{"ip":"78.128.114.66","total_events":465,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"120+ ports swept","confidence":"medium","network_type":"residential ISP","why":["No exploit payloads observed.","Swept 120 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"142,775 bytes sent","bytes_sent":142775,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-28T11:20:10","last_seen":"2026-09-30T11:32:45","events_24h":226,"events_7d":465,"geo":{"country_code":"BG","country_name":"Bulgaria","region":"","city":"","lat":42.696,"lon":23.332,"asn":50360,"org":"Tamatiya EOOD"},"source_domain":"ip-114-66.4vendeta.com","known_scanners":[],"scanner_tag":{"key":"peeringdb:as50360","label":"4vendeta","category":"isp","url":"https://www.peeringdb.com/asn/50360"},"cve_matches":[],"malware":[],"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":241},{"port":4443,"proto":"tcp","label":"","count":2},{"port":63555,"proto":"tcp","label":"","count":2},{"port":5443,"proto":"tcp","label":"","count":2},{"port":2033,"proto":"tcp","label":"","count":2},{"port":50000,"proto":"tcp","label":"SAP","count":2},{"port":12443,"proto":"tcp","label":"","count":2},{"port":777,"proto":"tcp","label":"","count":2},{"port":440,"proto":"tcp","label":"","count":2},{"port":10443,"proto":"tcp","label":"","count":2},{"port":7777,"proto":"tcp","label":"Oracle","count":2},{"port":13443,"proto":"tcp","label":"","count":2},{"port":8001,"proto":"tcp","label":"","count":2},{"port":65113,"proto":"tcp","label":"","count":2},{"port":30664,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i130900_f57a46bbacb6_e7c285222651"],"tls_client_hello":"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","tls_ja3":["674c9b60629e4885877f5ec76f21723e"],"http_akin":["b11cun050_00040017_ee17dab1"]},"fingerprint_peers":{"t13i130900_f57a46bbacb6_e7c285222651":3806,"b11cun050_00040017_ee17dab1":4},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-28","count":176},{"date":"2026-09-29","count":190},{"date":"2026-09-30","count":99}],"recent_events":[{"timestamp":"2026-09-30T11:32:45","port":1296,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:1296\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"06ce1cbe-974e-4b05-a35b-126d148e52b5","seq":1,"duration_ms":100,"bytes_in":310,"bytes_out":78},{"timestamp":"2026-09-30T11:31:26","port":10131,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:10131\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"c55f220e-8a4e-4034-8894-3588ae31d7ad","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":78},{"timestamp":"2026-09-30T11:21:08","port":18443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:18443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"e1ab4660-2aec-4c34-9166-2638b31a6b7c","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":78},{"timestamp":"2026-09-30T11:06:17","port":442,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:442\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"e86818d4-6c4e-49b1-a560-afa0eb8a52c7","seq":1,"duration_ms":100,"bytes_in":309,"bytes_out":78},{"timestamp":"2026-09-30T10:55:42","port":8444,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8444\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>3a383434340d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3133312e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c2a2f2a3b713d302e380d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"9a0a5a1c-6ab6-40c9-a92e-d4ee53854726","seq":1,"duration_ms":101,"bytes_in":310,"bytes_out":78},{"timestamp":"2026-09-30T10:55:03","port":16443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:16443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"e4ca0136-0b46-4dcb-aa63-940d6a58a7bb","seq":1,"duration_ms":101,"bytes_in":312,"bytes_out":78},{"timestamp":"2026-09-30T10:55:02","port":8118,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8118\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"305ea0bc-84e0-4ac2-853c-f7d13e8e3d5a","seq":1,"duration_ms":105,"bytes_in":310,"bytes_out":78},{"timestamp":"2026-09-30T10:52:05","port":981,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:981\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"6ac52220-ba0f-4c11-9d21-338052139295","seq":1,"duration_ms":100,"bytes_in":309,"bytes_out":78},{"timestamp":"2026-09-30T10:47:31","port":65443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:65443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"e489cfa2-e575-445c-af97-4c2eb4798421","seq":1,"duration_ms":100,"bytes_in":311,"bytes_out":78},{"timestamp":"2026-09-30T10:34:51","port":10445,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:10445\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","ja3":"674c9b60629e4885877f5ec76f21723e","session":"7765a2e3-e6a5-46d6-baa6-f87412831879","seq":1,"duration_ms":100,"bytes_in":312,"bytes_out":78}],"http_methods":[{"method":"GET","count":465}],"distinct_ports_total":120,"top_paths":[{"path":"/","count":239,"ports":1},{"path":"/login","count":226,"ports":120}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:1296","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-30T11:33:18.649164+00:00"}