{"ip":"143.105.233.132","total_events":379,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["379 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 2,462,966 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look.","Held a session open for 79s, against a median of well under a second."],"engagement":{"level":"payload","label":"Sustained payload, held open","detail":"2,462,966 bytes sent, longest session 79s","bytes_sent":2462966,"session_seconds":79,"persistent":true}},"first_seen":"2026-08-17T21:56:06","last_seen":"2026-08-17T21:57:25","events_24h":0,"events_7d":379,"geo":{"country_code":"ZW","country_name":"Zimbabwe","region":"Harare","city":"Harare","lat":-17.8394,"lon":31.0543,"asn":14593,"org":"Space Exploration Technologies Corporation"},"source_domain":"customer.jhngzaf1.isp.starlink.com","known_scanners":[],"scanner_tag":{"key":"peeringdb:as14593","label":"SpaceX Starlink","category":"isp","url":"https://www.peeringdb.com/asn/14593"},"cve_matches":[],"malware":[],"top_ports":[{"port":3306,"proto":"tcp","label":"MySQL","count":379}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-17","count":379}],"recent_events":[{"timestamp":"2026-08-17T21:57:25","port":3306,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��8YJ�͵�","payload_hex":"eb8638594aa9cdb5e0","method":"","user_agent":"","ja3":"","session":"51aeaf54-1d4b-4c61-b426-eaed2ca69c3c","seq":379,"duration_ms":78548,"bytes_in":11991,"bytes_out":5685},{"timestamp":"2026-08-17T21:57:22","port":3306,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"L�ճ�","payload_hex":"4c9fd5b397","method":"","user_agent":"","ja3":"","session":"51aeaf54-1d4b-4c61-b426-eaed2ca69c3c","seq":378,"duration_ms":76298,"bytes_in":11982,"bytes_out":5670},{"timestamp":"2026-08-17T21:57:22","port":3306,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"X|�>rx\u0014\u0007�\u0018'�z�\u001c�|i\r�\nP�\u001e\r�%�7�2�\u001c�\u0019]8\u0015]�{�w�\u001bW���|�w�k��pq","payload_hex":"587c8e3e72781407ae1827d27aa21cf17c690de00a50ba1e0da9259737fb32d31cfa195d38155dff7bf177fd1b57b3d2ea7cff77896beddc7071","method":"","user_agent":"","ja3":"","session":"51aeaf54-1d4b-4c61-b426-eaed2ca69c3c","seq":377,"duration_ms":75658,"bytes_in":11977,"bytes_out":5655},{"timestamp":"2026-08-17T21:57:22","port":3306,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���\t","payload_hex":"93edba09","method":"","user_agent":"","ja3":"","session":"51aeaf54-1d4b-4c61-b426-eaed2ca69c3c","seq":376,"duration_ms":75465,"bytes_in":11919,"bytes_out":5640},{"timestamp":"2026-08-17T21:57:21","port":3306,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"? Ay�_�","payload_hex":"3f204179ac5f94","method":"","user_agent":"","ja3":"","session":"51aeaf54-1d4b-4c61-b426-eaed2ca69c3c","seq":375,"duration_ms":74732,"bytes_in":11915,"bytes_out":5625,"enriched":{"digest":"1fd8abf3a9b7a409","strings":["? Ay"]}},{"timestamp":"2026-08-17T21:57:18","port":3306,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"����\b��L&�","payload_hex":"f69cfaa508bd8c4c268b","method":"","user_agent":"","ja3":"","session":"51aeaf54-1d4b-4c61-b426-eaed2ca69c3c","seq":374,"duration_ms":72269,"bytes_in":11908,"bytes_out":5610},{"timestamp":"2026-08-17T21:57:18","port":3306,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u000eI���+A","payload_hex":"fd0e49f17fe1912b41","method":"","user_agent":"","ja3":"","session":"51aeaf54-1d4b-4c61-b426-eaed2ca69c3c","seq":373,"duration_ms":71407,"bytes_in":11898,"bytes_out":5595},{"timestamp":"2026-08-17T21:57:17","port":3306,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�_g�\u0014Ei��","payload_hex":"9e5f67a0144569bfab","method":"","user_agent":"","ja3":"","session":"51aeaf54-1d4b-4c61-b426-eaed2ca69c3c","seq":372,"duration_ms":71205,"bytes_in":11889,"bytes_out":5580},{"timestamp":"2026-08-17T21:57:17","port":3306,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"%�Y'�~#eI�c\u0015�z�<��W�\u0018ϟ�G\u0010��L\u0007v�","payload_hex":"259b5927ae7e236549a26315db7aff3ca0a657b618cf9fc347108b944c0776d8","method":"","user_agent":"","ja3":"","session":"51aeaf54-1d4b-4c61-b426-eaed2ca69c3c","seq":371,"duration_ms":71062,"bytes_in":11880,"bytes_out":5565,"enriched":{"digest":"f80dcf627a2f8eb2","strings":["~#eI"]}},{"timestamp":"2026-08-17T21:57:17","port":3306,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"����c�� ","payload_hex":"f1d3c7f763ec9520","method":"","user_agent":"","ja3":"","session":"51aeaf54-1d4b-4c61-b426-eaed2ca69c3c","seq":370,"duration_ms":70897,"bytes_in":11848,"bytes_out":5550}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T21:23:16.061499+00:00"}