{"ip":"150.95.89.93","total_events":11,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["11 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"169 bytes sent","bytes_sent":169,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-01T08:40:29","last_seen":"2026-10-01T11:40:59","events_24h":11,"events_7d":11,"geo":{"country_code":"JP","country_name":"Japan","region":"","city":"","lat":35.69,"lon":139.69,"asn":135161,"org":"GMO-Z com NetDesign Holdings Co., Ltd."},"source_domain":"v150-95-89-93.3i7x.static.cnode.io","known_scanners":[],"scanner_tag":{"key":"peeringdb:as135161","label":"GMO Thailand","category":"isp","url":"https://www.peeringdb.com/asn/135161"},"cve_matches":[],"malware":[],"top_ports":[{"port":3323,"proto":"tcp","label":"","count":4},{"port":3354,"proto":"tcp","label":"","count":2},{"port":27510,"proto":"tcp","label":"","count":2},{"port":4499,"proto":"tcp","label":"","count":2},{"port":3355,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-01","count":11}],"recent_events":[{"timestamp":"2026-10-01T11:40:59","port":27510,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u000b\u0006�\u0000\u0000\u0000\u0000\u0000","payload_hex":"0300000b06e00000000000","method":"","user_agent":"","ja3":"","session":"a251ec66-201e-42b2-99a2-d0e77c90543e","seq":1,"duration_ms":100,"bytes_in":11,"bytes_out":12,"enriched":{"digest":"c6ea7c5d89294245","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-10-01T11:40:58","port":27510,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u000b\u0000\u0000\u0000","payload_hex":"030000130ee00000000000010008000b000000","method":"","user_agent":"","ja3":"","session":"9d918905-accc-411f-9efa-7739590be65d","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":12,"enriched":{"digest":"25de8bd668f2cb15","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-10-01T11:37:49","port":3354,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u000b\u0000\u0000\u0000","payload_hex":"030000130ee00000000000010008000b000000","method":"","user_agent":"","ja3":"","session":"6c5c639b-5032-4911-824a-8f86c356fc29","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":12,"enriched":{"digest":"25de8bd668f2cb15","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-10-01T11:37:49","port":3354,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u000b\u0006�\u0000\u0000\u0000\u0000\u0000","payload_hex":"0300000b06e00000000000","method":"","user_agent":"","ja3":"","session":"762f015b-9694-45ec-8cd9-95c41cbda232","seq":1,"duration_ms":100,"bytes_in":11,"bytes_out":12,"enriched":{"digest":"c6ea7c5d89294245","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-10-01T11:35:04","port":3355,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u000b\u0000\u0000\u0000","payload_hex":"030000130ee00000000000010008000b000000","method":"","user_agent":"","ja3":"","session":"b044a44b-d4d1-42bc-9dd2-099bbf220a29","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":12,"enriched":{"digest":"25de8bd668f2cb15","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-10-01T11:19:40","port":3323,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u000b\u0000\u0000\u0000","payload_hex":"030000130ee00000000000010008000b000000","method":"","user_agent":"","ja3":"","session":"30c8dfcb-92d4-42e6-9118-d971ced615a6","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":12,"enriched":{"digest":"25de8bd668f2cb15","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-10-01T11:19:40","port":3323,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u000b\u0006�\u0000\u0000\u0000\u0000\u0000","payload_hex":"0300000b06e00000000000","method":"","user_agent":"","ja3":"","session":"01ded70e-3e32-4d42-92e5-6139dfbaecb8","seq":1,"duration_ms":100,"bytes_in":11,"bytes_out":12,"enriched":{"digest":"c6ea7c5d89294245","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-10-01T08:43:42","port":4499,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u000b\u0006�\u0000\u0000\u0000\u0000\u0000","payload_hex":"0300000b06e00000000000","method":"","user_agent":"","ja3":"","session":"adc9cbc8-1ac7-48fc-a7f9-839ef61d85fc","seq":1,"duration_ms":100,"bytes_in":11,"bytes_out":12,"enriched":{"digest":"c6ea7c5d89294245","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-10-01T08:43:40","port":4499,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u000b\u0000\u0000\u0000","payload_hex":"030000130ee00000000000010008000b000000","method":"","user_agent":"","ja3":"","session":"76f4d2a6-3f18-4a02-b058-ca73ea3f5f6d","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":12,"enriched":{"digest":"25de8bd668f2cb15","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-10-01T08:40:33","port":3323,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u000b\u0006�\u0000\u0000\u0000\u0000\u0000","payload_hex":"0300000b06e00000000000","method":"","user_agent":"","ja3":"","session":"51e286aa-70cb-4754-a8fb-9437bc561be5","seq":1,"duration_ms":101,"bytes_in":11,"bytes_out":12,"enriched":{"digest":"c6ea7c5d89294245","label":"TPKT / COTP (ISO-TSAP)"}}],"http_methods":[],"distinct_ports_total":5,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-01T16:24:41.867234+00:00"}