{"ip":"90.90.176.236","total_events":50062,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"50,062 events across 2 port(s)","confidence":"high","network_type":"residential ISP","why":["50,062 requests against only 2 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range.","Held a session open for 8412s, against a median of well under a second."],"engagement":{"level":"payload","label":"Sustained payload, held open","detail":"15,413,450,543 bytes sent, longest session 8412s","bytes_sent":15413450543,"session_seconds":8412,"persistent":true}},"first_seen":"2026-08-16T20:40:05","last_seen":"2026-08-18T01:53:55","events_24h":0,"events_7d":50062,"geo":{"country_code":"FR","country_name":"France","region":"Île-de-France","city":"Mantes-la-Ville","lat":48.9672,"lon":1.699,"asn":3215,"org":"Orange"},"source_domain":"lfbn-idf1-1-1495-236.w90-90.abo.wanadoo.fr","known_scanners":[],"scanner_tag":{"key":"peeringdb:as3215","label":"Orange France","category":"isp","url":"https://www.peeringdb.com/asn/3215"},"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":39959},{"port":80,"proto":"tcp","label":"HTTP","count":10103}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-16","count":10103},{"date":"2026-08-17","count":7516},{"date":"2026-08-18","count":32443}],"recent_events":[{"timestamp":"2026-08-18T01:53:55","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�5�@��\u0007\u0018","payload_hex":"e235aa4091c60718","method":"","user_agent":"","ja3":"","session":"de778bb5-9e6f-46be-a9f6-786a65d9e461","seq":39703,"duration_ms":8411647,"bytes_in":421532,"bytes_out":516115},{"timestamp":"2026-08-18T01:53:55","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�5�@��\u0007\u0018","payload_hex":"e235aa4091c60718","method":"","user_agent":"","ja3":"","session":"de778bb5-9e6f-46be-a9f6-786a65d9e461","seq":39703,"duration_ms":8411647,"bytes_in":421532,"bytes_out":516115},{"timestamp":"2026-08-18T01:53:55","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�5�@��\u0007\u0018","payload_hex":"e235aa4091c60718","method":"","user_agent":"","ja3":"","session":"de778bb5-9e6f-46be-a9f6-786a65d9e461","seq":39703,"duration_ms":8411647,"bytes_in":421532,"bytes_out":516115},{"timestamp":"2026-08-18T01:53:54","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���\fa���","payload_hex":"f0aeef0c61f9d0d8","method":"","user_agent":"","ja3":"","session":"de778bb5-9e6f-46be-a9f6-786a65d9e461","seq":39702,"duration_ms":8411399,"bytes_in":421524,"bytes_out":516102},{"timestamp":"2026-08-18T01:53:54","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"E��A{6�Yq\u0004Q�mV�","payload_hex":"458fc0417b3697597104519b6d56c0","method":"","user_agent":"","ja3":"","session":"de778bb5-9e6f-46be-a9f6-786a65d9e461","seq":39701,"duration_ms":8411208,"bytes_in":421516,"bytes_out":516089},{"timestamp":"2026-08-18T01:53:54","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0017CȢ׿7Ҥ:(?�","payload_hex":"1743c8a2d7bf37d2a43a283fe8","method":"","user_agent":"","ja3":"","session":"de778bb5-9e6f-46be-a9f6-786a65d9e461","seq":39700,"duration_ms":8411072,"bytes_in":421501,"bytes_out":516076},{"timestamp":"2026-08-18T01:53:54","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n\\F+�Oq\u000e���","payload_hex":"0a5c462ba14f710eb9d7cf","method":"","user_agent":"","ja3":"","session":"de778bb5-9e6f-46be-a9f6-786a65d9e461","seq":39699,"duration_ms":8410930,"bytes_in":421488,"bytes_out":516063},{"timestamp":"2026-08-18T01:53:54","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\f���#�D3��\u0016�j","payload_hex":"0c95c3f323ec4433af8c169d6a","method":"","user_agent":"","ja3":"","session":"de778bb5-9e6f-46be-a9f6-786a65d9e461","seq":39698,"duration_ms":8410804,"bytes_in":421477,"bytes_out":516050},{"timestamp":"2026-08-18T01:53:54","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���\fa���","payload_hex":"f0aeef0c61f9d0d8","method":"","user_agent":"","ja3":"","session":"de778bb5-9e6f-46be-a9f6-786a65d9e461","seq":39702,"duration_ms":8411399,"bytes_in":421524,"bytes_out":516102},{"timestamp":"2026-08-18T01:53:54","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"E��A{6�Yq\u0004Q�mV�","payload_hex":"458fc0417b3697597104519b6d56c0","method":"","user_agent":"","ja3":"","session":"de778bb5-9e6f-46be-a9f6-786a65d9e461","seq":39701,"duration_ms":8411208,"bytes_in":421516,"bytes_out":516089}],"http_methods":[],"distinct_ports_total":2,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-21T00:31:51.198038+00:00"}