{"ip":"18.194.240.245","observed":true,"total_events":8,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["8 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,680 bytes sent","bytes_sent":1680,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-14T14:16:40","last_seen":"2026-10-14T14:18:38","events_24h":8,"events_7d":8,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":16509,"org":"Amazon.com, Inc."},"source_domain":"ec2-18-194-240-245.eu-central-1.compute.amazonaws.com","known_scanners":[],"scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":2224,"proto":"tcp","label":"","count":4},{"port":2223,"proto":"tcp","label":"","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d311100_e8f1e7e78f70_d41ae481755e"],"tls_client_hello":"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","tls_ja3":["d39e1be3241d516b1f714bd47c2bc968"],"http_akin":[]},"fingerprint_peers":{"t13d311100_e8f1e7e78f70_d41ae481755e":23},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-14","count":8}],"recent_events":[{"timestamp":"2026-10-14T14:18:38","port":2224,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"server.boltgaming.io","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000�\n$ec7495c8-4da9-48ef-a4a1-8125dce9398f\"�\u0001\u001a�\u0001KY�O5�Os�\u001aL����G��\f��;�C\u0004���Eؤ������@��W�:��/\u0018\u0007i������ f/�Z(\u0001","payload_hex":"000000ce0a2435326330373534322d623933622d346265392d626536662d30356163633734336232346222a3011aa0010e75f0818b5b339159f2c4806464123a06b1f6b37a2113217264bf228808825a8d772b5d40e0c6f73484aec3482342a0aea0442986b053c1c8bd189c505e7981dcf87c99f63383839f8a0dd3a542a99d1ebb8a76b2e7af878684a23c5cfb27d93ac39f303e599a4f35ab4f73a31a4ce3d7d2f747c1f00cbdb03b9643049185c845d8a4969687b1dfe940c3c557983ab0f12f180769b69d87fbd8d920662faf5a2801","method":"","user_agent":"","ja3":"d39e1be3241d516b1f714bd47c2bc968","session":"4386972e-f954-48b5-a20c-a4d073bddc8b","seq":1,"duration_ms":100,"bytes_in":210,"bytes_out":14,"enriched":{"digest":"6bc814fb859458d4","strings":["$52c07542-b93b-4be9-be6f-05acc743b24b\"","w+]@"]}},{"timestamp":"2026-10-14T14:18:08","port":2224,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"server.boltgaming.io","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000�\n$2cbd44e2-f15c-490d-99c8-95dc8fc13b09\"�\u0001\u001a�\u0001\u0015$�R���Yl6%�_�\f��j`ѣ�+\u000e�ý��\u001a\u0012�Z\bR�\u0007\u001d��!g�\u001b:�yxo\u001a�q�#]OΪN?��\u000eL�x�4\u0007�vsTR03��!\u0018;�+H\u001aZrڗ\u0012VPS\u001a����\u0012���.