{"ip":"184.33.240.178","total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["1 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"162 bytes sent","bytes_sent":162,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-23T07:17:58","last_seen":"2026-09-23T07:17:58","events_24h":0,"events_7d":1,"geo":{"country_code":"US","country_name":"United States","region":"Oregon","city":"Boardman","lat":45.8401,"lon":-119.705,"asn":16509,"org":"Amazon.com, Inc."},"source_domain":"ec2-184-33-240-178.us-west-2.compute.amazonaws.com","known_scanners":[],"scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":2083,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d2512h1_b78ed14e2fd0_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["d6627faa72aa91c9e2ae51d456173c69"],"http_akin":["a11cun030_0000004c_13ee3d34"]},"fingerprint_peers":{"t13d2512h1_b78ed14e2fd0_ab7e3b40a677":25,"a11cun030_0000004c_13ee3d34":2230},"akin_families":{"a11cun030_0000004c_13ee3d34":{"head":"a11cun030_0000004c_13ee3d34","shapes":4,"ips":2232}},"user_agents":["Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)"],"timeline":[{"date":"2026-09-23","count":1}],"recent_events":[{"timestamp":"2026-09-23T07:17:58","port":2083,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"vpn.chicago.vpnigo.de:2083\",\"user-agent\":\"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1","h2"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64653a323038330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b207770626f742f312e343b202b68747470733a2f2f666f726d732e676c652f616a42617879677a396a53523870384739290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","ja3":"d6627faa72aa91c9e2ae51d456173c69","session":"834743a4-f615-43e0-8c95-77cf2f2bf9ad","seq":1,"duration_ms":100,"bytes_in":162,"bytes_out":79}],"http_methods":[{"method":"GET","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1}],"distinct_paths_total":1,"top_snis":[{"value":"vpn.chicago.vpnigo.de","count":1}],"top_hosts":[{"value":"vpn.chicago.vpnigo.de","count":1}],"top_alpns":[{"value":"h2, http/1.1","count":1}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"vpn.chicago.vpnigo.de:2083","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-24T13:04:54.198622+00:00"}