{"ip":"141.98.252.202","total_events":27,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["27 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 5,558 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"5,558 bytes sent","bytes_sent":5558,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-11T16:09:49","last_seen":"2026-09-11T16:17:24","events_24h":0,"events_7d":27,"geo":{"country_code":"GB","country_name":"United Kingdom","region":"England","city":"Whitechapel","lat":51.5128,"lon":-0.0638,"asn":39351,"org":"31173 Services AB"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as39351","label":"31173 Services","category":"isp","url":"https://www.peeringdb.com/asn/39351"},"cve_matches":[],"malware":[],"top_ports":[{"port":10507,"proto":"tcp","label":"","count":23},{"port":12000,"proto":"tcp","label":"","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":["ge11nn0500_05b2bbb9ca40"]},"fingerprint_peers":{"ge11nn0500_05b2bbb9ca40":2},"user_agents":["curl/8.22.0"],"timeline":[{"date":"2026-09-11","count":27}],"recent_events":[{"timestamp":"2026-09-11T16:17:24","port":12000,"proto":"tcp","app_proto":"","app_protocol":"amazonaws","host":"checkip.amazonaws.com","headers":"{\"accept\":\"*/*\",\"host\":\"checkip.amazonaws.com\",\"proxy-authorization\":\"Basic bG1nMXZyc2Ytem9uZS1jdXN0b20tcmVnaW9uLUZSOm11a2M3cjUwZzV6\",\"proxy-connection\":\"Keep-Alive\",\"user-agent\":\"curl/8.22.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://checkip.amazonaws.com/","summary":"","payload_hex":"47455420687474703a2f2f636865636b69702e616d617a6f6e6177732e636f6d2f20485454502f312e310d0a486f73743a20636865636b69702e616d617a6f6e6177732e636f6d0d0a50726f78792d417574686f72697a6174696f6e3a204261736963206247316e4d585a7963325974656d39755a53316a64584e3062323074636d566e615739754c555a534f6d313161324d33636a55775a7a56360d0a557365722d4167656e743a206375726c2f382e32322e300d0a4163636570743a202a2f2a0d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"curl/8.22.0","ja3":"","session":"aa2f3f55-d4bc-4495-b3b7-efcc9c3f3a98","seq":1,"duration_ms":100,"bytes_in":228,"bytes_out":79},{"timestamp":"2026-09-11T16:17:24","port":12000,"proto":"tcp","app_proto":"","app_protocol":"amazonaws","host":"checkip.amazonaws.com","headers":"{\"accept\":\"*/*\",\"host\":\"checkip.amazonaws.com\",\"proxy-authorization\":\"Basic bG1nMXZyc2Ytem9uZS1jdXN0b20tcmVnaW9uLUZSOm11a2M3cjUwZzV6\",\"proxy-connection\":\"Keep-Alive\",\"user-agent\":\"curl/8.22.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://checkip.amazonaws.com/","summary":"","payload_hex":"47455420687474703a2f2f636865636b69702e616d617a6f6e6177732e636f6d2f20485454502f312e310d0a486f73743a20636865636b69702e616d617a6f6e6177732e636f6d0d0a50726f78792d417574686f72697a6174696f6e3a204261736963206247316e4d585a7963325974656d39755a53316a64584e3062323074636d566e615739754c555a534f6d313161324d33636a55775a7a56360d0a557365722d4167656e743a206375726c2f382e32322e300d0a4163636570743a202a2f2a0d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"curl/8.22.0","ja3":"","session":"6f184362-b936-4799-879a-670440e8461c","seq":1,"duration_ms":100,"bytes_in":228,"bytes_out":79},{"timestamp":"2026-09-11T16:17:24","port":12000,"proto":"tcp","app_proto":"","app_protocol":"amazonaws","host":"checkip.amazonaws.com","headers":"{\"accept\":\"*/*\",\"host\":\"checkip.amazonaws.com\",\"proxy-authorization\":\"Basic bG1nMXZyc2Ytem9uZS1jdXN0b20tcmVnaW9uLUZSOm11a2M3cjUwZzV6\",\"proxy-connection\":\"Keep-Alive\",\"user-agent\":\"curl/8.22.