�`���P\u0002�`T �n��\bD��s&\"��ـ\u0000��h\u0005��V�\f\"�o\u001e�:a�G�B��0�2����(\u0001","payload_hex":"000000ce0a2432636264343465322d663135632d343930642d393963382d39356463386663313362303922a3011aa0011524df5298bbe1596c3625a15faf0ce3a16a60d1a3b22b0e8ec3bdb9de1a12d15a087f52a1071d89952167d11b3aeb79786f1ab371f7235d4fceaa4e3f90db0e4cd078c034079a767354523033e5fb21183bcf2b481a5a72da97125650531aa7b994df12b48a832eac60f1d4ef5002fa605420b26ec1f90844a7a5732622a498d98000b2fa6805fdd756c90c229e6f1ed53a61ea47a742c2f830b132f2ae9bf22801","method":"","user_agent":"","ja3":"d39e1be3241d516b1f714bd47c2bc968","session":"01d753ab-8150-4880-811a-c9dcf0bb1daf","seq":1,"duration_ms":102,"bytes_in":210,"bytes_out":14,"enriched":{"digest":"53abb5e19a08146c","strings":["$2cbd44e2-f15c-490d-99c8-95dc8fc13b09\"","Yl6%","vsTR03"]}},{"timestamp":"2026-10-14T14:17:39","port":2223,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"server.boltgaming.io","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000�\n$bb228923-761e-47b8-8072-08713fb64131\"�\u0001\u001a�\u0001���]*j0��͞����׊�d�:u�\u0014���\u001a\u001e�r8+gˁ:�l��N�\u0004��˰\u001c��h\n��S�\n������\u0006�Y�Yh]�:R���z\u001f��y�lIܟ�\u0000p�C��f�\\�WtX��J\r�p�\u001e�c.zg�80���&�A�v�^*\u0012^w���J���d�s����螩�CWV���\u0001\u0019��(\u0001","payload_hex":"000000ce0a2462623232383932332d373631652d343762382d383037322d30383731336662363431333122a3011aa00194f2ac5d2a6a30e0f0cd9e9afcacc4d78af164f33a75c814ede5b31a1efa72382b67cb813a906caa904e8a049e88cbb01cbce2680a8dae53ba0affcee5fee29406d859fd59685dc23a5280ccee7a1fc1c079b96c49dc9fd80070a343b1b966ed5cc5577458ab944a0da470a91eb8632e7a67b93830b3f9cf268341fa76f55e2a125e7780fcd34ac9fc8d64f873b9c1b37fcfe89ea9d943575689f4c40119e9922801","method":"","user_agent":"","ja3":"d39e1be3241d516b1f714bd47c2bc968","session":"27bf6b0e-261d-4294-824f-469be348f7f7","seq":1,"duration_ms":100,"bytes_in":210,"bytes_out":14,"enriched":{"digest":"68a114f0be71e83e","strings":["$bb228923-761e-47b8-8072-08713fb64131\"","]*j0","r8+g","c.zg"],"iocs":{"domains":["c.zg"]}}},{"timestamp":"2026-10-14T14:17:38","port":2224,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"server.boltgaming.io","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000�\n$949c2d23-312f-48d6-ad70-2098161e6101\"�\u0001\u001a�\u0001Ϲ-\u001f0\u0016Ux\u000e\u0000c\u0011��^��sjO�/\u0001\u0001��_��N�$\u0017�4�x�\u001b p=�ؘEҘ���%T���Cq�\u0018\u0014x��\u0005x�I�W\f\u0006�ꍅ���V�\u000f�|X�\u0002S\u0001����s�n(L�\u0017��q�ܯ>��O�׹\u0013�-\u0012D���ۖ�X�\u0015KB\u000fpx\u0001�w�雄f�4\n�C%�\f�b\n�\u0017|Aw \u0015��(\u0001","payload_hex":"000000ce0a2439343963326432332d333132662d343864362d616437302d32303938313631653631303122a3011aa001cfb92d1f301655780e006311d9c55ebedf736a4f9f2f0101a3df5fffc24e912417bd34ad78d51b20703d99d89845d298a9c8f32554d5f0964371e0181478dafe0578bb49b1570c06c2ea8d859a8c9c56de0f947c58d202530194b6a4b773ea6e284cfd17d0c371d0dcaf3e97954f88d7b913b22d1244bfe9bddb96fc588f154b420f7078019477e1e99b8466c7340ac34325bb0cb1620ab6177c41772015f0c02801","method":"","user_agent":"","ja3":"d39e1be3241d516b1f714bd47c2bc968","session":"68df6792-834b-4712-992c-645cf0a8e509","seq":1,"duration_ms":101,"bytes_in":210,"bytes_out":14,"enriched":{"digest":"3ca3af03b892257c","strings":["$949c2d23-312f-48d6-ad70-2098161e6101\""]}},{"timestamp":"2026-10-14T14:17:10","port":2223,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"server.boltgaming.io","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000�\n$392a7a69-9dca-47b5-a69c-fedcb35a24ad\"�\u0001\u001a�\u0001�=˪R\u0013�O���/�D܍\u0011\u0011��w�h�3+��L\u0015(��ݱL4\u0018zOaÜ�P���q��RZc�W��]\t�nx?