{"ip":"54.163.198.228","total_events":5,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["5 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,563 bytes sent","bytes_sent":2563,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-10T04:14:27","last_seen":"2026-10-10T04:15:21","events_24h":0,"events_7d":5,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Ashburn","lat":39.0469,"lon":-77.4903,"asn":14618,"org":"Amazon.com, Inc."},"source_domain":"ec2-54-163-198-228.compute-1.amazonaws.com","known_scanners":[],"scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":5}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d1516h2_8daaf6152771_d8a2da3f94cd","t13d1114h2_5e2a75874763_89e9e4bb3419"],"tls_client_hello":"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","tls_ja3":["7c0712f266365046f877a606cee99263","0a80f68631b6e8b4634dbc261e8ba60b"],"http_akin":["b11cun130_000473f7_ae219191","b11cun040_00040013_89f46b26","b11cun120_000475d7_06d76291"]},"fingerprint_peers":{"t13d1516h2_8daaf6152771_d8a2da3f94cd":23,"t13d1114h2_5e2a75874763_89e9e4bb3419":8,"b11cun130_000473f7_ae219191":17,"b11cun040_00040013_89f46b26":8,"b11cun120_000475d7_06d76291":2},"akin_families":{"b11cun130_000473f7_ae219191":{"head":"b11cun130_000473f7_ae219191","shapes":2,"ips":17}},"user_agents":["okhttp/5.3.0","Mozilla/5.0 (iPhone; CPU iPhone OS 18_7_8 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Mobile/15E148 Safari/604.1"],"timeline":[{"date":"2026-10-10","count":5}],"recent_events":[{"timestamp":"2026-10-10T04:15:21","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"chicago.vpnigo.de","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"connection\":\"keep-alive\",\"host\":\"chicago.vpnigo.de\",\"sec-ch-ua\":\"\\\"Not)A;Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"138\\\", \\\"HeadlessChrome\\\";v=\\\"138\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"iOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (iPhone; CPU iPhone OS 18_7_8 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Mobile/15E148 Safari/604.1\"}","body":"","sni":"chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (iPhone; CPU iPhone OS 18_7_8 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Mobile/15E148 Safari/604.1","ja3":"7c0712f266365046f877a606cee99263","session":"7fe61788-c088-443a-8414-cbafe2091c54","seq":1,"duration_ms":101,"bytes_in":656,"bytes_out":79},{"timestamp":"2026-10-10T04:15:21","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"chicago.vpnigo.de","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"connection\":\"keep-alive\",\"host\":\"chicago.vpnigo.de\",\"referer\":\"https://chicago.vpnigo.de/\",\"sec-ch-ua\":\"\\\"Not)A;Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"138\\\", \\\"HeadlessChrome\\\";v=\\\"138\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"iOS\\\"\",\"sec-fetch-dest\":\"empty\",\"sec-fetch-mode\":\"cors\",\"sec-fetch-site\":\"same-origin\",\"user-agent\":\"Mozilla/5.0 (iPhone; CPU iPhone OS 18_7_8 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Mobile/15E148 Safari/604.1\"}","body":"","sni":"chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a206368696361676f2e76706e69676f2e64650d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a7365632d63682d75612d706c6174666f726d3a2022694f53220d0a557365722d4167656e743a204d6f7a696c6c612f352e3020286950686f6e653b20435055206950686f6e65204f532031385f375f38206c696b65204d6163204f53205829204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f32362e30204d6f62696c652f313545313438205361666172692f3630342e310d0a7365632d63682d75613a20224e6f7429413b4272616e64223b763d2238222c20224368726f6d69756d223b763d22313338222c2022486561646c6573734368726f6d65223b763d22313338220d0a7365632d63682d75612d6d6f62696c653a203f300d0a4163636570743a202a2f2a0d0a5365632d46657463682d536974653a2073616d652d6f726967696e0d0a5365632d46657463682d4d6f64653a20636f72730d0a5365632d46657463682d446573743a20656d7074790d0a526566657265723a2068747470733a2f2f6368696361676f2e76706e69676f2e64652f0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062722c207a7374640d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (iPhone; CPU