{"ip":"160.119.71.211","total_events":17,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["17 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"289 bytes sent","bytes_sent":289,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-22T01:30:23","last_seen":"2026-08-13T17:52:20","events_24h":0,"events_7d":7,"geo":{"country_code":"SC","country_name":"Seychelles","region":"","city":"","lat":-4.5833,"lon":55.6667,"asn":49870,"org":"Alsycon B.V."},"source_domain":"160-119-71-211.ptr.as49870.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as49870","label":"Alsycon AS49870","category":"isp","url":"https://www.peeringdb.com/asn/49870"},"cve_matches":[],"malware":[],"top_ports":[{"port":9011,"proto":"tcp","label":"","count":4},{"port":3005,"proto":"tcp","label":"","count":3},{"port":229,"proto":"tcp","label":"","count":2},{"port":2222,"proto":"tcp","label":"SSH-alt","count":2},{"port":2290,"proto":"tcp","label":"","count":2},{"port":2322,"proto":"tcp","label":"","count":2},{"port":222,"proto":"tcp","label":"","count":1},{"port":3022,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-22","count":6},{"date":"2026-08-06","count":2},{"date":"2026-08-07","count":2},{"date":"2026-08-08","count":2},{"date":"2026-08-11","count":3},{"date":"2026-08-13","count":2}],"recent_events":[{"timestamp":"2026-08-13T17:52:20","port":2322,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"6d651719-5e6f-4bf3-b84a-d8df012f0617","seq":1,"duration_ms":108,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-08-13T17:50:58","port":2322,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"0da75778-ae3b-4f07-9684-5cb168b42c97","seq":1,"duration_ms":111,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-08-11T19:57:27","port":3005,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"52936612-ed7e-46a7-8d79-6beb9ab440a0","seq":1,"duration_ms":195,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-08-11T19:55:46","port":3005,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"ae36ecb4-0ea2-4b83-b991-5ebca8649059","seq":1,"duration_ms":195,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-08-11T19:37:06","port":3005,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"423d8cba-37a8-487b-84d3-311785f81668","seq":1,"duration_ms":112,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-08-08T20:44:38","port":9011,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"ebd6d248-a73e-432a-b9d9-26489486de5c","seq":1,"duration_ms":108,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-08-08T20:43:19","port":9011,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"b96ddba7-b816-4f05-a354-ca8025ee4e16","seq":1,"duration_ms":111,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-08-07T11:13:37","port":2290,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"32dd5133-c14a-4980-913e-d0bbd5b11c11","seq":1,"duration_ms":108,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-08-07T11:13:24","port":2290,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"7ea63419-af73-4f30-819a-faead1d18c29","seq":1,"duration_ms":111,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-08-06T23:10:55","port":3022,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"32f0805e-4ef4-4a9e-b1d9-eb6357c1c28d","seq":1,"duration_ms":111,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}}],"http_methods":[],"distinct_ports_total":8,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[{"value":"SSH-2.0-OpenSSH","count":17}],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T08:45:48.011724+00:00"}