{"ip":"68.183.218.22","data_as_of":"2026-10-24T16:54:15+00:00","observed":true,"total_events":191,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"34+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 34 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"33,188 bytes sent","bytes_sent":33188,"session_seconds":1,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-14T15:42:53","last_seen":"2026-10-14T15:43:25","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":1599,"proto":"tcp","label":"","count":6},{"port":2081,"proto":"tcp","label":"","count":6},{"port":442,"proto":"tcp","label":"","count":6},{"port":1925,"proto":"tcp","label":"","count":6},{"port":888,"proto":"tcp","label":"","count":6},{"port":1604,"proto":"tcp","label":"","count":6},{"port":1926,"proto":"tcp","label":"","count":6},{"port":2181,"proto":"tcp","label":"","count":6},{"port":1344,"proto":"tcp","label":"","count":6},{"port":513,"proto":"tcp","label":"","count":6},{"port":1207,"proto":"tcp","label":"","count":6},{"port":2077,"proto":"tcp","label":"","count":6},{"port":541,"proto":"tcp","label":"","count":6},{"port":2525,"proto":"tcp","label":"","count":6},{"port":1443,"proto":"tcp","label":"","count":6}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9","t13i1909h2_9dc949149365_97f8aa674fd9"],"tls_client_hello":"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","tls_ja3":["5af43e5eee17271a9eb37dce2ab407a8","e5c250b292fce278a62137836169e18f"],"http_akin":["b11cun040_00040016_aa48e2c8"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":3246,"t13i1909h2_9dc949149365_97f8aa674fd9":770,"b11cun040_00040016_aa48e2c8":5487},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-14","count":191}],"recent_events":[{"timestamp":"2026-10-14T15:43:25","port":853,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":853\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a203a3835330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"f51aa22a-fbe3-49da-9452-993d97fd6c18","seq":1,"duration_ms":104,"bytes_in":216,"bytes_out":78},{"timestamp":"2026-10-14T15:43:25","port":2525,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":2525\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a203a323532350d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"e2f548da-3724-483f-ac6d-a67372456645","seq":1,"duration_ms":101,"bytes_in":217,"bytes_out":78},{"timestamp":"2026-10-14T15:43:25","port":2525,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":2525\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a203a323532350d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"add85df2-61de-4f71-a3e2-2ec97e3a1fee","seq":1,"duration_ms":101,"bytes_in":215,"bytes_out":78},{"timestamp":"2026-10-14T15:43:25","port":2525,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":2525\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a203a323532350d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"28ca8b4f-dc8f-4d39-918f-bc28f420570a","seq":1,"duration_ms":103,"bytes_in":216,"bytes_out":78},{"timestamp":"2026-10-14T15:43:25","port":2525,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":2525\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.well-known/security.txt","summary":"","payload_hex":"474554202f2e77656c6c2d6b6e6f776e2f73656375726974792e74787420485454502f312e310d0a486f73743a203a323532350d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"c8bdf377-62df-42b7-abea-bac598a977b8","seq":1,"duration_ms":101,"bytes_in":229,"bytes_out":78},{"timestamp":"2026-10-14T15:43:24","port":2181,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":2181\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a203a323138310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"7a96e277-7d52-40ca-9e7f-1b7034b78588","seq":1,"duration_ms":170,"bytes_in":217,"bytes_out":78},{"timestamp":"2026-10-14T15:43:24","port":442,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":442\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon","summary":"","payload_hex":"474554202f66617669636f6e20485454502f312e310d0a486f73743a203a3434320d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"fe198be6-ef8d-44fb-8585-1463aa1b0848","seq":1,"duration_ms":150,"bytes_in":211,"bytes_out":78},{"timestamp":"2026-10-14T15:43:24","port":2103,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":2103\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.well-known/security.txt","summary":"","payload_hex":"474554202f2e77656c6c2d6b6e6f776e2f73656375726974792e74787420485454502f312e310d0a486f73743a203a323130330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"e95c95b2-a22e-4c51-b566-6881ec30bffe","seq":1,"duration_ms":100,"bytes_in":229,"bytes_out":78},{"timestamp":"2026-10-14T15:43:24","port":2103,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":2103\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a203a323130330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"c1cebda6-0abd-416b-b9b9-9a23e6c49631","seq":1,"duration_ms":106,"bytes_in":215,"bytes_out":78},{"timestamp":"2026-10-14T15:43:23","port":2103,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\":2103\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a203a323130330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"b2bbe6c6-c93a-4d6a-a061-4cff4471812c","seq":1,"duration_ms":102,"bytes_in":216,"bytes_out":78}],"http_methods":[{"method":"GET","count":150}],"distinct_ports_total":34,"top_paths":[{"path":"/","count":32,"ports":32},{"path":"/robots.txt","count":30,"ports":30},{"path":"/favicon.ico","count":29,"ports":29},{"path":"/security.txt","count":29,"ports":29},{"path":"/.well-known/security.txt","count":29,"ports":29},{"path":"/favicon","count":1,"ports":1}],"distinct_paths_total":6,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":145}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":":853","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[]}