{"ip":"209.141.51.224","total_events":16,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"1 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["1 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,885 bytes sent","bytes_sent":1885,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-07T03:09:09","last_seen":"2026-08-08T13:57:57","events_24h":0,"events_7d":5,"geo":{"country_code":"US","country_name":"United States","region":"Nevada","city":"Las Vegas","lat":36.102,"lon":-115.1447,"asn":53667,"org":"FranTech Solutions"},"source_domain":"assimilatedthg.guru","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":8118,"proto":"tcp","label":"","count":3},{"port":7897,"proto":"tcp","label":"","count":3},{"port":10809,"proto":"tcp","label":"","count":2},{"port":80,"proto":"tcp","label":"HTTP","count":2},{"port":443,"proto":"tcp","label":"HTTPS","count":2},{"port":10808,"proto":"tcp","label":"","count":2},{"port":999,"proto":"tcp","label":"","count":1},{"port":7890,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":["ge10nn0400_17292dadbc7b"]},"fingerprint_peers":{"ge10nn0400_17292dadbc7b":10},"user_agents":["ScanProxy/2"],"timeline":[{"date":"2026-08-07","count":11},{"date":"2026-08-08","count":5}],"recent_events":[{"timestamp":"2026-08-08T13:57:57","port":443,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"httpheader.net","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"httpheader.net\",\"user-agent\":\"ScanProxy/2\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://httpheader.net/azenv.php","summary":"","payload_hex":"47455420687474703a2f2f687474706865616465722e6e65742f617a656e762e70687020485454502f312e300d0a486f73743a20687474706865616465722e6e65740d0a557365722d4167656e743a205363616e50726f78792f320d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"ScanProxy/2","ja3":"","session":"030fb400-7464-4fbd-92ff-2bff6c0e22a3","seq":1,"duration_ms":100,"bytes_in":127,"bytes_out":79},{"timestamp":"2026-08-08T13:57:46","port":443,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"azenv.net","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"ScanProxy/2\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://azenv.net/","summary":"","payload_hex":"47455420687474703a2f2f617a656e762e6e65742f20485454502f312e300d0a486f73743a20617a656e762e6e65740d0a557365722d4167656e743a205363616e50726f78792f320d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"ScanProxy/2","ja3":"","session":"fa0c7248-3e72-42d1-9b04-764844c56238","seq":1,"duration_ms":100,"bytes_in":108,"bytes_out":79},{"timestamp":"2026-08-08T13:34:21","port":999,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"httpheader.net","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"httpheader.net\",\"user-agent\":\"ScanProxy/2\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://httpheader.net/azenv.php","summary":"","payload_hex":"47455420687474703a2f2f687474706865616465722e6e65742f617a656e762e70687020485454502f312e300d0a486f73743a20687474706865616465722e6e65740d0a557365722d4167656e743a205363616e50726f78792f320d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"ScanProxy/2","ja3":"","session":"71b662c3-6651-4d2d-947f-95315c7be755","seq":1,"duration_ms":100,"bytes_in":127,"bytes_out":79},{"timestamp":"2026-08-08T05:39:22","port":7897,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"httpheader.net","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"httpheader.net\",\"user-agent\":\"ScanProxy/2\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://httpheader.net/azenv.php","summary":"","payload_hex":"47455420687474703a2f2f687474706865616465722e6e65742f617a656e762e70687020485454502f312e300d0a486f73743a20687474706865616465722e6e65740d0a557365722d4167656e743a205363616e50726f78792f320d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"ScanProxy/2","ja3":"","session":"b0e5355f-5c94-4a33-be43-e2ea4ef190ec","seq":1,"duration_ms":100,"bytes_in":127,"bytes_out":79},{"timestamp":"2026-08-08T05:39:12","port":7897,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"azenv.net","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"ScanProxy/2\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://azenv.net/","summary":"","payload_hex":"47455420687474703