{"ip":"151.240.52.111","total_events":19990,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"7832+ ports swept","confidence":"medium","network_type":"nsp","why":["No exploit payloads observed.","Swept 7832 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."]},"first_seen":"2026-04-30T18:15:39","last_seen":"2026-07-11T07:01:40","events_24h":19972,"events_7d":19972,"geo":{"country_code":"US","country_name":"United States","region":"North Dakota","city":"Fargo","lat":46.8796,"lon":-96.7814,"asn":137409,"org":"GSL Networks Pty LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as137409","label":"Global Secure Layer","category":"isp","url":"https://www.peeringdb.com/asn/137409"},"cve_matches":[],"malware":[],"top_ports":[{"port":38651,"proto":"tcp","label":"","count":6},{"port":51842,"proto":"tcp","label":"","count":6},{"port":29450,"proto":"tcp","label":"","count":6},{"port":29247,"proto":"tcp","label":"","count":6},{"port":54707,"proto":"tcp","label":"","count":6},{"port":8958,"proto":"tcp","label":"","count":6},{"port":23658,"proto":"tcp","label":"","count":6},{"port":50249,"proto":"tcp","label":"","count":6},{"port":54699,"proto":"tcp","label":"","count":6},{"port":20738,"proto":"tcp","label":"","count":6},{"port":23237,"proto":"tcp","label":"","count":6},{"port":29238,"proto":"tcp","label":"","count":6},{"port":31543,"proto":"tcp","label":"","count":6},{"port":14870,"proto":"tcp","label":"","count":6},{"port":8333,"proto":"tcp","label":"Bitcoin","count":6}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-04-30","count":5},{"date":"2026-05-29","count":3},{"date":"2026-06-27","count":9},{"date":"2026-06-28","count":1},{"date":"2026-07-11","count":19972}],"recent_events":[{"timestamp":"2026-07-11T07:01:40","port":54017,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�\u0001\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>d301010100","method":"","user_agent":"","community_id":"1:WZBaQARTRb2Z0VwqnC99Y+SwfJc=","ja3":"","session":"8c4a088c-8f0c-46b6-aafa-95097309609d","seq":1,"duration_ms":101,"bytes_in":24,"bytes_out":14,"enriched":{"digest":"502c960ef143ffdb","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-11T07:01:34","port":54153,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","community_id":"1:rAFX1xtcUL9Fn9kwT7/yKoGg5Ws=","ja3":"","session":"aca28cef-35f5-485f-9e31-59c5957b12a8","seq":2,"duration_ms":861,"bytes_in":24,"bytes_out":28},{"timestamp":"2026-07-11T07:01:33","port":54011,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>��\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>d2fb010100","method":"","user_agent":"","community_id":"1:H9vti2z6Ph3gbdj0Xuaxq7agJ4Y=","ja3":"","session":"8c4119d3-178c-493d-9e4d-c49186632cd0","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":14,"enriched":{"digest":"4170428daf5f24f8","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-11T07:01:33","port":54153,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>Ӊ\u0001","payload_hex":"1500fc050e<HONEYPOT>d38901","method":"","user_agent":"","community_id":"1:rAFX1xtcUL9Fn9kwT7/yKoGg5Ws=","ja3":"","session":"aca28cef-35f5-485f-9e31-59c5957b12a8","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":14,"enriched":{"digest":"fe2ede5af89567f0","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-11T07:01:30","port":55669,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�u\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>d975010100","method":"","user_agent":"","community_id":"1:qOKwnHJyOay6vEC2aB8LV+U6IrY=","ja3":"","session":"7e00d94b-c312-4a08-9769-8267604c057f","seq":1,"duration_ms":100,"bytes_in":24,"bytes_out":14,"enriched":{"digest":"2f200bdcb2695bd5","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-11T07:01:29","port":55356,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�<\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>d83c010100","method":"","user_agent":"","community_id":"1:uoyTUPpGZ6MVRqeNcQmHDtfnqPU=","ja3":"","session":"6f2958c1-1c00-4657-9d2c-1d7ac3586801","seq":1,"duration_ms":100,"bytes_in":24,"bytes_out":14,"enriched":{"digest":"c362b024b9229398","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-11T07:01:27","port":55399,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","community_id":"1:2rXiGEb9uni9r0Okvkj9d/3y/vo=","ja3":"","session":"1b9d3d6c-1dab-4d05-bd86-64d67afb0a2c","seq":2,"duration_ms":750,"bytes_in":24,"bytes_out":28},{"timestamp":"2026-07-11T07:01:26","port":55399,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�g\u0001","payload_hex":"1500fc050e<HONEYPOT>d86701","method":"","user_agent":"","community_id":"1:2rXiGEb9uni9r0Okvkj9d/3y/vo=","ja3":"","session":"1b9d3d6c-1dab-4d05-bd86-64d67afb0a2c","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":14,"enriched":{"digest":"20f0b58c27e2f9b4","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-11T07:01:26","port":55143,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�g\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>d767010100","method":"","user_agent":"","community_id":"1:fp55dBRTz2s9aY8m4s5M3kAhGls=","ja3":"","session":"8c94ee51-900b-4437-8d6a-1bb49ee8178f","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":14,"enriched":{"digest":"0771a77f2ccbbb33","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-11T07:01:23","port":54455,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","community_id":"1:WT6zwXjjcSaGQKczLCfNV9ex4Aw=","ja3":"","session":"0cf15ee0-7034-4e86-b231-712472583240","seq":2,"duration_ms":276,"bytes_in":24,"bytes_out":28}],"http_methods":[],"distinct_ports_total":7832,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-11T16:31:23.773711+00:00"}