{"ip":"144.24.64.19","total_events":30,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["30 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,250 bytes sent","bytes_sent":2250,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-17T22:54:35","last_seen":"2026-08-17T23:02:58","events_24h":0,"events_7d":30,"geo":{"country_code":"KR","country_name":"South Korea","region":"Gangwon-do","city":"Chuncheon","lat":37.8897,"lon":127.736,"asn":31898,"org":"Oracle Corporation"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as31898","label":"Oracle Cloud Infrastructure","category":"cdn","url":"https://www.peeringdb.com/asn/31898"},"cve_matches":[],"malware":[],"top_ports":[{"port":999,"proto":"tcp","label":"","count":6},{"port":666,"proto":"tcp","label":"","count":6},{"port":5555,"proto":"tcp","label":"","count":6},{"port":888,"proto":"tcp","label":"","count":6},{"port":555,"proto":"tcp","label":"","count":6}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i191000_9dc949149365_e5728521abd4"],"tls_ja3":["96458b3de39df5d47bc5c4a9f10f8f26"],"ja4h":[]},"fingerprint_peers":{"t13i191000_9dc949149365_e5728521abd4":172},"user_agents":[],"timeline":[{"date":"2026-08-17","count":30}],"recent_events":[{"timestamp":"2026-08-17T23:02:58","port":999,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1\r\nHost: ip.ifconfig.dpdns.org:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e4543542069702e6966636f6e6669672e6470646e732e6f72673a34343320485454502f312e310d0a486f73743a2069702e6966636f6e6669672e6470646e732e6f72673a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"951da21e-9156-486b-993d-195d03abbf66","seq":1,"duration_ms":100,"bytes_in":111,"bytes_out":12,"enriched":{"digest":"983a6af792235189","label":"HTTP","strings":["CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1","Host: ip.ifconfig.dpdns.org:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["ip.ifconfig.dpdns.org"]}}},{"timestamp":"2026-08-17T23:02:57","port":5555,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1\r\nHost: ip.ifconfig.dpdns.org:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e4543542069702e6966636f6e6669672e6470646e732e6f72673a34343320485454502f312e310d0a486f73743a2069702e6966636f6e6669672e6470646e732e6f72673a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"f7af6c96-dcf6-453b-a4bb-be7b4e9a8046","seq":1,"duration_ms":101,"bytes_in":111,"bytes_out":12,"enriched":{"digest":"983a6af792235189","label":"HTTP","strings":["CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1","Host: ip.ifconfig.dpdns.org:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["ip.ifconfig.dpdns.org"]}}},{"timestamp":"2026-08-17T23:02:57","port":888,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1\r\nHost: ip.ifconfig.dpdns.org:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e4543542069702e6966636f6e6669672e6470646e732e6f72673a34343320485454502f312e310d0a486f73743a2069702e6966636f6e6669672e6470646e732e6f72673a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"f8af7c7b-178f-45cc-bd48-64b6197d516d","seq":1,"duration_ms":100,"bytes_in":111,"bytes_out":12,"enriched":{"digest":"983a6af792235189","label":"HTTP","strings":["CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1","Host: ip.ifconfig.dpdns.org:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["ip.ifconfig.dpdns.org"]}}},{"timestamp":"2026-08-17T23:02:56","port":555,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1\r\nHost: ip.ifconfig.dpdns.org:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e4543542069702e6966636f6e6669672e6470646e732e6f72673a34343320485454502f312e310d0a486f73743a2069702e6966636f6e6669672e6470646e732e6f72673a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"e5786d68-eb75-4148-a902-dd98efb97023","seq":1,"duration_ms":100,"bytes_in":111,"bytes_out":12,"enriched":{"digest":"983a6af792235189","label":"HTTP","strings":["CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1","Host: ip.ifconfig.dpdns.org:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["ip.ifconfig.dpdns.org"]}}},{"timestamp":"2026-08-17T23:02:56","port":555,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1\r\nHost: