{"ip":"49.12.174.19","total_events":18,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["18 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"594 bytes sent","bytes_sent":594,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-04T10:34:25","last_seen":"2026-08-08T09:23:38","events_24h":0,"events_7d":2,"geo":{"country_code":"DE","country_name":"Germany","region":"Saxony","city":"Falkenstein","lat":50.4777,"lon":12.3649,"asn":24940,"org":"Hetzner Online GmbH"},"source_domain":"static.19.174.12.49.clients.your-server.de","known_scanners":[],"scanner_tag":{"key":"hetzner","label":"Hetzner","category":"hosting_provider","url":"https://www.hetzner.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":2},{"port":808,"proto":"tcp","label":"","count":2},{"port":8000,"proto":"tcp","label":"HTTP-alt","count":2},{"port":9050,"proto":"tcp","label":"","count":2},{"port":8118,"proto":"tcp","label":"","count":2},{"port":4145,"proto":"tcp","label":"","count":2},{"port":3128,"proto":"tcp","label":"HTTP-proxy","count":2},{"port":1081,"proto":"tcp","label":"","count":2},{"port":3129,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-04","count":8},{"date":"2026-08-05","count":2},{"date":"2026-08-06","count":6},{"date":"2026-08-08","count":2}],"recent_events":[{"timestamp":"2026-08-08T09:23:38","port":4145,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT api.ipify.org:443 HTTP/1.1\r\nHost: api.ipify.org:443\r\n\r\n","payload_hex":"434f4e4e454354206170692e69706966792e6f72673a34343320485454502f312e310d0a486f73743a206170692e69706966792e6f72673a3434330d0a0d0a","method":"","user_agent":"","ja3":"","session":"acff7856-bd40-4804-a19f-ec1f9756809d","seq":1,"duration_ms":100,"bytes_in":63,"bytes_out":12,"enriched":{"digest":"b450756f82bb737e","label":"HTTP","strings":["CONNECT api.ipify.org:443 HTTP/1.1","Host: api.ipify.org:443"],"iocs":{"domains":["api.ipify.org"]}}},{"timestamp":"2026-08-08T09:23:38","port":4145,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"ec497ac1-89bd-4ba5-b949-ba5292386a02","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-08-06T15:04:15","port":8000,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT api.ipify.org:443 HTTP/1.1\r\nHost: api.ipify.org:443\r\n\r\n","payload_hex":"434f4e4e454354206170692e69706966792e6f72673a34343320485454502f312e310d0a486f73743a206170692e69706966792e6f72673a3434330d0a0d0a","method":"","user_agent":"","ja3":"","session":"394ad821-a182-419f-b1ee-ac99758fcf73","seq":1,"duration_ms":100,"bytes_in":63,"bytes_out":12,"enriched":{"digest":"b450756f82bb737e","label":"HTTP","strings":["CONNECT api.ipify.org:443 HTTP/1.1","Host: api.ipify.org:443"],"iocs":{"domains":["api.ipify.org"]}}},{"timestamp":"2026-08-06T15:04:15","port":8000,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"92692028-6cb4-4f64-ae48-8a172952c46f","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-08-06T04:59:17","port":9050,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT api.ipify.org:443 HTTP/1.1\r\nHost: api.ipify.org:443\r\n\r\n","payload_hex":"434f4e4e454354206170692e69706966792e6f72673a34343320485454502f312e310d0a486f73743a206170692e69706966792e6f72673a3434330d0a0d0a","method":"","user_agent":"","ja3":"","session":"150954f5-0ee7-4e08-b7e5-5410a55ba9e7","seq":1,"duration_ms":100,"bytes_in":63,"bytes_out":12,"enriched":{"digest":"b450756f82bb737e","label":"HTTP","strings":["CONNECT api.ipify.org:443 HTTP/1.1","Host: api.ipify.org:443"],"iocs":{"domains":["api.ipify.org"]}}},{"timestamp":"2026-08-06T04:59:17","port":9050,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"3e05888d-6213-428f-8d00-6a38d1eef2d4","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-08-06T01:33:48","port":3128,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT api.ipify.org:443 HTTP/1.1\r\nHost: api.ipify.org:443\r\n\r\n","payload_hex":"434f4e4e454354206170692e69706966792e6f72673a34343320485454502f312e310d0a486f73743a206170692e69706966792e6f72673a3434330d0a0d0a","method":"","user_agent":"","ja3":"","session":"b3e0cc09-5861-478e-8bfa-b688721ceb46","seq":1,"duration_ms":100,"bytes_in":63,"bytes_out":12,"enriched":{"digest":"b450756f82bb737e","label":"HTTP","strings":["CONNECT api.ipify.org:443 HTTP/1.1","Host: api.ipify.org:443"],"iocs":{"domains":["api.ipify.org"]}}},{"timestamp":"2026-08-06T01:33:48","port":3128,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"d3786f0a-cb3d-4d93-ab6e-cfe2653df08b","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-08-05T12:22:48","port":808,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT api.ipify.org:443 HTTP/1.1\r\nHost: api.ipify.org:443\r\n\r\n","payload_hex":"434f4e4e454354206170692e69706966792e6f72673a34343320485454502f312e310d0a486f73743a206170692e69706966792e6f72673a3434330d0a0d0a","method":"","user_agent":"","ja3":"","session":"46305d8a-b6b1-4e96-8b64-9aba23bf812b","seq":1,"duration_ms":100,"bytes_in":63,"bytes_out":12,"enriched":{"digest":"b450756f82bb737e","label":"HTTP","strings":["CONNECT api.ipify.org:443 HTTP/1.1","Host: api.ipify.org:443"],"iocs":{"domains":["api.ipify.org"]}}},{"timestamp":"2026-08-05T12:22:48","port":808,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"db937199-fb40-412c-9b48-d30ccbc204ce","seq":1,"duration_ms":100,"bytes_in":3,"bytes_out":12,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}}],"http_methods":[],"distinct_ports_total":9,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T08:45:48.152612+00:00"}