{"ip":"2.58.202.144","total_events":27,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["27 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,648 bytes sent","bytes_sent":1648,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-10T01:10:18","last_seen":"2026-09-26T01:00:17","events_24h":0,"events_7d":4,"geo":{"country_code":"US","country_name":"United States","region":"California","city":"Los Angeles","lat":34.0609,"lon":-118.2414,"asn":152586,"org":"Kuroit"},"source_domain":"144.202.58.2.us-az.kuroit.com","known_scanners":[],"scanner_tag":{"key":"peeringdb:as152586","label":"Kuroit (India)","category":"enterprise","url":"https://www.peeringdb.com/asn/152586"},"cve_matches":[],"malware":[],"top_ports":[{"port":5038,"proto":"tcp","label":"","count":27}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-10","count":7},{"date":"2026-09-14","count":2},{"date":"2026-09-22","count":4},{"date":"2026-09-23","count":10},{"date":"2026-09-25","count":2},{"date":"2026-09-26","count":2}],"recent_events":[{"timestamp":"2026-09-26T01:00:17","port":5038,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Action: Login\r\nUsername: admin\r\nSecret: admin\r\nEvents: off\r\n\r\n","payload_hex":"416374696f6e3a204c6f67696e0d0a557365726e616d653a2061646d696e0d0a5365637265743a2061646d696e0d0a4576656e74733a206f66660d0a0d0a","method":"","user_agent":"","ja3":"","session":"e9ab84d6-ed73-4440-921b-e5f0a630b066","seq":1,"duration_ms":100,"bytes_in":62,"bytes_out":12,"enriched":{"digest":"6aaa74ae010478f0","strings":["Action: Login","Username: admin","Secret: admin","Events: off"]}},{"timestamp":"2026-09-26T01:00:16","port":5038,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Action: Login\r\nUsername: cron\r\nSecret: 1234\r\nEvents: off\r\n\r\n","payload_hex":"416374696f6e3a204c6f67696e0d0a557365726e616d653a2063726f6e0d0a5365637265743a20313233340d0a4576656e74733a206f66660d0a0d0a","method":"","user_agent":"","ja3":"","session":"684d451e-9eb7-4df6-900d-78547d43c24e","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":12,"enriched":{"digest":"bd9587ccb1414d8d","strings":["Action: Login","Username: cron","Secret: 1234","Events: off"]}},{"timestamp":"2026-09-25T08:19:02","port":5038,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Action: Login\r\nUsername: admin\r\nSecret: admin\r\nEvents: off\r\n\r\n","payload_hex":"416374696f6e3a204c6f67696e0d0a557365726e616d653a2061646d696e0d0a5365637265743a2061646d696e0d0a4576656e74733a206f66660d0a0d0a","method":"","user_agent":"","ja3":"","session":"fb9944fc-ff14-4379-863a-db704bcffc57","seq":1,"duration_ms":100,"bytes_in":62,"bytes_out":12,"enriched":{"digest":"6aaa74ae010478f0","strings":["Action: Login","Username: admin","Secret: admin","Events: off"]}},{"timestamp":"2026-09-25T08:19:01","port":5038,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Action: Login\r\nUsername: cron\r\nSecret: 1234\r\nEvents: off\r\n\r\n","payload_hex":"416374696f6e3a204c6f67696e0d0a557365726e616d653a2063726f6e0d0a5365637265743a20313233340d0a4576656e74733a206f66660d0a0d0a","method":"","user_agent":"","ja3":"","session":"30c24658-162c-453f-9afb-a965cab876e0","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":12,"enriched":{"digest":"bd9587ccb1414d8d","strings":["Action: Login","Username: cron","Secret: 1234","Events: off"]}},{"timestamp":"2026-09-23T03:09:02","port":5038,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Action: