{"ip":"154.47.29.154","total_events":15983,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"8089+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 8089 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."]},"first_seen":"2026-07-18T03:45:01","last_seen":"2026-07-18T03:56:59","events_24h":0,"events_7d":15983,"geo":{"country_code":"HR","country_name":"Croatia","region":"City of Zagreb","city":"Zagreb","lat":45.8293,"lon":15.9793,"asn":212238,"org":"Datacamp Limited"},"source_domain":"unn-154-47-29-154.datapacket.com","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":4872,"proto":"tcp","label":"","count":6},{"port":12779,"proto":"tcp","label":"","count":6},{"port":21841,"proto":"tcp","label":"","count":6},{"port":46521,"proto":"tcp","label":"","count":6},{"port":11514,"proto":"tcp","label":"","count":6},{"port":14810,"proto":"tcp","label":"","count":6},{"port":55898,"proto":"tcp","label":"","count":6},{"port":11100,"proto":"tcp","label":"","count":6},{"port":26497,"proto":"tcp","label":"","count":6},{"port":3610,"proto":"tcp","label":"","count":6},{"port":26141,"proto":"tcp","label":"","count":5},{"port":14310,"proto":"tcp","label":"","count":5},{"port":52373,"proto":"tcp","label":"","count":5},{"port":41966,"proto":"tcp","label":"","count":5},{"port":25761,"proto":"tcp","label":"","count":5}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-18","count":15983}],"recent_events":[{"timestamp":"2026-07-18T03:56:59","port":57159,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�G\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>df47010100","method":"","user_agent":"","community_id":"1:BiY+uKRyW8mfwFckSqaT8ruX5go=","ja3":"","session":"56c3adf4-9b7d-4884-9af8-20fb99b98ec7","seq":1,"duration_ms":100,"bytes_in":24,"bytes_out":13,"enriched":{"digest":"8ba41576a07570a0","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-18T03:56:53","port":57097,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�\t\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>df09010100","method":"","user_agent":"","community_id":"1:xQViIKyJIQHmBTibWCK/h6YA3lA=","ja3":"","session":"abe9fafc-cf0d-41a1-8f4a-18ac4446dd27","seq":1,"duration_ms":101,"bytes_in":24,"bytes_out":13,"enriched":{"digest":"34e28af4c1f2da60","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-18T03:56:52","port":57776,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>��\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>e1b0010100","method":"","user_agent":"","community_id":"1:HXNZWkhFk8fLLM7EfcohB+TMaLo=","ja3":"","session":"e5f020fe-9cbb-42e4-b2a9-1c5233fcd183","seq":1,"duration_ms":100,"bytes_in":24,"bytes_out":13,"enriched":{"digest":"4170428daf5f24f8","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-18T03:56:52","port":57887,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�\u001f\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>e21f010100","method":"","user_agent":"","community_id":"1:vlt9YxNoI+fIi+NhE3UsMOCOYBk=","ja3":"","session":"c663c276-2c43-4184-937f-4bc68d3ca3e9","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":13,"enriched":{"digest":"68d4d063bc409443","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-18T03:56:52","port":57753,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>��\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>e199010100","method":"","user_agent":"","community_id":"1:RfIXU85JVy76YxudS652zrWcY+4=","ja3":"","session":"9545dbee-464c-41b1-88b1-f680594fdec9","seq":1,"duration_ms":101,"bytes_in":24,"bytes_out":13,"enriched":{"digest":"4170428daf5f24f8","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-18T03:56:52","port":57947,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�[\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>e25b010100","method":"","user_agent":"","community_id":"1:RTAoo5S+/D979DZ0+zXxXI+2hf0=","ja3":"","session":"b9f1bb8e-5fba-4e76-ade4-fc099fd5db07","seq":1,"duration_ms":100,"bytes_in":24,"bytes_out":13,"enriched":{"digest":"e9254bb7a569eb77","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-18T03:56:51","port":57528,"proto":"tcp","app_proto":"","app_protocol":"websocket","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","community_id":"1:EoKkMBS4bI3nO6qGkdJRO4Vol9w=","ja3":"","session":"7811cf21-b9a8-4a77-8ab3-0b67980b8f89","seq":2,"duration_ms":1707,"bytes_in":24,"bytes_out":26},{"timestamp":"2026-07-18T03:56:50","port":57119,"proto":"tcp","app_proto":"","app_protocol":"websocket","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","community_id":"1:9nyDyh8C8P8J+AoKKibzQSNYUgc=","ja3":"","session":"347fde4e-080d-46c0-b666-358df5328131","seq":2,"duration_ms":1235,"bytes_in":24,"bytes_out":26},{"timestamp":"2026-07-18T03:56:50","port":57528,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>��\u0001","payload_hex":"1500fc050e<HONEYPOT>e0b801","method":"","user_agent":"","community_id":"1:EoKkMBS4bI3nO6qGkdJRO4Vol9w=","ja3":"","session":"7811cf21-b9a8-4a77-8ab3-0b67980b8f89","seq":1,"duration_ms":102,"bytes_in":22,"bytes_out":13,"enriched":{"digest":"793ddd0f6d7b101d","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-18T03:56:50","port":57859,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�\u0003\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>e203010100","method":"","user_agent":"","community_id":"1:LejRz+zQFI1SsEywHYtuA3uCHwg=","ja3":"","session":"ccf02bd4-43f4-4934-9eb7-a127f5ff25de","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":13,"enriched":{"digest":"bb729cf4f633ceb2","strings":["<HONEYPOT>"]}}],"http_methods":[],"distinct_ports_total":8089,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-22T09:01:37.681238+00:00"}