{"ip":"208.216.217.35","data_as_of":"2026-10-27T00:39:29+00:00","observed":true,"total_events":12,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"network service provider","why":["12 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,254 bytes sent","bytes_sent":1254,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-23T17:49:28","last_seen":"2026-10-23T21:20:38","events_24h":0,"events_7d":12,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"US","country_name":"United States","region":"Maryland","city":"Parkville","lat":39.3855,"lon":-76.54,"asn":701,"org":"Verizon Business"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as701","label":"Verizon","category":"isp","url":"https://www.peeringdb.com/asn/701"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":139,"proto":"tcp","label":"SMB","count":6},{"port":445,"proto":"tcp","label":"SMB","count":6}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-23","count":12}],"recent_events":[{"timestamp":"2026-10-23T21:20:38","port":139,"proto":"tcp","app_proto":"","app_protocol":"netbios","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000D CKFDENECFDEFFCFGEFFCCACACACACACA\u0000 CKFDENECEDEMEJEFEOFECACACACACAAA\u0000","payload_hex":"8100004420434b4644454e45434644454646434647454646434341434143414341434143410020434b4644454e45434544454d454a4546454f464543414341434143414341414100","method":"","user_agent":"","ja3":"","session":"3f01c9e7-a68e-4b8f-a0fb-23db2bd456f4","seq":1,"duration_ms":101,"bytes_in":72,"bytes_out":14,"enriched":{"digest":"770f0760a53e618d","strings":["D CKFDENECFDEFFCFGEFFCCACACACACACA","CKFDENECEDEMEJEFEOFECACACACACAAA","D CKFDENECFDEFFCFGEFFCCACACACACACA CKFDENECEDEMEJEFEOFECACACACACAAA"]}},{"timestamp":"2026-10-23T21:20:36","port":139,"proto":"tcp","app_proto":"","app_protocol":"netbios","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000D CKFDENECFDEFFCFGEFFCCACACACACACA\u0000 CKFDENECEDEMEJEFEOFECACACACACAAA\u0000","payload_hex":"8100004420434b4644454e45434644454646434647454646434341434143414341434143410020434b4644454e45434544454d454a4546454f464543414341434143414341414100","method":"","user_agent":"","ja3":"","session":"c617df24-9fa1-4174-99c0-28fd8027b2b7","seq":1,"duration_ms":100,"bytes_in":72,"bytes_out":14,"enriched":{"digest":"770f0760a53e618d","strings":["D CKFDENECFDEFFCFGEFFCCACACACACACA","CKFDENECEDEMEJEFEOFECACACACACAAA","D CKFDENECFDEFFCFGEFFCCACACACACACA CKFDENECEDEMEJEFEOFECACACACACAAA"]}},{"timestamp":"2026-10-23T21:20:25","port":139,"proto":"tcp","app_proto":"","app_protocol":"netbios","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000D CKFDENECFDEFFCFGEFFCCACACACACACA\u0000 CKFDENECEDEMEJEFEOFECACACACACAAA\u0000","payload_hex":"8100004420434b4644454e45434644454646434647454646434341434143414341434143410020434b4644454e45434544454d454a4546454f464543414341434143414341414100","method":"","user_agent":"","ja3":"","session":"2829f4b5-8d4f-4001-bb13-4a5882cd5127","seq":1,"duration_ms":100,"bytes_in":72,"bytes_out":14,"enriched":{"digest":"770f0760a53e618d","strings":["D CKFDENECFDEFFCFGEFFCCACACACACACA","CKFDENECEDEMEJEFEOFECACACACACAAA","D CKFDENECFDEFFCFGEFFCCACACACACACA CKFDENECEDEMEJEFEOFECACACACACAAA"]}},{"timestamp":"2026-10-23T21:20:24","port":139,"proto":"tcp","app_proto":"","app_protocol":"netbios","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000D CKFDENECFDEFFCFGEFFCCACACACACACA\u0000 CKFDENECEDEMEJEFEOFECACACACACAAA\u0000","payload_hex":"8100004420434b4644454e45434644454646434647454646434341434143414341434143410020434b4644454e45434544454d454a4546454f464543414341434143414341414100","method":"","user_agent":"","ja3":"","session":"7bc40953-0920-4e30-9c8d-6460b7fe8255","seq":1,"duration_ms":100,"bytes_in":72,"bytes_out":14,"enriched":{"digest":"770f0760a53e618d","strings":["D CKFDENECFDEFFCFGEFFCCACACACACACA","CKFDENECEDEMEJEFEOFECACACACACAAA","D CKFDENECFDEFFCFGEFFCCACACACACACA CKFDENECEDEMEJEFEOFECACACACACAAA"]}},{"timestamp":"2026-10-23T21:20:20","port":139,"proto":"tcp","app_proto":"","app_protocol":"netbios","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000D CKFDENECFDEFFCFGEFFCCACACACACACA\u0000 CKFDENECEDEMEJEFEOFECACACACACAAA\u0000","payload_hex":"8100004420434b4644454e45434644454646434647454646434341434143414341434143410020434b4644454e45434544454d454a4546454f464543414341434143414341414100","method":"","user_agent":"","ja3":"","session":"86bb28bf-56db-4cf9-8646-4c9ac50a3d09","seq":1,"duration_ms":100,"bytes_in":72,"bytes_out":14,"enriched":{"digest":"770f0760a53e618d","strings":["D CKFDENECFDEFFCFGEFFCCACACACACACA","CKFDENECEDEMEJEFEOFECACACACACAAA","D CKFDENECFDEFFCFGEFFCCACACACACACA