{"ip":"92.205.28.187","total_events":207,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"10+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 10 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range.","Sent only 0 bytes in total: touching ports rather than interacting with what answers."],"engagement":{"level":"touch","label":"Touch only","detail":"0 bytes sent, no real exchange","bytes_sent":0,"session_seconds":0,"persistent":false}},"first_seen":"2026-05-05T03:28:06","last_seen":"2026-05-08T16:15:53","events_24h":0,"events_7d":0,"geo":{"country_code":"FR","country_name":"France","region":"Grand Est","city":"Strasbourg","lat":48.5848,"lon":7.7419,"asn":21499,"org":"Host Europe GmbH"},"source_domain":"187.28.205.92.host.secureserver.net","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":1022,"proto":"tcp","label":"","count":28},{"port":2201,"proto":"tcp","label":"","count":28},{"port":8022,"proto":"tcp","label":"","count":20},{"port":1080,"proto":"tcp","label":"SOCKS","count":20},{"port":102,"proto":"tcp","label":"","count":19},{"port":2022,"proto":"tcp","label":"","count":19},{"port":2222,"proto":"tcp","label":"SSH-alt","count":19},{"port":22,"proto":"tcp","label":"SSH","count":19},{"port":22222,"proto":"tcp","label":"","count":18},{"port":222,"proto":"tcp","label":"","count":17}],"fingerprints":{"ssh_hassh":["871d02a306268601bda0fc2af469da7e"],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{"871d02a306268601bda0fc2af469da7e":1},"user_agents":[],"timeline":[],"recent_events":[{"timestamp":"2026-05-08T16:15:53","port":2201,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-JSCH-0.1.54\n\u0000\u0000\u0002�\t\u0014o\u0018���מO\f\u001b\u001f�5q\u000b�\u0000\u0000\u0000�ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1\u0000\u0000\u0000Kssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521\u0000\u0000\u0000`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc\u0000\u0000\u0000`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc\u0000\u0000\u00009hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96\u0000\u0000\u00009hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u001b+V\f\n\u0006nz�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"33551bef-a7fb-4208-90a0-6ee7e233417a","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"b1dbf12b9ee8f3b9","label":"SSH","strings":["SSH-2.0-JSCH-0.1.54","ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-…","Kssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521","`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes2…","9hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96","none"]}},{"timestamp":"2026-05-08T16:15:53","port":2201,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-JSCH-0.1.54\n\u0000\u0000\u0002�\t\u0014����\u0003S����E�1���\u0000\u0000\u0000�ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1\u0000\u0000\u0000Kssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521\u0000\u0000\u0000`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc\u0000\u0000\u0000`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc\u0000\u0000\u00009hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96\u0000\u0000\u00009hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�P=��[2�W","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"a70afd86-40ca-4326-b11e-c1373411903d","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"02771470c3ba2160","label":"SSH","strings":["SSH-2.0-JSCH-0.1.54","ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-…","Kssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521","`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes2…","9hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96","none"]}},{"timestamp":"2026-05-08T16:15:53","port":2201,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-JSCH-0.1.54\n\u0000\u0000\u0002�\t\u0014�Ɯȡ\u001ej��W�\t�1��\u0000\u0000\u0000�ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1\u0000\u0000\u0000Kssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521\u0000\u0000\u0000`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc\u0000\u0000\u0000`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc\u0000\u0000\u00009hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96\u0000\u0000\u00009hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000`���\u0000a� �","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"3e07122b-e52d-498b-9998-0424c74eba42","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"64edd8f41a67a61a","label":"SSH","strings":["SSH-2.0-JSCH-0.1.54","ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-…","Kssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521","`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes2…","9hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96","none","none`"]}},{"timestamp":"2026-05-08T16:15:53","port":2201,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-JSCH-0.1.54\n\u0000\u0000\u0002�\t\u0014\u00039\u001a\f���\u0012��e-Bng\u0017\u0000\u0000\u0000�ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