{"ip":"69.33.198.5","total_events":4299,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"2240+ ports swept","confidence":"medium","network_type":"nsp","why":["No exploit payloads observed.","Swept 2240 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"99,050 bytes sent","bytes_sent":99050,"session_seconds":29,"persistent":false}},"first_seen":"2026-09-08T20:01:48","last_seen":"2026-09-08T20:08:45","events_24h":0,"events_7d":4299,"geo":{"country_code":"HK","country_name":"Hong Kong","region":"","city":"Hong Kong","lat":22.2842,"lon":114.1759,"asn":137409,"org":"GSL Networks Pty LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as137409","label":"Global Secure Layer","category":"isp","url":"https://www.peeringdb.com/asn/137409"},"cve_matches":[],"malware":[],"top_ports":[{"port":10779,"proto":"tcp","label":"","count":5},{"port":22588,"proto":"tcp","label":"","count":4},{"port":33393,"proto":"tcp","label":"","count":4},{"port":27188,"proto":"tcp","label":"","count":4},{"port":10234,"proto":"tcp","label":"","count":4},{"port":18072,"proto":"tcp","label":"","count":4},{"port":27047,"proto":"tcp","label":"","count":4},{"port":15836,"proto":"tcp","label":"","count":4},{"port":6623,"proto":"tcp","label":"","count":4},{"port":30333,"proto":"tcp","label":"","count":4},{"port":32172,"proto":"tcp","label":"","count":4},{"port":31560,"proto":"tcp","label":"","count":4},{"port":12275,"proto":"tcp","label":"","count":4},{"port":26698,"proto":"tcp","label":"","count":4},{"port":16321,"proto":"tcp","label":"","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-08","count":4299}],"recent_events":[{"timestamp":"2026-09-08T20:08:45","port":32755,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>7ff3010100","method":"","user_agent":"","ja3":"","session":"68e67ffe-ca76-4897-bde5-6ff5ae34c9c8","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":11,"enriched":{"digest":"321d25ee1ed211d6","strings":["<HONEYPOT>"]}},{"timestamp":"2026-09-08T20:08:28","port":31184,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>y�\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>79d0010100","method":"","user_agent":"","ja3":"","session":"d4c28666-2d1e-4034-867e-e9a4ab5d16cd","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":11,"enriched":{"digest":"d3f656fc1bab50e5","strings":["<HONEYPOT>y"]}},{"timestamp":"2026-09-08T20:08:28","port":31478,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>z�\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>7af6010100","method":"","user_agent":"","ja3":"","session":"2523ae80-b1ae-424a-b041-27b506212743","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":11,"enriched":{"digest":"78149ac2517893ca","strings":["<HONEYPOT>z"]}},{"timestamp":"2026-09-08T20:08:26","port":33022,"proto":"tcp","app_proto":"","app_protocol":"websocket","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","ja3":"","session":"9ab49abc-6213-42d6-8427-6344ad43afba","seq":2,"duration_ms":2863,"bytes_in":24,"bytes_out":22},{"timestamp":"2026-09-08T20:08:26","port":33015,"proto":"tcp","app_proto":"","app_protocol":"websocket","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","ja3":"","session":"24c1a406-b2cf-40c3-a818-c3f42c5c48d2","seq":2,"duration_ms":3077,"bytes_in":24,"bytes_out":22},{"timestamp":"2026-09-08T20:08:26","port":33317,"proto":"tcp","app_proto":"","app_protocol":"websocket","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","ja3":"","session":"75396cfd-8581-4665-990b-14b5a557efc7","seq":2,"duration_ms":3070,"bytes_in":24,"bytes_out":22},{"timestamp":"2026-09-08T20:08:26","port":33078,"proto":"tcp","app_proto":"","app_protocol":"websocket","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","ja3":"","session":"4b80f579-a4cd-4194-9f9c-67d46bae370e","seq":2,"duration_ms":3064,"bytes_in":24,"bytes_out":22},{"timestamp":"2026-09-08T20:08:26","port":33055,"proto":"tcp","app_proto":"","app_protocol":"websocket","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","ja3":"","session":"1ccb74cd-99db-4ba9-b974-a57e7fdc9652","seq":2,"duration_ms":3073,"bytes_in":24,"bytes_out":22},{"timestamp":"2026-09-08T20:08:26","port":33297,"proto":"tcp","app_proto":"","app_protocol":"websocket","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","ja3":"","session":"d9120b9f-6afc-4b14-a930-3a2c0b297c73","seq":2,"duration_ms":3071,"bytes_in":24,"bytes_out":22},{"timestamp":"2026-09-08T20:08:26","port":33278,"proto":"tcp","app_proto":"","app_protocol":"websocket","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","ja3":"","session":"397475fb-5fa3-4c1c-b56f-8beb77197545","seq":2,"duration_ms":3065,"bytes_in":24,"bytes_out":22}],"http_methods":[],"distinct_ports_total":2240,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-10T22:16:08.793291+00:00"}