{"ip":"185.242.3.110","total_events":217,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"3 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["3 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"9,048 bytes sent","bytes_sent":9048,"session_seconds":1,"persistent":false}},"first_seen":"2026-06-29T07:42:46","last_seen":"2026-08-11T14:56:14","events_24h":0,"events_7d":192,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"","city":"","lat":52.3824,"lon":4.8995,"asn":401626,"org":"Netiface America, Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":23},{"port":22202,"proto":"tcp","label":"","count":2},{"port":22017,"proto":"tcp","label":"","count":2},{"port":22213,"proto":"tcp","label":"","count":2},{"port":20018,"proto":"tcp","label":"","count":2},{"port":20008,"proto":"tcp","label":"","count":2},{"port":2018,"proto":"tcp","label":"","count":2},{"port":20013,"proto":"tcp","label":"","count":2},{"port":2210,"proto":"tcp","label":"","count":2},{"port":22217,"proto":"tcp","label":"","count":2},{"port":2201,"proto":"tcp","label":"","count":2},{"port":20000,"proto":"tcp","label":"","count":2},{"port":22014,"proto":"tcp","label":"","count":2},{"port":22203,"proto":"tcp","label":"","count":2},{"port":2212,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9"],"tls_ja3":["19e29534fd49dd27d09234e639c4057e"],"ja4h":["ge11nn0500_9af7e0472034"]},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":1503,"ge11nn0500_9af7e0472034":704},"user_agents":["Lynx/2.8.7dev.4 libwww-FM/2.14 SSL-MM/1.4.1 OpenSSL/0.9.8d","Mozilla/5.0 (Linux; Android 8.1.0; SM-G610M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36","Mozilla/5.0 (SymbianOS/9.1; U; de) AppleWebKit/413 (KHTML, like Gecko) Safari/413","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3803.0 Safari/537.36 Edg/76.0.174.0","Mozilla/5.0 (Linux; Android 7.1.2; Redmi 4X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36","Mozilla/5.0 (X11; Linux i686; rv:49.0) Gecko/20100101 Firefox/49.0"],"timeline":[{"date":"2026-06-29","count":3},{"date":"2026-06-30","count":3},{"date":"2026-07-03","count":1},{"date":"2026-07-04","count":1},{"date":"2026-07-11","count":2},{"date":"2026-07-22","count":15},{"date":"2026-08-10","count":12},{"date":"2026-08-11","count":180}],"recent_events":[{"timestamp":"2026-08-11T14:56:14","port":22023,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"6fa506de-177f-4c66-a71f-57f4915f78f9","seq":1,"duration_ms":138,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-08-11T14:55:49","port":20002,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"26bb561f-4ce2-4398-8f34-e6ff2e30970a","seq":1,"duration_ms":115,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-08-11T14:55:35","port":2213,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"a1bd8ad6-7bdc-48a4-a6fc-74e75ea6dc79","seq":1,"duration_ms":115,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-08-11T14:55:32","port":22000,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"e82d9f14-f96b-4232-8bcc-64303737b587","seq":1,"duration_ms":117,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-08-11T14:55:27","port":20020,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"029bc7fe-7b6a-46cb-b7ef-baa658e78561","seq":1,"duration_ms":183,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-08-11T14:55:23","port":22221,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"ff80e8e0-17d2-4b06-a00e-b200d53cc5f7","seq":1,"duration_ms":115,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-08-11T14:55:22","port":2021,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"c0968929-24d5-40c4-ae5d-91eebcd57ff6","seq":1,"duration_ms":117,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-08-11T14:55:22","port":22203,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"d1ed2ad2-58d0-4047-b180-bed0490762b1","seq":1,"duration_ms":116,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-08-11T14:55:13","port":22015,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"9dd5ec21-1373-4032-8f36-11a41f50bb7f","seq":1,"duration_ms":115,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-08-11T14:55:10","port":22008,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","ja3":"","session":"4f8a732c-76ad-4c68-ab79-629793967e93","seq":1,"duration_ms":116,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}}],"http_methods":[{"method":"GET","count":25}],"distinct_ports_total":157,"top_paths":[{"path":"/.env","count":14,"ports":1},{"path":"/laravel/.env","count":4,"ports":1},{"path":"/app/.env","count":4,"ports":2},{"path":"/%2eenv","count":3,"ports":2}],"distinct_paths_total":4,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[{"value":"SSH-2.0-OpenSSH","count":192}],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T10:39:05.965600+00:00"}