{"ip":"169.58.152.81","total_events":30,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["30 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"810 bytes sent","bytes_sent":810,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-13T19:06:22","last_seen":"2026-08-13T19:07:05","events_24h":0,"events_7d":30,"geo":{"country_code":"FR","country_name":"France","region":"Grand Est","city":"Lauterbourg","lat":48.9742,"lon":8.1851,"asn":51167,"org":"Contabo GmbH"},"source_domain":"vmi3498071.contaboserver.net","known_scanners":[],"scanner_tag":{"key":"contabo","label":"Contabo","category":"hosting_provider","url":"https://contabo.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":465,"proto":"tcp","label":"SMTPS","count":30}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i130900_f57a46bbacb6_e7c285222651"],"tls_ja3":["674c9b60629e4885877f5ec76f21723e"],"ja4h":[]},"fingerprint_peers":{"t13i130900_f57a46bbacb6_e7c285222651":3667},"user_agents":[],"timeline":[{"date":"2026-08-13","count":30}],"recent_events":[{"timestamp":"2026-08-13T19:07:05","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"ftp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"AUTH LOGIN\r\n","payload_hex":"41555448204c4f47494e0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"2f225f66-11a1-49a3-92b4-abfb8b19eb42","seq":2,"duration_ms":108,"bytes_in":33,"bytes_out":54,"enriched":{"digest":"b4b21d02637630bf","label":"FTP","strings":["AUTH LOGIN"]}},{"timestamp":"2026-08-13T19:07:05","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"smtp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"EHLO maxximus.local\r\n","payload_hex":"45484c4f206d617878696d75732e6c6f63616c0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"2f225f66-11a1-49a3-92b4-abfb8b19eb42","seq":1,"duration_ms":103,"bytes_in":21,"bytes_out":40,"enriched":{"digest":"dde67e2504fb591f","label":"SMTP","strings":["EHLO maxximus.local"],"iocs":{"domains":["maxximus.local"]}}},{"timestamp":"2026-08-13T19:07:02","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"ftp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"AUTH LOGIN\r\n","payload_hex":"41555448204c4f47494e0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"91414617-b471-4430-840d-8ddb723807f9","seq":2,"duration_ms":108,"bytes_in":33,"bytes_out":54,"enriched":{"digest":"b4b21d02637630bf","label":"FTP","strings":["AUTH LOGIN"]}},{"timestamp":"2026-08-13T19:07:02","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"smtp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"EHLO maxximus.local\r\n","payload_hex":"45484c4f206d617878696d75732e6c6f63616c0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"91414617-b471-4430-840d-8ddb723807f9","seq":1,"duration_ms":104,"bytes_in":21,"bytes_out":40,"enriched":{"digest":"dde67e2504fb591f","label":"SMTP","strings":["EHLO maxximus.local"],"iocs":{"domains":["maxximus.local"]}}},{"timestamp":"2026-08-13T19:06:59","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"ftp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"AUTH LOGIN\r\n","payload_hex":"41555448204c4f47494e0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"3abd06cb-bc19-4e33-98db-2ee6015358dd","seq":2,"duration_ms":120,"bytes_in":33,"bytes_out":54,"enriched":{"digest":"b4b21d02637630bf","label":"FTP","strings":["AUTH LOGIN"]}},{"timestamp":"2026-08-13T19:06:59","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"smtp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"EHLO maxximus.local\r\n","payload_hex":"45484c4f206d617878696d75732e6c6f63616c0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"3abd06cb-bc19-4e33-98db-2ee6015358dd","seq":1,"duration_ms":110,"bytes_in":21,"bytes_out":40,"enriched":{"digest":"dde67e2504fb591f","label":"SMTP","strings":["EHLO maxximus.local"],"iocs":{"domains":["maxximus.local"]}}},{"timestamp":"2026-08-13T19:06:56","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"ftp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"AUTH LOGIN\r\n","payload_hex":"41555448204c4f47494e0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"0e87b0fa-1211-4420-9ce4-6c4ad7905cb2","seq":2,"duration_ms":129,"bytes_in":33,"bytes_out":54,"enriched":{"digest":"b4b21d02637630bf","label":"FTP","strings":["AUTH LOGIN"]}},{"timestamp":"2026-08-13T19:06:56","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"smtp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"EHLO maxximus.local\r\n","payload_hex":"45484c4f206d617878696d75732e6c6f63616c0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"0e87b0fa-1211-4420-9ce4-6c4ad7905cb2","seq":1,"duration_ms":115,"bytes_in":21,"bytes_out":40,"enriched":{"digest":"dde67e2504fb591f","label":"SMTP","strings":["EHLO maxximus.local"],"iocs":{"domains":["maxximus.local"]}}},{"timestamp":"2026-08-13T19:06:52","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"ftp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"AUTH LOGIN\r\n","payload_hex":"41555448204c4f47494e0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"8abd76b4-8ad8-4afe-ba41-8e4da476c3af","seq":2,"duration_ms":109,"bytes_in":33,"bytes_out":54,"enriched":{"digest":"b4b21d02637630bf","label":"FTP","strings":["AUTH LOGIN"]}},{"timestamp":"2026-08-13T19:06:52","port":465,"proto":"tcp","app_proto":"tls","app_protocol":"smtp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"EHLO maxximus.local\r\n","payload_hex":"45484c4f206d617878696d75732e6c6f63616c0d0a","method":"","user_agent":"","ja3":"674c9b60629e4885877f5ec76f21723e","session":"8abd76b4-8ad8-4afe-ba41-8e4da476c3af","seq":1,"duration_ms":103,"bytes_in":21,"bytes_out":40,"enriched":{"digest":"dde67e2504fb591f","label":"SMTP","strings":["EHLO maxximus.local"],"iocs":{"domains":["maxximus.local"]}}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T06:47:24.134086+00:00"}