{"ip":"45.82.78.105","total_events":4660,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"1421+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 1421 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."]},"first_seen":"2026-02-16T16:04:43","last_seen":"2026-07-22T17:57:32","events_24h":23,"events_7d":152,"geo":{"country_code":"DE","country_name":"Germany","region":"","city":"","lat":51.2993,"lon":9.491,"asn":212512,"org":"Detai Prosperous Technologies Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":3389,"proto":"tcp","label":"RDP","count":30},{"port":5555,"proto":"tcp","label":"","count":17},{"port":5432,"proto":"tcp","label":"Postgres","count":16},{"port":20080,"proto":"tcp","label":"","count":15},{"port":8554,"proto":"tcp","label":"","count":14},{"port":1723,"proto":"tcp","label":"PPTP","count":14},{"port":8089,"proto":"tcp","label":"Splunk","count":13},{"port":3001,"proto":"tcp","label":"","count":12},{"port":8521,"proto":"tcp","label":"","count":11},{"port":15,"proto":"tcp","label":"","count":11},{"port":8008,"proto":"tcp","label":"HTTP-alt","count":11},{"port":27017,"proto":"tcp","label":"MongoDB","count":11},{"port":3333,"proto":"tcp","label":"","count":11},{"port":8009,"proto":"tcp","label":"","count":11},{"port":8728,"proto":"tcp","label":"","count":11}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i1311h2_f57a46bbacb6_ab7e3b40a677","t13i1310h2_f57a46bbacb6_e7c285222651","t13i130900_f57a46bbacb6_e7c285222651","t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_ja3":["8c5b2f378e481f94b4f82c131798f4d4","2196848d251b217de8b2c037e356c11d"],"ja4h":["ge10nn0000_000000000000","ge11nn0300_0db47b7d240d"]},"fingerprint_peers":{"t13i1311h2_f57a46bbacb6_ab7e3b40a677":2655,"t13i130900_f57a46bbacb6_e7c285222651":3440,"t13i1310h2_f57a46bbacb6_e7c285222651":10,"t13i131000_f57a46bbacb6_ab7e3b40a677":5786,"ge11nn0300_0db47b7d240d":4457,"ge10nn0000_000000000000":2098},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 OPR/121.0.0.0","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0"],"timeline":[{"date":"2026-04-23","count":3},{"date":"2026-04-24","count":84},{"date":"2026-04-25","count":64},{"date":"2026-04-26","count":72},{"date":"2026-04-27","count":57},{"date":"2026-04-28","count":63},{"date":"2026-04-29","count":30},{"date":"2026-04-30","count":51},{"date":"2026-05-01","count":70},{"date":"2026-05-02","count":58},{"date":"2026-05-03","count":43},{"date":"2026-05-04","count":33},{"date":"2026-05-08","count":20},{"date":"2026-05-09","count":47},{"date":"2026-05-10","count":44},{"date":"2026-05-11","count":29},{"date":"2026-05-12","count":27},{"date":"2026-05-13","count":3},{"date":"2026-05-14","count":15},{"date":"2026-05-15","count":17},{"date":"2026-05-18","count":11},{"date":"2026-05-19","count":2},{"date":"2026-05-20","count":12},{"date":"2026-05-21","count":4},{"date":"2026-05-22","count":1},{"date":"2026-05-25","count":9},{"date":"2026-05-26","count":9},{"date":"2026-05-28","count":12},{"date":"2026-05-29","count":23},{"date":"2026-05-30","count":30},{"date":"2026-05-31","count":46},{"date":"2026-06-01","count":17},{"date":"2026-06-02","count":23},{"date":"2026-06-03","count":23},{"date":"2026-06-04","count":24},{"date":"2026-06-05","count":24},{"date":"2026-06-06","count":16},{"date":"2026-06-07","count":17},{"date":"2026-06-08","count":18},{"date":"2026-06-09","count":17},{"date":"2026-06-10","count":30},{"date":"2026-06-11","count":20},{"date":"2026-06-12","count":27},{"date":"2026-06-13","count":31},{"date":"2026-06-14","count":28},{"date":"2026-06-15","count":25},{"date":"2026-06-16","count":17},{"date":"2026-06-17","count":18},{"date":"2026-06-18","count":2},{"date":"2026-06-22","count":22},{"date":"2026-06-23","count":22},{"date":"2026-06-24","count":19},{"date":"2026-06-25","count":29},{"date":"2026-06-26","count":28},{"date":"2026-06-27","count":19},{"date":"2026-06-28","count":19},{"date":"2026-06-29","count":19},{"date":"2026-06-30","count":17},{"date":"2026-07-01","count":23},{"date":"2026-07-02","count":36},{"date":"2026-07-03","count":28},{"date":"2026-07-04","count":24},{"date":"2026-07-05","count":23},{"date":"2026-07-06","count":33},{"date":"2026-07-07","count":34},{"date":"2026-07-08","count":25},{"date":"2026-07-09","count":24},{"date":"2026-07-10","count":24},{"date":"2026-07-11","count":24},{"date":"2026-07-12","count":1},{"date":"2026-07-13","count":27},{"date":"2026-07-14","count":21},{"date":"2026-07-15","count":30},{"date":"2026-07-16","count":13},{"date":"2026-07-17","count":19},{"date":"2026-07-18","count":22},{"date":"2026-07-19","count":37},{"date":"2026-07-20","count":18},{"date":"2026-07-21","count":16},{"date":"2026-07-22","count":20}],"recent_events":[{"timestamp":"2026-07-22T17:57:32","port":40005,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