{"ip":"89.248.172.14","total_events":427,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"124+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 124 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"65,586 bytes sent","bytes_sent":65586,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-27T15:01:13","last_seen":"2026-09-22T01:19:59","events_24h":8,"events_7d":41,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"Utrecht","city":"Utrecht","lat":52.0922,"lon":5.1268,"asn":202425,"org":"IP Volume inc"},"source_domain":"no-reverse-dns-configured.com","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":9092,"proto":"tcp","label":"Kafka","count":8},{"port":9105,"proto":"tcp","label":"","count":8},{"port":8285,"proto":"tcp","label":"","count":8},{"port":42069,"proto":"tcp","label":"","count":8},{"port":9094,"proto":"tcp","label":"","count":8},{"port":45000,"proto":"tcp","label":"","count":8},{"port":8243,"proto":"tcp","label":"","count":7},{"port":11099,"proto":"tcp","label":"","count":7},{"port":10255,"proto":"tcp","label":"","count":7},{"port":9060,"proto":"tcp","label":"","count":6},{"port":9093,"proto":"tcp","label":"","count":6},{"port":44134,"proto":"tcp","label":"","count":6},{"port":8983,"proto":"tcp","label":"Solr","count":6},{"port":8280,"proto":"tcp","label":"","count":6},{"port":51821,"proto":"tcp","label":"","count":6}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[]},"fingerprint_peers":{},"user_agents":["Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_5; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.15 Safari/534.13","Mozilla/5.0 (X11; U; Linux i686; it; rv:1.9.2.3) Gecko/20100406 Firefox/3.6.3 (Swiftfox)","Mozilla/5.0 (compatible; Exabot/3.0;  http://www.exabot.com/go/robot)","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36","Mozilla/5.0 (iPad; CPU OS 12_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/76.0.3809.81 Mobile/15E148 Safari/605.1","Mozilla/5.0 (Linux; Android 7.1.1; Moto E (4) Plus) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","Mozilla/5.0 (Linux; Android 9; SM-A505FN) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","Mozilla/5.0 (Linux; Android 5.1; Lenovo P70-A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"],"timeline":[{"date":"2026-07-27","count":2},{"date":"2026-07-28","count":11},{"date":"2026-07-29","count":10},{"date":"2026-07-30","count":10},{"date":"2026-07-31","count":5},{"date":"2026-08-01","count":5},{"date":"2026-08-02","count":11},{"date":"2026-08-03","count":12},{"date":"2026-08-04","count":8},{"date":"2026-08-05","count":12},{"date":"2026-08-06","count":6},{"date":"2026-08-07","count":4},{"date":"2026-08-08","count":9},{"date":"2026-08-09","count":10},{"date":"2026-08-10","count":8},{"date":"2026-08-11","count":9},{"date":"2026-08-12","count":8},{"date":"2026-08-13","count":3},{"date":"2026-08-14","count":11},{"date":"2026-08-15","count":6},{"date":"2026-08-16","count":9},{"date":"2026-08-17","count":10},{"date":"2026-08-18","count":9},{"date":"2026-08-19","count":9},{"date":"2026-08-20","count":6},{"date":"2026-08-21","count":8},{"date":"2026-08-22","count":6},{"date":"2026-08-23","count":11},{"date":"2026-08-24","count":9},{"date":"2026-08-25","count":7},{"date":"2026-08-26","count":9},{"date":"2026-08-27","count":6},{"date":"2026-08-28","count":5},{"date":"2026-08-29","count":14},{"date":"2026-08-30","count":8},{"date":"2026-08-31","count":7},{"date":"2026-09-01","count":11},{"date":"2026-09-02","count":8},{"date":"2026-09-03","count":9},{"date":"2026-09-04","count":9},{"date":"2026-09-05","count":9},{"date":"2026-09-06","count":11},{"date":"2026-09-07","count":7},{"date":"2026-09-08","count":14},{"date":"2026-09-09","count":8},{"date":"2026-09-10","count":7},{"date":"2026-09-16","count":5},{"date":"2026-09-17","count":3},{"date":"2026-09-18","count":3},{"date":"2026-09-19","count":13},{"date":"2026-09-20","count":8},{"date":"2026-09-21","count":8},{"date":"2026-09-22","count":1}],"recent_events":[{"timestamp":"2026-09-22T01:19:59","port":14567,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 9; SM-A505FN) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f696420393b20534d2d41353035464e29204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37362e302e333830392e313131204d6f62696c65205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 9; SM-A505FN) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","ja3":"","session":"3b3bfc29-8d1e-474c-a36b-27ea1fe34bb0","seq":1,"duration_ms":100,"bytes_in":167,"bytes_out":78},{"timestamp":"2026-09-21T23:10:22","port":6501,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Linux; Android 9; SM-A505FN) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284c696e75783b20416e64726f696420393b20534d2d41353035464e29204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37362e302e333830392e313131204d6f62696c65205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Linux; Android 