{"ip":"134.122.28.144","data_as_of":"2026-10-25T09:39:53+00:00","observed":true,"total_events":90,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["90 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 5,090 bytes to few ports with no known exploit path, which is focused interaction with one service."],"engagement":{"level":"payload","label":"Sustained payload","detail":"5,090 bytes sent","bytes_sent":5090,"session_seconds":6,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-13T07:53:44","last_seen":"2026-10-16T16:13:07","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"US","country_name":"United States","region":"New Jersey","city":"North Bergen","lat":40.7964,"lon":-74.0203,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":5432,"proto":"tcp","label":"Postgres","count":39},{"port":9301,"proto":"tcp","label":"","count":20},{"port":8087,"proto":"tcp","label":"","count":11},{"port":8983,"proto":"tcp","label":"Solr","count":10},{"port":1433,"proto":"tcp","label":"MSSQL","count":8},{"port":9001,"proto":"tcp","label":"Tor","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i751000_479067518aa3_d41ae481755e"],"tls_client_hello":"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","tls_ja3":["327efd8a5e8ed9fa2b145f126b748661"],"http_akin":["b11cun150_0004f3ff_28f866c0","b10cun000_00000000_334359b9","b11cun160_0004f7ff_3f747703"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"b10cun000_00000000_334359b9":2544,"t13i751000_479067518aa3_d41ae481755e":734,"b11cun160_0004f7ff_3f747703":3745,"b11cun150_0004f3ff_28f866c0":3761},"akin_families":{"b11cun150_0004f3ff_28f866c0":{"head":"b11cun150_0004f3ff_28f866c0","shapes":2,"ips":3756},"b11cun160_0004f7ff_3f747703":{"head":"b11cun150_0004f3ff_28f866c0","shapes":2,"ips":3756}},"user_agents":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-13","count":2},{"date":"2026-10-16","count":88}],"recent_events":[{"timestamp":"2026-10-16T16:13:07","port":8983,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0016\u0003\u0000\u0000i\u0001\u0000\u0000e\u0003\u0003U\u001c��random1random2random3random4\u0000\u0000\f\u0000/\u0000\n\u0000\u0013\u00009\u0000\u0004\u0000�\u0001\u0000\u00000\u0000\r\u0000,\u0000*\u0000\u0001\u0000\u0003\u0000\u0002\u0006\u0001\u0006\u0003\u0006\u0002\u0002\u0001\u0002\u0003\u0002\u0002\u0003\u0001\u0003\u0003\u0003\u0002\u0004\u0001\u0004\u0003\u0004\u0002\u0001\u0001\u0001\u0003\u0001\u0002\u0005\u0001\u0005\u0003\u0005\u0002","payload_hex":"1603000069010000650303551ca7e472616e646f6d3172616e646f6d3272616e646f6d3372616e646f6d3400000c002f000a00130039000400ff01000030000d002c002a000100030002060106030602020102030202030103030302040104030402010101030102050105030502","method":"","user_agent":"","ja3":"327efd8a5e8ed9fa2b145f126b748661","session":"2752a80c-f088-46b4-9584-b5494b974bbd","seq":1,"duration_ms":181,"bytes_in":110,"bytes_out":14,"enriched":{"digest":"53bb04b2d6c97881","label":"TLS/SSL","strings":["random1random2random3random4"]}},{"timestamp":"2026-10-16T16:13:02","port":8983,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0016\u0003\u0000\u0000S\u0001\u0000\u0000O\u0003\u0000?G���,���`~�\u0000��{�Ֆ�w����<=�o�\u0010n\u0000\u0000(\u0000\u0016\u0000\u0013\u0000\n\u0000f\u0000\u0005\u0000\u0004\u0000e\u0000d\u0000c\u0000b\u0000a\u0000`\u0000\u0015\u0000\u0012\u0000\t\u0000\u0014\u0000\u0011\u0000\b\u0000\u0006\u0000\u0003\u0001\u0000","payload_hex":"16030000530100004f03003f47d7f7ba2ceeeab2607ef300fd827bb9d596c8779be6c4db3c3ddb6fef106e00002800160013000a006600050004006500640063006200610060001500120009001400110008000600030100","method":"","user_agent":"","ja3":"327efd8a5e8ed9fa2b145f126b748661","session":"f2877574-df01-41af-a00c-ea4c58bd5df8","seq":1,"duration_ms":180,"bytes_in":88,"bytes_out":14,"enriched":{"digest":"28bd7217cbe4629c","label":"TLS/SSL","strings":["edcba`"]}},{"timestamp":"2026-10-16T16:12:54","port":8983,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"HELP\r\n","payload_hex":"48454c500d0a","method":"","user_agent":"","ja3":"327efd8a5e8ed9fa2b145f126b748661","session":"814c8986-3de2-4948-9ffc-9be248ad308f","seq":1,"duration_ms":181,"bytes_in":6,"bytes_out":14,"enriched":{"digest":"d6616dd899abc961","strings":["HELP"]}},{"timestamp":"2026-10-16T16:12:49","port":8983,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u001e\u0000\u0006\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0007version\u0004bind\u0000\u0000\u0010\u0000\u0003","payload_hex":"001e0006010000010000000000000776657273696f6e0462696e640000100003","method":"","user_agent":"","ja3":"327efd8a5e8ed9fa2b145f126b748661","session":"a1544e80-2313-4ac2-8b49-4c52ad8527c5","seq":1,"duration_ms":233,"bytes_in":32,"bytes_out":14,"enriched":{"digest":"75f479f7d331db45","strings":["version","bind"]}},{"timestamp":"2026-10-16T16:12:44","port":8983,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a0d0a","method":"GET","user_agent":"","ja3":"327efd8a5e8ed9fa2b145f126b748661","session":"6d594dc8-2493-4599-861e-eb2d64d6fd4a","seq":1,"duration_ms":184,"bytes_in":18,"bytes_out":79},{"timestamp":"2026-10-16T16:12:38","port":8983,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"327efd8a5e8ed9fa2b145f126b748661","session":"ba3ae1a4-349a-4e32-85e9-a9b1a86646fe","seq":1,"duration_ms":6143,"bytes_in":4,"bytes_out":14},{"timestamp":"2026-10-16T16:12:24","port":8983,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"HELP\r\n","payload_hex":"48454c500d0a","method":"","user_agent":"","ja3":"","session":"210b424e-48d2-488d-9614-1e303ca53d0b","seq":1,"duration_ms":107,"bytes_in":6,"bytes_out":14,"enriched":{"digest":"d6616dd899abc961","strings":["HELP"]}},{"timestamp":"2026-10-16T16:12:19","port":8983,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u001e\u0000\u0006\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0007version\u0004bind\u0000\u0000\u0010\u0000\u0003","payload_hex":"001e0006010000010000000000000776657273696f6e0462696e640000100003","method":"","user_agent":"","ja3":"","session":"083f5712-e937-4830-9e5c-79e3d7be1c91","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":14,"enriched":{"digest":"75f479f7d331db45","strings":["version","bind"]}},{"timestamp":"2026-10-16T16:12:14","port":8983,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"9196f74e-9b00-4d29-82c9-650f38653f29","seq":1,"duration_ms":100,"bytes_in":18,"bytes_out":79},{"timestamp":"2026-10-16T16:12:09","port":8983,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"24298785-88d9-4d14-85d3-23caa25384ac","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":14}],"http_methods":[{"method":"GET","count":12},{"method":"OPTIONS","count":5}],"distinct_ports_total":6,"top_paths":[{"path":"/","count":15,"ports":6},{"path":"/favicon.ico","count":1,"ports":1},{"path":"/nice%20ports%2C/Tri%6Eity.txt%2ebak","count":1,"ports":1}],"distinct_paths_total":3,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}