{"ip":"153.68.203.123","total_events":7,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["7 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"189 bytes sent","bytes_sent":189,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-10T16:04:09","last_seen":"2026-09-10T21:11:25","events_24h":7,"events_7d":7,"geo":{"country_code":"CA","country_name":"Canada","region":"Quebec","city":"Montreal","lat":45.5059,"lon":-73.631,"asn":852,"org":"TELUS Communications Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as852","label":"TELUS Communications","category":"isp","url":"https://www.peeringdb.com/asn/852"},"cve_matches":[],"malware":[],"top_ports":[{"port":25575,"proto":"tcp","label":"","count":2},{"port":25561,"proto":"tcp","label":"","count":1},{"port":25557,"proto":"tcp","label":"","count":1},{"port":25580,"proto":"tcp","label":"","count":1},{"port":25582,"proto":"tcp","label":"","count":1},{"port":25571,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-10","count":7}],"recent_events":[{"timestamp":"2026-09-10T21:11:25","port":25582,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0018\u0000����\u000f\u000e<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"1800ffffffff0f0e<HONEYPOT>63ee010100","method":"","user_agent":"","ja3":"","session":"d75f37de-8749-4891-b07e-e33617632016","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":14,"enriched":{"digest":"4af91430a715afdc","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-10T21:11:13","port":25571,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0018\u0000����\u000f\u000e<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"1800ffffffff0f0e<HONEYPOT>63e3010100","method":"","user_agent":"","ja3":"","session":"ce8a90b7-b9a4-4c6b-97fd-0f962401826c","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":14,"enriched":{"digest":"4af91430a715afdc","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-10T21:11:09","port":25575,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0018\u0000����\u000f\u000e<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"1800ffffffff0f0e<HONEYPOT>63e7010100","method":"","user_agent":"","ja3":"","session":"fa77ab5c-9dc3-4659-8c7b-164292a9180d","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":14,"enriched":{"digest":"4af91430a715afdc","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-10T18:14:10","port":25580,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0018\u0000����\u000f\u000e<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"1800ffffffff0f0e<HONEYPOT>63ec010100","method":"","user_agent":"","ja3":"","session":"a079e0f6-f4f7-441b-aeb1-f6fe5b7e3079","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":14,"enriched":{"digest":"4af91430a715afdc","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-10T16:04:32","port":25575,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0018\u0000����\u000f\u000e<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"1800ffffffff0f0e<HONEYPOT>63e7010100","method":"","user_agent":"","ja3":"","session":"e506e103-f3c0-4f3f-8994-8007cf4b8ea7","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":14,"enriched":{"digest":"4af91430a715afdc","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-10T16:04:11","port":25557,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0018\u0000����\u000f\u000e<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"1800ffffffff0f0e<HONEYPOT>63d5010100","method":"","user_agent":"","ja3":"","session":"aa494f7e-bd5b-4251-90af-56b43d6940ce","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":14,"enriched":{"digest":"4af91430a715afdc","strings":["<HONEYPOT>c"]}},{"timestamp":"2026-09-10T16:04:09","port":25561,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0018\u0000����\u000f\u000e<HONEYPOT>c�\u0001\u0001\u0000","payload_hex":"1800ffffffff0f0e<HONEYPOT>63d9010100","method":"","user_agent":"","ja3":"","session":"0aa161ac-cf93-46db-95e8-4d37e7c0d683","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":14,"enriched":{"digest":"4af91430a715afdc","strings":["<HONEYPOT>c"]}}],"http_methods":[],"distinct_ports_total":6,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-10T23:04:23.213324+00:00"}