{"ip":"146.190.68.133","total_events":3815,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"12+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 12 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"47,587,497 bytes sent","bytes_sent":47587497,"session_seconds":48,"persistent":false}},"first_seen":"2026-03-01T13:49:00","last_seen":"2026-08-21T14:37:24","events_24h":0,"events_7d":255,"geo":{"country_code":"US","country_name":"United States","region":"New Jersey","city":"North Bergen","lat":40.7964,"lon":-74.0203,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"top_ports":[{"port":554,"proto":"tcp","label":"","count":1014},{"port":13554,"proto":"tcp","label":"","count":255},{"port":12554,"proto":"tcp","label":"","count":255},{"port":2554,"proto":"tcp","label":"","count":255},{"port":9554,"proto":"tcp","label":"","count":255},{"port":37554,"proto":"tcp","label":"","count":255},{"port":5542,"proto":"tcp","label":"","count":255},{"port":15554,"proto":"tcp","label":"","count":255},{"port":22554,"proto":"tcp","label":"","count":255},{"port":31554,"proto":"tcp","label":"","count":255},{"port":553,"proto":"tcp","label":"","count":253},{"port":555,"proto":"tcp","label":"","count":253}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-06-15","count":253},{"date":"2026-06-16","count":253},{"date":"2026-06-24","count":253},{"date":"2026-07-28","count":2040},{"date":"2026-08-21","count":255}],"recent_events":[{"timestamp":"2026-08-21T14:37:24","port":37554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:37554/video4.sdp RTSP/1.0\r\nCSeq: 255\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a33373535342f766964656f342e73647020525453502f312e300d0a435365713a203235350d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","ja3":"","session":"f647fea8-0c5a-4d80-87fe-1aa2f12e1605","seq":255,"duration_ms":47444,"bytes_in":31340,"bytes_out":3570,"enriched":{"digest":"e8089452c1938c64","strings":["DESCRIBE rtsp://<HONEYPOT>:37554/video4.sdp RTSP/1.0","CSeq: 255","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"domains":["video4.sdp"]}}},{"timestamp":"2026-08-21T14:37:24","port":37554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:37554/video3.sdp RTSP/1.0\r\nCSeq: 254\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a33373535342f766964656f332e73647020525453502f312e300d0a435365713a203235340d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","ja3":"","session":"f647fea8-0c5a-4d80-87fe-1aa2f12e1605","seq":254,"duration_ms":47258,"bytes_in":31220,"bytes_out":3556,"enriched":{"digest":"83d61016b7c0ca29","strings":["DESCRIBE rtsp://<HONEYPOT>:37554/video3.sdp RTSP/1.0","CSeq: 254","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"domains":["video3.sdp"]}}},{"timestamp":"2026-08-21T14:37:24","port":37554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:37554/video2.sdp RTSP/1.0\r\nCSeq: 253\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a33373535342f766964656f322e73647020525453502f312e300d0a435365713a203235330d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","ja3":"","session":"f647fea8-0c5a-4d80-87fe-1aa2f12e1605","seq":253,"duration_ms":47072,"bytes_in":31100,"bytes_out":3542,"enriched":{"digest":"c01a20b09fbf82fd","strings":["DESCRIBE rtsp://<HONEYPOT>:37554/video2.sdp RTSP/1.0","CSeq: 253","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"domains":["video2.sdp"]}}},{"timestamp":"2026-08-21T14:37:24","port":37554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:37554/4/h264/preview RTSP/1.0\r\nCSeq: 252\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a33373535342f342f683236342f7072657669657720525453502f312e300d0a435365713a203235320d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","ja3":"","session":"f647fea8-0c5a-4d80-87fe-1aa2f12e1605","seq":252,"duration_ms":46886,"bytes_in":30980,"bytes_out":3528,"enriched":{"digest":"b695160d28b05f78","strings":["DESCRIBE rtsp://<HONEYPOT>:37554/4/h264/preview RTSP/1.0","CSeq: 252","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"paths":["/4/h264/preview"]}}},{"timestamp":"2026-08-21T14:37:24","port":37554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:37554/3/h264/preview RTSP/1.0\r\nCSeq: 