{"ip":"163.223.52.9","total_events":8,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["8 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"456 bytes sent","bytes_sent":456,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-22T04:41:14","last_seen":"2026-09-22T04:41:25","events_24h":0,"events_7d":8,"geo":{"country_code":"IN","country_name":"India","region":"Maharashtra","city":"Mumbai","lat":19.0748,"lon":72.8856,"asn":150623,"org":"HOSTDZIRE WEB SERVICES PRIVATE LIMITED"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as150623","label":"HOSTDZIRE WEB SERVICES PRIVATE LIMITED","category":"enterprise","url":"https://www.peeringdb.com/asn/150623"},"cve_matches":[],"malware":[],"top_ports":[{"port":8888,"proto":"tcp","label":"HTTP-alt","count":2},{"port":6666,"proto":"tcp","label":"","count":2},{"port":7777,"proto":"tcp","label":"Oracle","count":2},{"port":8636,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-22","count":8}],"recent_events":[{"timestamp":"2026-09-22T04:41:25","port":7777,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1\r\nHost: ip.ifconfig.dpdns.org:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e4543542069702e6966636f6e6669672e6470646e732e6f72673a34343320485454502f312e310d0a486f73743a2069702e6966636f6e6669672e6470646e732e6f72673a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"2a570489-d8e6-475d-beb5-d73a6697899f","seq":1,"duration_ms":100,"bytes_in":111,"bytes_out":12,"enriched":{"digest":"983a6af792235189","label":"HTTP","strings":["CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1","Host: ip.ifconfig.dpdns.org:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["ip.ifconfig.dpdns.org"]}}},{"timestamp":"2026-09-22T04:41:25","port":8888,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1\r\nHost: ip.ifconfig.dpdns.org:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e4543542069702e6966636f6e6669672e6470646e732e6f72673a34343320485454502f312e310d0a486f73743a2069702e6966636f6e6669672e6470646e732e6f72673a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"00dc8b54-0282-4387-8bff-c1c70b11c270","seq":1,"duration_ms":100,"bytes_in":111,"bytes_out":12,"enriched":{"digest":"983a6af792235189","label":"HTTP","strings":["CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1","Host: ip.ifconfig.dpdns.org:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["ip.ifconfig.dpdns.org"]}}},{"timestamp":"2026-09-22T04:41:25","port":6666,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1\r\nHost: ip.ifconfig.dpdns.org:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e4543542069702e6966636f6e6669672e6470646e732e6f72673a34343320485454502f312e310d0a486f73743a2069702e6966636f6e6669672e6470646e732e6f72673a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"e5412215-b9b0-4b69-8e6a-e152fd46e7ab","seq":1,"duration_ms":101,"bytes_in":111,"bytes_out":12,"enriched":{"digest":"983a6af792235189","label":"HTTP","strings":["CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1","Host: ip.ifconfig.dpdns.org:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["ip.ifconfig.dpdns.org"]}}},{"timestamp":"2026-09-22T04:41:25","port":8636,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1\r\nHost: ip.ifconfig.dpdns.org:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e4543542069702e6966636f6e6669672e6470646e732e6f72673a34343320485454502f312e310d0a486f73743a2069702e6966636f6e6669672e6470646e732e6f72673a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"20f6d5c1-4e41-4b44-8aae-59abd745ed83","seq":1,"duration_ms":100,"bytes_in":111,"bytes_out":12,"enriched":{"digest":"983a6af792235189","label":"HTTP","strings":["CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1","Host: ip.ifconfig.dpdns.org:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["ip.ifconfig.dpdns.org"]}}},{"timestamp":"2026-09-22T04:41:14","port":8888,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"3bc64a86-7f57-4876-b0dd-ebad381d1793","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-09-22T04:41:14","port":7777,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"61c6d201-bf82-4aaa-94a0-1cad4982db24","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-09-22T04:41:14","port":6666,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"64d4c609-d9b0-48f8-9943-ecbf3a9ede38","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-09-22T04:41:14","port":8636,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"b7a70e90-3f41-4529-bb03-0b8855933ec8","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}}],"http_methods":[],"distinct_ports_total":4,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-24T15:18:15.953475+00:00"}