{"ip":"169.58.15.85","total_events":5,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"1 exploit-path probe(s)","confidence":"medium","network_type":"CDN","why":["1 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"687 bytes sent","bytes_sent":687,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-11T23:19:40","last_seen":"2026-09-13T01:22:13","events_24h":0,"events_7d":0,"geo":{"country_code":"FR","country_name":"France","region":"Grand Est","city":"Lauterbourg","lat":48.9742,"lon":8.1851,"asn":51167,"org":"Contabo GmbH"},"source_domain":"vmi3439687.contaboserver.net","known_scanners":[],"scanner_tag":{"key":"contabo","label":"Contabo","category":"hosting_provider","url":"https://contabo.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":3},{"port":5038,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i990900_760e5dff8384_5ac7197df9d2"],"tls_client_hello":"","tls_ja3":["effe96911320528dfdfdba040c9e915b"],"http_akin":["b10cun030_00040014_54d07b6d"]},"fingerprint_peers":{"t13i990900_760e5dff8384_5ac7197df9d2":28,"b10cun030_00040014_54d07b6d":53},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"],"timeline":[{"date":"2026-09-11","count":3},{"date":"2026-09-12","count":1},{"date":"2026-09-13","count":1}],"recent_events":[{"timestamp":"2026-09-13T01:22:13","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"0.0.0.0","headers":"{\"accept\":\"*/*\",\"host\":\"0.0.0.0\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/admin/config.php","summary":"","payload_hex":"474554202f61646d696e2f636f6e6669672e70687020485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a202a2f2a0d0a486f73743a20302e302e302e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"effe96911320528dfdfdba040c9e915b","session":"d6e20278-f444-464c-819d-c6e45e2289ed","seq":1,"duration_ms":100,"bytes_in":136,"bytes_out":77},{"timestamp":"2026-09-12T12:43:01","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"0.0.0.0","headers":"{\"accept\":\"*/*\",\"host\":\"0.0.0.0\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/admin/config.php","summary":"","payload_hex":"474554202f61646d696e2f636f6e6669672e70687020485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a202a2f2a0d0a486f73743a20302e302e302e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"effe96911320528dfdfdba040c9e915b","session":"3e0cbd16-6fe2-48b9-82fe-226cfa5718d4","seq":1,"duration_ms":100,"bytes_in":136,"bytes_out":77},{"timestamp":"2026-09-11T23:25:01","port":5038,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"0.0.0.0","headers":"{\"accept\":\"*/*\",\"host\":\"0.0.0.0\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/admin/config.php","summary":"","payload_hex":"474554202f61646d696e2f636f6e6669672e70687020485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a202a2f2a0d0a486f73743a20302e302e302e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"effe96911320528dfdfdba040c9e915b","session":"1d497a4c-e230-416e-956d-0a971c78eca2","seq":1,"duration_ms":100,"bytes_in":136,"bytes_out":77},{"timestamp":"2026-09-11T23:20:12","port":5038,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/admin/config.php","summary":"","payload_hex":"474554202f61646d696e2f636f6e6669672e70687020485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a202a2f2a0d0a486f73743a20<HONEYPOT>0d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"e4d8a67a-172b-4a70-b257-81a098d46679","seq":1,"duration_ms":100,"bytes_in":143,"bytes_out":77},{"timestamp":"2026-09-11T23:19:40","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"0.0.0.0","headers":"{\"accept\":\"*/*\",\"host\":\"0.0.0.0\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/admin/config.php","summary":"","payload_hex":"474554202f61646d696e2f636f6e6669672e70687020485454502f312e300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a202a2f2a0d0a486f73743a20302e302e302e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"effe96911320528dfdfdba040c9e915b","session":"b2290b7c-5142-493c-b974-4daa6e786bde","seq":1,"duration_ms":100,"bytes_in":136,"bytes_out":77}],"http_methods":[{"method":"GET","count":5}],"distinct_ports_total":2,"top_paths":[{"path":"/admin/config.php","count":5,"ports":2}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[{"value":"0.0.0.0","count":4}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Host","value":"0.0.0.0","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","notable":false}],"distinct_sets":1,"events_with_headers":5},"tags":[],"data_as_of":"2026-10-02T15:41:15.248564+00:00"}