{"ip":"114.55.232.178","total_events":24,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"24+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 24 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"480 bytes sent","bytes_sent":480,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-23T03:56:38","last_seen":"2026-09-23T03:56:38","events_24h":24,"events_7d":24,"geo":{"country_code":"CN","country_name":"China","region":"Zhejiang","city":"Hangzhou","lat":30.2943,"lon":120.1663,"asn":37963,"org":"Hangzhou Alibaba Advertising Co.,Ltd."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as37963","label":"Alibaba (China)","category":"cdn","url":"https://www.peeringdb.com/asn/37963"},"cve_matches":[],"malware":[],"top_ports":[{"port":9090,"proto":"tcp","label":"Prometheus","count":1},{"port":26,"proto":"tcp","label":"","count":1},{"port":2223,"proto":"tcp","label":"","count":1},{"port":9999,"proto":"tcp","label":"","count":1},{"port":7777,"proto":"tcp","label":"Oracle","count":1},{"port":23,"proto":"tcp","label":"Telnet","count":1},{"port":50000,"proto":"tcp","label":"SAP","count":1},{"port":6000,"proto":"tcp","label":"X11","count":1},{"port":444,"proto":"tcp","label":"","count":1},{"port":666,"proto":"tcp","label":"","count":1},{"port":3389,"proto":"tcp","label":"RDP","count":1},{"port":5555,"proto":"tcp","label":"","count":1},{"port":443,"proto":"tcp","label":"HTTPS","count":1},{"port":8022,"proto":"tcp","label":"","count":1},{"port":2002,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["a11lun000_00000000_334359b9"]},"fingerprint_peers":{"a11lun000_00000000_334359b9":8},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-23","count":24}],"recent_events":[{"timestamp":"2026-09-23T03:56:38","port":5555,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"\n\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a0d0a0a0a","method":"GET","user_agent":"","ja3":"","session":"59530f39-c29b-4b01-85b5-220a247197dd","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":79},{"timestamp":"2026-09-23T03:56:38","port":2222,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"\n\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a0d0a0a0a","method":"GET","user_agent":"","ja3":"","session":"c3046748-2fe8-4de0-9881-cbf27c6b0857","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":79},{"timestamp":"2026-09-23T03:56:38","port":2002,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"\n\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a0d0a0a0a","method":"GET","user_agent":"","ja3":"","session":"77260526-3eed-4b84-88f0-2693612070b3","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":79},{"timestamp":"2026-09-23T03:56:38","port":222,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"\n\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a0d0a0a0a","method":"GET","user_agent":"","ja3":"","session":"fbc3ea1a-3ab9-46fa-89ec-f4778655c567","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":79},{"timestamp":"2026-09-23T03:56:38","port":2382,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"\n\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a0d0a0a0a","method":"GET","user_agent":"","ja3":"","session":"e3b58978-6ca9-4907-867f-77d8a8a60cfe","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":79},{"timestamp":"2026-09-23T03:56:38","port":8022,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"\n\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a0d0a0a0a","method":"GET","user_agent":"","ja3":"","session":"4f705981-6386-4274-9c67-dd39b897abda","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":79},{"timestamp":"2026-09-23T03:56:38","port":50000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"\n\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a0d0a0a0a","method":"GET","user_agent":"","ja3":"","session":"115bca7e-141d-497f-834e-6b36d7ed1918","seq":1,"duration_ms":101,"bytes_in":20,"bytes_out":79},{"timestamp":"2026-09-23T03:56:38","port":23,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"\n\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a0d0a0a0a","method":"GET","user_agent":"","ja3":"","session":"384b0de3-787f-4bfc-bb1f-ca4daa350564","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":12},{"timestamp":"2026-09-23T03:56:38","port":4118,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"\n\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a0d0a0a0a","method":"GET","user_agent":"","ja3":"","session":"7305f93e-f48b-457d-894a-697adc2061ce","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":79},{"timestamp":"2026-09-23T03:56:38","port":830,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"\n\n","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a0d0a0a0a","method":"GET","user_agent":"","ja3":"","session":"953c9082-fabe-4f8e-87ca-63cdb3c7cc21","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":79}],"http_methods":[{"method":"GET","count":24}],"distinct_ports_total":24,"top_paths":[{"path":"/","count":24,"ports":24}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-23T15:10:10.105863+00:00"}