{"ip":"45.67.217.224","total_events":7,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["7 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."]},"first_seen":"2026-07-06T03:23:40","last_seen":"2026-07-06T10:17:57","events_24h":0,"events_7d":0,"geo":{"country_code":"FR","country_name":"France","region":"Grand Est","city":"Lauterbourg","lat":48.9742,"lon":8.1851,"asn":51167,"org":"Contabo GmbH"},"source_domain":"vmi3398468.contaboserver.net","known_scanners":[],"scanner_tag":{"key":"contabo","label":"Contabo","category":"hosting_provider","url":"https://contabo.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":3389,"proto":"tcp","label":"RDP","count":7}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-06","count":7}],"recent_events":[{"timestamp":"2026-07-06T10:17:57","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","community_id":"1:+97hq3TuYKo/lN2o/X/49wSlPU0=","ja3":"","session":"3e072a11-4433-4454-823d-c960b0e2bd34","seq":1,"duration_ms":100,"bytes_in":43,"bytes_out":13,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}},{"timestamp":"2026-07-06T09:33:24","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","community_id":"1:22OohXBtrX0xR7UG/wq6IqykhqQ=","ja3":"","session":"fd32385f-127d-4907-abd6-be42b809b00b","seq":1,"duration_ms":100,"bytes_in":43,"bytes_out":13,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}},{"timestamp":"2026-07-06T08:07:45","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","community_id":"1:NRhe2AnivbteL5rPzAZHo17ttio=","ja3":"","session":"093fd80c-ac2c-4006-935f-43f5ef28dc9e","seq":1,"duration_ms":104,"bytes_in":43,"bytes_out":13,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}},{"timestamp":"2026-07-06T05:11:14","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","community_id":"1:f0Z6+kHe3D18iqHB2yS+lfHSnDs=","ja3":"","session":"6b089509-2783-4f0d-b75b-17d9529e5b35","seq":1,"duration_ms":100,"bytes_in":43,"bytes_out":13,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}},{"timestamp":"2026-07-06T04:03:16","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","community_id":"1:ah/Kkhe9j+p7FAa9dZ8Ha9gjZII=","ja3":"","session":"17f13664-81da-46ed-b8c4-353966ad7922","seq":1,"duration_ms":100,"bytes_in":43,"bytes_out":13,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}},{"timestamp":"2026-07-06T03:41:04","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","community_id":"1:C1xo8JlSuKQTp/LvjZzmvshiMH8=","ja3":"","session":"4b9f98f5-6b2a-4c69-86de-03f4031c4bdf","seq":1,"duration_ms":100,"bytes_in":43,"bytes_out":13,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}},{"timestamp":"2026-07-06T03:23:40","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","community_id":"1:LKUgp5OP+1rcDeCehtI/udBVbKQ=","ja3":"","session":"f2adff4d-7c8d-4fc9-917c-19f3f0ca5118","seq":1,"duration_ms":100,"bytes_in":43,"bytes_out":13,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-13T15:11:41.878272+00:00"}