{"ip":"45.141.233.47","total_events":2292,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"655+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 655 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."]},"first_seen":"2026-07-04T10:27:23","last_seen":"2026-07-04T16:16:36","events_24h":2292,"events_7d":2292,"geo":{"country_code":"BG","country_name":"Bulgaria","region":"","city":"","lat":42.696,"lon":23.332,"asn":201814,"org":"MEVSPACE sp. z o.o."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as201814","label":"Mevspace","category":"cdn","url":"https://www.peeringdb.com/asn/201814"},"cve_matches":[],"malware":[],"top_ports":[{"port":33383,"proto":"tcp","label":"","count":6},{"port":8963,"proto":"tcp","label":"","count":6},{"port":33349,"proto":"tcp","label":"","count":6},{"port":21322,"proto":"tcp","label":"","count":6},{"port":3244,"proto":"tcp","label":"","count":6},{"port":4021,"proto":"tcp","label":"","count":6},{"port":3302,"proto":"tcp","label":"","count":6},{"port":50,"proto":"tcp","label":"","count":6},{"port":5210,"proto":"tcp","label":"","count":6},{"port":3400,"proto":"tcp","label":"","count":5},{"port":3422,"proto":"tcp","label":"","count":5},{"port":8585,"proto":"tcp","label":"","count":5},{"port":2604,"proto":"tcp","label":"","count":5},{"port":3017,"proto":"tcp","label":"","count":5},{"port":8589,"proto":"tcp","label":"","count":5}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-04","count":2292}],"recent_events":[{"timestamp":"2026-07-04T16:16:36","port":2704,"proto":"tcp","app_proto":"","app_protocol":"tpkt","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080003000000","method":"","user_agent":"","community_id":"1:CrN+24ds6AY0zdQg+1tkR6uQzi8=","ja3":"","session":"5a5b553e-36bf-4233-9f61-2d67e7ee51de","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":13,"enriched":{"digest":"fa962c48ab1145cc","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-07-04T16:16:32","port":3006,"proto":"tcp","app_proto":"","app_protocol":"tpkt","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080003000000","method":"","user_agent":"","community_id":"1:KZoyBKKf1D44Pecv24Z7hZlFHZ4=","ja3":"","session":"b95fc4ab-e192-492c-a4e1-7c09ec1c14eb","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":13,"enriched":{"digest":"fa962c48ab1145cc","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-07-04T16:16:30","port":3006,"proto":"tcp","app_proto":"","app_protocol":"tpkt","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080003000000","method":"","user_agent":"","community_id":"1:BYZepOJwGdqmgnNCezXR6vi+z88=","ja3":"","session":"e2bf5b29-48a7-4c60-b2a9-dd56a92cdf84","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":13,"enriched":{"digest":"fa962c48ab1145cc","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-07-04T16:16:27","port":3006,"proto":"tcp","app_proto":"","app_protocol":"tpkt","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080003000000","method":"","user_agent":"","community_id":"1:llF334kNSoowCNoQtPkDbsoGFUw=","ja3":"","session":"538dc609-383a-4446-9a4b-f66cea7a12b1","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":13,"enriched":{"digest":"fa962c48ab1145cc","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-07-04T16:16:12","port":1015,"proto":"tcp","app_proto":"","app_protocol":"tpkt","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080003000000","method":"","user_agent":"","community_id":"1:ZXg6PGrnS2MTMMutoSCZKo5+dIk=","ja3":"","session":"c1ad22d4-8cf1-4e98-8453-86f30c71a41d","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":13,"enriched":{"digest":"fa962c48ab1145cc","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-07-04T16:16:06","port":3006,"proto":"tcp","app_proto":"","app_protocol":"tpkt","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080003000000","method":"","user_agent":"","community_id":"1:zmexuFuM+ulfm/3jBVxxYx/AiX8=","ja3":"","session":"23205680-fc99-49fb-a215-d68af85ceb5d","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":13,"enriched":{"digest":"fa962c48ab1145cc","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-07-04T16:15:53","port":27002,"proto":"tcp","app_proto":"","app_protocol":"tpkt","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080003000000","method":"","user_agent":"","community_id":"1:Rb/s37w4jHxHlyfKKY14vXRXFr4=","ja3":"","session":"7de4ccf1-1c46-486f-84ba-8ade0d3938f8","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":13,"enriched":{"digest":"fa962c48ab1145cc","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-07-04T16:15:51","port":27002,"proto":"tcp","app_proto":"","app_protocol":"tpkt","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080003000000","method":"","user_agent":"","community_id":"1:NOVAd34VbMSby/odfb/TVqS0C+Q=","ja3":"","session":"3448e175-e1e2-49bf-b5ce-3f3181baaec6","seq":1,"duration_ms":101,"bytes_in":19,"bytes_out":13,"enriched":{"digest":"fa962c48ab1145cc","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-07-04T16:15:44","port":27002,"proto":"tcp","app_proto":"","app_protocol":"tpkt","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080003000000","method":"","user_agent":"","community_id":"1:fpJUrH3vUild6jDuJ2IweVsjjPw=","ja3":"","session":"564df833-c7a0-408d-ba3d-e37a02772a5d","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":13,"enriched":{"digest":"fa962c48ab1145cc","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-07-04T16:15:42","port":1015,"proto":"tcp","app_proto":"","app_protocol":"tpkt","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080003000000","method":"","user_agent":"","community_id":"1:IWTmFUkeu1q3RtTxZR5ePpKff30=","ja3":"","session":"cef4b41b-8432-45ac-b211-19ad3c03bb2c","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":13,"enriched":{"digest":"fa962c48ab1145cc","label":"TPKT / COTP (ISO-TSAP)"}}],"http_methods":[],"distinct_ports_total":655,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-05T04:22:13.297339+00:00"}