{"ip":"161.97.178.116","total_events":224,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["224 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."]},"first_seen":"2026-02-27T01:35:20","last_seen":"2026-07-11T23:38:16","events_24h":0,"events_7d":8,"geo":{"country_code":"FR","country_name":"France","region":"Grand Est","city":"Lauterbourg","lat":48.9742,"lon":8.1851,"asn":51167,"org":"Contabo GmbH"},"source_domain":"vmi3030056.contaboserver.net","known_scanners":[],"scanner_tag":{"key":"contabo","label":"Contabo","category":"hosting_provider","url":"https://contabo.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":1433,"proto":"tcp","label":"MSSQL","count":222},{"port":445,"proto":"tcp","label":"SMB","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-04-21","count":24},{"date":"2026-05-07","count":3},{"date":"2026-05-16","count":3},{"date":"2026-06-17","count":3},{"date":"2026-06-25","count":3},{"date":"2026-07-11","count":8}],"recent_events":[{"timestamp":"2026-07-11T23:38:16","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���&\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffb82600000000000c00024e54204c4d20302e313200","method":"","user_agent":"","community_id":"1:O3+7Bae1T6WQz0XqkhqRWd250zk=","ja3":"","session":"4343ffd5-ae1f-45ae-89ce-452001d39484","seq":1,"duration_ms":101,"bytes_in":51,"bytes_out":14,"enriched":{"digest":"4783bd8184162961","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-07-11T23:38:01","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���&\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffb82600000000000c00024e54204c4d20302e313200","method":"","user_agent":"","community_id":"1:Irfky9KLm0Hjx89xdOBHJxCl6BI=","ja3":"","session":"382dbe90-f344-483e-af35-6d84d84fa8a4","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":14,"enriched":{"digest":"4783bd8184162961","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-07-11T18:20:18","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�?\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000803f0000","method":"","user_agent":"","community_id":"1:J538ITVh3h/d4+tHRBhL05ooKkQ=","ja3":"","session":"65561c2e-67f3-4134-9520-d3dc7e20fa2d","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-11T18:20:08","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�?\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000803f0000","method":"","user_agent":"","community_id":"1:YPIVrH58FRVpnb3nzjA+VIj8Ybs=","ja3":"","session":"a741159b-7a8d-4fe4-bcf9-2eba64782bf9","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-11T18:19:58","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�?\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000803f0000","method":"","user_agent":"","community_id":"1:q1oKeyGhl+LOigj4esKELuKH7ZI=","ja3":"","session":"647673ff-f139-4544-b2be-2f9d79b08469","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-11T06:11:00","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�>\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000b83e0000","method":"","user_agent":"","community_id":"1:LK3P4Urxmp497VpPqzkcTPcSSMk=","ja3":"","session":"70d7a242-5c66-439c-9377-e1c945f69f39","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-11T06:10:49","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�>\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000b83e0000","method":"","user_agent":"","community_id":"1:h1Dt3ko7TTlbsdR+CFkGiSCn2Ic=","ja3":"","session":"5e9d29d6-5fe4-4e1d-8438-b58e144ed952","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-11T06:10:39","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�>\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000b83e0000","method":"","user_agent":"","community_id":"1:SIYLCXqSQRz89VLyp1Lf2rJRppo=","ja3":"","session":"6096c142-f37d-409a-9040-14a5a8eea602","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-06-25T19:42:25","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000 8\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000020380000","method":"","user_agent":"","community_id":"1:gtbvCOB7SHhFQnNvBvuTRn1s+3Y=","ja3":"","session":"b1c603e7-6f27-4660-82d3-c783c39c12cf","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-06-25T19:42:15","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000 8\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000020380000","method":"","user_agent":"","community_id":"1:cpgMZtSUisZlxESwEvaQSwjgc48=","ja3":"","session":"6539332f-8a72-411e-9fd1-c37f297bde90","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14}],"http_methods":[],"distinct_ports_total":2,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-13T15:12:27.579628+00:00"}