{"ip":"193.46.255.155","data_as_of":"2026-10-24T01:53:43+00:00","observed":true,"total_events":880,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"476+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 476 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"67,905 bytes sent","bytes_sent":67905,"session_seconds":6,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-10T09:42:24","last_seen":"2026-10-10T09:52:59","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"RO","country_name":"Romania","region":"","city":"","lat":45.9968,"lon":24.997,"asn":47890,"org":"Unmanaged Ltd"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":11,"protocols":[{"protocol":"udp","events":9},{"protocol":"dns","events":1},{"protocol":"netbios","events":1}],"ports":[{"port":161,"events":3},{"port":162,"events":3},{"port":53,"events":1},{"port":123,"events":1},{"port":137,"events":1},{"port":3671,"events":1},{"port":47808,"events":1}],"dns_questions":[{"name":"id.server","type":"TXT","events":1}],"quic_clients":[],"first_seen":"2026-10-10T09:35:55","last_seen":"2026-10-10T09:38:19","recent":[{"timestamp":"2026-10-10T09:38:19","port":3671,"src_port":35115,"proto":"udp","app_proto":"","app_protocol":"","summary":"\u0006\u0010\u0002\u0003\u0000\u000e\b\u0001\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"06100203000e0801000000000000","sni":"","session":"abc200d9-6d9f-46a8-bca7-39c9c35e337d","bytes_in":14,"source_verified":false},{"timestamp":"2026-10-10T09:38:02","port":47808,"src_port":40869,"proto":"udp","app_proto":"","app_protocol":"","summary":"�\n\u0000\u0011\u0001\u0004\u0000\u0005\u0001\f\f\u0002?��\u0019K","payload_hex":"810a001101040005010c0c023fffff194b","sni":"","session":"0a2b6064-53ef-450d-8a04-3c560034f635","bytes_in":17,"source_verified":false},{"timestamp":"2026-10-10T09:37:53","port":53,"src_port":56003,"proto":"udp","app_proto":"dns","app_protocol":"dns","summary":"DNS query TXT/CH id.server","payload_hex":"000101000001000000000001026964067365727665720000100003000029100000008000000400030000","sni":"","session":"7a3d22a8-4045-47be-8e94-13ea03d4ebcc","bytes_in":42,"source_verified":false,"dns":{"kind":"query","name":"id.server","type":"TXT","class":"CH"}},{"timestamp":"2026-10-10T09:37:35","port":162,"src_port":52857,"proto":"udp","app_proto":"","app_protocol":"snmp","summary":"0'\u0002\u0001\u0001\u0004\u0006public�\u001a\u0002\u0004\t%�\u0000\u0002\u0001\u0000\u0002\u0001\u00000\f0\n\u0006\u0006+\u0006\u0001\u0002\u0001\u0001\u0005\u0000","payload_hex":"302702010104067075626c6963a01a02040925a100020100020100300c300a06062b06010201010500","sni":"","session":"8621802c-4c1d-4ff7-8c99-dd69a0fda1fa","bytes_in":41,"source_verified":false,"enriched":{"digest":"ac488cd4a6fc1f5d","strings":["public"]}},{"timestamp":"2026-10-10T09:37:23","port":161,"src_port":47885,"proto":"udp","app_proto":"","app_protocol":"snmp","summary":"0'\u0002\u0001\u0001\u0004\u0006public�\u001a\u0002\u0004\t%�\u0000\u0002\u0001\u0000\u0002\u0001\u00000\f0\n\u0006\u0006+\u0006\u0001\u0002\u0001\u0001\u0005\u0000","payload_hex":"302702010104067075626c6963a01a02040925a100020100020100300c300a06062b06010201010500","sni":"","session":"39ca14a6-b18a-4469-ae4b-b9ef1c6846e3","bytes_in":41,"source_verified":false,"enriched":{"digest":"ac488cd4a6fc1f5d","strings":["public"]}},{"timestamp":"2026-10-10T09:37:08","port":162,"src_port":43475,"proto":"udp","app_proto":"","app_protocol":"snmp","summary":"0a\u0002\u0001\u0000\u0004\u0006public�T\u0002\u0004K�]�\u0002\u0001\u0000\u0002\u0001\u00000F0\f\u0006\b+\u0006\u0001\u0002\u0001\u0001\u0001\u0000\u0005\u00000\f\u0006\b+\u0006\u0001\u0002\u0001\u0001\u0003\u0000\u0005\u00000\f\u0006\b+\u0006\u0001\u0002\u0001\u0001\u0004\u0000\u0005\u00000\f\u0006\b+\u0006\u0001\u0002\u0001\u0001\u0005\u0000\u0005\u00000\f\u0006\b+\u0006\u0001\u0002\u0001\u0001\u0006\u0000\u0005\u0000","payload_hex":"306102010004067075626c6963a05402044ba25