{"ip":"108.28.86.172","data_as_of":"2026-10-27T01:37:59+00:00","observed":true,"total_events":34,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"network service provider","why":["34 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 10,316 bytes to few ports with no known exploit path, which is focused interaction with one service."],"engagement":{"level":"payload","label":"Sustained payload","detail":"10,316 bytes sent","bytes_sent":10316,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-08-23T17:59:37","last_seen":"2026-10-26T15:55:12","events_24h":32,"events_7d":32,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"US","country_name":"United States","region":"Maryland","city":"Silver Spring","lat":39.0851,"lon":-77.059,"asn":701,"org":"Verizon Business"},"source_domain":"pool-108-28-86-172.washdc.fios.verizon.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as701","label":"Verizon","category":"isp","url":"https://www.peeringdb.com/asn/701"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":5555,"proto":"tcp","label":"","count":33},{"port":7860,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["b11cun020_00040001_4e1a3733"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"b11cun020_00040001_4e1a3733":9},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-08-23","count":1},{"date":"2026-09-08","count":1},{"date":"2026-10-26","count":32}],"recent_events":[{"timestamp":"2026-10-26T15:55:12","port":5555,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CNXN\u0001\u0000\u0000\u0001\u0000\u0000\u0010\u0000\u001e\u0001\u0000\u0000\u001dp\u0000\u0000����host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_symlink_timestamp,abb_exec,remount_shell,track_app,sendrecv_v2,sendrecv_v2_brotli,sendrecv_v2_lz4,sendrecv_v2_zstd,sendrecv_v2_dry_run_send,devicetracker_proto_format,devraw,app_info,server_status,track_mdns","payload_hex":"434e584e01000001000010001e0100001d700000bcb1a7b1686f73743a3a66656174757265733d7368656c6c5f76322c636d642c737461745f76322c6c735f76322c66697865645f707573685f6d6b6469722c617065782c6162622c66697865645f707573685f73796d6c696e6b5f74696d657374616d702c6162625f657865632c72656d6f756e745f7368656c6c2c747261636b5f6170702c73656e64726563765f76322c73656e64726563765f76325f62726f746c692c73656e64726563765f76325f6c7a342c73656e64726563765f76325f7a7374642c73656e64726563765f76325f6472795f72756e5f73656e642c646576696365747261636b65725f70726f746f5f666f726d61742c6465767261772c6170705f696e666f2c7365727665725f7374617475732c747261636b5f6d646e73","method":"","user_agent":"","ja3":"","session":"c4af53fa-4a83-4910-af8c-593adb30b3d0","seq":1,"duration_ms":100,"bytes_in":310,"bytes_out":13,"enriched":{"digest":"44ade21a2d385f68","strings":["CNXN","host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_s…"]}},{"timestamp":"2026-10-26T15:13:05","port":5555,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CNXN\u0001\u0000\u0000\u0001\u0000\u0000\u0010\u0000\u001e\u0001\u0000\u0000\u001dp\u0000\u0000����host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_symlink_timestamp,abb_exec,remount_shell,track_app,sendrecv_v2,sendrecv_v2_brotli,sendrecv_v2_lz4,sendrecv_v2_zstd,sendrecv_v2_dry_run_send,devicetracker_proto_format,devraw,app_info,server_status,track_mdns","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"738a1a25-c741-4448-94b0-8e304f4807cf","seq":1,"duration_ms":102,"bytes_in":310,"bytes_out":13,"enriched":{"digest":"44ade21a2d385f68","strings":["CNXN","host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_s…"]}},{"timestamp":"2026-10-26T14:31:54","port":5555,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CNXN\u0001\u0000\u0000\u0001\u0000\u0000\u0010\u0000\u001e\u0001\u0000\u0000\u001dp\u0000\u0000����host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_symlink_timestamp,abb_exec,remount_shell,track_app,sendrecv_v2,sendrecv_v2_brotli,sendrecv_v2_lz4,sendrecv_v2_zstd,sendrecv_v2_dry_run_send,devicetracker_proto_format,devraw,app_info,server_status,track_mdns","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"9abb66e3-d5ea-4cb1-808a-67dce9124519","seq":1,"duration_ms":100,"bytes_in":310,"bytes_out":13,"enriched":{"digest":"44ade21a2d385f68","strings":["CNXN","host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_s…"]}},{"timestamp":"2026-10-26T13:55:59","port":5555,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CNXN\u0001\u0000\u0000\u0001\u0000\u0000\u0010\u0000\u001e\u0001\u0000\u0000\u001dp\u0000\u0000����host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_symlink_timestamp,abb_exec,remount_shell,track_app,sendrecv_v2,sendrecv_v2_brotli,sendrecv_v2_lz4,sendrecv_v2_zstd,sendrecv_v2_dry_run_send,devicetracker_proto_format,devraw,app_info,server_status,track_mdns","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"34dacf0d-35b2-415e-85a7-7906f910f91b","seq":1,"duration_ms":101,"bytes_in":310,"bytes_out":13,"enriched":{"digest":"44ade21a2d385f68","strings":["CNXN","host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_s…"]}},{"timestamp":"2026-10-26T13:18:18","port":5555,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CNXN\u0001\u0000\u0000\u0001\u0000