ip.ifconfig.dpdns.org:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e4543542069702e6966636f6e6669672e6470646e732e6f72673a34343320485454502f312e310d0a486f73743a2069702e6966636f6e6669672e6470646e732e6f72673a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"76a0dbbe-7203-404e-91dc-73efe43c685b","seq":1,"duration_ms":100,"bytes_in":111,"bytes_out":12,"enriched":{"digest":"983a6af792235189","label":"HTTP","strings":["CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1","Host: ip.ifconfig.dpdns.org:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["ip.ifconfig.dpdns.org"]}}},{"timestamp":"2026-08-17T23:02:56","port":5555,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1\r\nHost: ip.ifconfig.dpdns.org:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e4543542069702e6966636f6e6669672e6470646e732e6f72673a34343320485454502f312e310d0a486f73743a2069702e6966636f6e6669672e6470646e732e6f72673a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"5e2a3e30-1c33-483a-83b6-30895e44e176","seq":1,"duration_ms":100,"bytes_in":111,"bytes_out":12,"enriched":{"digest":"983a6af792235189","label":"HTTP","strings":["CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1","Host: ip.ifconfig.dpdns.org:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["ip.ifconfig.dpdns.org"]}}},{"timestamp":"2026-08-17T23:02:55","port":999,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1\r\nHost: ip.ifconfig.dpdns.org:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e4543542069702e6966636f6e6669672e6470646e732e6f72673a34343320485454502f312e310d0a486f73743a2069702e6966636f6e6669672e6470646e732e6f72673a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"b9802b21-4280-43f2-a613-3d70999adeff","seq":1,"duration_ms":100,"bytes_in":111,"bytes_out":12,"enriched":{"digest":"983a6af792235189","label":"HTTP","strings":["CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1","Host: ip.ifconfig.dpdns.org:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["ip.ifconfig.dpdns.org"]}}},{"timestamp":"2026-08-17T23:02:55","port":888,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1\r\nHost: ip.ifconfig.dpdns.org:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e4543542069702e6966636f6e6669672e6470646e732e6f72673a34343320485454502f312e310d0a486f73743a2069702e6966636f6e6669672e6470646e732e6f72673a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"f5fdac37-f16a-4d51-9387-270fd333077a","seq":1,"duration_ms":101,"bytes_in":111,"bytes_out":12,"enriched":{"digest":"983a6af792235189","label":"HTTP","strings":["CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1","Host: ip.ifconfig.dpdns.org:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["ip.ifconfig.dpdns.org"]}}},{"timestamp":"2026-08-17T23:02:53","port":666,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1\r\nHost: ip.ifconfig.dpdns.org:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e4543542069702e6966636f6e6669672e6470646e732e6f72673a34343320485454502f312e310d0a486f73743a2069702e6966636f6e6669672e6470646e732e6f72673a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"97a389f1-7596-4eef-879e-43a232608ac4","seq":1,"duration_ms":101,"bytes_in":111,"bytes_out":12,"enriched":{"digest":"983a6af792235189","label":"HTTP","strings":["CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1","Host: ip.ifconfig.dpdns.org:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["ip.ifconfig.dpdns.org"]}}},{"timestamp":"2026-08-17T23:02:52","port":666,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1\r\nHost: ip.ifconfig.dpdns.org:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e4543542069702e6966636f6e6669672e6470646e732e6f72673a34343320485454502f312e310d0a486f73743a2069702e6966636f6e6669672e6470646e732e6f72673a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"8c376b4a-e116-4830-8f56-571f90cf3065","seq":1,"duration_ms":101,"bytes_in":111,"bytes_out":12,"enriched":{"digest":"983a6af792235189","label":"HTTP","strings":["CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1","Host: ip.ifconfig.dpdns.org:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["ip.ifconfig.dpdns.org"]}}}],"http_methods":[],"distinct_ports_total":5,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T20:15:38.171579+00:00"}