{"ip":"102.211.170.38","total_events":2,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["2 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"493 bytes sent","bytes_sent":493,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-26T11:21:55","last_seen":"2026-09-28T05:19:52","events_24h":0,"events_7d":2,"geo":{"country_code":"TG","country_name":"Togo","region":"Maritime","city":"Lomé","lat":6.1316,"lon":1.224,"asn":327727,"org":"C-Squared Limited"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as327727","label":"CSquared Limited","category":"isp","url":"https://www.peeringdb.com/asn/327727"},"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d131000_f57a46bbacb6_e7c285222651"],"tls_client_hello":"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","tls_ja3":["8bee49baa010986785a9e74d688ed7e9"],"http_akin":["b11cun050_00040017_82352b13"]},"fingerprint_peers":{"t13d131000_f57a46bbacb6_e7c285222651":9,"b11cun050_00040017_82352b13":7},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-26","count":1},{"date":"2026-09-28","count":1}],"recent_events":[{"timestamp":"2026-09-28T05:19:52","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept\":\"application/json, */*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a206170706c69636174696f6e2f6a736f6e2c202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"8bee49baa010986785a9e74d688ed7e9","session":"3724a8ec-96fa-4538-b031-f20e5e04bc96","seq":1,"duration_ms":100,"bytes_in":245,"bytes_out":79},{"timestamp":"2026-09-26T11:21:55","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"accept\":\"application/json, */*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"pihole.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"pihole.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a206170706c69636174696f6e2f6a736f6e2c202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"8bee49baa010986785a9e74d688ed7e9","session":"5b05eb46-5956-4f5e-9b29-0e0f2af04ada","seq":1,"duration_ms":144,"bytes_in":248,"bytes_out":79}],"http_methods":[{"method":"GET","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":2,"ports":1}],"distinct_paths_total":1,"top_snis":[{"value":"pihole.chicago.vpnigo.de","count":1},{"value":"vpn.chicago.vpnigo.de","count":1}],"top_hosts":[{"value":"pihole.chicago.vpnigo.de","count":1},{"value":"vpn.chicago.vpnigo.de","count":1}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"application/json, */*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"vpn.chicago.vpnigo.de","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":2},"tags":[],"data_as_of":"2026-10-01T16:33:21.001441+00:00"}