{"ip":"134.209.87.16","data_as_of":"2026-10-24T10:11:19+00:00","observed":true,"total_events":106,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"18+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 18 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"19,154 bytes sent","bytes_sent":19154,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-13T00:25:17","last_seen":"2026-10-13T00:26:01","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"NL","country_name":"The Netherlands","region":"North Holland","city":"Amsterdam","lat":52.352,"lon":4.9392,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":6699,"proto":"tcp","label":"","count":6},{"port":5269,"proto":"tcp","label":"XMPP-S2S","count":6},{"port":7082,"proto":"tcp","label":"","count":6},{"port":6020,"proto":"tcp","label":"","count":6},{"port":5435,"proto":"tcp","label":"","count":6},{"port":5901,"proto":"tcp","label":"","count":6},{"port":7025,"proto":"tcp","label":"","count":6},{"port":5640,"proto":"tcp","label":"","count":6},{"port":5544,"proto":"tcp","label":"","count":6},{"port":5900,"proto":"tcp","label":"VNC","count":6},{"port":5938,"proto":"tcp","label":"","count":6},{"port":7020,"proto":"tcp","label":"","count":6},{"port":7014,"proto":"tcp","label":"","count":6},{"port":6482,"proto":"tcp","label":"","count":6},{"port":6432,"proto":"tcp","label":"","count":6}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9","t13i1909h2_9dc949149365_97f8aa674fd9"],"tls_client_hello":"16030105cc010005c8030315161733880ffd8d082d226fe6c9c39f1408bfef9882a7054fddd2009b5c679820e880ae9fd9ebba0b1225cf9137fded208f9057d681c7d668724806028c2038ae0026cca8cca9c02fc030c02bc02cc013c009c014c00a009c009d002f0035c012000a13031301130201000559000500050100000000000a0012001011ec11ed11eb0202001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff010001000010000e000c02683208687474702f312e3100120000002b0009080304030303020301003304ea04e811ec04c0ec568db4f2b903d28d57f74df95b40fd727cfed9bb11c7512c5284f53296d0cc940f6b1437a5516e036322a8a9cc618728484a020b4f42c63c311955bbaac0f4784f34297ae204c8fe5788a615023993c77a74316487996fe30e585622db4100d187b9c8aaa727fc3b30441f02e97f7251b15eb5cedc2c5c83f414930305d6b33445375d4e4818b4a7982e3805951c4b0e164c6a082adc29b012904ac027a579d68ac0709311b8a3d3ca4c54b1b8991199c1174b50b0cd60c061820b4d9887c0d064a27a6818a9907cf2dc4faeea6e239b2078d55e33a3878d4b404ef9ce2abc514b651660e57d367441cf359fd5720c42880bd7893be8f31fbe7b9991f0b1031a8b87f97affc865aef712d3d447f2751386610af17429d8e5bb1d7b07337b9f2808a0738550b3e56cc4888ac9e8c34aa128e89654a959a1b6c3a545f783992291a2ba6e1138bd667956fe96a99a66be6a45452085b641b3c1b2d767f569212971b3dd220770c10ef518be39220877e27759222af3702327408f2fd8703c8c11b60b3191a88ecc658d9709444d471c78b606c0f99968b32cc479b78ccb5c1ae1cbedea9f7d4c8f37476bb67bc1b09104fbfa947a19a20dd56bd65c7936a3c6f0bb50483374b219a46372435ff8cc782a58e5f73d25e1ad9b2c057a564bc4b2c3e37904d6fc6a20dc80bd385e3f975c28aa066e76c47dd172804a62aa7a00e6311c80d82fd8259698ac27a3dc56bd807cd8a193d4e46b75dabd8117b187780047381d676017de17b235b98e9877c6aa2cbcabe5bca4487e1ffc2a0e594e6dc6318ec0284700337f65b4a8089bec086cbc9475b7233100a6cbf58658fcf213eb80744e41549cc44cbce973a73700e76225dd558f8885bedce1c161773cfea4010566834abb61a7321db44a5d146ac8fe64b4d3b8253c693500f866f040a77200a3f50ab86002bee97958f8878eedaa3e95f4af6bc49fd0e0ab956a00dda4326d2c414b42912476209df6cd2d10758799762a1b91311c2b9df47259d8c72da39377217c4c359108e80053e46d6b5332aeac799437ae7902b65ba4064cd123e7cbc23bf959a709ad441bb626017e368144b3a61a71e9830c24489cc0a477b53ca0fcca89097bdd037d0426bb1bd17c0dc9597b85954d97cb2f255b351213dc58a90969617191a7535a321016bd94007425e639c76232a6ec627c9a02e29c39837775008610a1196fbd502d3f51125d32967a64a7bae553436276706b5be1f56c78b5bfad014e3fb17032c435228baf0caa9849727b17a12646dcbd11127ed7f51d1a08487fc1131f1015959b66d6913fedb26dc9c0503eb1a48a30107ad314280624f8162cda70ba0e8138c6953671c0c5f9c64a5961495639b87da49d68fba402045b1c599307f479015a304309a049764512530bb344249745716460a00f1992819776fd9ba48d977676a621d893845715629139867f30265175c72ef56020e6bfa27745541067ac3c5aea09b46acc88fd85ba85c220ce520fde6c9647eb48515b3a6e0b489b6586641cc9fd43cfd766ae58d23a0db2458b555be56918c41b4e523a71e368c3d6bab349314a6f764902bc6eec1040254820f4851b3ae9266dc183c489eaf299a581d5c1528f342087cf75423f58419