{"ip":"94.26.106.53","total_events":28,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"13+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 13 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"17,081 bytes sent","bytes_sent":17081,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-09T17:31:30","last_seen":"2026-09-13T12:47:21","events_24h":12,"events_7d":28,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":197170,"org":"TechTies Inc."},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":2008,"proto":"tcp","label":"","count":4},{"port":29778,"proto":"tcp","label":"","count":4},{"port":23508,"proto":"tcp","label":"","count":3},{"port":1011,"proto":"tcp","label":"","count":3},{"port":62757,"proto":"tcp","label":"","count":2},{"port":47612,"proto":"tcp","label":"","count":2},{"port":42172,"proto":"tcp","label":"","count":2},{"port":36568,"proto":"tcp","label":"","count":2},{"port":46681,"proto":"tcp","label":"","count":2},{"port":8888,"proto":"tcp","label":"HTTP-alt","count":1},{"port":17728,"proto":"tcp","label":"","count":1},{"port":63558,"proto":"tcp","label":"","count":1},{"port":26063,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":["a591c4ddccc960a2da8099958270fc92"],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{"a591c4ddccc960a2da8099958270fc92":72},"user_agents":[],"timeline":[{"date":"2026-09-09","count":2},{"date":"2026-09-10","count":6},{"date":"2026-09-11","count":5},{"date":"2026-09-12","count":7},{"date":"2026-09-13","count":8}],"recent_events":[{"timestamp":"2026-09-13T12:47:21","port":29778,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000P^\u001aj5\u0000","payload_hex":"040100505e1a6a3500","method":"","user_agent":"","ja3":"","session":"770b4fec-4ce3-43b8-b44e-68e77b604bfb","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":12},{"timestamp":"2026-09-13T12:47:21","port":29778,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT 94.26.106.53:80 HTTP/1.0\r\nHost: 94.26.106.53:80\r\n\r\n","payload_hex":"434f4e4e4543542039342e32362e3130362e35333a383020485454502f312e300d0a486f73743a2039342e32362e3130362e35333a38300d0a0d0a","method":"","user_agent":"","ja3":"","session":"6b41b37f-8776-43b7-b6f1-315987e7b6dc","seq":1,"duration_ms":100,"bytes_in":59,"bytes_out":12,"enriched":{"digest":"dc66bc21949a8300","label":"HTTP","strings":["CONNECT 94.26.106.53:80 HTTP/1.0","Host: 94.26.106.53:80"],"iocs":{"ips":["94.26.106.53"]}}},{"timestamp":"2026-09-13T12:47:21","port":29778,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-libssh_0.12.0\r\n\u0000\u0000\u0004�\u0005\u0014Sj�jT�m\u0013L��\u001a�[��\u0000\u0000\u0001�mlkem768x25519-sha256,mlkem768nistp256-sha256,mlkem1024nistp384-sha384,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com\u0000\u0000\u0000�ssh-ed25519,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa\u0000\u0000\u0000�chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc\u0000\u0000\u0000�chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc\u0000\u0000\u0000ahmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1\u0000\u0000\u0000ahmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1\u0000\u0000\u0000\u0015none,zlib@openssh.com\u0000\u0000\u0000\u0015none,zlib@openssh.com\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"5353482d322e302d6c69627373685f302e31322e300d0a000004ec0514536ae76a54e96d134c9a961af55bccec000001e96d6c6b656d3736387832353531392d7368613235362c6d6c6b656d3736386e697374703235362d7368613235362c6d6c6b656d313032346e697374703338342d7368613338342c736e747275703736317832353531392d7368613531322c736e747275703736317832353531392d736861353132406f70656e7373682e636f6d2c637572766532353531392d7368613235362c637572766532353531392d736861323536406c69627373682e6f72672c656364682d736861322d6e697374703235362c656364682d736861322d6e697374703338342c656364682d736861322d6e697374703532312c6469666669652d68656c6c6d616e2d67726f757031382d7368613531322c6469666669652