{"ip":"5.42.211.250","total_events":7458,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"961+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 961 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."]},"first_seen":"2026-07-13T14:47:10","last_seen":"2026-07-19T09:18:20","events_24h":0,"events_7d":214,"geo":{"country_code":"RU","country_name":"Russia","region":"Novgorod Oblast","city":"Staraya Russa","lat":57.9979,"lon":31.3603,"asn":214833,"org":"PR Obrada Podataka Castles Novi Sad"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":57002,"proto":"tcp","label":"","count":18},{"port":17001,"proto":"tcp","label":"","count":17},{"port":61010,"proto":"tcp","label":"","count":16},{"port":50008,"proto":"tcp","label":"","count":16},{"port":17009,"proto":"tcp","label":"","count":16},{"port":51005,"proto":"tcp","label":"","count":16},{"port":53006,"proto":"tcp","label":"","count":15},{"port":19004,"proto":"tcp","label":"","count":15},{"port":63009,"proto":"tcp","label":"","count":15},{"port":59009,"proto":"tcp","label":"","count":15},{"port":42007,"proto":"tcp","label":"","count":15},{"port":3007,"proto":"tcp","label":"","count":15},{"port":7,"proto":"tcp","label":"","count":15},{"port":402,"proto":"tcp","label":"","count":15},{"port":31002,"proto":"tcp","label":"","count":15}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-13","count":5835},{"date":"2026-07-14","count":1288},{"date":"2026-07-15","count":121},{"date":"2026-07-19","count":214}],"recent_events":[{"timestamp":"2026-07-19T09:18:20","port":56001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0018\u0000����\u000f\u000e<HONEYPOT>��\u0001\u0001\u0000","payload_hex":"1800ffffffff0f0e<HONEYPOT>dac1010100","method":"","user_agent":"","community_id":"1:nWVMhxELzeMJxwbTe4nCSl5k3/I=","ja3":"","session":"04378ba7-8c97-4ff0-8212-5eaaa0f88913","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":12,"enriched":{"digest":"8ce60f21774fbcbf","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-19T09:18:03","port":59004,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0018\u0000����\u000f\u000e<HONEYPOT>�|\u0001\u0001\u0000","payload_hex":"1800ffffffff0f0e<HONEYPOT>e67c010100","method":"","user_agent":"","community_id":"1:h9Sr1EO8MdNaRMwov9tDidqDlgg=","ja3":"","session":"21c2d3b0-e783-41c0-bc18-a0f62ef51936","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":12,"enriched":{"digest":"e72d993dfe64b5ea","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-19T09:17:16","port":57003,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0018\u0000����\u000f\u000e<HONEYPOT>ޫ\u0001\u0001\u0000","payload_hex":"1800ffffffff0f0e<HONEYPOT>deab010100","method":"","user_agent":"","community_id":"1:M5/YJoL7yeDaBy1QhGVvCOtf2Q0=","ja3":"","session":"f96d144d-1479-4b82-bb9d-8c16d11bbda0","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":12,"enriched":{"digest":"7f77f9c5071e8e86","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-19T09:17:16","port":20110,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0018\u0000����\u000f\u000e<HONEYPOT>N�\u0001\u0001\u0000","payload_hex":"1800ffffffff0f0e<HONEYPOT>4e8e010100","method":"","user_agent":"","community_id":"1:utjRVblyPuvs66gvhvztjLW5bt4=","ja3":"","session":"451845b0-eed6-46eb-ae7b-94704809dcb7","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":12,"enriched":{"digest":"701f1004c50838ac","strings":["<HONEYPOT>N"]}},{"timestamp":"2026-07-19T09:17:11","port":5,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0018\u0000����\u000f\u000e<HONEYPOT>\u0000\u0005\u0001\u0001\u0000","payload_hex":"1800ffffffff0f0e<HONEYPOT>0005010100","method":"","user_agent":"","community_id":"1:dXQSTiLy3/q+FR426WdQeL+q8e4=","ja3":"","session":"6dfde95e-6d99-4a0e-9776-6070c5ecfaeb","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":12,"enriched":{"digest":"761141cb58e0c24d","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-19T09:16:54","port":60005,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0018\u0000����\u000f\u000e<HONEYPOT>�e\u0001\u0001\u0000","payload_hex":"1800ffffffff0f0e<HONEYPOT>ea65010100","method":"","user_agent":"","community_id":"1:RpPfT8VD0rLB89fxiHpZnT3oVss=","ja3":"","session":"241cc4f8-5d70-478d-9e07-b46c2292c5ec","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":12,"enriched":{"digest":"520af0b1a74994ba","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-19T09:16:51","port":51005,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0018\u0000����\u000f\u000e<HONEYPOT>�=\u0001\u0001\u0000","payload_hex":"1800ffffffff0f0e<HONEYPOT>c73d010100","method":"","user_agent":"","community_id":"1:yio5FEu3flplizwCZuIXNwDlBek=","ja3":"","session":"8f7b2106-e0a6-47b7-8ff3-28a8cd078a6f","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":12,"enriched":{"digest":"9100ed6b67910eda","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-19T09:16:46","port":25106,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0018\u0000����\u000f\u000e<HONEYPOT>b\u0012\u0001\u0001\u0000","payload_hex":"1800ffffffff0f0e<HONEYPOT>6212010100","method":"","user_agent":"","community_id":"1:otIrnRlKeylNz5fuwkLi3AUFtaw=","ja3":"","session":"64f3cc9a-1378-48b5-8ee3-d4b92e13d6cd","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":12,"enriched":{"digest":"95b027f0c9f16a59","strings":["<HONEYPOT>b"]}},{"timestamp":"2026-07-19T09:16:37","port":20000,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0018\u0000����\u000f\u000e<HONEYPOT>N \u0001\u0001\u0000","payload_hex":"1800ffffffff0f0e<HONEYPOT>4e20010100","method":"","user_agent":"","community_id":"1:jWJg+Vl39hqFXPmNG40/ZJyB8VA=","ja3":"","session":"097dd21c-3038-41ce-a494-6b72a5531b02","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":12,"enriched":{"digest":"88198d5fb4496408","strings":["<HONEYPOT>N"]}},{"timestamp":"2026-07-19T09:15:50","port":900,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0018\u0000����\u000f\u000e<HONEYPOT>\u0003�\u0001\u0001\u0000","payload_hex":"1800ffffffff0f0e<HONEYPOT>0384010100","method":"","user_agent":"","community_id":"1:YgpzftHH/URYLWN5T7g0ntXZvVo=","ja3":"","session":"90c8daf7-991a-4dec-862b-8a8b41a9f2cd","seq":1,"duration_ms":101,"bytes_in":27,"bytes_out":12,"enriched":{"digest":"12e90c0955353631","strings":["<HONEYPOT>"]}}],"http_methods":[],"distinct_ports_total":961,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-26T02:26:27.128867+00:00"}