251\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a33373535342f332f683236342f7072657669657720525453502f312e300d0a435365713a203235310d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","ja3":"","session":"f647fea8-0c5a-4d80-87fe-1aa2f12e1605","seq":251,"duration_ms":46700,"bytes_in":30856,"bytes_out":3514,"enriched":{"digest":"f24be05693f61700","strings":["DESCRIBE rtsp://<HONEYPOT>:37554/3/h264/preview RTSP/1.0","CSeq: 251","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"paths":["/3/h264/preview"]}}},{"timestamp":"2026-08-21T14:37:23","port":37554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:37554/2/h264/preview RTSP/1.0\r\nCSeq: 250\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a33373535342f322f683236342f7072657669657720525453502f312e300d0a435365713a203235300d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","ja3":"","session":"f647fea8-0c5a-4d80-87fe-1aa2f12e1605","seq":250,"duration_ms":46514,"bytes_in":30732,"bytes_out":3500,"enriched":{"digest":"9815547016311efc","strings":["DESCRIBE rtsp://<HONEYPOT>:37554/2/h264/preview RTSP/1.0","CSeq: 250","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"paths":["/2/h264/preview"]}}},{"timestamp":"2026-08-21T14:37:23","port":37554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:37554/1/h264/preview RTSP/1.0\r\nCSeq: 249\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a33373535342f312f683236342f7072657669657720525453502f312e300d0a435365713a203234390d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","ja3":"","session":"f647fea8-0c5a-4d80-87fe-1aa2f12e1605","seq":249,"duration_ms":46328,"bytes_in":30608,"bytes_out":3486,"enriched":{"digest":"3ba08811a0708781","strings":["DESCRIBE rtsp://<HONEYPOT>:37554/1/h264/preview RTSP/1.0","CSeq: 249","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"paths":["/1/h264/preview"]}}},{"timestamp":"2026-08-21T14:37:23","port":37554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:37554/Streaming/Channels/4/Preview RTSP/1.0\r\nCSeq: 248\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a33373535342f53747265616d696e672f4368616e6e656c732f342f5072657669657720525453502f312e300d0a435365713a203234380d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","ja3":"","session":"f647fea8-0c5a-4d80-87fe-1aa2f12e1605","seq":248,"duration_ms":46142,"bytes_in":30484,"bytes_out":3472,"enriched":{"digest":"7e1f132ca7fdef73","strings":["DESCRIBE rtsp://<HONEYPOT>:37554/Streaming/Channels/4/Preview RTSP/1.0","CSeq: 248","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"paths":["/Streaming/Channels/4/Preview"]}}},{"timestamp":"2026-08-21T14:37:23","port":37554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:37554/Streaming/Channels/3/Preview RTSP/1.0\r\nCSeq: 247\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a33373535342f53747265616d696e672f4368616e6e656c732f332f5072657669657720525453502f312e300d0a435365713a203234370d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","ja3":"","session":"f647fea8-0c5a-4d80-87fe-1aa2f12e1605","seq":247,"duration_ms":45956,"bytes_in":30346,"bytes_out":3458,"enriched":{"digest":"77808f52d888aa3c","strings":["DESCRIBE rtsp://<HONEYPOT>:37554/Streaming/Channels/3/Preview RTSP/1.0","CSeq: 247","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"paths":["/Streaming/Channels/3/Preview"]}}},{"timestamp":"2026-08-21T14:37:23","port":37554,"proto":"tcp","app_proto":"","app_protocol":"rtsp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"DESCRIBE rtsp://<HONEYPOT>:37554/Streaming/Channels/2/Preview RTSP/1.0\r\nCSeq: 246\r\nUser-Agent: Mozilla/5.0\r\nAccept: application/sdp\r\n\r\n","payload_hex":"444553435249424520727473703a2f2f<HONEYPOT>3a33373535342f53747265616d696e672f4368616e6e656c732f322f5072657669657720525453502f312e300d0a435365713a203234360d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a","method":"","user_agent":"","ja3":"","session":"f647fea8-0c5a-4d80-87fe-1aa2f12e1605","seq":246,"duration_ms":45770,"bytes_in":30208,"bytes_out":3444,"enriched":{"digest":"d29584df98f6feb5","strings":["DESCRIBE rtsp://<HONEYPOT>:37554/Streaming/Channels/2/Preview RTSP/1.0","CSeq: 246","User-Agent: Mozilla/5.0","Accept: application/sdp"],"iocs":{"paths":["/Streaming/Channels/2/Preview"]}}}],"http_methods":[],"distinct_ports_total":12,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-27T10:54:48.878733+00:00"}