{"ip":"49.206.196.18","total_events":96,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["96 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"3,936 bytes sent","bytes_sent":3936,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-18T09:20:57","last_seen":"2026-09-10T13:13:58","events_24h":6,"events_7d":24,"geo":{"country_code":"IN","country_name":"India","region":"Telangana","city":"Hyderabad","lat":17.3843,"lon":78.4583,"asn":55577,"org":"Atria Convergence Technologies Ltd.,"},"source_domain":"49.206.196.18.actcorp.in","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":1433,"proto":"tcp","label":"MSSQL","count":96}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-18","count":6},{"date":"2026-08-19","count":6},{"date":"2026-08-20","count":6},{"date":"2026-08-21","count":6},{"date":"2026-08-24","count":6},{"date":"2026-08-25","count":6},{"date":"2026-08-27","count":6},{"date":"2026-08-28","count":6},{"date":"2026-08-29","count":6},{"date":"2026-08-31","count":6},{"date":"2026-09-01","count":6},{"date":"2026-09-02","count":6},{"date":"2026-09-07","count":6},{"date":"2026-09-09","count":12},{"date":"2026-09-10","count":6}],"recent_events":[{"timestamp":"2026-09-10T13:13:58","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�F\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000e0460000","method":"","user_agent":"","ja3":"","session":"12f80400-3fbe-4a1b-b29a-1416d9654c46","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-10T13:13:47","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�F\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000e0460000","method":"","user_agent":"","ja3":"","session":"f2ab2d82-6881-4d20-90b5-0e19b44bc3b4","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-10T13:13:37","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�F\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000e0460000","method":"","user_agent":"","ja3":"","session":"d2cfc748-6527-454f-aa9c-11180778f13e","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-10T13:13:26","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�F\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000e0460000","method":"","user_agent":"","ja3":"","session":"de408cfb-3cd4-4d15-9c1b-346242871156","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-10T13:13:15","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�F\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000e0460000","method":"","user_agent":"","ja3":"","session":"e4a34796-9b22-48e7-8fa0-bbe364e42b73","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-10T13:13:05","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�F\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000e0460000","method":"","user_agent":"","ja3":"","session":"f03be193-9ca6-4e6d-a9dd-a4a4e905992c","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-09T11:39:16","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000TD\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000054440000","method":"","user_agent":"","ja3":"","session":"789cd7eb-46d8-4d4c-b1ed-59b1d369a78e","seq":1,"duration_ms":101,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-09T11:39:05","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000TD\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000054440000","method":"","user_agent":"","ja3":"","session":"af96f378-f7e4-4eff-998d-c9ff4ead842c","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-09T11:38:55","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000TD\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000054440000","method":"","user_agent":"","ja3":"","session":"59b3a198-7bbc-4cea-8029-f133fa8cdd34","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13},{"timestamp":"2026-09-09T11:38:44","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000TD\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000054440000","method":"","user_agent":"","ja3":"","session":"1081aa76-56cc-4bc8-a548-e2249c1c556e","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":13}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T08:57:12.708447+00:00"}