{"ip":"47.242.232.174","total_events":181,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["181 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 28,236 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"28,236 bytes sent","bytes_sent":28236,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-15T02:06:09","last_seen":"2026-09-26T04:07:05","events_24h":0,"events_7d":31,"geo":{"country_code":"HK","country_name":"Hong Kong","region":"","city":"Hong Kong","lat":22.2842,"lon":114.1759,"asn":45102,"org":"Alibaba (US) Technology Co., Ltd."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as45102","label":"Alibaba","category":"cdn","url":"https://www.peeringdb.com/asn/45102"},"cve_matches":[],"malware":[],"top_ports":[{"port":1723,"proto":"tcp","label":"PPTP","count":181}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-15","count":150},{"date":"2026-09-26","count":31}],"recent_events":[{"timestamp":"2026-09-26T04:07:05","port":1723,"proto":"tcp","app_proto":"","app_protocol":"pptp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000�\u0000\u0001\u001a+