{"ip":"178.18.254.249","total_events":18,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["18 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."]},"first_seen":"2026-06-19T16:43:58","last_seen":"2026-07-05T20:17:41","events_24h":0,"events_7d":0,"geo":{"country_code":"FR","country_name":"France","region":"Grand Est","city":"Lauterbourg","lat":48.9742,"lon":8.1851,"asn":51167,"org":"Contabo GmbH"},"source_domain":"vmi921987.contaboserver.net","known_scanners":[],"scanner_tag":{"key":"contabo","label":"Contabo","category":"hosting_provider","url":"https://contabo.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":1433,"proto":"tcp","label":"MSSQL","count":18}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-06-19","count":6},{"date":"2026-07-05","count":12}],"recent_events":[{"timestamp":"2026-07-05T20:17:41","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000@0\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000040300000","method":"","user_agent":"","community_id":"1:dFsm+V/5mFtmH6k8imbKGysExOU=","ja3":"","session":"fa580fb3-2567-46bd-bb7d-5668a30d5f5c","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-05T20:17:41","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�\u001f\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000c01f0000","method":"","user_agent":"","community_id":"1:y4jcSQBbPikJnlaGUY3BWI5H8Zk=","ja3":"","session":"c6580847-93e6-4801-9150-ca0f8c0d8363","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-05T20:17:31","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000@0\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000040300000","method":"","user_agent":"","community_id":"1:o0lbs8azn2vFfSZMTxN4gpkFhDw=","ja3":"","session":"07fb1b13-6b04-4d5f-9715-8708a611b0e4","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-05T20:17:31","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�\u001f\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000c01f0000","method":"","user_agent":"","community_id":"1:2uzzxtWweo3pAgS/5U57zzLLiRw=","ja3":"","session":"6400b80a-2100-4ef0-8d26-36bcf9a60207","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-05T20:17:21","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000@0\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000040300000","method":"","user_agent":"","community_id":"1:usUthCMnYwGhVhXqx2EQz9TD1ls=","ja3":"","session":"5e71efa4-b14e-4564-b31f-1244c8ee6256","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-05T20:17:21","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�\u001f\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000c01f0000","method":"","user_agent":"","community_id":"1:JiAoifgi7iVwFfkuZRSeykY2U5g=","ja3":"","session":"d1c56d14-558e-4aca-a299-776bc958ad2c","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-05T20:17:10","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000@0\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000040300000","method":"","user_agent":"","community_id":"1:SbMPrRbp9GnQ/G76T4oMsVpFl24=","ja3":"","session":"89eaa756-f47c-4664-9e13-d65f6e67e0ee","seq":1,"duration_ms":101,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-05T20:17:10","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�\u001f\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000c01f0000","method":"","user_agent":"","community_id":"1:CTKOOWykTJe3ZPqtpeSm0uDjK0k=","ja3":"","session":"3e68bf19-06c0-4677-8d6d-9af93b89207a","seq":1,"duration_ms":101,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-05T20:17:00","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000@0\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000040300000","method":"","user_agent":"","community_id":"1:A1ZC6FrjQ8w5Txqa6zytPc6745w=","ja3":"","session":"2d977f2a-e7dc-45f7-932c-2603886e8970","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14},{"timestamp":"2026-07-05T20:17:00","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�\u001f\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000c01f0000","method":"","user_agent":"","community_id":"1:5cxX+wfpJXcHpWRNj1hUSSnfXuw=","ja3":"","session":"36334d83-d6ec-4b42-8f3a-21db478ddf4e","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-13T15:11:47.264112+00:00"}