{"ip":"35.95.87.94","total_events":2,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["2 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"485 bytes sent","bytes_sent":485,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-24T03:18:06","last_seen":"2026-09-24T03:18:07","events_24h":2,"events_7d":2,"geo":{"country_code":"US","country_name":"United States","region":"Oregon","city":"Boardman","lat":45.8401,"lon":-119.705,"asn":16509,"org":"Amazon.com, Inc."},"source_domain":"ec2-35-95-87-94.us-west-2.compute.amazonaws.com","known_scanners":[],"scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d2512h1_b78ed14e2fd0_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["d6627faa72aa91c9e2ae51d456173c69"],"http_akin":["a11cun030_0000004c_13ee3d34"]},"fingerprint_peers":{"t13d2512h1_b78ed14e2fd0_ab7e3b40a677":25,"a11cun030_0000004c_13ee3d34":2234},"akin_families":{"a11cun030_0000004c_13ee3d34":{"head":"a11cun030_0000004c_13ee3d34","shapes":4,"ips":2234}},"user_agents":["Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)"],"timeline":[{"date":"2026-09-24","count":2}],"recent_events":[{"timestamp":"2026-09-24T03:18:07","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"nl1.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"nl1.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)\"}","body":"","sni":"nl1.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1","h2"],"url_path":"/enhancecp","summary":"","payload_hex":"474554202f656e68616e6365637020485454502f312e310d0a486f73743a206e6c312e7072696e636875622e636f6d0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b207770626f742f312e343b202b68747470733a2f2f666f726d732e676c652f616a42617879677a396a53523870384739290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","ja3":"d6627faa72aa91c9e2ae51d456173c69","session":"2d0befc8-74d8-45a0-b976-301dca844db7","seq":2,"duration_ms":382,"bytes_in":323,"bytes_out":152},{"timestamp":"2026-09-24T03:18:06","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"nl1.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"nl1.princhub.com\",\"user-agent\":\"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)\"}","body":"","sni":"nl1.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1","h2"],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a206e6c312e7072696e636875622e636f6d0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b207770626f742f312e343b202b68747470733a2f2f666f726d732e676c652f616a42617879677a396a53523870384739290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","ja3":"d6627faa72aa91c9e2ae51d456173c69","session":"2d0befc8-74d8-45a0-b976-301dca844db7","seq":1,"duration_ms":100,"bytes_in":162,"bytes_out":76}],"http_methods":[{"method":"GET","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/enhancecp","count":1,"ports":1},{"path":"/robots.txt","count":1,"ports":1}],"distinct_paths_total":2,"top_snis":[{"value":"nl1.princhub.com","count":2}],"top_hosts":[{"value":"nl1.princhub.com","count":2}],"top_alpns":[{"value":"h2, http/1.1","count":2}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"nl1.princhub.com","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","notable":false}],"distinct_sets":1,"events_with_headers":2},"tags":[],"data_as_of":"2026-09-24T13:38:27.744314+00:00"}