNECT beacons.gcp.gvt2.com:443 HTTP/1.1","Host: beacons.gcp.gvt2.com:443","Proxy-Connection: keep-alive","User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (…"],"iocs":{"domains":["beacons.gcp.gvt2.com"]}}},{"timestamp":"2026-09-24T14:05:57","port":8081,"proto":"tcp","app_proto":"","app_protocol":"google","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.google.com:443 HTTP/1.1\r\nHost: www.google.com:443\r\nProxy-Connection: keep-alive\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\r\n\r\n","payload_hex":"434f4e4e454354207777772e676f6f676c652e636f6d3a34343320485454502f312e310d0a486f73743a207777772e676f6f676c652e636f6d3a3434330d0a50726f78792d436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134392e302e302e30205361666172692f3533372e33360d0a0d0a","method":"","user_agent":"","ja3":"","session":"41d1d4dc-9546-4834-87fa-d998663d7d2e","seq":1,"duration_ms":100,"bytes_in":226,"bytes_out":13,"enriched":{"digest":"95d984bcbaa7d67b","label":"HTTP","strings":["CONNECT www.google.com:443 HTTP/1.1","Host: www.google.com:443","Proxy-Connection: keep-alive","User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (…"],"iocs":{"domains":["www.google.com"]}}},{"timestamp":"2026-09-24T14:05:56","port":8081,"proto":"tcp","app_proto":"","app_protocol":"google","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.google.com:443 HTTP/1.1\r\nHost: www.google.com:443\r\nProxy-Connection: keep-alive\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\r\n\r\n","payload_hex":"434f4e4e454354207777772e676f6f676c652e636f6d3a34343320485454502f312e310d0a486f73743a207777772e676f6f676c652e636f6d3a3434330d0a50726f78792d436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134392e302e302e30205361666172692f3533372e33360d0a0d0a","method":"","user_agent":"","ja3":"","session":"529db258-1d86-47ab-beb4-b7380d876575","seq":1,"duration_ms":100,"bytes_in":226,"bytes_out":13,"enriched":{"digest":"95d984bcbaa7d67b","label":"HTTP","strings":["CONNECT www.google.com:443 HTTP/1.1","Host: www.google.com:443","Proxy-Connection: keep-alive","User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (…"],"iocs":{"domains":["www.google.com"]}}},{"timestamp":"2026-09-24T14:05:54","port":8081,"proto":"tcp","app_proto":"","app_protocol":"github","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT alive.github.com:443 HTTP/1.1\r\nHost: alive.github.com:443\r\nProxy-Connection: keep-alive\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\r\n\r\n","payload_hex":"434f4e4e45435420616c6976652e6769746875622e636f6d3a34343320485454502f312e310d0a486f73743a20616c6976652e6769746875622e636f6d3a3434330d0a50726f78792d436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134392e302e302e30205361666172692f3533372e33360d0a0d0a","method":"","user_agent":"","ja3":"","session":"b3c3eda5-6f14-42e9-91fe-8c303eff8cef","seq":1,"duration_ms":100,"bytes_in":230,"bytes_out":13,"enriched":{"digest":"3f778209705b557a","label":"HTTP","strings":["CONNECT alive.github.com:443 HTTP/1.1","Host: alive.github.com:443","Proxy-Connection: keep-alive","User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (…"],"iocs":{"domains":["alive.github.com"]}}},{"timestamp":"2026-09-24T14:05:52","port":8081,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"103.82.21.113","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip, deflate\",\"accept-language\":\"vi-VN,vi;q=0.9,fr-FR;q=0.8,fr;q=0.7,en-US;q=0.6,en;q=0.5\",\"cache-control\":\"max-age=0\",\"cookie\":\"pma_lang=vi; phpMyAdmin=6lvmoq4p1ntbcksm8t4kd6af61; pmaUser-1=%7B%22iv%22%3A%22Xw3csiAYzzkIkF%2BD34s%5C%2F4g%3D%3D%22%2C%22mac%22%3A%227d3fcc30954c77b7b38d14f76b9cb510bb4c1b00%22%2C%22payload%22%3A%22xob31B%5C%2F8sjpafZ5kvzFewQ%3D%3D%22%7D; pmaAuth-1=%7B%22iv%22%3A%22fVjBtgCdeRNyAV1Bljmfuw%3D%3D%22%2C%22mac%22%3A%222706e8dc48c2819824592f4d1ba665dfc354507c%22%2C%22payload%22%3A%2245A0mkMhsXAHvEuPnzvxFBA4IDNwkeDLZ5SND%5C%2FhGwk8%3D%22%7D\",\"host\":\"103.82.21.113\",\"proxy-connection\":\"keep-alive\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://103.82.21.113/phpmyadmin/index.php?route=/database/structure&server=1&db=proxy","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36","ja3":"","session":"03fb6850-d25f-4364-aaf2-5829f396db70","seq":3,"duration_ms":4280,"bytes_in":2590,"bytes_out":234},{"timestamp":"2026-09-24T14:05:52","port":8081,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"103.82.21.113","headers":"{\"accept\":\"image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate\",\"accept-language\":\"vi-VN,vi;q=0.9,fr-FR;q=0.8,fr;q=0.7,en-US;q=0.6,en;q=0.5\",\"host\":\"103.82.21.113\",\"proxy-connection\":\"keep-alive\",\"referer\":\"http://103.82.21.113/phpmyadmin/index.php?route=/database/structure&server=1&db=proxy\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://103.82.21.113/favicon.ico","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36","ja3":"","session":"03fb6850-d25f-4364-aaf2-5829f396db70","seq":4,"duration_ms":4622,"bytes_in":3098,"bytes_out":312},{"timestamp":"2026-09-24T14:05:52","port":8081,"proto":"tcp","app_proto":"","app_protocol":"google","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.google.com:443 