{"ip":"43.142.119.32","total_events":51,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["51 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 5,277 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"5,277 bytes sent","bytes_sent":5277,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-04T13:45:10","last_seen":"2026-09-10T12:48:28","events_24h":0,"events_7d":0,"geo":{"country_code":"CN","country_name":"China","region":"Shanghai","city":"Shanghai","lat":31.2222,"lon":121.4581,"asn":45090,"org":"Shenzhen Tencent Computer Systems Company Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as45090","label":"Tencent-CN","category":"cdn","url":"https://www.peeringdb.com/asn/45090"},"cve_matches":[],"malware":[],"top_ports":[{"port":12345,"proto":"tcp","label":"","count":51}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-04","count":35},{"date":"2026-09-10","count":16}],"recent_events":[{"timestamp":"2026-09-10T12:48:28","port":12345,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT api4.my-ip.io:443 HTTP/1.1\r\nProxy-Authorization: Basic dGlja2V0czpwcm94eW9uMTQ1\r\n\r\n","payload_hex":"434f4e4e45435420617069342e6d792d69702e696f3a34343320485454502f312e310d0a50726f78792d417574686f72697a6174696f6e3a2042617369632064476c6a61325630637a7077636d3934655739754d5451310d0a0d0a","method":"","user_agent":"","ja3":"","session":"d47cb63a-9b52-404f-b2ec-82d235cff62c","seq":1,"duration_ms":100,"bytes_in":91,"bytes_out":13,"enriched":{"digest":"401330c16d853140","label":"HTTP","strings":["CONNECT api4.my-ip.io:443 HTTP/1.1","Proxy-Authorization: Basic dGlja2V0czpwcm94eW9uMTQ1"],"iocs":{"domains":["api4.my-ip.io"]}}},{"timestamp":"2026-09-10T12:48:28","port":12345,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Host: v4.ipv6-test.com\r\nProxy-Connection: keep-alive\r\nProxy-Authorization: Basic dGlja2V0czpwcm94eW9uMTQ1\r\nAccept-Encoding: gzip,deflate\r\nUser-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36\r\n\r\n","payload_hex":"486f73743a2076342e697076362d746573742e636f6d0d0a50726f78792d436f6e6e656374696f6e3a206b6565702d616c6976650d0a50726f78792d417574686f72697a6174696f6e3a2042617369632064476c6a61325630637a7077636d3934655739754d5451310d0a4163636570742d456e636f64696e673a20677a69702c6465666c6174650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e3129204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f34312e302e323232362e30205361666172692f3533372e33360d0a0d0a","method":"","user_agent":"","ja3":"","session":"295b2c9b-381d-421d-a3db-ddf10e4aef09","seq":2,"duration_ms":303,"bytes_in":323,"bytes_out":91,"enriched":{"digest":"0794de4f286f12a5","strings":["Host: v4.ipv6-test.com","Proxy-Connection: keep-alive","Proxy-Authorization: Basic dGlja2V0czpwcm94eW9uMTQ1","Accept-Encoding: gzip,deflate","User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) …"],"iocs":{"domains":["v4.ipv6-test.com"]}}},{"timestamp":"2026-09-10T12:48:28","port":12345,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"GET http://v4.ipv6-test.com/json/widgetdata.php?callback=? HTTP/1.1\r\n","payload_hex":"47455420687474703a2f2f76342e697076362d746573742e636f6d2f6a736f6e2f776964676574646174612e7068703f63616c6c6261636b3d3f20485454502f312e310d0a","method":"","user_agent":"","ja3":"","session":"295b2c9b-381d-421d-a3db-ddf10e4aef09","seq":1,"duration_ms":100,"bytes_in":69,"bytes_out":78,"enriched":{"digest":"4d62f701679776b0","label":"HTTP","strings":["GET http://v4.ipv6-test.com/json/widgetdata.php?callback=? HTTP/1.1"],"iocs":{"urls":["http://v4.ipv6-test.com/json/widgetdata.php?callback=?"],"domains":["v4.ipv6-test.com"],"paths":["/v4.ipv6-test.com/json/widgetdata.php"]}}},{"timestamp":"2026-09-10T12:48:27","port":12345,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT api4.my-ip.io:443 HTTP/1.1\r\nProxy-Authorization: Basic dGlja2V0czpwcm94eW9uMTQ1\r\n\r\n","payload_hex":"434f4e4e45435420617069342e6d792d69702e696f3a34343320485454502f312e310d0a50726f78792d417574686f72697a6174696f6e3a2042617369632064476c6a61325630637a7077636d3934655739754d5451310d0a0d0a","method":"","user_agent":"","ja3":"","session":"96fe926e-63e0-4749-aa40-014343aad2ff","seq":1,"duration_ms":100,"bytes_in":91,"bytes_out":13,"enriched":{"digest":"401330c16d853140","label":"HTTP","strings":["CONNECT api4.my-ip.io:443 HTTP/1.1","Proxy-Authorization: Basic dGlja2V0czpwcm94eW9uMTQ1"],"iocs":{"domains":["api4.my-ip.io"]}}},{"timestamp":"2026-09-10T12:48:26","port":12345,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Host: