{"ip":"92.205.176.4","total_events":209,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["209 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"656 bytes sent","bytes_sent":656,"session_seconds":0,"persistent":false}},"first_seen":"2026-03-05T11:30:38","last_seen":"2026-08-14T08:06:00","events_24h":3,"events_7d":3,"geo":{"country_code":"FR","country_name":"France","region":"Grand Est","city":"Strasbourg","lat":48.5848,"lon":7.7419,"asn":21499,"org":"Host Europe GmbH"},"source_domain":"4.176.205.92.host.secureserver.net","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":1433,"proto":"tcp","label":"MSSQL","count":209}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-05-25","count":4},{"date":"2026-05-28","count":3},{"date":"2026-06-05","count":3},{"date":"2026-06-06","count":4},{"date":"2026-07-07","count":3},{"date":"2026-07-31","count":3},{"date":"2026-08-05","count":3},{"date":"2026-08-14","count":3}],"recent_events":[{"timestamp":"2026-08-14T08:06:00","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�-\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000bc2d0000","method":"","user_agent":"","ja3":"","session":"c0f7a62f-f7a5-4751-aaa5-b1c649638cd4","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-08-14T08:05:50","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�-\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000bc2d0000","method":"","user_agent":"","ja3":"","session":"d158dea1-92af-4ce2-b902-0fbc4d3d0015","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-08-14T08:05:39","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�-\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000bc2d0000","method":"","user_agent":"","ja3":"","session":"0ba4c359-7e23-486e-a76b-27a3cdebea6e","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-08-05T02:53:05","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�$\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000098240000","method":"","user_agent":"","ja3":"","session":"6e6bef87-a2cf-4188-b525-28b3068b951a","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-08-05T02:52:55","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�$\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000098240000","method":"","user_agent":"","ja3":"","session":"4efcd12b-cf9a-4738-ba14-1e038b6cca3f","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-08-05T02:52:45","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000�$\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000098240000","method":"","user_agent":"","ja3":"","session":"fd8627c9-7a67-485f-8703-4f40f3964840","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-07-31T00:00:20","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000\u0010\u0018\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000010180000","method":"","user_agent":"","ja3":"","session":"6addbe6a-c551-4d6c-a339-872f79118ca0","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-07-31T00:00:10","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000\u0010\u0018\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000010180000","method":"","user_agent":"","ja3":"","session":"59df1973-e972-454c-a866-bad7f8b5685d","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-07-31T00:00:00","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000\u0010\u0018\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff080001550000000010180000","method":"","user_agent":"","ja3":"","session":"5e5eb934-19cc-49b9-af14-4604935f8ceb","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12},{"timestamp":"2026-07-07T09:43:12","port":1433,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000)\u0000\u0000\u0000\u0000\u0000\u0000\u0015\u0000\u0006\u0001\u0000\u001b\u0000\u0001\u0002\u0000\u001c\u0000\u0001\u0003\u0000\u001d\u0000\u0004�\b\u0000\u0001U\u0000\u0000\u0000\u0000\u0004\u001c\u0000\u0000","payload_hex":"1201002900000000000015000601001b000102001c000103001d0004ff0800015500000000041c0000","method":"","user_agent":"","ja3":"","session":"baec47a2-2456-4be5-ac32-c59e40a71dbd","seq":1,"duration_ms":100,"bytes_in":41,"bytes_out":12}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T04:04:08.510648+00:00"}