{"ip":"44.234.121.37","total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["1 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"163 bytes sent","bytes_sent":163,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-23T08:50:47","last_seen":"2026-09-23T08:50:47","events_24h":0,"events_7d":1,"geo":{"country_code":"US","country_name":"United States","region":"Oregon","city":"Boardman","lat":45.8401,"lon":-119.705,"asn":16509,"org":"Amazon.com, Inc."},"source_domain":"ec2-44-234-121-37.us-west-2.compute.amazonaws.com","known_scanners":[],"scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":10000,"proto":"tcp","label":"Webmin","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d2512h1_b78ed14e2fd0_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["d6627faa72aa91c9e2ae51d456173c69"],"http_akin":["a11cun030_0000004c_13ee3d34"]},"fingerprint_peers":{"t13d2512h1_b78ed14e2fd0_ab7e3b40a677":25,"a11cun030_0000004c_13ee3d34":2230},"akin_families":{"a11cun030_0000004c_13ee3d34":{"head":"a11cun030_0000004c_13ee3d34","shapes":4,"ips":2231}},"user_agents":["Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)"],"timeline":[{"date":"2026-09-23","count":1}],"recent_events":[{"timestamp":"2026-09-23T08:50:47","port":10000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"vpn.chicago.vpnigo.de:10000\",\"user-agent\":\"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1","h2"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64653a31303030300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b207770626f742f312e343b202b68747470733a2f2f666f726d732e676c652f616a42617879677a396a53523870384739290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","ja3":"d6627faa72aa91c9e2ae51d456173c69","session":"a890f6f5-4dbf-4e29-98ea-48f5d2abaec9","seq":1,"duration_ms":100,"bytes_in":163,"bytes_out":78}],"http_methods":[{"method":"GET","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1}],"distinct_paths_total":1,"top_snis":[{"value":"vpn.chicago.vpnigo.de","count":1}],"top_hosts":[{"value":"vpn.chicago.vpnigo.de","count":1}],"top_alpns":[{"value":"h2, http/1.1","count":1}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"vpn.chicago.vpnigo.de:10000","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-24T12:58:22.780659+00:00"}