107.144.191.147
- Sensor
- hp-use-01
- Source
- cowrie
- Status
- triaged
- Event time
- Received
Verdict
S1scanningConfidence 90%Escalate: noReasoning
The session did not involve any login attempts or commands executed, indicating background noise typical of scanning activity.
Recommended action
Monitor for further activity from this IP address, but no immediate action is required.
Routing
- Primary model
- gpt-4o-mini
- Final model
- gpt-4o-mini
- Escalated to strong model
- no
- Prompt version
- triage-v4
- Input tokens
- 1,560
- Output tokens
- 83
- Cost
- $0.000284
- Latency
- 1,634 ms
- Verdict at
- 2026-10-17 03:16:47Z
Tool trace
No tool calls were made.
Raw session JSON
{
"events": [
{
"url": null,
"uuid": "28d6f35e-aed5-11f1-a29a-0242ac120002",
"input": null,
"dst_ip": "172.18.0.2",
"sensor": "hp-use-01",
"shasum": null,
"src_ip": "107.144.191.147",
"eventid": "cowrie.session.connect",
"message": "New connection: 107.144.191.147:35962 (172.18.0.2:2222) [session: 4f252628ca1f]",
"outfile": null,
"session": "4f252628ca1f",
"version": null,
"dst_port": 2222,
"password": null,
"protocol": "ssh",
"src_port": 35962,
"username": null,
"timestamp": "2026-10-17T03:16:46.749909Z",
"duration_ms": null
},
{
"url": null,
"uuid": "28d6f35e-aed5-11f1-a29a-0242ac120002",
"input": null,
"dst_ip": "172.18.0.2",
"sensor": "hp-use-01",
"shasum": null,
"src_ip": "107.144.191.147",
"eventid": "cowrie.session.closed",
"message": "Connection lost after 0 milliseconds",
"outfile": null,
"session": "4f252628ca1f",
"version": null,
"dst_port": 2222,
"password": null,
"protocol": "ssh",
"src_port": 35962,
"username": null,
"timestamp": "2026-10-17T03:16:46.750390Z",
"duration_ms": 0
}
],
"sensor": "hp-use-01",
"source": "cowrie",
"src_ip": "107.144.191.147",
"session_id": "4f252628ca1f"
}