{"ip":"151.241.119.133","total_events":7997,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"2527+ ports swept","confidence":"medium","network_type":"nsp","why":["No exploit payloads observed.","Swept 2527 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"184,682 bytes sent","bytes_sent":184682,"session_seconds":10,"persistent":false}},"first_seen":"2026-07-25T03:29:19","last_seen":"2026-07-25T03:42:45","events_24h":0,"events_7d":7997,"geo":{"country_code":"US","country_name":"United States","region":"New Jersey","city":"Jersey City","lat":40.7308,"lon":-74.0789,"asn":174,"org":"Cogent Communications, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as174","label":"Cogent Communications, Inc.","category":"isp","url":"https://www.peeringdb.com/asn/174"},"cve_matches":[],"malware":[],"top_ports":[{"port":12077,"proto":"tcp","label":"","count":6},{"port":3898,"proto":"tcp","label":"","count":6},{"port":21463,"proto":"tcp","label":"","count":6},{"port":24564,"proto":"tcp","label":"","count":6},{"port":57721,"proto":"tcp","label":"","count":6},{"port":31192,"proto":"tcp","label":"","count":6},{"port":34166,"proto":"tcp","label":"","count":6},{"port":14852,"proto":"tcp","label":"","count":6},{"port":53682,"proto":"tcp","label":"","count":6},{"port":59645,"proto":"tcp","label":"","count":6},{"port":43276,"proto":"tcp","label":"","count":6},{"port":52259,"proto":"tcp","label":"","count":6},{"port":18884,"proto":"tcp","label":"","count":6},{"port":53801,"proto":"tcp","label":"","count":6},{"port":19515,"proto":"tcp","label":"","count":6}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-25","count":7997}],"recent_events":[{"timestamp":"2026-07-25T03:42:45","port":65400,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�x\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>ff78010100","method":"","user_agent":"","ja3":"","session":"15bba031-15ff-407f-acf3-5e107066404d","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":15,"enriched":{"digest":"d73b7e9741f8a876","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-25T03:42:29","port":65215,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>��\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>febf010100","method":"","user_agent":"","ja3":"","session":"da7882e7-03c0-425e-9559-7403dbfb7e58","seq":1,"duration_ms":100,"bytes_in":24,"bytes_out":15,"enriched":{"digest":"4170428daf5f24f8","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-25T03:42:25","port":65215,"proto":"tcp","app_proto":"","app_protocol":"websocket","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","ja3":"","session":"57a21d5a-d3bf-4ac6-93dd-3e18d530674b","seq":2,"duration_ms":304,"bytes_in":24,"bytes_out":30},{"timestamp":"2026-07-25T03:42:25","port":65215,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>��\u0001","payload_hex":"1500fc050e<HONEYPOT>febf01","method":"","user_agent":"","ja3":"","session":"57a21d5a-d3bf-4ac6-93dd-3e18d530674b","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":15,"enriched":{"digest":"793ddd0f6d7b101d","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-25T03:42:23","port":65513,"proto":"tcp","app_proto":"","app_protocol":"websocket","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","ja3":"","session":"b9fee79c-9920-4afe-b0bb-b91e48b9696f","seq":2,"duration_ms":283,"bytes_in":24,"bytes_out":30},{"timestamp":"2026-07-25T03:42:23","port":65513,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>��\u0001","payload_hex":"1500fc050e<HONEYPOT>ffe901","method":"","user_agent":"","ja3":"","session":"b9fee79c-9920-4afe-b0bb-b91e48b9696f","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":15,"enriched":{"digest":"793ddd0f6d7b101d","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-25T03:42:21","port":65495,"proto":"tcp","app_proto":"","app_protocol":"websocket","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","ja3":"","session":"612f156c-8d46-4bfa-88c8-c64565e5daca","seq":2,"duration_ms":281,"bytes_in":24,"bytes_out":30},{"timestamp":"2026-07-25T03:42:21","port":65495,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>��\u0001","payload_hex":"1500fc050e<HONEYPOT>ffd701","method":"","user_agent":"","ja3":"","session":"612f156c-8d46-4bfa-88c8-c64565e5daca","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":15,"enriched":{"digest":"793ddd0f6d7b101d","strings":["<HONEYPOT>"]}},{"timestamp":"2026-07-25T03:42:21","port":65321,"proto":"tcp","app_proto":"","app_protocol":"websocket","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","ja3":"","session":"56d55b64-a778-44df-9035-8cfaa23abdea","seq":2,"duration_ms":289,"bytes_in":24,"bytes_out":30},{"timestamp":"2026-07-25T03:42:21","port":65213,"proto":"tcp","app_proto":"","app_protocol":"websocket","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","ja3":"","session":"496a9aff-765c-40b1-90ce-37cadba05c45","seq":2,"duration_ms":283,"bytes_in":24,"bytes_out":30}],"http_methods":[],"distinct_ports_total":2527,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-31T04:48:02.099781+00:00"}