{"ip":"212.75.227.226","total_events":496,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["496 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 15,872 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"15,872 bytes sent","bytes_sent":15872,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-27T12:21:11","last_seen":"2026-08-14T14:42:05","events_24h":0,"events_7d":179,"geo":{"country_code":"RU","country_name":"Russia","region":"Leningrad Oblast","city":"Sosnovyy Bor","lat":59.8982,"lon":29.1098,"asn":41733,"org":"JSC ER-Telecom Holding"},"source_domain":"212-75-227-226.westcall.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as41733","label":"Perspektiva, Ltd","category":"isp","url":"https://www.peeringdb.com/asn/41733"},"cve_matches":[],"malware":[],"top_ports":[{"port":37777,"proto":"tcp","label":"","count":496}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-27","count":64},{"date":"2026-07-28","count":32},{"date":"2026-07-29","count":32},{"date":"2026-07-30","count":32},{"date":"2026-07-31","count":32},{"date":"2026-08-01","count":15},{"date":"2026-08-02","count":64},{"date":"2026-08-03","count":30},{"date":"2026-08-04","count":16},{"date":"2026-08-11","count":52},{"date":"2026-08-12","count":32},{"date":"2026-08-13","count":32},{"date":"2026-08-14","count":63}],"recent_events":[{"timestamp":"2026-08-14T14:42:05","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000ɛ\u0006\u0018�\t8�ɛ\u0006\u0018�\t8�\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000c99b0618d00938b8c99b0618d00938b8040200010000a1aa","method":"","user_agent":"","ja3":"","session":"8a4e87ee-a025-4f88-97ec-76f442a97152","seq":1,"duration_ms":101,"bytes_in":32,"bytes_out":14},{"timestamp":"2026-08-14T14:42:00","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000ɛ\u0006\u0018�\t8�a��(ř��\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000c99b0618d00938b861cdcb28c599bdb0040200010000a1aa","method":"","user_agent":"","ja3":"","session":"261dc19d-977c-40e2-9d1d-e75ee9dbdb88","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":14},{"timestamp":"2026-08-14T14:41:55","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000ɛ\u0006\u0018�\t8�ģ�H�V��\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000c99b0618d00938b8c4a3af489956b6b4040200010000a1aa","method":"","user_agent":"","ja3":"","session":"ba327ef5-b1f1-45d6-8462-796cad2d734a","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":14},{"timestamp":"2026-08-14T14:41:50","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000ɛ\u0006\u0018�\t8������hu7\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000c99b0618d00938b882f8e1b9d9687537040200010000a1aa","method":"","user_agent":"","ja3":"","session":"26017264-596f-4e71-b4ed-1510d44ad413","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":14},{"timestamp":"2026-08-14T14:41:45","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000a��(ř��ɛ\u0006\u0018�\t8�\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a00100600000000061cdcb28c599bdb0c99b0618d00938b8040200010000a1aa","method":"","user_agent":"","ja3":"","session":"05ad3a5f-19ae-4a84-9b4d-b904310d09a4","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":14},{"timestamp":"2026-08-14T14:41:40","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000a��(ř��a��(ř��\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a00100600000000061cdcb28c599bdb061cdcb28c599bdb0040200010000a1aa","method":"","user_agent":"","ja3":"","session":"88c729d0-7eea-4f1f-b629-cefa74dbe46a","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":14},{"timestamp":"2026-08-14T14:41:35","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000a��(ř��ģ�H�V��\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a00100600000000061cdcb28c599bdb0c4a3af489956b6b4040200010000a1aa","method":"","user_agent":"","ja3":"","session":"c6516bc5-c839-4d38-845b-baaf13c97194","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":14},{"timestamp":"2026-08-14T14:41:30","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000a��(ř�������hu7\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a00100600000000061cdcb28c599bdb082f8e1b9d9687537040200010000a1aa","method":"","user_agent":"","ja3":"","session":"5d36549d-d6f5-49b4-9548-8492f9978fbb","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":14},{"timestamp":"2026-08-14T14:41:24","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000ģ�H�V��ɛ\u0006\u0018�\t8�\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000c4a3af489956b6b4c99b0618d00938b8040200010000a1aa","method":"","user_agent":"","ja3":"","session":"89f15367-ceae-491f-9c18-aaa10a0c4f49","seq":1,"duration_ms":101,"bytes_in":32,"bytes_out":14},{"timestamp":"2026-08-14T14:41:19","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000ģ�H�V��a��(ř��\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a001006000000000c4a3af489956b6b461cdcb28c599bdb0040200010000a1aa","method":"","user_agent":"","ja3":"","session":"ae6df6b0-41cf-4f33-b4f8-92c19fe37719","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":14}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-16T08:08:06.851697+00:00"}