{"ip":"124.109.124.45","observed":true,"total_events":6,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["7 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Counts include 1 interactive session(s) as well as first-packet events."],"engagement":{"level":"request","label":"Request traffic","detail":"120 bytes sent","bytes_sent":120,"session_seconds":0,"persistent":false},"basis":"combined"},"first_seen":"2026-10-01T22:20:42","last_seen":"2026-10-18T09:34:52","events_24h":0,"events_7d":2,"interactive_sessions":1,"interactive_sessions_24h":0,"interactive_sessions_7d":1,"interactive_protocols":[],"geo":{"country_code":"TW","country_name":"Taiwan","region":"New Taipei City","city":"Banqiao","lat":25.0104,"lon":121.4684,"asn":18419,"org":"DaDa Broadband LTD."},"source_domain":"n124-h45.109.124.dynamic.da.net.tw","known_scanners":[],"scanner_tag":{"key":"peeringdb:as18419","label":"DA DA BROADBAND","category":"isp","url":"https://www.peeringdb.com/asn/18419"},"cve_matches":[],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":1,"first_seen":"2026-10-16T07:03:22","last_seen":"2026-10-16T07:03:22","verdicts":[{"verdict":"unknown","sessions":1}],"personas":[],"services":[{"protocol":"tcp","port":25805,"sessions":1}],"logins":[],"commands":[],"downloads":[],"files":[],"attack":[]},"top_ports":[{"port":25805,"proto":"tcp","label":"","count":6,"sessions":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-01","count":1,"sessions":0},{"date":"2026-10-04","count":1,"sessions":0},{"date":"2026-10-07","count":1,"sessions":0},{"date":"2026-10-12","count":1,"sessions":0},{"date":"2026-10-13","count":1,"sessions":0},{"date":"2026-10-16","count":0,"sessions":1},{"date":"2026-10-18","count":1,"sessions":0}],"recent_events":[{"timestamp":"2026-10-18T09:34:52","port":25805,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONSOAGRDP,multi,a,b","payload_hex":"434f4e534f41475244502c6d756c74692c612c62","method":"","user_agent":"","ja3":"","session":"7506940c-f2ce-41f9-9073-b12fcd41044e","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":14,"enriched":{"digest":"bc0c0af316b32894","strings":["CONSOAGRDP,multi,a,b"]}},{"timestamp":"2026-10-13T18:41:40","port":25805,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONSOAGRDP,multi,a,b","payload_hex":"434f4e534f41475244502c6d756c74692c612c62","method":"","user_agent":"","ja3":"","session":"a05a956f-7ec6-4901-89d6-796c30fd9ac5","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":14,"enriched":{"digest":"bc0c0af316b32894","strings":["CONSOAGRDP,multi,a,b"]}},{"timestamp":"2026-10-12T00:25:50","port":25805,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONSOAGRDP,multi,a,b","payload_hex":"434f4e534f41475244502c6d756c74692c612c62","method":"","user_agent":"","ja3":"","session":"f2377adf-8c72-414c-9661-db0b196cafae","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":14,"enriched":{"digest":"bc0c0af316b32894","strings":["CONSOAGRDP,multi,a,b"]}},{"timestamp":"2026-10-07T12:08:33","port":25805,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONSOAGRDP,multi,a,b","payload_hex":"434f4e534f41475244502c6d756c74692c612c62","method":"","user_agent":"","ja3":"","session":"e09f343c-7556-4898-bf65-44186e8d7494","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":14,"enriched":{"digest":"bc0c0af316b32894","strings":["CONSOAGRDP,multi,a,b"]}},{"timestamp":"2026-10-04T18:05:01","port":25805,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONSOAGRDP,multi,a,b","payload_hex":"434f4e534f41475244502c6d756c74692c612c62","method":"","user_agent":"","ja3":"","session":"33715d3b-7b0a-45fa-8148-2f8d8e851288","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":14,"enriched":{"digest":"bc0c0af316b32894","strings":["CONSOAGRDP,multi,a,b"]}},{"timestamp":"2026-10-01T22:20:42","port":25805,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONSOAGRDP,multi,a,b","payload_hex":"434f4e534f41475244502c6d756c74692c612c62","method":"","user_agent":"","ja3":"","session":"87d08bd3-8acb-4763-be2b-c2112042c02a","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":14,"enriched":{"digest":"bc0c0af316b32894","strings":["CONSOAGRDP,multi,a,b"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-20T11:55:25.568565+00:00"}