{"ip":"80.66.83.73","total_events":12,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["12 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"144 bytes sent","bytes_sent":144,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-09T21:32:45","last_seen":"2026-08-09T22:15:07","events_24h":0,"events_7d":12,"geo":{"country_code":"RU","country_name":"Russia","region":"","city":"","lat":55.7386,"lon":37.6068,"asn":216473,"org":"Bashinskii Vadim Ruslanovich"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":5991,"proto":"tcp","label":"","count":12}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-09","count":12}],"recent_events":[{"timestamp":"2026-08-09T22:15:07","port":5991,"proto":"tcp","app_proto":"","app_protocol":"vnc","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"RFB 003.008\n","payload_hex":"524642203030332e3030380a","method":"","user_agent":"","ja3":"","session":"c0629884-8e7f-4472-b03c-18e433db9d5c","seq":1,"duration_ms":100,"bytes_in":12,"bytes_out":11,"enriched":{"digest":"32076d57dc270404","label":"VNC (RFB)","strings":["RFB 003.008"]}},{"timestamp":"2026-08-09T22:14:36","port":5991,"proto":"tcp","app_proto":"","app_protocol":"vnc","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"RFB 003.008\n","payload_hex":"524642203030332e3030380a","method":"","user_agent":"","ja3":"","session":"6c5ebfe8-c942-499e-996d-f892d28d7bb6","seq":1,"duration_ms":100,"bytes_in":12,"bytes_out":11,"enriched":{"digest":"32076d57dc270404","label":"VNC (RFB)","strings":["RFB 003.008"]}},{"timestamp":"2026-08-09T21:41:14","port":5991,"proto":"tcp","app_proto":"","app_protocol":"vnc","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"RFB 003.008\n","payload_hex":"524642203030332e3030380a","method":"","user_agent":"","ja3":"","session":"a23caa53-74fa-4528-804a-b1cbf0db4bd9","seq":1,"duration_ms":101,"bytes_in":12,"bytes_out":11,"enriched":{"digest":"32076d57dc270404","label":"VNC (RFB)","strings":["RFB 003.008"]}},{"timestamp":"2026-08-09T21:40:42","port":5991,"proto":"tcp","app_proto":"","app_protocol":"vnc","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"RFB 003.008\n","payload_hex":"524642203030332e3030380a","method":"","user_agent":"","ja3":"","session":"be743c30-941d-4477-b1ec-04a4d3dac439","seq":1,"duration_ms":100,"bytes_in":12,"bytes_out":11,"enriched":{"digest":"32076d57dc270404","label":"VNC (RFB)","strings":["RFB 003.008"]}},{"timestamp":"2026-08-09T21:40:42","port":5991,"proto":"tcp","app_proto":"","app_protocol":"vnc","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"RFB 003.008\n","payload_hex":"524642203030332e3030380a","method":"","user_agent":"","ja3":"","session":"e902c6f5-31b7-4601-8942-ddfedd04dfe0","seq":1,"duration_ms":100,"bytes_in":12,"bytes_out":11,"enriched":{"digest":"32076d57dc270404","label":"VNC (RFB)","strings":["RFB 003.008"]}},{"timestamp":"2026-08-09T21:35:50","port":5991,"proto":"tcp","app_proto":"","app_protocol":"vnc","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"RFB 003.008\n","payload_hex":"524642203030332e3030380a","method":"","user_agent":"","ja3":"","session":"6ce9bdc0-b92d-458c-bdeb-79629827766a","seq":1,"duration_ms":100,"bytes_in":12,"bytes_out":11,"enriched":{"digest":"32076d57dc270404","label":"VNC (RFB)","strings":["RFB 003.008"]}},{"timestamp":"2026-08-09T21:35:49","port":5991,"proto":"tcp","app_proto":"","app_protocol":"vnc","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"RFB 003.008\n","payload_hex":"524642203030332e3030380a","method":"","user_agent":"","ja3":"","session":"30bfaa32-4b7c-46e7-9afd-f8ab1338ea89","seq":1,"duration_ms":100,"bytes_in":12,"bytes_out":11,"enriched":{"digest":"32076d57dc270404","label":"VNC (RFB)","strings":["RFB 003.008"]}},{"timestamp":"2026-08-09T21:34:11","port":5991,"proto":"tcp","app_proto":"","app_protocol":"vnc","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"RFB 003.008\n","payload_hex":"524642203030332e3030380a","method":"","user_agent":"","ja3":"","session":"30c85543-ec0b-4ce3-a18d-0f5a1ba12fc1","seq":1,"duration_ms":100,"bytes_in":12,"bytes_out":11,"enriched":{"digest":"32076d57dc270404","label":"VNC (RFB)","strings":["RFB 003.008"]}},{"timestamp":"2026-08-09T21:32:46","port":5991,"proto":"tcp","app_proto":"","app_protocol":"vnc","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"RFB 003.008\n","payload_hex":"524642203030332e3030380a","method":"","user_agent":"","ja3":"","session":"2644c890-b654-4192-a4b6-6a69242c51b0","seq":1,"duration_ms":101,"bytes_in":12,"bytes_out":11,"enriched":{"digest":"32076d57dc270404","label":"VNC (RFB)","strings":["RFB 003.008"]}},{"timestamp":"2026-08-09T21:32:45","port":5991,"proto":"tcp","app_proto":"","app_protocol":"vnc","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"RFB 003.008\n","payload_hex":"524642203030332e3030380a","method":"","user_agent":"","ja3":"","session":"ac7c8db8-63a5-4ec3-a384-d3a6953b4c04","seq":1,"duration_ms":100,"bytes_in":12,"bytes_out":11,"enriched":{"digest":"32076d57dc270404","label":"VNC (RFB)","strings":["RFB 003.008"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T06:47:07.257683+00:00"}