{"ip":"5.199.193.153","total_events":41,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["41 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,226 bytes sent","bytes_sent":2226,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-21T23:42:56","last_seen":"2026-09-28T09:38:51","events_24h":0,"events_7d":23,"geo":{"country_code":"RU","country_name":"Russia","region":"Sverdlovsk Oblast","city":"Kirovgrad","lat":57.4358,"lon":60.0694,"asn":48642,"org":"Joint stock company For"},"source_domain":"5-199-193-153.k-telecom.org","known_scanners":[],"scanner_tag":{"key":"peeringdb:as48642","label":"K Telecom Ldt.","category":"isp","url":"https://www.peeringdb.com/asn/48642"},"cve_matches":[],"malware":[],"top_ports":[{"port":37777,"proto":"tcp","label":"","count":41}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-21","count":3},{"date":"2026-09-23","count":23},{"date":"2026-09-24","count":13},{"date":"2026-09-28","count":2}],"recent_events":[{"timestamp":"2026-09-28T09:38:51","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000`\"\u0000\u0000\u0000admin\u0000\u0000\u0000admin\u0000\u0000\u0000\u0004\u0001\u0000\u0000\u0000\u0000��admin&&admin\u0000Random:1790588330\r\n\r\n","payload_hex":"a00000602200000061646d696e00000061646d696e000000040100000000a1aa61646d696e262661646d696e0052616e646f6d3a313739303538383333300d0a0d0a","method":"","user_agent":"","ja3":"","session":"36188ac7-cd81-4444-825d-ca77a67550f0","seq":1,"duration_ms":100,"bytes_in":66,"bytes_out":13,"enriched":{"digest":"d6607bc0cd735668","strings":["admin","admin&&admin","Random:1790588330","`\"adminadmin","admin&&adminRandom:1790588330"]}},{"timestamp":"2026-09-28T08:23:04","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000`%\u0000\u0000\u0000admin\u0000\u0000\u0000admin123\u0004\u0001\u0000\u0000\u0000\u0000��admin&&admin123\u0000Random:1790583784\r\n\r\n","payload_hex":"a00000602500000061646d696e00000061646d696e313233040100000000a1aa61646d696e262661646d696e3132330052616e646f6d3a313739303538333738340d0a0d0a","method":"","user_agent":"","ja3":"","session":"4cb95bdd-dad9-4e7f-b7c7-d1a59c2df2da","seq":1,"duration_ms":100,"bytes_in":69,"bytes_out":13,"enriched":{"digest":"ab61b0374db5127a","strings":["admin","admin123","admin&&admin123","Random:1790583784","`%adminadmin123","admin&&admin123Random:1790583784"]}},{"timestamp":"2026-09-24T11:46:12","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000`&\u0000\u0000\u0000admn888\u0000tooeasy\u0000\u0004\u0001\u0000\u0000\u0000\u0000��admn888&&tooeasy\u0000Random:1790250372\r\n\r\n","payload_hex":"a00000602600000061646d6e38383800746f6f6561737900040100000000a1aa61646d6e3838382626746f6f656173790052616e646f6d3a313739303235303337320d0a0d0a","method":"","user_agent":"","ja3":"","session":"da1f425b-55a1-4155-bc25-ad4adf32a198","seq":1,"duration_ms":100,"bytes_in":70,"bytes_out":13,"enriched":{"digest":"edf3405acf2e01b4","strings":["admn888","tooeasy","admn888&&tooeasy","Random:1790250372","`&admn888tooeasy","admn888&&tooeasyRandom:1790250372"]}},{"timestamp":"2026-09-24T11:07:04","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000`#\u0000\u0000\u0000admin\u0000\u0000\u0000111111\u0000\u0000\u0004\u0001\u0000\u0000\u0000\u0000��admin&&111111\u0000Random:1790248023\r\n\r\n","payload_hex":"a00000602300000061646d696e0000003131313131310000040100000000a1aa61646d696e26263131313131310052616e646f6d3a313739303234383032330d0a0d0a","method":"","user_agent":"","ja3":"","session":"b4dfa66a-08f6-4151-be4d-b115771e285e","seq":1,"duration_ms":100,"bytes_in":67,"bytes_out":13,"enriched":{"digest":"adb5fb25ee701629","strings":["admin","111111","admin&&111111","Random:1790248023","`#admin111111","admin&&111111Random:1790248023"]}},{"timestamp":"2026-09-24T10:28:18","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000`#\u0000\u0000\u0000admin\u0000\u0000\u00001q2w3e\u0000\u0000\u0004\u0001\u0000\u0000\u0000\u0000��admin&&1q2w3e\u0000Random:1790245698\r\n\r\n","payload_hex":