{"ip":"89.248.172.12","total_events":83,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"51+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 51 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"13,280 bytes sent","bytes_sent":13280,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-27T11:57:56","last_seen":"2026-08-07T20:33:39","events_24h":5,"events_7d":42,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"Utrecht","city":"Utrecht","lat":52.0922,"lon":5.1268,"asn":202425,"org":"IP Volume inc"},"source_domain":"liquidado.de","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":2381,"proto":"tcp","label":"","count":3},{"port":6543,"proto":"tcp","label":"","count":3},{"port":981,"proto":"tcp","label":"","count":3},{"port":6183,"proto":"tcp","label":"","count":3},{"port":5556,"proto":"tcp","label":"","count":3},{"port":67,"proto":"tcp","label":"","count":3},{"port":1098,"proto":"tcp","label":"","count":3},{"port":112,"proto":"tcp","label":"","count":3},{"port":4244,"proto":"tcp","label":"","count":3},{"port":4990,"proto":"tcp","label":"","count":2},{"port":832,"proto":"tcp","label":"","count":2},{"port":4789,"proto":"tcp","label":"","count":2},{"port":1936,"proto":"tcp","label":"","count":2},{"port":6081,"proto":"tcp","label":"","count":2},{"port":4245,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":["ge10nn0200_5594a17e7e7e"]},"fingerprint_peers":{"ge10nn0200_5594a17e7e7e":1969},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15"],"timeline":[{"date":"2026-07-27","count":6},{"date":"2026-07-28","count":12},{"date":"2026-07-29","count":7},{"date":"2026-07-30","count":6},{"date":"2026-07-31","count":10},{"date":"2026-08-01","count":5},{"date":"2026-08-02","count":6},{"date":"2026-08-03","count":5},{"date":"2026-08-04","count":10},{"date":"2026-08-05","count":5},{"date":"2026-08-06","count":5},{"date":"2026-08-07","count":6}],"recent_events":[{"timestamp":"2026-08-07T20:33:39","port":4990,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f313429204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31322e30205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15","ja3":"","session":"df23cf15-7f2c-4e23-9e9e-2d7d3e20df28","seq":1,"duration_ms":100,"bytes_in":160,"bytes_out":78},{"timestamp":"2026-08-07T16:07:21","port":6183,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f313429204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31322e30205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15","ja3":"","session":"42dd0f77-433c-4878-bd40-bd0d97c7f556","seq":1,"duration_ms":100,"bytes_in":160,"bytes_out":78},{"timestamp":"2026-08-07T10:59:28","port":4240,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f313429204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31322e30205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15","ja3":"","session":"2e82159c-e6c5-4ba3-a5fc-8cb261b0f821","seq":1,"duration_ms":100,"bytes_in":160,"bytes_out":78},{"timestamp":"2026-08-07T03:54:20","port":4712,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f313429204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31322e30205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15","ja3":"","session":"5b0da822-4ff2-47bb-9602-71131773d1d4","seq":1,"duration_ms":100,"bytes_in":160,"bytes_out":78},{"timestamp":"2026-08-07T03:19:45","port":135,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f313429204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31322e30205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15","ja3":"","session":"39fc9bf8-9682-4023-a602-5c14ae1c377c","seq":1,"duration_ms":100,"bytes_in":160,"bytes_out":78},{"timestamp":"2026-08-07T02:30:29","port":8022,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f313429204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31322e30205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15","ja3":"","session":"6723e454-64ee-45fc-bea7-fd81956101e4","seq":1,"duration_ms":100,"bytes_in":160,"bytes_out":78},{"timestamp":"2026-08-06T19:56:13","port":4789,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f313429204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31322e30205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15","ja3":"","session":"91b445af-65b0-43ec-b0b6-2179a08af41a","seq":1,"duration_ms":100,"bytes_in":160,"bytes_out":78},{"timestamp":"2026-08-06T09:05:23","port":7004,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f313429204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31322e30205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15","ja3":"","session":"9b82d5ec-9a26-4083-89bc-fcf20922ea17","seq":1,"duration_ms":100,"bytes_in":160,"bytes_out":78},{"timestamp":"2026-08-06T04:29:13","port":8022,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f313429204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31322e30205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15","ja3":"","session":"59703f16-846d-4ef9-942a-b2e2b14d97ca","seq":1,"duration_ms":100,"bytes_in":160,"bytes_out":78},{"timestamp":"2026-08-06T03:48:35","port":1099,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f313429204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31322e30205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15","ja3":"","session":"0523babb-749d-4ea3-b01a-04c0a5df09f1","seq":1,"duration_ms":100,"bytes_in":160,"bytes_out":78}],"http_methods":[{"method":"GET","count":83}],"distinct_ports_total":51,"top_paths":[{"path":"/","count":83,"ports":51}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-08-08T03:08:11.226660+00:00"}