{"ip":"145.90.8.9","total_events":2,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"universities","confidence":"high","network_type":"educational/research","why":["Source IP is in a known scanner range (universities).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"touch","label":"Touch only","detail":"0 bytes sent, no real exchange","bytes_sent":0,"session_seconds":0,"persistent":false}},"first_seen":"2026-02-19T23:08:26","last_seen":"2026-02-21T02:20:50","events_24h":0,"events_7d":0,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"Groningen","city":"Oostwold","lat":53.1977,"lon":7.041,"asn":1103,"org":"SURF B.V."},"source_domain":"please-see-measurements.internet-transparency.org","known_scanners":["universities","SURF"],"scanner_tag":{"key":"peeringdb:as1103","label":"SURF","category":"research","url":"https://www.peeringdb.com/asn/1103"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":161,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T16:53:20","last_seen":"2026-10-05T16:53:20","recent":[{"timestamp":"2026-10-05T16:53:20","port":161,"src_port":60733,"proto":"udp","app_proto":"","app_protocol":"snmp","summary":"0)\u0002\u0001\u0001\u0004\u0006public�\u001c\u0002\u00047���\u0002\u0001\u0000\u0002\u0001\u00000\u000e0\f\u0006\b+\u0006\u0001\u0002\u0001\u0001\u0001\u0000\u0005\u0000","payload_hex":"302902010104067075626c6963a01c0204378fa787020100020100300e300c06082b060102010101000500","sni":"","session":"f90c9aab-aaf7-4962-a2cf-bc9ef8a4706e","bytes_in":43,"source_verified":false,"enriched":{"digest":"9b20fbd2ac955b9e","strings":["public"]}}]},"top_ports":[{"port":179,"proto":"tcp","label":"BGP","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[],"recent_events":[{"timestamp":"2026-02-21T02:20:50","port":179,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���������������\u00009\u0001\u0004\u0004m\u0000Z�Z\b\u000b\u001c\u0002\u001a\u0001\u0004\u0000\u0001\u0000\u0001\u0001\u0004\u0000\u0002\u0000\u0001\u0002\u0000\u0006\u0000@\u0002\u0000xA\u0004\u0000\u0000\u0004m","payload_hex":"ffffffffffffffffffffffffffffffff00390104046d005a915a080b1c021a010400010001010400020001020006004002007841040000046d","method":"","user_agent":"","ja3":"","session":"ca793168-66cf-4a89-bc58-e83287490a4a","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0},{"timestamp":"2026-02-19T23:08:26","port":179,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���������������\u00009\u0001\u0004\u0004m\u0000Z�Z\b\u000b\u001c\u0002\u001a\u0001\u0004\u0000\u0001\u0000\u0001\u0001\u0004\u0000\u0002\u0000\u0001\u0002\u0000\u0006\u0000@\u0002\u0000xA\u0004\u0000\u0000\u0004m","payload_hex":"ffffffffffffffffffffffffffffffff00390104046d005a915a080b1c021a010400010001010400020001020006004002007841040000046d","method":"","user_agent":"","ja3":"","session":"b65cd8be-ced5-408d-83da-f5e42a816ba6","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T18:51:32.220229+00:00"}