{"ip":"35.93.94.245","total_events":2,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"1 exploit-path probe(s)","confidence":"medium","network_type":"enterprise","why":["1 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"365 bytes sent","bytes_sent":365,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-23T05:54:39","last_seen":"2026-09-23T09:10:21","events_24h":0,"events_7d":2,"geo":{"country_code":"US","country_name":"United States","region":"Oregon","city":"Boardman","lat":45.8401,"lon":-119.705,"asn":16509,"org":"Amazon.com, Inc."},"source_domain":"ec2-35-93-94-245.us-west-2.compute.amazonaws.com","known_scanners":[],"scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":2005,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d2512h1_b78ed14e2fd0_ab7e3b40a677"],"tls_client_hello":"16030106120100060e030309d347136c0cd088c267c9f43a67fe758e5685a90ec50f7aeb2c9360dd110371208ff8e3a0d6dad04aebe07f6b4ec87aeea7c692a75d8cf8bdf721f8ab4d9234b20032c02bc02fc02cc030cca9cca8c009c013c00ac014009c009d002f0035c012000ac023c027003cc007c0110005130113021303010005930000001a001800001576706e2e6368696361676f2e76706e69676f2e6465000b00020100ff010001000017000000120000000500050100000000000a0010000e11ec11eb11ed001d001700180019000d0016001408040403080708050806040105010601050306030032001a00180804040308070805080604010501060105030603020102030010000e000c08687474702f312e31026832002b0009080304030303020301003304ea04e811ec04c0d0e97622fcc20050709b2a332e72807a1a60dc369f69c1a455900716947d8463681b30306a7474b5bb14a0309256f45c3e7a9a00d755bc95168e166e5ba1939e81c209a78eeaf5a32766c07a6a33dfda49675c4cdbf61105b80ad938976e0c0e21b48513d1517f3a57c8051ca04625914abb2466bf66d67675a39ef9d5be3dec9695c0324122627388ca7e5431b46434f90a5a2dc5b18bcb0278d3461a70cd6a447cc66424b2f8714a7873a77b7205b984db258994e4cc085963b9105ace344e258c2c3d9a956a677e3b131f0835afe484c6b96c88295a89b3a564ca614c1f87862e477623d53cadc05152c8783333bf40d23a1e073a36394fe38498a9084b4412c617c5037aac32ab6b037d0988441706e6567062b2a8da0cb4a734b8cae97476a995f6b9181200a6f72a5914e24cbb8206d0dcbf59c5698b272872b207bc430cd362186efb77b78c9c1895cdfb15b77435b747665693c56809a26d3163ace296253124172d199666058c77a0272675c9373230195b4460dc29e0870a2f856e0da38b9596bd492bca92e4b15b4cc48a357a6cc86a0f08ca4f47affdf56a13359f19cb7b85a2936b77a60326bfc370a43de21ab3610dd4619df2338faef8920c63958222862abb32150b58dc553ceae416d294c1a4304833908b3b7b5f23b86a3b0706e99750e8448206e62c1af532e63920243b864fc09b6de2c5bd5a97a358287e6b4378e5bc8bab6b857c3eb802a850dc39497805a5a2918211c7b2d97d7822337ee73b3588988d189cd1079a482269f7737d20e439a5e321ed1290a0aac00d392ff83bcc9246bb3a571be5801c1dc851714b8ccdec847248b07ec71ed124099ca16a430445404c398580c0df1750aaa32521d61c45cc0109b982fdb1493997128ca80ecf7b8988788809a00cc53599d7269861ab38f18a8c42a4579d138c7e07b995d135628a03d869184ed1abeb138180dc41fb87ccdcdc80332a1211a34df4065ebca0b94849487b49c32c001adf252639913d597224b92b6421a4682ba829eedb7168b0a6601b7a46d084a94c6fb8f37240e5be9dd9995b935ca49b88787679ce4b4f0531743d47487d273ce0b37874551d72acc94d0b22ffaab1ffc2c1e28c0e1b9a79db012a1270c1db9977467ca0a2181e057852c21269d6f4aafc79335baa0a9264504a0c8a16f0adb17353ccb3550c586cd0da47bf2448c8f7ad60985d24880842f38daa942f5c676dc964353b81201422a48fd9a5f5bbb61d636db7a63881e7c51272c842096ae273615fd7942beb2f7927759e114d06230462300ff1686b7e19bb829a20d9b03