{"ip":"94.154.43.149","data_as_of":"2026-10-23T18:51:10+00:00","observed":true,"total_events":30,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["80 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 6,230 bytes to few ports with no known exploit path, which is focused interaction with one service.","Counts include 50 interactive session(s) as well as first-packet events."],"engagement":{"level":"payload","label":"Sustained payload","detail":"6,230 bytes sent","bytes_sent":6230,"session_seconds":18,"persistent":false},"basis":"combined"},"first_seen":"2026-10-22T15:22:41","last_seen":"2026-10-23T18:21:27","events_24h":26,"events_7d":30,"interactive_sessions":50,"interactive_sessions_24h":35,"interactive_sessions_7d":50,"interactive_protocols":[],"geo":{"country_code":"NL","country_name":"The Netherlands","region":"North Holland","city":"Amsterdam","lat":52.3716,"lon":4.8883,"asn":219502,"org":"Storm Industries LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":50,"first_seen":"2026-10-22T15:22:41","last_seen":"2026-10-23T17:18:19","verdicts":[{"verdict":"unknown","sessions":40},{"verdict":"scan","sessions":10}],"personas":[],"services":[{"protocol":"tcp","port":7000,"sessions":33},{"protocol":"tcp","port":7004,"sessions":7},{"protocol":"tcp","port":7005,"sessions":5},{"protocol":"tcp","port":7007,"sessions":5}],"logins":[],"commands":[],"downloads":[],"files":[],"attack":[{"technique_id":"T1595","technique_name":"Active Scanning","tactic_id":"TA0043","tactic_name":"Reconnaissance","sessions":10}]},"top_ports":[{"port":7000,"proto":"tcp","label":"","count":7,"sessions":33},{"port":7007,"proto":"tcp","label":"","count":7,"sessions":5},{"port":7004,"proto":"tcp","label":"","count":5,"sessions":7},{"port":7005,"proto":"tcp","label":"","count":5,"sessions":5},{"port":7777,"proto":"tcp","label":"Oracle","count":4,"sessions":0},{"port":6666,"proto":"tcp","label":"","count":2,"sessions":0}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-22","count":13,"sessions":24},{"date":"2026-10-23","count":17,"sessions":26}],"recent_events":[{"timestamp":"2026-10-23T18:21:27","port":7004,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"g�\u0015p���=��qW�:4���4\u0003\u000f����^2m��\u0013~�/�]\u0016>]\u0017�@��WAv&�1�ͳ�^/��}�5_\f��|�0��\u0018\u0001��gI�����\u0010Z���:1$��Z�)�n�ɲ��Eh�4Бx�S�\u0016vТbW\u0003K�S�O���fr�����\u001e�ߺ��o�)m{\u0013��l1=\u001b\u001fA���X�aRRd��8D���g��\u000f��A��z\u0017��*�{\u001d�V������iÔ̴��fu�mg2Q{ \u0015��R\fɀ�b_.A�\u0013��&�\u0002�-���ǹb��Uc�1�A2���O�u�g\u0011","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c17d3dde-405c-439c-84b2-b66227e2d6eb","seq":1,"duration_ms":100,"bytes_in":256,"bytes_out":13,"enriched":{"digest":"2138a073e01991ef","strings":["WAv&","aRRd","mg2Q{","b_.A"]}},{"timestamp":"2026-10-23T17:18:19","port":7000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u000fH\u0005�\u0003o�D��g\u0005_`\u0011�R\u0006N���Ibs�}���R�lC\u0018lzd���\\[u����y͸o�i\u0007�@9�~4\u0006�T�_������+_kA�\u0016�5)լs���z�3�\u0005]�X\n����\u0015�\u0006s�\u001eLAg\u0016���O{'�\u0018m\u0010h@���^�\r&��L�GDX9W��{GAA\u0011��,�ƋN�xP\u0018@x���\n{�S\u0010B:f^��eoȟ�N2�\u0003\n�S�ݚ:�\u0015�v\u000b�YP\u001a;�Hj64dW`�t\u0005��\n.���`Z%�B�x��\u001cT�f�:P|p��\u0012-u`\\�����ͨ�G�k`E\u0000","payload_hex":"160f4805e6036fe144a2d867055f60119e52064efafe80496273c27d859dd752996c43186c7a64e8efc95c5b75b4cfefd379cdb86fda6907db4039f67e34068754985f81f9b5b8fae62b5f6b41ea16ac3529d5ac73b3c4ca7aa633c7055dea580a9ab093d715ae0673ee1e4c4167169faccb4f7b2791186d106840bd94ff5ea20d26b0ac4cc44744583957b7a27b47414111cde32cadc68b4ed4785018407890afc00a7b955310423a665e7fb0fb656fc89f864e32df030a8753b9dd9a3ab815bf760bac59501a3b83486a3634645760bf740596e40a2e93b7fe605a25c642b278d0f61c54d766b03a507c70be80122d75605cfab3c3e5fbcda8ad47806b604500","method":"","user_agent":"","ja3":"","session":"a4e78b98-e9af-47b8-95ed-bf2cafd326aa-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"cee735b6f4849678","strings":["+_kA","GDX9W","{GAA","B:f^","Hj64dW`",":P|p","-u`\\"]},"interactive":true},{"timestamp":"2026-10-23T14:28:47","port":7000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"ӯH���\u000f\t��B�\u0002�V\u001fp�GsS�B�+�&Iֽ��t蝑��\u0015�'��\u001f��a)A�\u000fkA\u0018Wz�\u001ak!