{"ip":"94.228.214.133","total_events":4379,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"4,379 events across 1 port(s)","confidence":"medium","network_type":"nsp","why":["4,379 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"416,005 bytes sent","bytes_sent":416005,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-22T15:28:40","last_seen":"2026-08-22T18:43:31","events_24h":0,"events_7d":4379,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"North Holland","city":"Amsterdam","lat":52.352,"lon":4.9392,"asn":6206,"org":"Netrouting B.V."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as6206","label":"Netrouting","category":"isp","url":"https://www.peeringdb.com/asn/6206"},"cve_matches":[],"malware":[],"top_ports":[{"port":7928,"proto":"tcp","label":"","count":4379}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-22","count":4379}],"recent_events":[{"timestamp":"2026-08-22T18:43:31","port":7928,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.853jev.com:443 HTTP/1.1\r\nHost: www.853jev.com:443\r\nProxy-Connection: Keep-Alive\r\n\r\n","payload_hex":"434f4e4e454354207777772e3835336a65762e636f6d3a34343320485454502f312e310d0a486f73743a207777772e3835336a65762e636f6d3a3434330d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"","user_agent":"","ja3":"","session":"64198b6a-2e2c-47bc-a8a3-126778596c9a","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"a50b84444bb10e66","label":"HTTP","strings":["CONNECT www.853jev.com:443 HTTP/1.1","Host: www.853jev.com:443","Proxy-Connection: Keep-Alive"],"iocs":{"domains":["www.853jev.com"]}}},{"timestamp":"2026-08-22T18:43:31","port":7928,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.853jev.com:443 HTTP/1.1\r\nHost: www.853jev.com:443\r\nProxy-Connection: Keep-Alive\r\n\r\n","payload_hex":"434f4e4e454354207777772e3835336a65762e636f6d3a34343320485454502f312e310d0a486f73743a207777772e3835336a65762e636f6d3a3434330d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"","user_agent":"","ja3":"","session":"cf3c1693-ddf4-43eb-ab6e-333f059a7730","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"a50b84444bb10e66","label":"HTTP","strings":["CONNECT www.853jev.com:443 HTTP/1.1","Host: www.853jev.com:443","Proxy-Connection: Keep-Alive"],"iocs":{"domains":["www.853jev.com"]}}},{"timestamp":"2026-08-22T18:43:30","port":7928,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.853jev.com:443 HTTP/1.1\r\nHost: www.853jev.com:443\r\nProxy-Connection: Keep-Alive\r\n\r\n","payload_hex":"434f4e4e454354207777772e3835336a65762e636f6d3a34343320485454502f312e310d0a486f73743a207777772e3835336a65762e636f6d3a3434330d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"","user_agent":"","ja3":"","session":"b5ffdc7d-b4ce-4911-a9a9-2e4812ba5b95","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"a50b84444bb10e66","label":"HTTP","strings":["CONNECT www.853jev.com:443 HTTP/1.1","Host: www.853jev.com:443","Proxy-Connection: Keep-Alive"],"iocs":{"domains":["www.853jev.com"]}}},{"timestamp":"2026-08-22T18:43:27","port":7928,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.853jev.com:443 HTTP/1.1\r\nHost: www.853jev.com:443\r\nProxy-Connection: Keep-Alive\r\n\r\n","payload_hex":"434f4e4e454354207777772e3835336a65762e636f6d3a34343320485454502f312e310d0a486f73743a207777772e3835336a65762e636f6d3a3434330d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"","user_agent":"","ja3":"","session":"1a889c43-f824-4cd0-b90c-efca2e197d04","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"a50b84444bb10e66","label":"HTTP","strings":["CONNECT www.853jev.com:443 HTTP/1.1","Host: www.853jev.com:443","Proxy-Connection: Keep-Alive"],"iocs":{"domains":["www.853jev.com"]}}},{"timestamp":"2026-08-22T18:43:24","port":7928,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.853jev.com:443 HTTP/1.1\r\nHost: www.853jev.com:443\r\nProxy-Connection: