{"ip":"104.28.246.124","total_events":178,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["178 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 8,803 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"8,803 bytes sent","bytes_sent":8803,"session_seconds":0,"persistent":false}},"first_seen":"2026-03-05T00:40:11","last_seen":"2026-08-28T09:12:19","events_24h":0,"events_7d":52,"geo":{"country_code":"RU","country_name":"Russia","region":"Nizhny Novgorod Oblast","city":"Nizhniy Novgorod","lat":56.3327,"lon":44.0012,"asn":13335,"org":"Cloudflare, Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as13335","label":"Cloudflare","category":"cdn","url":"https://www.peeringdb.com/asn/13335"},"cve_matches":[],"malware":[],"top_ports":[{"port":37777,"proto":"tcp","label":"","count":104},{"port":8000,"proto":"tcp","label":"HTTP-alt","count":74}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-01","count":2},{"date":"2026-08-02","count":8},{"date":"2026-08-03","count":58},{"date":"2026-08-04","count":14},{"date":"2026-08-05","count":22},{"date":"2026-08-27","count":22},{"date":"2026-08-28","count":30}],"recent_events":[{"timestamp":"2026-08-28T09:12:19","port":8000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000 c\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"0000002063000000000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"74c9892a-3291-4c82-8946-2e8c81ce1700","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":14},{"timestamp":"2026-08-28T08:58:07","port":8000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000 c\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"0000002063000000000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"630f9ffc-ae54-4335-8412-5389a9d6d5eb","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":14},{"timestamp":"2026-08-28T08:34:26","port":8000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000 c\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"0000002063000000000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"a6e488a3-4b0a-4d54-a173-5ab11244d87e","seq":1,"duration_ms":101,"bytes_in":32,"bytes_out":14},{"timestamp":"2026-08-28T08:06:17","port":8000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000 c\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"0000002063000000000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"685939e7-c032-4c41-afe9-c40d3cdcb271","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":14},{"timestamp":"2026-08-28T07:56:01","port":8000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000 c\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"0000002063000000000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"40cb74d7-e4e4-4a17-ae58-92e3ef09c8b7","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":14},{"timestamp":"2026-08-28T07:42:22","port":8000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000 c\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"0000002063000000000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"9e0f019f-a942-4a60-83bc-0ed0b4bb5b5b","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":14},{"timestamp":"2026-08-28T07:22:17","port":8000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000 c\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"0000002063000000000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"78f14e32-bb23-4c28-b698-b66085c1aa17","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":14},{"timestamp":"2026-08-28T06:43:07","port":8000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000 c\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"0000002063000000000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"87bc4ff0-8ce3-41a3-8d11-82432ccab92d","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":14},{"timestamp":"2026-08-28T06:42:29","port":8000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000 c\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"0000002063000000000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"185772ec-271e-4eee-8230-e0cd1213372f","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":14},{"timestamp":"2026-08-28T05:19:13","port":8000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000 c\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"0000002063000000000000000000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"761362bc-c263-4701-90c1-ef44abccc5d6","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":14}],"http_methods":[],"distinct_ports_total":2,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-31T23:16:46.064408+00:00"}