{"ip":"45.194.92.14","total_events":263,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"38+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 38 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"36,785 bytes sent","bytes_sent":36785,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-08T11:04:36","last_seen":"2026-09-02T14:55:02","events_24h":0,"events_7d":0,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":215925,"org":"Vpsvault.host Ltd"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as215925","label":"VPSVAULTHOST","category":"cdn","url":"https://www.peeringdb.com/asn/215925"},"cve_matches":[],"malware":[],"top_ports":[{"port":8000,"proto":"tcp","label":"HTTP-alt","count":16},{"port":999,"proto":"tcp","label":"","count":16},{"port":1081,"proto":"tcp","label":"","count":16},{"port":80,"proto":"tcp","label":"HTTP","count":16},{"port":3128,"proto":"tcp","label":"HTTP-proxy","count":16},{"port":1080,"proto":"tcp","label":"SOCKS","count":14},{"port":7890,"proto":"tcp","label":"","count":12},{"port":1082,"proto":"tcp","label":"","count":12},{"port":5678,"proto":"tcp","label":"","count":12},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":10},{"port":9050,"proto":"tcp","label":"","count":10},{"port":8081,"proto":"tcp","label":"","count":9},{"port":8118,"proto":"tcp","label":"","count":8},{"port":443,"proto":"tcp","label":"HTTPS","count":6},{"port":8888,"proto":"tcp","label":"HTTP-alt","count":6}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":["ge11nn0500_cac2c496544b"]},"fingerprint_peers":{"ge11nn0500_cac2c496544b":58},"user_agents":["zmap-proxy-probe/1.0"],"timeline":[{"date":"2026-07-08","count":4},{"date":"2026-07-09","count":11},{"date":"2026-07-10","count":20},{"date":"2026-07-11","count":14},{"date":"2026-07-12","count":12},{"date":"2026-07-13","count":4},{"date":"2026-07-14","count":3},{"date":"2026-07-17","count":3},{"date":"2026-07-18","count":17},{"date":"2026-07-19","count":11},{"date":"2026-08-15","count":3},{"date":"2026-08-16","count":8},{"date":"2026-08-17","count":12},{"date":"2026-08-18","count":12},{"date":"2026-08-19","count":8},{"date":"2026-08-20","count":10},{"date":"2026-08-21","count":11},{"date":"2026-08-22","count":9},{"date":"2026-08-23","count":9},{"date":"2026-08-24","count":13},{"date":"2026-08-25","count":9},{"date":"2026-08-26","count":11},{"date":"2026-08-27","count":7},{"date":"2026-08-28","count":4},{"date":"2026-08-29","count":5},{"date":"2026-08-30","count":9},{"date":"2026-08-31","count":9},{"date":"2026-09-01","count":11},{"date":"2026-09-02","count":4}],"recent_events":[{"timestamp":"2026-09-02T14:55:02","port":8081,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"azenv.net","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"zmap-proxy-probe/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://azenv.net/","summary":"","payload_hex":"47455420687474703a2f2f617a656e762e6e65742f20485454502f312e310d0a486f73743a20617a656e762e6e65740d0a557365722d4167656e743a207a6d61702d70726f78792d70726f62652f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"zmap-proxy-probe/1.0","ja3":"","session":"a3ae003f-522a-46b2-808c-bbbc86fe17a6","seq":1,"duration_ms":100,"bytes_in":140,"bytes_out":77},{"timestamp":"2026-09-02T08:48:38","port":8081,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"azenv.net","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"zmap-proxy-probe/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://azenv.net/","summary":"","payload_hex":"47455420687474703a2f2f617a656e762e6e65742f20485454502f312e310d0a486f73743a20617a656e762e6e65740d0a557365722d4167656e743a207a6d61702d70726f78792d70726f62652f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"zmap-proxy-probe/1.0","ja3":"","session":"0537c802-0516-48d8-bd15-53e54da8c7a6","seq":1,"duration_ms":100,"bytes_in":140,"bytes_out":77},{"timestamp":"2026-09-02T06:38:41","port":8081,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"azenv.net","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"zmap-proxy-probe/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://azenv.net/","summary":"","payload_hex":"47455420687474703a2f2f617a656e762e6e65742f20485454502f312e310d0a486f73743a20617a656e762e6e65740d0a557365722d4167656e743a207a6d61702d70726f78792d70726f62652f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"zmap-proxy-probe/1.0","ja3":"","session":"12776e69-d20d-4e11-9311-c098fc5e08ad","seq":1,"duration_ms":100,"bytes_in":140,"bytes_out":77},{"timestamp":"2026-09-02T04:29:42","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"azenv.net","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"zmap-proxy-probe/