{"ip":"60.220.161.192","total_events":12,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["12 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"772 bytes sent","bytes_sent":772,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-09T17:35:28","last_seen":"2026-08-09T17:37:34","events_24h":0,"events_7d":12,"geo":{"country_code":"CN","country_name":"China","region":"","city":"","lat":34.7732,"lon":113.722,"asn":4837,"org":"CHINA UNICOM China169 Backbone"},"source_domain":"192.161.220.60.adsl-pool.sx.cn","known_scanners":[],"scanner_tag":{"key":"peeringdb:as4837","label":"China Unicom","category":"isp","url":"https://www.peeringdb.com/asn/4837"},"cve_matches":[],"malware":[],"top_ports":[{"port":8888,"proto":"tcp","label":"HTTP-alt","count":12}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i191000_9dc949149365_e5728521abd4"],"tls_ja3":["96458b3de39df5d47bc5c4a9f10f8f26"],"ja4h":[]},"fingerprint_peers":{"t13i191000_9dc949149365_e5728521abd4":161},"user_agents":[],"timeline":[{"date":"2026-08-09","count":12}],"recent_events":[{"timestamp":"2026-08-09T17:37:34","port":8888,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"9475641c-839e-461e-8dac-204640c4fa55","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-08-09T17:37:28","port":8888,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"30f69456-1d8b-41e8-ac1a-b29724ffc342","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-08-09T17:37:22","port":8888,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"0bfcb740-5099-488c-9495-5ff70e8852d8","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-08-09T17:37:16","port":8888,"proto":"tcp","app_proto":"tls","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"96458b3de39df5d47bc5c4a9f10f8f26","session":"1974184e-d054-4117-b2ac-abbe41e1779b","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-08-09T17:37:04","port":8888,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"c6e5f6ad-f829-4fd4-8daa-c593b51877e0","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-08-09T17:36:57","port":8888,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"5e894dc4-ffe6-4b81-a1e3-770d677fcc01","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-08-09T17:36:52","port":8888,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"9983fa10-9f6b-413e-a6bd-f54fe2d87aa4","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-08-09T17:36:45","port":8888,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.baidu.com:443 HTTP/1.1\r\nHost: www.baidu.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e454354207777772e62616964752e636f6d3a34343320485454502f312e310d0a486f73743a207777772e62616964752e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"7c006583-1cc1-46c6-bb4e-8360d7be4bce","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"e92c59ea0db6e130","label":"HTTP","strings":["CONNECT www.baidu.com:443 HTTP/1.1","Host: www.baidu.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["www.baidu.com"]}}},{"timestamp":"2026-08-09T17:35:53","port":8888,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"e17a9ac4-d74f-49de-9b20-8dcee4f73860","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":14,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-08-09T17:35:52","port":8888,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"131449d2-f468-41ab-b330-c9b2ddd31961","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":14,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T16:54:27.157091+00:00"}