fbfa51ed12b7f96422b1d8c6a3712cbf161ac5c15b7319799715ab68c4a280a1ba5b205543b2b48266c9f15486646b05878c99c43605434f2b286334b54d5bb4c1960f7c770ec0379b81b3a996a6f636a6798d65a6ee02aa0a70bd487c327f368862b7d7217b85bba66148a4d06c4cfb7439f2c143aecb30accac2411246d830526163c33aa3897d74953d3a1cbe67b6cf619c80bbb54cfa073476aa66f5179df847bec6c14e2d15db8d5cee6c681f8a9a6a173392ae1179a87998aab67906904452293d1093a3ff13b8ef7bc92a894bf3b844f10591c11228e8059c3c8478f4ff2ff5a748cd25ecd10c27ab5b8882357eeca63f019cb39a6922c3ecef818277ad90d16ca761ccb8e3f41abf97033956dfa3b001d002063f019cb39a6922c3ecef818277ad90d16ca761ccb8e3f41abf97033956dfa3b","tls_ja3":["d6627faa72aa91c9e2ae51d456173c69"],"http_akin":["a11cun030_0000004c_13ee3d34"]},"fingerprint_peers":{"t13d2512h1_b78ed14e2fd0_ab7e3b40a677":25,"a11cun030_0000004c_13ee3d34":2230},"akin_families":{"a11cun030_0000004c_13ee3d34":{"head":"a11cun030_0000004c_13ee3d34","shapes":4,"ips":2232}},"user_agents":["Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)"],"timeline":[{"date":"2026-09-23","count":2}],"recent_events":[{"timestamp":"2026-09-23T09:10:21","port":2005,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"vpn.chicago.vpnigo.de:2005\",\"user-agent\":\"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1","h2"],"url_path":"/index.php?act=login","summary":"","payload_hex":"474554202f696e6465782e7068703f6163743d6c6f67696e20485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64653a323030350d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b207770626f742f312e343b202b68747470733a2f2f666f726d732e676c652f616a42617879677a396a53523870384739290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","ja3":"d6627faa72aa91c9e2ae51d456173c69","session":"2c99472e-4fd7-4f82-8b2e-aaf8caf19f70","seq":1,"duration_ms":100,"bytes_in":181,"bytes_out":77},{"timestamp":"2026-09-23T05:54:39","port":2005,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"pihole.chicago.vpnigo.de:2005\",\"user-agent\":\"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)\"}","body":"","sni":"pihole.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1","h2"],"url_path":"/index.php?act=login","summary":"","payload_hex":"474554202f696e6465782e7068703f6163743d6c6f67696e20485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64653a323030350d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b207770626f742f312e343b202b68747470733a2f2f666f726d732e676c652f616a42617879677a396a53523870384739290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","ja3":"d6627faa72aa91c9e2ae51d456173c69","session":"e7bbfdc4-eada-4939-b0dd-bfa98d222574","seq":1,"duration_ms":101,"bytes_in":184,"bytes_out":77}],"http_methods":[{"method":"GET","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/index.php?act=login","count":2,"ports":1}],"distinct_paths_total":1,"top_snis":[{"value":"pihole.chicago.vpnigo.de","count":1},{"value":"vpn.chicago.vpnigo.de","count":1}],"top_hosts":[{"value":"pihole.chicago.vpnigo.de","count":1},{"value":"vpn.chicago.vpnigo.de","count":1}],"top_alpns":[{"value":"h2, http/1.1","count":2}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"vpn.chicago.vpnigo.de:2005","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","notable":false}],"distinct_sets":1,"events_with_headers":2},"tags":[],"data_as_of":"2026-09-24T13:01:38.698599+00:00"}