{"ip":"2.61.6.135","total_events":282,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["282 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 9,024 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"9,024 bytes sent","bytes_sent":9024,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-11T14:16:54","last_seen":"2026-08-14T15:57:03","events_24h":144,"events_7d":282,"geo":{"country_code":"RU","country_name":"Russia","region":"Khakasiya Republic","city":"Chernogorsk","lat":53.8288,"lon":91.3095,"asn":12389,"org":"Rostelecom"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as12389","label":"Rostelecom","category":"isp","url":"https://www.peeringdb.com/asn/12389"},"cve_matches":[],"malware":[],"top_ports":[{"port":37777,"proto":"tcp","label":"","count":282}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-11","count":138},{"date":"2026-08-14","count":144}],"recent_events":[{"timestamp":"2026-08-14T15:57:03","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000\u0007\u0016�񂯔U�n��8�x\u0015\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a0010060000000000716a9f182af9455c96e82e238da7815040200010000a1aa","method":"","user_agent":"","ja3":"","session":"c3dd9d40-97b6-4489-9508-3f2ec2c824f4","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":10},{"timestamp":"2026-08-14T15:56:58","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000\u0007\u0016�񂯔Up\u0002d��U$\u0004\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a0010060000000000716a9f182af94557002649afa552404040200010000a1aa","method":"","user_agent":"","ja3":"","session":"0848c1c4-25b5-4a8a-87a7-8ac7a2d5c5bf","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":10},{"timestamp":"2026-08-14T15:56:53","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000\u0007\u0016�񂯔Up\u0002d��U$\u0004\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a0010060000000000716a9f182af94557002649afa552404040200010000a1aa","method":"","user_agent":"","ja3":"","session":"2cb9158e-549a-47fa-914d-8f97ca842368","seq":1,"duration_ms":101,"bytes_in":32,"bytes_out":10},{"timestamp":"2026-08-14T15:56:47","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000\u0007\u0016�񂯔Up\u0002d��U$\u0004\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a0010060000000000716a9f182af94557002649afa552404040200010000a1aa","method":"","user_agent":"","ja3":"","session":"b39d63dc-a090-4dac-9c1c-35f565408501","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":10},{"timestamp":"2026-08-14T15:56:42","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000\u0007\u0016�񂯔Up\u0002d��U$\u0004\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a0010060000000000716a9f182af94557002649afa552404040200010000a1aa","method":"","user_agent":"","ja3":"","session":"8fb33695-b33d-4f43-a2b0-ded810ed488b","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":10},{"timestamp":"2026-08-14T15:56:37","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000ث����\u0017��n��8�x\u0015\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000d8ab9cf4fb8417fec96e82e238da7815040200010000a1aa","method":"","user_agent":"","ja3":"","session":"c809415c-272b-4fa3-beb0-540c3ba0a5fe","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":10},{"timestamp":"2026-08-14T15:56:32","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000ث����\u0017�p\u0002d��U$\u0004\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000d8ab9cf4fb8417fe7002649afa552404040200010000a1aa","method":"","user_agent":"","ja3":"","session":"9f6d028f-fab3-46b4-91b7-80edbbe89df7","seq":1,"duration_ms":101,"bytes_in":32,"bytes_out":10},{"timestamp":"2026-08-14T15:56:27","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000ث����\u0017�p\u0002d��U$\u0004\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000d8ab9cf4fb8417fe7002649afa552404040200010000a1aa","method":"","user_agent":"","ja3":"","session":"9f67da43-f12c-4a71-a381-e9bc51527d81","seq":1,"duration_ms":101,"bytes_in":32,"bytes_out":10},{"timestamp":"2026-08-14T15:56:21","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000ث����\u0017�p\u0002d��U$\u0004\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000d8ab9cf4fb8417fe7002649afa552404040200010000a1aa","method":"","user_agent":"","ja3":"","session":"9f3ee303-54b9-44d0-9362-e40dd6c253ac","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":10},{"timestamp":"2026-08-14T15:56:16","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000ث����\u0017�p\u0002d��U$\u0004\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000d8ab9cf4fb8417fe7002649afa552404040200010000a1aa","method":"","user_agent":"","ja3":"","session":"fbec4f8f-2154-4bd7-b830-65f80dc6b70b","seq":1,"duration_ms":101,"bytes_in":32,"bytes_out":10}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T04:44:54.579089+00:00"}