{"ip":"204.76.203.79","total_events":930,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"150+ ports swept","confidence":"medium","network_type":"network services"},"first_seen":"2026-06-17T17:36:23","last_seen":"2026-06-17T23:05:29","events_24h":0,"events_7d":930,"geo":{"country_code":"NL","country_name":"Netherlands","region":"Limburg","city":"Eygelshoven","lat":50.8897,"lon":6.0563,"asn":51396,"org":"Pfcloud UG (haftungsbeschrankt)"},"source_domain":"204.76.203.79.ptr.pfcloud.network","known_scanners":[],"scanner_tag":null,"cve_matches":[],"top_ports":[{"port":60016,"proto":"tcp","label":"","count":11},{"port":16888,"proto":"tcp","label":"","count":11},{"port":30005,"proto":"tcp","label":"","count":10},{"port":58080,"proto":"tcp","label":"","count":10},{"port":20019,"proto":"tcp","label":"","count":10},{"port":41080,"proto":"tcp","label":"","count":10},{"port":21157,"proto":"tcp","label":"","count":9},{"port":11905,"proto":"tcp","label":"","count":9},{"port":30003,"proto":"tcp","label":"","count":9},{"port":20006,"proto":"tcp","label":"","count":9},{"port":63128,"proto":"tcp","label":"","count":9},{"port":26641,"proto":"tcp","label":"","count":9},{"port":11601,"proto":"tcp","label":"","count":9},{"port":15300,"proto":"tcp","label":"","count":9},{"port":10888,"proto":"tcp","label":"","count":9}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-06-17","count":930}],"recent_events":[{"timestamp":"2026-06-17T23:05:29","port":18088,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT proxy2.proxiesfood.com:443 HTTP/1.1\r\nHost: proxy2.proxiesfood.com:443\r\n\r\n","payload_hex":"434f4e4e4543542070726f7879322e70726f78696573666f6f642e636f6d3a34343320485454502f312e310d0a486f73743a2070726f7879322e70726f78696573666f6f642e636f6d3a3434330d0a0d0a","method":"","user_agent":"","community_id":"1:Ny+reF6buKxY3xqg/1aXDqW+gHs=","ja3":"","session":"5420cf6d-89e3-4a65-a944-547a32ba8d76","seq":1,"duration_ms":101,"bytes_in":81,"bytes_out":13,"enriched":{"digest":"a927054ffc2df71a","label":"HTTP","strings":["CONNECT proxy2.proxiesfood.com:443 HTTP/1.1","Host: proxy2.proxiesfood.com:443"],"iocs":{"domains":["proxy2.proxiesfood.com"]}}},{"timestamp":"2026-06-17T23:05:29","port":18088,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","community_id":"1:i1T46ePpfAwhUtVELAVIRCcWCFY=","ja3":"","session":"a7b60bfa-58b6-4752-a4af-7a055a55584d","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":13,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-06-17T23:03:59","port":20000,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","community_id":"1:2HCvMIbgTQUmnLOFKVF/ljs86jw=","ja3":"","session":"9a507e57-0421-477e-9709-0839a46294f1","seq":1,"duration_ms":101,"bytes_in":3,"bytes_out":13,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-06-17T23:03:59","port":20000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT proxy2.proxiesfood.com:443 HTTP/1.1\r\nHost: proxy2.proxiesfood.com:443\r\n\r\n","payload_hex":"434f4e4e4543542070726f7879322e70726f78696573666f6f642e636f6d3a34343320485454502f312e310d0a486f73743a2070726f7879322e70726f78696573666f6f642e636f6d3a3434330d0a0d0a","method":"","user_agent":"","community_id":"1:jKiyQRQEvPETsfr1qlnWv5zWT/M=","ja3":"","session":"e5a6177f-ae3b-4a1c-b9ab-9cc75539c74c","seq":1,"duration_ms":100,"bytes_in":81,"bytes_out":13,"enriched":{"digest":"a927054ffc2df71a","label":"HTTP","strings":["CONNECT proxy2.proxiesfood.com:443 HTTP/1.1","Host: proxy2.proxiesfood.com:443"],"iocs":{"domains":["proxy2.proxiesfood.com"]}}},{"timestamp":"2026-06-17T23:03:59","port":20000,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","community_id":"1:TUimT3mF4JnvRgmmBto7xxw9Zhg=","ja3":"","session":"6cabf773-c415-4efc-b74a-69f11d3a004a","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":13,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-06-17T23:02:52","port":12007,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT proxy2.proxiesfood.com:443 HTTP/1.1\r\nHost: proxy2.proxiesfood.com:443\r\n\r\n","payload_hex":"434f4e4e4543542070726f7879322e70726f78696573666f6f642e636f6d3a34343320485454502f312e310d0a486f73743a2070726f7879322e70726f78696573666f6f642e636f6d3a3434330d0a0d0a","method":"","user_agent":"","community_id":"1:4Wa3wIk2W/HxPkyD2HdVAkZMBqc=","ja3":"","session":"46785d6a-827b-4d0a-b275-1e8c76ec336e","seq":1,"duration_ms":101,"bytes_in":81,"bytes_out":13,"enriched":{"digest":"a927054ffc2df71a","label":"HTTP","strings":["CONNECT proxy2.proxiesfood.com:443 HTTP/1.1","Host: proxy2.proxiesfood.com:443"],"iocs":{"domains":["proxy2.proxiesfood.com"]}}},{"timestamp":"2026-06-17T23:02:52","port":12007,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT proxy2.proxiesfood.com:443 HTTP/1.1\r\nHost: proxy2.proxiesfood.com:443\r\n\r\n","payload_hex":"434f4e4e4543542070726f7879322e70726f78696573666f6f642e636f6d3a34343320485454502f312e310d0a486f73743a2070726f7879322e70726f78696573666f6f642e636f6d3a3434330d0a0d0a","method":"","user_agent":"","community_id":"1:OzicriDiisJSUuUJuD0nQ3wzJX0=","ja3":"","session":"41821b08-7d11-41db-89b5-4c309e0aff75","seq":1,"duration_ms":100,"bytes_in":81,"bytes_out":13,"enriched":{"digest":"a927054ffc2df71a","label":"HTTP","strings":["CONNECT proxy2.proxiesfood.com:443 HTTP/1.1","Host: proxy2.proxiesfood.com:443"],"iocs":{"domains":["proxy2.proxiesfood.com"]}}},{"timestamp":"2026-06-17T23:02:31","port":26641,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","community_id":"1:/5jwKJRA/HbS/W7W08GSHHzCztc=","ja3":"","session":"d152672d-10ea-488d-b834-00bc20d1db45","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":13,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-06-17T23:02:31","port":26641,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT proxy2.proxiesfood.com:443 HTTP/1.1\r\nHost: proxy2.proxiesfood.com:443\r\n\r\n","payload_hex":"434f4e4e4543542070726f7879322e70726f78696573666f6f642e636f6d3a34343320485454502f312e310d0a486f73743a2070726f7879322e70726f78696573666f6f642e636f6d3a3434330d0a0d0a","method":"","user_agent":"","community_id":"1:YMfevQFCOqKuccxBgF58jpEszf0=","ja3":"","session":"2e76608e-3a11-4fdc-b123-c52fb974ea19","seq":1,"duration_ms":101,"bytes_in":81,"bytes_out":13,"enriched":{"digest":"a927054ffc2df71a","label":"HTTP","strings":["CONNECT proxy2.proxiesfood.com:443 HTTP/1.1","Host: proxy2.proxiesfood.com:443"],"iocs":{"domains":["proxy2.proxiesfood.com"]}}},{"timestamp":"2026-06-17T23:02:31","port":26641,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT proxy2.proxiesfood.com:443 HTTP/1.1\r\nHost: proxy2.proxiesfood.com:443\r\n\r\n","payload_hex":"434f4e4e4543542070726f7879322e70726f78696573666f6f642e636f6d3a34343320485454502f312e310d0a486f73743a2070726f7879322e70726f78696573666f6f642e636f6d3a3434330d0a0d0a","method":"","user_agent":"","community_id":"1:1MQsz/KiZDGP6uK3oFk+Dx9Gvds=","ja3":"","session":"d134fa21-7510-4303-b97c-e81a26e549de","seq":1,"duration_ms":100,"bytes_in":81,"bytes_out":13,"enriched":{"digest":"a927054ffc2df71a","label":"HTTP","strings":["CONNECT proxy2.proxiesfood.com:443 HTTP/1.1","Host: proxy2.proxiesfood.com:443"],"iocs":{"domains":["proxy2.proxiesfood.com"]}}}],"http_methods":[],"distinct_ports_total":150,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-06-24T16:45:04.949776+00:00"}