{"ip":"45.74.17.169","data_as_of":"2026-10-26T12:33:53+00:00","observed":true,"total_events":20,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"network service provider","why":["32 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Counts include 12 interactive session(s) as well as first-packet events."],"engagement":{"level":"request","label":"Request traffic","detail":"3,786 bytes sent","bytes_sent":3786,"session_seconds":1,"persistent":false},"basis":"combined"},"first_seen":"2026-10-19T17:47:29","last_seen":"2026-10-20T09:48:42","events_24h":0,"events_7d":20,"interactive_sessions":12,"interactive_sessions_24h":0,"interactive_sessions_7d":12,"interactive_protocols":[{"protocol":"socks5","sessions":12}],"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":137409,"org":"GSL Networks Pty LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as137409","label":"Global Secure Layer","category":"isp","url":"https://www.peeringdb.com/asn/137409"},"cve_matches":[],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":12,"first_seen":"2026-10-19T17:47:29","last_seen":"2026-10-19T18:37:37","verdicts":[{"verdict":"scan","sessions":12}],"personas":[{"persona":"proxy@squid/5.7","sessions":12}],"services":[{"protocol":"socks5","port":9050,"sessions":12}],"logins":[],"commands":[],"downloads":[],"files":[],"attack":[{"technique_id":"T1595","technique_name":"Active Scanning","tactic_id":"TA0043","tactic_name":"Reconnaissance","sessions":12}]},"top_ports":[{"port":9050,"proto":"tcp","label":"","count":12,"sessions":12},{"port":1081,"proto":"tcp","label":"","count":8,"sessions":0}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.108 Safari/537.36","hproxy-probe/18dfff738e0f3788-3f87c","hproxy-probe/18dfff73056a9fe4-3f740","hproxy-probe/18dfff74181b7388-3f9c1"],"timeline":[{"date":"2026-10-19","count":12,"sessions":12},{"date":"2026-10-20","count":8,"sessions":0}],"recent_events":[{"timestamp":"2026-10-20T09:48:42","port":1081,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000P��\ne\u0000","payload_hex":"040100508efb0a6500","method":"","user_agent":"","ja3":"","session":"e6a83e03-c2d0-47f4-900c-54932cfebd0e","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":12},{"timestamp":"2026-10-20T09:48:41","port":1081,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"bab96449-2fca-4b43-bcb0-3f8ce2159b93","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-10-20T09:33:00","port":1081,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000P��\ne\u0000","payload_hex":"040100508efb0a6500","method":"","user_agent":"","ja3":"","session":"276757ba-017b-4687-b49a-3f810c5d8638","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":12},{"timestamp":"2026-10-20T09:32:59","port":1081,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"99ebdc2d-1c77-4992-ad01-c8776bbbf8cd","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-10-20T08:43:27","port":1081,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000P��\ne\u0000","payload_hex":"040100508efb0a6500","method":"","user_agent":"","ja3":"","session":"e1c46bc9-a826-43c7-9f84-4b5d7de9d5c9","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":12},{"timestamp":"2026-10-20T08:43:26","port":1081,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"4ed21521-3fe9-4e31-be8c-b96f53bde8d0","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-10-20T02:25:17","port":1081,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000P��\ne\u0000","payload_hex":"040100508efb0a6500","method":"","user_agent":"","ja3":"","session":"a6494421-ea76-4c08-91e2-c014783831c2","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":12},{"timestamp":"2026-10-20T02:25:16","port":1081,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"703045c5-386d-4d52-aa05-34e41024156c","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-10-19T19:11:16","port":9050,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"5070f14d-3a2f-41a7-b1ab-4f495dd63277","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-10-19T19:11:16","port":9050,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0001�Al�?\u0000","payload_hex":"040101bb416c973f00","method":"","user_agent":"","ja3":"","session":"2b8acfe4-fead-4787-9d04-8065be4cd234","seq":1,"duration_ms":101,"bytes_in":9,"bytes_out":12}],"http_methods":[{"method":"GET","count":6}],"distinct_ports_total":2,"top_paths":[{"path":"/cdn-cgi/trace","count":3,"ports":1},{"path":"/api/free-proxy/echo","count":3,"ports":1}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[{"value":"echo.hproxy.com","count":3},{"value":"hproxy.com","count":3}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}