{"ip":"182.180.50.181","observed":true,"total_events":84,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["84 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"3,444 bytes sent","bytes_sent":3444,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-09-01T14:32:22","last_seen":"2026-10-15T15:32:27","events_24h":0,"events_7d":12,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"PK","country_name":"Pakistan","region":"Punjab","city":"Rawalpindi","lat":33.6099,"lon":73.0301,"asn":17557,"org":"Pakistan Telecommunication Company Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as17557","label":"PTCL","category":"isp","url":"https://www.peeringdb.com/asn/17557"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":1433,"proto":"tcp","label":"MSSQL","count":84}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-01","count":6},{"date":"2026-09-07","count":6},{"date":"2026-09-13","count":6},{"date":"2026-09-14","count":6},{"date":"2026-09-15","count":6},{"date":"2026-09-17","count":6},{"date":"2026-09-19","count":6},{"date":"2026-09-22","count":6},{"date":"2026-09-23","count":6},{"date":"2026-09-29","count":6},{"date":"2026-10-03","count":6},{"date":"2026-10-07","count":6},{"date":"2026-10-11","count":6},{"date":"2026-10-15","count":6}],"recent_events":[{"timestamp":"2026-10-15T15:32:27","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�+\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000008c2b0000","method":"","user_agent":"","ja3":"","session":"f12f4116-5c9e-4bf4-94b3-f08c12e3e0f5","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-10-15T15:32:16","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�+\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000008c2b0000","method":"","user_agent":"","ja3":"","session":"2c63ef94-5d97-4481-bd09-6a47eda22d8b","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-10-15T15:32:06","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�+\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000008c2b0000","method":"","user_agent":"","ja3":"","session":"c4f49e0a-b1a4-4320-b91a-2b51ab169ca0","seq":1,"duration_ms":101,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-10-15T15:31:55","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�+\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000008c2b0000","method":"","user_agent":"","ja3":"","session":"bde1d47c-9959-4b91-996d-9d89bffd415a","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-10-15T15:31:44","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�+\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000008c2b0000","method":"","user_agent":"","ja3":"","session":"7f3e4520-9029-4f7e-8601-b58948137b25","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-10-15T15:31:34","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�+\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000008c2b0000","method":"","user_agent":"","ja3":"","session":"f0232fd1-13db-423d-939e-324ed1d8b05d","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-10-11T14:30:02","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�/\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000f42f0000","method":"","user_agent":"","ja3":"","session":"f8707c73-e3bc-4e98-855e-63ea06bb345e","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-10-11T14:29:51","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�/\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000f42f0000","method":"","user_agent":"","ja3":"","session":"a8fcf541-55f0-4221-82a7-501efd89cf07","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-10-11T14:29:41","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�/\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000f42f0000","method":"","user_agent":"","ja3":"","session":"6bcd5e37-b317-4395-8a66-720b19db8a68","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-10-11T14:29:30","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�/\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000f42f0000","method":"","user_agent":"","ja3":"","session":"04910bc4-00f6-4af6-9529-93e30071f977","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-17T05:25:32.796824+00:00"}