{"ip":"169.58.126.123","total_events":13,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"10+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 10 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"676 bytes sent","bytes_sent":676,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-16T05:16:16","last_seen":"2026-09-16T05:16:17","events_24h":0,"events_7d":0,"geo":{"country_code":"FR","country_name":"France","region":"Grand Est","city":"Lauterbourg","lat":48.9742,"lon":8.1851,"asn":51167,"org":"Contabo GmbH"},"source_domain":"vmi3486439.contaboserver.net","known_scanners":[],"scanner_tag":{"key":"contabo","label":"Contabo","category":"hosting_provider","url":"https://contabo.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":2},{"port":9000,"proto":"tcp","label":"Web-alt","count":2},{"port":443,"proto":"tcp","label":"HTTPS","count":2},{"port":8081,"proto":"tcp","label":"","count":1},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":1},{"port":12589,"proto":"tcp","label":"","count":1},{"port":9186,"proto":"tcp","label":"","count":1},{"port":10018,"proto":"tcp","label":"","count":1},{"port":8090,"proto":"tcp","label":"","count":1},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["b10cun020_00040010_724c10fb"]},"fingerprint_peers":{"b10cun020_00040010_724c10fb":14},"akin_families":{},"user_agents":["Mozilla/5.0"],"timeline":[{"date":"2026-09-16","count":13}],"recent_events":[{"timestamp":"2026-09-16T05:16:17","port":8090,"proto":"tcp","app_proto":"","app_protocol":"http","host":"x","headers":"{\"host\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20780d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"9aa95590-4dc2-4a3a-b413-a3f67eb3724b","seq":1,"duration_ms":100,"bytes_in":52,"bytes_out":79},{"timestamp":"2026-09-16T05:16:17","port":443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"x","headers":"{\"host\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20780d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"13cf5702-f22f-44fd-87cf-d2bbab81ae06","seq":1,"duration_ms":101,"bytes_in":52,"bytes_out":79},{"timestamp":"2026-09-16T05:16:17","port":10018,"proto":"tcp","app_proto":"","app_protocol":"http","host":"x","headers":"{\"host\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20780d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"93431c53-2923-4511-8467-af295e9e6c14","seq":1,"duration_ms":101,"bytes_in":52,"bytes_out":79},{"timestamp":"2026-09-16T05:16:17","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"x","headers":"{\"host\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20780d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"6058205c-fdc7-4ce6-87b0-64569515040c","seq":1,"duration_ms":100,"bytes_in":52,"bytes_out":79},{"timestamp":"2026-09-16T05:16:17","port":9186,"proto":"tcp","app_proto":"","app_protocol":"http","host":"x","headers":"{\"host\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20780d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"ad6b256c-2512-4a30-9f4d-948f79fa5cf9","seq":1,"duration_ms":100,"bytes_in":52,"bytes_out":79},{"timestamp":"2026-09-16T05:16:17","port":8081,"proto":"tcp","app_proto":"","app_protocol":"http","host":"x","headers":"{\"host\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20780d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"ce55ec69-5839-4a00-8c8e-65b2777c0c29","seq":1,"duration_ms":101,"bytes_in":52,"bytes_out":79},{"timestamp":"2026-09-16T05:16:17","port":9000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"x","headers":"{\"host\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20780d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"69050e9b-d65d-46d0-9e3d-0a320726ddba","seq":1,"duration_ms":100,"bytes_in":52,"bytes_out":79},{"timestamp":"2026-09-16T05:16:17","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"x","headers":"{\"host\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20780d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"8a3c01d7-2fbd-413d-94ce-2ceb65116fe2","seq":1,"duration_ms":100,"bytes_in":52,"bytes_out":79},{"timestamp":"2026-09-16T05:16:17","port":443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"x","headers":"{\"host\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20780d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"e96875c3-ca36-4923-ae5d-a3e4a12e1007","seq":1,"duration_ms":101,"bytes_in":52,"bytes_out":79},{"timestamp":"2026-09-16T05:16:17","port":9000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"x","headers":"{\"host\":\"x\",\"user-agent\":\"Mozilla/5.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a486f73743a20780d0a557365722d4167656e743a204d6f7a696c6c612f352e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0","ja3":"","session":"847d2c86-eb53-43d9-bf9a-d144c65aba76","seq":1,"duration_ms":101,"bytes_in":52,"bytes_out":79}],"http_methods":[{"method":"GET","count":13}],"distinct_ports_total":10,"top_paths":[{"path":"/","count":13,"ports":10}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[{"value":"x","count":13}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Host","User-Agent"],"representative":[{"name":"Host","value":"x","notable":false},{"name":"User-Agent","value":"Mozilla/5.0","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-10-01T15:33:48.613160+00:00"}