{"ip":"187.85.171.20","data_as_of":"2026-10-23T11:02:38+00:00","observed":true,"total_events":12,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["12 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,128 bytes sent","bytes_sent":1128,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-08T12:48:19","last_seen":"2026-10-10T16:13:44","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"BR","country_name":"Brazil","region":"Santa Catarina","city":"Blumenau","lat":-26.8766,"lon":-49.0969,"asn":28343,"org":"UNIFIQUE TELECOMUNICACOES S/A"},"source_domain":"187-85-171-20.unifique.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28343","label":"Unifique Telecomunicações","category":"isp","url":"https://www.peeringdb.com/asn/28343"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":1433,"proto":"tcp","label":"MSSQL","count":12}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-08","count":4},{"date":"2026-10-09","count":4},{"date":"2026-10-10","count":4}],"recent_events":[{"timestamp":"2026-10-10T16:13:44","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u0000\u001cp\u0000]�:�O�XM�lj�\b�yMP�ˁ��=H�g������\u0004\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040812520000000000001c70005de73a954f94584d90c789dc08d3794d50eccb818dc03d489067a58ba1eda1c90400000001","method":"","user_agent":"","ja3":"","session":"db132fb9-5a77-4fe9-89fc-d202deb65529","seq":1,"duration_ms":102,"bytes_in":94,"bytes_out":13},{"timestamp":"2026-10-10T16:13:35","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u0000\u001cp\u0000�zcZ\u001fݾE�����\u001a�P�ˁ��=H�g������\u0003\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040812520000000000001c7000807a635a1fddbe4598dfc081c81a7fe550eccb818dc03d489067a58ba1eda1c90300000001","method":"","user_agent":"","ja3":"","session":"2cdabe70-8096-49ec-849a-a3b5f25c9675","seq":1,"duration_ms":101,"bytes_in":94,"bytes_out":13},{"timestamp":"2026-10-10T16:13:31","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u0000\u001cp\u0000��� >\u000bQK�c������P�ˁ��=H�g������\u0002\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040812520000000000001c700098efa1203e0b514bad63efcbfcadc6c550eccb818dc03d489067a58ba1eda1c90200000001","method":"","user_agent":"","ja3":"","session":"343efe91-cbd8-4058-9464-3a732d9f7bbb","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":13},{"timestamp":"2026-10-10T16:13:29","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u0000\u001cp\u0000\u000b�t���\u0004N��N{p�O�P�ˁ��=H�g������\u0001\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040812520000000000001c70000ba074bea9c4044e9bde4e7b70f94ff350eccb818dc03d489067a58ba1eda1c90100000001","method":"","user_agent":"","ja3":"","session":"55992493-6ae5-493c-9d14-54eececc3558","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":13},{"timestamp":"2026-10-09T16:44:11","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u00002�\u0000\u000b:���8@L��f.��!�����\u001e��C�a0Қκ\u0010\u0004\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff0408125200000000000032ac000b3afcf9a938404cbcc2662e8a82218dade680e71eb5af43856130d29aceba100400000001","method":"","user_agent":"","ja3":"","session":"d09105ad-e06f-4c69-bd4a-058a65b4be94","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":13},{"timestamp":"2026-10-09T16:44:03","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u00002�\u0000\u001e3�\u0006� `@����7Ճ�����\u001e��C�a0Қκ\u0010\u0003\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff0408125200000000000032ac001e33b806b4206040b6e9c08337d58380ade680e71eb5af43856130d29aceba100300000001","method":"","user_agent":"","ja3":"","session":"b0d005fb-4e4c-4ede-9d81-1d58ccd9ce28","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":13},{"timestamp":"2026-10-09T16:43:59","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u00002�\u0000��\u0019!ҰHN�V\u000fe���3����\u001e��C�a0Қκ\u0010\u0002\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff0408125200000000000032ac00c1991921d2b0484e8f560f659ffe9a33ade680e71eb5af43856130d29aceba100200000001","method":"","user_agent":"","ja3":"","session":"1a9735c4-70cb-4b4b-a12d-62f589ed55ad","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":13},{"timestamp":"2026-10-09T16:43:57","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u00002�\u0000��!��hqH�L���Quͭ���\u001e��C�a0Қκ\u0010\u0001\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff0408125200000000000032ac00a9f621cad0687148bd4cbe89a95175cdade680e71eb5af43856130d29aceba100100000001","method":"","user_agent":"","ja3":"","session":"820c2379-baee-482c-8dec-5a9a86770ba1","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":13},{"timestamp":"2026-10-08T12:48:33","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u0000;\u0000\u0000h�\u000e�\t\u000fK��Op����z��B鵭O�5�b�\u0000׏\u0004\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040812520000000000003b0000687fe60ea8090f4ba98b4f7088f2a5c27abad342e9b5ad4fad35d262e300d78f0400000001","method":"","user_agent":"","ja3":"","session":"da32e13a-00c6-4a86-9c3a-e4c9868400ce","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":13},{"timestamp":"2026-10-08T12:48:25","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u0000;\u0000\u0000�|�nq�0@��C��Ǘ0z��B鵭O�5�b�\u0000׏\u0003\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040812520000000000003b0000ea7cfc6e71863040a4dd439c95c797307abad342e9b5ad4fad35d262e300d78f0300000001","method":"","user_agent":"","ja3":"","session":"5a8fe1bf-c64a-4188-b574-18dcd06ecd97","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":13}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}