{"ip":"188.48.181.12","total_events":7,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["7 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,155 bytes sent","bytes_sent":2155,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-26T21:13:56","last_seen":"2026-07-27T19:00:08","events_24h":0,"events_7d":7,"geo":{"country_code":"SA","country_name":"Saudi Arabia","region":"Riyadh Region","city":"Riyadh","lat":24.6869,"lon":46.7224,"asn":25019,"org":"Saudi Telecom Company JSC"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":1},{"port":1097,"proto":"tcp","label":"","count":1},{"port":9004,"proto":"tcp","label":"","count":1},{"port":8001,"proto":"tcp","label":"","count":1},{"port":7777,"proto":"tcp","label":"Oracle","count":1},{"port":44,"proto":"tcp","label":"","count":1},{"port":9090,"proto":"tcp","label":"Prometheus","count":1}],"fingerprints":{"ssh_hassh":["eb0e0554de9aeb368191c86016a40080"],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{"eb0e0554de9aeb368191c86016a40080":307},"user_agents":[],"timeline":[{"date":"2026-07-26","count":4},{"date":"2026-07-27","count":3}],"recent_events":[{"timestamp":"2026-07-27T19:00:08","port":9090,"proto":"tcp","app_proto":"","app_protocol":"cassandra","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000P\u0001\u0001\u0001\u0001\u0000","payload_hex":"040100500101010100","method":"","user_agent":"","ja3":"","session":"ac03d2b2-83f1-4cf9-87f4-a056d95ee194","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":13},{"timestamp":"2026-07-27T18:46:08","port":8001,"proto":"tcp","app_proto":"","app_protocol":"cassandra","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000P\u0001\u0001\u0001\u0001\u0000","payload_hex":"040100500101010100","method":"","user_agent":"","ja3":"","session":"5c583da4-2e2a-4262-94d6-a648c71dddd9","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":13},{"timestamp":"2026-07-27T18:27:02","port":1097,"proto":"tcp","app_proto":"","app_protocol":"cassandra","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000P\u0001\u0001\u0001\u0001\u0000","payload_hex":"040100500101010100","method":"","user_agent":"","ja3":"","session":"4228b095-fc50-4323-a39c-c3deddf33fcf","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":13},{"timestamp":"2026-07-26T21:47:55","port":7777,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-RawPasswordConnectOnly_1.0\r\n\u0000\u0000\u0001�\n\u0014�|`h��ͦLo��k�7�\u0000\u0000\u0000recdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1\u0000\u0000\u0000]ecdsa-sha2-nistp256,rsa-sha2-256,rsa-sha2-512,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-rsa\u0000\u0000\u0000Aaes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc\u0000\u0000\u0000Aaes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc\u0000\u0000\u0000%hmac-sha2-256,hmac-sha1,hmac-sha2-512\u0000\u0000\u0000%hmac-sha2-256,hmac-sha1,hmac-sha2-512\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\"�r�U\u001a\f`l�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"3b8bab94-edba-4d2e-ac81-8fe1d2b8bb55","seq":1,"duration_ms":100,"bytes_in":532,"bytes_out":13,"enriched":{"digest":"374ee4e5336f3fea","label":"SSH","strings":["SSH-2.0-RawPasswordConnectOnly_1.0","recdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14…","]ecdsa-sha2-nistp256,rsa-sha2-256,rsa-sha2-512,ecdsa-sha2-nistp384,ecdsa-sha2-ni…","Aaes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc","%hmac-sha2-256,hmac-sha1,hmac-sha2-512","none","none\""]}},{"timestamp":"2026-07-26T21:33:29","port":44,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-RawPasswordConnectOnly_1.0\r\n\u0000\u0000\u0001�\n\u0014[d�V�_���+�~��\u0017�\u0000\u0000\u0000recdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1\u0000\u0000\u0000]ecdsa-sha2-nistp256,rsa-sha2-256,rsa-sha2-512,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-rsa\u0000\u0000\u0000Aaes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc\u0000\u0000\u0000Aaes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc\u0000\u0000\u0000%hmac-sha2-256,hmac-sha1,hmac-sha2-512\u0000\u0000\u0000%hmac-sha2-256,hmac-sha1,hmac-sha2-512\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�z5êp\u001c�ە","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"ae4d97cb-9ca1-4f11-aed5-4c735edd9a98","seq":1,"duration_ms":100,"bytes_in":532,"bytes_out":13,"enriched":{"digest":"127f91e765b96d14","label":"SSH","strings":["SSH-2.0-RawPasswordConnectOnly_1.0","recdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14…","]ecdsa-sha2-nistp256,rsa-sha2-256,rsa-sha2-512,ecdsa-sha2-nistp384,ecdsa-sha2-ni…","Aaes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc","%hmac-sha2-256,hmac-sha1,hmac-sha2-512","none"]}},{"timestamp":"2026-07-26T21:21:26","port":8443,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-RawPasswordConnectOnly_1.0\r\n\u0000\u0000\u0001�\n\u0014�����g�Ê\u0013s��ԥ�\u0000\u0000\u0000recdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1\u0000\u0000\u0000]ecdsa-sha2-nistp256,rsa-sha2-256,rsa-sha2-512,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-rsa\u0000\u0000\u0000Aaes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc\u0000\u0000\u0000Aaes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc\u0000\u0000\u0000%hmac-sha2-256,hmac-sha1,hmac-sha2-512\u0000\u0000\u0000%hmac-sha2-256,hmac-sha1,hmac-sha2-512\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��:��ᮢ�\u0010","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"d34140a2-814b-45fd-a620-f3cc290e4447","seq":1,"duration_ms":100,"bytes_in":532,"bytes_out":13,"enriched":{"digest":"2e3c9b814f5c433e","label":"SSH","strings":["SSH-2.0-RawPasswordConnectOnly_1.0","recdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14…","]ecdsa-sha2-nistp256,rsa-sha2-256,rsa-sha2-512,ecdsa-sha2-nistp384,ecdsa-sha2-ni…","Aaes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc","%hmac-sha2-256,hmac-sha1,hmac-sha2-512","none"]}},{"timestamp":"2026-07-26T21:13:56","port":9004,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-RawPasswordConnectOnly_1.0\r\n\u0000\u0000\u0001�\n\u0014HI�\u0016��(a1�\u0007\"#�q(\u0000\u0000\u0000recdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1\u0000\u0000\u0000]ecdsa-sha2-nistp256,rsa-sha2-256,rsa-sha2-512,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-rsa\u0000\u0000\u0000Aaes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc\u0000\u0000\u0000Aaes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc\u0000\u0000\u0000%hmac-sha2-256,hmac-sha1,hmac-sha2-512\u0000\u0000\u0000%hmac-sha2-256,hmac-sha1,hmac-sha2-512\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��&�%��\b\u001f`","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"a1e7c229-235a-4b44-a845-e0d2e5ea431c","seq":1,"duration_ms":100,"bytes_in":532,"bytes_out":13,"enriched":{"digest":"61cb6ec27e79ecdc","label":"SSH","strings":["SSH-2.0-RawPasswordConnectOnly_1.0","recdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14…","]ecdsa-sha2-nistp256,rsa-sha2-256,rsa-sha2-512,ecdsa-sha2-nistp384,ecdsa-sha2-ni…","Aaes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc","%hmac-sha2-256,hmac-sha1,hmac-sha2-512","none","q(recdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group…"]}}],"http_methods":[],"distinct_ports_total":7,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[{"value":"SSH-2.0-RawPasswordConnectOnly_1.0","count":4}],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-30T11:03:33.939604+00:00"}