{"ip":"119.159.171.113","total_events":18,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["18 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"738 bytes sent","bytes_sent":738,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-12T14:40:54","last_seen":"2026-08-14T17:10:04","events_24h":6,"events_7d":18,"geo":{"country_code":"PK","country_name":"Pakistan","region":"Islamabad","city":"Islamabad","lat":33.7233,"lon":73.0435,"asn":17557,"org":"Pakistan Telecommunication Company Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as17557","label":"PTCL","category":"isp","url":"https://www.peeringdb.com/asn/17557"},"cve_matches":[],"malware":[],"top_ports":[{"port":1433,"proto":"tcp","label":"MSSQL","count":18}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-12","count":6},{"date":"2026-08-13","count":6},{"date":"2026-08-14","count":6}],"recent_events":[{"timestamp":"2026-08-14T17:10:04","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000XX\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000058580000","method":"","user_agent":"","ja3":"","session":"b081711c-2fa4-4dd7-9f8d-e84224123b15","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":15},{"timestamp":"2026-08-14T17:09:54","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000XX\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000058580000","method":"","user_agent":"","ja3":"","session":"659d1382-a4e6-466a-b600-4cedb234c39c","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":15},{"timestamp":"2026-08-14T17:09:43","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000XX\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000058580000","method":"","user_agent":"","ja3":"","session":"88fa6e43-4608-437c-9152-223da48f7f88","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":15},{"timestamp":"2026-08-14T17:09:32","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000XX\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000058580000","method":"","user_agent":"","ja3":"","session":"93fe82f2-13c6-471b-85a2-5829e822c142","seq":1,"duration_ms":101,"bytes_in":41,"bytes_out":15},{"timestamp":"2026-08-14T17:09:22","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000XX\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000058580000","method":"","user_agent":"","ja3":"","session":"a8bb484f-2560-4b1a-8e8a-166e964e21fb","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":15},{"timestamp":"2026-08-14T17:09:11","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000XX\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000058580000","method":"","user_agent":"","ja3":"","session":"2a62710a-9d1b-4171-b02f-f211e6d789bc","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":15},{"timestamp":"2026-08-13T12:59:32","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�w\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000080770000","method":"","user_agent":"","ja3":"","session":"0f2df9a6-737f-46c1-9766-8d5e152b6981","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":15},{"timestamp":"2026-08-13T12:59:22","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�w\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000080770000","method":"","user_agent":"","ja3":"","session":"79ca19a3-3391-49d5-ae2f-9e49af4d8d31","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":15},{"timestamp":"2026-08-13T12:59:12","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�w\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000080770000","method":"","user_agent":"","ja3":"","session":"09244479-8178-4f48-9d27-2e178bd98580","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":15},{"timestamp":"2026-08-13T12:59:01","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�w\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000080770000","method":"","user_agent":"","ja3":"","session":"e6516c66-f384-4bf7-a5a3-b8955bc476d6","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":15}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T07:45:08.386918+00:00"}