{"ip":"223.123.33.62","total_events":126,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["126 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 5,166 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"5,166 bytes sent","bytes_sent":5166,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-07T15:31:57","last_seen":"2026-09-26T20:59:54","events_24h":0,"events_7d":18,"geo":{"country_code":"PK","country_name":"Pakistan","region":"Islamabad","city":"Islamabad","lat":33.7233,"lon":73.0435,"asn":138423,"org":"CMPak Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":1433,"proto":"tcp","label":"MSSQL","count":126}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-08-07","count":6},{"date":"2026-08-16","count":12},{"date":"2026-08-17","count":24},{"date":"2026-08-26","count":6},{"date":"2026-08-27","count":18},{"date":"2026-08-29","count":12},{"date":"2026-09-01","count":6},{"date":"2026-09-12","count":6},{"date":"2026-09-16","count":12},{"date":"2026-09-21","count":6},{"date":"2026-09-24","count":6},{"date":"2026-09-25","count":6},{"date":"2026-09-26","count":6}],"recent_events":[{"timestamp":"2026-09-26T20:59:54","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000\f�\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000000cf00000","method":"","user_agent":"","ja3":"","session":"50346d08-f7b6-4615-ba7d-da3d6110d62d","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-26T20:59:42","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000\f�\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000000cf00000","method":"","user_agent":"","ja3":"","session":"9448d46d-53c1-462f-ac4d-9c3e7cfbe894","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-26T20:59:30","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000\f�\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000000cf00000","method":"","user_agent":"","ja3":"","session":"bb13aaed-5dbb-422e-aa76-1a78888f729a","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-26T20:59:17","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000\f�\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000000cf00000","method":"","user_agent":"","ja3":"","session":"bee537fb-de08-4754-bb3b-0d5791a3c6d0","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-26T20:59:02","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000\f�\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000000cf00000","method":"","user_agent":"","ja3":"","session":"6285b5f1-f50e-4bd3-b124-bf4af45fc18b","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-26T20:58:49","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000\f�\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000000cf00000","method":"","user_agent":"","ja3":"","session":"0549933f-be37-4185-9dc6-38ac2bfbb5ad","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-25T09:01:43","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000X�\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000058cc0000","method":"","user_agent":"","ja3":"","session":"df9b679a-2f46-48fb-9ea5-b0ed82fc6760","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-25T09:01:32","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000X�\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000058cc0000","method":"","user_agent":"","ja3":"","session":"32a14b66-18a3-4488-a4b0-9b3f13dff7dc","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-25T09:01:21","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000X�\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000058cc0000","method":"","user_agent":"","ja3":"","session":"54dcb977-dff1-4e9d-85af-460c817f5ba1","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-25T09:01:11","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000X�\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000058cc0000","method":"","user_agent":"","ja3":"","session":"8123d7b9-fdb2-4ab0-87c4-06748bfbb8e0","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-30T15:30:41.250912+00:00"}