{"ip":"94.154.43.214","total_events":74,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["74 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 9,620 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"9,620 bytes sent","bytes_sent":9620,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-18T09:51:40","last_seen":"2026-08-20T16:47:12","events_24h":18,"events_7d":74,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"North Holland","city":"Amsterdam","lat":52.3716,"lon":4.8883,"asn":219502,"org":"Storm Industries LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":7004,"proto":"tcp","label":"","count":26},{"port":7007,"proto":"tcp","label":"","count":16},{"port":7000,"proto":"tcp","label":"","count":14},{"port":6000,"proto":"tcp","label":"X11","count":14},{"port":7777,"proto":"tcp","label":"Oracle","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-18","count":16},{"date":"2026-08-19","count":40},{"date":"2026-08-20","count":18}],"recent_events":[{"timestamp":"2026-08-20T16:47:12","port":7004,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"256\u0000","payload_hex":"32353600","method":"","user_agent":"","ja3":"","session":"f4550d32-1abc-4b14-b180-723b30ba30c4","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":13},{"timestamp":"2026-08-20T16:47:11","port":7004,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"����m���ZSl��S&��S5�Ω#�rs�B\u0010�[^��ӷ\r�J�����\\��\u0014H\"�H}�ƻ&�c�V�8��\u001e*ۏb�!�7���&\u001fE��D�!B�\u0014R��\u0001R��R�?�:@^\u0013�O���U|�7��\u001cWX�ݫ�i^��5�\u001b�cg%�!e��q�b,!`����D�\u0002%9}$�6\u0012���E|���\u0013\\:-u�\u001b��\tdu~�%�k���\u0010Þf��6Y*�\b���\u0007ص`��6\u0010myW�f��0e�\bJ�Ȇ��T�\u0019��\u001e�Tr\u0006\tp]��7B9(ւ���ܽÚG�^","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"174e9402-cf7a-4c84-9daa-ba272ccc8079","seq":1,"duration_ms":100,"bytes_in":256,"bytes_out":13,"enriched":{"digest":"dcf8196890de5a0b","strings":["b,!`","\\:-u","7B9("]}},{"timestamp":"2026-08-20T16:17:36","port":7004,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"256\u0000","payload_hex":"32353600","method":"","user_agent":"","ja3":"","session":"c01ab3bd-f16e-4eb2-b30b-3c40a73829f7","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":13},{"timestamp":"2026-08-20T16:17:36","port":7004,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��^���x8,@���\u0006(�����S�h��_tiVgH��5�Zr�Dp�̀<\u0011���x�sH�[�\u001b��:��CBfq���ʙ]�zߪn=;&�\u0010f2���\"�rd囃,�\u001e��\u001ek\u0016����\u0013%��л\u001d~��t�WuX��h��B`����\u001am0L�@ԤZ\u001cb\u0010�v���3E!�eBG�\r\u0012�^�j\u0011����.LN�7n��ϣ�\u0006���!q���M�M���],KT�|5a�\"��\u001a֙��YN���","payload_hex":"d5b383ce14b5712ba81bf161e01f8085b2dff75ac959ccf145bc9275a61e8ed0f3ca55de64ca49460a16b71e37690810d2fc4133d78f43c0d1374195e209ba03297c9fc1fc215f7d157042236c4d7d9654d45eb7b0af4cc4417b7770a67116339fe079cb6b37b2e5d8286dcd709f20352f7f6284717fc32fe69f9ca04d3a46e7c0fe635716324a5c12bc0e183bdca005678031b9ba8117959a4c8408ee42c8fd898529f9b60365f1fc74b72af81125f4b29c979a24e5051381c15e19a7194377f93fb9c3c9026a63d4a518a51bc61ee8ce31a44dfd43b6978777f97fc87f43cb71287518c31df036f30b23f8ab226a427d3eb122e7f41ad699b193594ee58acc","method":"","user_agent":"","ja3":"","session":"425843bb-dd44-4722-898d-f785824e319f","seq":1,"duration_ms":100,"bytes_in":256,"bytes_out":13,"enriched":{"digest":"9c256ea0ab08de71","strings":["pB#lM}","A{wp","\"jB}>"]}},{"timestamp":"2026-08-20T14:56:10","port":7004,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"256\u0000","payload_hex":"32353600","method":"","user_agent":"","ja3":"","session":"b0dcaf5f-bf9a-40dd-a94a-1b910949a521","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":13},{"timestamp":"2026-08-20T14:56:10","port":7004,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001d�T=��{��]\\3Cڹ��\u001f�\u0005�9��s�f�d�/���\u0013��U\"\u0006zF�&\u001f\u001a��˅��\u000f��*)yq�s��N>\u0012}�Q\u0011k�\u000f�3;t�\u0018�\u0007�\n\u0019\u0006�VB�B�>}��\u0018���ۘ��~R{4Z��Kh�\u0018T�ѣ��\f�W��-�e�n�TQ�CC@\b'�\u000fy��ፓ�c2\u0006����>�;�M�OÙ��\u001d����m-�\u0012.��ND�F�-\u000b��$F҃ ~/�\u0010�刿�z�\u001aF\u001d�0�\u000f\u0002sSA�\u0012\r3�ˉۭU���L�d\u001e\u0014�\u001c\u0006ʈ���O��P9d2A\u0010͵\u0007ly\u0006!","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"46b2db48-6de6-4b12-926b-97eba2934cd2","seq":1,"duration_ms":100,"bytes_in":256,"bytes_out":13,"enriched":{"digest":"4982498f8a19d0b5","strings":["]\\3C","*)yq","~R{4Z","P9d2A"]}},{"timestamp":"2026-08-20T13:19:35","port":7000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"256\u0000","payload_hex":"32353600","method":"","user_agent":"","ja3":"","session":"e0dcfe9c-5609-429d-a06d-7c8becadca32","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":13},{"timestamp":"2026-08-20T13:19:35","port":7000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\t.�\u000f����\u0013��\u001e�H��\u000e{>�҉�\u0017�\u0010���U ����\u0018��J�ٽv�%��p\u0002+:f�\u0011\u0004\u001eh��B�e�K<\u000b*>;�KMK�@~��l\u0019�0�J��\f���q��,���\u0014ߊ[AV�\u0013\u0016P�7sl�t�A���j��%\u000bO��\u001e\u0013:��gw���*�\u001e�\u0001���~pm�6�볟�\"u�6k���\"Ψ��Ճ�\u00137\u0014���`�@Z����F�/���A�a�\tU\u0011��#\u0014\u001d@6d�\u0014\u0010~)\u0005\rᓺz��@\u000egx�zv�\u001c��\u0005���:���B\u000f.#t\nl����9wF�frU","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"10a0948c-f749-45b4-8ca7-b96a2827ee0a","seq":1,"duration_ms":100,"bytes_in":256,"bytes_out":13}],"http_methods":[],"distinct_ports_total":5,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T17:34:38.908676+00:00"}