v4.ipv6-test.com\r\nProxy-Connection: keep-alive\r\nProxy-Authorization: Basic dGlja2V0czpwcm94eW9uMTQ1\r\nAccept-Encoding: gzip,deflate\r\nUser-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36\r\n\r\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"0d14136e-0f2d-499e-b7f7-bc3ea4621251","seq":2,"duration_ms":298,"bytes_in":323,"bytes_out":91,"enriched":{"digest":"3047cb1069809df9","strings":["Host: v4.ipv6-test.com","Proxy-Connection: keep-alive","Proxy-Authorization: Basic dGlja2V0czpwcm94eW9uMTQ1","Accept-Encoding: gzip,deflate","User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) …"],"iocs":{"domains":["v4.ipv6-test.com"]}}},{"timestamp":"2026-09-10T12:48:26","port":12345,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"GET http://v4.ipv6-test.com/json/widgetdata.php?callback=? HTTP/1.1\r\n","payload_hex":"47455420687474703a2f2f76342e697076362d746573742e636f6d2f6a736f6e2f776964676574646174612e7068703f63616c6c6261636b3d3f20485454502f312e310d0a","method":"","user_agent":"","ja3":"","session":"0d14136e-0f2d-499e-b7f7-bc3ea4621251","seq":1,"duration_ms":100,"bytes_in":69,"bytes_out":78,"enriched":{"digest":"4d62f701679776b0","label":"HTTP","strings":["GET http://v4.ipv6-test.com/json/widgetdata.php?callback=? HTTP/1.1"],"iocs":{"urls":["http://v4.ipv6-test.com/json/widgetdata.php?callback=?"],"domains":["v4.ipv6-test.com"],"paths":["/v4.ipv6-test.com/json/widgetdata.php"]}}},{"timestamp":"2026-09-10T12:48:16","port":12345,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Host: azenv.net\r\nProxy-Connection: keep-alive\r\nProxy-Authorization: Basic dGlja2V0czpwcm94eW9uMTQ1\r\nAccept-Encoding: gzip,deflate\r\nUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36\r\n\r\n","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"1db267d6-ec5b-44a3-814f-27565322a0dc","seq":2,"duration_ms":300,"bytes_in":286,"bytes_out":91,"enriched":{"digest":"c8f1a97793b5fc1f","strings":["Host: azenv.net","Proxy-Connection: keep-alive","Proxy-Authorization: Basic dGlja2V0czpwcm94eW9uMTQ1","Accept-Encoding: gzip,deflate","User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like …"],"iocs":{"domains":["azenv.net"]}}},{"timestamp":"2026-09-10T12:48:16","port":12345,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"GET http://azenv.net/ HTTP/1.1\r\n","payload_hex":"47455420687474703a2f2f617a656e762e6e65742f20485454502f312e310d0a","method":"","user_agent":"","ja3":"","session":"1db267d6-ec5b-44a3-814f-27565322a0dc","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":78,"enriched":{"digest":"dc096f65038a2a1f","label":"HTTP","strings":["GET http://azenv.net/ HTTP/1.1"],"iocs":{"urls":["http://azenv.net/"],"domains":["azenv.net"]}}},{"timestamp":"2026-09-10T12:48:15","port":12345,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Host: azenv.net\r\nProxy-Connection: keep-alive\r\nProxy-Authorization: Basic dGlja2V0czpwcm94eW9uMTQ1\r\nAccept-Encoding: gzip,deflate\r\nUser-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36\r\n\r\n","payload_hex":"486f73743a20617a656e762e6e65740d0a50726f78792d436f6e6e656374696f6e3a206b6565702d616c6976650d0a50726f78792d417574686f72697a6174696f6e3a2042617369632064476c6a61325630637a7077636d3934655739754d5451310d0a4163636570742d456e636f64696e673a20677a69702c6465666c6174650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e3129204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f34312e302e323232362e30205361666172692f3533372e33360d0a0d0a","method":"","user_agent":"","ja3":"","session":"26d553a7-1665-459a-990b-eea0a668afda","seq":2,"duration_ms":318,"bytes_in":279,"bytes_out":91,"enriched":{"digest":"2000f838d2fbb11a","strings":["Host: azenv.net","Proxy-Connection: keep-alive","Proxy-Authorization: Basic dGlja2V0czpwcm94eW9uMTQ1","Accept-Encoding: gzip,deflate","User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) …"],"iocs":{"domains":["azenv.net"]}}},{"timestamp":"2026-09-10T12:48:15","port":12345,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"GET http://azenv.net/ HTTP/1.1\r\n","payload_hex":"47455420687474703a2f2f617a656e762e6e65742f20485454502f312e310d0a","method":"","user_agent":"","ja3":"","session":"26d553a7-1665-459a-990b-eea0a668afda","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":78,"enriched":{"digest":"dc096f65038a2a1f","label":"HTTP","strings":["GET http://azenv.net/ HTTP/1.1"],"iocs":{"urls":["http://azenv.net/"],"domains":["azenv.net"]}}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-22T01:43:30.139780+00:00"}