{"ip":"64.188.64.137","total_events":39,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"39+ ports swept","confidence":"medium","network_type":"enterprise","why":["No exploit payloads observed.","Swept 39 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."]},"first_seen":"2026-06-27T19:36:17","last_seen":"2026-06-27T20:42:38","events_24h":0,"events_7d":0,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":215439,"org":"Play2go International Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as215439","label":"PLAY2GO","category":"enterprise","url":"https://www.peeringdb.com/asn/215439"},"cve_matches":[],"malware":[],"top_ports":[{"port":6002,"proto":"tcp","label":"","count":1},{"port":6000,"proto":"tcp","label":"X11","count":1},{"port":2233,"proto":"tcp","label":"","count":1},{"port":40032,"proto":"tcp","label":"","count":1},{"port":50002,"proto":"tcp","label":"","count":1},{"port":30022,"proto":"tcp","label":"","count":1},{"port":3022,"proto":"tcp","label":"","count":1},{"port":23,"proto":"tcp","label":"Telnet","count":1},{"port":44444,"proto":"tcp","label":"","count":1},{"port":20002,"proto":"tcp","label":"","count":1},{"port":6022,"proto":"tcp","label":"","count":1},{"port":7722,"proto":"tcp","label":"","count":1},{"port":9032,"proto":"tcp","label":"","count":1},{"port":5032,"proto":"tcp","label":"","count":1},{"port":40002,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-06-27","count":39}],"recent_events":[{"timestamp":"2026-06-27T20:42:38","port":50032,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:4OOJdxmvdtDPcOEJomwgEGGw2cs=","ja3":"","session":"00f51ab7-0fc2-48a7-9d0e-6798cfdf78dc","seq":1,"duration_ms":105,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-06-27T20:42:25","port":50022,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:AvcK4fSzYZF53jF6bH5FC/Qw+v4=","ja3":"","session":"2f0883c7-9840-486c-b963-17028225ae06","seq":1,"duration_ms":106,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-06-27T20:41:23","port":2233,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:woiwcVdx/bb9R4lqTuxYB1kT45k=","ja3":"","session":"4c9b5cbf-7c0e-47ab-85b4-38b94e171f8d","seq":1,"duration_ms":106,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-06-27T20:31:02","port":30022,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:HBfqVxAhkF6E+lUidB+e3+tsqZY=","ja3":"","session":"e4aeb8d1-6c93-4c67-9213-a2979a3e422b","seq":1,"duration_ms":106,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-06-27T20:14:03","port":2032,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:86C9mOJLqykGDGR9LEyb6NnYTeQ=","ja3":"","session":"066cc3e8-fe27-4670-83d3-24b7976b6fc7","seq":1,"duration_ms":107,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-06-27T19:57:33","port":45022,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:ykvmFqrTmIeJyo478oI19lCFc/Q=","ja3":"","session":"93dd5629-094f-4dd4-b334-7a21b8c3e1b0","seq":1,"duration_ms":106,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-06-27T19:57:17","port":40032,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:KRgrueQgR5npCeXW0fTq7L9nhB8=","ja3":"","session":"6cee6a62-03e0-4dff-91e6-8b1ee64e7b25","seq":1,"duration_ms":106,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-06-27T19:54:32","port":7002,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:9LbaxUrBK7ixa4IwoEHvpGkQ8yE=","ja3":"","session":"27dfea97-0964-4ff9-886e-b136272a7bbb","seq":1,"duration_ms":106,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-06-27T19:53:22","port":4844,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:ma8JvXuK4nxcS2zBKZwWuT57bVY=","ja3":"","session":"4f0b08ac-f26d-40fc-a475-9910ee2ded88","seq":1,"duration_ms":106,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}},{"timestamp":"2026-06-27T19:50:34","port":7722,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-OpenSSH\r\n","payload_hex":"5353482d322e302d4f70656e5353480d0a","method":"","user_agent":"","community_id":"1:9y/C88wK1HtmFgcuX9n9mY/XYUo=","ja3":"","session":"097f7ee3-bfb0-48b1-9115-dff3d580d63d","seq":1,"duration_ms":109,"bytes_in":17,"bytes_out":13,"enriched":{"digest":"d0c1a40494b9d799","label":"SSH","strings":["SSH-2.0-OpenSSH"]}}],"http_methods":[],"distinct_ports_total":39,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[{"value":"SSH-2.0-OpenSSH","count":39}],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-05T21:18:45.542651+00:00"}