{"ip":"210.225.99.123","total_events":16,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["16 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"204 bytes sent","bytes_sent":204,"session_seconds":0,"persistent":false}},"first_seen":"2026-02-23T05:02:40","last_seen":"2026-09-23T20:12:12","events_24h":2,"events_7d":2,"geo":{"country_code":"JP","country_name":"Japan","region":"","city":"","lat":35.69,"lon":139.69,"asn":4713,"org":"NTT DOCOMO BUSINESS,Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as4713","label":"NTT Communications Corporation (OCN)","category":"isp","url":"https://www.peeringdb.com/asn/4713"},"cve_matches":[],"malware":[],"top_ports":[{"port":445,"proto":"tcp","label":"SMB","count":16}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-13","count":2},{"date":"2026-09-23","count":2}],"recent_events":[{"timestamp":"2026-09-23T20:12:12","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���\u001a\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffe01a00000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"37a8393f-5f07-4bda-9ded-e3af57832e5b","seq":1,"duration_ms":101,"bytes_in":51,"bytes_out":14,"enriched":{"digest":"36645059df5d2643","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-09-23T20:12:10","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���\u001a\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffe01a00000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"f0e9a96f-4efb-4314-91d5-89e6ad6d2e79","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":14,"enriched":{"digest":"36645059df5d2643","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-09-13T10:34:15","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���3\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffc43300000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"ce46f22a-aeed-4289-8229-692f82e3796d","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":14,"enriched":{"digest":"ce9655d883c53cfe","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-09-13T10:34:12","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���3\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffc43300000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"16ece58b-3495-4888-bdc6-372ee3d89cf7","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":14,"enriched":{"digest":"ce9655d883c53cfe","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-05-06T14:28:20","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���2\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffa43200000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"4996088c-8ed1-4e68-bb4b-380ef40f98a8","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"7497733dd1260060","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-05-06T14:28:17","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���2\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffa43200000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"bd527477-b643-4ea9-8b59-39853fa12ee1","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"7497733dd1260060","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-04-14T03:14:42","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���\u001b\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff881b00000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"ddd7c058-c843-4cf6-a4e5-a21a050e462d","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"cd03dfe70a0bc459","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-04-14T03:14:37","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���\u001b\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff881b00000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"f5f33308-37dc-4b14-9f36-347a570844a8","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"cd03dfe70a0bc459","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-04-13T00:25:42","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�� \u0012\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff201200000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"92399050-4c06-4f85-a87a-b80d9a9ecff2","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"959f61d3f6e6f4b0","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-04-13T00:25:38","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�� \u0012\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff201200000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"20867a30-cd4c-4c5e-b6aa-db9762cac5fe","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"959f61d3f6e6f4b0","strings":["SMBr","NT LM 0.12"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-24T13:39:13.103958+00:00"}