a2f2f617a656e762e6e65742f20485454502f312e300d0a486f73743a20617a656e762e6e65740d0a557365722d4167656e743a205363616e50726f78792f320d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"ScanProxy/2","ja3":"","session":"fb7331f4-1a13-48f8-a791-0f463190225c","seq":1,"duration_ms":100,"bytes_in":108,"bytes_out":79},{"timestamp":"2026-08-07T14:05:09","port":80,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"httpheader.net","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"httpheader.net\",\"user-agent\":\"ScanProxy/2\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://httpheader.net/azenv.php","summary":"","payload_hex":"47455420687474703a2f2f687474706865616465722e6e65742f617a656e762e70687020485454502f312e300d0a486f73743a20687474706865616465722e6e65740d0a557365722d4167656e743a205363616e50726f78792f320d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"ScanProxy/2","ja3":"","session":"e5897515-5b69-42eb-b2e4-146ffe82dea8","seq":1,"duration_ms":101,"bytes_in":127,"bytes_out":79},{"timestamp":"2026-08-07T14:04:59","port":80,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"azenv.net","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"ScanProxy/2\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://azenv.net/","summary":"","payload_hex":"47455420687474703a2f2f617a656e762e6e65742f20485454502f312e300d0a486f73743a20617a656e762e6e65740d0a557365722d4167656e743a205363616e50726f78792f320d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"ScanProxy/2","ja3":"","session":"4ddf7cfc-c174-42f0-a357-86be0388bf98","seq":1,"duration_ms":100,"bytes_in":108,"bytes_out":79},{"timestamp":"2026-08-07T10:14:55","port":10809,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"httpheader.net","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"httpheader.net\",\"user-agent\":\"ScanProxy/2\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://httpheader.net/azenv.php","summary":"","payload_hex":"47455420687474703a2f2f687474706865616465722e6e65742f617a656e762e70687020485454502f312e300d0a486f73743a20687474706865616465722e6e65740d0a557365722d4167656e743a205363616e50726f78792f320d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"ScanProxy/2","ja3":"","session":"d6aacacc-fc8e-46b5-87e5-900104bd5168","seq":1,"duration_ms":100,"bytes_in":127,"bytes_out":79},{"timestamp":"2026-08-07T10:14:45","port":10809,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"azenv.net","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"ScanProxy/2\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://azenv.net/","summary":"","payload_hex":"47455420687474703a2f2f617a656e762e6e65742f20485454502f312e300d0a486f73743a20617a656e762e6e65740d0a557365722d4167656e743a205363616e50726f78792f320d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"ScanProxy/2","ja3":"","session":"813e3421-3216-4711-bd27-44e14f1c9307","seq":1,"duration_ms":100,"bytes_in":108,"bytes_out":79},{"timestamp":"2026-08-07T09:24:53","port":10808,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"httpheader.net","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"httpheader.net\",\"user-agent\":\"ScanProxy/2\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://httpheader.net/azenv.php","summary":"","payload_hex":"47455420687474703a2f2f687474706865616465722e6e65742f617a656e762e70687020485454502f312e300d0a486f73743a20687474706865616465722e6e65740d0a557365722d4167656e743a205363616e50726f78792f320d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"ScanProxy/2","ja3":"","session":"5912495a-9947-42fd-bbae-93f67af69ea7","seq":1,"duration_ms":100,"bytes_in":127,"bytes_out":79}],"http_methods":[{"method":"GET","count":16}],"distinct_ports_total":8,"top_paths":[{"path":"http://httpheader.net/azenv.php","count":7,"ports":7},{"path":"http://azenv.net/","count":6,"ports":6},{"path":"http://icanhazip.com/","count":3,"ports":3}],"distinct_paths_total":3,"top_snis":[],"top_hosts":[{"value":"httpheader.net","count":7},{"value":"azenv.net","count":6},{"value":"icanhazip.com","count":3}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"httpheader.net","notable":false},{"name":"User-Agent","value":"ScanProxy/2","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-08-15T04:45:23.709546+00:00"}