1\u0000\u0000\u0000Kssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521\u0000\u0000\u0000`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc\u0000\u0000\u0000`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc\u0000\u0000\u00009hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96\u0000\u0000\u00009hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u001d6���Kx|9","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b9f7fc58-6748-4f8f-a18f-8c3a220e6c46","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"f1d9b93e5627d0e8","label":"SSH","strings":["SSH-2.0-JSCH-0.1.54","e-Bng","ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-…","Kssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521","`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes2…","9hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96","none","Kx|9"]}},{"timestamp":"2026-05-08T16:15:53","port":2201,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000�\r\u0001\u0000\u0000\u0000\u0003\u0000\u0000\u0000gjava.lang.NullPointerException: Cannot invoke \"com.jcraft.jsch.Cipher.isCBC()\" because \"cipher\" is null\u0000\u0000\u0000\u0002en���\u0001�#��v\u001c���","payload_hex":"000000840d0100000003000000676a6176612e6c616e672e4e756c6c506f696e746572457863657074696f6e3a2043616e6e6f7420696e766f6b652022636f6d2e6a63726166742e6a7363682e4369706865722e69734342432829222062656361757365202263697068657222206973206e756c6c00000002656eecfd8f01e023eb99761c8be9fe","method":"","user_agent":"","ja3":"","session":"9066d51e-92c8-4965-a12b-7a2759ce1ccd","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"62ce3e49a09c636b","strings":["gjava.lang.NullPointerException: Cannot invoke \"com.jcraft.jsch.Cipher.isCBC()\" …"],"iocs":{"domains":["gjava.lang","com.jcraft.jsch.cipher.iscbc"]}}},{"timestamp":"2026-05-08T16:15:53","port":2201,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-JSCH-0.1.54\n\u0000\u0000\u0002�\t\u0014�������kB��,����\u0000\u0000\u0000�ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1\u0000\u0000\u0000Kssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521\u0000\u0000\u0000`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc\u0000\u0000\u0000`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc\u0000\u0000\u00009hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96\u0000\u0000\u00009hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000����Ut��t","payload_hex":"5353482d322e302d4a5343482d302e312e35340a000002840914c6e2f3d2d9fafb6b42c2c52c8fcac2c8000000b7656364682d736861322d6e697374703235362c656364682d736861322d6e697374703338342c656364682d736861322d6e697374703532312c6469666669652d68656c6c6d616e2d67726f757031342d736861312c6469666669652d68656c6c6d616e2d67726f75702d65786368616e67652d7368613235362c6469666669652d68656c6c6d616e2d67726f75702d65786368616e67652d736861312c6469666669652d68656c6c6d616e2d67726f7570312d736861310000004b7373682d7273612c7373682d6473732c65636473612d736861322d6e697374703235362c65636473612d736861322d6e697374703338342c65636473612d736861322d6e69737470353231000000606165733132382d6374722c6165733132382d6362632c336465732d6374722c336465732d6362632c626c6f77666973682d6362632c6165733139322d6374722c6165733139322d6362632c6165733235362d6374722c6165733235362d636263000000606165733132382d6374722c6165733132382d6362632c336465732d6374722c336465732d6362632c626c6f77666973682d6362632c6165733139322d6374722c6165733139322d6362632c6165733235362d6374722c6165733235362d63626300000039686d61632d6d64352c686d61632d736861312c686d61632d736861322d3235362c686d61632d736861312d39362c686d61632d6d64352d393600000039686d61632d6d64352c686d61632d736861312c686d61632d736861322d3235362c686d61632d736861312d39362c686d61632d6d64352d3936000000046e6f6e65000000046e6f6e65000000000000000000000000009890ded95574e3ba74","method":"","user_agent":"","ja3":"","session":"9066d51e-92c8-4965-a12b-7a2759ce1ccd","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"6d4e165134cf5a2f","label":"SSH","strings":["SSH-2.0-JSCH-0.1.54","ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-…","Kssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521","`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes2…","9hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96","none"]}},{"timestamp":"2026-05-08T16:15:53","port":2201,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000�\r\u0001\u0000\u0000\u0000\u0003\u0000\u0000\u0000gjava.lang.NullPointerException: Cannot invoke \"com.jcraft.jsch.Cipher.isCBC()\" because \"cipher\" is null\u0000\u0000\u0000\u0002en���\u000b���}�p/�#","payload_hex":"000000840d0100000003000000676a6176612e6c616e672e4e756c6c506f696e746572457863657074696f6e3a2043616e6e6f7420696e766f6b652022636f6d2e6a63726166742e6a7363682e4369706865722e69734342432829222062656361757365202263697068657222206973206e756c6c00000002656ea8ed9e0bfad1d17db0702f8723","method":"","user_agent":"","ja3":"","session":"ecdf81fe-1bdf-469d-885b-a33e39c88e71","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"694170975dd4563b","strings":["gjava.lang.NullPointerException: