{"ip":"35.168.130.13","data_as_of":"2026-10-21T15:03:33+00:00","observed":true,"total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["1 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"245 bytes sent","bytes_sent":245,"session_seconds":1,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-02T00:54:59","last_seen":"2026-10-02T00:54:59","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Ashburn","lat":39.0469,"lon":-77.4903,"asn":14618,"org":"Amazon.com, Inc."},"source_domain":"ec2-35-168-130-13.compute-1.amazonaws.com","known_scanners":[],"scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d131000_f57a46bbacb6_e7c285222651"],"tls_client_hello":"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","tls_ja3":["8bee49baa010986785a9e74d688ed7e9"],"http_akin":["b11cun050_00040017_82352b13"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13d131000_f57a46bbacb6_e7c285222651":21,"b11cun050_00040017_82352b13":10},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-02","count":1}],"recent_events":[{"timestamp":"2026-10-02T00:54:59","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept\":\"application/json, */*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a206170706c69636174696f6e2f6a736f6e2c202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"8bee49baa010986785a9e74d688ed7e9","session":"3343ba60-dd8c-4aeb-86f5-e2bef55bfffe","seq":1,"duration_ms":673,"bytes_in":245,"bytes_out":78}],"http_methods":[{"method":"GET","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1}],"distinct_paths_total":1,"top_snis":[{"value":"vpn.chicago.vpnigo.de","count":1}],"top_hosts":[{"value":"vpn.chicago.vpnigo.de","count":1}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"application/json, */*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"vpn.chicago.vpnigo.de","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[]}