{"ip":"144.24.167.42","total_events":30,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["30 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,736 bytes sent","bytes_sent":2736,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-26T17:47:33","last_seen":"2026-09-30T14:33:53","events_24h":0,"events_7d":28,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1049,"lon":8.6295,"asn":31898,"org":"Oracle Corporation"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as31898","label":"Oracle Cloud Infrastructure","category":"cdn","url":"https://www.peeringdb.com/asn/31898"},"cve_matches":[],"malware":[],"top_ports":[{"port":1433,"proto":"tcp","label":"MSSQL","count":4},{"port":51433,"proto":"tcp","label":"","count":4},{"port":61433,"proto":"tcp","label":"","count":4},{"port":21433,"proto":"tcp","label":"","count":4},{"port":11433,"proto":"tcp","label":"","count":4},{"port":41433,"proto":"tcp","label":"","count":4},{"port":31433,"proto":"tcp","label":"","count":4},{"port":4022,"proto":"tcp","label":"MSSQL","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-08-26","count":1},{"date":"2026-08-27","count":1},{"date":"2026-09-30","count":28}],"recent_events":[{"timestamp":"2026-09-30T14:33:53","port":61433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u0000\u0011D\u0000�f⣕P�E�ȊG�\b�\u0013\n����4�B��/\u0001Nⵅ\u0004\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff04081252000000000000114400d466e2a39550eb459fc88a47c208de130ab587a8b234f9429de72f014ee2b5850400000001","method":"","user_agent":"","ja3":"","session":"54adc62f-9749-4fd2-9bab-73784043d6af","seq":1,"duration_ms":101,"bytes_in":94,"bytes_out":13},{"timestamp":"2026-09-30T14:33:53","port":21433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u0000\u0017,\u0000e���\u0017\u000f�F�8�Ao�\u0003��Ҧ�|ϱA�\u0019���:�P\u0004\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff04081252000000000000172c0065f09884170fe346ab38df416fe303c2d8d2a6da7ccfb14185199494f93ab7500400000001","method":"","user_agent":"","ja3":"","session":"948741c3-578e-40de-8c92-f2c95efaafe2","seq":1,"duration_ms":101,"bytes_in":94,"bytes_out":13},{"timestamp":"2026-09-30T14:33:53","port":41433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u0000\f\u001c\u0000)��$.=�A�ΝXۊNO`��&9\u0007!J�:\t\u0015�1\u0012�\u0004\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040812520000000000000c1c0029eaa0242e3d8441b9ce9d58db8a4e4f60f0e6263907214a9a3a0915903112bb0400000001","method":"","user_agent":"","ja3":"","session":"3c630338-01f9-4e38-a12d-013336f97365","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":13},{"timestamp":"2026-09-30T14:33:53","port":31433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u0000\u000e|\u00002�q���|H�\t+���\u0005[�qs�\u000e�,J�.\u0003�}�ӳ\u0004\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040812520000000000000e7c0032e971feaac37c488e092bb3e6e3055b837173ab0ec82c4a902e03ef7dc8d3b30400000001","method":"","user_agent":"","ja3":"","session":"8ec73df7-678e-4d7f-9d9d-431572bc685f","seq":1,"duration_ms":101,"bytes_in":94,"bytes_out":13},{"timestamp":"2026-09-30T14:33:53","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u0000\u000b�\u0000ב��H��M��Kd5�o����ŝ��N��P��K6�\u0004\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040812520000000000000bdc00d791ae874881db4d80d24b6435c16fedc9f2d9c59d9ff94e828e50e3cf4b368b0400000001","method":"","user_agent":"","ja3":"","session":"68583e72-4424-425c-ad33-bcea5dd48e15","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":13},{"timestamp":"2026-09-30T14:33:53","port":11433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u0000#4\u0000\u0002��e���G��[^�F��ֹ��^ICM�n�|rb\u0002\u001c\u0004\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff0408125200000000000023340002dcf765c1e6ff4785a35b5edb46f782d6b9a0cb5e49434db36ee47c7262021c0400000001","method":"","user_agent":"","ja3":"","session":"30edb28c-81a0-4228-bf28-f51707bf00a1","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":13,"enriched":{"digest":"70909bb40a192041","strings":["^ICM"]}},{"timestamp":"2026-09-30T14:33:53","port":51433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u0000\u001c\f\u0000�\u000e8d4N��\u0019� \t���\u0012�d\u000f\u0018�G�7�I\u0016}b�\u0004\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040812520000000000001c0c00b80e3864c28d344e99cf19af20098ea18612c5640f18ed47a0379c49167d62b50400000001","method":"","user_agent":"","ja3":"","session":"5fedc823-452f-47a8-8695-dc880dd37fad","seq":1,"duration_ms":101,"bytes_in":94,"bytes_out":13},{"timestamp":"2026-09-30T14:33:45","port":61433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u0000\u0011D\u0000\t��0�\u00196A�\u001f��ꆄH\n����4�B��/\u0001Nⵅ\u0003\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff0408125200000000000011440009edff30cd1936418e1fedc8ea8684480ab587a8b234f9429de72f014ee2b5850300000001","method":"","user_agent":"","ja3":"","session":"715d673c-4c0c-4cc8-ad9c-d4b7e15c1470","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":13},{"timestamp":"2026-09-30T14:33:45","port":41433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u0000\f\u001c\u0000�Z���LqH��a�\u001c�W^`��&9\u0007!J�:\t\u0015�1\u0012�\u0003\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040812520000000000000c1c00a95a95fb8c4c7148a1bb61901ceb575e60f0e6263907214a9a3a0915903112bb0300000001","method":"","user_agent":"","ja3":"","session":"a633da85-91fa-46b7-8120-1518d16e26d9","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":13},{"timestamp":"2026-09-30T14:33:45","port":31433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001�\u0004\b\u0012R\u0000\u0000\u0000\u0000\u0000\u0000\u000e|\u0000�\\�5\n��J��P!\"\u0010���qs�\u000e�,J�.\u0003�}�ӳ\u0003\u0000\u0000\u0000\u0001","payload_hex":"1201005e00000100000024000601002a000102002b000103002c0004040030000105003100240600550001ff040812520000000000000e7c00d65ca7350aebc74ab69250212210a6e7837173ab0ec82c4a902e03ef7dc8d3b30300000001","method":"","user_agent":"","ja3":"","session":"389444c5-e3b0-4e01-a1a4-8e8c61ca842d","seq":1,"duration_ms":100,"bytes_in":94,"bytes_out":13}],"http_methods":[],"distinct_ports_total":8,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-04T21:59:54.852775+00:00"}