{"ip":"31.129.105.135","total_events":120,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["120 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"3,608 bytes sent","bytes_sent":3608,"session_seconds":0,"persistent":false}},"first_seen":"2026-04-07T21:22:00","last_seen":"2026-09-22T13:00:10","events_24h":0,"events_7d":88,"geo":{"country_code":"RU","country_name":"Russia","region":"St.-Petersburg","city":"St Petersburg","lat":59.9417,"lon":30.3096,"asn":198610,"org":"Beget LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as198610","label":"BeGet","category":"enterprise","url":"https://www.peeringdb.com/asn/198610"},"cve_matches":[],"malware":[],"top_ports":[{"port":8291,"proto":"tcp","label":"","count":120}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-22","count":88}],"recent_events":[{"timestamp":"2026-09-22T13:00:10","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000\u0011��4�wb#�}d��.�wQ��\u0003���1H�\u0019��Ҹ\u0001","payload_hex":"270661646d696e00119d7fc234e4776223b97d64f4e12ec177519fea03e9c2f03148ca19f3aed2b801","method":"","user_agent":"","ja3":"","session":"26ba4eb8-2e0a-4b80-9558-5cd9595e2465","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"9b539faf9e8dc150","strings":["admin"]}},{"timestamp":"2026-09-22T13:00:10","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000DȄ��&X�3�\u0001L�3�2�\u0018K\fpI�!�\u0005q�\r���\u0001","payload_hex":"270661646d696e0044c884edf72658bb33ab014c8e33fe32d1184b0c7049cd21b40571810d8fa5d601","method":"","user_agent":"","ja3":"","session":"6cdc45f3-2d6f-4ced-a346-adb7684ddcf7","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"12a519e2535917c0","strings":["admin","adminD"]}},{"timestamp":"2026-09-22T13:00:10","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000PY��\u00020j�\u0011\u0010aZ�sEd�K���\u0016���g\u0018Ў\u0013#\u0001","payload_hex":"270661646d696e005059ff8f02306aa01110615abb734564a34bfabeaf7f16bb9aab6718d08e132301","method":"","user_agent":"","ja3":"","session":"e037d8d6-c869-4c81-8e47-90a9cbc082dc","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"7177824c419a6326","strings":["admin","adminPY"]}},{"timestamp":"2026-09-22T13:00:10","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000C~�K\u0012��Y\u00142-;ނ�K`��\"��c�:�\u0005\\���0\u0001","payload_hex":"270661646d696e00437e9e4b1298c25914322d3bde82b64b60eaef22a8d663f93ae2055cb7a4fb3001","method":"","user_agent":"","ja3":"","session":"39e2f851-b8e7-44b9-b694-8def8e3f3566","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"a09c54e2fba35c65","strings":["admin","adminC~"]}},{"timestamp":"2026-09-22T13:00:10","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000)�P\"@|;\u0007p�7~��Z,\u0018�\"��5��%���#�5k\u0000","payload_hex":"270661646d696e00298b5022407c3b07708c377ed4c85a2c18dc228ec235a4fc25b1e3c323df356b00","method":"","user_agent":"","ja3":"","session":"f0131edb-19aa-4b8c-967a-c7f46b869758","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"c623b953b3bf8ce6","strings":["admin","P\"@|;","admin)"]}},{"timestamp":"2026-09-22T13:00:10","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000BUu�\u001e�9���M[�V�Q�J֩Iî�V���r$��\u0000","payload_hex":"270661646d696e00425575841e8a39fc98a24d5b93569e51914ad6a949c3ae9656c1ddd0722494ca00","method":"","user_agent":"","ja3":"","session":"dc9cfb3b-94aa-4fe7-86ed-c631172199cd","seq":1,"duration_ms":101,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"d910325e5e0e1780","strings":["admin","adminBUu"]}},{"timestamp":"2026-09-22T13:00:10","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000\u0005V��B=��K�8\u00153�8=�p��9��t<���K:\u0005\u0000","payload_hex":"270661646d696e0005568094423dfa9b4bec3815337fcb383dab70bdce39aaec743cd9d6c94b3a0500","method":"","user_agent":"","ja3":"","session":"4eaf6ee0-7d70-4bda-92ea-2f5b05bbfcae","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"68be15f40027f773","strings":["admin"]}},{"timestamp":"2026-09-22T13:00:10","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000;��QI ����)�43���ĕ\u001f\u0019�\u0018v���t���\u0006\u0001","payload_hex":"270661646d696e003bbae0514920b6a9d7fd29ab34338e85f3c4951f19af1876f6c7ec7498e6c10601","method":"","user_agent":"","ja3":"","session":"51ca1dc6-0afe-4cb3-865c-5c16b572f92b","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"f4e8f9b8dc1c3034","strings":["admin","admin;"]}},{"timestamp":"2026-09-22T13:00:10","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000kl��󈜫\u001eV6i��,�f\u001cn��6�׼'\n1���6\u0000","payload_hex":"270661646d696e006b6ce98af3889cab1e563669e3a12c9c661c6e95c03688d7bc270a31cbc4cd3600","method":"","user_agent":"","ja3":"","session":"cfa8cbc6-6f68-4851-9550-7e2c471ee227","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"6741ae4fa443e045","strings":["admin","adminkl"]}},{"timestamp":"2026-09-22T13:00:10","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000=ݿ���`��g\u0003 �\u0013a�\n|�\u001f��\u0004'��\u0010��\u0010\u0003�\u0000","payload_hex":"270661646d696e003dddbfb7f39f6080fd670320dc1361eb0a7ce91f99da0427d8c210ecc01003e200","method":"","user_agent":"","ja3":"","session":"a927ad88-a76b-4368-a740-5169671d35f3","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"38763cb8d4cfeb87","strings":["admin","admin="]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-24T19:29:17.901466+00:00"}