ddf0201000201003046300c06082b060102010101000500300c06082b060102010103000500300c06082b060102010104000500300c06082b060102010105000500300c06082b060102010106000500","sni":"","session":"e5aae81b-3d3c-4c3f-87d2-eaa902013ce4","bytes_in":99,"source_verified":false,"enriched":{"digest":"7c12388f42736c8e","strings":["public"]}},{"timestamp":"2026-10-10T09:36:52","port":161,"src_port":37634,"proto":"udp","app_proto":"","app_protocol":"snmp","summary":"0a\u0002\u0001\u0000\u0004\u0006public�T\u0002\u0004K�]�\u0002\u0001\u0000\u0002\u0001\u00000F0\f\u0006\b+\u0006\u0001\u0002\u0001\u0001\u0001\u0000\u0005\u00000\f\u0006\b+\u0006\u0001\u0002\u0001\u0001\u0003\u0000\u0005\u00000\f\u0006\b+\u0006\u0001\u0002\u0001\u0001\u0004\u0000\u0005\u00000\f\u0006\b+\u0006\u0001\u0002\u0001\u0001\u0005\u0000\u0005\u00000\f\u0006\b+\u0006\u0001\u0002\u0001\u0001\u0006\u0000\u0005\u0000","payload_hex":"306102010004067075626c6963a05402044ba25ddf0201000201003046300c06082b060102010101000500300c06082b060102010103000500300c06082b060102010104000500300c06082b060102010105000500300c06082b060102010106000500","sni":"","session":"90381f4c-fe9f-4267-993f-0f3304ba5c70","bytes_in":99,"source_verified":false,"enriched":{"digest":"7c12388f42736c8e","strings":["public"]}},{"timestamp":"2026-10-10T09:36:38","port":162,"src_port":57387,"proto":"udp","app_proto":"","app_protocol":"snmp","summary":"0:\u0002\u0001\u00030\u000f\u0002\u0002Ji\u0002\u0003\u0000��\u0004\u0001\u0004\u0002\u0001\u0003\u0004\u00100\u000e\u0004\u0000\u0002\u0001\u0000\u0002\u0001\u0000\u0004\u0000\u0004\u0000\u0004\u00000\u0012\u0004\u0000\u0004\u0000�\f\u0002\u00027�\u0002\u0001\u0000\u0002\u0001\u00000\u0000","payload_hex":"303a020103300f02024a69020300ffe30401040201030410300e0400020100020100040004000400301204000400a00c020237f00201000201003000","sni":"","session":"9d625889-ab80-4c33-9bfa-4f38b1fadd41","bytes_in":60,"source_verified":false},{"timestamp":"2026-10-10T09:36:23","port":161,"src_port":47481,"proto":"udp","app_proto":"","app_protocol":"snmp","summary":"0:\u0002\u0001\u00030\u000f\u0002\u0002Ji\u0002\u0003\u0000��\u0004\u0001\u0004\u0002\u0001\u0003\u0004\u00100\u000e\u0004\u0000\u0002\u0001\u0000\u0002\u0001\u0000\u0004\u0000\u0004\u0000\u0004\u00000\u0012\u0004\u0000\u0004\u0000�\f\u0002\u00027�\u0002\u0001\u0000\u0002\u0001\u00000\u0000","payload_hex":"303a020103300f02024a69020300ffe30401040201030410300e0400020100020100040004000400301204000400a00c020237f00201000201003000","sni":"","session":"750aec3a-7389-4abb-bc7f-d3b886818424","bytes_in":60,"source_verified":false},{"timestamp":"2026-10-10T09:36:08","port":123,"src_port":42049,"proto":"udp","app_proto":"","app_protocol":"ntp","summary":"�\u0000\u0004�\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�O#Kq�R�","payload_hex":"e30004fa000100000001000000000000000000000000000000000000000000000000000000000000c54f234b71b152f3","sni":"","session":"5f143180-369a-4582-9dd9-c14d816d3c5d","bytes_in":48,"source_verified":false,"enriched":{"digest":"3aab7ca6d5f67dc9","strings":["O#Kq"]}},{"timestamp":"2026-10-10T09:35:55","port":137,"src_port":58127,"proto":"udp","app_proto":"netbios","app_protocol":"netbios","summary":"NetBIOS node status query *","payload_hex":"e5d80000000100000000000020434b4141414141414141414141414141414141414141414141414141414141410000210001","sni":"","session":"3ae9b716-475c-44a9-801f-61867eda37d1","bytes_in":50,"source_verified":false,"enriched":{"digest":"5e140ecfd11c0972","strings":["NetBIOS node status query *"]}}]},"interaction":null,"top_ports":[{"port":3000,"proto":"tcp","label":"Web-alt","count":12},{"port":7001,"proto":"tcp","label":"WebLogic","count":9},{"port":4782,"proto":"tcp","label":"","count":9},{"port":50050,"proto":"tcp","label":"","count":8},{"port":5984,"proto":"tcp","label":"CouchDB","count":6},{"port":8001,"proto":"tcp","label":"","count":6},{"port":40056,"proto":"tcp","label":"","count":6},{"port":2095,"proto":"tcp","label":"","count":6},{"port":7547,"proto":"tcp","label":"TR-069","count":6},{"port":1883,"proto":"tcp","label":"MQTT","count":6},{"port":7443,"proto":"tcp","label":"","count":6},{"port":8008,"proto":"tcp","label":"HTTP-alt","count":6},{"port":8123,"proto":"tcp","label":"","count":6},{"port":8088,"proto":"tcp","label":"Hadoop","count":6},{"port":4443,"proto":"tcp","label":"","count":6}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t12i130500_2d7513195f68_e51b7354d87f","t12d130600_2d7513195f68_e51b7354d87f"],"tls_client_hello":"160301007b010000770303796687f7f28b4e212e63eff8cae7eacd338f8de5003a41736114aec2705f51d000001ac02fc02bc011c007c013c009c014c00a0005002f0035c012000a01000034000500050100000000000a00080006001700180019000b00020100000d0010000e0401040302010203040105010601ff010001","tls_ja3":["20c9baf81bfe96ff89722899e75d0190","cba7f34191ef2379c1325641f6c6c4f4"],"http_akin":["b11cun030_00040012_13ee3d34","b11cuq060_00850812_0421ce22","b11cun040_00040016_aa48e2c8"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t12i130500_2d7513195f68_e51b7354d87f":963,"t12d130600_2d7513195f68_e51b7354d87f":152,"b11cun030_00040012_13ee3d34":5335,"b11cuq060_00850812_0421ce22":6,"b11cun040_00040016_aa48e2c8":5398},"akin_families":{"b11cuq060_00850812_0421ce22":{"head":"b11cuq050_00050812_107c8b82","shapes":9,"ips":150}},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36","Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-10","count":880}],"recent_events":[{"timestamp":"2026-10-10T09:52:59","port":2067,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"63e3c204-c959-414e-99ba-fdc1ce731eac","seq":1,"duration_ms":915,"bytes_in":4,"bytes_out":14},{"timestamp":"2026-10-10T09:52:59","port":2049,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"b3144660-3b20-4fd1-9c14-7d1af2a15ca2","seq":1,"duration_ms":912,"bytes_in":4,"bytes_out":14},{"timestamp":"2026-10-10T09:52:59","port":189,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"d319044a-0822-4e79-a8a6-a7a4ab84fc61","seq":1,"duration_ms":910,"bytes_in":4,"bytes_out":14},{"timestamp":"2026-10-10T09:52:59","port":20050,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"03e02f49-9ee4-48ea-a4d5-8d11d1e06019","seq":1,"duration_ms":913,"bytes_in":4,"bytes_out":14},{"timestamp":"2026-10-10T09:52:59","port":25001,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"b12fc533-bb68-4432-a430-f78ac79f987b","seq":1,"duration_ms":912,"bytes_in":4,"bytes_out":14},{"timestamp":"2026-10-10T09:52:59","port":20050,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"91c0b966-2633-485a-b40e-c05b4f2e335f","seq":1,"duration_ms":912,"bytes_in":4,"bytes_out":14},{"timestamp":"2026-10-10T09:52:59","port":179,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"5f082337-bbcc-4ec1-bbcc-87e33157125a","seq":1,"duration_ms":910,"bytes_in":4,"bytes_out":14},{"timestamp":"2026-10-10T09:52:59","port":1194,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"0717bdf0-ba81-4fc8-b684-b906d5edce15","seq":1,"duration_ms":915,"bytes_in":4,"bytes_out":14},{"timestamp":"2026-10-10T09:52:59","port":14401,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"22f1bdfd-b435-47f4-b9ca-f450bacd0f49","seq":1,"duration_ms":1121,"bytes_in":4,"bytes_out":14},{"timestamp":"2026-10-10T09:52:59","port":20100,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"31e2fd6a-7926-4516-869a-1d44d9eb64c1","seq":1,"duration_ms":891,"bytes_in":4,"bytes_out":14}],"http_methods":[{"method":"GET","count":177},{"method":"POST","count":3}],"distinct_ports_total":476,"top_paths":[{"path":"/","count":112,"ports":44},{"path":"/favicon.ico","count":68,"ports":32}],"distinct_paths_total":2,"top_snis":[{"value":"panel.straatrp.nl","count":1}],"top_hosts":[{"value":"panel.straatrp.nl","count":1}],"top_alpns":[],"banners":[{"value":"SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.8","count":4}],"credentials":[],"header_profile":null,"tags":[]}