\u0000\u0010\u0000\u001e\u0001\u0000\u0000\u001dp\u0000\u0000����host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_symlink_timestamp,abb_exec,remount_shell,track_app,sendrecv_v2,sendrecv_v2_brotli,sendrecv_v2_lz4,sendrecv_v2_zstd,sendrecv_v2_dry_run_send,devicetracker_proto_format,devraw,app_info,server_status,track_mdns","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"e0b0bb46-8c15-43fd-ba13-79e2aa76709b","seq":1,"duration_ms":100,"bytes_in":310,"bytes_out":13,"enriched":{"digest":"44ade21a2d385f68","strings":["CNXN","host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_s…"]}},{"timestamp":"2026-10-26T12:43:55","port":5555,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CNXN\u0001\u0000\u0000\u0001\u0000\u0000\u0010\u0000\u001e\u0001\u0000\u0000\u001dp\u0000\u0000����host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_symlink_timestamp,abb_exec,remount_shell,track_app,sendrecv_v2,sendrecv_v2_brotli,sendrecv_v2_lz4,sendrecv_v2_zstd,sendrecv_v2_dry_run_send,devicetracker_proto_format,devraw,app_info,server_status,track_mdns","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"855e4ebd-34e2-4e07-8947-0dc1ea3fadea","seq":1,"duration_ms":100,"bytes_in":310,"bytes_out":13,"enriched":{"digest":"44ade21a2d385f68","strings":["CNXN","host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_s…"]}},{"timestamp":"2026-10-26T12:10:05","port":5555,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CNXN\u0001\u0000\u0000\u0001\u0000\u0000\u0010\u0000\u001e\u0001\u0000\u0000\u001dp\u0000\u0000����host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_symlink_timestamp,abb_exec,remount_shell,track_app,sendrecv_v2,sendrecv_v2_brotli,sendrecv_v2_lz4,sendrecv_v2_zstd,sendrecv_v2_dry_run_send,devicetracker_proto_format,devraw,app_info,server_status,track_mdns","payload_hex":"434e584e01000001000010001e0100001d700000bcb1a7b1686f73743a3a66656174757265733d7368656c6c5f76322c636d642c737461745f76322c6c735f76322c66697865645f707573685f6d6b6469722c617065782c6162622c66697865645f707573685f73796d6c696e6b5f74696d657374616d702c6162625f657865632c72656d6f756e745f7368656c6c2c747261636b5f6170702c73656e64726563765f76322c73656e64726563765f76325f62726f746c692c73656e64726563765f76325f6c7a342c73656e64726563765f76325f7a7374642c73656e64726563765f76325f6472795f72756e5f73656e642c646576696365747261636b65725f70726f746f5f666f726d61742c6465767261772c6170705f696e666f2c7365727665725f7374617475732c747261636b5f6d646e73","method":"","user_agent":"","ja3":"","session":"f820122e-9c54-4486-8d8f-75bd74ba958a","seq":1,"duration_ms":101,"bytes_in":310,"bytes_out":13,"enriched":{"digest":"44ade21a2d385f68","strings":["CNXN","host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_s…"]}},{"timestamp":"2026-10-26T11:40:53","port":5555,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CNXN\u0001\u0000\u0000\u0001\u0000\u0000\u0010\u0000\u001e\u0001\u0000\u0000\u001dp\u0000\u0000����host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_symlink_timestamp,abb_exec,remount_shell,track_app,sendrecv_v2,sendrecv_v2_brotli,sendrecv_v2_lz4,sendrecv_v2_zstd,sendrecv_v2_dry_run_send,devicetracker_proto_format,devraw,app_info,server_status,track_mdns","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"77e17f3b-2580-4404-b923-8929f5b22f59","seq":1,"duration_ms":101,"bytes_in":310,"bytes_out":13,"enriched":{"digest":"44ade21a2d385f68","strings":["CNXN","host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_s…"]}},{"timestamp":"2026-10-26T11:08:12","port":5555,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CNXN\u0001\u0000\u0000\u0001\u0000\u0000\u0010\u0000\u001e\u0001\u0000\u0000\u001dp\u0000\u0000����host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_symlink_timestamp,abb_exec,remount_shell,track_app,sendrecv_v2,sendrecv_v2_brotli,sendrecv_v2_lz4,sendrecv_v2_zstd,sendrecv_v2_dry_run_send,devicetracker_proto_format,devraw,app_info,server_status,track_mdns","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"7f586f46-18f3-4f0a-9ed8-ab4ea928c1de","seq":1,"duration_ms":101,"bytes_in":310,"bytes_out":13,"enriched":{"digest":"44ade21a2d385f68","strings":["CNXN","host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_s…"]}},{"timestamp":"2026-10-26T10:42:15","port":5555,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CNXN\u0001\u0000\u0000\u0001\u0000\u0000\u0010\u0000\u001e\u0001\u0000\u0000\u001dp\u0000\u0000����host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_symlink_timestamp,abb_exec,remount_shell,track_app,sendrecv_v2,sendrecv_v2_brotli,sendrecv_v2_lz4,sendrecv_v2_zstd,sendrecv_v2_dry_run_send,devicetracker_proto_format,devraw,app_info,server_status,track_mdns","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"6aecd5b9-634b-4488-b009-3303ce8326af","seq":1,"duration_ms":101,"bytes_in":310,"bytes_out":13,"enriched":{"digest":"44ade21a2d385f68","strings":["CNXN","host::features=shell_v2,cmd,stat_v2,ls_v2,fixed_push_mkdir,apex,abb,fixed_push_s…"]}}],"http_methods":[{"method":"GET","count":1}],"distinct_ports_total":2,"top_paths":[{"path":"/api/v1/auto_login","count":1,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}