{"ip":"80.75.212.2","total_events":9,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["9 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"415 bytes sent","bytes_sent":415,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-09T04:57:46","last_seen":"2026-09-27T11:30:07","events_24h":0,"events_7d":4,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1273,"lon":8.6895,"asn":49581,"org":"Tube-Hosting"},"source_domain":"tube-hosting.com","known_scanners":[],"scanner_tag":{"key":"peeringdb:as49581","label":"Tube-Hosting","category":"isp","url":"https://www.peeringdb.com/asn/49581"},"cve_matches":[],"malware":[],"top_ports":[{"port":3389,"proto":"tcp","label":"RDP","count":4},{"port":3390,"proto":"tcp","label":"","count":4},{"port":80,"proto":"tcp","label":"HTTP","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-09","count":2},{"date":"2026-09-15","count":1},{"date":"2026-09-18","count":2},{"date":"2026-09-27","count":4}],"recent_events":[{"timestamp":"2026-09-27T11:30:07","port":3390,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000/*�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=anonymous\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002f2ae00000000000436f6f6b69653a206d737473686173683d616e6f6e796d6f75730d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"16160dd4-14b1-42fe-96e6-820e67640201","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":11,"enriched":{"digest":"b421c17eef1e2af7","label":"RDP (X.224)","strings":["Cookie: mstshash=anonymous"]}},{"timestamp":"2026-09-27T11:30:01","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000/*�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=anonymous\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002f2ae00000000000436f6f6b69653a206d737473686173683d616e6f6e796d6f75730d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"19ffaa2e-b15c-4f02-a984-b47e8885be5f","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":11,"enriched":{"digest":"b421c17eef1e2af7","label":"RDP (X.224)","strings":["Cookie: mstshash=anonymous"]}},{"timestamp":"2026-09-27T10:35:24","port":3390,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000/*�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=anonymous\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002f2ae00000000000436f6f6b69653a206d737473686173683d616e6f6e796d6f75730d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"416ad887-1665-46ff-b42a-83ba8fc8c4bf","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":11,"enriched":{"digest":"b421c17eef1e2af7","label":"RDP (X.224)","strings":["Cookie: mstshash=anonymous"]}},{"timestamp":"2026-09-27T10:35:20","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000/*�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=anonymous\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002f2ae00000000000436f6f6b69653a206d737473686173683d616e6f6e796d6f75730d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"08ef99e5-707e-4eab-b41f-a5f6d56b373c","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":11,"enriched":{"digest":"b421c17eef1e2af7","label":"RDP (X.224)","strings":["Cookie: mstshash=anonymous"]}},{"timestamp":"2026-09-18T14:16:43","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"35022e19-f56a-446c-a819-5c9a6ecfff3a","seq":1,"duration_ms":100,"bytes_in":43,"bytes_out":11,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}},{"timestamp":"2026-09-18T14:16:43","port":3390,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000+&�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002b26e00000000000436f6f6b69653a206d737473686173683d68656c6c6f0d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"d7c2c102-cee6-4db6-9352-3b4b610512e4","seq":1,"duration_ms":100,"bytes_in":43,"bytes_out":11,"enriched":{"digest":"2a9e9bfa45800f63","label":"RDP (X.224)","strings":["Cookie: mstshash=hello"]}},{"timestamp":"2026-09-15T11:50:39","port":80,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000/*�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=anonymous\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002f2ae00000000000436f6f6b69653a206d737473686173683d616e6f6e796d6f75730d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"1e3025e7-51f5-4d69-b247-e72e793643ee","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":11,"enriched":{"digest":"b421c17eef1e2af7","label":"RDP (X.224)","strings":["Cookie: mstshash=anonymous"]}},{"timestamp":"2026-09-09T04:57:55","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000/*�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=anonymous\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002f2ae00000000000436f6f6b69653a206d737473686173683d616e6f6e796d6f75730d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"666fbf37-1678-4661-b0fe-8a95f0313187","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":11,"enriched":{"digest":"b421c17eef1e2af7","label":"RDP (X.224)","strings":["Cookie: mstshash=anonymous"]}},{"timestamp":"2026-09-09T04:57:46","port":3390,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000/*�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=anonymous\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"0300002f2ae00000000000436f6f6b69653a206d737473686173683d616e6f6e796d6f75730d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"b57b7080-3740-423c-82d2-c6958887c68f","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":11,"enriched":{"digest":"b421c17eef1e2af7","label":"RDP (X.224)","strings":["Cookie: mstshash=anonymous"]}}],"http_methods":[],"distinct_ports_total":3,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-30T18:35:12.981917+00:00"}