{"ip":"49.51.142.34","total_events":90,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"23+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 23 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,800 bytes sent","bytes_sent":1800,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-20T13:39:30","last_seen":"2026-09-20T13:39:53","events_24h":0,"events_7d":90,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":132203,"org":"Tencent Building, Kejizhongyi Avenue"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as132203","label":"Tencent Global","category":"cdn","url":"https://www.peeringdb.com/asn/132203"},"cve_matches":[],"malware":[],"top_ports":[{"port":20,"proto":"tcp","label":"","count":5},{"port":43,"proto":"tcp","label":"","count":5},{"port":4,"proto":"tcp","label":"","count":5},{"port":6,"proto":"tcp","label":"","count":5},{"port":7,"proto":"tcp","label":"","count":5},{"port":13,"proto":"tcp","label":"","count":5},{"port":1,"proto":"tcp","label":"","count":5},{"port":32,"proto":"tcp","label":"","count":5},{"port":17,"proto":"tcp","label":"","count":5},{"port":24,"proto":"tcp","label":"","count":4},{"port":53,"proto":"tcp","label":"DNS","count":4},{"port":42,"proto":"tcp","label":"","count":4},{"port":30,"proto":"tcp","label":"","count":4},{"port":26,"proto":"tcp","label":"","count":4},{"port":9,"proto":"tcp","label":"","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-20","count":90}],"recent_events":[{"timestamp":"2026-09-20T13:39:53","port":17,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000(r�\u001d\u0013\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0001��\u0000\u0001�|\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"8000002872fe1d130000000000000002000186a00001977c0000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"993dc5dd-02f4-4f48-a699-8eb52a454f95","seq":1,"duration_ms":100,"bytes_in":44,"bytes_out":12},{"timestamp":"2026-09-20T13:39:53","port":13,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000(r�\u001d\u0013\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0001��\u0000\u0001�|\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"8000002872fe1d130000000000000002000186a00001977c0000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"505d352b-8248-4be4-b2d8-75247183de01","seq":1,"duration_ms":100,"bytes_in":44,"bytes_out":12},{"timestamp":"2026-09-20T13:39:53","port":20,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000(r�\u001d\u0013\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0001��\u0000\u0001�|\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"8000002872fe1d130000000000000002000186a00001977c0000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"35fea3d9-de28-463b-a6b8-b34c732ba40c","seq":1,"duration_ms":101,"bytes_in":44,"bytes_out":12},{"timestamp":"2026-09-20T13:39:53","port":32,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000(r�\u001d\u0013\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0001��\u0000\u0001�|\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"8000002872fe1d130000000000000002000186a00001977c0000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"a0289cd7-c795-40ac-9686-a138afd5b84d","seq":1,"duration_ms":100,"bytes_in":44,"bytes_out":12},{"timestamp":"2026-09-20T13:39:53","port":6,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000(r�\u001d\u0013\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0001��\u0000\u0001�|\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"8000002872fe1d130000000000000002000186a00001977c0000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"e1f279ef-8ca0-4d00-99bc-7bd85be7535e","seq":1,"duration_ms":100,"bytes_in":44,"bytes_out":12},{"timestamp":"2026-09-20T13:39:53","port":4,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000(r�\u001d\u0013\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0001��\u0000\u0001�|\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"8000002872fe1d130000000000000002000186a00001977c0000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"cfa7f7f2-5203-4d33-991b-e7e53236c69f","seq":1,"duration_ms":100,"bytes_in":44,"bytes_out":12},{"timestamp":"2026-09-20T13:39:53","port":7,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS / RTSP/1.0\r\n\r\n","payload_hex":"4f5054494f4e53202f20525453502f312e300d0a0d0a","method":"","user_agent":"","ja3":"","session":"fbe17f3e-f667-4ea0-a81d-eead5b2eeafd","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":77,"enriched":{"digest":"b6bc3f9a3eb2980d","label":"HTTP","strings":["OPTIONS / RTSP/1.0"]}},{"timestamp":"2026-09-20T13:39:52","port":49,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS / RTSP/1.0\r\n\r\n","payload_hex":"4f5054494f4e53202f20525453502f312e300d0a0d0a","method":"","user_agent":"","ja3":"","session":"6478940b-ffd8-4067-bd3a-6975be965de0","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":77,"enriched":{"digest":"b6bc3f9a3eb2980d","label":"HTTP","strings":["OPTIONS / RTSP/1.0"]}},{"timestamp":"2026-09-20T13:39:52","port":53,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"6218bae1-25c8-4bb0-b6d4-8c5b26ceafad","seq":1,"duration_ms":101,"bytes_in":4,"bytes_out":12},{"timestamp":"2026-09-20T13:39:52","port":1,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS / RTSP/1.0\r\n\r\n","payload_hex":"4f5054494f4e53202f20525453502f312e300d0a0d0a","method":"","user_agent":"","ja3":"","session":"1fc5d313-e650-43ed-8a91-a116c21115a6","seq":1,"duration_ms":101,"bytes_in":22,"bytes_out":77,"enriched":{"digest":"b6bc3f9a3eb2980d","label":"HTTP","strings":["OPTIONS / RTSP/1.0"]}}],"http_methods":[{"method":"GET","count":20},{"method":"OPTIONS","count":18}],"distinct_ports_total":23,"top_paths":[{"path":"/","count":38,"ports":20}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-23T15:12:46.526002+00:00"}