{"ip":"45.135.194.42","data_as_of":"2026-10-23T04:05:53+00:00","observed":true,"total_events":1408,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"751+ ports swept","confidence":"medium","network_type":"network services","why":["No exploit payloads observed.","Swept 751 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"186,105 bytes sent","bytes_sent":186105,"session_seconds":1,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-04T16:22:11","last_seen":"2026-10-17T02:29:14","events_24h":0,"events_7d":712,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"DE","country_name":"Germany","region":"","city":"","lat":51.2993,"lon":9.491,"asn":51396,"org":"Pfcloud UG (haftungsbeschrankt)"},"source_domain":"45.135.194.42.ptr.pfcloud.network","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":25,"proto":"tcp","label":"SMTP","count":6},{"port":143,"proto":"tcp","label":"IMAP","count":6},{"port":993,"proto":"tcp","label":"IMAPS","count":6},{"port":990,"proto":"tcp","label":"FTPS","count":6},{"port":110,"proto":"tcp","label":"POP3","count":6},{"port":995,"proto":"tcp","label":"POP3S","count":6},{"port":465,"proto":"tcp","label":"SMTPS","count":6},{"port":21,"proto":"tcp","label":"FTP","count":6},{"port":23,"proto":"tcp","label":"Telnet","count":6},{"port":587,"proto":"tcp","label":"SMTP","count":6},{"port":1900,"proto":"tcp","label":"","count":3},{"port":8175,"proto":"tcp","label":"","count":3},{"port":3306,"proto":"tcp","label":"MySQL","count":3},{"port":49157,"proto":"tcp","label":"","count":3},{"port":7050,"proto":"tcp","label":"","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["2196848d251b217de8b2c037e356c11d"],"http_akin":["b11cun050_00040017_6b90553b"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":3129,"b11cun050_00040017_6b90553b":981},"akin_families":{"b11cun050_00040017_6b90553b":{"head":"b11cun050_00040017_6b90553b","shapes":5,"ips":981}},"user_agents":["opendir-portscan/0.1"],"timeline":[{"date":"2026-10-04","count":110},{"date":"2026-10-05","count":366},{"date":"2026-10-16","count":573},{"date":"2026-10-17","count":359}],"recent_events":[{"timestamp":"2026-10-17T02:29:14","port":8788,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8788\",\"user-agent\":\"opendir-portscan/0.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383738380d0a557365722d4167656e743a206f70656e6469722d706f72747363616e2f302e310d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"opendir-portscan/0.1","ja3":"","session":"9702fe63-3f01-47c1-9c92-b044559712d8","seq":1,"duration_ms":100,"bytes_in":132,"bytes_out":78},{"timestamp":"2026-10-17T02:29:14","port":8937,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8937\",\"user-agent\":\"opendir-portscan/0.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383933370d0a557365722d4167656e743a206f70656e6469722d706f72747363616e2f302e310d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"opendir-portscan/0.1","ja3":"","session":"30fbe066-343f-4fb4-a4c1-d110bc8d7308","seq":1,"duration_ms":101,"bytes_in":132,"bytes_out":78},{"timestamp":"2026-10-17T02:29:14","port":8833,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8833\",\"user-agent\":\"opendir-portscan/0.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383833330d0a557365722d4167656e743a206f70656e6469722d706f72747363616e2f302e310d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"opendir-portscan/0.1","ja3":"","session":"f08f2a3f-43c6-4027-a5d9-e609a042504e","seq":1,"duration_ms":101,"bytes_in":132,"bytes_out":78},{"timestamp":"2026-10-17T02:29:13","port":8509,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8509\",\"user-agent\":\"opendir-portscan/0.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383530390d0a557365722d4167656e743a206f70656e6469722d706f72747363616e2f302e310d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"opendir-portscan/0.1","ja3":"","session":"bc0b6e91-4608-4db8-aeea-6df736b29140","seq":1,"duration_ms":579,"bytes_in":132,"bytes_out":78},{"timestamp":"2026-10-17T02:29:13","port":8479,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8479\",\"user-agent\":\"opendir-portscan/0.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383437390d0a557365722d4167656e743a206f70656e6469722d706f72747363616e2f302e310d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"opendir-portscan/0.1","ja3":"","session":"0543a425-12d1-4c5f-b17a-7187b55af340","seq":1,"duration_ms":580,"bytes_in":132,"bytes_out":78},{"timestamp":"2026-10-17T02:29:13","port":8505,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8505\",\"user-agent\":\"opendir-portscan/0.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383530350d0a557365722d4167656e743a206f70656e6469722d706f72747363616e2f302e310d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"opendir-portscan/0.1","ja3":"","session":"ca36a6c7-ff5e-4b96-8f2a-20000869c7d5","seq":1,"duration_ms":579,"bytes_in":132,"bytes_out":78},{"timestamp":"2026-10-17T02:29:13","port":8504,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8504\",\"user-agent\":\"opendir-portscan/0.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383530340d0a557365722d4167656e743a206f70656e6469722d706f72747363616e2f302e310d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"opendir-portscan/0.1","ja3":"","session":"d1512d10-b677-4e06-9b0e-3814c993f9e4","seq":1,"duration_ms":579,"bytes_in":132,"bytes_out":78},{"timestamp":"2026-10-17T02:29:13","port":8513,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8513\",\"user-agent\":\"opendir-portscan/0.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383531330d0a557365722d4167656e743a206f70656e6469722d706f72747363616e2f302e310d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"opendir-portscan/0.1","ja3":"","session":"95c28c1d-cb88-45f3-8446-911c6689a904","seq":1,"duration_ms":579,"bytes_in":132,"bytes_out":78},{"timestamp":"2026-10-17T02:29:13","port":8489,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8489\",\"user-agent\":\"opendir-portscan/0.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383438390d0a557365722d4167656e743a206f70656e6469722d706f72747363616e2f302e310d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"opendir-portscan/0.1","ja3":"","session":"6f6266ef-2dd0-4d99-85db-76e794669478","seq":1,"duration_ms":579,"bytes_in":132,"bytes_out":78},{"timestamp":"2026-10-17T02:29:13","port":8506,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8506\",\"user-agent\":\"opendir-portscan/0.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383530360d0a557365722d4167656e743a206f70656e6469722d706f72747363616e2f302e310d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"opendir-portscan/0.1","ja3":"","session":"7ed5f13b-7cef-483e-abb6-dc4126d1b6f2","seq":1,"duration_ms":579,"bytes_in":132,"bytes_out":78}],"http_methods":[{"method":"GET","count":1408}],"distinct_ports_total":751,"top_paths":[{"path":"/","count":1408,"ports":751}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:8788","notable":false},{"name":"User-Agent","value":"opendir-portscan/0.1","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[]}