{"ip":"80.94.92.16","total_events":711,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"521+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 521 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."]},"first_seen":"2026-07-05T03:34:08","last_seen":"2026-07-05T09:59:33","events_24h":0,"events_7d":711,"geo":{"country_code":"RO","country_name":"Romania","region":"","city":"","lat":45.9968,"lon":24.997,"asn":47890,"org":"Unmanaged Ltd"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":9200,"proto":"tcp","label":"Elastic","count":8},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":7},{"port":4443,"proto":"tcp","label":"","count":6},{"port":7443,"proto":"tcp","label":"","count":6},{"port":4782,"proto":"tcp","label":"","count":6},{"port":7001,"proto":"tcp","label":"WebLogic","count":6},{"port":6379,"proto":"tcp","label":"Redis","count":4},{"port":9998,"proto":"tcp","label":"","count":4},{"port":3000,"proto":"tcp","label":"Web-alt","count":4},{"port":8500,"proto":"tcp","label":"","count":4},{"port":8081,"proto":"tcp","label":"","count":4},{"port":3128,"proto":"tcp","label":"HTTP-proxy","count":4},{"port":22222,"proto":"tcp","label":"","count":4},{"port":1883,"proto":"tcp","label":"MQTT","count":4},{"port":22,"proto":"tcp","label":"SSH","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t12i130500_2d7513195f68_e51b7354d87f"],"tls_ja3":["cba7f34191ef2379c1325641f6c6c4f4"],"ja4h":["ge11nn0400_88d30a62b7ad","po11nn0600_7522b0acae40","ge11nn0300_0db47b7d240d"]},"fingerprint_peers":{"t12i130500_2d7513195f68_e51b7354d87f":2338,"ge11nn0300_0db47b7d240d":4475,"po11nn0600_7522b0acae40":7,"ge11nn0400_88d30a62b7ad":7388},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Firefox/144.0","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-07-05","count":711}],"recent_events":[{"timestamp":"2026-07-05T09:59:33","port":8704,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","community_id":"1:OfA26sRsh6DHmMPHWUgENPUvQXw=","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"e65fcee2-5a1e-4ff8-bc14-cd71a3519610","seq":1,"duration_ms":338,"bytes_in":4,"bytes_out":11},{"timestamp":"2026-07-05T09:59:32","port":9114,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","community_id":"1:dB7Yc/rGXSw07YI41NCvYx0yKPU=","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"bde9287a-09dc-4184-b19a-ae8a646f6f9a","seq":1,"duration_ms":471,"bytes_in":4,"bytes_out":11},{"timestamp":"2026-07-05T09:59:32","port":8731,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","community_id":"1:C64zxUBQkeppVZgEZjiEGPjEzfI=","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"00836e54-1b88-4b51-b9f4-a8e438b8a046","seq":1,"duration_ms":346,"bytes_in":4,"bytes_out":11},{"timestamp":"2026-07-05T09:59:32","port":9532,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","community_id":"1:rTuQyqOB+OAwd8D3Jo7VoPUG3aA=","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"3fea0f09-3ff8-4749-9085-eb33f56837be","seq":1,"duration_ms":335,"bytes_in":4,"bytes_out":11},{"timestamp":"2026-07-05T09:59:32","port":7081,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","community_id":"1:8T5LAkkeoajSYxOOYtnwJ+ajeoI=","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"52494d33-7e9f-4e43-88c9-2c845703751c","seq":1,"duration_ms":492,"bytes_in":4,"bytes_out":11},{"timestamp":"2026-07-05T09:59:31","port":9186,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","community_id":"1:6YUZclekABuA7s2rDwyQG9dxi4A=","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"401f43c8-0b33-4c1f-b594-c9ecfba2f3dc","seq":1,"duration_ms":482,"bytes_in":4,"bytes_out":11},{"timestamp":"2026-07-05T09:59:31","port":8570,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","community_id":"1:oA7n+FMiOSgBbyAHRsC7X9AIPF8=","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"d55bd7b7-22bd-4357-94fa-31229c6448a9","seq":1,"duration_ms":509,"bytes_in":4,"bytes_out":11},{"timestamp":"2026-07-05T09:59:31","port":7474,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","community_id":"1:TV0QWYnAXr3Q9F8R9QRAqBIlGEU=","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"a7626bb1-df75-4186-b288-cf9cd8d6df67","seq":1,"duration_ms":550,"bytes_in":4,"bytes_out":11},{"timestamp":"2026-07-05T09:59:31","port":7086,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","community_id":"1:+zC/w/BMwk1hZdVCNaUo+lPGyow=","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"127c2eec-a12c-49a7-836f-10b0d522c742","seq":1,"duration_ms":491,"bytes_in":4,"bytes_out":11},{"timestamp":"2026-07-05T09:59:31","port":5620,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"","summary":"  \n\n","payload_hex":"20200a0a","method":"","user_agent":"","community_id":"1:tSP6hHiJUgnp5SKQbo5m4OikuDE=","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"1c436fd9-4100-480a-88cc-b88d247e2089","seq":1,"duration_ms":493,"bytes_in":4,"bytes_out":11}],"http_methods":[{"method":"GET","count":214},{"method":"POST","count":2}],"distinct_ports_total":521,"top_paths":[{"path":"/","count":126,"ports":62},{"path":"/favicon.ico","count":88,"ports":47},{"path":"/_cluster/state","count":2,"ports":1}],"distinct_paths_total":3,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[{"value":"SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.8","count":6}],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-08T18:22:48.915296+00:00"}