"a00000602300000061646d696e0000003171327733650000040100000000a1aa61646d696e26263171327733650052616e646f6d3a313739303234353639380d0a0d0a","method":"","user_agent":"","ja3":"","session":"971c7cdc-7187-4019-a87f-6fe54c8cfcc5","seq":1,"duration_ms":100,"bytes_in":67,"bytes_out":13,"enriched":{"digest":"f1d4967fe7f7cef6","strings":["admin","1q2w3e","admin&&1q2w3e","Random:1790245698","`#admin1q2w3e","admin&&1q2w3eRandom:1790245698"]}},{"timestamp":"2026-09-24T09:49:15","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000`%\u0000\u0000\u0000admin\u0000\u0000\u000012345678\u0004\u0001\u0000\u0000\u0000\u0000��admin&&12345678\u0000Random:1790243355\r\n\r\n","payload_hex":"a00000602500000061646d696e0000003132333435363738040100000000a1aa61646d696e262631323334353637380052616e646f6d3a313739303234333335350d0a0d0a","method":"","user_agent":"","ja3":"","session":"d5464e79-b746-4f4c-ad54-71526bcd7804","seq":1,"duration_ms":100,"bytes_in":69,"bytes_out":13,"enriched":{"digest":"494459493d6bddff","strings":["admin","12345678","admin&&12345678","Random:1790243355","`%admin12345678","admin&&12345678Random:1790243355"]}},{"timestamp":"2026-09-24T09:09:33","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000`%\u0000\u0000\u0000admin\u0000\u0000\u0000password\u0004\u0001\u0000\u0000\u0000\u0000��admin&&password\u0000Random:1790240973\r\n\r\n","payload_hex":"a00000602500000061646d696e00000070617373776f7264040100000000a1aa61646d696e262670617373776f72640052616e646f6d3a313739303234303937330d0a0d0a","method":"","user_agent":"","ja3":"","session":"3fefbf2a-1fe8-4d02-8ac4-f57c56957d44","seq":1,"duration_ms":100,"bytes_in":69,"bytes_out":13,"enriched":{"digest":"de9ca41371b7b244","strings":["admin","password","admin&&password","Random:1790240973","`%adminpassword","admin&&passwordRandom:1790240973"]}},{"timestamp":"2026-09-24T08:30:20","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000`\"\u0000\u0000\u0000admin\u0000\u0000\u000012345\u0000\u0000\u0000\u0004\u0001\u0000\u0000\u0000\u0000��admin&&12345\u0000Random:1790238619\r\n\r\n","payload_hex":"a00000602200000061646d696e0000003132333435000000040100000000a1aa61646d696e262631323334350052616e646f6d3a313739303233383631390d0a0d0a","method":"","user_agent":"","ja3":"","session":"7427b209-2a41-4bf8-b9e6-1d67f7164a3d","seq":1,"duration_ms":100,"bytes_in":66,"bytes_out":13,"enriched":{"digest":"1ed41a3c6ef0c10e","strings":["admin","12345","admin&&12345","Random:1790238619","`\"admin12345","admin&&12345Random:1790238619"]}},{"timestamp":"2026-09-24T07:51:07","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000`#\u0000\u0000\u0000admin\u0000\u0000\u0000qwerty\u0000\u0000\u0004\u0001\u0000\u0000\u0000\u0000��admin&&qwerty\u0000Random:1790236267\r\n\r\n","payload_hex":"a00000602300000061646d696e0000007177657274790000040100000000a1aa61646d696e26267177657274790052616e646f6d3a313739303233363236370d0a0d0a","method":"","user_agent":"","ja3":"","session":"afdccad0-6cdd-44ed-aa26-e27777d6a71d","seq":1,"duration_ms":100,"bytes_in":67,"bytes_out":13,"enriched":{"digest":"f2182973efe87616","strings":["admin","qwerty","admin&&qwerty","Random:1790236267","`#adminqwerty","admin&&qwertyRandom:1790236267"]}},{"timestamp":"2026-09-24T03:10:28","port":37777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000`\"\u0000\u0000\u0000root\u0000\u0000\u0000\u0000666666\u0000\u0000\u0004\u0001\u0000\u0000\u0000\u0000��root&&666666\u0000Random:1790219427\r\n\r\n","payload_hex":"a000006022000000726f6f74000000003636363636360000040100000000a1aa726f6f7426263636363636360052616e646f6d3a313739303231393432370d0a0d0a","method":"","user_agent":"","ja3":"","session":"ab71ee64-0ddb-4680-a181-9b7c9abc722e","seq":1,"duration_ms":100,"bytes_in":66,"bytes_out":13,"enriched":{"digest":"80267783776ac1ca","strings":["root","666666","root&&666666","Random:1790219427","`\"root666666","root&&666666Random:1790219427"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-30T18:04:14.643172+00:00"}