{"ip":"42.92.17.140","total_events":15,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["15 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"480 bytes sent","bytes_sent":480,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-23T20:31:34","last_seen":"2026-09-23T20:32:49","events_24h":0,"events_7d":15,"geo":{"country_code":"CN","country_name":"China","region":"","city":"","lat":34.7732,"lon":113.722,"asn":4134,"org":"Chinanet"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as4134","label":"China Telecom","category":"isp","url":"https://www.peeringdb.com/asn/4134"},"cve_matches":[],"malware":[],"top_ports":[{"port":37777,"proto":"tcp","label":"","count":15}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-23","count":15}],"recent_events":[{"timestamp":"2026-09-23T20:32:49","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000{\"%z\u0019\u00143�p\u0002d��U$\u0004\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a0010060000000007b22257a191433e97002649afa552404040200010000a1aa","method":"","user_agent":"","ja3":"","session":"3cdfc422-7895-45fc-a214-7f08f10147df","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12,"enriched":{"digest":"cd8624a5ec72baa2","strings":["{\"%z","`{\"%z"]}},{"timestamp":"2026-09-23T20:32:43","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000{\"%z\u0019\u00143�p\u0002d��U$\u0004\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a0010060000000007b22257a191433e97002649afa552404040200010000a1aa","method":"","user_agent":"","ja3":"","session":"d6aee854-53c9-4bff-9864-f131337da1d2","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12,"enriched":{"digest":"cd8624a5ec72baa2","strings":["{\"%z","`{\"%z"]}},{"timestamp":"2026-09-23T20:32:38","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000{\"%z\u0019\u00143�{\"%z\u0019\u00143�\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a0010060000000007b22257a191433e97b22257a191433e9040200010000a1aa","method":"","user_agent":"","ja3":"","session":"e3c799b8-f8c6-4e49-a3f8-5ee73ad96d6c","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12,"enriched":{"digest":"e76437b811bf818b","strings":["{\"%z","`{\"%z"]}},{"timestamp":"2026-09-23T20:32:33","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000{\"%z\u0019\u00143��u�~�ڵF\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a0010060000000007b22257a191433e9c175d47eb9dab546040200010000a1aa","method":"","user_agent":"","ja3":"","session":"8e2f22f2-cf1a-4ac7-8db0-f05e676a789f","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12,"enriched":{"digest":"21758c6bb21e2fa0","strings":["{\"%z","`{\"%z"]}},{"timestamp":"2026-09-23T20:32:27","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000{\"%z\u0019\u00143�ģ�H�V��\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a0010060000000007b22257a191433e9c4a3af489956b6b4040200010000a1aa","method":"","user_agent":"","ja3":"","session":"f0591090-df04-4a93-b9fb-c8eeb3504fa3","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12,"enriched":{"digest":"3cf9ceac7b067ab3","strings":["{\"%z","`{\"%z"]}},{"timestamp":"2026-09-23T20:32:22","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000�u�~�ڵFp\u0002d��U$\u0004\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000c175d47eb9dab5467002649afa552404040200010000a1aa","method":"","user_agent":"","ja3":"","session":"27db9682-a8e3-42ca-8755-ef247b8b6e62","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12},{"timestamp":"2026-09-23T20:32:17","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000�u�~�ڵFp\u0002d��U$\u0004\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000c175d47eb9dab5467002649afa552404040200010000a1aa","method":"","user_agent":"","ja3":"","session":"b0c6fc11-64e7-4eb8-a549-8b67a48d4f4d","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12},{"timestamp":"2026-09-23T20:32:11","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000�u�~�ڵF{\"%z\u0019\u00143�\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000c175d47eb9dab5467b22257a191433e9040200010000a1aa","method":"","user_agent":"","ja3":"","session":"7fa6f310-31c9-49f2-9b10-efa39c5da545","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12,"enriched":{"digest":"7120e01a8618a11b","strings":["F{\"%z"]}},{"timestamp":"2026-09-23T20:32:06","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000�u�~�ڵF�u�~�ڵF\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000c175d47eb9dab546c175d47eb9dab546040200010000a1aa","method":"","user_agent":"","ja3":"","session":"bb199123-3d65-4471-9bfc-40f1e6d9152f","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12},{"timestamp":"2026-09-23T20:32:01","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000�u�~�ڵFģ�H�V��\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000c175d47eb9dab546c4a3af489956b6b4040200010000a1aa","method":"","user_agent":"","ja3":"","session":"aa6774eb-243e-4a04-96b8-b6cd0bb1b73f","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-30T18:04:32.762025+00:00"}