{"ip":"185.64.107.13","total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["1 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"247 bytes sent","bytes_sent":247,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-27T07:37:55","last_seen":"2026-09-27T07:37:55","events_24h":0,"events_7d":1,"geo":{"country_code":"LT","country_name":"Lithuania","region":"Siauliai","city":"Šiauliai","lat":55.9399,"lon":23.3132,"asn":61272,"org":"UAB Bacloud"},"source_domain":"ltbac-r1s1-worker.liubit.lt","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d521100_b262b3658495_8e6e362c5eac"],"tls_client_hello":"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","tls_ja3":["944d1e1858cd278718f8a46b65d3212f"],"http_akin":["b11cun040_00040015_62184d6e"]},"fingerprint_peers":{"t13d521100_b262b3658495_8e6e362c5eac":3,"b11cun040_00040015_62184d6e":4},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-27","count":1}],"recent_events":[{"timestamp":"2026-09-27T07:37:55","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept\":\"text/html,application/xhtml+xml,*/*;q=0.8\",\"connection\":\"keep-alive\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c2a2f2a3b713d302e380d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"944d1e1858cd278718f8a46b65d3212f","session":"c26fb642-afa7-4a0e-ae30-0386c2bd08e3","seq":1,"duration_ms":100,"bytes_in":247,"bytes_out":78}],"http_methods":[{"method":"GET","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1}],"distinct_paths_total":1,"top_snis":[{"value":"vpn.chicago.vpnigo.de","count":1}],"top_hosts":[{"value":"vpn.chicago.vpnigo.de","count":1}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,*/*;q=0.8","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"vpn.chicago.vpnigo.de","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-30T12:53:58.512539+00:00"}