{"ip":"149.50.220.170","total_events":16,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["16 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"191 bytes sent","bytes_sent":191,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-29T02:06:56","last_seen":"2026-09-29T21:51:04","events_24h":16,"events_7d":16,"geo":{"country_code":"FR","country_name":"France","region":"Provence-Alpes-Côte d'Azur","city":"Marseille","lat":43.2951,"lon":5.3861,"asn":212238,"org":"Datacamp Limited"},"source_domain":"unn-149-50-220-170.datapacket.com","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":5064,"proto":"tcp","label":"","count":3},{"port":6223,"proto":"tcp","label":"","count":3},{"port":8081,"proto":"tcp","label":"","count":2},{"port":47322,"proto":"tcp","label":"","count":2},{"port":31212,"proto":"tcp","label":"","count":2},{"port":8891,"proto":"tcp","label":"","count":2},{"port":31235,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-29","count":16}],"recent_events":[{"timestamp":"2026-09-29T21:51:04","port":31235,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0002\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080002000000","method":"","user_agent":"","ja3":"","session":"9004d732-6b1a-4721-9e0a-fd875f0f6926","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":14,"enriched":{"digest":"4986e56a8738b201","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-09-29T21:50:34","port":31235,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0006/login\u0000","payload_hex":"062f6c6f67696e00","method":"","user_agent":"","ja3":"","session":"2d9bffc6-df95-47e8-a470-70b9311ff4c5","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":14,"enriched":{"digest":"884e0c55c6c4b973","strings":["/login"]}},{"timestamp":"2026-09-29T19:48:10","port":47322,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0002\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080002000000","method":"","user_agent":"","ja3":"","session":"4f433e5b-bc0a-4a20-b530-d292738569d0","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":14,"enriched":{"digest":"4986e56a8738b201","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-09-29T19:47:40","port":47322,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0006/login\u0000","payload_hex":"062f6c6f67696e00","method":"","user_agent":"","ja3":"","session":"0fe474d0-1fc0-4d4d-aca2-06f8c5ca814d","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":14,"enriched":{"digest":"884e0c55c6c4b973","strings":["/login"]}},{"timestamp":"2026-09-29T14:33:01","port":8081,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0002\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080002000000","method":"","user_agent":"","ja3":"","session":"7963d042-07aa-447f-b9db-783f9b0c032c","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":14,"enriched":{"digest":"4986e56a8738b201","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-09-29T14:32:31","port":8081,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0006/login\u0000","payload_hex":"062f6c6f67696e00","method":"","user_agent":"","ja3":"","session":"126e8605-3d8c-4d88-a156-c3c064dfd2a0","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":14,"enriched":{"digest":"884e0c55c6c4b973","strings":["/login"]}},{"timestamp":"2026-09-29T07:19:58","port":8891,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0002\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080002000000","method":"","user_agent":"","ja3":"","session":"9baa4b4a-f5dc-4087-94a2-d062fdb13a82","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":14,"enriched":{"digest":"4986e56a8738b201","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-09-29T07:19:27","port":8891,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0006/login\u0000","payload_hex":"062f6c6f67696e00","method":"","user_agent":"","ja3":"","session":"1578e189-ae5d-4810-8b32-644114d236b3","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":14,"enriched":{"digest":"884e0c55c6c4b973","strings":["/login"]}},{"timestamp":"2026-09-29T04:29:48","port":31212,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0002\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080002000000","method":"","user_agent":"","ja3":"","session":"36201ad5-1b25-4836-9088-c11c5f1e9e5a","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":14,"enriched":{"digest":"4986e56a8738b201","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-09-29T04:29:18","port":31212,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0006/login\u0000","payload_hex":"062f6c6f67696e00","method":"","user_agent":"","ja3":"","session":"3bf76982-2125-4465-bfb2-81bc05567a05","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":14,"enriched":{"digest":"884e0c55c6c4b973","strings":["/login"]}}],"http_methods":[],"distinct_ports_total":7,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-29T22:14:53.899056+00:00"}