{"ip":"149.104.27.209","total_events":18,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"network services","why":["18 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,158 bytes sent","bytes_sent":1158,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-15T14:35:15","last_seen":"2026-07-15T15:00:43","events_24h":0,"events_7d":0,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":139659,"org":"LUCIDACLOUD LIMITED"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":33333,"proto":"tcp","label":"","count":6},{"port":22222,"proto":"tcp","label":"","count":6},{"port":11111,"proto":"tcp","label":"","count":6}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i191000_9dc949149365_e5728521abd4"],"tls_ja3":["96458b3de39df5d47bc5c4a9f10f8f26"],"ja4h":[]},"fingerprint_peers":{"t13i191000_9dc949149365_e5728521abd4":138},"user_agents":[],"timeline":[{"date":"2026-07-15","count":18}],"recent_events":[{"timestamp":"2026-07-15T15:00:43","port":22222,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"e0334915-e785-48f2-a511-89943f09dc8f","seq":1,"duration_ms":101,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-07-15T15:00:43","port":33333,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"ba057aa8-06bc-4325-85b0-33f685402d53","seq":1,"duration_ms":101,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-07-15T15:00:43","port":11111,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"8bfd7667-2d99-4e32-95b4-c95933ecdcf5","seq":1,"duration_ms":101,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-07-15T15:00:31","port":33333,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"e0c1ad52-e5cf-4857-bd5e-e5d49c7095d1","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-07-15T15:00:31","port":11111,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"eff24578-18bb-447a-91df-f3106caef0b1","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-07-15T15:00:31","port":22222,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"d64285d0-cdfc-4236-8913-04adf4ec49f2","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-07-15T14:48:04","port":33333,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"4bb770d7-a2b7-4055-a68d-ab0d98f94b3a","seq":1,"duration_ms":102,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-07-15T14:48:04","port":22222,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"56d6659b-459e-4941-ba5a-27be805b3d23","seq":1,"duration_ms":102,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-07-15T14:48:04","port":11111,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"4d00e9c0-84f7-4789-8df7-64adbb10bfc2","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-07-15T14:47:52","port":11111,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"4bf9341c-1f78-4b25-a0a7-6a13e077ad5a","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}}],"http_methods":[],"distinct_ports_total":3,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-31T02:58:33.890894+00:00"}