{"ip":"44.234.119.239","total_events":2,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["2 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"500 bytes sent","bytes_sent":500,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-23T08:40:31","last_seen":"2026-09-23T08:40:31","events_24h":0,"events_7d":2,"geo":{"country_code":"US","country_name":"United States","region":"Oregon","city":"Boardman","lat":45.8401,"lon":-119.705,"asn":16509,"org":"Amazon.com, Inc."},"source_domain":"ec2-44-234-119-239.us-west-2.compute.amazonaws.com","known_scanners":[],"scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d2512h1_b78ed14e2fd0_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["d6627faa72aa91c9e2ae51d456173c69"],"http_akin":["a11cun030_0000004c_13ee3d34"]},"fingerprint_peers":{"t13d2512h1_b78ed14e2fd0_ab7e3b40a677":25,"a11cun030_0000004c_13ee3d34":2236},"akin_families":{"a11cun030_0000004c_13ee3d34":{"head":"a11cun030_0000004c_13ee3d34","shapes":4,"ips":2236}},"user_agents":["Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)"],"timeline":[{"date":"2026-09-23","count":2}],"recent_events":[{"timestamp":"2026-09-23T08:40:31","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1","h2"],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b207770626f742f312e343b202b68747470733a2f2f666f726d732e676c652f616a42617879677a396a53523870384739290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","ja3":"d6627faa72aa91c9e2ae51d456173c69","session":"01106f8c-0c08-479e-933a-4e3c8e22160b","seq":1,"duration_ms":100,"bytes_in":167,"bytes_out":79},{"timestamp":"2026-09-23T08:40:31","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1","h2"],"url_path":"/enhancecp","summary":"","payload_hex":"474554202f656e68616e6365637020485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b207770626f742f312e343b202b68747470733a2f2f666f726d732e676c652f616a42617879677a396a53523870384739290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","ja3":"d6627faa72aa91c9e2ae51d456173c69","session":"01106f8c-0c08-479e-933a-4e3c8e22160b","seq":2,"duration_ms":246,"bytes_in":333,"bytes_out":158}],"http_methods":[{"method":"GET","count":2}],"distinct_ports_total":1,"top_paths":[{"path":"/enhancecp","count":1,"ports":1},{"path":"/robots.txt","count":1,"ports":1}],"distinct_paths_total":2,"top_snis":[{"value":"vpn.chicago.vpnigo.de","count":2}],"top_hosts":[{"value":"vpn.chicago.vpnigo.de","count":2}],"top_alpns":[{"value":"h2, http/1.1","count":2}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"vpn.chicago.vpnigo.de","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","notable":false}],"distinct_sets":1,"events_with_headers":2},"tags":[],"data_as_of":"2026-09-24T14:28:41.827024+00:00"}