{"ip":"82.152.117.6","total_events":11996,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"6270+ ports swept","confidence":"medium","network_type":"nsp","why":["No exploit payloads observed.","Swept 6270 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"276,542 bytes sent","bytes_sent":276542,"session_seconds":30,"persistent":false}},"first_seen":"2026-09-13T22:08:23","last_seen":"2026-09-13T22:20:37","events_24h":11996,"events_7d":11996,"geo":{"country_code":"IN","country_name":"India","region":"Maharashtra","city":"Mumbai","lat":19.0748,"lon":72.8856,"asn":137409,"org":"GSL Networks Pty LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as137409","label":"Global Secure Layer","category":"isp","url":"https://www.peeringdb.com/asn/137409"},"cve_matches":[],"malware":[],"top_ports":[{"port":339,"proto":"tcp","label":"","count":6},{"port":97,"proto":"tcp","label":"","count":6},{"port":816,"proto":"tcp","label":"","count":6},{"port":471,"proto":"tcp","label":"","count":6},{"port":536,"proto":"tcp","label":"","count":6},{"port":49602,"proto":"tcp","label":"","count":6},{"port":296,"proto":"tcp","label":"","count":6},{"port":482,"proto":"tcp","label":"","count":6},{"port":42421,"proto":"tcp","label":"","count":6},{"port":30256,"proto":"tcp","label":"","count":6},{"port":483,"proto":"tcp","label":"","count":6},{"port":423,"proto":"tcp","label":"","count":6},{"port":11145,"proto":"tcp","label":"","count":6},{"port":42891,"proto":"tcp","label":"","count":5},{"port":3461,"proto":"tcp","label":"","count":5}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-13","count":11996}],"recent_events":[{"timestamp":"2026-09-13T22:20:37","port":56249,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>۹\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>dbb9010100","method":"","user_agent":"","ja3":"","session":"6bb88493-7dab-4630-bb4e-eea63ea358a7","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":12,"enriched":{"digest":"83a55c585399edfa","strings":["<HONEYPOT>"]}},{"timestamp":"2026-09-13T22:20:35","port":57260,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>߬\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>dfac010100","method":"","user_agent":"","ja3":"","session":"6239f721-2bc5-456c-8589-cf7c70c44b9c","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":12,"enriched":{"digest":"e9195969f003ee24","strings":["<HONEYPOT>"]}},{"timestamp":"2026-09-13T22:20:23","port":54818,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�\"\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>d622010100","method":"","user_agent":"","ja3":"","session":"5fbce255-5683-41d9-80b9-306fa601c954","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":12,"enriched":{"digest":"016407af077f2a60","strings":["<HONEYPOT>"]}},{"timestamp":"2026-09-13T22:20:23","port":54902,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�v\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>d676010100","method":"","user_agent":"","ja3":"","session":"26d3fd83-33c1-44d0-adc2-f44558553f13","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":12,"enriched":{"digest":"87be79bf2a02ea97","strings":["<HONEYPOT>"]}},{"timestamp":"2026-09-13T22:20:23","port":56797,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>��\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>dddd010100","method":"","user_agent":"","ja3":"","session":"ebfe21aa-37cd-42af-982c-9f207d15a233","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":12,"enriched":{"digest":"4170428daf5f24f8","strings":["<HONEYPOT>"]}},{"timestamp":"2026-09-13T22:20:23","port":56783,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>��\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>ddcf010100","method":"","user_agent":"","ja3":"","session":"90518f9d-a294-4189-ae53-18d8bf23b80d","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":12,"enriched":{"digest":"4170428daf5f24f8","strings":["<HONEYPOT>"]}},{"timestamp":"2026-09-13T22:20:19","port":56637,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�=\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>dd3d010100","method":"","user_agent":"","ja3":"","session":"259f10bd-61b0-401c-965c-b63521bdf2f5","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":12,"enriched":{"digest":"c6be173b10d11efe","strings":["<HONEYPOT>"]}},{"timestamp":"2026-09-13T22:20:18","port":56750,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>ݮ\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>ddae010100","method":"","user_agent":"","ja3":"","session":"d31a1b52-d03b-44d4-b2ba-864b7a6fa402","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":12,"enriched":{"digest":"838e9c0102db3f9e","strings":["<HONEYPOT>"]}},{"timestamp":"2026-09-13T22:20:13","port":56183,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0000�\u0005\u000e<HONEYPOT>�w\u0001\u0001\u0000","payload_hex":"1500fc050e<HONEYPOT>db77010100","method":"","user_agent":"","ja3":"","session":"1863ebc6-ede3-471c-876d-6b435df8b395","seq":1,"duration_ms":0,"bytes_in":24,"bytes_out":12,"enriched":{"digest":"f973fc5663079b36","strings":["<HONEYPOT>"]}},{"timestamp":"2026-09-13T22:20:12","port":57221,"proto":"tcp","app_proto":"","app_protocol":"websocket","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0000","payload_hex":"0100","method":"","user_agent":"","ja3":"","session":"4ba08388-7efd-4e4d-9556-c884b1fa5747","seq":2,"duration_ms":8284,"bytes_in":24,"bytes_out":24}],"http_methods":[],"distinct_ports_total":6270,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-14T00:00:45.632016+00:00"}