{"ip":"64.225.112.148","data_as_of":"2026-10-21T15:25:30+00:00","observed":true,"total_events":6685,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"42+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 42 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"446,384 bytes sent","bytes_sent":446384,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-18T07:24:42","last_seen":"2026-10-21T14:52:34","events_24h":2123,"events_7d":6685,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"US","country_name":"United States","region":"California","city":"Santa Clara","lat":37.3486,"lon":-121.9732,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":10800,"proto":"tcp","label":"","count":256},{"port":9050,"proto":"tcp","label":"","count":219},{"port":8001,"proto":"tcp","label":"","count":217},{"port":5678,"proto":"tcp","label":"","count":215},{"port":1086,"proto":"tcp","label":"","count":210},{"port":1085,"proto":"tcp","label":"","count":206},{"port":8888,"proto":"tcp","label":"HTTP-alt","count":206},{"port":9000,"proto":"tcp","label":"Web-alt","count":205},{"port":1090,"proto":"tcp","label":"","count":201},{"port":6588,"proto":"tcp","label":"","count":195},{"port":2080,"proto":"tcp","label":"","count":195},{"port":8089,"proto":"tcp","label":"Splunk","count":190},{"port":8083,"proto":"tcp","label":"","count":187},{"port":1080,"proto":"tcp","label":"SOCKS","count":180},{"port":8081,"proto":"tcp","label":"","count":176}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i140900_cbb2034c60b8_e7c285222651"],"tls_client_hello":"16030100e4010000e00303fd12d6813e26be21c9ca34c5b6bc340a43435aaeea63c9f6194aacdc98aef27d20efbf1bb9b35f3e34cc62781a4786d2cd213ca128541582604a44623181007879001cc02bc02fc02cc030cca9cca8c009c013c00ac014c0121301130213030100007b000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff010001000017000000120000002b00050403040303003300260024001d0020c45acf051460797271b0118f92aecb3047e1cd4c891bfe7da26de754","tls_ja3":["ea4a9ae049cfc614efbb3c244abb3fc7"],"http_akin":["b11cuq040_00040811_2daa70d6","b11cun010_00040000_c4b2c4aa","b11cun030_00040011_c91eaf54"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13i140900_cbb2034c60b8_e7c285222651":757,"b11cuq040_00040811_2daa70d6":491,"b11cun010_00040000_c4b2c4aa":857,"b11cun030_00040011_c91eaf54":931},"akin_families":{"b11cun030_00040011_c91eaf54":{"head":"b11cun030_00040011_c91eaf54","shapes":4,"ips":931}},"user_agents":["Mozilla/5.0 (X11; Linux x86_64) ProxyCheck/8.0"],"timeline":[{"date":"2026-10-18","count":1228},{"date":"2026-10-19","count":2602},{"date":"2026-10-20","count":1732},{"date":"2026-10-21","count":1123}],"recent_events":[{"timestamp":"2026-10-21T14:52:34","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000Ph\u0014\u0017�\u0000","payload_hex":"040100506814179a00","method":"","user_agent":"","ja3":"","session":"c50f2b1b-bebd-42bd-a7a4-cedec798e175","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":14},{"timestamp":"2026-10-21T14:52:33","port":443,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0001\u0000","payload_hex":"050100","method":"","user_agent":"","ja3":"","session":"e113d3f1-c0ee-49e3-acd5-47723c17e0cf","seq":1,"duration_ms":101,"bytes_in":3,"bytes_out":14,"enriched":{"digest":"11c52e4743758a8a","label":"SOCKS5"}},{"timestamp":"2026-10-21T14:52:26","port":8008,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000Ph\u0014\u0017�\u0000","payload_hex":"040100506814179a00","method":"","user_agent":"","ja3":"","session":"39bbe08a-aaea-4f5e-b0d3-72a90f2abf16","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":14},{"timestamp":"2026-10-21T14:52:26","port":8888,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000Ph\u0014\u0017�\u0000","payload_hex":"040100506814179a00","method":"","user_agent":"","ja3":"","session":"d51dd8f5-49be-4ff5-82b2-93a325d470c6","seq":1,"duration_ms":101,"bytes_in":9,"bytes_out":14},{"timestamp":"2026-10-21T14:52:26","port":81,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000Ph\u0014\u0017�\u0000","payload_hex":"040100506814179a00","method":"","user_agent":"","ja3":"","session":"b661b37c-29c8-4c1b-8f46-dddcc1d242dc","seq":1,"duration_ms":102,"bytes_in":9,"bytes_out":14},{"timestamp":"2026-10-21T14:52:26","port":8084,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000Ph\u0014\u0017�\u0000","payload_hex":"040100506814179a00","method":"","user_agent":"","ja3":"","session":"77ca0bc0-e850-4402-ba39-4f69b8e6f624","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":14},{"timestamp":"2026-10-21T14:52:26","port":8118,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000Ph\u0014\u0017�\u0000","payload_hex":"040100506814179a00","method":"","user_agent":"","ja3":"","session":"87e8b9b9-0896-4328-b242-0db2ae0dbf39","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":14},{"timestamp":"2026-10-21T14:52:26","port":8087,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000Ph\u0014\u0017�\u0000","payload_hex":"040100506814179a00","method":"","user_agent":"","ja3":"","session":"be79c928-b0cf-4f69-a376-b4d891bef73d","seq":1,"duration_ms":102,"bytes_in":9,"bytes_out":14},{"timestamp":"2026-10-21T14:52:26","port":8086,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000Ph\u0014\u0017�\u0000","payload_hex":"040100506814179a00","method":"","user_agent":"","ja3":"","session":"c83fe2de-05c4-48b8-a5d1-4ab0515ac872","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":14},{"timestamp":"2026-10-21T14:52:26","port":8090,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000Ph\u0014\u0017�\u0000","payload_hex":"040100506814179a00","method":"","user_agent":"","ja3":"","session":"3cbd4e6f-f4ee-4832-845a-a4c11f21511e","seq":1,"duration_ms":101,"bytes_in":9,"bytes_out":14}],"http_methods":[{"method":"GET","count":2763},{"method":"CONNECT","count":6}],"distinct_ports_total":42,"top_paths":[{"path":"http://example.com/","count":2748,"ports":42},{"path":"http://www.gstatic.com/generate_204","count":15,"ports":2},{"path":"www.discover.com:443","count":6,"ports":2}],"distinct_paths_total":3,"top_snis":[],"top_hosts":[{"value":"example.com","count":2748},{"value":"www.gstatic.com","count":15},{"value":"www.discover.com","count":6}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}