{"ip":"5.189.182.48","total_events":13,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["13 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."]},"first_seen":"2026-06-12T23:56:24","last_seen":"2026-07-10T02:54:06","events_24h":0,"events_7d":6,"geo":{"country_code":"FR","country_name":"France","region":"Grand Est","city":"Lauterbourg","lat":48.9742,"lon":8.1851,"asn":51167,"org":"Contabo GmbH"},"source_domain":"vmi1278919.contaboserver.net","known_scanners":[],"scanner_tag":{"key":"contabo","label":"Contabo","category":"hosting_provider","url":"https://contabo.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":1433,"proto":"tcp","label":"MSSQL","count":9},{"port":445,"proto":"tcp","label":"SMB","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-06-12","count":2},{"date":"2026-06-15","count":3},{"date":"2026-06-17","count":2},{"date":"2026-07-06","count":3},{"date":"2026-07-10","count":3}],"recent_events":[{"timestamp":"2026-07-10T02:54:06","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�O\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000984f0000","method":"","user_agent":"","community_id":"1:3+IWu+kate1/VrXGYIP0i5HWMZg=","ja3":"","session":"4cfc89a6-53af-4706-897b-97a1389260f0","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-07-10T02:53:55","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�O\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000984f0000","method":"","user_agent":"","community_id":"1:OnqKa8Y2ChLzS25451kuZEtITFs=","ja3":"","session":"b7b377c2-7619-4787-8faf-3667de58d6c5","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-07-10T02:53:45","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�O\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000984f0000","method":"","user_agent":"","community_id":"1:D0dxE7+FjpjPZaPs9XXw3nydhB4=","ja3":"","session":"cca75fea-59f5-4d40-9b26-44a8311f6df6","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-07-06T16:49:40","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�&\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000dc260000","method":"","user_agent":"","community_id":"1:Msjak6ms9anKcnnNlJiRmbomVWQ=","ja3":"","session":"d5095471-ff5b-4a7a-b6f0-f3d1f7e53d02","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-07-06T16:49:30","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�&\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000dc260000","method":"","user_agent":"","community_id":"1:Cv+dI7mXMy4Bas2Gpb0Wcv+4Gww=","ja3":"","session":"0e94e7eb-9f91-481e-8f8f-73febbd9f61e","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-07-06T16:49:20","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�&\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000dc260000","method":"","user_agent":"","community_id":"1:HGI7693W2Kpxl4itL4MsWvummrQ=","ja3":"","session":"4cdcd890-b01a-4c0c-8024-57db4ed96039","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-06-17T09:03:28","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���1\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffec3100000000000c00024e54204c4d20302e313200","method":"","user_agent":"","community_id":"1:x06zUjHqBCn8XeljsAx3A5yZDHE=","ja3":"","session":"c66754c4-f720-4ba7-a24c-0ef1b090e637","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":12,"enriched":{"digest":"d34aab097a617da3","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-06-17T09:03:25","port":445,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000/�SMBr\u0000\u0000\u0000\u0000\u0018\u0001H\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000���1\u0000\u0000\u0000\u0000\u0000\f\u0000\u0002NT LM 0.12\u0000","payload_hex":"0000002fff534d427200000000180148000000000000000000000000ffffec3100000000000c00024e54204c4d20302e313200","method":"","user_agent":"","community_id":"1:zsrRfXwN6Txsp5pfk8MRJbJsA7o=","ja3":"","session":"5259ed0c-17b8-4174-94a8-f4d00fe48c24","seq":1,"duration_ms":100,"bytes_in":51,"bytes_out":12,"enriched":{"digest":"d34aab097a617da3","strings":["SMBr","NT LM 0.12"]}},{"timestamp":"2026-06-15T00:15:44","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�M\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000804d0000","method":"","user_agent":"","community_id":"1:VYGXqQe2GCRqOVgJRUI5SDON6jA=","ja3":"","session":"5037c907-06c6-41ca-be15-650ec1c63a51","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-06-15T00:15:34","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�M\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000804d0000","method":"","user_agent":"","community_id":"1:veK5LvqhYnZHbTjXkVGMjCdfWJo=","ja3":"","session":"79f42f76-f3a8-4912-bb95-bae5160fb1d6","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12}],"http_methods":[],"distinct_ports_total":2,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-13T15:12:27.036496+00:00"}