{"ip":"76.13.10.2","total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["1 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"247 bytes sent","bytes_sent":247,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-27T19:08:06","last_seen":"2026-09-27T19:08:06","events_24h":0,"events_7d":1,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":47583,"org":"Hostinger International Limited"},"source_domain":"srv1791560.hstgr.cloud","known_scanners":[],"scanner_tag":{"key":"peeringdb:as47583","label":"Hostinger International","category":"cdn","url":"https://www.peeringdb.com/asn/47583"},"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13d521100_b262b3658495_8e6e362c5eac"],"tls_client_hello":"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","tls_ja3":["944d1e1858cd278718f8a46b65d3212f"],"http_akin":["b11cun040_00040015_62184d6e"]},"fingerprint_peers":{"t13d521100_b262b3658495_8e6e362c5eac":3,"b11cun040_00040015_62184d6e":4},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-09-27","count":1}],"recent_events":[{"timestamp":"2026-09-27T19:08:06","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"vpn.chicago.vpnigo.de","headers":"{\"accept\":\"text/html,application/xhtml+xml,*/*;q=0.8\",\"connection\":\"keep-alive\",\"host\":\"vpn.chicago.vpnigo.de\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"vpn.chicago.vpnigo.de","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c2a2f2a3b713d302e380d0a486f73743a2076706e2e6368696361676f2e76706e69676f2e64650d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"944d1e1858cd278718f8a46b65d3212f","session":"76496b5e-e2c5-4ad5-b732-50724901f454","seq":1,"duration_ms":100,"bytes_in":247,"bytes_out":75}],"http_methods":[{"method":"GET","count":1}],"distinct_ports_total":1,"top_paths":[{"path":"/","count":1,"ports":1}],"distinct_paths_total":1,"top_snis":[{"value":"vpn.chicago.vpnigo.de","count":1}],"top_hosts":[{"value":"vpn.chicago.vpnigo.de","count":1}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,*/*;q=0.8","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"vpn.chicago.vpnigo.de","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-30T11:26:52.818082+00:00"}