{"ip":"176.65.134.48","total_events":1744,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"418+ ports swept","confidence":"medium","network_type":"network services","why":["No exploit payloads observed.","Swept 418 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"147,368 bytes sent","bytes_sent":147368,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-05T04:30:55","last_seen":"2026-09-19T16:02:34","events_24h":232,"events_7d":1636,"geo":{"country_code":"DE","country_name":"Germany","region":"","city":"","lat":51.2993,"lon":9.491,"asn":51396,"org":"Pfcloud UG (haftungsbeschrankt)"},"source_domain":"176.65.134.48.ptr.pfcloud.network","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":4550,"proto":"tcp","label":"","count":20},{"port":4646,"proto":"tcp","label":"","count":20},{"port":4747,"proto":"tcp","label":"","count":20},{"port":4567,"proto":"tcp","label":"","count":16},{"port":4700,"proto":"tcp","label":"","count":16},{"port":8788,"proto":"tcp","label":"","count":4},{"port":8070,"proto":"tcp","label":"","count":4},{"port":6080,"proto":"tcp","label":"","count":4},{"port":4900,"proto":"tcp","label":"","count":4},{"port":4999,"proto":"tcp","label":"","count":4},{"port":53,"proto":"tcp","label":"DNS","count":4},{"port":8190,"proto":"tcp","label":"","count":4},{"port":9001,"proto":"tcp","label":"Tor","count":4},{"port":11211,"proto":"tcp","label":"Memcached","count":4},{"port":8787,"proto":"tcp","label":"","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":["ge11nn0400_9c3956fad5da"]},"fingerprint_peers":{"ge11nn0400_9c3956fad5da":1544},"user_agents":["Go-http-client/1.1"],"timeline":[{"date":"2026-09-05","count":28},{"date":"2026-09-06","count":20},{"date":"2026-09-07","count":24},{"date":"2026-09-12","count":108},{"date":"2026-09-13","count":236},{"date":"2026-09-14","count":228},{"date":"2026-09-15","count":232},{"date":"2026-09-16","count":248},{"date":"2026-09-17","count":236},{"date":"2026-09-18","count":224},{"date":"2026-09-19","count":160}],"recent_events":[{"timestamp":"2026-09-19T16:02:34","port":16888,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"c530d110-69d4-489c-a57e-04b90806045e","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":13,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-09-19T16:02:34","port":16888,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"proxy.flarevpn.digital","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://proxy.flarevpn.digital:8080/judge","summary":"","payload_hex":"47455420687474703a2f2f70726f78792e666c61726576706e2e6469676974616c3a383038302f6a7564676520485454502f312e310d0a486f73743a2070726f78792e666c61726576706e2e6469676974616c3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"3b3e8a8b-ecb2-4910-9c4b-603e39a0cc3f","seq":1,"duration_ms":101,"bytes_in":166,"bytes_out":78},{"timestamp":"2026-09-19T16:02:34","port":16888,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"proxy.flarevpn.digital","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://proxy.flarevpn.digital:8080/judge","summary":"","payload_hex":"47455420687474703a2f2f70726f78792e666c61726576706e2e6469676974616c3a383038302f6a7564676520485454502f312e310d0a486f73743a2070726f78792e666c61726576706e2e6469676974616c3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"506abde5-5f87-45eb-9e2d-1c24df881d38","seq":1,"duration_ms":101,"bytes_in":166,"bytes_out":78},{"timestamp":"2026-09-19T16:02:34","port":16888,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"70feb059-450f-4ef4-a624-c267d0d74d7c","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":13,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-09-19T15:42:56","port":16666,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"42347206-9004-4b1e-a637-67db744cbd77","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":13,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-09-19T15:42:56","port":16666,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"proxy.flarevpn.digital","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://proxy.flarevpn.digital:8080/judge","summary":"","payload_hex":"47455420687474703a2f2f70726f78792e666c61726576706e2e6469676974616c3a383038302f6a7564676520485454502f312e310d0a486f73743a2070726f78792e666c61726576706e2e6469676974616c3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"d27f55d3-a878-49aa-974d-7313c8af5631","seq":1,"duration_ms":100,"bytes_in":166,"bytes_out":78},{"timestamp":"2026-09-19T15:42:56","port":16666,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"proxy.flarevpn.digital","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://proxy.flarevpn.digital:8080/judge","summary":"","payload_hex":"47455420687474703a2f2f70726f78792e666c61726576706e2e6469676974616c3a383038302f6a7564676520485454502f312e310d0a486f73743a2070726f78792e666c61726576706e2e6469676974616c3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"24af5d52-1f6c-4b9f-921e-ec606a8866a6","seq":1,"duration_ms":100,"bytes_in":166,"bytes_out":78},{"timestamp":"2026-09-19T15:42:56","port":16666,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"b5a60265-3f97-4354-a591-8129e5eca69d","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":13,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-09-19T15:29:36","port":16000,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"proxy.flarevpn.digital","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://proxy.flarevpn.digital:8080/judge","summary":"","payload_hex":"47455420687474703a2f2f70726f78792e666c61726576706e2e6469676974616c3a383038302f6a7564676520485454502f312e310d0a486f73743a2070726f78792e666c61726576706e2e6469676974616c3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"1b137c69-c24e-4dcb-aa5b-637e11e8358b","seq":1,"duration_ms":101,"bytes_in":166,"bytes_out":78},{"timestamp":"2026-09-19T15:29:36","port":16000,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"099d777b-aa1b-40fa-80db-23f519066ee4","seq":1,"duration_ms":101,"bytes_in":3,"bytes_out":13,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}}],"http_methods":[{"method":"GET","count":872}],"distinct_ports_total":418,"top_paths":[{"path":"http://proxy.flarevpn.digital:8080/judge","count":872,"ports":418}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[{"value":"proxy.flarevpn.digital","count":872}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"proxy.flarevpn.digital:8080","notable":false},{"name":"User-Agent","value":"Go-http-client/1.1","notable":false}],"distinct_sets":1,"events_with_headers":5},"tags":[],"data_as_of":"2026-09-19T16:08:18.488481+00:00"}