d68656c6c6d616e2d67726f757031362d7368613531322c6469666669652d68656c6c6d616e2d67726f75702d65786368616e67652d7368613235362c6469666669652d68656c6c6d616e2d67726f757031342d7368613235362c6469666669652d68656c6c6d616e2d67726f75702d65786368616e67652d736861312c6469666669652d68656c6c6d616e2d67726f7570312d736861312c6469666669652d68656c6c6d616e2d67726f757031342d736861312c6578742d696e666f2d632c6b65782d7374726963742d632d763030406f70656e7373682e636f6d000000a77373682d656432353531392c65636473612d736861322d6e697374703532312c65636473612d736861322d6e697374703338342c65636473612d736861322d6e697374703235362c736b2d7373682d65643235353139406f70656e7373682e636f6d2c736b2d65636473612d736861322d6e69737470323536406f70656e7373682e636f6d2c7273612d736861322d3531322c7273612d736861322d3235362c7373682d7273610000009663686163686132302d706f6c7931333035406f70656e7373682e636f6d2c6165733235362d67636d406f70656e7373682e636f6d2c6165733132382d67636d406f70656e7373682e636f6d2c6165733235362d6374722c6165733139322d6374722c6165733132382d6374722c336465732d6362632c6165733132382d6362632c6165733139322d6362632c6165733235362d6362630000009663686163686132302d706f6c7931333035406f70656e7373682e636f6d2c6165733235362d67636d406f70656e7373682e636f6d2c6165733132382d67636d406f70656e7373682e636f6d2c6165733235362d6374722c6165733139322d6374722c6165733132382d6374722c336465732d6362632c6165733132382d6362632c6165733139322d6362632c6165733235362d63626300000061686d61632d736861322d3235362d65746d406f70656e7373682e636f6d2c686d61632d736861322d3531322d65746d406f70656e7373682e636f6d2c686d61632d736861322d3235362c686d61632d736861322d3531322c686d61632d7368613100000061686d61632d736861322d3235362d65746d406f70656e7373682e636f6d2c686d61632d736861322d3531322d65746d406f70656e7373682e636f6d2c686d61632d736861322d3235362c686d61632d736861322d3531322c686d61632d73686131000000156e6f6e652c7a6c6962406f70656e7373682e636f6d000000156e6f6e652c7a6c6962406f70656e7373682e636f6d000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"519a9bbe-fec0-48dd-af62-93b48cfaf38c","seq":1,"duration_ms":205,"bytes_in":1287,"bytes_out":12,"enriched":{"digest":"92ba17bc0701f672","label":"SSH","strings":["SSH-2.0-libssh_0.12.0","mlkem768x25519-sha256,mlkem768nistp256-sha256,mlkem1024nistp384-sha384,sntrup761…","ssh-ed25519,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256,sk-ssh-e…","chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes2…","ahmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-…","none,zlib@openssh.com"],"iocs":{"domains":["openssh.com"]}}},{"timestamp":"2026-09-13T12:47:20","port":29778,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0002\u0000\u0002","payload_hex":"05020002","method":"","user_agent":"","ja3":"","session":"eeada213-8725-43a6-b4c2-117cd3669419","seq":1,"duration_ms":101,"bytes_in":4,"bytes_out":12,"enriched":{"digest":"bb32f1da18a34784","label":"SOCKS5"}},{"timestamp":"2026-09-13T11:12:17","port":1011,"proto":"tcp","app_proto":"","app_protocol":"socks5","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005\u0002\u0000\u0002","payload_hex":"05020002","method":"","user_agent":"","ja3":"","session":"1de74ac1-d042-4095-b49c-ee7579a9ac8d","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":12,"enriched":{"digest":"bb32f1da18a34784","label":"SOCKS5"}},{"timestamp":"2026-09-13T11:12:16","port":1011,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT 94.26.106.53:80 HTTP/1.0\r\nHost: 94.26.106.53:80\r\n\r\n","payload_hex":"434f4e4e4543542039342e32362e3130362e35333a383020485454502f312e300d0a486f73743a2039342e32362e3130362e35333a38300d0a0d0a","method":"","user_agent":"","ja3":"","session":"efb21d98-a3eb-464a-b755-db0caf92a038","seq":1,"duration_ms":100,"bytes_in":59,"bytes_out":12,"enriched":{"digest":"dc66bc21949a8300","label":"HTTP","strings":["CONNECT 94.26.106.53:80 HTTP/1.0","Host: 