{"ip":"73.178.155.146","total_events":28,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["28 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,632 bytes sent","bytes_sent":2632,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-10T02:21:33","last_seen":"2026-09-07T00:11:03","events_24h":0,"events_7d":18,"geo":{"country_code":"US","country_name":"United States","region":"New Jersey","city":"Mantua","lat":39.7938,"lon":-75.1641,"asn":7922,"org":"Comcast Cable Communications, LLC"},"source_domain":"c-73-178-155-146.hsd1.nj.comcast.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as7922","label":"Comcast","category":"isp","url":"https://www.peeringdb.com/asn/7922"},"cve_matches":[],"malware":[],"top_ports":[{"port":1433,"proto":"tcp","label":"MSSQL","count":10},{"port":4243,"proto":"tcp","label":"","count":6},{"port":4242,"proto":"tcp","label":"","count":3},{"port":4241,"proto":"tcp","label":"","count":3},{"port":4244,"proto":"tcp","label":"","count":3},{"port":1434,"proto":"tcp","label":"MSSQL","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-10","count":7},{"date":"2026-07-16","count":3},{"date":"2026-09-06","count":15},{"date":"2026-09-07","count":3}],"recent_events":[{"timestamp":"2026-09-07T00:11:03","port":4242,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0011�\u0000\u0000\u0000\u0000\u0000\bO0\u0000�e�K�\u001b�B���T��Y�/�\u0004-�+A��8\u0012�W�R\u0003\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040811e90000000000084f3000c265c44bf51b824292e5ee54c5e059f92f93047f2d802b4193d23812855798520300000001","method":"","user_agent":"","ja3":"","session":"352de1b1-04ac-4ebb-b7d9-bb175cc4fd52","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":14},{"timestamp":"2026-09-07T00:11:01","port":4242,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0011�\u0000\u0000\u0000\u0000\u0000\bO0\u0000�J�@�C�C��d�\u0007��Y/�\u0004-�+A��8\u0012�W�R\u0002\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040811e90000000000084f3000a94ad14084438a43bb9264b207a9a6592f93047f2d802b4193d23812855798520200000001","method":"","user_agent":"","ja3":"","session":"7b215010-ebd3-4fd5-a6a1-f9b808293cc0","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":14},{"timestamp":"2026-09-07T00:11:01","port":4242,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0011�\u0000\u0000\u0000\u0000\u0000\bO0\u0000��ڊ\u0013��B�97\u001cE��B/�\u0004-�+A��8\u0012�W�R\u0001\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040811e90000000000084f3000bef4da8a13ccff42a639371c45be99422f93047f2d802b4193d23812855798520100000001","method":"","user_agent":"","ja3":"","session":"953f045d-e67b-4791-89d5-e1eb19ca6fef","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":14},{"timestamp":"2026-09-06T23:37:18","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0011�\u0000\u0000\u0000\u0000\u0000\r�|\u0000�\\HZ�\u0007dB����\u0010�fQ�^�o�:\nD��|\u001aT���\u0003\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040811e900000000000de67c00f75c485aab076442a0aff6f9109e66519c5ebd6fbd3a0a44a7e67c1a54f7dae40300000001","method":"","user_agent":"","ja3":"","session":"1d5f11bb-c949-47e5-a61d-7909ac99270a","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":14},{"timestamp":"2026-09-06T23:37:16","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0011�\u0000\u0000\u0000\u0000\u0000\r�|\u0000��pA[V|O�v�So����^�o�:\nD��|\u001aT���\u0002\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040811e900000000000de67c008b8e70415b567c4fb576a0536f91bf979c5ebd6fbd3a0a44a7e67c1a54f7dae40200000001","method":"","user_agent":"","ja3":"","session":"770da3f3-3d1b-4737-964e-b1fc2b84fac1","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":14,"enriched":{"digest":"c21cccabc4fb44e8","strings":["pA[V|O"]}},{"timestamp":"2026-09-06T23:37:16","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0011�\u0000\u0000\u0000\u0000\u0000\r�|\u0000����x��M����%�tU�^�o�:\nD��|\u001aT���\u0001\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040811e900000000000de67c00a79eecb678dff54dbaa8a6dc259474559c5ebd6fbd3a0a44a7e67c1a54f7dae40100000001","method":"","user_agent":"","ja3":"","session":"26361b68-3b42-4f6d-8895-b2a9ab3f4c12","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":14},{"timestamp":"2026-09-06T23:19:45","port":4241,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0011�\u0000\u0000\u0000\u0000\u0000\n��\u0000}\u0017�QN\u0015�K�t�D��X�|S����#O��-�\b�\u00194\u0003\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040811e900000000000a9890007d17b1514e15e24b9874c044ddd358927c53b78dadfc234f90c02df008e619340300000001","method":"","user_agent":"","ja3":"","session":"4f01af4d-a0cb-4095-b85f-0fb4c82f3963","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":14},{"timestamp":"2026-09-06T23:19:43","port":4241,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0011�\u0000\u0000\u0000\u0000\u0000\n��\u0000\u001c��%\nR�O�]%��F)�|S����#O��-�\b�\u00194\u0002\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040811e900000000000a9890001cacb0250a529d4fbf5d25c7f24629997c53b78dadfc234f90c02df008e619340200000001","method":"","user_agent":"","ja3":"","session":"4261bcf1-ce4b-486e-9570-8e387600f27e","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":14},{"timestamp":"2026-09-06T23:19:43","port":4241,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0011�\u0000\u0000\u0000\u0000\u0000\n��\u0000\fT�j��9L��0���4*|S����#O��-�\b�\u00194\u0001\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040811e900000000000a9890000c54f56a9394394cb38130def6f4342a7c53b78dadfc234f90c02df008e619340100000001","method":"","user_agent":"","ja3":"","session":"b88f5e69-766a-41e1-bee9-0bf2cfb3fff6","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":14,"enriched":{"digest":"e3b08bcdf49c01bd","strings":["4*|S"]}},{"timestamp":"2026-09-06T23:12:14","port":1434,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0011�\u0000\u0000\u0000\u0000\u0000\t\u001f|\u0000�p�E�M\u0015B��2��\u0014-�V�\u0007z\u0017y\rF��v~$ ��\u0003\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040811e90000000000091f7c00fe70a545b24d1542948932d5f3142df0569b077a17790d46bae3767e2420d4ca0300000001","method":"","user_agent":"","ja3":"","session":"4575f723-69a9-4902-a4b9-f67a52ee278d","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":14}],"http_methods":[],"distinct_ports_total":6,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T08:57:52.999867+00:00"}