{"ip":"12.106.187.2","total_events":34,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["34 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,224 bytes sent","bytes_sent":1224,"session_seconds":0,"persistent":false}},"first_seen":"2026-02-21T06:46:37","last_seen":"2026-09-11T20:39:22","events_24h":0,"events_7d":0,"geo":{"country_code":"US","country_name":"United States","region":"Indiana","city":"Schererville","lat":41.4901,"lon":-87.4584,"asn":7018,"org":"AT&T Enterprises, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as7018","label":"AT&T US - 7018","category":"isp","url":"https://www.peeringdb.com/asn/7018"},"cve_matches":[],"malware":[],"top_ports":[{"port":445,"proto":"tcp","label":"SMB","count":34}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-03","count":4},{"date":"2026-07-05","count":2},{"date":"2026-07-07","count":2},{"date":"2026-07-11","count":4},{"date":"2026-07-22","count":2},{"date":"2026-08-21","count":2},{"date":"2026-08-22","count":2},{"date":"2026-09-07","count":2},{"date":"2026-09-11","count":2}],"recent_events":[{"timestamp":"2026-09-11T20:39:22","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���4\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffd83400000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"bbb3ab28-f593-4955-845b-c1e70403df55","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":12,"enriched":{"digest":"bafa549df4459163","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-09-11T20:39:21","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���4\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffd83400000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"23316017-12fa-4d1f-8d23-959099931992","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":12,"enriched":{"digest":"bafa549df4459163","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-09-07T18:18:54","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��t&\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff742600000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"931fe88e-9264-42f3-830c-70b39dd093d0","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":12,"enriched":{"digest":"0c6eb311048e7789","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-09-07T18:18:54","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��t&\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff742600000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"57b8b1a2-5e0b-4074-85ee-411ec3554d01","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":12,"enriched":{"digest":"0c6eb311048e7789","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-08-22T04:57:57","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���#\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffa02300000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"29797be8-fb63-4537-9564-657f29028dcd","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":12,"enriched":{"digest":"2e8a1e42eabe1e56","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-08-22T04:57:56","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���#\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffa02300000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"6bf82d59-2732-4b4f-a10f-60901acce750","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":12,"enriched":{"digest":"2e8a1e42eabe1e56","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-08-21T14:29:19","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��4?\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff343f00000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"2f08c6e4-8440-408d-a0b2-eeb84e6d526c","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":12,"enriched":{"digest":"4f90a31eefd53b87","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-08-21T14:29:18","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��4?\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff343f00000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"645df880-7fec-47d1-953f-c6a733401224","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":12,"enriched":{"digest":"4f90a31eefd53b87","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-07-22T22:10:13","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���(\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffbc2800000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"3f16ab25-1b48-4c9e-ab11-9ef2ab258fdf","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":12,"enriched":{"digest":"f497d489c52853ad","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-07-22T22:10:12","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���(\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffbc2800000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"ac711cf5-109c-40a0-a65a-4ad1da6e04d1","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":12,"enriched":{"digest":"f497d489c52853ad","strings":["SMBr","NT LM 0.12"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-23T01:28:24.934367+00:00"}