{"ip":"134.199.209.2","total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["1 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"touch","label":"Touch only","detail":"20 bytes sent, no real exchange","bytes_sent":20,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-25T16:39:17","last_seen":"2026-08-25T16:39:17","events_24h":0,"events_7d":0,"geo":{"country_code":"US","country_name":"United States","region":"California","city":"Santa Clara","lat":37.3931,"lon":-121.962,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":4000,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T19:06:37","last_seen":"2026-10-05T19:06:37","recent":[{"timestamp":"2026-10-05T19:06:37","port":4000,"src_port":30827,"proto":"udp","app_proto":"","app_protocol":"","summary":"C.J|\u0004\u001fZp8\u001fJYv\u0007\u0018\u000eU\u001c \b\u001a!H\u0017L\u0002HIr|\u000053J17i\u000b'\"*q{!y\u0014/N0PWKq\u001fb>\"*\u0007\u0014'\u0007IZQ{\u0011;\u00069]1*XR#l\u0001r\u001dQIhChJ��","payload_hex":"432e4a7c041f5a70381f4a597607180e551c20081a2148174c024849727c0035334a3137690b27222a717b2179142f4e3050574b711f623e222a07142707495a517b113b06395d312a5852236c01721d51496843684a8aa1","sni":"","session":"a3b3509b-84e5-44ab-a055-0c8e0a5f151d","bytes_in":88,"source_verified":false,"enriched":{"digest":"08f9eed2ba7afd8b","strings":["C.J|","HIr|","53J17i","'\"*q{!y","/N0PWKq","b>\"*","IZQ{","9]1*XR#l","QIhChJ","HIr|53J17i"]}}]},"top_ports":[{"port":2222,"proto":"tcp","label":"SSH-alt","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["b11cun000_00000000_334359b9"]},"fingerprint_peers":{"b11cun000_00000000_334359b9":78},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-08-25","count":1}],"recent_events":[{"timestamp":"2026-08-25T16:39:17","port":2222,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"\n\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a0d0a0a0a","method":"GET","user_agent":"","ja3":"","session":"3fb17610-c28d-4907-827d-d0ff687f8688","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":78}],"http_methods":[{"method":"GET","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T21:58:05.799602+00:00"}