{"ip":"194.146.92.61","total_events":12473,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"6645+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 6645 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."]},"first_seen":"2026-07-15T01:15:26","last_seen":"2026-07-15T01:28:14","events_24h":0,"events_7d":0,"geo":{"country_code":"ES","country_name":"Spain","region":"Madrid","city":"Madrid","lat":40.4153,"lon":-3.694,"asn":212238,"org":"Datacamp Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":40605,"proto":"tcp","label":"","count":6},{"port":5441,"proto":"tcp","label":"","count":6},{"port":54225,"proto":"tcp","label":"","count":6},{"port":19278,"proto":"tcp","label":"","count":6},{"port":27834,"proto":"tcp","label":"","count":6},{"port":56633,"proto":"tcp","label":"","count":6},{"port":57948,"proto":"tcp","label":"","count":6},{"port":4269,"proto":"tcp","label":"","count":6},{"port":54912,"proto":"tcp","label":"","count":6},{"port":20092,"proto":"tcp","label":"","count":6},{"port":13564,"proto":"tcp","label":"","count":6},{"port":22465,"proto":"tcp","label":"","count":6},{"port":19815,"proto":"tcp","label":"","count":6},{"port":4921,"proto":"tcp","label":"","count":6},{"port":56583,"proto":"tcp","label":"","count":6}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-15","count":12473}],"recent_events":[{"timestamp":"2026-07-15T01:28:14","port":59979,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�K\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>ea4b010100","method":"","user_agent":"","community_id":"1:NYtcKRQY+wuQiKv3z3C8SMYuje4=","ja3":"","session":"040acb09-69e2-45ee-971f-f7a77df37db3","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":13,"enriched":{"digest":"664c6e2bb3ba4459","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-15T01:28:04","port":59096,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>��\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>e6d8010100","method":"","user_agent":"","community_id":"1:ywsXWMhHXhd5KI4vVWvuOrJ6LiU=","ja3":"","session":"16f5cbb3-5169-4464-8a25-ece3bf98b6c9","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":13,"enriched":{"digest":"4170428daf5f24f8","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-15T01:27:54","port":59808,"proto":"tcp","app_proto":"","app_protocol":"websocket","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","community_id":"1:6eklSgS2OTajsDvxyaf4Gtk6dJ4=","ja3":"","session":"e806c72a-572a-455a-a82b-39f29cffc1f3","seq":2,"duration_ms":288,"bytes_in":24,"bytes_out":26},{"timestamp":"2026-07-15T01:27:54","port":59808,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>��\u0001","payload_hex":"1500fc050e<HONEYPOT>e9a001","method":"","user_agent":"","community_id":"1:6eklSgS2OTajsDvxyaf4Gtk6dJ4=","ja3":"","session":"e806c72a-572a-455a-a82b-39f29cffc1f3","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":13,"enriched":{"digest":"793ddd0f6d7b101d","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-15T01:27:52","port":59988,"proto":"tcp","app_proto":"","app_protocol":"websocket","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","community_id":"1:Sx0bpFzAyJkiQ6lKnmxzkjUZ9JE=","ja3":"","session":"e8f70d09-54c0-4fbd-8eb9-2b257eeaa78a","seq":2,"duration_ms":796,"bytes_in":24,"bytes_out":26},{"timestamp":"2026-07-15T01:27:52","port":58355,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>��\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>e3f3010100","method":"","user_agent":"","community_id":"1:4jG1oz4Bx0HPR4KmFj184gABFGw=","ja3":"","session":"eed742c4-1d4b-4ca5-a85e-854af88a1e96","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":13,"enriched":{"digest":"4170428daf5f24f8","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-15T01:27:51","port":59649,"proto":"tcp","app_proto":"","app_protocol":"websocket","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","community_id":"1:7AAgkbW2EKNgBEja4yG8BGoeK/E=","ja3":"","session":"aeed1937-59bf-4227-9d0f-5b1bbe4a2ad7","seq":2,"duration_ms":347,"bytes_in":24,"bytes_out":26},{"timestamp":"2026-07-15T01:27:51","port":59988,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�T\u0001","payload_hex":"1500fc050e<HONEYPOT>ea5401","method":"","user_agent":"","community_id":"1:Sx0bpFzAyJkiQ6lKnmxzkjUZ9JE=","ja3":"","session":"e8f70d09-54c0-4fbd-8eb9-2b257eeaa78a","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":13,"enriched":{"digest":"7a2adcd38967ff28","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-15T01:27:51","port":59649,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�\u0001\u0001","payload_hex":"1500fc050e<HONEYPOT>e90101","method":"","user_agent":"","community_id":"1:7AAgkbW2EKNgBEja4yG8BGoeK/E=","ja3":"","session":"aeed1937-59bf-4227-9d0f-5b1bbe4a2ad7","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":13,"enriched":{"digest":"5d427fe981950ab5","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-15T01:27:50","port":59578,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>��\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>e8ba010100","method":"","user_agent":"","community_id":"1:OTZ5kM3UwOGqBxu6++jgQqp9EHI=","ja3":"","session":"39c7eff6-882c-4b35-bda2-6ab94b58fe37","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":13,"enriched":{"digest":"4170428daf5f24f8","strings":["<HONEYPOT>"]}}],"http_methods":[],"distinct_ports_total":6645,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-22T16:25:34.415494+00:00"}