{"ip":"44.250.208.184","total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["1 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"165 bytes sent","bytes_sent":165,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-23T05:33:12","last_seen":"2026-09-23T05:33:12","events_24h":0,"events_7d":1,"geo":{"country_code":"US","country_name":"United States","region":"Oregon","city":"Boardman","lat":45.8401,"lon":-119.705,"asn":16509,"org":"Amazon.com, Inc."},"source_domain":"ec2-44-250-208-184.us-west-2.compute.amazonaws.com","known_scanners":[],"scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":2222,"proto":"tcp","label":"SSH-alt","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d2512h1_b78ed14e2fd0_ab7e3b40a677"],"tls_client_hello":"16030106150100061103034db314160e67421c799489cd5d5dfad169789fb380c1f5e802fa08a163894b8d20be5bd164de6555f33436465b6f18479455ecb5d86b527cb192df0fdd7d959e050032c02bc02fc02cc030cca9cca8c009c013c00ac014009c009d002f0035c012000ac023c027003cc007c0110005130113021303010005960000001d001b0000187069686f6c652e6368696361676f2e76706e69676f2e6465000b00020100ff010001000017000000120000000500050100000000000a0010000e11ec11eb11ed001d001700180019000d0016001408040403080708050806040105010601050306030032001a00180804040308070805080604010501060105030603020102030010000e000c08687474702f312e31026832002b0009080304030303020301003304ea04e811ec04c099143ffdb5cc682271e684a0dc9323c3fc7c78aa1d0f65aaf30583bfe918f9271636a927587305b1a36b171b64e25391ebd92a2a9c6c85b432c203af55252ef6bb03e872a9758aa16db30a99b66b3a9b00fae249bc87a670f4a557dbc6c5a6c93210c6804329dce4ce2cd0c413d82c08f836c72582d40039d72167d46cb6c1d38d0433bedee6a5651a92a713311dd0adc7478ec3a59178585cbce6660c943cf563cf4e5745f9c33a69db5cea0102c56a7c939b78ba02b4071c7213722aa663cf9f6189e7e903ae713843fb4700db1e46aa3be009313ca18136305bf5d454dc2b19dc28bd5a6267ad9b16472bb3da6461f5651dd3384c740808de8a25d7fb14cec5b016624f679ca05c724aac2939da6623dc1317966abd5519844e101e0a34356689a6d4a77964b4190dc524618a3ca73123bed3bfb5eb257eeb59f4643d83bb5dff0aa6ea360fb742a4a9388bb35a81d18217543b27c8470eb14b1f7b970e5333cb0a218d3fc058799287d47b57783c4812900af55bcb68b07a81870f1332897c47a544340e25701396593a0041aa75bc8453e3c0d8005ce6e78fa49bae43e076211715fe88a97bd44f47388a0b042095f4cbf1b1a8f2dac947e57b3cc733b9ec4d1c05c4681c814d6b8efe317069f8b3c7fa8c13f27573fc43d1a0c716651c116b8240d52afd129e0d0aa6ff21539a07a515637a9ca4504fb3c364f981c7e8b0363525f82839b5dc08f66c426d2c176b26163ec2452a775a046233cf8b40626500def0b8b0bc71fa37c7d10bbeba16bb116756f9f2913af47f5bbab168fb028515686eea54c25c923f2085012b036f7a88e7213abb1808d00a8338c9c007c071fe68b056796d305496c36958039c7a64e40daef04295f75799e41a5f18232b75604f4a8859bb370b4ca33bd2282fc439159a29aaf89ce9344c81376ba20c7243425d1a9a76ba535929b5909dc07a37d91ab7236697897cedd4a5803b0ba6f681291851a981226e675a68eb5be0a7653ee5ac19d9a668780f09f5a58c01be88b10dc9024a6f434b56e6c067853334ca6ca30b3f9c4c05ee986692bc43514a8fffd10eabac850b0047957a3d114b472ca316a9e9151756cf3b7bc50c9c502c996e5a366f18e22a0d06972ca54b87842d65bcb87d774f04d45948b668b80073d6689813c9006402a73f1c99e4e99ca3689f57b6348cb70ea2616fc2c2bc778417e8e41641ab0ee65c884552902127a96605a720fcc187c192595046d53946c5a71a545c5daf7226174b220155376e96c902e52246085834f18f4b50b257f14b304c2b5798680ca4c3507ca0f48339c28a212979b181e23a20c7bee98630e050b07b3056eda3b07e3664c61237bdd4bbe6682fb5c0b9d394b58e76afef29926c6680d7e024d2f8aff33bb0bcc958552bbb2cab429f836c4f0851368336bcc85b1c536a552756f6f5236ca1cfb4367c439c241ac26519ec172d393cacd9ce30830626f454986312490036c4fc9e5290cc0acc8720018d23164fb26365f007090072729f41babaf51d209826d131c92a30bb3ab36ce9d96357c05bb3213ed0c959847271b8e2cca53ab8c6fab70b49065d348811f697834a9a33c21d56267c7de79b3429614852d3c761fb9ad08b94dede0a776ac83dd61fa2e06883b1a73c5af0007a91cde8aae67251739d203cdb016d623f6831dbebd726aa6eb0766dd8dab23b001d00207a91cde8aae67251739d203cdb016d623f6831dbebd726aa6eb076","tls_ja3":["d6627faa72aa91c9e2ae51d456173c69"],"http_akin":["a11cun030_0000004c_13ee3d34"]},"fingerprint_peers":{"t13d2512h1_b78ed14e2fd0_ab7e3b40a677":25,"a11cun030_0000004c_13ee3d34":2234},"akin_families":{"a11cun030_0000004c_13ee3d34":{"head":"a11cun030_0000004c_13ee3d34","shapes":4,"ips":2234}},"user_agents":["Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)"],"timeline":[{"date":"2026-09-23","count":1}],"recent_events":[{"timestamp":"2026-09-23T05:33:12","port":2222,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"pihole.chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"pihole.chicago.vpnigo.de:2222\",\"user-agent\":\"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)\"}","body":"","sni":"pihole.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1","h2"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a207069686f6c652e6368696361676f2e76706e69676f2e64653a323232320d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b207770626f742f312e343b202b68747470733a2f2f666f726d732e676c652f616a42617879677a396a53523870384739290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","ja3":"d6627faa72aa91c9e2ae51d456173c69","session":"8f92c9d0-30c8-4477-9ea9-5c3d69fe705e","seq":1,"duration_ms":100,"bytes_in":165,"bytes_out":79}],"http_methods":[{"method":"GET","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1}],"distinct_paths_total":1,"top_snis":[{"value":"pihole.chicago.vpnigo.de","count":1}],"top_hosts":[{"value":"pihole.chicago.vpnigo.de","count":1}],"top_alpns":[{"value":"h2, http/1.1","count":1}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"pihole.chicago.vpnigo.de:2222","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-24T13:42:15.650217+00:00"}