{"ip":"151.240.65.105","total_events":5934,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"3037+ ports swept","confidence":"medium","network_type":"nsp","why":["No exploit payloads observed.","Swept 3037 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"131,932 bytes sent","bytes_sent":131932,"session_seconds":30,"persistent":false}},"first_seen":"2026-09-15T14:21:42","last_seen":"2026-09-15T14:25:57","events_24h":0,"events_7d":5934,"geo":{"country_code":"US","country_name":"United States","region":"Mississippi","city":"Jackson","lat":32.3012,"lon":-90.1834,"asn":137409,"org":"GSL Networks Pty LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as137409","label":"Global Secure Layer","category":"isp","url":"https://www.peeringdb.com/asn/137409"},"cve_matches":[],"malware":[],"top_ports":[{"port":17019,"proto":"tcp","label":"","count":4},{"port":13693,"proto":"tcp","label":"","count":4},{"port":22753,"proto":"tcp","label":"","count":4},{"port":22051,"proto":"tcp","label":"","count":4},{"port":12090,"proto":"tcp","label":"","count":4},{"port":10056,"proto":"tcp","label":"","count":4},{"port":19924,"proto":"tcp","label":"","count":4},{"port":13874,"proto":"tcp","label":"","count":4},{"port":17601,"proto":"tcp","label":"","count":4},{"port":11432,"proto":"tcp","label":"","count":4},{"port":22865,"proto":"tcp","label":"","count":4},{"port":24555,"proto":"tcp","label":"","count":4},{"port":24670,"proto":"tcp","label":"","count":4},{"port":15901,"proto":"tcp","label":"","count":4},{"port":14604,"proto":"tcp","label":"","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-15","count":5934}],"recent_events":[{"timestamp":"2026-09-15T14:25:57","port":25313,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0014\u0000�\u0005\r<HONEYPOT>b�\u0001\u0001\u0000","payload_hex":"1400fc050d<HONEYPOT>62e1010100","method":"","user_agent":"","ja3":"","session":"d6d2b58a-d483-48ea-8402-32cf96699c6b","seq":1,"duration_ms":0,"bytes_in":23,"bytes_out":14,"enriched":{"digest":"cf63306af5c6aed8","strings":["<HONEYPOT>b"]}},{"timestamp":"2026-09-15T14:25:57","port":24913,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0014\u0000�\u0005\r<HONEYPOT>aQ\u0001\u0001\u0000","payload_hex":"1400fc050d<HONEYPOT>6151010100","method":"","user_agent":"","ja3":"","session":"da8cca1e-6e3c-420b-b29f-df1ba2854d65","seq":1,"duration_ms":0,"bytes_in":23,"bytes_out":14,"enriched":{"digest":"aac535145edae6c9","strings":["<HONEYPOT>aQ"]}},{"timestamp":"2026-09-15T14:25:49","port":25207,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0014\u0000�\u0005\r<HONEYPOT>bw\u0001\u0001\u0000","payload_hex":"1400fc050d<HONEYPOT>6277010100","method":"","user_agent":"","ja3":"","session":"db69f7da-6631-491d-b3e0-c1e47c4245eb","seq":1,"duration_ms":0,"bytes_in":23,"bytes_out":14,"enriched":{"digest":"e9af0517a3d85b04","strings":["<HONEYPOT>bw"]}},{"timestamp":"2026-09-15T14:25:49","port":25333,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0014\u0000�\u0005\r<HONEYPOT>b�\u0001\u0001\u0000","payload_hex":"1400fc050d<HONEYPOT>62f5010100","method":"","user_agent":"","ja3":"","session":"6983edf9-3925-480f-a9c6-6895726fc0bc","seq":1,"duration_ms":0,"bytes_in":23,"bytes_out":14,"enriched":{"digest":"cf63306af5c6aed8","strings":["<HONEYPOT>b"]}},{"timestamp":"2026-09-15T14:25:49","port":25081,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0014\u0000�\u0005\r<HONEYPOT>a�\u0001\u0001\u0000","payload_hex":"1400fc050d<HONEYPOT>61f9010100","method":"","user_agent":"","ja3":"","session":"31dfd4e0-a9b8-4824-9a16-377ecfa811b8","seq":1,"duration_ms":0,"bytes_in":23,"bytes_out":14,"enriched":{"digest":"fcffe210777f6031","strings":["<HONEYPOT>a"]}},{"timestamp":"2026-09-15T14:25:49","port":24919,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0014\u0000�\u0005\r<HONEYPOT>aW\u0001\u0001\u0000","payload_hex":"1400fc050d<HONEYPOT>6157010100","method":"","user_agent":"","ja3":"","session":"446abf69-d878-4aa9-9430-926f0d697eac","seq":1,"duration_ms":0,"bytes_in":23,"bytes_out":14,"enriched":{"digest":"687d4f229baadd5d","strings":["<HONEYPOT>aW"]}},{"timestamp":"2026-09-15T14:25:49","port":22431,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0014\u0000�\u0005\r<HONEYPOT>W�\u0001\u0001\u0000","payload_hex":"1400fc050d<HONEYPOT>579f010100","method":"","user_agent":"","ja3":"","session":"b876abc4-f781-483c-a497-288288133cde","seq":1,"duration_ms":0,"bytes_in":23,"bytes_out":14,"enriched":{"digest":"2e48a756fd514e18","strings":["<HONEYPOT>W"]}},{"timestamp":"2026-09-15T14:25:45","port":25168,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0014\u0000�\u0005\r<HONEYPOT>bP\u0001\u0001\u0000","payload_hex":"1400fc050d<HONEYPOT>6250010100","method":"","user_agent":"","ja3":"","session":"909d3213-b001-49e2-a47e-a48f50fd61ce","seq":1,"duration_ms":0,"bytes_in":23,"bytes_out":14,"enriched":{"digest":"772f16e170d62d24","strings":["<HONEYPOT>bP"]}},{"timestamp":"2026-09-15T14:25:43","port":24374,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0014\u0000�\u0005\r<HONEYPOT>_6\u0001\u0001\u0000","payload_hex":"1400fc050d<HONEYPOT>5f36010100","method":"","user_agent":"","ja3":"","session":"d9966950-0289-42cb-ba44-3054ac347615","seq":1,"duration_ms":0,"bytes_in":23,"bytes_out":14,"enriched":{"digest":"9bd73c7894f739be","strings":["<HONEYPOT>_6"]}},{"timestamp":"2026-09-15T14:25:43","port":23704,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0014\u0000�\u0005\r<HONEYPOT>\\�\u0001\u0001\u0000","payload_hex":"1400fc050d<HONEYPOT>5c98010100","method":"","user_agent":"","ja3":"","session":"5c2fc269-3032-453b-9a1a-8004081e7d38","seq":1,"duration_ms":0,"bytes_in":23,"bytes_out":14,"enriched":{"digest":"e493fbec1b9219cc","strings":["<HONEYPOT>\\"]}}],"http_methods":[],"distinct_ports_total":3037,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-20T16:24:55.345231+00:00"}