HTTP/1.1\r\nHost: www.google.com:443\r\nProxy-Connection: keep-alive\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\r\n\r\n","payload_hex":"434f4e4e454354207777772e676f6f676c652e636f6d3a34343320485454502f312e310d0a486f73743a207777772e676f6f676c652e636f6d3a3434330d0a50726f78792d436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134392e302e302e30205361666172692f3533372e33360d0a0d0a","method":"","user_agent":"","ja3":"","session":"4225c009-5562-48b0-9b8d-174325aedf2b","seq":1,"duration_ms":100,"bytes_in":226,"bytes_out":13,"enriched":{"digest":"95d984bcbaa7d67b","label":"HTTP","strings":["CONNECT www.google.com:443 HTTP/1.1","Host: www.google.com:443","Proxy-Connection: keep-alive","User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (…"],"iocs":{"domains":["www.google.com"]}}},{"timestamp":"2026-09-24T14:05:48","port":8081,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"103.82.21.113","headers":"{\"accept\":\"image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate\",\"accept-language\":\"vi-VN,vi;q=0.9,fr-FR;q=0.8,fr;q=0.7,en-US;q=0.6,en;q=0.5\",\"host\":\"103.82.21.113\",\"proxy-connection\":\"keep-alive\",\"referer\":\"http://103.82.21.113/phpmyadmin/index.php?route=/database/structure&server=1&db=proxy\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://103.82.21.113/favicon.ico","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36","ja3":"","session":"03fb6850-d25f-4364-aaf2-5829f396db70","seq":2,"duration_ms":465,"bytes_in":1549,"bytes_out":156},{"timestamp":"2026-09-24T14:05:48","port":8081,"proto":"tcp","app_proto":"","app_protocol":"google","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT clients2.google.com:443 HTTP/1.1\r\nHost: clients2.google.com:443\r\nProxy-Connection: keep-alive\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\r\n\r\n","payload_hex":"434f4e4e45435420636c69656e7473322e676f6f676c652e636f6d3a34343320485454502f312e310d0a486f73743a20636c69656e7473322e676f6f676c652e636f6d3a3434330d0a50726f78792d436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134392e302e302e30205361666172692f3533372e33360d0a0d0a","method":"","user_agent":"","ja3":"","session":"976d65b6-4760-43ee-ac89-658c48944563","seq":1,"duration_ms":100,"bytes_in":236,"bytes_out":13,"enriched":{"digest":"e8b3e2939b796412","label":"HTTP","strings":["CONNECT clients2.google.com:443 HTTP/1.1","Host: clients2.google.com:443","Proxy-Connection: keep-alive","User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (…"],"iocs":{"domains":["clients2.google.com"]}}}],"http_methods":[{"method":"GET","count":4}],"distinct_ports_total":3,"top_paths":[{"path":"http://103.82.21.113/phpmyadmin/index.php?route=/database/structure&server=1&db=proxy","count":2,"ports":1},{"path":"http://103.82.21.113/favicon.ico","count":2,"ports":1}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[{"value":"103.82.21.113","count":4}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Cache-Control","Cookie","Host","Proxy-Connection","Upgrade-Insecure-Requests","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Accept-Language","value":"vi-VN,vi;q=0.9,fr-FR;q=0.8,fr;q=0.7,en-US;q=0.6,en;q=0.5","notable":false},{"name":"Cache-Control","value":"max-age=0","notable":false},{"name":"Cookie","value":"pma_lang=vi; phpMyAdmin=6lvmoq4p1ntbcksm8t4kd6af61; pmaUser-1=%7B%22iv%22%3A%22Xw3csiAYzzkIkF%2BD34s%5C%2F4g%3D%3D%22%2C%22mac%22%3A%227d3fcc30954c77b7b38d14f76b9cb510bb4c1b00%22%2C%22payload%22%3A%22xob31B%5C%2F8sjpafZ5kvzFewQ%3D%3D%22%7D; pmaAuth-1=%7B%22iv%22%3A%22fVjBtgCdeRNyAV1Bljmfuw%3D%3D%22%","notable":true},{"name":"Host","value":"103.82.21.113","notable":false},{"name":"Proxy-Connection","value":"keep-alive","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36","notable":false}],"distinct_sets":2,"events_with_headers":3},"tags":[],"data_as_of":"2026-09-30T03:54:27.401487+00:00"}