{"ip":"45.132.194.61","total_events":100,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"40+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 40 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,100 bytes sent","bytes_sent":1100,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-24T05:48:42","last_seen":"2026-09-30T11:07:01","events_24h":39,"events_7d":100,"geo":{"country_code":"LT","country_name":"Lithuania","region":"Vilnius","city":"Vilnius","lat":54.6876,"lon":25.2806,"asn":61272,"org":"UAB Bacloud"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":6280,"proto":"tcp","label":"","count":3},{"port":9380,"proto":"tcp","label":"","count":3},{"port":443,"proto":"tcp","label":"HTTPS","count":3},{"port":2052,"proto":"tcp","label":"","count":3},{"port":5119,"proto":"tcp","label":"","count":3},{"port":50443,"proto":"tcp","label":"","count":3},{"port":5042,"proto":"tcp","label":"","count":3},{"port":30046,"proto":"tcp","label":"","count":3},{"port":8082,"proto":"tcp","label":"","count":3},{"port":6196,"proto":"tcp","label":"","count":3},{"port":5094,"proto":"tcp","label":"","count":3},{"port":23819,"proto":"tcp","label":"","count":3},{"port":5013,"proto":"tcp","label":"","count":3},{"port":8083,"proto":"tcp","label":"","count":3},{"port":801,"proto":"tcp","label":"","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-24","count":30},{"date":"2026-09-25","count":28},{"date":"2026-09-29","count":18},{"date":"2026-09-30","count":24}],"recent_events":[{"timestamp":"2026-09-30T11:07:01","port":38013,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0002\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080002000000","method":"","user_agent":"","ja3":"","session":"add15886-8a0c-4e0b-9b84-b6ac489ad947","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":13,"enriched":{"digest":"4986e56a8738b201","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-09-30T11:06:30","port":38013,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0006/login\u0000","payload_hex":"062f6c6f67696e00","method":"","user_agent":"","ja3":"","session":"c0938a47-0f21-423c-94da-cbe138509ad8","seq":1,"duration_ms":101,"bytes_in":8,"bytes_out":13,"enriched":{"digest":"884e0c55c6c4b973","strings":["/login"]}},{"timestamp":"2026-09-30T10:13:42","port":5094,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0002\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080002000000","method":"","user_agent":"","ja3":"","session":"351651ad-504d-4f43-ab79-f0c8047d72af","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":13,"enriched":{"digest":"4986e56a8738b201","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-09-30T10:13:11","port":5094,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0006","payload_hex":"06","method":"","user_agent":"","ja3":"","session":"c9b68b4e-9d5c-4daa-bfd8-54d98ad0cce3","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-09-30T10:13:11","port":5094,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"/login\u0000","payload_hex":"2f6c6f67696e00","method":"","user_agent":"","ja3":"","session":"c9b68b4e-9d5c-4daa-bfd8-54d98ad0cce3","seq":2,"duration_ms":254,"bytes_in":8,"bytes_out":26,"enriched":{"digest":"660c274422d45f1e","strings":["/login"]}},{"timestamp":"2026-09-30T10:05:12","port":5119,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0002\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080002000000","method":"","user_agent":"","ja3":"","session":"878895ec-216d-48eb-9128-16741e8cada7","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":13,"enriched":{"digest":"4986e56a8738b201","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-09-30T10:04:42","port":5119,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0006","payload_hex":"06","method":"","user_agent":"","ja3":"","session":"3f902f2b-5363-4a1f-8209-74311a981f21","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-09-30T10:04:42","port":5119,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"/login\u0000","payload_hex":"2f6c6f67696e00","method":"","user_agent":"","ja3":"","session":"3f902f2b-5363-4a1f-8209-74311a981f21","seq":2,"duration_ms":254,"bytes_in":8,"bytes_out":26,"enriched":{"digest":"660c274422d45f1e","strings":["/login"]}},{"timestamp":"2026-09-30T09:53:22","port":31139,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0002\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080002000000","method":"","user_agent":"","ja3":"","session":"3fd78435-af4b-4795-937e-fd68d06a1fe0","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":13,"enriched":{"digest":"4986e56a8738b201","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-09-30T09:52:51","port":31139,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0006/login\u0000","payload_hex":"062f6c6f67696e00","method":"","user_agent":"","ja3":"","session":"98c03791-6c06-48ec-8c2d-1bc940b20743","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":13,"enriched":{"digest":"884e0c55c6c4b973","strings":["/login"]}}],"http_methods":[],"distinct_ports_total":40,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-30T12:03:34.576186+00:00"}