{"ip":"13.60.143.220","total_events":7,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["7 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,034 bytes sent","bytes_sent":2034,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-22T20:17:41","last_seen":"2026-09-22T20:18:44","events_24h":7,"events_7d":7,"geo":{"country_code":"SE","country_name":"Sweden","region":"Stockholm County","city":"Stockholm","lat":59.3287,"lon":18.0717,"asn":16509,"org":"Amazon.com, Inc."},"source_domain":"ec2-13-60-143-220.eu-north-1.compute.amazonaws.com","known_scanners":[],"scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":2601,"proto":"tcp","label":"","count":7}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i130900_f57a46bbacb6_e7c285222651"],"tls_client_hello":"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","tls_ja3":["6639916abfac56b9257ca216677085bc"],"http_akin":["a11cun030_00000058_f74a6e72","a11cun050_0000005d_361dcb62"]},"fingerprint_peers":{"t13i130900_f57a46bbacb6_e7c285222651":4416,"a11cun030_00000058_f74a6e72":103,"a11cun050_0000005d_361dcb62":100},"akin_families":{},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"],"timeline":[{"date":"2026-09-22","count":7}],"recent_events":[{"timestamp":"2026-09-22T20:18:44","port":2601,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\":2601\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/config.json","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11","ja3":"6639916abfac56b9257ca216677085bc","session":"e66ec4f9-ca9f-43a5-8d1a-e4411993e365","seq":1,"duration_ms":100,"bytes_in":420,"bytes_out":78},{"timestamp":"2026-09-22T20:18:38","port":2601,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\":2601\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sitemap.xml","summary":"","payload_hex":"474554202f736974656d61702e786d6c20485454502f312e310d0a486f73743a203a323630310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132302e302e302e30205361666172692f3533372e3336204564672f3132302e302e302e300d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c696d6167652f61706e672c2a2f2a3b713d302e382c6170706c69636174696f6e2f7369676e65642d65786368616e67653b763d62333b713d302e370d0a4163636570742d4c616e67756167653a207a682d434e2c7a683b713d302e392c656e3b713d302e382c656e2d47423b713d302e372c656e2d55533b713d302e360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"6639916abfac56b9257ca216677085bc","session":"5dd6cc0c-2692-4d0d-9a97-53caa2fcc55d","seq":1,"duration_ms":100,"bytes_in":433,"bytes_out":78},{"timestamp":"2026-09-22T20:18:37","port":2601,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\":2601\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"6639916abfac56b9257ca216677085bc","session":"cd4ea90c-7968-4d39-af6c-8cfb92402d82","seq":1,"duration_ms":101,"bytes_in":433,"bytes_out":78},{"timestamp":"2026-09-22T20:18:37","port":2601,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\":2601\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a203a323630310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132302e302e302e30205361666172692f3533372e3336204564672f3132302e302e302e300d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c696d6167652f61706e672c2a2f2a3b713d302e382c6170706c69636174696f6e2f7369676e65642d65786368616e67653b763d62333b713d302e370d0a4163636570742d4c616e67756167653a207a682d434e2c7a683b713d302e392c656e3b713d302e382c656e2d47423b713d302e372c656e2d55533b713d302e360d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"6639916abfac56b9257ca216677085bc","session":"14055977-02cd-4315-9aef-e5cccfe359cf","seq":1,"duration_ms":100,"bytes_in":432,"bytes_out":78},{"timestamp":"2026-09-22T20:18:18","port":2601,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"","headers":"{\"accept-language\":\"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6\",\"host\":\":2601\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203a323630310d0a4163636570742d4c616e67756167653a207a682d434e2c7a683b713d302e392c656e3b713d302e382c656e2d47423b713d302e372c656e2d55533b713d302e360d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132302e302e302e30205361666172692f3533372e3336204564672f3132302e302e302e300d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","ja3":"6639916abfac56b9257ca216677085bc","session":"5f248d51-d7f5-4337-8888-72403c815981","seq":1,"duration_ms":100,"bytes_in":254,"bytes_out":78},{"timestamp":"2026-09-22T20:18:00","port":2601,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u00003.�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Administrator\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000","payload_hex":"030000332ee00000000000436f6f6b69653a206d737473686173683d41646d696e6973747261746f720d0a0100080003000000","method":"","user_agent":"","ja3":"","session":"5a04acc7-00c5-410a-b2be-0159be302524","seq":1,"duration_ms":101,"bytes_in":51,"bytes_out":13,"enriched":{"digest":"c91e42b831f80102","label":"RDP (X.224)","strings":["Cookie: mstshash=Administrator"]}},{"timestamp":"2026-09-22T20:17:41","port":2601,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u000b\u0006�\u0000\u0000\u0000\u0000\u0000","payload_hex":"0300000b06e00000000000","method":"","user_agent":"","ja3":"","session":"d0de1b67-5f1a-418b-9965-b6363fd459cd","seq":1,"duration_ms":100,"bytes_in":11,"bytes_out":13,"enriched":{"digest":"c6ea7c5d89294245","label":"TPKT / COTP (ISO-TSAP)"}}],"http_methods":[{"method":"GET","count":5}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1},{"path":"/config.json","count":1,"ports":1},{"path":"/robots.txt","count":1,"ports":1},{"path":"/sitemap.xml","count":1,"ports":1},{"path":"/favicon.ico","count":1,"ports":1}],"distinct_paths_total":5,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6","notable":false},{"name":"Host","value":":2601","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11","notable":false}],"distinct_sets":2,"events_with_headers":5},"tags":[],"data_as_of":"2026-09-23T15:12:50.404230+00:00"}