{"ip":"44.243.52.6","total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["1 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"171 bytes sent","bytes_sent":171,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-24T05:21:05","last_seen":"2026-09-24T05:21:05","events_24h":1,"events_7d":1,"geo":{"country_code":"US","country_name":"United States","region":"Oregon","city":"Boardman","lat":45.8401,"lon":-119.705,"asn":16509,"org":"Amazon.com, Inc."},"source_domain":"ec2-44-243-52-6.us-west-2.compute.amazonaws.com","known_scanners":[],"scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":2443,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d2512h1_b78ed14e2fd0_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["d6627faa72aa91c9e2ae51d456173c69"],"http_akin":["a11cun030_0000004c_13ee3d34"]},"fingerprint_peers":{"t13d2512h1_b78ed14e2fd0_ab7e3b40a677":25,"a11cun030_0000004c_13ee3d34":2234},"akin_families":{"a11cun030_0000004c_13ee3d34":{"head":"a11cun030_0000004c_13ee3d34","shapes":4,"ips":2234}},"user_agents":["Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)"],"timeline":[{"date":"2026-09-24","count":1}],"recent_events":[{"timestamp":"2026-09-24T05:21:05","port":2443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"nl1.princhub.com","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"nl1.princhub.com:2443\",\"user-agent\":\"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)\"}","body":"","sni":"nl1.princhub.com","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1","h2"],"url_path":"/nodeworx/index","summary":"","payload_hex":"474554202f6e6f6465776f72782f696e64657820485454502f312e310d0a486f73743a206e6c312e7072696e636875622e636f6d3a323434330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b207770626f742f312e343b202b68747470733a2f2f666f726d732e676c652f616a42617879677a396a53523870384739290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","ja3":"d6627faa72aa91c9e2ae51d456173c69","session":"de5aab24-1136-4a0e-ada4-5b04f774351c","seq":1,"duration_ms":100,"bytes_in":171,"bytes_out":76}],"http_methods":[{"method":"GET","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/nodeworx/index","count":1,"ports":1}],"distinct_paths_total":1,"top_snis":[{"value":"nl1.princhub.com","count":1}],"top_hosts":[{"value":"nl1.princhub.com","count":1}],"top_alpns":[{"value":"h2, http/1.1","count":1}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"nl1.princhub.com:2443","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-24T13:38:13.294522+00:00"}