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://azenv.net/","summary":"","payload_hex":"47455420687474703a2f2f617a656e762e6e65742f20485454502f312e310d0a486f73743a20617a656e762e6e65740d0a557365722d4167656e743a207a6d61702d70726f78792d70726f62652f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"zmap-proxy-probe/1.0","ja3":"","session":"f22b7436-c047-4fe3-ac0f-c1c66a6020e7","seq":1,"duration_ms":100,"bytes_in":140,"bytes_out":77},{"timestamp":"2026-09-01T23:06:05","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"azenv.net","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"zmap-proxy-probe/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://azenv.net/","summary":"","payload_hex":"47455420687474703a2f2f617a656e762e6e65742f20485454502f312e310d0a486f73743a20617a656e762e6e65740d0a557365722d4167656e743a207a6d61702d70726f78792d70726f62652f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"zmap-proxy-probe/1.0","ja3":"","session":"41516957-d4fb-413e-b767-e7fc551d7fe7","seq":1,"duration_ms":100,"bytes_in":140,"bytes_out":77},{"timestamp":"2026-09-01T20:37:54","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"azenv.net","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"zmap-proxy-probe/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://azenv.net/","summary":"","payload_hex":"47455420687474703a2f2f617a656e762e6e65742f20485454502f312e310d0a486f73743a20617a656e762e6e65740d0a557365722d4167656e743a207a6d61702d70726f78792d70726f62652f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"zmap-proxy-probe/1.0","ja3":"","session":"f83bc9f8-cfbb-4805-933b-5e6a0dc8dcc8","seq":1,"duration_ms":100,"bytes_in":140,"bytes_out":77},{"timestamp":"2026-09-01T16:00:44","port":8000,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"azenv.net","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"zmap-proxy-probe/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://azenv.net/","summary":"","payload_hex":"47455420687474703a2f2f617a656e762e6e65742f20485454502f312e310d0a486f73743a20617a656e762e6e65740d0a557365722d4167656e743a207a6d61702d70726f78792d70726f62652f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"zmap-proxy-probe/1.0","ja3":"","session":"49404165-0235-4d78-b3d8-221d0a73261b","seq":1,"duration_ms":101,"bytes_in":140,"bytes_out":77},{"timestamp":"2026-09-01T15:23:28","port":8000,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"azenv.net","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"zmap-proxy-probe/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://azenv.net/","summary":"","payload_hex":"47455420687474703a2f2f617a656e762e6e65742f20485454502f312e310d0a486f73743a20617a656e762e6e65740d0a557365722d4167656e743a207a6d61702d70726f78792d70726f62652f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"zmap-proxy-probe/1.0","ja3":"","session":"67da4672-c5cd-4b0a-8681-f311e976dfa9","seq":1,"duration_ms":100,"bytes_in":140,"bytes_out":77},{"timestamp":"2026-09-01T14:33:37","port":8000,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"azenv.net","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"zmap-proxy-probe/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://azenv.net/","summary":"","payload_hex":"47455420687474703a2f2f617a656e762e6e65742f20485454502f312e310d0a486f73743a20617a656e762e6e65740d0a557365722d4167656e743a207a6d61702d70726f78792d70726f62652f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"zmap-proxy-probe/1.0","ja3":"","session":"46ae8781-1629-4a43-bee9-b86a74dccbf1","seq":1,"duration_ms":100,"bytes_in":140,"bytes_out":77},{"timestamp":"2026-09-01T11:19:13","port":8000,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"azenv.net","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"azenv.net\",\"user-agent\":\"zmap-proxy-probe/1.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://azenv.net/","summary":"","payload_hex":"47455420687474703a2f2f617a656e762e6e65742f20485454502f312e310d0a486f73743a20617a656e762e6e65740d0a557365722d4167656e743a207a6d61702d70726f78792d70726f62652f312e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"zmap-proxy-probe/1.0","ja3":"","session":"e23182e4-c9d3-440a-b908-e218ff1b02f3","seq":1,"duration_ms":100,"bytes_in":140,"bytes_out":77}],"http_methods":[{"method":"GET","count":262}],"distinct_ports_total":38,"top_paths":[{"path":"http://azenv.net/","count":262,"ports":38}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[{"value":"azenv.net","count":262}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"azenv.net","notable":false},{"name":"User-Agent","value":"zmap-proxy-probe/1.0","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-20T19:45:14.737426+00:00"}