��}t�x\u0004�\u001f\u0003Fw�|\u001f�9�н�E��\"�\u0017���t��X���\u0014g?\u001d�{�\tm4�u�A��0��6�\u0019c�F@}]U�8;��q�\u001f��$\u000f�����Y���[OB\u0002c�m(\u0001","payload_hex":"000000ce0a2433393261376136392d396463612d343762352d613639632d66656463623335613234616422a3011aa001f33dcbaa52138d4ff7bbfa2f9744dc8d11119096777f8768eb332ba1e44c1528a3a7ddb14c347f187a4f61c39cb150c1e58971aad8525a63e95781c25d09f36e783fa2dd7d74b278048d1f034677867c1ffb39d8d0bdf145f5ee22c41780abd174a1f358a2e8eb14673f1dd37baf096d34dd759541ecc1309fe336f71963d146407d5d55bf383b9a9671e71fa6f1240ff6d3f0acf159baa1dd5b4f420263d36d2801","method":"","user_agent":"","ja3":"d39e1be3241d516b1f714bd47c2bc968","session":"7472cee2-ade1-4a3f-9577-a43555b552f7","seq":1,"duration_ms":100,"bytes_in":210,"bytes_out":14,"enriched":{"digest":"6344feb7354507d8","strings":["$392a7a69-9dca-47b5-a69c-fedcb35a24ad\"","F@}]U"]}},{"timestamp":"2026-10-14T14:17:08","port":2224,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"server.boltgaming.io","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000�\n$e8da387c-cdfa-4fae-ae28-02ea76642cd4\"�\u0001\u001a�\u0001t�R�S!�U�Z\u0006U�R�w�+�i;\f>��·a�>_`�X��`.��\u0015ɴ;Ъ���\u0002��mF�vr�Њ\u001e������\u001f�H\n����\u0007�=��_ȍ\f���)wM\u001b�\u0012�\u001b\u0017M\u0005�\u0003�\tf\u001cǿ%Α�l�0�\u0015)�\"O%\u0012�\u000b�'�cڎ3\b�y*r�*��6P$\u0018����;�n\"u���_��\u0000(\u0001","payload_hex":"000000ce0a2465386461333837632d636466612d346661652d616532382d30326561373636343263643422a3011aa001747ff052f95321e355f25a0655ab52e577832bc4693b0c3eb1bcc2b7619d3e5f60d558e5a5602ebdc715c9b43bd0aa8feeda02a5a66d46f07672d6d08a1e86e083effb8d1fca480a9d96cee907c03dfdc85fc88d0ce7b0c029774d1bf312ab1b174d05b403d109661cc7bf25ce91ed6c8330c51529db224f25128f0bb327be63da8e3308b0792a72c02ae9c036502418ba97f7d03bfc6e2275e8f1bb5fddd2002801","method":"","user_agent":"","ja3":"d39e1be3241d516b1f714bd47c2bc968","session":"13f17b91-9eb1-4974-b596-8346fe5b3653","seq":1,"duration_ms":101,"bytes_in":210,"bytes_out":14,"enriched":{"digest":"2cf04ea9b6e89f83","strings":["$e8da387c-cdfa-4fae-ae28-02ea76642cd4\""]}},{"timestamp":"2026-10-14T14:16:40","port":2223,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"server.boltgaming.io","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000�\n$293b6b44-1115-42b7-b5cb-0f3d9e9dcdf6\"�\u0001\u001a�\u0001\u0006���vR�\n�����g�\u000b&��e&UȒ���\u0006\f�v��Bc��G�\u0019e�\u001b��\u0011���\u0006B�����F57~\u0003!TƖ9�]��v�T\u0019�2�\u0010�A\u0016\u0019+4�'�r�SR\u001d���\u0010:�lvt�a�\u0000�H3