{"ip":"44.242.171.142","total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["1 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"165 bytes sent","bytes_sent":165,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-23T06:03:23","last_seen":"2026-09-23T06:03:23","events_24h":0,"events_7d":1,"geo":{"country_code":"US","country_name":"United States","region":"Oregon","city":"Boardman","lat":45.8401,"lon":-119.705,"asn":16509,"org":"Amazon.com, Inc."},"source_domain":"ec2-44-242-171-142.us-west-2.compute.amazonaws.com","known_scanners":[],"scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":8090,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d2512h1_b78ed14e2fd0_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["d6627faa72aa91c9e2ae51d456173c69"],"http_akin":["a11cun030_0000004c_13ee3d34"]},"fingerprint_peers":{"t13d2512h1_b78ed14e2fd0_ab7e3b40a677":25,"a11cun030_0000004c_13ee3d34":2230},"akin_families":{"a11cun030_0000004c_13ee3d34":{"head":"a11cun030_0000004c_13ee3d34","shapes":4,"ips":2231}},"user_agents":["Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)"],"timeline":[{"date":"2026-09-23","count":1}],"recent_events":[{"timestamp":"2026-09-23T06:03:23","port":8090,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"pihole.chicago.vpnigo.de:8090\",\"user-agent\":\"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)\"}","body":"","sni":"pihole.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1","h2"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64653a383039300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b207770626f742f312e343b202b68747470733a2f2f666f726d732e676c652f616a42617879677a396a53523870384739290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","ja3":"d6627faa72aa91c9e2ae51d456173c69","session":"10a3f248-14e5-4502-917b-4b37429cd9e5","seq":1,"duration_ms":100,"bytes_in":165,"bytes_out":79}],"http_methods":[{"method":"GET","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1}],"distinct_paths_total":1,"top_snis":[{"value":"pihole.chicago.vpnigo.de","count":1}],"top_hosts":[{"value":"pihole.chicago.vpnigo.de","count":1}],"top_alpns":[{"value":"h2, http/1.1","count":1}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"pihole.chicago.vpnigo.de:8090","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-24T12:58:22.478649+00:00"}