{"ip":"2.59.171.216","total_events":4,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"network services","why":["4 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"316 bytes sent","bytes_sent":316,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-21T16:19:28","last_seen":"2026-09-21T16:19:28","events_24h":0,"events_7d":4,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"South Holland","city":"Naaldwijk","lat":51.9968,"lon":4.2057,"asn":49981,"org":"WorldStream B.V."},"source_domain":"2-59-171-216.hosted-by-worldstream.net","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":14183,"proto":"tcp","label":"","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-21","count":4}],"recent_events":[{"timestamp":"2026-09-21T16:19:28","port":14183,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT ipcheckerapi.com:443 HTTP/1.1\r\nHost: ipcheckerapi.com:443\r\nUser-Agent: Go-http-client/1.1\r\nProxy-Authorization: Basic dXNlcjMzNTc5Mjo5ZXR5YTI=\r\n\r\n","payload_hex":"434f4e4e454354206970636865636b65726170692e636f6d3a34343320485454502f312e310d0a486f73743a206970636865636b65726170692e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a50726f78792d417574686f72697a6174696f6e3a2042617369632064584e6c636a4d7a4e5463354d6a6f355a5852355954493d0d0a0d0a","method":"","user_agent":"","ja3":"","session":"e11aae52-160e-4cb8-b0b4-17488302f15f","seq":1,"duration_ms":100,"bytes_in":154,"bytes_out":12,"enriched":{"digest":"f08416ace3430b33","label":"HTTP","strings":["CONNECT ipcheckerapi.com:443 HTTP/1.1","Host: ipcheckerapi.com:443","User-Agent: Go-http-client/1.1","Proxy-Authorization: Basic dXNlcjMzNTc5Mjo5ZXR5YTI="],"iocs":{"domains":["ipcheckerapi.com"]}}},{"timestamp":"2026-09-21T16:19:28","port":14183,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0002\u0000\u0002","payload_hex":"05020002","method":"","user_agent":"","ja3":"","session":"a412c576-710e-47d4-98b5-a8654932ff9f","seq":1,"duration_ms":101,"bytes_in":4,"bytes_out":12,"enriched":{"digest":"bb32f1da18a34784","label":"SOCKS5"}},{"timestamp":"2026-09-21T16:19:28","port":14183,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT ipcheckerapi.com:443 HTTP/1.1\r\nHost: ipcheckerapi.com:443\r\nUser-Agent: Go-http-client/1.1\r\nProxy-Authorization: Basic dXNlcjMzNTc5Mjo5ZXR5YTI=\r\n\r\n","payload_hex":"434f4e4e454354206970636865636b65726170692e636f6d3a34343320485454502f312e310d0a486f73743a206970636865636b65726170692e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a50726f78792d417574686f72697a6174696f6e3a2042617369632064584e6c636a4d7a4e5463354d6a6f355a5852355954493d0d0a0d0a","method":"","user_agent":"","ja3":"","session":"33ca0f5b-f57a-43d8-a9ee-cb74578e4e53","seq":1,"duration_ms":100,"bytes_in":154,"bytes_out":12,"enriched":{"digest":"f08416ace3430b33","label":"HTTP","strings":["CONNECT ipcheckerapi.com:443 HTTP/1.1","Host: ipcheckerapi.com:443","User-Agent: Go-http-client/1.1","Proxy-Authorization: Basic dXNlcjMzNTc5Mjo5ZXR5YTI="],"iocs":{"domains":["ipcheckerapi.com"]}}},{"timestamp":"2026-09-21T16:19:28","port":14183,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0002\u0000\u0002","payload_hex":"05020002","method":"","user_agent":"","ja3":"","session":"53d8d4c3-88da-459d-8c23-f02bde5e0e76","seq":1,"duration_ms":101,"bytes_in":4,"bytes_out":12,"enriched":{"digest":"bb32f1da18a34784","label":"SOCKS5"}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-24T14:27:56.955395+00:00"}