{"ip":"209.99.184.95","total_events":48,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"network services","why":["48 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."]},"first_seen":"2026-04-24T01:09:45","last_seen":"2026-07-08T22:23:13","events_24h":4,"events_7d":6,"geo":{"country_code":"CH","country_name":"Switzerland","region":"Zurich","city":"Zurich","lat":47.3643,"lon":8.5437,"asn":402253,"org":"SKN Subnet & Telecom Ltd"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":1723,"proto":"tcp","label":"PPTP","count":48}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-04-24","count":4},{"date":"2026-05-09","count":2},{"date":"2026-05-16","count":2},{"date":"2026-05-18","count":4},{"date":"2026-05-27","count":4},{"date":"2026-05-28","count":1},{"date":"2026-05-29","count":2},{"date":"2026-05-30","count":3},{"date":"2026-05-31","count":2},{"date":"2026-06-01","count":3},{"date":"2026-06-02","count":1},{"date":"2026-06-03","count":1},{"date":"2026-06-04","count":1},{"date":"2026-06-06","count":1},{"date":"2026-06-19","count":2},{"date":"2026-06-26","count":5},{"date":"2026-06-30","count":4},{"date":"2026-07-04","count":2},{"date":"2026-07-08","count":4}],"recent_events":[{"timestamp":"2026-07-08T22:23:13","port":1723,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000�\u0000\u0001\u001a+