{"ip":"3.213.226.45","data_as_of":"2026-10-23T09:58:58+00:00","observed":true,"total_events":141,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["148 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Counts include 7 interactive session(s) as well as first-packet events."],"engagement":{"level":"request","label":"Request traffic","detail":"3,432 bytes sent","bytes_sent":3432,"session_seconds":0,"persistent":false},"basis":"combined"},"first_seen":"2026-02-27T12:31:02","last_seen":"2026-10-15T20:50:08","events_24h":0,"events_7d":0,"interactive_sessions":7,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[{"protocol":"http","sessions":7}],"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Ashburn","lat":39.0469,"lon":-77.4903,"asn":14618,"org":"Amazon.com, Inc."},"source_domain":"ec2-3-213-226-45.compute-1.amazonaws.com","known_scanners":[],"scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"},"cve_matches":[],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":7,"first_seen":"2026-10-15T16:50:48","last_seen":"2026-10-15T16:50:48","verdicts":[{"verdict":"unknown","sessions":6},{"verdict":"scan","sessions":1}],"personas":[{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, discovery@igd 1.0, fortigate@7.2.1","sessions":7}],"services":[{"protocol":"http","port":443,"sessions":7}],"logins":[],"commands":[],"downloads":[],"files":[],"attack":[{"technique_id":"T1595","technique_name":"Active Scanning","tactic_id":"TA0043","tactic_name":"Reconnaissance","sessions":1}]},"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":141,"sessions":7}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t10i040700_cefcabfea53d_d96c4944524b","t11i040700_cefcabfea53d_d96c4944524b","t12i040900_847a4004cbf9_a92c7c6a82fe","t13i031000_55b375c5d22e_b36ed9cfacdc","ts3i170000_f48c3765b203_000000000000"],"tls_client_hello":"","tls_ja3":["387fec6871738fb5adb3695ca1503040","4b7c9e5cd9596f4aafe940b8fc41ff89","51da711b7d569fac858b548296cc5ca0","80eada7719bbed095130efee745e89e2","af232ab01c5a432d1148b4f805c5df16"],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":["t10i040700_cefcabfea53d_d96c4944524b","t11i040700_cefcabfea53d_d96c4944524b","t12i040900_847a4004cbf9_a92c7c6a82fe","t13i031000_55b375c5d22e_b36ed9cfacdc","ts3i170000_f48c3765b203_000000000000"],"tls_ja3":["387fec6871738fb5adb3695ca1503040","4b7c9e5cd9596f4aafe940b8fc41ff89","51da711b7d569fac858b548296cc5ca0","80eada7719bbed095130efee745e89e2","af232ab01c5a432d1148b4f805c5df16"]}},"fingerprint_peers":{"t10i040700_cefcabfea53d_d96c4944524b":0,"t11i040700_cefcabfea53d_d96c4944524b":0,"t12i040900_847a4004cbf9_a92c7c6a82fe":0,"t13i031000_55b375c5d22e_b36ed9cfacdc":0,"ts3i170000_f48c3765b203_000000000000":0},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-07-31","count":3,"sessions":0},{"date":"2026-08-01","count":1,"sessions":0},{"date":"2026-08-03","count":4,"sessions":0},{"date":"2026-08-04","count":1,"sessions":0},{"date":"2026-08-11","count":3,"sessions":0},{"date":"2026-08-17","count":1,"sessions":0},{"date":"2026-08-18","count":1,"sessions":0},{"date":"2026-08-19","count":1,"sessions":0},{"date":"2026-09-01","count":1,"sessions":0},{"date":"2026-09-04","count":1,"sessions":0},{"date":"2026-09-06","count":2,"sessions":0},{"date":"2026-09-08","count":1,"sessions":0},{"date":"2026-09-10","count":2,"sessions":0},{"date":"2026-09-11","count":3,"sessions":0},{"date":"2026-09-12","count":1,"sessions":0},{"date":"2026-09-14","count":2,"sessions":0},{"date":"2026-09-15","count":1,"sessions":0},{"date":"2026-09-16","count":2,"sessions":0},{"date":"2026-09-18","count":1,"sessions":0},{"date":"2026-09-19","count":2,"sessions":0},{"date":"2026-09-21","count":1,"sessions":0},{"date":"2026-09-23","count":1,"sessions":0},{"date":"2026-09-24","count":4,"sessions":0},{"date":"2026-10-09","count":1,"sessions":0},{"date":"2026-10-10","count":2,"sessions":0},{"date":"2026-10-11","count":3,"sessions":0},{"date":"2026-10-12","count":2,"sessions":0},{"date":"2026-10-13","count":4,"sessions":0},{"date":"2026-10-15","count":5,"sessions":7}],"recent_events":[{"timestamp":"2026-10-15T20:50:08","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�%\u0001\u0000\u0002\u0000\f\u0000\u0000\u0000\u0010\u0005\u0000�\u0003\u0000�\u0001\u0000�\u0007\u0000��L\u0006R_ݪ�'*Ω\u0019�-\u0014","payload_hex":"