{
 "total_events": 3000,
 "first_seen": "2026-08-10T12:50:10",
 "last_seen": "2026-08-31T11:08:11",
 "asn_number": 51396,
 "asn_org": "Pfcloud UG (haftungsbeschrankt)",
 "country_name": "The Netherlands",
 "country_code": "NL",
 "ports_targeted": [
  49226,
  10800,
  58989,
  1918,
  53000,
  2086,
  2081,
  69,
  64,
  1036,
  2067,
  1994,
  60001,
  161,
  1008,
  32768,
  31434,
  38159,
  38157,
  38080,
  37890,
  30051,
  37364,
  38582,
  35561,
  35554,
  35452,
  35000,
  34599,
  34564,
  33761,
  33333,
  33142,
  38777,
  32946,
  32926,
  37647,
  32764,
  30081,
  30115,
  30116,
  30127,
  30129,
  30226,
  30501,
  30750,
  30979,
  31021,
  31033,
  38414
 ],
 "ports_targeted_count": 524,
 "tls_event_count": 0,
 "top_http_methods": [
  "GET"
 ],
 "top_user_agents": [
  "Go-http-client/1.1"
 ],
 "top_url_paths": [
  "http://azenv.net/"
 ],
 "top_ja4_fingerprints": [],
 "top_ja3_fingerprints": [],
 "top_hassh_fingerprints": [],
 "client_cert_event_count": 0,
 "client_cert_subjects": [],
 "rdns": "204.76.203.7.ptr.pfcloud.network",
 "loader_hits": 0,
 "exploit_hits": 0,
 "bytes_sent": 197734,
 "unique_source_ips": 1,
 "ioc": "::ffff:204.76.203.7",
 "window": "all retained data (no time filter)",
 "query_type": "ip",
 "scanner": null,
 "verdict_key": "scanning",
 "verdict": "Unrecognized scanner",
 "verdict_why": [
  "No exploit payloads observed.",
  "Swept 524 distinct ports (threshold for a sweep is 10).",
  "Not in any known-scanner range."
 ],
 "verdict_confidence": "medium",
 "cve_probes": []
}