{"ip":"191.31.165.82","total_events":38,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["38 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"921 bytes sent","bytes_sent":921,"session_seconds":0,"persistent":false}},"first_seen":"2026-02-28T09:22:07","last_seen":"2026-09-17T23:03:38","events_24h":0,"events_7d":3,"geo":{"country_code":"BR","country_name":"Brazil","region":"Minas Gerais","city":"Uberlândia","lat":-19.0233,"lon":-48.3348,"asn":18881,"org":"TELEFONICA BRASIL S.A"},"source_domain":"191.31.165.82.static.gvt.net.br","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":1433,"proto":"tcp","label":"MSSQL","count":29},{"port":445,"proto":"tcp","label":"SMB","count":9}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-02","count":3},{"date":"2026-07-06","count":2},{"date":"2026-07-13","count":1},{"date":"2026-07-14","count":1},{"date":"2026-07-17","count":2},{"date":"2026-09-02","count":3},{"date":"2026-09-06","count":3},{"date":"2026-09-07","count":1},{"date":"2026-09-17","count":3}],"recent_events":[{"timestamp":"2026-09-17T23:03:38","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�J\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000a44a0000","method":"","user_agent":"","ja3":"","session":"52f5f5dc-6319-45a4-8a69-11d336da4558","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-17T23:03:27","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�J\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000a44a0000","method":"","user_agent":"","ja3":"","session":"feff0b46-b672-4c22-bcf9-b1b3140d96e0","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-17T23:03:16","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�J\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000a44a0000","method":"","user_agent":"","ja3":"","session":"35c8730a-e345-4475-8941-a9d91ce6c2f7","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-07T09:32:16","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u001c^\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff1c5e00000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"1db2b7f8-cf9f-4ea3-b046-7b661066b3d2","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":13,"enriched":{"digest":"28d250dc9effd917","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-09-06T15:36:55","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�v\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000d4760000","method":"","user_agent":"","ja3":"","session":"29329709-c641-4ded-b042-854b040bb81f","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-06T15:36:42","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�v\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000d4760000","method":"","user_agent":"","ja3":"","session":"65887013-e683-43e2-bfdb-6c7ed041c8c3","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-06T15:36:31","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�v\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000d4760000","method":"","user_agent":"","ja3":"","session":"99aee4f6-e843-4de6-8788-91d70a373c1c","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-02T23:09:23","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000<\u000e\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000003c0e0000","method":"","user_agent":"","ja3":"","session":"55dc948f-49a6-496a-9480-cacd9d2a837c","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-02T23:09:12","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000<\u000e\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000003c0e0000","method":"","user_agent":"","ja3":"","session":"6c6ad2e1-9397-4992-ad59-b8172764ce9c","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-02T23:09:01","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000<\u000e\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000003c0e0000","method":"","user_agent":"","ja3":"","session":"48c36c2b-11b3-4d55-9d7a-8ad48197e0f5","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13}],"http_methods":[],"distinct_ports_total":2,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-21T10:42:08.255537+00:00"}