{"ip":"2.86.206.130","total_events":47707,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"47,707 events across 1 port(s)","confidence":"high","network_type":"residential ISP","why":["47,707 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range.","Held a session open for 25763s, against a median of well under a second."],"engagement":{"level":"payload","label":"Sustained payload, held open","detail":"7,804,258,629 bytes sent, longest session 25763s","bytes_sent":7804258629,"session_seconds":25763,"persistent":true}},"first_seen":"2026-08-27T03:34:12","last_seen":"2026-08-27T10:43:35","events_24h":47707,"events_7d":47707,"geo":{"country_code":"GR","country_name":"Greece","region":"Attica","city":"Athens","lat":37.9842,"lon":23.7353,"asn":6799,"org":"OTEnet S.A."},"source_domain":"ppp-2-86-206-130.home.otenet.gr","known_scanners":[],"scanner_tag":{"key":"peeringdb:as6799","label":"OTEnet","category":"isp","url":"https://www.peeringdb.com/asn/6799"},"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":47707}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-27","count":47707}],"recent_events":[{"timestamp":"2026-08-27T10:43:35","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"d�\u0005","payload_hex":"648305","method":"","user_agent":"","ja3":"","session":"713e7d5f-a768-455c-862d-9c84696e02de","seq":47707,"duration_ms":25763396,"bytes_in":319376,"bytes_out":572421},{"timestamp":"2026-08-27T10:43:34","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"8{�","payload_hex":"387b8e","method":"","user_agent":"","ja3":"","session":"713e7d5f-a768-455c-862d-9c84696e02de","seq":47706,"duration_ms":25761926,"bytes_in":319373,"bytes_out":572409},{"timestamp":"2026-08-27T10:43:32","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"gO�*�/\rc","payload_hex":"674fe02af82f0d63","method":"","user_agent":"","ja3":"","session":"713e7d5f-a768-455c-862d-9c84696e02de","seq":47705,"duration_ms":25760357,"bytes_in":319370,"bytes_out":572397},{"timestamp":"2026-08-27T10:43:30","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��uQ�}r","payload_hex":"f8e77551967d72","method":"","user_agent":"","ja3":"","session":"713e7d5f-a768-455c-862d-9c84696e02de","seq":47704,"duration_ms":25758671,"bytes_in":319362,"bytes_out":572385},{"timestamp":"2026-08-27T10:43:29","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�u�\u000b�\u000f\u001b","payload_hex":"c275b80bd40f1b","method":"","user_agent":"","ja3":"","session":"713e7d5f-a768-455c-862d-9c84696e02de","seq":47703,"duration_ms":25757213,"bytes_in":319355,"bytes_out":572373},{"timestamp":"2026-08-27T10:43:27","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���b'$�\u0015[","payload_hex":"acffec622724a3155b","method":"","user_agent":"","ja3":"","session":"713e7d5f-a768-455c-862d-9c84696e02de","seq":47702,"duration_ms":25755406,"bytes_in":319348,"bytes_out":572361},{"timestamp":"2026-08-27T10:43:26","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��uE�O�","payload_hex":"f1b47545aa4fcf","method":"","user_agent":"","ja3":"","session":"713e7d5f-a768-455c-862d-9c84696e02de","seq":47701,"duration_ms":25753730,"bytes_in":319339,"bytes_out":572349},{"timestamp":"2026-08-27T10:43:23","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�i�M�t","payload_hex":"ca69cd4db1ef8ba074","method":"","user_agent":"","ja3":"","session":"713e7d5f-a768-455c-862d-9c84696e02de","seq":47700,"duration_ms":25751004,"bytes_in":319332,"bytes_out":572337},{"timestamp":"2026-08-27T10:43:20","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"&Ì:$��","payload_hex":"26c38c3a24c4c8","method":"","user_agent":"","ja3":"","session":"713e7d5f-a768-455c-862d-9c84696e02de","seq":47699,"duration_ms":25748353,"bytes_in":319323,"bytes_out":572325},{"timestamp":"2026-08-27T10:43:19","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001d\u001c5��","payload_hex":"1d1c35c6e8","method":"","user_agent":"","ja3":"","session":"713e7d5f-a768-455c-862d-9c84696e02de","seq":47698,"duration_ms":25746756,"bytes_in":319316,"bytes_out":572313}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-27T10:48:16.338740+00:00"}