{"ip":"45.135.194.99","total_events":40,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"network services","why":["40 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"3,560 bytes sent","bytes_sent":3560,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-06T00:31:19","last_seen":"2026-08-15T08:34:03","events_24h":3,"events_7d":26,"geo":{"country_code":"DE","country_name":"Germany","region":"","city":"","lat":51.2993,"lon":9.491,"asn":51396,"org":"Pfcloud UG (haftungsbeschrankt)"},"source_domain":"45.135.194.99.ptr.pfcloud.network","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":3128,"proto":"tcp","label":"HTTP-proxy","count":37},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-06","count":7},{"date":"2026-08-07","count":4},{"date":"2026-08-08","count":4},{"date":"2026-08-09","count":4},{"date":"2026-08-10","count":3},{"date":"2026-08-11","count":4},{"date":"2026-08-12","count":4},{"date":"2026-08-13","count":4},{"date":"2026-08-14","count":3},{"date":"2026-08-15","count":3}],"recent_events":[{"timestamp":"2026-08-15T08:34:03","port":3128,"proto":"tcp","app_proto":"","app_protocol":"google","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT google.com:443 HTTP/1.1\r\nHost: google.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420676f6f676c652e636f6d3a34343320485454502f312e310d0a486f73743a20676f6f676c652e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"38b343c4-697f-4368-94ff-6e0f8d48c95e","seq":1,"duration_ms":100,"bytes_in":89,"bytes_out":13,"enriched":{"digest":"b7dc5131be7eb0f4","label":"HTTP","strings":["CONNECT google.com:443 HTTP/1.1","Host: google.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["google.com"]}}},{"timestamp":"2026-08-15T07:59:29","port":3128,"proto":"tcp","app_proto":"","app_protocol":"google","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT google.com:443 HTTP/1.1\r\nHost: google.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420676f6f676c652e636f6d3a34343320485454502f312e310d0a486f73743a20676f6f676c652e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"13ed642b-ee92-4f9c-bf66-763b69aa4aa6","seq":1,"duration_ms":100,"bytes_in":89,"bytes_out":13,"enriched":{"digest":"b7dc5131be7eb0f4","label":"HTTP","strings":["CONNECT google.com:443 HTTP/1.1","Host: google.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["google.com"]}}},{"timestamp":"2026-08-15T07:40:36","port":3128,"proto":"tcp","app_proto":"","app_protocol":"google","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT google.com:443 HTTP/1.1\r\nHost: google.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420676f6f676c652e636f6d3a34343320485454502f312e310d0a486f73743a20676f6f676c652e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"3c4848b7-d2b7-40f8-95b3-76cf3fa52931","seq":1,"duration_ms":100,"bytes_in":89,"bytes_out":13,"enriched":{"digest":"b7dc5131be7eb0f4","label":"HTTP","strings":["CONNECT google.com:443 HTTP/1.1","Host: google.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["google.com"]}}},{"timestamp":"2026-08-14T18:32:38","port":3128,"proto":"tcp","app_proto":"","app_protocol":"google","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT google.com:443 HTTP/1.1\r\nHost: google.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420676f6f676c652e636f6d3a34343320485454502f312e310d0a486f73743a20676f6f676c652e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"7b3b75d8-21ba-4e3d-989f-ea47025ede2f","seq":1,"duration_ms":100,"bytes_in":89,"bytes_out":13,"enriched":{"digest":"b7dc5131be7eb0f4","label":"HTTP","strings":["CONNECT google.com:443 HTTP/1.1","Host: google.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["google.com"]}}},{"timestamp":"2026-08-14T16:12:05","port":3128,"proto":"tcp","app_proto":"","app_protocol":"google","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT google.com:443 HTTP/1.1\r\nHost: google.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420676f6f676c652e636f6d3a34343320485454502f312e310d0a486f73743a20676f6f676c652e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"ab72dfe6-8c31-475a-a929-eaa8dd3d21ec","seq":1,"duration_ms":100,"bytes_in":89,"bytes_out":13,"enriched":{"digest":"b7dc5131be7eb0f4","label":"HTTP","strings":["CONNECT google.com:443 HTTP/1.1","Host: google.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["google.com"]}}},{"timestamp":"2026-08-14T14:22:20","port":3128,"proto":"tcp","app_proto":"","app_protocol":"google","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT google.com:443 HTTP/1.1\r\nHost: google.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420676f6f676c652e636f6d3a34343320485454502f312e310d0a486f73743a20676f6f676c652e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"c927bc2e-6e40-4a92-8d1e-37d257600634","seq":1,"duration_ms":100,"bytes_in":89,"bytes_out":13,"enriched":{"digest":"b7dc5131be7eb0f4","label":"HTTP","strings":["CONNECT google.com:443 HTTP/1.1","Host: google.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["google.com"]}}},{"timestamp":"2026-08-13T15:47:39","port":3128,"proto":"tcp","app_proto":"","app_protocol":"google","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT google.com:443 HTTP/1.1\r\nHost: google.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420676f6f676c652e636f6d3a34343320485454502f312e310d0a486f73743a20676f6f676c652e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"82b8a726-6b05-4c16-954f-5ad75c74693b","seq":1,"duration_ms":100,"bytes_in":89,"bytes_out":13,"enriched":{"digest":"b7dc5131be7eb0f4","label":"HTTP","strings":["CONNECT google.com:443 HTTP/1.1","Host: google.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["google.com"]}}},{"timestamp":"2026-08-13T09:00:36","port":3128,"proto":"tcp","app_proto":"","app_protocol":"google","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT google.com:443 HTTP/1.1\r\nHost: google.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420676f6f676c652e636f6d3a34343320485454502f312e310d0a486f73743a20676f6f676c652e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"3402b65f-3ba4-4aa9-9fd6-a643ea98f163","seq":1,"duration_ms":100,"bytes_in":89,"bytes_out":13,"enriched":{"digest":"b7dc5131be7eb0f4","label":"HTTP","strings":["CONNECT google.com:443 HTTP/1.1","Host: google.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["google.com"]}}},{"timestamp":"2026-08-13T06:13:46","port":3128,"proto":"tcp","app_proto":"","app_protocol":"google","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT google.com:443 HTTP/1.1\r\nHost: google.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420676f6f676c652e636f6d3a34343320485454502f312e310d0a486f73743a20676f6f676c652e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"a75069ed-e855-4f29-9648-348a145f242b","seq":1,"duration_ms":100,"bytes_in":89,"bytes_out":13,"enriched":{"digest":"b7dc5131be7eb0f4","label":"HTTP","strings":["CONNECT google.com:443 HTTP/1.1","Host: google.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["google.com"]}}},{"timestamp":"2026-08-13T04:44:16","port":3128,"proto":"tcp","app_proto":"","app_protocol":"google","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT google.com:443 HTTP/1.1\r\nHost: google.com:443\r\nUser-Agent: Go-http-client/1.1\r\n\r\n","payload_hex":"434f4e4e45435420676f6f676c652e636f6d3a34343320485454502f312e310d0a486f73743a20676f6f676c652e636f6d3a3434330d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a0d0a","method":"","user_agent":"","ja3":"","session":"54154406-b3be-4ef5-8f09-a475742fb931","seq":1,"duration_ms":100,"bytes_in":89,"bytes_out":13,"enriched":{"digest":"b7dc5131be7eb0f4","label":"HTTP","strings":["CONNECT google.com:443 HTTP/1.1","Host: google.com:443","User-Agent: Go-http-client/1.1"],"iocs":{"domains":["google.com"]}}}],"http_methods":[],"distinct_ports_total":2,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T20:37:05.656297+00:00"}