8025010002000c000000100500800300800100800700c08c4c06525fddaaae272acea919812d14","method":"","user_agent":"","ja3":"","session":"e87d03c3-6662-4ce7-80cf-1a121133f4ab","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":12},{"timestamp":"2026-10-15T16:51:21","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�%\u0001\u0000\u0002\u0000\f\u0000\u0000\u0000\u0010\u0005\u0000�\u0003\u0000�\u0001\u0000�\u0007\u0000��L\u0006R_ݪ�'*Ω\u0019�-\u0014","payload_hex":"8025010002000c000000100500800300800100800700c08c4c06525fddaaae272acea919812d14","method":"","user_agent":"","ja3":"","session":"f5249838-4b9c-49e4-9707-0ec1952f0fef","seq":1,"duration_ms":101,"bytes_in":39,"bytes_out":12},{"timestamp":"2026-10-15T16:50:48","port":443,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"8025010002000c000000100500800300800100800700c08c4c06525fddaaae272acea919812d14","method":"","user_agent":"","ja3":"","session":"8fee0a58-3923-4b9d-8fa8-32411989a5ee-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-15T15:40:42","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�%\u0001\u0000\u0002\u0000\f\u0000\u0000\u0000\u0010\u0005\u0000�\u0003\u0000�\u0001\u0000�\u0007\u0000��L\u0006R_ݪ�'*Ω\u0019�-\u0014","payload_hex":"8025010002000c000000100500800300800100800700c08c4c06525fddaaae272acea919812d14","method":"","user_agent":"","ja3":"","session":"3f0852ae-0109-47cb-9226-31259b77ab03","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":12},{"timestamp":"2026-10-15T07:36:11","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�%\u0001\u0000\u0002\u0000\f\u0000\u0000\u0000\u0010\u0005\u0000�\u0003\u0000�\u0001\u0000�\u0007\u0000��L\u0006R_ݪ�'*Ω\u0019�-\u0014","payload_hex":"8025010002000c000000100500800300800100800700c08c4c06525fddaaae272acea919812d14","method":"","user_agent":"","ja3":"","session":"d082e5eb-0b8c-472b-a499-a705a67103b1","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":12},{"timestamp":"2026-10-15T03:16:22","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�%\u0001\u0000\u0002\u0000\f\u0000\u0000\u0000\u0010\u0005\u0000�\u0003\u0000�\u0001\u0000�\u0007\u0000��L\u0006R_ݪ�'*Ω\u0019�-\u0014","payload_hex":"8025010002000c000000100500800300800100800700c08c4c06525fddaaae272acea919812d14","method":"","user_agent":"","ja3":"","session":"f35b4775-190c-4376-8caf-d26154078b08","seq":1,"duration_ms":101,"bytes_in":39,"bytes_out":12},{"timestamp":"2026-10-13T23:13:23","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�%\u0001\u0000\u0002\u0000\f\u0000\u0000\u0000\u0010\u0005\u0000�\u0003\u0000�\u0001\u0000�\u0007\u0000��L\u0006R_ݪ�'*Ω\u0019�-\u0014","payload_hex":"8025010002000c000000100500800300800100800700c08c4c06525fddaaae272acea919812d14","method":"","user_agent":"","ja3":"","session":"b2ac66a1-1fa5-48b1-892a-fb1d0066fba4","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":12},{"timestamp":"2026-10-13T21:39:47","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�%\u0001\u0000\u0002\u0000\f\u0000\u0000\u0000\u0010\u0005\u0000�\u0003\u0000�\u0001\u0000�\u0007\u0000��L\u0006R_ݪ�'*Ω\u0019�-\u0014","payload_hex":"8025010002000c000000100500800300800100800700c08c4c06525fddaaae272acea919812d14","method":"","user_agent":"","ja3":"","session":"271f6c63-78ef-4d2d-a7fb-397fed4b20fd","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":12},{"timestamp":"2026-10-13T07:42:05","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�%\u0001\u0000\u0002\u0000\f\u0000\u0000\u0000\u0010\u0005\u0000�\u0003\u0000�\u0001\u0000�\u0007\u0000��L\u0006R_ݪ�'*Ω\u0019�-\u0014","payload_hex":"8025010002000c000000100500800300800100800700c08c4c06525fddaaae272acea919812d14","method":"","user_agent":"","ja3":"","session":"49fb513a-63a1-4dea-9386-f67d8b51731b","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":12},{"timestamp":"2026-10-13T01:42:40","port":443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�%\u0001\u0000\u0002\u0000\f\u0000\u0000\u0000\u0010\u0005\u0000�\u0003\u0000�\u0001\u0000�\u0007\u0000��L\u0006R_ݪ�'*Ω\u0019�-\u0014","payload_hex":"8025010002000c000000100500800300800100800700c08c4c06525fddaaae272acea919812d14","method":"","user_agent":"","ja3":"","session":"76fa95c1-0474-4491-b7b8-fb532811c544","seq":1,"duration_ms":100,"bytes_in":39,"bytes_out":12}],"http_methods":[],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}