{"ip":"130.12.180.48","total_events":112,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"24+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 24 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"11,984 bytes sent","bytes_sent":11984,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-06T14:17:21","last_seen":"2026-08-15T06:03:35","events_24h":12,"events_7d":95,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"North Holland","city":"Amsterdam","lat":52.3716,"lon":4.8883,"asn":202412,"org":"Omegatech LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":808,"proto":"tcp","label":"","count":9},{"port":8083,"proto":"tcp","label":"","count":9},{"port":8000,"proto":"tcp","label":"HTTP-alt","count":9},{"port":8082,"proto":"tcp","label":"","count":6},{"port":10000,"proto":"tcp","label":"Webmin","count":6},{"port":8088,"proto":"tcp","label":"Hadoop","count":6},{"port":7890,"proto":"tcp","label":"","count":6},{"port":3130,"proto":"tcp","label":"","count":5},{"port":8001,"proto":"tcp","label":"","count":5},{"port":8899,"proto":"tcp","label":"","count":5},{"port":8888,"proto":"tcp","label":"HTTP-alt","count":5},{"port":3127,"proto":"tcp","label":"","count":5},{"port":8090,"proto":"tcp","label":"","count":4},{"port":3129,"proto":"tcp","label":"","count":4},{"port":8118,"proto":"tcp","label":"","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-06","count":3},{"date":"2026-08-07","count":11},{"date":"2026-08-08","count":10},{"date":"2026-08-09","count":14},{"date":"2026-08-10","count":19},{"date":"2026-08-11","count":15},{"date":"2026-08-12","count":9},{"date":"2026-08-13","count":12},{"date":"2026-08-14","count":15},{"date":"2026-08-15","count":4}],"recent_events":[{"timestamp":"2026-08-15T06:03:35","port":3130,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT check.easyproxy.xyz:443 HTTP/1.1\r\nHost: check.easyproxy.xyz:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420636865636b2e6561737970726f78792e78797a3a34343320485454502f312e310d0a486f73743a20636865636b2e6561737970726f78792e78797a3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"3cc37d08-df0e-4ed6-a1fa-0983f8fa5cad","seq":1,"duration_ms":100,"bytes_in":107,"bytes_out":13,"enriched":{"digest":"2cc942ab7e7310be","label":"HTTP","strings":["CONNECT check.easyproxy.xyz:443 HTTP/1.1","Host: check.easyproxy.xyz:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["check.easyproxy.xyz"]}}},{"timestamp":"2026-08-15T03:20:12","port":1081,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT check.easyproxy.xyz:443 HTTP/1.1\r\nHost: check.easyproxy.xyz:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420636865636b2e6561737970726f78792e78797a3a34343320485454502f312e310d0a486f73743a20636865636b2e6561737970726f78792e78797a3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"e4c1f58b-1172-4723-96c9-c672f95ee92b","seq":1,"duration_ms":100,"bytes_in":107,"bytes_out":13,"enriched":{"digest":"2cc942ab7e7310be","label":"HTTP","strings":["CONNECT check.easyproxy.xyz:443 HTTP/1.1","Host: check.easyproxy.xyz:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["check.easyproxy.xyz"]}}},{"timestamp":"2026-08-15T00:16:53","port":8000,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT check.easyproxy.xyz:443 HTTP/1.1\r\nHost: check.easyproxy.xyz:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420636865636b2e6561737970726f78792e78797a3a34343320485454502f312e310d0a486f73743a20636865636b2e6561737970726f78792e78797a3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"30fe9581-769b-4989-81bc-9c43766d4edc","seq":1,"duration_ms":100,"bytes_in":107,"bytes_out":13,"enriched":{"digest":"2cc942ab7e7310be","label":"HTTP","strings":["CONNECT check.easyproxy.xyz:443 HTTP/1.1","Host: check.easyproxy.xyz:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["check.easyproxy.xyz"]}}},{"timestamp":"2026-08-15T00:13:14","port":7890,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT check.easyproxy.xyz:443 HTTP/1.1\r\nHost: check.easyproxy.xyz:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420636865636b2e6561737970726f78792e78797a3a34343320485454502f312e310d0a486f73743a20636865636b2e6561737970726f78792e78797a3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"b12bfb1c-70f1-4b2a-a7fe-b754afaeba34","seq":1,"duration_ms":100,"bytes_in":107,"bytes_out":13,"enriched":{"digest":"2cc942ab7e7310be","label":"HTTP","strings":["CONNECT check.easyproxy.xyz:443 HTTP/1.1","Host: