{"ip":"184.67.58.230","total_events":3,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["3 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"102 bytes sent","bytes_sent":102,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-10T00:19:12","last_seen":"2026-09-10T00:28:16","events_24h":3,"events_7d":3,"geo":{"country_code":"CA","country_name":"Canada","region":"Alberta","city":"Edmonton","lat":53.4179,"lon":-113.5785,"asn":6327,"org":"Shaw Communications"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as6327","label":"Shaw Cablesystems","category":"isp","url":"https://www.peeringdb.com/asn/6327"},"cve_matches":[],"malware":[],"top_ports":[{"port":5921,"proto":"tcp","label":"","count":1},{"port":7434,"proto":"tcp","label":"","count":1},{"port":10001,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-10","count":3}],"recent_events":[{"timestamp":"2026-09-10T00:28:16","port":5921,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"REDQ\u0002\u0000\u0000\u0000\u0002\u0000\u0000\u0000\u0012\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0012\u0000\u0000\u0000","payload_hex":"52454451020000000200000012000000000000000100000000000000000012000000","method":"","user_agent":"","ja3":"","session":"1e0b53fe-f352-499e-8a59-91d3a35810c8","seq":1,"duration_ms":101,"bytes_in":34,"bytes_out":13,"enriched":{"digest":"93b636be3908c40d","strings":["REDQ"]}},{"timestamp":"2026-09-10T00:20:34","port":10001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"REDQ\u0002\u0000\u0000\u0000\u0002\u0000\u0000\u0000\u0012\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0012\u0000\u0000\u0000","payload_hex":"52454451020000000200000012000000000000000100000000000000000012000000","method":"","user_agent":"","ja3":"","session":"83da6cd5-5883-47df-9b4c-d5126d4671e2","seq":1,"duration_ms":100,"bytes_in":34,"bytes_out":13,"enriched":{"digest":"93b636be3908c40d","strings":["REDQ"]}},{"timestamp":"2026-09-10T00:19:12","port":7434,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"REDQ\u0002\u0000\u0000\u0000\u0002\u0000\u0000\u0000\u0012\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0012\u0000\u0000\u0000","payload_hex":"52454451020000000200000012000000000000000100000000000000000012000000","method":"","user_agent":"","ja3":"","session":"d3ae012c-51f1-444b-81b6-19a2c3c95df7","seq":1,"duration_ms":100,"bytes_in":34,"bytes_out":13,"enriched":{"digest":"93b636be3908c40d","strings":["REDQ"]}}],"http_methods":[],"distinct_ports_total":3,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T00:00:11.532576+00:00"}