{"ip":"121.149.65.211","total_events":12,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["12 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."]},"first_seen":"2026-07-06T06:58:24","last_seen":"2026-07-09T00:55:42","events_24h":0,"events_7d":0,"geo":{"country_code":"KR","country_name":"South Korea","region":"Jeollanam-do","city":"Mokpo","lat":34.8133,"lon":126.3874,"asn":4766,"org":"Korea Telecom"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as4766","label":"KT Corporation (Korea Telecom)","category":"isp","url":"https://www.peeringdb.com/asn/4766"},"cve_matches":[],"malware":[],"top_ports":[{"port":1433,"proto":"tcp","label":"MSSQL","count":12}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-06","count":6},{"date":"2026-07-09","count":6}],"recent_events":[{"timestamp":"2026-07-09T00:55:42","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�(\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000094280000","method":"","user_agent":"","community_id":"1:CYzbYWJvStDNw5YtjtY7XoOpZlo=","ja3":"","session":"e2d21981-e053-4d7f-8daa-7af95e276a3f","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-09T00:55:32","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�(\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000094280000","method":"","user_agent":"","community_id":"1:jVxiCQ+1+pxqOaT/IlqKYgromZ0=","ja3":"","session":"2e0dedd5-27f1-404e-81fe-60a1fa37250a","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-09T00:55:21","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�(\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000094280000","method":"","user_agent":"","community_id":"1:rqpHQf012U1zA9kaC/mRJVAh9Jo=","ja3":"","session":"9fa9a44a-8434-4b4f-8849-516c4e013790","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-09T00:55:11","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�(\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000094280000","method":"","user_agent":"","community_id":"1:7OaV69jPSi7jd0+k8p2THB3iVYo=","ja3":"","session":"8adc28ae-4c24-4922-b650-a233dbfa1374","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-09T00:55:00","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�(\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000094280000","method":"","user_agent":"","community_id":"1:hR240YkfQjrLAa+CutSTam3oYEE=","ja3":"","session":"9722b3f2-d449-4301-964f-3b5f9edc36a8","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-09T00:54:50","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�(\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000094280000","method":"","user_agent":"","community_id":"1:isGh1lhRDzavPIiZClmDiKyRIZI=","ja3":"","session":"4737e4b6-7e07-4a92-8ef3-ea80ef42293f","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-06T06:59:20","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000`1\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000060310000","method":"","user_agent":"","community_id":"1:09fV8o0mI5nMviTblEArz81U4eI=","ja3":"","session":"df6a6d4e-db68-4a48-9aa6-9df15ed5fbd5","seq":1,"duration_ms":101,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-06T06:59:09","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000`1\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000060310000","method":"","user_agent":"","community_id":"1:5A6axYI4LfsR46qvgykXKF4J8ZI=","ja3":"","session":"7e083221-b92e-4d1e-a179-c497f9900cc9","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-06T06:58:56","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000`1\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000060310000","method":"","user_agent":"","community_id":"1:lbALV6C0Dmhu/g5JOppxO0e1g0A=","ja3":"","session":"6b1c6287-b04f-4d25-8082-0a628687c479","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-06T06:58:45","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000`1\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000060310000","method":"","user_agent":"","community_id":"1:licxoHF1wOaRS/Rmb7+WnnvHPWE=","ja3":"","session":"8956cedc-f637-4f54-af25-9ccbea8c60fc","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-16T08:00:36.941650+00:00"}