{"ip":"168.194.167.163","total_events":47068,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"47,068 events across 1 port(s)","confidence":"high","network_type":"nsp","why":["47,068 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range.","Held a session open for 13297s, against a median of well under a second."],"engagement":{"level":"payload","label":"Sustained payload, held open","detail":"7,569,936,451 bytes sent, longest session 13297s","bytes_sent":7569936451,"session_seconds":13297,"persistent":true}},"first_seen":"2026-08-16T16:06:43","last_seen":"2026-08-16T19:48:20","events_24h":0,"events_7d":47068,"geo":{"country_code":"BR","country_name":"Brazil","region":"Rio de Janeiro","city":"Rio de Janeiro","lat":-22.9201,"lon":-43.0811,"asn":265393,"org":"FIRENET SERVICOS DE TELECOMUNICACOES LTDA"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as265393","label":"FIRENET SERVIÇOS DE TELECOMUNICAÇÕES LTDA","category":"isp","url":"https://www.peeringdb.com/asn/265393"},"cve_matches":[],"malware":[],"top_ports":[{"port":8080,"proto":"tcp","label":"HTTP-alt","count":47068}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-16","count":47068}],"recent_events":[{"timestamp":"2026-08-16T19:48:20","port":8080,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�QW","payload_hex":"ea5157","method":"","user_agent":"","ja3":"","session":"705967eb-f913-45b9-b8fd-06dd95296b3c","seq":46567,"duration_ms":13296579,"bytes_in":317964,"bytes_out":698455},{"timestamp":"2026-08-16T19:48:09","port":8080,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��TO���/","payload_hex":"e3a1544f9be2c52f","method":"","user_agent":"","ja3":"","session":"705967eb-f913-45b9-b8fd-06dd95296b3c","seq":46566,"duration_ms":13285459,"bytes_in":317961,"bytes_out":698440},{"timestamp":"2026-08-16T19:47:59","port":8080,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"s�xG��;n�=","payload_hex":"73a97847c8ca3b6ec13d","method":"","user_agent":"","ja3":"","session":"705967eb-f913-45b9-b8fd-06dd95296b3c","seq":46565,"duration_ms":13275727,"bytes_in":317953,"bytes_out":698425},{"timestamp":"2026-08-16T19:47:53","port":8080,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"p��y","payload_hex":"70b1c879","method":"","user_agent":"","ja3":"","session":"705967eb-f913-45b9-b8fd-06dd95296b3c","seq":46564,"duration_ms":13270105,"bytes_in":317943,"bytes_out":698410},{"timestamp":"2026-08-16T19:47:48","port":8080,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0017�b\u0010�","payload_hex":"e717bc6210c6","method":"","user_agent":"","ja3":"","session":"705967eb-f913-45b9-b8fd-06dd95296b3c","seq":46563,"duration_ms":13264699,"bytes_in":317939,"bytes_out":698395},{"timestamp":"2026-08-16T19:47:45","port":8080,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":",��|4","payload_hex":"2c92d27c34","method":"","user_agent":"","ja3":"","session":"705967eb-f913-45b9-b8fd-06dd95296b3c","seq":46562,"duration_ms":13261816,"bytes_in":317933,"bytes_out":698380},{"timestamp":"2026-08-16T19:47:43","port":8080,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"gk�,","payload_hex":"676b9f2c","method":"","user_agent":"","ja3":"","session":"705967eb-f913-45b9-b8fd-06dd95296b3c","seq":46561,"duration_ms":13259648,"bytes_in":317928,"bytes_out":698365},{"timestamp":"2026-08-16T19:47:41","port":8080,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�!� �뱉�g","payload_hex":"e321ef20b5ebb1898267","method":"","user_agent":"","ja3":"","session":"705967eb-f913-45b9-b8fd-06dd95296b3c","seq":46560,"duration_ms":13257792,"bytes_in":317924,"bytes_out":698350},{"timestamp":"2026-08-16T19:47:40","port":8080,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"m�JY\n;\n\u001a","payload_hex":"6def4a590a3b0a1a","method":"","user_agent":"","ja3":"","session":"705967eb-f913-45b9-b8fd-06dd95296b3c","seq":46559,"duration_ms":13256436,"bytes_in":317914,"bytes_out":698335},{"timestamp":"2026-08-16T19:47:39","port":8080,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�p�w�B|��","payload_hex":"b970e47788427ce982","method":"","user_agent":"","ja3":"","session":"705967eb-f913-45b9-b8fd-06dd95296b3c","seq":46558,"duration_ms":13255704,"bytes_in":317906,"bytes_out":698320}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-21T00:32:36.139118+00:00"}