9; SM-A505FN) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","ja3":"","session":"7ddbf8dc-95d0-4314-b269-dcb87ae8660e","seq":1,"duration_ms":100,"bytes_in":167,"bytes_out":78},{"timestamp":"2026-09-21T17:05:28","port":1099,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31345f3029204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f37352e302e333737302e3830205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36","ja3":"","session":"fd0fbc19-562f-4642-aba1-d7cc3c54a29f","seq":1,"duration_ms":101,"bytes_in":165,"bytes_out":78},{"timestamp":"2026-09-21T11:16:23","port":83,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_5; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.15 Safari/534.13\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20496e74656c204d6163204f5320582031305f365f353b20656e2d555329204170706c655765624b69742f3533342e313320284b48544d4c2c206c696b65204765636b6f29204368726f6d652f392e302e3539372e3135205361666172692f3533342e31330d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_5; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.15 Safari/534.13","ja3":"","session":"e7dd2247-ebb3-47a9-960a-41c358e8cf7b","seq":1,"duration_ms":100,"bytes_in":172,"bytes_out":78},{"timestamp":"2026-09-21T06:53:38","port":6501,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_5; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.15 Safari/534.13\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20496e74656c204d6163204f5320582031305f365f353b20656e2d555329204170706c655765624b69742f3533342e313320284b48544d4c2c206c696b65204765636b6f29204368726f6d652f392e302e3539372e3135205361666172692f3533342e31330d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_5; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.15 Safari/534.13","ja3":"","session":"e64e52c3-d0e3-49ce-a26c-f37162f027e7","seq":1,"duration_ms":100,"bytes_in":172,"bytes_out":78},{"timestamp":"2026-09-21T04:08:07","port":5000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_5; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.15 Safari/534.13\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20496e74656c204d6163204f5320582031305f365f353b20656e2d555329204170706c655765624b69742f3533342e313320284b48544d4c2c206c696b65204765636b6f29204368726f6d652f392e302e3539372e3135205361666172692f3533342e31330d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_5; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.15 Safari/534.13","ja3":"","session":"f2556c0c-815f-467a-9174-710590268a17","seq":1,"duration_ms":100,"bytes_in":172,"bytes_out":78},{"timestamp":"2026-09-21T03:05:54","port":53,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_5; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.15 Safari/534.13\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20496e74656c204d6163204f5320582031305f365f353b20656e2d555329204170706c655765624b69742f3533342e313320284b48544d4c2c206c696b65204765636b6f29204368726f6d652f392e302e3539372e3135205361666172692f3533342e31330d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_5; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.15 Safari/534.13","ja3":"","session":"3ceff633-126e-4ed1-8d71-7429c42d5d6c","seq":1,"duration_ms":100,"bytes_in":172,"bytes_out":78},{"timestamp":"2026-09-21T02:54:06","port":1433,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_5; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.15 Safari/534.13\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20496e74656c204d6163204f5320582031305f365f353b20656e2d555329204170706c655765624b69742f3533342e313320284b48544d4c2c206c696b65204765636b6f29204368726f6d652f392e302e3539372e3135205361666172692f3533342e31330d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_5; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.15 Safari/534.13","ja3":"","session":"1f33c72e-6adc-453d-82cd-44f2cc36e0f1","seq":1,"duration_ms":100,"bytes_in":172,"bytes_out":78},{"timestamp":"2026-09-21T00:52:20","port":8081,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_5; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.15 Safari/534.13\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20496e74656c204d6163204f5320582031305f365f353b20656e2d555329204170706c655765624b69742f3533342e313320284b48544d4c2c206c696b65204765636b6f29204368726f6d652f392e302e3539372e3135205361666172692f3533342e31330d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_5; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.15 Safari/534.13","ja3":"","session":"554f4330-9ac8-44b6-b823-790547c2dd68","seq":1,"duration_ms":100,"bytes_in":172,"bytes_out":78},{"timestamp":"2026-09-20T23:06:04","port":3388,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"user-agent\":\"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_5; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.15 Safari/534.13\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20553b20496e74656c204d6163204f5320582031305f365f353b20656e2d555329204170706c655765624b69742f3533342e313320284b48544d4c2c206c696b65204765636b6f29204368726f6d652f392e302e3539372e3135205361666172692f3533342e31330d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_5; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.15 Safari/534.13","ja3":"","session":"e87e2e61-9770-45f2-a624-0e3d2eb204c0","seq":1,"duration_ms":100,"bytes_in":172,"bytes_out":78}],"http_methods":[{"method":"GET","count":427}],"distinct_ports_total":124,"top_paths":[{"path":"/","count":427,"ports":124}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Linux; Android 9; SM-A505FN) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-22T02:25:34.601951+00:00"}