{"ip":"193.187.88.197","total_events":65,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["65 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,665 bytes sent","bytes_sent":2665,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-26T01:47:02","last_seen":"2026-09-28T01:06:11","events_24h":0,"events_7d":65,"geo":{"country_code":"SE","country_name":"Sweden","region":"","city":"","lat":59.3247,"lon":18.056,"asn":42675,"org":"Obehosting AB"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":8291,"proto":"tcp","label":"","count":65}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-26","count":26},{"date":"2026-09-27","count":26},{"date":"2026-09-28","count":13}],"recent_events":[{"timestamp":"2026-09-28T01:06:11","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000*�\"I<�=������,8-2\t�V\u001f�(\u0014��@��\\Z!\u0001","payload_hex":"270661646d696e002af322493c953db7b0ccf681fd2c382d3209f7561f852814bbc940fec05c5a2101","method":"","user_agent":"","ja3":"","session":"915cbeba-8bfd-4f02-b02b-69fba189cf56","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"561d529d20725acc","strings":["admin",",8-2","admin*"]}},{"timestamp":"2026-09-28T01:06:10","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000+�-j��c�q�\u0010*�\u001c�\n>\u0004�J��4H�ݳHJ|��\u0001","payload_hex":"270661646d696e002bba2d6ac3f463af719e102abb1ccc0a3e04cc4ab0ba3448bcddb3484a7cb3b401","method":"","user_agent":"","ja3":"","session":"b36e452e-cf70-4b2f-a653-59119adcff31","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"fab1361c959bd938","strings":["admin","admin+"]}},{"timestamp":"2026-09-28T01:06:10","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000x�v�D���XғnIʅ��={”ٱ�|�e��q�\u001a\u0000","payload_hex":"270661646d696e0078d176c344a9afef58d2936e49ca8592a03d7bc294d9b1b87cdb658b9471f21a00","method":"","user_agent":"","ja3":"","session":"38ace7d7-0aff-4574-a617-1a64722fa975","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"9b36893f3eb5bb17","strings":["admin","adminx"]}},{"timestamp":"2026-09-28T01:06:10","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000\u0006\u0015\f��\u0011R�`͡�\t2\u0019�g\u0017�:ƹ��\"������{\u0000","payload_hex":"270661646d696e0006150c97ce1152ed60cda18b0932199067179e3ac6b9b3ff22aaeed3e3baeb7b00","method":"","user_agent":"","ja3":"","session":"f365bdbc-9c39-402e-a512-ed8598e8c8be","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"b87d837685cc1eb0","strings":["admin"]}},{"timestamp":"2026-09-28T01:06:09","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000\t\u0003\u0017\u000f\"���V\u0012\u00167�Ll.\u001d��<Ϭ‚$6�=���S\u0000","payload_hex":"270661646d696e000903170f228fe0de56121637894c6c2e1deb853ccfacc2822436e83d99d0c05300","method":"","user_agent":"","ja3":"","session":"0d190fe3-9277-49b6-a9e7-b465b9f1cf0d","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"9daafd15ab0ed719","strings":["admin"]}},{"timestamp":"2026-09-28T01:06:09","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000K�5ڦ~-%\u0019\n4���e_p��T�'�6p���&���\u0000","payload_hex":"270661646d696e004b8b35daa67e2d25190a34b3e1d0655f70888f54ae27fe3670a5cada26bea39500","method":"","user_agent":"","ja3":"","session":"ea5ccc3b-5215-4bec-9bc1-81ff4c0fcaec","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"7219e368b0ddf58c","strings":["admin","adminK"]}},{"timestamp":"2026-09-28T01:06:09","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000tR‡R$�ެ\"��Xǝ_<\u001a�2b�����\u0002��ƿ�\u0001","payload_hex":"270661646d696e007452c2875224dadeac22e6b458c79d5f3c1ae832628f92cffe9902b7d4c6bfe901","method":"","user_agent":"","ja3":"","session":"81d45e71-36ca-4959-b452-4339262cc9d1","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"49291bcc5bc4958f","strings":["admin","admintR"]}},{"timestamp":"2026-09-28T01:06:08","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000D\\\u0001e��\u0012y���\r:\u00032f��ܓ�4!�y�pkR���\u0000","payload_hex":"270661646d696e00445c0165aaf21279a6d6d90d3a033266ddcfdc93903421bc79cd706b52f593dd00","method":"","user_agent":"","ja3":"","session":"5cfad9ee-e09d-443b-8efa-f47608d5ac8c","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"4b08b3603b01944b","strings":["admin","adminD\\"]}},{"timestamp":"2026-09-28T01:06:08","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000D������I3(��\u0003\u0001�\u001b\r���c\u0011kbf:���\u0016��\u0001","payload_hex":"270661646d696e0044d1ecf597f7f6493328ebc70301a61b0da69edc63116b62663ae2accc16edb301","method":"","user_agent":"","ja3":"","session":"ecf94392-beb3-475b-b45c-e8070ba04436","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"57cb0aad34b228d4","strings":["admin","kbf:","adminD"]}},{"timestamp":"2026-09-28T01:06:07","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000m|�[E\u0006F3��\u0002�n�jZ�is�\u001c��_��3���-x\u0001","payload_hex":"270661646d696e006d7ca05b45064633f8da02ea6e9e6a5a956973821cfdb05f9793339fd0ea2d7801","method":"","user_agent":"","ja3":"","session":"3446c0aa-f5f7-41fd-81ce-6db58d25b885","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"94712fc0b3cb5844","strings":["admin","adminm|"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-29T14:02:43.120363+00:00"}