{"ip":"209.99.189.86","total_events":42,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"network services","why":["42 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."]},"first_seen":"2026-05-03T22:59:16","last_seen":"2026-07-04T16:48:54","events_24h":0,"events_7d":3,"geo":{"country_code":"CH","country_name":"Switzerland","region":"Zurich","city":"Zurich","lat":47.3643,"lon":8.5437,"asn":402253,"org":"SKN Subnet & Telecom Ltd"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":1723,"proto":"tcp","label":"PPTP","count":42}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-05-03","count":8},{"date":"2026-05-04","count":4},{"date":"2026-05-09","count":1},{"date":"2026-05-14","count":2},{"date":"2026-05-29","count":2},{"date":"2026-05-31","count":2},{"date":"2026-06-02","count":1},{"date":"2026-06-06","count":1},{"date":"2026-06-07","count":1},{"date":"2026-06-08","count":2},{"date":"2026-06-13","count":1},{"date":"2026-06-26","count":6},{"date":"2026-06-30","count":8},{"date":"2026-07-04","count":3}],"recent_events":[{"timestamp":"2026-07-04T16:48:54","port":1723,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000�\u0000\u0001\u001a+