{"ip":"151.240.63.231","observed":true,"total_events":13297,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"8884+ ports swept","confidence":"medium","network_type":"nsp","why":["No exploit payloads observed.","Swept 8884 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range.","Counts include 2,270 interactive session(s) as well as first-packet events."],"engagement":{"level":"payload","label":"Sustained payload","detail":"356,436 bytes sent","bytes_sent":356436,"session_seconds":30,"persistent":false},"basis":"combined"},"first_seen":"2026-10-15T00:13:36","last_seen":"2026-10-15T00:27:35","events_24h":13297,"events_7d":13297,"interactive_sessions":2270,"interactive_sessions_24h":2270,"interactive_sessions_7d":2270,"interactive_protocols":[{"protocol":"bittorrent","sessions":1},{"protocol":"postgres","sessions":1},{"protocol":"http","sessions":1},{"protocol":"xmpp","sessions":1},{"protocol":"mikrotik-api","sessions":1},{"protocol":"vnc","sessions":1}],"geo":{"country_code":"US","country_name":"United States","region":"Montana","city":"Billings","lat":45.785,"lon":-108.496,"asn":137409,"org":"GSL Networks Pty LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as137409","label":"Global Secure Layer","category":"isp","url":"https://www.peeringdb.com/asn/137409"},"cve_matches":[],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":2270,"first_seen":"2026-10-15T00:13:38","last_seen":"2026-10-15T00:27:13","verdicts":[{"verdict":"scan","sessions":2074},{"verdict":"unknown","sessions":196}],"personas":[{"persona":"mikrotik@6.49.10","sessions":1},{"persona":"postgres@12.18","sessions":1},{"persona":"xmpp@ejabberd 21.12","sessions":1},{"persona":"vnc@TightVNC 2.8.81","sessions":1},{"persona":"bittorrent@Deluge 2.1.1","sessions":1},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, discovery@igd 1.0, fortigate@7.2.1","sessions":1}],"services":[{"protocol":"tcp","port":36534,"sessions":3},{"protocol":"tcp","port":15353,"sessions":2},{"protocol":"tcp","port":31823,"sessions":2},{"protocol":"tcp","port":35418,"sessions":2},{"protocol":"tcp","port":23515,"sessions":2},{"protocol":"tcp","port":65249,"sessions":2},{"protocol":"tcp","port":15791,"sessions":2},{"protocol":"tcp","port":12108,"sessions":2},{"protocol":"tcp","port":51253,"sessions":2},{"protocol":"tcp","port":25198,"sessions":2},{"protocol":"tcp","port":64298,"sessions":2},{"protocol":"tcp","port":14487,"sessions":2}],"logins":[],"commands":[],"downloads":[],"files":[]},"top_ports":[{"port":14553,"proto":"tcp","label":"","count":6,"sessions":0},{"port":10490,"proto":"tcp","label":"","count":6,"sessions":0},{"port":12860,"proto":"tcp","label":"","count":6,"sessions":0},{"port":26039,"proto":"tcp","label":"","count":6,"sessions":0},{"port":34130,"proto":"tcp","label":"","count":6,"sessions":0},{"port":9708,"proto":"tcp","label":"","count":6,"sessions":0},{"port":11481,"proto":"tcp","label":"","count":6,"sessions":0},{"port":11178,"proto":"tcp","label":"","count":6,"sessions":0},{"port":35736,"proto":"tcp","label":"","count":6,"sessions":0},{"port":16530,"proto":"tcp","label":"","count":6,"sessions":0},{"port":10019,"proto":"tcp","label":"","count":6,"sessions":0},{"port":27376,"proto":"tcp","label":"","count":6,"sessions":0},{"port":30820,"proto":"tcp","label":"","count":6,"sessions":0},{"port":33300,"proto":"tcp","label":"","count":6,"sessions":0},{"port":30497,"proto":"tcp","label":"","count":6,"sessions":0}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-15","count":13297,"sessions":2270}],"recent_events":[{"timestamp":"2026-10-15T00:27:35","port":64571,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�;\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>fc3b010100","method":"","user_agent":"","ja3":"","session":"445dbdaa-1843-44a7-b80a-1f38081c964a","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":14,"enriched":{"digest":"100645f2091ef130","strings":["<HONEYPOT>"]}},{"timestamp":"2026-10-15T00:27:34","port":64604,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�\\\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>fc5c010100","method":"","user_agent":"","ja3":"","session":"ac606c6e-c30c-4035-ab1f-50a008e35a31","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":14,"enriched":{"digest":"4382fbe8ced099a8","strings":["<HONEYPOT>"]}},{"timestamp":"2026-10-15T00:27:34","port":64733,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>��\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>fcdd010100","method":"","user_agent":"","ja3":"","session":"87522cba-1819-4caa-a1a6-8cc43549659d","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":14,"enriched":{"digest":"4170428daf5f24f8","strings":["<HONEYPOT>"]}},{"timestamp":"2026-10-15T00:27:34","port":64712,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>��\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>fcc8010100","method":"","user_agent":"","ja3":"","session":"f5e8bd25-6f3f-499c-be51-997121d55198","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":14,"enriched":{"digest":"4170428daf5f24f8","strings":["<HONEYPOT>"]}},{"timestamp":"2026-10-15T00:27:33","port":63924,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>��\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>f9b4010100","method":"","user_agent":"","ja3":"","session":"f3ecd085-4483-4433-af6d-28e26a425248","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":14,"enriched":{"digest":"4170428daf5f24f8","strings":["<HONEYPOT>"]}},{"timestamp":"2026-10-15T00:27:18","port":62260,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�4\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>f334010100","method":"","user_agent":"","ja3":"","session":"e1b39d53-2fca-48ae-b209-7813f1eba4e4","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":14,"enriched":{"digest":"4a75e75072d21af7","strings":["<HONEYPOT>"]}},{"timestamp":"2026-10-15T00:27:18","port":63736,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>��\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>f8f8010100","method":"","user_agent":"","ja3":"","session":"b3e4e19b-55ec-4fc9-bbdb-c99f8f4f079d","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":14,"enriched":{"digest":"4170428daf5f24f8","strings":["<HONEYPOT>"]}},{"timestamp":"2026-10-15T00:27:18","port":65141,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�u\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>fe75010100","method":"","user_agent":"","ja3":"","session":"a5052b7a-4b8a-438b-8e68-4d777ebc096a","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":14,"enriched":{"digest":"2f200bdcb2695bd5","strings":["<HONEYPOT>"]}},{"timestamp":"2026-10-15T00:27:12","port":63001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�\u0019\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>f619010100","method":"","user_agent":"","ja3":"","session":"b59a8ae9-5be5-40cf-b917-9c8f2d278de0","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":14,"enriched":{"digest":"280681fcc4379018","strings":["<HONEYPOT>"]}},{"timestamp":"2026-10-15T00:27:12","port":62813,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�]\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>f55d010100","method":"","user_agent":"","ja3":"","session":"763c96b7-5140-4313-8b3d-76a3f528335c","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":14,"enriched":{"digest":"09c72f6d1845254d","strings":["<HONEYPOT>"]}}],"http_methods":[],"distinct_ports_total":8884,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-15T05:36:30.243511+00:00"}