iPhone OS 18_7_8 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Mobile/15E148 Safari/604.1","ja3":"7c0712f266365046f877a606cee99263","session":"7fe61788-c088-443a-8414-cbafe2091c54","seq":2,"duration_ms":265,"bytes_in":1178,"bytes_out":158},{"timestamp":"2026-10-10T04:14:28","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\"chicago.vpnigo.de\",\"user-agent\":\"okhttp/5.3.0\"}","body":"","sni":"chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.png","summary":"","payload_hex":"474554202f66617669636f6e2e706e6720485454502f312e310d0a486f73743a206368696361676f2e76706e69676f2e64650d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a4163636570742d456e636f64696e673a20677a69700d0a557365722d4167656e743a206f6b687474702f352e332e300d0a0d0a","method":"GET","user_agent":"okhttp/5.3.0","ja3":"0a80f68631b6e8b4634dbc261e8ba60b","session":"befceeab-58c8-443c-b1a1-f09a32b47cde","seq":3,"duration_ms":344,"bytes_in":370,"bytes_out":237},{"timestamp":"2026-10-10T04:14:27","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\"chicago.vpnigo.de\",\"user-agent\":\"okhttp/5.3.0\"}","body":"","sni":"chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a206368696361676f2e76706e69676f2e64650d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a4163636570742d456e636f64696e673a20677a69700d0a557365722d4167656e743a206f6b687474702f352e332e300d0a0d0a","method":"GET","user_agent":"okhttp/5.3.0","ja3":"0a80f68631b6e8b4634dbc261e8ba60b","session":"befceeab-58c8-443c-b1a1-f09a32b47cde","seq":1,"duration_ms":100,"bytes_in":116,"bytes_out":79},{"timestamp":"2026-10-10T04:14:27","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"chicago.vpnigo.de","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\"chicago.vpnigo.de\",\"user-agent\":\"okhttp/5.3.0\"}","body":"","sni":"chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a206368696361676f2e76706e69676f2e64650d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a4163636570742d456e636f64696e673a20677a69700d0a557365722d4167656e743a206f6b687474702f352e332e300d0a0d0a","method":"GET","user_agent":"okhttp/5.3.0","ja3":"0a80f68631b6e8b4634dbc261e8ba60b","session":"befceeab-58c8-443c-b1a1-f09a32b47cde","seq":2,"duration_ms":222,"bytes_in":243,"bytes_out":158}],"http_methods":[{"method":"GET","count":5}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":2,"ports":1},{"path":"/favicon.ico","count":2,"ports":1},{"path":"/favicon.png","count":1,"ports":1}],"distinct_paths_total":3,"top_snis":[{"value":"chicago.vpnigo.de","count":5}],"top_hosts":[{"value":"chicago.vpnigo.de","count":5}],"top_alpns":[{"value":"h2, http/1.1","count":5}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","Sec-Ch-Ua","Sec-Ch-Ua-Mobile","Sec-Ch-Ua-Platform","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","Sec-Fetch-User","Upgrade-Insecure-Requests","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate, br, zstd","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"chicago.vpnigo.de","notable":false},{"name":"Sec-Ch-Ua","value":"\"Not)A;Brand\";v=\"8\", \"Chromium\";v=\"138\", \"HeadlessChrome\";v=\"138\"","notable":false},{"name":"Sec-Ch-Ua-Mobile","value":"?0","notable":false},{"name":"Sec-Ch-Ua-Platform","value":"\"iOS\"","notable":false},{"name":"Sec-Fetch-Dest","value":"document","notable":false},{"name":"Sec-Fetch-Mode","value":"navigate","notable":false},{"name":"Sec-Fetch-Site","value":"none","notable":false},{"name":"Sec-Fetch-User","value":"?1","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (iPhone; CPU iPhone OS 18_7_8 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Mobile/15E148 Safari/604.1","notable":false}],"distinct_sets":3,"events_with_headers":5},"tags":[],"data_as_of":"2026-10-13T22:19:32.595684+00:00"}