{"ip":"202.61.233.150","data_as_of":"2026-10-21T14:03:08+00:00","observed":true,"total_events":3,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["3 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"734 bytes sent","bytes_sent":734,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-03T15:36:13","last_seen":"2026-10-06T15:37:26","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"DE","country_name":"Germany","region":"Bavaria","city":"Nuremberg","lat":49.4527,"lon":11.0783,"asn":197540,"org":"netcup GmbH"},"source_domain":"ae996.netcup.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as197540","label":"netcup GmbH","category":"cdn","url":"https://www.peeringdb.com/asn/197540"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d131000_f57a46bbacb6_e7c285222651"],"tls_client_hello":"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","tls_ja3":["8bee49baa010986785a9e74d688ed7e9"],"http_akin":["b11cun050_00040017_82352b13"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13d131000_f57a46bbacb6_e7c285222651":21,"b11cun050_00040017_82352b13":10},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-03","count":2},{"date":"2026-10-06","count":1}],"recent_events":[{"timestamp":"2026-10-06T15:37:26","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"chicago.vpnigo.de","headers":"{\"accept\":\"application/json, */*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a206368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a206170706c69636174696f6e2f6a736f6e2c202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"8bee49baa010986785a9e74d688ed7e9","session":"f00e1d6f-a7cd-492c-b461-64c9d3c75e98","seq":1,"duration_ms":100,"bytes_in":241,"bytes_out":79},{"timestamp":"2026-10-03T18:03:55","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"accept\":\"application/json, */*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"pihole.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"pihole.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a206170706c69636174696f6e2f6a736f6e2c202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"8bee49baa010986785a9e74d688ed7e9","session":"10def3aa-974e-4c33-b124-ad800601508f","seq":1,"duration_ms":100,"bytes_in":248,"bytes_out":79},{"timestamp":"2026-10-03T15:36:13","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept\":\"application/json, */*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a206170706c69636174696f6e2f6a736f6e2c202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"8bee49baa010986785a9e74d688ed7e9","session":"65de4f98-e857-4684-bf47-f1c07f127bd4","seq":1,"duration_ms":104,"bytes_in":245,"bytes_out":79}],"http_methods":[{"method":"GET","count":3}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":3,"ports":1}],"distinct_paths_total":1,"top_snis":[{"value":"pihole.chicago.vpnigo.de","count":1},{"value":"vpn.chicago.vpnigo.de","count":1},{"value":"chicago.vpnigo.de","count":1}],"top_hosts":[{"value":"pihole.chicago.vpnigo.de","count":1},{"value":"vpn.chicago.vpnigo.de","count":1},{"value":"chicago.vpnigo.de","count":1}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"application/json, */*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"chicago.vpnigo.de","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":3},"tags":[]}