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://checkip.amazonaws.com/","summary":"","payload_hex":"47455420687474703a2f2f636865636b69702e616d617a6f6e6177732e636f6d2f20485454502f312e310d0a486f73743a20636865636b69702e616d617a6f6e6177732e636f6d0d0a50726f78792d417574686f72697a6174696f6e3a204261736963206247316e4d585a7963325974656d39755a53316a64584e3062323074636d566e615739754c555a534f6d313161324d33636a55775a7a56360d0a557365722d4167656e743a206375726c2f382e32322e300d0a4163636570743a202a2f2a0d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"curl/8.22.0","ja3":"","session":"5c5713f8-41d1-43ff-bf20-3c6e5a39a53e","seq":1,"duration_ms":100,"bytes_in":228,"bytes_out":79},{"timestamp":"2026-09-11T16:14:47","port":10507,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"myip.wtf","headers":"{\"accept\":\"*/*\",\"host\":\"myip.wtf\",\"proxy-authorization\":\"Basic bG1nMXZyc2Ytem9uZS1jdXN0b20tcmVnaW9uLURFOm11a2M3cjUwZzV6\",\"proxy-connection\":\"Keep-Alive\",\"user-agent\":\"curl/8.22.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://myip.wtf/","summary":"","payload_hex":"47455420687474703a2f2f6d7969702e7774662f20485454502f312e310d0a486f73743a206d7969702e7774660d0a50726f78792d417574686f72697a6174696f6e3a204261736963206247316e4d585a7963325974656d39755a53316a64584e3062323074636d566e615739754c5552464f6d313161324d33636a55775a7a56360d0a557365722d4167656e743a206375726c2f382e32322e300d0a4163636570743a202a2f2a0d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"curl/8.22.0","ja3":"","session":"ddcf5896-99ec-4e1d-85b4-9376c72cc08c","seq":1,"duration_ms":100,"bytes_in":202,"bytes_out":79},{"timestamp":"2026-09-11T16:14:45","port":10507,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"myip.wtf","headers":"{\"accept\":\"*/*\",\"host\":\"myip.wtf\",\"proxy-authorization\":\"Basic bG1nMXZyc2Ytem9uZS1jdXN0b20tcmVnaW9uLURFOm11a2M3cjUwZzV6\",\"proxy-connection\":\"Keep-Alive\",\"user-agent\":\"curl/8.22.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://myip.wtf/","summary":"","payload_hex":"47455420687474703a2f2f6d7969702e7774662f20485454502f312e310d0a486f73743a206d7969702e7774660d0a50726f78792d417574686f72697a6174696f6e3a204261736963206247316e4d585a7963325974656d39755a53316a64584e3062323074636d566e615739754c5552464f6d313161324d33636a55775a7a56360d0a557365722d4167656e743a206375726c2f382e32322e300d0a4163636570743a202a2f2a0d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"curl/8.22.0","ja3":"","session":"6505ec6e-bec8-4a57-94c7-6e57662d3976","seq":1,"duration_ms":100,"bytes_in":202,"bytes_out":79},{"timestamp":"2026-09-11T16:14:45","port":10507,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"myip.wtf","headers":"{\"accept\":\"*/*\",\"host\":\"myip.wtf\",\"proxy-authorization\":\"Basic bG1nMXZyc2Ytem9uZS1jdXN0b20tcmVnaW9uLURFOm11a2M3cjUwZzV6\",\"proxy-connection\":\"Keep-Alive\",\"user-agent\":\"curl/8.22.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://myip.wtf/","summary":"","payload_hex":"47455420687474703a2f2f6d7969702e7774662f20485454502f312e310d0a486f73743a206d7969702e7774660d0a50726f78792d417574686f72697a6174696f6e3a204261736963206247316e4d585a7963325974656d39755a53316a64584e3062323074636d566e615739754c5552464f6d313161324d33636a55775a7a56360d0a557365722d4167656e743a206375726c2f382e32322e300d0a4163636570743a202a2f2a0d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"curl/8.22.0","ja3":"","session":"3e584d1d-e007-4a87-9889-64a5f1d489b8","seq":1,"duration_ms":100,"bytes_in":202,"bytes_out":79},{"timestamp":"2026-09-11T16:14:45","port":10507,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"myip.wtf","headers":"{\"accept\":\"*/*\",\"host\":\"myip.wtf\",\"proxy-authorization\":\"Basic bG1nMXZyc2Ytem9uZS1jdXN0b20tcmVnaW9uLURFOm11a2M3cjUwZzV6\",\"proxy-connection\":\"Keep-Alive\",\"user-agent\":\"curl/8.22.