Keep-Alive\r\n\r\n","payload_hex":"434f4e4e454354207777772e3835336a65762e636f6d3a34343320485454502f312e310d0a486f73743a207777772e3835336a65762e636f6d3a3434330d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"","user_agent":"","ja3":"","session":"8d7378e1-3bb9-4738-8234-d8e4759ab862","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"a50b84444bb10e66","label":"HTTP","strings":["CONNECT www.853jev.com:443 HTTP/1.1","Host: www.853jev.com:443","Proxy-Connection: Keep-Alive"],"iocs":{"domains":["www.853jev.com"]}}},{"timestamp":"2026-08-22T18:43:22","port":7928,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.853jev.com:443 HTTP/1.1\r\nHost: www.853jev.com:443\r\nProxy-Connection: Keep-Alive\r\n\r\n","payload_hex":"434f4e4e454354207777772e3835336a65762e636f6d3a34343320485454502f312e310d0a486f73743a207777772e3835336a65762e636f6d3a3434330d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"","user_agent":"","ja3":"","session":"186be711-ce52-47e4-adac-368a6e4331e0","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"a50b84444bb10e66","label":"HTTP","strings":["CONNECT www.853jev.com:443 HTTP/1.1","Host: www.853jev.com:443","Proxy-Connection: Keep-Alive"],"iocs":{"domains":["www.853jev.com"]}}},{"timestamp":"2026-08-22T18:43:21","port":7928,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.853jev.com:443 HTTP/1.1\r\nHost: www.853jev.com:443\r\nProxy-Connection: Keep-Alive\r\n\r\n","payload_hex":"434f4e4e454354207777772e3835336a65762e636f6d3a34343320485454502f312e310d0a486f73743a207777772e3835336a65762e636f6d3a3434330d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"","user_agent":"","ja3":"","session":"2f52b0d1-ec0a-41cf-8e73-a987f497b4cd","seq":1,"duration_ms":101,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"a50b84444bb10e66","label":"HTTP","strings":["CONNECT www.853jev.com:443 HTTP/1.1","Host: www.853jev.com:443","Proxy-Connection: Keep-Alive"],"iocs":{"domains":["www.853jev.com"]}}},{"timestamp":"2026-08-22T18:43:19","port":7928,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.853jev.com:443 HTTP/1.1\r\nHost: www.853jev.com:443\r\nProxy-Connection: Keep-Alive\r\n\r\n","payload_hex":"434f4e4e454354207777772e3835336a65762e636f6d3a34343320485454502f312e310d0a486f73743a207777772e3835336a65762e636f6d3a3434330d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"","user_agent":"","ja3":"","session":"6a4e1f07-2e1a-40a7-b6c2-c0a00bb23a26","seq":1,"duration_ms":101,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"a50b84444bb10e66","label":"HTTP","strings":["CONNECT www.853jev.com:443 HTTP/1.1","Host: www.853jev.com:443","Proxy-Connection: Keep-Alive"],"iocs":{"domains":["www.853jev.com"]}}},{"timestamp":"2026-08-22T18:43:19","port":7928,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.853jev.com:443 HTTP/1.1\r\nHost: www.853jev.com:443\r\nProxy-Connection: Keep-Alive\r\n\r\n","payload_hex":"434f4e4e454354207777772e3835336a65762e636f6d3a34343320485454502f312e310d0a486f73743a207777772e3835336a65762e636f6d3a3434330d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"","user_agent":"","ja3":"","session":"4b0af23e-b11c-4c33-a59f-60d91b3a018b","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"a50b84444bb10e66","label":"HTTP","strings":["CONNECT www.853jev.com:443 HTTP/1.1","Host: www.853jev.com:443","Proxy-Connection: Keep-Alive"],"iocs":{"domains":["www.853jev.com"]}}},{"timestamp":"2026-08-22T18:43:19","port":7928,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT www.853jev.com:443 HTTP/1.1\r\nHost: www.853jev.com:443\r\nProxy-Connection: Keep-Alive\r\n\r\n","payload_hex":"434f4e4e454354207777772e3835336a65762e636f6d3a34343320485454502f312e310d0a486f73743a207777772e3835336a65762e636f6d3a3434330d0a50726f78792d436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"","user_agent":"","ja3":"","session":"14283fa7-4d64-42f4-a8eb-89b32b0ee272","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"a50b84444bb10e66","label":"HTTP","strings":["CONNECT www.853jev.com:443 HTTP/1.1","Host: www.853jev.com:443","Proxy-Connection: Keep-Alive"],"iocs":{"domains":["www.853jev.com"]}}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-24T11:06:22.630009+00:00"}