check.easyproxy.xyz:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["check.easyproxy.xyz"]}}},{"timestamp":"2026-08-14T23:26:39","port":8082,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT check.easyproxy.xyz:443 HTTP/1.1\r\nHost: check.easyproxy.xyz:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420636865636b2e6561737970726f78792e78797a3a34343320485454502f312e310d0a486f73743a20636865636b2e6561737970726f78792e78797a3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"e73f36fb-bb72-4dff-8732-94c6baa73c25","seq":1,"duration_ms":100,"bytes_in":107,"bytes_out":13,"enriched":{"digest":"2cc942ab7e7310be","label":"HTTP","strings":["CONNECT check.easyproxy.xyz:443 HTTP/1.1","Host: check.easyproxy.xyz:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["check.easyproxy.xyz"]}}},{"timestamp":"2026-08-14T22:32:16","port":8118,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT check.easyproxy.xyz:443 HTTP/1.1\r\nHost: check.easyproxy.xyz:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420636865636b2e6561737970726f78792e78797a3a34343320485454502f312e310d0a486f73743a20636865636b2e6561737970726f78792e78797a3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"e0e5cbe7-404d-48d6-bc3d-444cdbe4a116","seq":1,"duration_ms":100,"bytes_in":107,"bytes_out":13,"enriched":{"digest":"2cc942ab7e7310be","label":"HTTP","strings":["CONNECT check.easyproxy.xyz:443 HTTP/1.1","Host: check.easyproxy.xyz:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["check.easyproxy.xyz"]}}},{"timestamp":"2026-08-14T21:43:13","port":8899,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT check.easyproxy.xyz:443 HTTP/1.1\r\nHost: check.easyproxy.xyz:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420636865636b2e6561737970726f78792e78797a3a34343320485454502f312e310d0a486f73743a20636865636b2e6561737970726f78792e78797a3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"011b603e-67f4-49e7-94a0-b26438aa4b78","seq":1,"duration_ms":100,"bytes_in":107,"bytes_out":13,"enriched":{"digest":"2cc942ab7e7310be","label":"HTTP","strings":["CONNECT check.easyproxy.xyz:443 HTTP/1.1","Host: check.easyproxy.xyz:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["check.easyproxy.xyz"]}}},{"timestamp":"2026-08-14T19:13:22","port":8088,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT check.easyproxy.xyz:443 HTTP/1.1\r\nHost: check.easyproxy.xyz:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420636865636b2e6561737970726f78792e78797a3a34343320485454502f312e310d0a486f73743a20636865636b2e6561737970726f78792e78797a3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"6c266df8-9e4f-476a-bd70-8d4315aa4d07","seq":1,"duration_ms":100,"bytes_in":107,"bytes_out":13,"enriched":{"digest":"2cc942ab7e7310be","label":"HTTP","strings":["CONNECT check.easyproxy.xyz:443 HTTP/1.1","Host: check.easyproxy.xyz:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["check.easyproxy.xyz"]}}},{"timestamp":"2026-08-14T19:04:21","port":808,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT check.easyproxy.xyz:443 HTTP/1.1\r\nHost: check.easyproxy.xyz:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420636865636b2e6561737970726f78792e78797a3a34343320485454502f312e310d0a486f73743a20636865636b2e6561737970726f78792e78797a3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"8c283806-4573-4764-a27e-73a95ca2b0d1","seq":1,"duration_ms":100,"bytes_in":107,"bytes_out":13,"enriched":{"digest":"2cc942ab7e7310be","label":"HTTP","strings":["CONNECT check.easyproxy.xyz:443 HTTP/1.1","Host: check.easyproxy.xyz:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["check.easyproxy.xyz"]}}},{"timestamp":"2026-08-14T18:40:32","port":8090,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT check.easyproxy.xyz:443 HTTP/1.1\r\nHost: check.easyproxy.xyz:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420636865636b2e6561737970726f78792e78797a3a34343320485454502f312e310d0a486f73743a20636865636b2e6561737970726f78792e78797a3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"62a8d25c-848f-42d7-8f2d-57d0b39e7a12","seq":1,"duration_ms":100,"bytes_in":107,"bytes_out":13,"enriched":{"digest":"2cc942ab7e7310be","label":"HTTP","strings":["CONNECT check.easyproxy.xyz:443 HTTP/1.1","Host: check.easyproxy.xyz:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["check.easyproxy.xyz"]}}}],"http_methods":[],"distinct_ports_total":24,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T07:45:09.079335+00:00"}