{"ip":"169.58.152.77","total_events":90,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["90 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,430 bytes sent","bytes_sent":2430,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-10T10:08:13","last_seen":"2026-08-11T15:55:55","events_24h":0,"events_7d":90,"geo":{"country_code":"FR","country_name":"France","region":"Grand Est","city":"Lauterbourg","lat":48.9742,"lon":8.1851,"asn":51167,"org":"Contabo GmbH"},"source_domain":"vmi3498069.contaboserver.net","known_scanners":[],"scanner_tag":{"key":"contabo","label":"Contabo","category":"hosting_provider","url":"https://contabo.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":465,"proto":"tcp","label":"SMTPS","count":90}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i130900_f57a46bbacb6_e7c285222651"],"tls_ja3":["674c9b60629e4885877f5ec76f21723e"],"ja4h":[]},"fingerprint_peers":{"t13i130900_f57a46bbacb6_e7c285222651":3667},"user_agents":[],"timeline":[{"date":"2026-08-10","count":30},{"date":"2026-08-11","count":60}],"recent_events":[{"timestamp":"2026-08-11T15:55:55","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"ftp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"AUTH LOGIN\r\n","payload_hex":"41555448204c4f47494e0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"0b5f8d6f-3d33-4a42-80e0-50694d9a325a","seq":2,"duration_ms":349,"bytes_in":33,"bytes_out":54,"enriched":{"digest":"b4b21d02637630bf","label":"FTP","strings":["AUTH LOGIN"]}},{"timestamp":"2026-08-11T15:55:55","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"smtp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"EHLO maxximus.local\r\n","payload_hex":"45484c4f206d617878696d75732e6c6f63616c0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"0b5f8d6f-3d33-4a42-80e0-50694d9a325a","seq":1,"duration_ms":246,"bytes_in":21,"bytes_out":40,"enriched":{"digest":"dde67e2504fb591f","label":"SMTP","strings":["EHLO maxximus.local"],"iocs":{"domains":["maxximus.local"]}}},{"timestamp":"2026-08-11T15:55:52","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"ftp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"AUTH LOGIN\r\n","payload_hex":"41555448204c4f47494e0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"6642d67e-7b33-4b65-bec4-70b8382cf76a","seq":2,"duration_ms":300,"bytes_in":33,"bytes_out":54,"enriched":{"digest":"b4b21d02637630bf","label":"FTP","strings":["AUTH LOGIN"]}},{"timestamp":"2026-08-11T15:55:52","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"smtp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"EHLO maxximus.local\r\n","payload_hex":"45484c4f206d617878696d75732e6c6f63616c0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"6642d67e-7b33-4b65-bec4-70b8382cf76a","seq":1,"duration_ms":200,"bytes_in":21,"bytes_out":40,"enriched":{"digest":"dde67e2504fb591f","label":"SMTP","strings":["EHLO maxximus.local"],"iocs":{"domains":["maxximus.local"]}}},{"timestamp":"2026-08-11T15:55:49","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"ftp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"AUTH LOGIN\r\n","payload_hex":"41555448204c4f47494e0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"2f646bde-8d7a-4b4e-863c-7e9851a01356","seq":2,"duration_ms":306,"bytes_in":33,"bytes_out":54,"enriched":{"digest":"b4b21d02637630bf","label":"FTP","strings":["AUTH LOGIN"]}},{"timestamp":"2026-08-11T15:55:48","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"smtp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"EHLO maxximus.local\r\n","payload_hex":"45484c4f206d617878696d75732e6c6f63616c0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"2f646bde-8d7a-4b4e-863c-7e9851a01356","seq":1,"duration_ms":203,"bytes_in":21,"bytes_out":40,"enriched":{"digest":"dde67e2504fb591f","label":"SMTP","strings":["EHLO maxximus.local"],"iocs":{"domains":["maxximus.local"]}}},{"timestamp":"2026-08-11T15:55:45","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"ftp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"AUTH LOGIN\r\n","payload_hex":"41555448204c4f47494e0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"a9693698-9653-44bb-9d00-7f4ddac73786","seq":2,"duration_ms":309,"bytes_in":33,"bytes_out":54,"enriched":{"digest":"b4b21d02637630bf","label":"FTP","strings":["AUTH LOGIN"]}},{"timestamp":"2026-08-11T15:55:45","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"smtp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"EHLO maxximus.local\r\n","payload_hex":"45484c4f206d617878696d75732e6c6f63616c0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"a9693698-9653-44bb-9d00-7f4ddac73786","seq":1,"duration_ms":199,"bytes_in":21,"bytes_out":40,"enriched":{"digest":"dde67e2504fb591f","label":"SMTP","strings":["EHLO maxximus.local"],"iocs":{"domains":["maxximus.local"]}}},{"timestamp":"2026-08-11T15:55:42","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"ftp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"AUTH LOGIN\r\n","payload_hex":"41555448204c4f47494e0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"a9e9802a-d2d6-40cf-b277-97e7d6380176","seq":2,"duration_ms":303,"bytes_in":33,"bytes_out":54,"enriched":{"digest":"b4b21d02637630bf","label":"FTP","strings":["AUTH LOGIN"]}},{"timestamp":"2026-08-11T15:55:42","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"smtp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"EHLO maxximus.local\r\n","payload_hex":"45484c4f206d617878696d75732e6c6f63616c0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"a9e9802a-d2d6-40cf-b277-97e7d6380176","seq":1,"duration_ms":200,"bytes_in":21,"bytes_out":40,"enriched":{"digest":"dde67e2504fb591f","label":"SMTP","strings":["EHLO maxximus.local"],"iocs":{"domains":["maxximus.local"]}}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T06:47:24.613212+00:00"}