{"ip":"94.154.43.71","total_events":33,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["33 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"549 bytes sent","bytes_sent":549,"session_seconds":1,"persistent":false}},"first_seen":"2026-09-16T07:42:54","last_seen":"2026-09-24T02:23:19","events_24h":12,"events_7d":22,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"North Holland","city":"Amsterdam","lat":52.3716,"lon":4.8883,"asn":219502,"org":"Storm Industries LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":56575,"proto":"tcp","label":"","count":32},{"port":443,"proto":"tcp","label":"HTTPS","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i140900_cbb2034c60b8_e7c285222651"],"tls_client_hello":"","tls_ja3":["1487bd354c20f20dd642bebc7f706e95"],"http_akin":[]},"fingerprint_peers":{"t13i140900_cbb2034c60b8_e7c285222651":661},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0 Safari/537.36"],"timeline":[{"date":"2026-09-16","count":8},{"date":"2026-09-17","count":3},{"date":"2026-09-22","count":3},{"date":"2026-09-23","count":15},{"date":"2026-09-24","count":4}],"recent_events":[{"timestamp":"2026-09-24T02:23:19","port":56575,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"A\r\n","payload_hex":"410d0a","method":"","user_agent":"","ja3":"","session":"96f4fb02-64aa-4787-8fec-637ccfd31afd","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12},{"timestamp":"2026-09-24T02:22:41","port":56575,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"A\r\n","payload_hex":"410d0a","method":"","user_agent":"","ja3":"","session":"05ac0895-1669-43ec-9bc2-8a66cecc8d41","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12},{"timestamp":"2026-09-24T02:21:49","port":56575,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"A\r\n","payload_hex":"410d0a","method":"","user_agent":"","ja3":"","session":"8d53b179-54d7-4982-9106-397d8c9733a6","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12},{"timestamp":"2026-09-24T02:13:35","port":56575,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"A\r\n","payload_hex":"410d0a","method":"","user_agent":"","ja3":"","session":"b8b94862-5cf8-42ed-bac7-76cc193d0e8f","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12},{"timestamp":"2026-09-23T22:52:25","port":56575,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"A\r\n","payload_hex":"410d0a","method":"","user_agent":"","ja3":"","session":"4b20ba0d-1186-4889-8671-4072f1aa6b99","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12},{"timestamp":"2026-09-23T22:50:39","port":56575,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"A\r\n","payload_hex":"410d0a","method":"","user_agent":"","ja3":"","session":"35b23ee6-b237-49a9-a38d-7d25eac8e6fe","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12},{"timestamp":"2026-09-23T22:46:18","port":56575,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"A\r\n","payload_hex":"410d0a","method":"","user_agent":"","ja3":"","session":"cde57c8a-e8ce-42ab-ac84-c6698a51a6b4","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12},{"timestamp":"2026-09-23T22:38:40","port":56575,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"A\r\n","payload_hex":"410d0a","method":"","user_agent":"","ja3":"","session":"0bb8354f-71b4-4221-8176-6c25e579a1d1","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12},{"timestamp":"2026-09-23T17:41:40","port":56575,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"A\r\n","payload_hex":"410d0a","method":"","user_agent":"","ja3":"","session":"b836ab7e-6ea7-4ba8-b506-e29b06f1aacd","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12},{"timestamp":"2026-09-23T17:39:33","port":56575,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"A\r\n","payload_hex":"410d0a","method":"","user_agent":"","ja3":"","session":"efcc1e59-f9aa-4e31-88f4-de3738b02ff4","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12}],"http_methods":[{"method":"GET","count":1}],"distinct_ports_total":2,"top_paths":[{"path":"/dataservice/client/admin/settings","count":1,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-24T16:36:30.458786+00:00"}