{"ip":"213.248.112.34","total_events":45,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["45 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,845 bytes sent","bytes_sent":1845,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-24T09:57:15","last_seen":"2026-09-25T09:26:52","events_24h":0,"events_7d":45,"geo":{"country_code":"FR","country_name":"France","region":"","city":"","lat":48.8582,"lon":2.3387,"asn":1299,"org":"Arelion Sweden AB"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as1299","label":"Arelion (Twelve99)","category":"isp","url":"https://www.peeringdb.com/asn/1299"},"cve_matches":[],"malware":[],"top_ports":[{"port":8291,"proto":"tcp","label":"","count":45}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-24","count":32},{"date":"2026-09-25","count":13}],"recent_events":[{"timestamp":"2026-09-25T09:26:52","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000g1F�ݱ\u0014Xf�FJ��\u001f�g@h�kF��ƞ|f;prR\u0000","payload_hex":"270661646d696e0067314689ddb1145866c0464a83b31fe4674068ad6b46eed6c69e7c663b70725200","method":"","user_agent":"","ja3":"","session":"6ca3b1b9-ec24-4efe-9e0d-649100167144","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"3af990d92cd7b6f2","strings":["admin","|f;prR","adming1F"]}},{"timestamp":"2026-09-25T09:26:52","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000n_�S&=�&Ҡ\"����ʙ-�T���H\u001f}n.:d��\u0001","payload_hex":"270661646d696e006e5fee53263de026d2a022abe0aefeca992ddf54b184f4481f7d6e2e3a64c4d501","method":"","user_agent":"","ja3":"","session":"9305b5af-9c87-498d-949c-337c5183e4a8","seq":1,"duration_ms":17,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"1dadcf6d8070b2a8","strings":["admin","}n.:d","adminn_"]}},{"timestamp":"2026-09-25T09:26:51","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000m�'0pe\u0013N�lr�\n�n9�.�k�E��3d֮ܲ��\u0000","payload_hex":"270661646d696e006db227307065134ea06c72f20a976e39a22eda6bbc4598953364d6aedcb2e9cf00","method":"","user_agent":"","ja3":"","session":"ef7ffb45-18b8-4620-be1b-4b8f981fd325","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"5ff87dcbc3ff1d96","strings":["admin","'0pe","adminm"]}},{"timestamp":"2026-09-25T09:26:51","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000\u0004\u000b=�/�ef�8�p2�\u0004\u0014�����'-A���RJ;�\u0015\u0001","payload_hex":"270661646d696e00040b3d892f8a656682388f70329804148aba9cd4f7272d4194a5c1524a3bb81501","method":"","user_agent":"","ja3":"","session":"838236b4-ea60-4fb1-b6df-6d67cb828e63","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"d0cd91c0ac35f0af","strings":["admin"]}},{"timestamp":"2026-09-25T09:26:51","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000]/J�s:\f�N�oJ�N��-����0Gc��1K���'\u0000","payload_hex":"270661646d696e005d2f4a9e733a0c9b4efa6f4a8b4ee3e02db09688bd304763f4a5314b84efd12700","method":"","user_agent":"","ja3":"","session":"c70e2868-32b0-4416-9fd3-35c9643fa306","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"f3204851e253170e","strings":["admin","admin]/J"]}},{"timestamp":"2026-09-25T09:26:50","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000g\u001d�\r\u0014��x�`\u0011tB��b���)\u001c��v&}���D��\u0000","payload_hex":"270661646d696e00671de20d14c7cb78ba60117442ced7628ecdff291ca39376267deee0d744dde300","method":"","user_agent":"","ja3":"","session":"9eb68f27-e33e-479b-bd9f-e7f19590967a","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"6627939d0635139a","strings":["admin","adming"]}},{"timestamp":"2026-09-25T09:26:50","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000-�O>x�P����O�S�r��\u0014C*���'�\u0013o��}=\u0000","payload_hex":"270661646d696e002db34f3e78c050b6b49d954fab538a72d0f814432aaf85f527b1136fec9f7d3d00","method":"","user_agent":"","ja3":"","session":"dcc5b3bb-55e2-4a45-851f-f2b2a3e044b4","seq":1,"duration_ms":101,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"892a89f3ffeaf919","strings":["admin","admin-"]}},{"timestamp":"2026-09-25T09:26:50","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000Swt��آ$k�=�L:#Y�8\bنN�H-m\u0007\u00076N7k\u0000","payload_hex":"270661646d696e00537774e09dd8a2246b8b3dcb4c3a2359d63808d9864eea482d6d0707364e376b00","method":"","user_agent":"","ja3":"","session":"8681362c-ea51-4df0-acc8-a9800910c97e","seq":1,"duration_ms":101,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"e6610d198d0cdb87","strings":["admin","L:#Y","6N7k","adminSwt"]}},{"timestamp":"2026-09-25T09:26:50","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000\u0018��������3^z�.-��<��T�8u]?:��d��\u0001","payload_hex":"270661646d696e0018f9eddee9cbdffde9335e7ae82e2dd3cf3cd1e854cf38755d3f3a90e864f7ec01","method":"","user_agent":"","ja3":"","session":"3539e5b5-6c66-4cde-9864-291dcd12529f","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"44c0702db3c66bee","strings":["admin","8u]?:"]}},{"timestamp":"2026-09-25T09:26:49","port":8291,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'\u0006admin\u0000\"���H*���\u0005����lIW;\u001caH�f87�Ra%�[�\u0000","payload_hex":"270661646d696e0022bb9af4482aa1a4f305aaf6fcfb6c49573b1c61489866383795526125c95bc500","method":"","user_agent":"","ja3":"","session":"fd02a2c1-b590-479f-865d-687c9b28378e","seq":1,"duration_ms":101,"bytes_in":41,"bytes_out":14,"enriched":{"digest":"3301b4167c871c9e","strings":["admin","lIW;","admin\""]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-29T14:02:37.076609+00:00"}