{"ip":"84.17.57.118","total_events":2,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["2 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"touch","label":"Touch only","detail":"18 bytes sent, no real exchange","bytes_sent":18,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-27T22:48:00","last_seen":"2026-08-27T22:48:39","events_24h":0,"events_7d":0,"geo":{"country_code":"HK","country_name":"Hong Kong","region":"","city":"Hong Kong","lat":22.2842,"lon":114.1759,"asn":60068,"org":"Datacamp Limited"},"source_domain":"unn-84-17-57-118.cdn77.com","known_scanners":[],"scanner_tag":{"key":"peeringdb:as60068","label":"CDN77","category":"cdn","url":"https://www.peeringdb.com/asn/60068"},"cve_matches":[],"malware":[],"top_ports":[{"port":6380,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i171000_ab0a1bf427ad_8e6e362c5eac"],"tls_client_hello":"","tls_ja3":["dbb158bbf02cb040164d288c9b1d8492"],"http_akin":[]},"fingerprint_peers":{"t13i171000_ab0a1bf427ad_8e6e362c5eac":87},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-08-27","count":2}],"recent_events":[{"timestamp":"2026-08-27T22:48:39","port":6380,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"HELLO 3\r\n","payload_hex":"48454c4c4f20330d0a","method":"","user_agent":"","ja3":"dbb158bbf02cb040164d288c9b1d8492","session":"e763489c-add5-4b25-a90b-c7f141d394ce","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":5,"enriched":{"digest":"959228dbdecb153a","strings":["HELLO 3"]}},{"timestamp":"2026-08-27T22:48:00","port":6380,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"HELLO 3\r\n","payload_hex":"48454c4c4f20330d0a","method":"","user_agent":"","ja3":"dbb158bbf02cb040164d288c9b1d8492","session":"43dec5f9-ffdb-4d85-8d49-c95cf3296283","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":5,"enriched":{"digest":"959228dbdecb153a","strings":["HELLO 3"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-24T12:58:44.604519+00:00"}