{"ip":"209.99.188.148","total_events":13,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"network services","why":["13 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."]},"first_seen":"2026-06-02T22:03:44","last_seen":"2026-07-02T10:02:19","events_24h":0,"events_7d":4,"geo":{"country_code":"CH","country_name":"Switzerland","region":"Zurich","city":"Zurich","lat":47.3643,"lon":8.5437,"asn":402253,"org":"SKN Subnet & Telecom Ltd"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":2255,"proto":"tcp","label":"","count":4},{"port":2244,"proto":"tcp","label":"","count":2},{"port":2122,"proto":"tcp","label":"","count":2},{"port":25522,"proto":"tcp","label":"","count":1},{"port":33222,"proto":"tcp","label":"","count":1},{"port":9011,"proto":"tcp","label":"","count":1},{"port":10002,"proto":"tcp","label":"","count":1},{"port":7777,"proto":"tcp","label":"Oracle","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-06-02","count":2},{"date":"2026-06-10","count":1},{"date":"2026-06-12","count":1},{"date":"2026-06-13","count":3},{"date":"2026-06-18","count":1},{"date":"2026-06-19","count":1},{"date":"2026-07-02","count":4}],"recent_events":[{"timestamp":"2026-07-02T10:02:19","port":2255,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:9vilFsf6Z/Xf2cYRvhTqn8S8lFg=","ja3":"","session":"244557d8-999b-4340-ba2a-1d4ee5744111","seq":1,"duration_ms":218,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-07-02T01:40:24","port":2255,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:aakJnyoZwk3vzKrrYes3xWZO6EQ=","ja3":"","session":"d1778fdf-0103-4d3c-bbda-80ae4101b0bd","seq":1,"duration_ms":206,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-07-02T01:37:26","port":2255,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:HI56eDDeZCeh0Vf2yoPr2uMcoTk=","ja3":"","session":"fec9e2df-d495-4336-a8d0-a8e2d1dae5bf","seq":1,"duration_ms":205,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-07-02T01:32:38","port":2255,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:iafk8FmmmqnF8OdQLcfLboBwBmw=","ja3":"","session":"16ae1d81-c461-4efd-838d-9dd9335d93fa","seq":1,"duration_ms":122,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-06-19T09:18:22","port":7777,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:LNBEolf2y0v17Yvo2rWsr8U0Kjs=","ja3":"","session":"ac3e88af-79ad-4e97-9bd8-4cd75127c144","seq":1,"duration_ms":206,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-06-18T05:26:13","port":33222,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:DrYlRsVTbK572er7s5+Fyq/tn7E=","ja3":"","session":"271d7cfc-fe21-420e-9c7d-685e0b0fad1b","seq":1,"duration_ms":205,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-06-13T20:11:24","port":2244,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:auZl+DT1GeRFF89KI5JCgHd0xDQ=","ja3":"","session":"b59b16a9-4e14-4f66-8027-05f779b4c6cf","seq":1,"duration_ms":176,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-06-13T20:09:44","port":2244,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:/Ld8tK9THgxAI119j0MhkAUQWDM=","ja3":"","session":"e5643d35-557f-4390-bde6-8c6f8fe4f685","seq":1,"duration_ms":206,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-06-13T10:57:36","port":10002,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:Ke1x4pwRzlbCeag3NhkZO/8Gec8=","ja3":"","session":"a9de6d5c-b139-4660-ac8d-2c6b8dc08fe1","seq":1,"duration_ms":206,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-06-12T13:04:42","port":25522,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:NKFcR/v+cWuOlEIaAufVUvdrt60=","ja3":"","session":"f3ba127f-e4e8-4992-addb-b0cf98e22c0f","seq":1,"duration_ms":122,"bytes_in":17,"bytes_out":14,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}}],"http_methods":[],"distinct_ports_total":8,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[{"value":"SSH-2.0-OpenSSH","count":13}],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-08T13:27:27.942040+00:00"}