{"ip":"35.80.14.99","total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["1 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"162 bytes sent","bytes_sent":162,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-23T08:46:11","last_seen":"2026-09-23T08:46:11","events_24h":0,"events_7d":1,"geo":{"country_code":"US","country_name":"United States","region":"Oregon","city":"Boardman","lat":45.8401,"lon":-119.705,"asn":16509,"org":"Amazon.com, Inc."},"source_domain":"ec2-35-80-14-99.us-west-2.compute.amazonaws.com","known_scanners":[],"scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":2222,"proto":"tcp","label":"SSH-alt","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d2512h1_b78ed14e2fd0_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["d6627faa72aa91c9e2ae51d456173c69"],"http_akin":["a11cun030_0000004c_13ee3d34"]},"fingerprint_peers":{"t13d2512h1_b78ed14e2fd0_ab7e3b40a677":25,"a11cun030_0000004c_13ee3d34":2236},"akin_families":{"a11cun030_0000004c_13ee3d34":{"head":"a11cun030_0000004c_13ee3d34","shapes":4,"ips":2236}},"user_agents":["Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)"],"timeline":[{"date":"2026-09-23","count":1}],"recent_events":[{"timestamp":"2026-09-23T08:46:11","port":2222,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"vpn.chicago.vpnigo.de:2222\",\"user-agent\":\"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1","h2"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64653a323232320d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b207770626f742f312e343b202b68747470733a2f2f666f726d732e676c652f616a42617879677a396a53523870384739290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","ja3":"d6627faa72aa91c9e2ae51d456173c69","session":"3bc40d2c-26bf-4ae2-91a1-a3cb65472207","seq":1,"duration_ms":100,"bytes_in":162,"bytes_out":76}],"http_methods":[{"method":"GET","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1}],"distinct_paths_total":1,"top_snis":[{"value":"vpn.chicago.vpnigo.de","count":1}],"top_hosts":[{"value":"vpn.chicago.vpnigo.de","count":1}],"top_alpns":[{"value":"h2, http/1.1","count":1}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"vpn.chicago.vpnigo.de:2222","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-24T14:27:45.916442+00:00"}