645c27871a0644d852e2a574b39f4890fbc39bb5d513adbd1354c4d0c226804f4e71eb2a6a2c24199df2e63001d0020f8e42016fe7fdad363e61310c4eea9b4b1728cdd1f3fb37e38e8d272","tls_ja3":["5af43e5eee17271a9eb37dce2ab407a8","e5c250b292fce278a62137836169e18f"],"http_akin":["b11cun040_00040016_aa48e2c8"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":3244,"t13i1909h2_9dc949149365_97f8aa674fd9":769,"b11cun040_00040016_aa48e2c8":5465},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-13","count":106}],"recent_events":[{"timestamp":"2026-10-13T00:26:01","port":7082,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":7082\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a203a373038320d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"cbd9a2f4-97ff-40c9-9c18-b586a01a7569","seq":1,"duration_ms":100,"bytes_in":218,"bytes_out":78},{"timestamp":"2026-10-13T00:25:58","port":5269,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":5269\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a203a353236390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"4e05be8f-5d62-4283-bb04-ab36dd532964","seq":1,"duration_ms":100,"bytes_in":218,"bytes_out":78},{"timestamp":"2026-10-13T00:25:58","port":7025,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":7025\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a203a373032350d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"a3e82746-40bc-4300-9703-546a543ab432","seq":1,"duration_ms":100,"bytes_in":218,"bytes_out":78},{"timestamp":"2026-10-13T00:25:58","port":5900,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":5900\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a203a353930300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"62d487cb-aa32-4e63-9b3b-ecd35f63605b","seq":1,"duration_ms":100,"bytes_in":218,"bytes_out":78},{"timestamp":"2026-10-13T00:25:58","port":6699,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":6699\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a203a363639390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"7c8a6f13-3390-4797-afa5-fcf386cd9807","seq":1,"duration_ms":101,"bytes_in":218,"bytes_out":78},{"timestamp":"2026-10-13T00:25:57","port":5901,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":5901\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a203a353930310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"6859f2bc-0e15-4921-ae00-363309f7fbc5","seq":1,"duration_ms":104,"bytes_in":218,"bytes_out":78},{"timestamp":"2026-10-13T00:25:57","port":6264,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":6264\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a203a363236340d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"4558d9d6-c3fb-4d16-975f-d5876605c4c0","seq":1,"duration_ms":101,"bytes_in":218,"bytes_out":78},{"timestamp":"2026-10-13T00:25:57","port":5640,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":5640\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a203a353634300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"dcbe0df0-f930-41e9-aebd-865f5978385d","seq":1,"duration_ms":101,"bytes_in":218,"bytes_out":78},{"timestamp":"2026-10-13T00:25:56","port":5544,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":5544\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a203a353534340d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"63346683-5c4f-4268-acb7-83ec3f628d71","seq":1,"duration_ms":101,"bytes_in":218,"bytes_out":78},{"timestamp":"2026-10-13T00:25:55","port":5938,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":5938\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a203a353933380d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"f6752c62-e386-4fc5-b171-5a9282fbe1b9","seq":1,"duration_ms":100,"bytes_in":218,"bytes_out":78}],"http_methods":[{"method":"GET","count":88}],"distinct_ports_total":18,"top_paths":[{"path":"/","count":18,"ports":18},{"path":"/robots.txt","count":18,"ports":18},{"path":"/favicon.ico","count":18,"ports":18},{"path":"/security.txt","count":17,"ports":17},{"path":"/.well-known/security.txt","count":17,"ports":17}],"distinct_paths_total":5,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":88}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":":7082","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[]}