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://myip.wtf/","summary":"","payload_hex":"47455420687474703a2f2f6d7969702e7774662f20485454502f312e310d0a486f73743a206d7969702e7774660d0a50726f78792d417574686f72697a6174696f6e3a204261736963206247316e4d585a7963325974656d39755a53316a64584e3062323074636d566e615739754c5552464f6d313161324d33636a55775a7a56360d0a557365722d4167656e743a206375726c2f382e32322e300d0a4163636570743a202a2f2a0d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"curl/8.22.0","ja3":"","session":"230387b1-898c-4f5e-ac00-f0e87bcb425d","seq":1,"duration_ms":100,"bytes_in":202,"bytes_out":79},{"timestamp":"2026-09-11T16:14:44","port":10507,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"myip.wtf","headers":"{\"accept\":\"*/*\",\"host\":\"myip.wtf\",\"proxy-authorization\":\"Basic bG1nMXZyc2Ytem9uZS1jdXN0b20tcmVnaW9uLURFOm11a2M3cjUwZzV6\",\"proxy-connection\":\"Keep-Alive\",\"user-agent\":\"curl/8.22.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://myip.wtf/","summary":"","payload_hex":"47455420687474703a2f2f6d7969702e7774662f20485454502f312e310d0a486f73743a206d7969702e7774660d0a50726f78792d417574686f72697a6174696f6e3a204261736963206247316e4d585a7963325974656d39755a53316a64584e3062323074636d566e615739754c5552464f6d313161324d33636a55775a7a56360d0a557365722d4167656e743a206375726c2f382e32322e300d0a4163636570743a202a2f2a0d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"curl/8.22.0","ja3":"","session":"d1ce6d56-af10-4153-a704-8e5eb37cbcfb","seq":1,"duration_ms":100,"bytes_in":202,"bytes_out":79},{"timestamp":"2026-09-11T16:14:38","port":10507,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"myip.wtf","headers":"{\"accept\":\"*/*\",\"host\":\"myip.wtf\",\"proxy-authorization\":\"Basic bG1nMXZyc2Ytem9uZS1jdXN0b20tcmVnaW9uLUZSOm11a2M3cjUwZzV6\",\"proxy-connection\":\"Keep-Alive\",\"user-agent\":\"curl/8.22.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://myip.wtf/","summary":"","payload_hex":"47455420687474703a2f2f6d7969702e7774662f20485454502f312e310d0a486f73743a206d7969702e7774660d0a50726f78792d417574686f72697a6174696f6e3a204261736963206247316e4d585a7963325974656d39755a53316a64584e3062323074636d566e615739754c555a534f6d313161324d33636a55775a7a56360d0a557365722d4167656e743a206375726c2f382e32322e300d0a4163636570743a202a2f2a0d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"curl/8.22.0","ja3":"","session":"28820be9-7d70-46c7-a84b-7a0ba9bff637","seq":1,"duration_ms":101,"bytes_in":202,"bytes_out":79},{"timestamp":"2026-09-11T16:14:37","port":10507,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"myip.wtf","headers":"{\"accept\":\"*/*\",\"host\":\"myip.wtf\",\"proxy-authorization\":\"Basic bG1nMXZyc2Ytem9uZS1jdXN0b20tcmVnaW9uLUZSOm11a2M3cjUwZzV6\",\"proxy-connection\":\"Keep-Alive\",\"user-agent\":\"curl/8.22.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://myip.wtf/","summary":"","payload_hex":"47455420687474703a2f2f6d7969702e7774662f20485454502f312e310d0a486f73743a206d7969702e7774660d0a50726f78792d417574686f72697a6174696f6e3a204261736963206247316e4d585a7963325974656d39755a53316a64584e3062323074636d566e615739754c555a534f6d313161324d33636a55775a7a56360d0a557365722d4167656e743a206375726c2f382e32322e300d0a4163636570743a202a2f2a0d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"curl/8.22.0","ja3":"","session":"cda82c50-5596-420b-b50d-ccf6c14ff1e8","seq":1,"duration_ms":100,"bytes_in":202,"bytes_out":79}],"http_methods":[{"method":"GET","count":27}],"distinct_ports_total":2,"top_paths":[{"path":"http://myip.wtf/","count":23,"ports":1},{"path":"http://checkip.amazonaws.com/","count":4,"ports":1}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[{"value":"myip.wtf","count":23},{"value":"checkip.amazonaws.com","count":4}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Host","Proxy-Authorization","Proxy-Connection","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Host","value":"checkip.amazonaws.com","notable":false},{"name":"Proxy-Authorization","value":"Basic bG1nMXZyc2Ytem9uZS1jdXN0b20tcmVnaW9uLUZSOm11a2M3cjUwZzV6","notable":true},{"name":"Proxy-Connection","value":"Keep-Alive","notable":false},{"name":"User-Agent","value":"curl/8.22.0","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-13T23:12:42.431831+00:00"}