{"ip":"44.242.141.17","total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["1 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"168 bytes sent","bytes_sent":168,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-23T09:14:21","last_seen":"2026-09-23T09:14:21","events_24h":0,"events_7d":1,"geo":{"country_code":"US","country_name":"United States","region":"Oregon","city":"Boardman","lat":45.8401,"lon":-119.705,"asn":16509,"org":"Amazon.com, Inc."},"source_domain":"ec2-44-242-141-17.us-west-2.compute.amazonaws.com","known_scanners":[],"scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":8083,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d2512h1_b78ed14e2fd0_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["d6627faa72aa91c9e2ae51d456173c69"],"http_akin":["a11cun030_0000004c_13ee3d34"]},"fingerprint_peers":{"t13d2512h1_b78ed14e2fd0_ab7e3b40a677":25,"a11cun030_0000004c_13ee3d34":2230},"akin_families":{"a11cun030_0000004c_13ee3d34":{"head":"a11cun030_0000004c_13ee3d34","shapes":4,"ips":2231}},"user_agents":["Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)"],"timeline":[{"date":"2026-09-23","count":1}],"recent_events":[{"timestamp":"2026-09-23T09:14:21","port":8083,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"vpn.chicago.vpnigo.de:8083\",\"user-agent\":\"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1","h2"],"url_path":"/login/","summary":"","payload_hex":"474554202f6c6f67696e2f20485454502f312e310d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64653a383038330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b207770626f742f312e343b202b68747470733a2f2f666f726d732e676c652f616a42617879677a396a53523870384739290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","ja3":"d6627faa72aa91c9e2ae51d456173c69","session":"183874a9-7479-4794-87d8-efb557fc65df","seq":1,"duration_ms":101,"bytes_in":168,"bytes_out":78}],"http_methods":[{"method":"GET","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/login/","count":1,"ports":1}],"distinct_paths_total":1,"top_snis":[{"value":"vpn.chicago.vpnigo.de","count":1}],"top_hosts":[{"value":"vpn.chicago.vpnigo.de","count":1}],"top_alpns":[{"value":"h2, http/1.1","count":1}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"vpn.chicago.vpnigo.de:8083","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-24T12:58:22.878570+00:00"}