{"ip":"39.61.37.131","total_events":20,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["20 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"820 bytes sent","bytes_sent":820,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-13T03:55:37","last_seen":"2026-08-14T21:11:57","events_24h":7,"events_7d":20,"geo":{"country_code":"PK","country_name":"Pakistan","region":"Punjab","city":"Lahore","lat":31.5826,"lon":74.3276,"asn":17557,"org":"Pakistan Telecommunication Company Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as17557","label":"PTCL","category":"isp","url":"https://www.peeringdb.com/asn/17557"},"cve_matches":[],"malware":[],"top_ports":[{"port":1433,"proto":"tcp","label":"MSSQL","count":20}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-13","count":7},{"date":"2026-08-14","count":13}],"recent_events":[{"timestamp":"2026-08-14T21:11:57","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�\u001c\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000a81c0000","method":"","user_agent":"","ja3":"","session":"06678457-1a9b-47e6-a4ee-3bda63c16aa5","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-08-14T21:11:46","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�\u001c\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000a81c0000","method":"","user_agent":"","ja3":"","session":"74fe3bc4-2c2a-4e33-bf99-cfecca7f0d19","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-08-14T21:11:36","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�\u001c\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000a81c0000","method":"","user_agent":"","ja3":"","session":"a907be41-2d1c-41e4-838a-56573ad94da5","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-08-14T21:11:25","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�\u001c\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000a81c0000","method":"","user_agent":"","ja3":"","session":"c3d1b382-019b-4ba7-a30b-74bea32de673","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-08-14T21:11:25","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�\u001c\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000a81c0000","method":"","user_agent":"","ja3":"","session":"c3d1b382-019b-4ba7-a30b-74bea32de673","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-08-14T21:11:15","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�\u001c\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000a81c0000","method":"","user_agent":"","ja3":"","session":"1827b81f-d982-4cbc-997b-7c1b4fd1b8fe","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-08-14T21:11:04","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�\u001c\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000a81c0000","method":"","user_agent":"","ja3":"","session":"f4e7823a-d36b-4e07-bb8c-c63cc1a8fe0d","seq":1,"duration_ms":101,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-08-14T01:51:33","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000|-\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000007c2d0000","method":"","user_agent":"","ja3":"","session":"d2364f21-704c-4035-a8c0-247a14ec5066","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-08-14T01:51:23","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000|-\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000007c2d0000","method":"","user_agent":"","ja3":"","session":"f7bcbf1b-f348-4ec7-9de0-c93e3225b5b0","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-08-14T01:51:12","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000|-\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff08000155000000007c2d0000","method":"","user_agent":"","ja3":"","session":"6326739a-789b-4cc6-b1bf-aa2e238fa4c3","seq":1,"duration_ms":101,"bytes_in":41,"bytes_out":12}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T07:45:07.244777+00:00"}