:40005\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34303030350d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","community_id":"1:1hpf3eUi3rOyZa1I58LQDzsI09U=","ja3":"","session":"b4748dcf-fa75-453a-8b96-eed8fe01c8a1","seq":1,"duration_ms":100,"bytes_in":192,"bytes_out":77},{"timestamp":"2026-07-22T15:20:27","port":2605,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:2605\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323630350d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132322e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36","community_id":"1:mVfwV4kYCuFQ6RFUFJJYsRL2BU0=","ja3":"","session":"54a7685b-92a3-4607-a1df-ed9e36045bfe","seq":1,"duration_ms":100,"bytes_in":198,"bytes_out":77},{"timestamp":"2026-07-22T14:06:41","port":10616,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:10616\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303631360d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133352e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36","community_id":"1:dq8TzoT/26RUVF/Fv3tks8IgHX4=","ja3":"","session":"989a7900-7399-4e2e-b83b-2a44a51c439f","seq":1,"duration_ms":100,"bytes_in":192,"bytes_out":77},{"timestamp":"2026-07-22T13:32:30","port":1009,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1009\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313030390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133362e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36","community_id":"1:OntQ/MLMEJUKEeXv9aRYhIh11QM=","ja3":"","session":"340c7590-50e0-4408-896f-1f34bad54812","seq":1,"duration_ms":101,"bytes_in":191,"bytes_out":77},{"timestamp":"2026-07-22T13:19:12","port":29840,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:29840\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32393834300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132322e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36","community_id":"1:psWlpnVk/1KRraF3OCbx7yC4woA=","ja3":"","session":"309d90d8-3cf3-4f98-bda8-325037685db2","seq":1,"duration_ms":100,"bytes_in":183,"bytes_out":77},{"timestamp":"2026-07-22T13:11:03","port":1447,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1447\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313434370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","community_id":"1:C87q+1TfJItmFttvDkPQgfVvsZk=","ja3":"","session":"77388f5e-38d4-4d10-861c-576f161ff5b4","seq":1,"duration_ms":101,"bytes_in":181,"bytes_out":77},{"timestamp":"2026-07-22T11:22:11","port":50470,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:50470\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a35303437300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31382e34205361666172692f3630352e312e31350d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15","community_id":"1:MVPs3pe81XKUBwf6qjHGCOeYdLM=","ja3":"","session":"80050bff-f136-4ff5-b756-d3d298121c45","seq":1,"duration_ms":100,"bytes_in":200,"bytes_out":77},{"timestamp":"2026-07-22T10:58:41","port":889,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:889\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/140.0.0.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3838390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e3336204564672f3134302e302e302e300d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/140.0.0.0","community_id":"1:5YNAoP2gX+/ZmLSvz6gQ8kAlecg=","ja3":"","session":"d626f423-b06f-4869-80d2-34346c4a36fa","seq":1,"duration_ms":100,"bytes_in":206,"bytes_out":77},{"timestamp":"2026-07-22T10:30:47","port":10934,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:10934\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303933340d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132322e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36","community_id":"1:rrW7J3WW/CfhUmiA7IG7MV46FYU=","ja3":"","session":"02465e86-ddc0-411c-99c9-5567ba135646","seq":1,"duration_ms":100,"bytes_in":198,"bytes_out":77},{"timestamp":"2026-07-22T09:59:22","port":9170,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:9170\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393137300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133382e302e302e30205361666172692f3533372e33360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36","community_id":"1:2qDrlia69LJH6/T39Ceq9gVpXxg=","ja3":"","session":"80532407-3a25-44d3-8b4b-a6085856094c","seq":1,"duration_ms":100,"bytes_in":181,"bytes_out":77}],"http_methods":[{"method":"GET","count":2486}],"distinct_ports_total":1421,"top_paths":[{"path":"/","count":2486,"ports":1417}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":1032}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:40005","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-07-22T18:16:07.082814+00:00"}