{"ip":"157.230.105.152","total_events":208,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"14+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 14 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"17,576 bytes sent","bytes_sent":17576,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-28T18:18:57","last_seen":"2026-08-31T21:17:15","events_24h":0,"events_7d":0,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":60010,"proto":"tcp","label":"","count":16},{"port":3130,"proto":"tcp","label":"","count":16},{"port":1090,"proto":"tcp","label":"","count":16},{"port":1087,"proto":"tcp","label":"","count":16},{"port":1082,"proto":"tcp","label":"","count":16},{"port":1081,"proto":"tcp","label":"","count":16},{"port":1089,"proto":"tcp","label":"","count":16},{"port":3129,"proto":"tcp","label":"","count":16},{"port":1086,"proto":"tcp","label":"","count":16},{"port":1091,"proto":"tcp","label":"","count":16},{"port":60001,"proto":"tcp","label":"","count":16},{"port":1080,"proto":"tcp","label":"SOCKS","count":12},{"port":1083,"proto":"tcp","label":"","count":12},{"port":80,"proto":"tcp","label":"HTTP","count":8}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[]},"fingerprint_peers":{},"user_agents":["Go-http-client/1.1"],"timeline":[{"date":"2026-08-28","count":12},{"date":"2026-08-29","count":68},{"date":"2026-08-30","count":56},{"date":"2026-08-31","count":72}],"recent_events":[{"timestamp":"2026-08-31T21:17:15","port":1083,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"4b013544-bbe1-43db-907b-65aadc58a0c6","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":15,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-08-31T21:17:15","port":1083,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"proxy.flarevpn.digital","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://proxy.flarevpn.digital:8080/judge","summary":"","payload_hex":"47455420687474703a2f2f70726f78792e666c61726576706e2e6469676974616c3a383038302f6a7564676520485454502f312e310d0a486f73743a2070726f78792e666c61726576706e2e6469676974616c3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"a0dec399-901e-4a0a-8c90-f8dd4e634049","seq":1,"duration_ms":100,"bytes_in":166,"bytes_out":80},{"timestamp":"2026-08-31T21:17:15","port":1083,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"a424bed4-fd46-4782-ab09-f9b1aab66a88","seq":1,"duration_ms":101,"bytes_in":3,"bytes_out":15,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-08-31T21:17:15","port":1083,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"proxy.flarevpn.digital","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://proxy.flarevpn.digital:8080/judge","summary":"","payload_hex":"47455420687474703a2f2f70726f78792e666c61726576706e2e6469676974616c3a383038302f6a7564676520485454502f312e310d0a486f73743a2070726f78792e666c61726576706e2e6469676974616c3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"fc0b06e3-cb6f-4a4d-88f3-87b6806b9e81","seq":1,"duration_ms":100,"bytes_in":166,"bytes_out":80},{"timestamp":"2026-08-31T21:11:28","port":1083,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"6d51b2c8-0e7d-4353-8f7c-2780b6126c51","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":15,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-08-31T21:11:28","port":1083,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"proxy.flarevpn.digital","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://proxy.flarevpn.digital:8080/judge","summary":"","payload_hex":"47455420687474703a2f2f70726f78792e666c61726576706e2e6469676974616c3a383038302f6a7564676520485454502f312e310d0a486f73743a2070726f78792e666c61726576706e2e6469676974616c3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"9dcb1946-66bd-428d-8500-347496858d2a","seq":1,"duration_ms":101,"bytes_in":166,"bytes_out":80},{"timestamp":"2026-08-31T21:11:28","port":1083,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"176b7f5d-cf3a-4ef0-96ff-42ab6cb2455d","seq":1,"duration_ms":101,"bytes_in":3,"bytes_out":15,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-08-31T21:11:28","port":1083,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"proxy.flarevpn.digital","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://proxy.flarevpn.digital:8080/judge","summary":"","payload_hex":"47455420687474703a2f2f70726f78792e666c61726576706e2e6469676974616c3a383038302f6a7564676520485454502f312e310d0a486f73743a2070726f78792e666c61726576706e2e6469676974616c3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"b6e2a31f-12ff-4403-a296-0e664b94e2dc","seq":1,"duration_ms":100,"bytes_in":166,"bytes_out":80},{"timestamp":"2026-08-31T20:49:43","port":1083,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"proxy.flarevpn.digital","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://proxy.flarevpn.digital:8080/judge","summary":"","payload_hex":"47455420687474703a2f2f70726f78792e666c61726576706e2e6469676974616c3a383038302f6a7564676520485454502f312e310d0a486f73743a2070726f78792e666c61726576706e2e6469676974616c3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"5d1ce64b-52ea-4914-9cc6-061807c3491f","seq":1,"duration_ms":100,"bytes_in":166,"bytes_out":80},{"timestamp":"2026-08-31T20:49:43","port":1083,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"c6b79d3a-5037-42ef-94f9-625402b3aeb1","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":15,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}}],"http_methods":[{"method":"GET","count":104}],"distinct_ports_total":14,"top_paths":[{"path":"http://proxy.flarevpn.digital:8080/judge","count":104,"ports":14}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[{"value":"proxy.flarevpn.digital","count":104}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"proxy.flarevpn.digital:8080","notable":false},{"name":"User-Agent","value":"Go-http-client/1.1","notable":false}],"distinct_sets":1,"events_with_headers":5},"tags":[],"data_as_of":"2026-09-21T21:27:13.012258+00:00"}