{"ip":"147.90.209.28","total_events":20,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["20 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,056 bytes sent","bytes_sent":1056,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-11T07:43:08","last_seen":"2026-08-15T10:40:50","events_24h":4,"events_7d":20,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":212238,"org":"Datacamp Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":4153,"proto":"tcp","label":"","count":6},{"port":999,"proto":"tcp","label":"","count":4},{"port":5678,"proto":"tcp","label":"","count":4},{"port":4145,"proto":"tcp","label":"","count":4},{"port":1080,"proto":"tcp","label":"SOCKS","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-11","count":4},{"date":"2026-08-12","count":2},{"date":"2026-08-13","count":6},{"date":"2026-08-14","count":6},{"date":"2026-08-15","count":2}],"recent_events":[{"timestamp":"2026-08-15T10:40:50","port":4153,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0001��\u0012\u0010�\u0000","payload_hex":"040101bb8b12108500","method":"","user_agent":"","ja3":"","session":"aa290ddb-3869-4e28-b4fe-462f4ac484db","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":13},{"timestamp":"2026-08-15T10:40:49","port":4153,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0001��\u0012\u0010�\u0000","payload_hex":"040101bb8b12108500","method":"","user_agent":"","ja3":"","session":"7b9aab24-c015-48af-9380-d8ee2f04ee3f","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":13},{"timestamp":"2026-08-14T20:05:59","port":4153,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0001��\u0012\u0010�\u0000","payload_hex":"040101bb8b12108500","method":"","user_agent":"","ja3":"","session":"587b87ac-c3a8-4275-bcdf-e1d0ddd02b26","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":13},{"timestamp":"2026-08-14T20:05:59","port":4153,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0001��\u0012\u0010�\u0000","payload_hex":"040101bb8b12108500","method":"","user_agent":"","ja3":"","session":"a96918d1-5d7a-409b-bf0e-ff0b8e3081ab","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":13},{"timestamp":"2026-08-14T05:19:18","port":4145,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0001���g/\u0000","payload_hex":"040101bb84e6672f00","method":"","user_agent":"","ja3":"","session":"650eda07-5239-4a1a-bfb5-7a83815bb2ea","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":13},{"timestamp":"2026-08-14T05:19:17","port":4145,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0001���g/\u0000","payload_hex":"040101bb84e6672f00","method":"","user_agent":"","ja3":"","session":"2e0a5576-de17-4715-a2c0-81880f0da8aa","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":13},{"timestamp":"2026-08-14T00:39:30","port":4145,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0001��Y�\u0005\u0000","payload_hex":"040101bb8d59ef0500","method":"","user_agent":"","ja3":"","session":"5405c528-3714-4b17-ac81-fb1c4c8e339c","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":13},{"timestamp":"2026-08-14T00:39:29","port":4145,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0001��Y�\u0005\u0000","payload_hex":"040101bb8d59ef0500","method":"","user_agent":"","ja3":"","session":"62cc6ec9-365a-4736-bc64-7522f171a5b0","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":13},{"timestamp":"2026-08-13T19:13:43","port":5678,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0001��2a�\u0000","payload_hex":"040101bb923261d300","method":"","user_agent":"","ja3":"","session":"a1bd6c23-c118-4454-abba-afe153c5f277","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":13},{"timestamp":"2026-08-13T19:13:43","port":5678,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0001��2a�\u0000","payload_hex":"040101bb923261d300","method":"","user_agent":"","ja3":"","session":"ad809694-9775-4a19-a09a-ac7201dfd497","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":13}],"http_methods":[],"distinct_ports_total":5,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T11:40:30.739237+00:00"}