{"ip":"45.205.1.133","total_events":280,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"27+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 27 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"23,660 bytes sent","bytes_sent":23660,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-12T14:13:44","last_seen":"2026-09-20T17:23:31","events_24h":64,"events_7d":272,"geo":{"country_code":"BR","country_name":"Brazil","region":"","city":"","lat":-22.8305,"lon":-43.2192,"asn":215925,"org":"Vpsvault.host Ltd"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as215925","label":"VPSVAULTHOST","category":"cdn","url":"https://www.peeringdb.com/asn/215925"},"cve_matches":[],"malware":[],"top_ports":[{"port":3130,"proto":"tcp","label":"","count":12},{"port":8082,"proto":"tcp","label":"","count":12},{"port":8087,"proto":"tcp","label":"","count":12},{"port":8099,"proto":"tcp","label":"","count":12},{"port":8097,"proto":"tcp","label":"","count":12},{"port":3129,"proto":"tcp","label":"","count":12},{"port":8017,"proto":"tcp","label":"","count":12},{"port":3128,"proto":"tcp","label":"HTTP-proxy","count":12},{"port":8010,"proto":"tcp","label":"","count":12},{"port":8013,"proto":"tcp","label":"","count":12},{"port":8089,"proto":"tcp","label":"Splunk","count":12},{"port":8083,"proto":"tcp","label":"","count":12},{"port":8084,"proto":"tcp","label":"","count":12},{"port":8086,"proto":"tcp","label":"InfluxDB","count":12},{"port":8091,"proto":"tcp","label":"","count":12}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":["ge11nn0400_9c3956fad5da"]},"fingerprint_peers":{"ge11nn0400_9c3956fad5da":1530},"user_agents":["Go-http-client/1.1"],"timeline":[{"date":"2026-09-12","count":8},{"date":"2026-09-16","count":64},{"date":"2026-09-17","count":48},{"date":"2026-09-18","count":48},{"date":"2026-09-19","count":60},{"date":"2026-09-20","count":52}],"recent_events":[{"timestamp":"2026-09-20T17:23:31","port":8018,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"proxy.flarevpn.digital","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://proxy.flarevpn.digital:8080/judge","summary":"","payload_hex":"47455420687474703a2f2f70726f78792e666c61726576706e2e6469676974616c3a383038302f6a7564676520485454502f312e310d0a486f73743a2070726f78792e666c61726576706e2e6469676974616c3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"2cf90699-d15c-4cc1-8509-318d3c956558","seq":1,"duration_ms":100,"bytes_in":166,"bytes_out":77},{"timestamp":"2026-09-20T17:23:31","port":8018,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"6ac35a9d-e72c-4df3-8531-5055fd663886","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-09-20T17:23:30","port":8018,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"proxy.flarevpn.digital","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://proxy.flarevpn.digital:8080/judge","summary":"","payload_hex":"47455420687474703a2f2f70726f78792e666c61726576706e2e6469676974616c3a383038302f6a7564676520485454502f312e310d0a486f73743a2070726f78792e666c61726576706e2e6469676974616c3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"3c752203-c3cc-4f17-a521-52cb33221565","seq":1,"duration_ms":101,"bytes_in":166,"bytes_out":77},{"timestamp":"2026-09-20T17:23:30","port":8018,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"547aee26-7733-4a51-8afa-4bb9486e042a","seq":1,"duration_ms":101,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-09-20T16:03:51","port":8019,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"aa835eae-33e0-44b0-986c-83963db5d36f","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-09-20T16:03:51","port":8019,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"proxy.flarevpn.digital","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://proxy.flarevpn.digital:8080/judge","summary":"","payload_hex":"47455420687474703a2f2f70726f78792e666c61726576706e2e6469676974616c3a383038302f6a7564676520485454502f312e310d0a486f73743a2070726f78792e666c61726576706e2e6469676974616c3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"9c18576c-9cc1-4dc0-a30e-d13fed9a064a","seq":1,"duration_ms":100,"bytes_in":166,"bytes_out":77},{"timestamp":"2026-09-20T16:03:50","port":8019,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"649a1887-2395-48e6-8b80-75ef3bc042c2","seq":1,"duration_ms":103,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-09-20T16:03:50","port":8019,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"proxy.flarevpn.digital","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://proxy.flarevpn.digital:8080/judge","summary":"","payload_hex":"47455420687474703a2f2f70726f78792e666c61726576706e2e6469676974616c3a383038302f6a7564676520485454502f312e310d0a486f73743a2070726f78792e666c61726576706e2e6469676974616c3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"4a97ae69-1d90-4917-a71b-2e5cd27993e0","seq":1,"duration_ms":101,"bytes_in":166,"bytes_out":77},{"timestamp":"2026-09-20T15:13:33","port":8019,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"proxy.flarevpn.digital","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"proxy.flarevpn.digital:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://proxy.flarevpn.digital:8080/judge","summary":"","payload_hex":"47455420687474703a2f2f70726f78792e666c61726576706e2e6469676974616c3a383038302f6a7564676520485454502f312e310d0a486f73743a2070726f78792e666c61726576706e2e6469676974616c3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"8a41809f-3797-4b6b-8ff9-ae8a31bc3f97","seq":1,"duration_ms":100,"bytes_in":166,"bytes_out":77},{"timestamp":"2026-09-20T15:13:32","port":8019,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"b5e26e65-0c92-4ed5-8083-c64113444aeb","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}}],"http_methods":[{"method":"GET","count":140}],"distinct_ports_total":27,"top_paths":[{"path":"http://proxy.flarevpn.digital:8080/judge","count":140,"ports":27}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[{"value":"proxy.flarevpn.digital","count":140}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"proxy.flarevpn.digital:8080","notable":false},{"name":"User-Agent","value":"Go-http-client/1.1","notable":false}],"distinct_sets":1,"events_with_headers":5},"tags":[],"data_as_of":"2026-09-20T18:31:22.862642+00:00"}