{"ip":"93.55.131.70","total_events":12,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["12 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"552 bytes sent","bytes_sent":552,"session_seconds":0,"persistent":false}},"first_seen":"2026-06-22T03:33:35","last_seen":"2026-09-15T02:38:51","events_24h":0,"events_7d":3,"geo":{"country_code":"IT","country_name":"Italy","region":"Campania","city":"Naples","lat":40.8449,"lon":14.2716,"asn":12874,"org":"Fastweb"},"source_domain":"93-55-131-70.ip263.fastwebnet.it","known_scanners":[],"scanner_tag":{"key":"peeringdb:as12874","label":"Fastweb","category":"isp","url":"https://www.peeringdb.com/asn/12874"},"cve_matches":[],"malware":[],"top_ports":[{"port":1433,"proto":"tcp","label":"MSSQL","count":6},{"port":445,"proto":"tcp","label":"SMB","count":6}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-06-22","count":2},{"date":"2026-07-10","count":2},{"date":"2026-07-11","count":2},{"date":"2026-09-05","count":3},{"date":"2026-09-15","count":3}],"recent_events":[{"timestamp":"2026-09-15T02:38:51","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u00004\u0016\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000034160000","method":"","user_agent":"","ja3":"","session":"b63e4506-0de4-407e-89e4-37a13f55b4ad","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-09-15T02:38:40","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u00004\u0016\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000034160000","method":"","user_agent":"","ja3":"","session":"f5bdb4d2-9479-43da-9463-11c2e6528e0c","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-09-15T02:38:30","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u00004\u0016\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000034160000","method":"","user_agent":"","ja3":"","session":"3249e1ea-3da3-482a-bb75-78fce2eb701d","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-09-05T13:54:58","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000$0\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000024300000","method":"","user_agent":"","ja3":"","session":"7360a079-bc0e-454e-95f2-f3ee850ad9c3","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-09-05T13:54:47","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000$0\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000024300000","method":"","user_agent":"","ja3":"","session":"c90e01ca-5dc1-405b-9356-13c98e69a660","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-09-05T13:54:36","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000$0\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000024300000","method":"","user_agent":"","ja3":"","session":"64e3154d-f419-475d-8d16-2059a42c2933","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-07-11T13:50:03","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��X\u0013\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff581300000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"9e754a60-2ef2-4fc7-82f5-e2c3980df721","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":12,"enriched":{"digest":"5f323185f8269737","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-07-11T13:50:03","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��X\u0013\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff581300000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"cbc39dd9-4951-4406-9e5e-8165d1b9321e","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":12,"enriched":{"digest":"5f323185f8269737","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-07-10T21:47:36","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���\u001f\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff8c1f00000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"94c0e559-840c-4fa7-9fd4-57068e26772c","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":12,"enriched":{"digest":"e688f59bb8554af0","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-07-10T21:47:35","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���\u001f\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffff8c1f00000000000c00024e54204c4d20302e313200","method":"","user_agent":"","ja3":"","session":"cb735780-3c33-4db6-a4ff-d15cdc800e5d","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":12,"enriched":{"digest":"e688f59bb8554af0","strings":["SMBr","NT LM 0.12"]}}],"http_methods":[],"distinct_ports_total":2,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-17T12:12:33.203189+00:00"}