{"ip":"158.173.154.34","total_events":82,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"68+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 68 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"19,920 bytes sent","bytes_sent":19920,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-12T12:49:05","last_seen":"2026-08-14T17:54:02","events_24h":25,"events_7d":82,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":212238,"org":"Datacamp Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":8005,"proto":"tcp","label":"","count":3},{"port":8088,"proto":"tcp","label":"Hadoop","count":2},{"port":7500,"proto":"tcp","label":"","count":2},{"port":8118,"proto":"tcp","label":"","count":2},{"port":1984,"proto":"tcp","label":"","count":2},{"port":8135,"proto":"tcp","label":"","count":2},{"port":8129,"proto":"tcp","label":"","count":2},{"port":8127,"proto":"tcp","label":"","count":2},{"port":8082,"proto":"tcp","label":"","count":2},{"port":8444,"proto":"tcp","label":"","count":2},{"port":8087,"proto":"tcp","label":"","count":2},{"port":8045,"proto":"tcp","label":"","count":2},{"port":80,"proto":"tcp","label":"HTTP","count":2},{"port":8093,"proto":"tcp","label":"","count":1},{"port":8053,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t12i210600_76e208dd3e22_2dae41c691ec"],"tls_ja3":["c12f54a3f91dc7bafd92cb59fe009a35"],"ja4h":["ge11nn06en_0f47fb57538a"]},"fingerprint_peers":{"t12i210600_76e208dd3e22_2dae41c691ec":6,"ge11nn06en_0f47fb57538a":25},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0"],"timeline":[{"date":"2026-08-12","count":20},{"date":"2026-08-13","count":39},{"date":"2026-08-14","count":23}],"recent_events":[{"timestamp":"2026-08-14T17:54:02","port":9080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"br\",\"accept-language\":\"en-US;q=0.8,en;q=0.7,uk;q=0.6\",\"connection\":\"Keep-Alive\",\"host\":\"<HONEYPOT>:9080\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a4163636570742d456e636f64696e673a2062720d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e372c756b3b713d302e360d0a4163636570743a202a2f2a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3132382e3029204765636b6f2f32303130303130312046697265666f782f3132382e300d0a486f73743a20<HONEYPOT>3a393038300d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0","ja3":"","session":"017d7ec9-a8a5-4a64-bad8-534fbde377f3","seq":1,"duration_ms":100,"bytes_in":243,"bytes_out":79},{"timestamp":"2026-08-14T17:42:19","port":8067,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"br\",\"accept-language\":\"en-US;q=0.8,en;q=0.7,uk;q=0.6\",\"connection\":\"Keep-Alive\",\"host\":\"<HONEYPOT>:8067\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a4163636570742d456e636f64696e673a2062720d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e372c756b3b713d302e360d0a4163636570743a202a2f2a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3132382e3029204765636b6f2f32303130303130312046697265666f782f3132382e300d0a486f73743a20<HONEYPOT>3a383036370d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0","ja3":"","session":"93290ae8-5e59-41e5-87fe-c5a6274ed89a","seq":1,"duration_ms":100,"bytes_in":243,"bytes_out":79},{"timestamp":"2026-08-14T16:54:13","port":11752,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"br\",\"accept-language\":\"en-US;q=0.8,en;q=0.7,uk;q=0.6\",\"connection\":\"Keep-Alive\",\"host\":\"<HONEYPOT>:11752\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a4163636570742d456e636f64696e673a2062720d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e372c756b3b713d302e360d0a4163636570743a202a2f2a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3132382e3029204765636b6f2f32303130303130312046697265666f782f3132382e300d0a486f73743a20<HONEYPOT>3a31313735320d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0","ja3":"","session":"f86dc62c-cd92-497c-a10f-37b6396c73a6","seq":1,"duration_ms":100,"bytes_in":244,"bytes_out":79},{"timestamp":"2026-08-14T15:44:50","port":8118,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"br\",\"accept-language\":\"en-US;q=0.8,en;q=0.7,uk;q=0.6\",\"connection\":\"Keep-Alive\",\"host\":\"<HONEYPOT>:8118\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a4163636570742d456e636f64696e673a2062720d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e372c756b3b713d302e360d0a4163636570743a202a2f2a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3132382e3029204765636b6f2f32303130303130312046697265666f782f3132382e300d0a486f73743a20<HONEYPOT>3a383131380d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0","ja3":"","session":"5d5a9ff3-0975-486c-ad36-a741df24685b","seq":1,"duration_ms":101,"bytes_in":243,"bytes_out":79},{"timestamp":"2026-08-14T15:23:31","port":8059,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"br\",\"accept-language\":\"en-US;q=0.8,en;q=0.7,uk;q=0.6\",\"connection\":\"Keep-Alive\",\"host\":\"<HONEYPOT>:8059\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a4163636570742d456e636f64696e673a2062720d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e372c756b3b713d302e360d0a4163636570743a202a2f2a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3132382e3029204765636b6f2f32303130303130312046697265666f782f3132382e300d0a486f73743a20<HONEYPOT>3a383035390d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0","ja3":"","session":"a3921314-709c-4f62-a29b-8a64b6ad7b5c","seq":1,"duration_ms":100,"bytes_in":243,"bytes_out":79},{"timestamp":"2026-08-14T15:06:17","port":20408,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"br\",\"accept-language\":\"en-US;q=0.8,en;q=0.7,uk;q=0.6\",\"connection\":\"Keep-Alive\",\"host\":\"<HONEYPOT>:20408\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a4163636570742d456e636f64696e673a2062720d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e372c756b3b713d302e360d0a4163636570743a202a2f2a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3132382e3029204765636b6f2f32303130303130312046697265666f782f3132382e300d0a486f73743a20<HONEYPOT>3a32303430380d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0","ja3":"","session":"0a8a8191-358f-40d8-82f1-ca4ec081462a","seq":1,"duration_ms":100,"bytes_in":244,"bytes_out":79},{"timestamp":"2026-08-14T14:40:44","port":8120,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"br\",\"accept-language\":\"en-US;q=0.8,en;q=0.7,uk;q=0.6\",\"connection\":\"Keep-Alive\",\"host\":\"<HONEYPOT>:8120\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a4163636570742d456e636f64696e673a2062720d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e372c756b3b713d302e360d0a4163636570743a202a2f2a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3132382e3029204765636b6f2f32303130303130312046697265666f782f3132382e300d0a486f73743a20<HONEYPOT>3a383132300d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0","ja3":"","session":"72d20f27-070a-4068-bce8-64c3f9296141","seq":1,"duration_ms":100,"bytes_in":243,"bytes_out":79},{"timestamp":"2026-08-14T14:23:41","port":8028,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"br\",\"accept-language\":\"en-US;q=0.8,en;q=0.7,uk;q=0.6\",\"connection\":\"Keep-Alive\",\"host\":\"<HONEYPOT>:8028\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a4163636570742d456e636f64696e673a2062720d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e372c756b3b713d302e360d0a4163636570743a202a2f2a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3132382e3029204765636b6f2f32303130303130312046697265666f782f3132382e300d0a486f73743a20<HONEYPOT>3a383032380d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0","ja3":"","session":"1dfbd840-b958-4b67-89fb-f779e6062544","seq":1,"duration_ms":100,"bytes_in":243,"bytes_out":79},{"timestamp":"2026-08-14T14:09:10","port":30002,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"br\",\"accept-language\":\"en-US;q=0.8,en;q=0.7,uk;q=0.6\",\"connection\":\"Keep-Alive\",\"host\":\"<HONEYPOT>:30002\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a4163636570742d456e636f64696e673a2062720d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e372c756b3b713d302e360d0a4163636570743a202a2f2a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3132382e3029204765636b6f2f32303130303130312046697265666f782f3132382e300d0a486f73743a20<HONEYPOT>3a33303030320d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0","ja3":"","session":"8c79f901-1c0a-4134-adf6-8eeade74e114","seq":1,"duration_ms":100,"bytes_in":244,"bytes_out":79},{"timestamp":"2026-08-14T13:16:11","port":1984,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"br\",\"accept-language\":\"en-US;q=0.8,en;q=0.7,uk;q=0.6\",\"connection\":\"Keep-Alive\",\"host\":\"<HONEYPOT>:1984\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a4163636570742d456e636f64696e673a2062720d0a4163636570742d4c616e67756167653a20656e2d55533b713d302e382c656e3b713d302e372c756b3b713d302e360d0a4163636570743a202a2f2a0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b207836343b2072763a3132382e3029204765636b6f2f32303130303130312046697265666f782f3132382e300d0a486f73743a20<HONEYPOT>3a313938340d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0","ja3":"","session":"c3e8e533-42a8-478c-b91e-e56484cf1388","seq":1,"duration_ms":100,"bytes_in":243,"bytes_out":79}],"http_methods":[{"method":"GET","count":82}],"distinct_ports_total":68,"top_paths":[{"path":"/","count":82,"ports":68}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"br","notable":false},{"name":"Accept-Language","value":"en-US;q=0.8,en;q=0.7,uk;q=0.6","notable":false},{"name":"Connection","value":"Keep-Alive","notable":false},{"name":"Host","value":"<HONEYPOT>:9080","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-08-14T18:37:22.552743+00:00"}