{"ip":"213.136.93.169","data_as_of":"2026-10-21T14:59:49+00:00","observed":true,"total_events":2,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["2 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"493 bytes sent","bytes_sent":493,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-06T18:13:11","last_seen":"2026-10-17T16:42:26","events_24h":0,"events_7d":1,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"FR","country_name":"France","region":"Grand Est","city":"Lauterbourg","lat":48.9742,"lon":8.1851,"asn":51167,"org":"Contabo GmbH"},"source_domain":"m11420.contaboserver.net","known_scanners":[],"scanner_tag":{"key":"contabo","label":"Contabo","category":"hosting_provider","url":"https://contabo.com/"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d131000_f57a46bbacb6_e7c285222651"],"tls_client_hello":"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","tls_ja3":["8bee49baa010986785a9e74d688ed7e9"],"http_akin":["b11cun050_00040017_82352b13"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13d131000_f57a46bbacb6_e7c285222651":21,"b11cun050_00040017_82352b13":10},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-06","count":1},{"date":"2026-10-17","count":1}],"recent_events":[{"timestamp":"2026-10-17T16:42:26","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept\":\"application/json, */*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a206170706c69636174696f6e2f6a736f6e2c202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"8bee49baa010986785a9e74d688ed7e9","session":"52ea0b95-83b8-4ef1-8f3c-27b7ad401d71","seq":1,"duration_ms":111,"bytes_in":245,"bytes_out":79},{"timestamp":"2026-10-06T18:13:11","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"accept\":\"application/json, */*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"pihole.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"pihole.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a206170706c69636174696f6e2f6a736f6e2c202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"8bee49baa010986785a9e74d688ed7e9","session":"5c0f44c5-5937-4743-b2e0-b2c0cd28b2ba","seq":1,"duration_ms":100,"bytes_in":248,"bytes_out":79}],"http_methods":[{"method":"GET","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":2,"ports":1}],"distinct_paths_total":1,"top_snis":[{"value":"pihole.chicago.vpnigo.de","count":1},{"value":"vpn.chicago.vpnigo.de","count":1}],"top_hosts":[{"value":"pihole.chicago.vpnigo.de","count":1},{"value":"vpn.chicago.vpnigo.de","count":1}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"application/json, */*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"vpn.chicago.vpnigo.de","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":2},"tags":[]}