{"ip":"82.147.84.244","total_events":754,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"110+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 110 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"24,966 bytes sent","bytes_sent":24966,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-19T21:14:10","last_seen":"2026-08-19T21:14:49","events_24h":754,"events_7d":754,"geo":{"country_code":"RU","country_name":"Russia","region":"","city":"","lat":55.7386,"lon":37.6068,"asn":211860,"org":"Nerushenko Vyacheslav Nikolaevich"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":63389,"proto":"tcp","label":"","count":12},{"port":3325,"proto":"tcp","label":"","count":11},{"port":13390,"proto":"tcp","label":"","count":10},{"port":33892,"proto":"tcp","label":"","count":10},{"port":5504,"proto":"tcp","label":"","count":10},{"port":5902,"proto":"tcp","label":"","count":10},{"port":33389,"proto":"tcp","label":"","count":10},{"port":33898,"proto":"tcp","label":"","count":10},{"port":1234,"proto":"tcp","label":"","count":10},{"port":79,"proto":"tcp","label":"","count":10},{"port":50250,"proto":"tcp","label":"","count":10},{"port":9202,"proto":"tcp","label":"","count":10},{"port":3387,"proto":"tcp","label":"","count":10},{"port":9833,"proto":"tcp","label":"","count":10},{"port":33895,"proto":"tcp","label":"","count":10}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-19","count":754}],"recent_events":[{"timestamp":"2026-08-19T21:14:49","port":4489,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"f2cf3e34-4765-45f1-8d47-05cfc3b65c14","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":13},{"timestamp":"2026-08-19T21:14:48","port":44444,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"cc79c825-aacc-4204-8951-c59f6893e4ff","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":13},{"timestamp":"2026-08-19T21:14:48","port":5901,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"d013e716-da41-48bc-9011-d0b43eefc88c","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":13},{"timestamp":"2026-08-19T21:14:47","port":33894,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"8269cf19-6015-484d-9a69-08327f38526a","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":13},{"timestamp":"2026-08-19T21:14:47","port":33898,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"04954bb7-3507-4709-8472-f099cb077449","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":13},{"timestamp":"2026-08-19T21:14:47","port":1234,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"d3cfcc94-0cc8-4cac-b3e3-4c6fe5b4fd1f","seq":1,"duration_ms":101,"bytes_in":47,"bytes_out":13},{"timestamp":"2026-08-19T21:14:47","port":5589,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"e81428b7-97d8-4097-a267-b2165f530ccb","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":13},{"timestamp":"2026-08-19T21:14:47","port":2015,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"7a83bbf6-82b5-4117-aa57-6252e61e3ab7","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":13},{"timestamp":"2026-08-19T21:14:47","port":3387,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"7c1b42eb-3ef6-49c6-a7ea-7e91081b345d","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":13},{"timestamp":"2026-08-19T21:14:47","port":3392,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"9ae736b5-af77-4e43-9c4a-a359f8a49064","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":13}],"http_methods":[],"distinct_ports_total":110,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T17:34:40.525508+00:00"}