��땲�br4����6�ܥ�\u001c��M jQ�{�_B�Y^�F���\u000f\\�T�`���˒������8\u001a\\�oLgJg�\n�v\u0001��\u001bLp�����x���̘�e8�\u001f�1�\u001c�������i�%y�CjE@Wav����xN�]s�c\u000f�B�86�����0���4����-�)}\"�8ފ�\u0012P��E0{�\u001e�W�Eش�Ptܒ\u001b�\n�a\u0007��\t][�T)�\u0010��\b\f","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"7cccebc5-9e7d-4c8d-88b9-f54361d8877a","seq":1,"duration_ms":101,"bytes_in":256,"bytes_out":13,"enriched":{"digest":"0996245457b82556","strings":["M jQ","oLgJg","CjE@Wav"]}},{"timestamp":"2026-10-23T09:42:07","port":6666,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"256\u0000","payload_hex":"32353600","method":"","user_agent":"","ja3":"","session":"0fab43f6-58e8-4836-99ab-e5090d9e3685","seq":1,"duration_ms":104,"bytes_in":4,"bytes_out":13},{"timestamp":"2026-10-23T09:42:06","port":6666,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u001e�\u0004P�:/�\u0001Lo�?+�0��/\u0010�\u001e���l\u0011��, !\u00162��s����P�\u0001g�Ɠg�\u0002���\t�\u0011�Y@Yt�\u0003\u0005���u�2�mܣ�ތ�\"�\b*�O�?��W$��b�\u0012�\u0011�ݲ�sH�ۀ\r��Ԅ\u001d�&�|Fk�;\u0005$٩����p��,�)�FM�'�_���\u0006\u0013����F��b�ַ��=T!��._ag@����\u001d4r\u0002t��\u001c�p\u0006r�:\\3�c\n\nyWy�ͅ�DT�L9�A-��(%y�B5�H�j2��� �sq���9��7\u0005+�VT;\u001fM�\"�D���\t��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"9898b5b4-c851-4eb2-a6d0-983fa938f0c6","seq":1,"duration_ms":102,"bytes_in":256,"bytes_out":13,"enriched":{"digest":"3d5f04f1fa959bb3","strings":["Y@Yt","._ag@"]}},{"timestamp":"2026-10-23T06:09:27","port":7777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"256\u0000","payload_hex":"32353600","method":"","user_agent":"","ja3":"","session":"53cab3b6-ae66-4c7e-8fba-01761a9e31e2","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":13},{"timestamp":"2026-10-23T06:09:27","port":7777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"֌[�:/2����?qD��PtS9�8\u0010בҪ1����:'�\u001f\t���\u001bm��V�r�hV�\u0013JF�t�-5�΀�/�THe�U��\u0016�,�s\n�\u0010��<_�\u0012���c^\\����iE@y����yS\u000f�\u0004L��\b��y��-Ѳ\u0001����ɼ���Z\u001d.H��\r���l�I�32C\u0005�ż�B׾n��;ܚ�\u000e�\u000b�:��E�����i�^2S��9\u0017��#����_��-T\u0001~�\u0001k&�lQ,��ã|9:�G��*\u0013��E`��*0ӧ�yx,�g1\u0014G��;�ny�~�P���>\u0002\u0005�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"bfb9a7d5-78a0-45a2-87a1-5cdb10f44cae","seq":1,"duration_ms":100,"bytes_in":256,"bytes_out":13,"enriched":{"digest":"473fce87369711ce","strings":["PtS9","iE@y"]}},{"timestamp":"2026-10-23T05:24:56","port":7777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"256\u0000","payload_hex":"32353600","method":"","user_agent":"","ja3":"","session":"2d98d97d-d712-48d5-84eb-94a69e8680eb","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":13},{"timestamp":"2026-10-23T05:24:56","port":7777,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"M���Ij\u001d\t�WR\u001c�K\u0010:�-�j/��tTF��N�)D�\u001eV�k�Mm�\n��:�\u0003\b)\u001f��xdǑ�0J&���Z\u001b�D$s�E\u0010�\b�2aC\n��!�D_���������ۃ��DA��y��c�hc\u0002Ue��(�$�\u001bQl��m>��L��̽�\u0015��I�C�bO\t�\u001e�~���V!�\f�f�w*�t��ܤ6�,O%����K��|�rS�&9�\u0005����<\u001e���o£���E;�ܞF�4�s&\t�����\u0015 4c��e r�F��0\u00135A�#-�.\u0010�W�;��\u001cE��ZW��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"1dc3a932-258b-438e-87cc-cc9ee7a3370f","seq":1,"duration_ms":100,"bytes_in":256,"bytes_out":13},{"timestamp":"2026-10-23T02:12:11","port":7007,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"256\u0000","payload_hex":"32353600","method":"","user_agent":"","ja3":"","session":"23f53791-9724-4465-9276-3ab1509d7f09","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":13}],"http_methods":[],"distinct_ports_total":6,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}