Login\r\nUsername: admin\r\nSecret: admin\r\nEvents: off\r\n\r\n","payload_hex":"416374696f6e3a204c6f67696e0d0a557365726e616d653a2061646d696e0d0a5365637265743a2061646d696e0d0a4576656e74733a206f66660d0a0d0a","method":"","user_agent":"","ja3":"","session":"b27460be-e6f4-4de7-86da-b03e92e11ef1","seq":1,"duration_ms":100,"bytes_in":62,"bytes_out":12,"enriched":{"digest":"6aaa74ae010478f0","strings":["Action: Login","Username: admin","Secret: admin","Events: off"]}},{"timestamp":"2026-09-23T03:09:01","port":5038,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Action: Login\r\nUsername: cron\r\nSecret: 1234\r\nEvents: off\r\n\r\n","payload_hex":"416374696f6e3a204c6f67696e0d0a557365726e616d653a2063726f6e0d0a5365637265743a20313233340d0a4576656e74733a206f66660d0a0d0a","method":"","user_agent":"","ja3":"","session":"06b097cc-780d-4d44-88af-d2b2439863bd","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":12,"enriched":{"digest":"bd9587ccb1414d8d","strings":["Action: Login","Username: cron","Secret: 1234","Events: off"]}},{"timestamp":"2026-09-23T03:08:54","port":5038,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Action: Login\r\nUsername: admin\r\nSecret: admin\r\nEvents: off\r\n\r\n","payload_hex":"416374696f6e3a204c6f67696e0d0a557365726e616d653a2061646d696e0d0a5365637265743a2061646d696e0d0a4576656e74733a206f66660d0a0d0a","method":"","user_agent":"","ja3":"","session":"a804925d-b9bb-44e1-aa52-8ec1dca0bf2e","seq":1,"duration_ms":100,"bytes_in":62,"bytes_out":12,"enriched":{"digest":"6aaa74ae010478f0","strings":["Action: Login","Username: admin","Secret: admin","Events: off"]}},{"timestamp":"2026-09-23T03:08:53","port":5038,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Action: Login\r\nUsername: cron\r\nSecret: 1234\r\nEvents: off\r\n\r\n","payload_hex":"416374696f6e3a204c6f67696e0d0a557365726e616d653a2063726f6e0d0a5365637265743a20313233340d0a4576656e74733a206f66660d0a0d0a","method":"","user_agent":"","ja3":"","session":"0d5a6755-8b43-4693-9728-b9733c44d7a8","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":12,"enriched":{"digest":"bd9587ccb1414d8d","strings":["Action: Login","Username: cron","Secret: 1234","Events: off"]}},{"timestamp":"2026-09-23T00:51:46","port":5038,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Action: Login\r\nUsername: admin\r\nSecret: admin\r\nEvents: off\r\n\r\n","payload_hex":"416374696f6e3a204c6f67696e0d0a557365726e616d653a2061646d696e0d0a5365637265743a2061646d696e0d0a4576656e74733a206f66660d0a0d0a","method":"","user_agent":"","ja3":"","session":"cb5b1a4a-e762-4782-83ed-6b43ecfc3200","seq":1,"duration_ms":100,"bytes_in":62,"bytes_out":12,"enriched":{"digest":"6aaa74ae010478f0","strings":["Action: Login","Username: admin","Secret: admin","Events: off"]}},{"timestamp":"2026-09-23T00:51:45","port":5038,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Action: Login\r\nUsername: cron\r\nSecret: 1234\r\nEvents: off\r\n\r\n","payload_hex":"416374696f6e3a204c6f67696e0d0a557365726e616d653a2063726f6e0d0a5365637265743a20313233340d0a4576656e74733a206f66660d0a0d0a","method":"","user_agent":"","ja3":"","session":"f7a4628f-fcc6-4742-9155-a36a0121bb38","seq":1,"duration_ms":100,"bytes_in":60,"bytes_out":12,"enriched":{"digest":"bd9587ccb1414d8d","strings":["Action: Login","Username: cron","Secret: 1234","Events: off"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-30T18:35:18.389751+00:00"}