Cannot invoke \"com.jcraft.jsch.Cipher.isCBC()\" …"],"iocs":{"domains":["gjava.lang","com.jcraft.jsch.cipher.iscbc"]}}},{"timestamp":"2026-05-08T16:15:53","port":2201,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-JSCH-0.1.54\n\u0000\u0000\u0002�\t\u0014]\u0010��=�>�Hϕ�\u001c\n��\u0000\u0000\u0000�ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1\u0000\u0000\u0000Kssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521\u0000\u0000\u0000`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc\u0000\u0000\u0000`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc\u0000\u0000\u00009hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96\u0000\u0000\u00009hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�t��A��j","payload_hex":"5353482d322e302d4a5343482d302e312e35340a0000028409145d10aff93db03ec748cf959f1c0af58b000000b7656364682d736861322d6e697374703235362c656364682d736861322d6e697374703338342c656364682d736861322d6e697374703532312c6469666669652d68656c6c6d616e2d67726f757031342d736861312c6469666669652d68656c6c6d616e2d67726f75702d65786368616e67652d7368613235362c6469666669652d68656c6c6d616e2d67726f75702d65786368616e67652d736861312c6469666669652d68656c6c6d616e2d67726f7570312d736861310000004b7373682d7273612c7373682d6473732c65636473612d736861322d6e697374703235362c65636473612d736861322d6e697374703338342c65636473612d736861322d6e69737470353231000000606165733132382d6374722c6165733132382d6362632c336465732d6374722c336465732d6362632c626c6f77666973682d6362632c6165733139322d6374722c6165733139322d6362632c6165733235362d6374722c6165733235362d636263000000606165733132382d6374722c6165733132382d6362632c336465732d6374722c336465732d6362632c626c6f77666973682d6362632c6165733139322d6374722c6165733139322d6362632c6165733235362d6374722c6165733235362d63626300000039686d61632d6d64352c686d61632d736861312c686d61632d736861322d3235362c686d61632d736861312d39362c686d61632d6d64352d393600000039686d61632d6d64352c686d61632d736861312c686d61632d736861322d3235362c686d61632d736861312d39362c686d61632d6d64352d3936000000046e6f6e65000000046e6f6e6500000000000000000000000000f57482f241b2f66a7f","method":"","user_agent":"","ja3":"","session":"ecdf81fe-1bdf-469d-885b-a33e39c88e71","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"b91ac3a22ee2804d","label":"SSH","strings":["SSH-2.0-JSCH-0.1.54","ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-…","Kssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521","`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes2…","9hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96","none"]}},{"timestamp":"2026-05-08T11:20:52","port":1022,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-JSCH-0.1.54\n\u0000\u0000\u0002�\t\u0014�W����ݟ̛�x��i�\u0000\u0000\u0000�ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1\u0000\u0000\u0000Kssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521\u0000\u0000\u0000`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc\u0000\u0000\u0000`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc\u0000\u0000\u00009hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96\u0000\u0000\u00009hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000.b$�ԂY9�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"6ecff15d-3223-441c-b528-5b50c97b2d9e","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"7a75d994ccb39edd","label":"SSH","strings":["SSH-2.0-JSCH-0.1.54","ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-…","Kssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521","`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes2…","9hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96","none","none.b$"]}},{"timestamp":"2026-05-08T11:20:52","port":1022,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-JSCH-0.1.54\n\u0000\u0000\u0002�\t\u0014F���b�)6��x��\u00063\u0000\u0000\u0000�ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1\u0000\u0000\u0000Kssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521\u0000\u0000\u0000`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc\u0000\u0000\u0000`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc\u0000\u0000\u00009hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96\u0000\u0000\u00009hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�\u000eu\u001c�����","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c44bfebe-c7ed-4418-af87-858a3596e8d8","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"21de4b59e9d3737b","label":"SSH","strings":["SSH-2.0-JSCH-0.1.54","ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-…","Kssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521","`aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes2…","9hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96","none"]}}],"http_methods":[],"distinct_ports_total":10,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[{"value":"SSH-2.0-JSCH-0.1.54","count":181}],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T03:00:56.459996+00:00"}