94.26.106.53:80"],"iocs":{"ips":["94.26.106.53"]}}},{"timestamp":"2026-09-13T11:12:16","port":1011,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-libssh_0.12.0\r\n\u0000\u0000\u0004�\u0005\u00142j�<��\u0019�x4��:��\u0005\u0000\u0000\u0001�mlkem768x25519-sha256,mlkem768nistp256-sha256,mlkem1024nistp384-sha384,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com\u0000\u0000\u0000�ssh-ed25519,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa\u0000\u0000\u0000�chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc\u0000\u0000\u0000�chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc\u0000\u0000\u0000ahmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1\u0000\u0000\u0000ahmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1\u0000\u0000\u0000\u0015none,zlib@openssh.com\u0000\u0000\u0000\u0015none,zlib@openssh.com\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"5f073673-623b-42e0-b355-664ec751c084","seq":1,"duration_ms":102,"bytes_in":1287,"bytes_out":12,"enriched":{"digest":"592f8c1ff9291923","label":"SSH","strings":["SSH-2.0-libssh_0.12.0","mlkem768x25519-sha256,mlkem768nistp256-sha256,mlkem1024nistp384-sha384,sntrup761…","ssh-ed25519,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256,sk-ssh-e…","chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes2…","ahmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-…","none,zlib@openssh.com"],"iocs":{"domains":["openssh.com"]}}},{"timestamp":"2026-09-13T00:27:11","port":8888,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-libssh_0.12.0\r\n\u0000\u0000\u0004�\u0005\u0014M\r*_On�\u0001i,�\u0004��1c\u0000\u0000\u0001�mlkem768x25519-sha256,mlkem768nistp256-sha256,mlkem1024nistp384-sha384,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com\u0000\u0000\u0000�ssh-ed25519,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa\u0000\u0000\u0000�chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc\u0000\u0000\u0000�chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc\u0000\u0000\u0000ahmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1\u0000\u0000\u0000ahmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1\u0000\u0000\u0000\u0015none,zlib@openssh.com\u0000\u0000\u0000\u0015none,zlib@openssh.com\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"4f0389ec-86c0-4fe0-81c8-0630373bec0d","seq":1,"duration_ms":201,"bytes_in":1287,"bytes_out":12,"enriched":{"digest":"1817af947c0b02ad","label":"SSH","strings":["SSH-2.0-libssh_0.12.0","*_On","mlkem768x25519-sha256,mlkem768nistp256-sha256,mlkem1024nistp384-sha384,sntrup761…","ssh-ed25519,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256,sk-ssh-e…","chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes2…","ahmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-…","none,zlib@openssh.com"],"iocs":{"domains":["openssh.com"]}}},{"timestamp":"2026-09-12T23:24:41","port":2008,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004\u0001\u0000P^\u001aj5\u0000","payload_hex":"040100505e1a6a3500","method":"","user_agent":"","ja3":"","session":"8517c513-479d-4441-995a-e9b8965eb093","seq":1,"duration_ms":100,"bytes_in":9,"bytes_out":12},{"timestamp":"2026-09-12T23:24:41","port":2008,"proto":"tcp","app_proto":"","app_protocol":"http_connect","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CONNECT 94.26.106.53:80 HTTP/1.0\r\nHost: 94.26.106.53:80\r\n\r\n","payload_hex":"434f4e4e4543542039342e32362e3130362e35333a383020485454502f312e300d0a486f73743a2039342e32362e3130362e35333a38300d0a0d0a","method":"","user_agent":"","ja3":"","session":"ca7c4068-e2e3-47a9-b329-8056695185db","seq":1,"duration_ms":100,"bytes_in":59,"bytes_out":12,"enriched":{"digest":"dc66bc21949a8300","label":"HTTP","strings":["CONNECT 94.26.106.53:80 HTTP/1.0","Host: 94.26.106.53:80"],"iocs":{"ips":["94.26.106.53"]}}}],"http_methods":[],"distinct_ports_total":13,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[{"value":"SSH-2.0-libssh_0.12.0","count":13}],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-13T23:13:01.499694+00:00"}