{"ip":"176.108.192.196","observed":true,"total_events":33,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"33+ ports swept","confidence":"medium","network_type":"residential ISP","why":["No exploit payloads observed.","Swept 33 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"132 bytes sent","bytes_sent":132,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-15T10:51:02","last_seen":"2026-10-15T10:51:02","events_24h":0,"events_7d":33,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"RU","country_name":"Russia","region":"Moscow Oblast","city":"Yegor'yevsk","lat":55.3741,"lon":39.0379,"asn":47914,"org":"OOO Creative Direct Marketing Solutions"},"source_domain":"176-108-192-196.static.ip-home.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as47914","label":"IP-Home","category":"isp","url":"https://www.peeringdb.com/asn/47914"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":10080,"proto":"tcp","label":"","count":1},{"port":1083,"proto":"tcp","label":"","count":1},{"port":9090,"proto":"tcp","label":"Prometheus","count":1},{"port":1086,"proto":"tcp","label":"","count":1},{"port":1084,"proto":"tcp","label":"","count":1},{"port":7777,"proto":"tcp","label":"Oracle","count":1},{"port":9999,"proto":"tcp","label":"","count":1},{"port":10800,"proto":"tcp","label":"","count":1},{"port":10813,"proto":"tcp","label":"","count":1},{"port":1089,"proto":"tcp","label":"","count":1},{"port":10818,"proto":"tcp","label":"","count":1},{"port":10810,"proto":"tcp","label":"","count":1},{"port":8889,"proto":"tcp","label":"","count":1},{"port":10808,"proto":"tcp","label":"","count":1},{"port":7891,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-15","count":33}],"recent_events":[{"timestamp":"2026-10-15T10:51:02","port":7778,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0002\u0000\u0002","payload_hex":"05020002","method":"","user_agent":"","ja3":"","session":"e41a86b1-0488-4a48-b492-e773a17893b1","seq":1,"duration_ms":102,"bytes_in":4,"bytes_out":15,"enriched":{"digest":"bb32f1da18a34784","label":"SOCKS5"}},{"timestamp":"2026-10-15T10:51:02","port":10810,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0002\u0000\u0002","payload_hex":"05020002","method":"","user_agent":"","ja3":"","session":"ca54e1f9-79ef-4b96-a72a-9717e4e6cfd8","seq":1,"duration_ms":106,"bytes_in":4,"bytes_out":15,"enriched":{"digest":"bb32f1da18a34784","label":"SOCKS5"}},{"timestamp":"2026-10-15T10:51:02","port":10818,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0002\u0000\u0002","payload_hex":"05020002","method":"","user_agent":"","ja3":"","session":"ada858dd-8300-4dcc-bed6-b348f2dfce24","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":15,"enriched":{"digest":"bb32f1da18a34784","label":"SOCKS5"}},{"timestamp":"2026-10-15T10:51:02","port":9090,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0002\u0000\u0002","payload_hex":"05020002","method":"","user_agent":"","ja3":"","session":"682d70d7-fa1c-4dd5-a52d-1a5be80e72dd","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":15,"enriched":{"digest":"bb32f1da18a34784","label":"SOCKS5"}},{"timestamp":"2026-10-15T10:51:02","port":10816,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0002\u0000\u0002","payload_hex":"05020002","method":"","user_agent":"","ja3":"","session":"24e54600-31d5-4f7b-b2fe-a08e86095bfd","seq":1,"duration_ms":103,"bytes_in":4,"bytes_out":15,"enriched":{"digest":"bb32f1da18a34784","label":"SOCKS5"}},{"timestamp":"2026-10-15T10:51:02","port":10814,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0002\u0000\u0002","payload_hex":"05020002","method":"","user_agent":"","ja3":"","session":"fad4ea5c-1f4c-4035-8a30-b4b116396c36","seq":1,"duration_ms":103,"bytes_in":4,"bytes_out":15,"enriched":{"digest":"bb32f1da18a34784","label":"SOCKS5"}},{"timestamp":"2026-10-15T10:51:02","port":10808,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0002\u0000\u0002","payload_hex":"05020002","method":"","user_agent":"","ja3":"","session":"0af93c80-3888-4f69-a1fe-0518e2690ca4","seq":1,"duration_ms":105,"bytes_in":4,"bytes_out":15,"enriched":{"digest":"bb32f1da18a34784","label":"SOCKS5"}},{"timestamp":"2026-10-15T10:51:02","port":10811,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0002\u0000\u0002","payload_hex":"05020002","method":"","user_agent":"","ja3":"","session":"e7c590dd-92e2-455f-8aa7-793e2ad4a547","seq":1,"duration_ms":104,"bytes_in":4,"bytes_out":15,"enriched":{"digest":"bb32f1da18a34784","label":"SOCKS5"}},{"timestamp":"2026-10-15T10:51:02","port":10819,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0002\u0000\u0002","payload_hex":"05020002","method":"","user_agent":"","ja3":"","session":"f5dfbf50-7624-467e-afcd-638c92ac5a09","seq":1,"duration_ms":104,"bytes_in":4,"bytes_out":15,"enriched":{"digest":"bb32f1da18a34784","label":"SOCKS5"}},{"timestamp":"2026-10-15T10:51:02","port":9999,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0002\u0000\u0002","payload_hex":"05020002","method":"","user_agent":"","ja3":"","session":"1ded502e-3f60-4cc6-b127-915d92c8a978","seq":1,"duration_ms":105,"bytes_in":4,"bytes_out":15,"enriched":{"digest":"bb32f1da18a34784","label":"SOCKS5"}}],"http_methods":[],"distinct_ports_total":33,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-16T18:43:12.671494+00:00"}