{"ip":"194.48.218.78","total_events":132,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["132 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,432 bytes sent","bytes_sent":2432,"session_seconds":0,"persistent":false}},"first_seen":"2026-04-09T16:52:10","last_seen":"2026-08-12T21:30:51","events_24h":0,"events_7d":76,"geo":{"country_code":"RU","country_name":"Russia","region":"","city":"","lat":55.7386,"lon":37.6068,"asn":44478,"org":"OOO Etalon-Optic"},"source_domain":"194-48-218-78.volhov.ru","known_scanners":[],"scanner_tag":{"key":"peeringdb:as44478","label":"Etalon Optic","category":"isp","url":"https://www.peeringdb.com/asn/44478"},"cve_matches":[],"malware":[],"top_ports":[{"port":37777,"proto":"tcp","label":"","count":132}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-12","count":76}],"recent_events":[{"timestamp":"2026-08-12T21:30:51","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0005\u0000`\u0000\u0000\u0000\u0000ģ�H�V��-\u0013����^�\u0005\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a005006000000000c4a3af489956b6b42d1393ac9cb55ed4050200010000a1aa","method":"","user_agent":"","ja3":"","session":"01b67314-6cd5-4ed7-bdc6-989f13fa233c","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":13},{"timestamp":"2026-08-12T21:30:48","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0005\u0000`\u0000\u0000\u0000\u0000ģ�H�V��-\u0013����^�\u0005\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a005006000000000c4a3af489956b6b42d1393ac9cb55ed4050200010000a1aa","method":"","user_agent":"","ja3":"","session":"670dd450-32d8-41b2-8ef1-43a0ad27e2de","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":13},{"timestamp":"2026-08-12T21:30:46","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0005\u0000`\u0000\u0000\u0000\u0000ģ�H�V��(�{n�Y�V\u0005\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a005006000000000c4a3af489956b6b428d97b6efd59db56050200010000a1aa","method":"","user_agent":"","ja3":"","session":"56d5f1c3-b10f-43c1-9c2f-f83e056013ef","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":13},{"timestamp":"2026-08-12T21:30:43","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0005\u0000`\u0000\u0000\u0000\u0000ģ�H�V��(�{n�Y�V\u0005\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a005006000000000c4a3af489956b6b428d97b6efd59db56050200010000a1aa","method":"","user_agent":"","ja3":"","session":"8f497d78-a518-4aa0-a021-ee2cc3b95690","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":13},{"timestamp":"2026-08-12T21:30:41","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0005\u0000`\u0000\u0000\u0000\u0000ģ�H�V��\u0007\u0014��;a��\u0005\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a005006000000000c4a3af489956b6b407149cf93b61b49a050200010000a1aa","method":"","user_agent":"","ja3":"","session":"faa6d916-5c84-48e4-8aec-c3c67fc47dd1","seq":1,"duration_ms":101,"bytes_in":32,"bytes_out":13},{"timestamp":"2026-08-12T21:30:38","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0005\u0000`\u0000\u0000\u0000\u0000ģ�H�V��\u0007\u0014��;a��\u0005\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a005006000000000c4a3af489956b6b407149cf93b61b49a050200010000a1aa","method":"","user_agent":"","ja3":"","session":"35e30bc4-a96d-4677-8465-32dd1b096bcc","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":13},{"timestamp":"2026-08-12T21:30:36","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0005\u0000`\u0000\u0000\u0000\u0000ģ�H�V����j��R�c\u0005\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a005006000000000c4a3af489956b6b4bdee6af5d052cf63050200010000a1aa","method":"","user_agent":"","ja3":"","session":"57958552-45d7-42fa-ad36-2ab1e3568e25","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":13},{"timestamp":"2026-08-12T21:30:33","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0005\u0000`\u0000\u0000\u0000\u0000ģ�H�V����j��R�c\u0005\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a005006000000000c4a3af489956b6b4bdee6af5d052cf63050200010000a1aa","method":"","user_agent":"","ja3":"","session":"6d239d00-6b1d-4f05-8c4c-19e3238499c8","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":13},{"timestamp":"2026-08-12T21:30:31","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0005\u0000`\u0000\u0000\u0000\u0000ģ�H�V��LCoX��q�\u0005\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a005006000000000c4a3af489956b6b44c436f58899571ae050200010000a1aa","method":"","user_agent":"","ja3":"","session":"38799d82-e501-496e-b854-46597ceef59c","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":13,"enriched":{"digest":"1b45f56825a1e7da","strings":["LCoX"]}},{"timestamp":"2026-08-12T21:30:28","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0005\u0000`\u0000\u0000\u0000\u0000ģ�H�V��LCoX��q�\u0005\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a005006000000000c4a3af489956b6b44c436f58899571ae050200010000a1aa","method":"","user_agent":"","ja3":"","session":"f7df9bc4-8af4-449e-9d6c-1729141a6497","seq":1,"duration_ms":101,"bytes_in":32,"bytes_out":13,"enriched":{"digest":"1b45f56825a1e7da","strings":["LCoX"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-16T08:03:18.032713+00:00"}