{"ip":"179.125.245.108","total_events":99890,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"99,890 events across 1 port(s)","confidence":"high","network_type":"residential ISP","why":["99,890 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range.","Held a session open for 14306s, against a median of well under a second."],"engagement":{"level":"payload","label":"Sustained payload, held open","detail":"169,939,626,438 bytes sent, longest session 14306s","bytes_sent":169939626438,"session_seconds":14306,"persistent":true}},"first_seen":"2026-08-17T14:38:04","last_seen":"2026-08-17T18:36:30","events_24h":0,"events_7d":99890,"geo":{"country_code":"BR","country_name":"Brazil","region":"São Paulo","city":"Campinas","lat":-22.8951,"lon":-47.0439,"asn":28649,"org":"Desktop Sigmanet Comunicacao Multimidia SA"},"source_domain":"179-125-245-108.shared.desktop.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28649","label":"Desktop Sigmanet Comunicação Multimídia Ltda","category":"isp","url":"https://www.peeringdb.com/asn/28649"},"cve_matches":[],"malware":[],"top_ports":[{"port":22,"proto":"tcp","label":"SSH","count":99890}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-17","count":99890}],"recent_events":[{"timestamp":"2026-08-17T18:36:30","port":22,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"jk�x��{v��Kt�i�֣���,�~V%W�78'�����@","payload_hex":"6a6bd278f3b67b76a4934b74a269a9d6a3a79fd92cd97e562557dc373827a29f8cfc9b40","method":"","user_agent":"","ja3":"","session":"1254af16-fe04-4526-9265-5392dbd8f8dd","seq":99255,"duration_ms":14306178,"bytes_in":3723149,"bytes_out":1488635,"enriched":{"digest":"2a32a1d70fffd01c","strings":["~V%W"]}},{"timestamp":"2026-08-17T18:36:30","port":22,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"?]\u0007���\u0004��v�\u0010e\u0010\u000b������c�J�L\u001e��|\u0003�7�mC1�>\bg�T�}�","payload_hex":"3f5d07caf98704efea76c31065100ba488f7e3a2c163f34aef4c1ed3f87c03c937ce6d4331973e0867eb54b67de7","method":"","user_agent":"","ja3":"","session":"1254af16-fe04-4526-9265-5392dbd8f8dd","seq":99254,"duration_ms":14306062,"bytes_in":3723113,"bytes_out":1488620},{"timestamp":"2026-08-17T18:36:30","port":22,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u000e2��~D�.̋\u001e\u0006J\t\u000fys���ʟq*d�1�GuF2\f)-��8\u001b��\b\u0017\u001fE�r�+\\�Y�","payload_hex":"99fd0e3294937e44d32ecc8b1e064a090f79739fef99ca9f712a64c33188477546320c292da3d9381bb18808171f45d672982b5cb759ee","method":"","user_agent":"","ja3":"","session":"1254af16-fe04-4526-9265-5392dbd8f8dd","seq":99253,"duration_ms":14305942,"bytes_in":3723067,"bytes_out":1488605,"enriched":{"digest":"4f2239ce8f8f40b6","strings":["GuF2"]}},{"timestamp":"2026-08-17T18:36:30","port":22,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�F�V\u0002��E�\u0012�8�X]\n�\u0000D��.\u0018���\r��\\-Q�Z|���{�$f`\u0017�����C\u0007-K:�","payload_hex":"e846ad5602eecf45ac128b38f3585d0a980044f1982e18d8c9f60dbee05c2d51df5a7cebe4e07ba224666017f7eae2daef43072d4b3ac4","method":"","user_agent":"","ja3":"","session":"1254af16-fe04-4526-9265-5392dbd8f8dd","seq":99252,"duration_ms":14305837,"bytes_in":3723012,"bytes_out":1488590},{"timestamp":"2026-08-17T18:36:30","port":22,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"A\ry#��!\u001e�\u0001��������:\t�F��\u0013�\u0011\u0016���~b���","payload_hex":"410d792394cb211ecc01d9fde7efc09aadf83a09fe46f5c313d31116b2f7957e62939ef9","method":"","user_agent":"","ja3":"","session":"1254af16-fe04-4526-9265-5392dbd8f8dd","seq":99251,"duration_ms":14305721,"bytes_in":3722957,"bytes_out":1488575},{"timestamp":"2026-08-17T18:36:29","port":22,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"#|Қ\u0015���@�D�,.�u��k`ݼ�R\u0019��(","payload_hex":"237cd29a15eaacd140a544e02c2eb0759ec36b60ddbcf25219c3de28","method":"","user_agent":"","ja3":"","session":"1254af16-fe04-4526-9265-5392dbd8f8dd","seq":99250,"duration_ms":14305609,"bytes_in":3722921,"bytes_out":1488560},{"timestamp":"2026-08-17T18:36:29","port":22,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0002LK��qd}q��D\u000f�.S\u0000���","payload_hex":"b7024c4bbbb871647d71e7f5440fbf2e5300cfe0ee","method":"","user_agent":"","ja3":"","session":"1254af16-fe04-4526-9265-5392dbd8f8dd","seq":99249,"duration_ms":14305489,"bytes_in":3722893,"bytes_out":1488545,"enriched":{"digest":"adb1c9cbba4e7325","strings":["qd}q"]}},{"timestamp":"2026-08-17T18:36:29","port":22,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0017���\f���\u000f`�A-\u0003H\u0000ct٫p��`","payload_hex":"17e5f2f30c8489ee0f60a9412d0348006374d9ab70f0ae60","method":"","user_agent":"","ja3":"","session":"1254af16-fe04-4526-9265-5392dbd8f8dd","seq":99248,"duration_ms":14305379,"bytes_in":3722872,"bytes_out":1488530},{"timestamp":"2026-08-17T18:36:29","port":22,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�#��\\2@��>E�����:�����x\u001cY��mj}��৥.1�\u0015","payload_hex":"b4238efd5c3240e2cf3e45a3b1e9eab43ab1acaaf9ab781c59e2c76d6a7dbfd3e0a7a52e31ec15","method":"","user_agent":"","ja3":"","session":"1254af16-fe04-4526-9265-5392dbd8f8dd","seq":99247,"duration_ms":14305274,"bytes_in":3722848,"bytes_out":1488515},{"timestamp":"2026-08-17T18:36:29","port":22,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�=�iڀ�\u0005U���\r���+�\u0012p���q�Ma�\u0016/��`�%�","payload_hex":"b63dc569da80a40555d1c8f00dcbcdf12bff1270c4edb5718a4d617ff9162ff99360b525ea","method":"","user_agent":"","ja3":"","session":"1254af16-fe04-4526-9265-5392dbd8f8dd","seq":99246,"duration_ms":14305170,"bytes_in":3722809,"bytes_out":1488500}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-21T00:33:09.771749+00:00"}