{"ip":"45.55.171.151","observed":true,"total_events":557,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"574 events across 4 port(s)","confidence":"medium","network_type":"CDN","why":["574 requests against only 4 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range.","Counts include 17 interactive session(s) as well as first-packet events."],"engagement":{"level":"payload","label":"Sustained payload","detail":"23,144 bytes sent","bytes_sent":23144,"session_seconds":3,"persistent":false},"basis":"combined"},"first_seen":"2026-10-12T12:40:37","last_seen":"2026-10-14T20:46:23","events_24h":93,"events_7d":557,"interactive_sessions":17,"interactive_sessions_24h":17,"interactive_sessions_7d":17,"interactive_protocols":[{"protocol":"socks5","sessions":12},{"protocol":"http-proxy","sessions":5}],"geo":{"country_code":"US","country_name":"United States","region":"New Jersey","city":"Clifton","lat":40.8364,"lon":-74.1403,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":17,"first_seen":"2026-10-14T19:58:23","last_seen":"2026-10-14T19:59:06","verdicts":[{"verdict":"unknown","sessions":12},{"verdict":"scan","sessions":5}],"personas":[{"persona":"proxy@squid/5.7","sessions":17}],"services":[{"protocol":"socks5","port":1081,"sessions":6},{"protocol":"socks5","port":1080,"sessions":6},{"protocol":"http-proxy","port":3128,"sessions":5}],"logins":[],"commands":[],"downloads":[],"files":[]},"top_ports":[{"port":1080,"proto":"tcp","label":"SOCKS","count":178,"sessions":6},{"port":1081,"proto":"tcp","label":"","count":177,"sessions":6},{"port":3128,"proto":"tcp","label":"HTTP-proxy","count":160,"sessions":5},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":42,"sessions":0}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["b11cun040_00040015_4c87b06e"]},"fingerprint_peers":{"b11cun040_00040015_4c87b06e":306},"akin_families":{"b11cun040_00040015_4c87b06e":{"head":"b11cun040_00040015_4c87b06e","shapes":4,"ips":306}},"user_agents":[],"timeline":[{"date":"2026-10-12","count":340,"sessions":0},{"date":"2026-10-13","count":124,"sessions":0},{"date":"2026-10-14","count":93,"sessions":17}],"recent_events":[{"timestamp":"2026-10-14T20:46:23","port":3128,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"api.ipify.org","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"api.ipify.org\",\"user-agent\":\"v\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://api.ipify.org/?format=json","summary":"","payload_hex":"47455420687474703a2f2f6170692e69706966792e6f72672f3f666f726d61743d6a736f6e20485454502f312e310d0a486f73743a206170692e69706966792e6f72670d0a557365722d4167656e743a20760d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"v","ja3":"","session":"915905d4-eceb-4fcc-bb27-5cd19a3f7e24","seq":1,"duration_ms":102,"bytes_in":118,"bytes_out":78},{"timestamp":"2026-10-14T20:46:23","port":1080,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"api.ipify.org","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"api.ipify.org\",\"user-agent\":\"v\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://api.ipify.org/?format=json","summary":"","payload_hex":"47455420687474703a2f2f6170692e69706966792e6f72672f3f666f726d61743d6a736f6e20485454502f312e310d0a486f73743a206170692e69706966792e6f72670d0a557365722d4167656e743a20760d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"v","ja3":"","session":"9b8520fe-b56f-406b-8d2a-c7ac3243cd05","seq":1,"duration_ms":100,"bytes_in":118,"bytes_out":78},{"timestamp":"2026-10-14T20:46:16","port":1081,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"api.ipify.org","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"api.ipify.org\",\"user-agent\":\"v\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://api.ipify.org/?format=json","summary":"","payload_hex":"47455420687474703a2f2f6170692e69706966792e6f72672f3f666f726d61743d6a736f6e20485454502f312e310d0a486f73743a206170692e69706966792e6f72670d0a557365722d4167656e743a20760d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"v","ja3":"","session":"3e9246a9-8a74-47fd-882f-9e83121feb32","seq":1,"duration_ms":100,"bytes_in":118,"bytes_out":78},{"timestamp":"2026-10-14T20:46:16","port":1080,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"example.com","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"example.com\",\"user-agent\":\"v\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://example.com/","summary":"","payload_hex":"47455420687474703a2f2f6578616d706c652e636f6d2f20485454502f312e310d0a486f73743a206578616d706c652e636f6d0d0a557365722d4167656e743a20760d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"v","ja3":"","session":"27c09f09-0cb4-44bf-a92a-25178a7eb0bd","seq":1,"duration_ms":101,"bytes_in":102,"bytes_out":78},{"timestamp":"2026-10-14T20:46:16","port":3128,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"example.com","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"example.com\",\"user-agent\":\"v\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://example.com/","summary":"","payload_hex":"47455420687474703a2f2f6578616d706c652e636f6d2f20485454502f312e310d0a486f73743a206578616d706c652e636f6d0d0a557365722d4167656e743a20760d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"v","ja3":"","session":"51534744-428a-4e25-92c1-828077416a23","seq":1,"duration_ms":100,"bytes_in":102,"bytes_out":78},{"timestamp":"2026-10-14T20:46:12","port":1080,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000Ph\u001a\r�\u0000","payload_hex":"04010050681a0dcd00","method":"","user_agent":"","ja3":"","session":"13d4fcaa-5d3e-4a41-9816-94802781145b","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":13},{"timestamp":"2026-10-14T20:46:12","port":3128,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000Ph\u001a\r�\u0000","payload_hex":"04010050681a0dcd00","method":"","user_agent":"","ja3":"","session":"ea3abe9e-ef44-4cc6-b84d-3882ec46b450","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":13},{"timestamp":"2026-10-14T20:46:09","port":1081,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"example.com","headers":"{\"accept\":\"*/*\",\"connection\":\"close\",\"host\":\"example.com\",\"user-agent\":\"v\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://example.com/","summary":"","payload_hex":"47455420687474703a2f2f6578616d706c652e636f6d2f20485454502f312e310d0a486f73743a206578616d706c652e636f6d0d0a557365722d4167656e743a20760d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"v","ja3":"","session":"800c2a7a-545c-43e9-9875-d1c7b9458568","seq":1,"duration_ms":100,"bytes_in":102,"bytes_out":78},{"timestamp":"2026-10-14T20:46:09","port":3128,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000Ph\u0014\u0017�\u0000","payload_hex":"040100506814179a00","method":"","user_agent":"","ja3":"","session":"89cf4b37-c3c4-4fcc-9184-4c778d1d9e71","seq":1,"duration_ms":101,"bytes_in":9,"bytes_out":13},{"timestamp":"2026-10-14T20:46:08","port":1080,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000Ph\u0014\u0017�\u0000","payload_hex":"040100506814179a00","method":"","user_agent":"","ja3":"","session":"7599859a-945e-4329-a029-af1b8d07ecc2","seq":1,"duration_ms":101,"bytes_in":9,"bytes_out":13}],"http_methods":[{"method":"GET","count":188}],"distinct_ports_total":4,"top_paths":[{"path":"http://example.com/","count":94,"ports":4},{"path":"http://api.ipify.org/?format=json","count":94,"ports":4}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[{"value":"example.com","count":94},{"value":"api.ipify.org","count":94}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"api.ipify.org","notable":false},{"name":"User-Agent","value":"v","notable":false}],"distinct_sets":1,"events_with_headers":6},"tags":[],"data_as_of":"2026-10-15T03:59:31.605395+00:00"}