CKFDENECEDEMEJEFEOFECACACACACAAA"]}},{"timestamp":"2026-10-23T21:20:19","port":139,"proto":"tcp","app_proto":"","app_protocol":"netbios","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000D CKFDENECFDEFFCFGEFFCCACACACACACA\u0000 CKFDENECEDEMEJEFEOFECACACACACAAA\u0000","payload_hex":"8100004420434b4644454e45434644454646434647454646434341434143414341434143410020434b4644454e45434544454d454a4546454f464543414341434143414341414100","method":"","user_agent":"","ja3":"","session":"2c482a5c-7c4a-43ff-9984-986a2bbfae23","seq":1,"duration_ms":101,"bytes_in":72,"bytes_out":14,"enriched":{"digest":"770f0760a53e618d","strings":["D CKFDENECFDEFFCFGEFFCCACACACACACA","CKFDENECEDEMEJEFEOFECACACACACAAA","D CKFDENECFDEFFCFGEFFCCACACACACACA CKFDENECEDEMEJEFEOFECACACACACAAA"]}},{"timestamp":"2026-10-23T17:49:44","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000��SMBr\u0000\u0000\u0000\u0000\u0018S�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\u0000b\u0000\u0002PC NETWORK PROGRAM 1.0\u0000\u0002LANMAN1.0\u0000\u0002Windows for Workgroups 3.1a\u0000\u0002LM1.2X002\u0000\u0002LANMAN2.1\u0000\u0002NT LM 0.12\u0000","payload_hex":"00000085ff534d4272000000001853c00000000000000000000000000000fffe00004000006200025043204e4554574f524b2050524f4752414d20312e3000024c414e4d414e312e30000257696e646f777320666f7220576f726b67726f75707320332e316100024c4d312e325830303200024c414e4d414e322e3100024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"776dd322-bc53-4dae-b264-dd3ea9dbc0a9","seq":1,"duration_ms":101,"bytes_in":137,"bytes_out":14,"enriched":{"digest":"bf5baf1504bec0a1","strings":["SMBr","PC NETWORK PROGRAM 1.0","LANMAN1.0","Windows for Workgroups 3.1a","LM1.2X002","LANMAN2.1","NT LM 0.12"]}},{"timestamp":"2026-10-23T17:49:43","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000��SMBr\u0000\u0000\u0000\u0000\u0018S�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\u0000b\u0000\u0002PC NETWORK PROGRAM 1.0\u0000\u0002LANMAN1.0\u0000\u0002Windows for Workgroups 3.1a\u0000\u0002LM1.2X002\u0000\u0002LANMAN2.1\u0000\u0002NT LM 0.12\u0000","payload_hex":"00000085ff534d4272000000001853c00000000000000000000000000000fffe00004000006200025043204e4554574f524b2050524f4752414d20312e3000024c414e4d414e312e30000257696e646f777320666f7220576f726b67726f75707320332e316100024c4d312e325830303200024c414e4d414e322e3100024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"f9a9bca9-535c-49df-ab48-09cda15a0017","seq":1,"duration_ms":101,"bytes_in":137,"bytes_out":14,"enriched":{"digest":"bf5baf1504bec0a1","strings":["SMBr","PC NETWORK PROGRAM 1.0","LANMAN1.0","Windows for Workgroups 3.1a","LM1.2X002","LANMAN2.1","NT LM 0.12"]}},{"timestamp":"2026-10-23T17:49:32","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000��SMBr\u0000\u0000\u0000\u0000\u0018S�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\u0000b\u0000\u0002PC NETWORK PROGRAM 1.0\u0000\u0002LANMAN1.0\u0000\u0002Windows for Workgroups 3.1a\u0000\u0002LM1.2X002\u0000\u0002LANMAN2.1\u0000\u0002NT LM 0.12\u0000","payload_hex":"00000085ff534d4272000000001853c00000000000000000000000000000fffe00004000006200025043204e4554574f524b2050524f4752414d20312e3000024c414e4d414e312e30000257696e646f777320666f7220576f726b67726f75707320332e316100024c4d312e325830303200024c414e4d414e322e3100024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"d834e8b1-adbc-43a5-a9f8-7b5fcd63cb1c","seq":1,"duration_ms":100,"bytes_in":137,"bytes_out":14,"enriched":{"digest":"bf5baf1504bec0a1","strings":["SMBr","PC NETWORK PROGRAM 1.0","LANMAN1.0","Windows for Workgroups 3.1a","LM1.2X002","LANMAN2.1","NT LM 0.12"]}},{"timestamp":"2026-10-23T17:49:31","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000��SMBr\u0000\u0000\u0000\u0000\u0018S�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\u0000b\u0000\u0002PC NETWORK PROGRAM 1.0\u0000\u0002LANMAN1.0\u0000\u0002Windows for Workgroups 3.1a\u0000\u0002LM1.2X002\u0000\u0002LANMAN2.1\u0000\u0002NT LM 0.12\u0000","payload_hex":"00000085ff534d4272000000001853c00000000000000000000000000000fffe00004000006200025043204e4554574f524b2050524f4752414d20312e3000024c414e4d414e312e30000257696e646f777320666f7220576f726b67726f75707320332e316100024c4d312e325830303200024c414e4d414e322e3100024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"2076d551-7c52-42ac-bd76-7856c1044e8b","seq":1,"duration_ms":100,"bytes_in":137,"bytes_out":14,"enriched":{"digest":"bf5baf1504bec0a1","strings":["SMBr","PC NETWORK PROGRAM 1.0","LANMAN1.0","Windows for Workgroups 3.1a","LM1.2X002","LANMAN2.1","NT LM 0.12"]}}],"http_methods":[],"distinct_ports_total":2,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}