{"ip":"37.79.38.109","total_events":234,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["234 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 7,488 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"7,488 bytes sent","bytes_sent":7488,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-23T13:40:28","last_seen":"2026-09-26T18:50:45","events_24h":0,"events_7d":234,"geo":{"country_code":"RU","country_name":"Russia","region":"Yamalo-Nenets","city":"Novy Urengoy","lat":66.0899,"lon":76.6217,"asn":12389,"org":"Rostelecom"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as12389","label":"Rostelecom","category":"isp","url":"https://www.peeringdb.com/asn/12389"},"cve_matches":[],"malware":[],"top_ports":[{"port":37777,"proto":"tcp","label":"","count":234}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-23","count":117},{"date":"2026-09-26","count":117}],"recent_events":[{"timestamp":"2026-09-26T18:50:45","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000rUj)v�+X�A\u0015$�\u0014\u0001\u001b\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a00100600000000072556a2976ff2b588b411524c214011b040200010000a1aa","method":"","user_agent":"","ja3":"","session":"e90fa52e-cb79-4504-b3ea-d64cb07468b3","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12,"enriched":{"digest":"36cbf9eec73bdd9f","strings":["rUj)v","`rUj)v"]}},{"timestamp":"2026-09-26T18:50:40","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000rUj)v�+XrUj)v�+X\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a00100600000000072556a2976ff2b5872556a2976ff2b58040200010000a1aa","method":"","user_agent":"","ja3":"","session":"ee6dfa86-30b7-44a1-8b7b-473a8a0bed6d","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12,"enriched":{"digest":"1b9e88b4d72ec0a0","strings":["rUj)v","+XrUj)v","`rUj)v"]}},{"timestamp":"2026-09-26T18:50:34","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000rUj)v�+X�\u0018-]=C��\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a00100600000000072556a2976ff2b58b3182d5d3d43ad88040200010000a1aa","method":"","user_agent":"","ja3":"","session":"4cadecfe-bab0-498f-a510-1e12fa90bf39","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12,"enriched":{"digest":"2f0e327cc23d3f16","strings":["rUj)v","-]=C","`rUj)v"]}},{"timestamp":"2026-09-26T18:50:29","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000rUj)v�+Xp\u0002d��U$\u0004\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a00100600000000072556a2976ff2b587002649afa552404040200010000a1aa","method":"","user_agent":"","ja3":"","session":"0903db56-4751-480a-8bfc-c534874faf01","seq":1,"duration_ms":101,"bytes_in":32,"bytes_out":12,"enriched":{"digest":"d178bc95d3fa5b97","strings":["rUj)v","`rUj)v"]}},{"timestamp":"2026-09-26T18:50:24","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000rUj)v�+Xp\u0002d��U$\u0004\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a00100600000000072556a2976ff2b587002649afa552404040200010000a1aa","method":"","user_agent":"","ja3":"","session":"72f6f709-e282-4a9d-b82f-569f861a3e86","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12,"enriched":{"digest":"d178bc95d3fa5b97","strings":["rUj)v","`rUj)v"]}},{"timestamp":"2026-09-26T18:50:19","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000rUj)v�+X=�֏;��o\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a00100600000000072556a2976ff2b583d8ad68f3be4ec6f040200010000a1aa","method":"","user_agent":"","ja3":"","session":"c4fece7c-e25c-4b76-90a6-74a1bc5663ec","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12,"enriched":{"digest":"096349622b87a67a","strings":["rUj)v","`rUj)v"]}},{"timestamp":"2026-09-26T18:50:13","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000rUj)v�+Xp\u0002d��U$\u0004\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a00100600000000072556a2976ff2b587002649afa552404040200010000a1aa","method":"","user_agent":"","ja3":"","session":"d7befeeb-4956-4956-b9d4-693252271bb3","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12,"enriched":{"digest":"d178bc95d3fa5b97","strings":["rUj)v","`rUj)v"]}},{"timestamp":"2026-09-26T18:50:08","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000rUj)v�+X�{\"��5��\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a00100600000000072556a2976ff2b58b87b22e6be35b392040200010000a1aa","method":"","user_agent":"","ja3":"","session":"8d994110-b62b-472b-b1e4-fb74bf3142dd","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12,"enriched":{"digest":"ecabc67b6bf3f21c","strings":["rUj)v","`rUj)v"]}},{"timestamp":"2026-09-26T18:50:03","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000rUj)v�+X�\u0011�\u0001�U?b\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a00100600000000072556a2976ff2b588f11d901af553f62040200010000a1aa","method":"","user_agent":"","ja3":"","session":"31b8522d-49b8-4d97-aa8f-8639305531fc","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12,"enriched":{"digest":"6661966985816be3","strings":["rUj)v","`rUj)v"]}},{"timestamp":"2026-09-26T18:49:58","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0001\u0000`\u0000\u0000\u0000\u0000rUj)v�+X�\u000eF�&\u0012`?\u0004\u0002\u0000\u0001\u0000\u0000��","payload_hex":"a00100600000000072556a2976ff2b58bc0e46fd2612603f040200010000a1aa","method":"","user_agent":"","ja3":"","session":"b3876e20-593d-4dd8-b397-8cf198686e8b","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12,"enriched":{"digest":"08a04e500472c35f","strings":["rUj)v","`rUj)v"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-29T05:19:39.873331+00:00"}