{"ip":"136.248.100.46","data_as_of":"2026-10-27T01:35:53+00:00","observed":true,"total_events":18,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["21 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Counts include 3 interactive session(s) as well as first-packet events."],"engagement":{"level":"request","label":"Request traffic","detail":"3,384 bytes sent","bytes_sent":3384,"session_seconds":0,"persistent":false},"basis":"combined"},"first_seen":"2026-10-01T07:39:53","last_seen":"2026-10-23T15:37:17","events_24h":0,"events_7d":3,"interactive_sessions":3,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"BR","country_name":"Brazil","region":"São Paulo","city":"São Paulo","lat":-23.5475,"lon":-46.6361,"asn":31898,"org":"Oracle Corporation"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as31898","label":"Oracle Cloud Infrastructure","category":"cdn","url":"https://www.peeringdb.com/asn/31898"},"cve_matches":[],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":3,"first_seen":"2026-10-18T01:48:46","last_seen":"2026-10-18T01:49:14","verdicts":[{"verdict":"unknown","sessions":3}],"personas":[],"services":[{"protocol":"tcp","port":37,"sessions":3}],"logins":[],"commands":[],"downloads":[],"files":[],"attack":[]},"top_ports":[{"port":27,"proto":"tcp","label":"","count":6,"sessions":0},{"port":11,"proto":"tcp","label":"","count":4,"sessions":0},{"port":16,"proto":"tcp","label":"","count":4,"sessions":0},{"port":37,"proto":"tcp","label":"","count":0,"sessions":3},{"port":32,"proto":"tcp","label":"","count":1,"sessions":0},{"port":47,"proto":"tcp","label":"","count":1,"sessions":0},{"port":45,"proto":"tcp","label":"","count":1,"sessions":0},{"port":48,"proto":"tcp","label":"","count":1,"sessions":0}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["b11cun050_00040017_6b90553b"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"b11cun050_00040017_6b90553b":913},"akin_families":{"b11cun050_00040017_6b90553b":{"head":"b11cun050_00040017_6b90553b","shapes":8,"ips":914}},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"],"timeline":[{"date":"2026-10-01","count":4,"sessions":0},{"date":"2026-10-03","count":4,"sessions":0},{"date":"2026-10-10","count":6,"sessions":0},{"date":"2026-10-15","count":1,"sessions":0},{"date":"2026-10-18","count":0,"sessions":3},{"date":"2026-10-22","count":1,"sessions":0},{"date":"2026-10-23","count":2,"sessions":0}],"recent_events":[{"timestamp":"2026-10-23T15:37:17","port":48,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"api.ipify.org","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"api.ipify.org\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://api.ipify.org/","summary":"","payload_hex":"47455420687474703a2f2f6170692e69706966792e6f72672f20485454502f312e310d0a486f73743a206170692e69706966792e6f72670d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"5c8f2e29-1995-4b70-9bf7-25ded1067e24","seq":1,"duration_ms":100,"bytes_in":188,"bytes_out":79},{"timestamp":"2026-10-23T06:52:28","port":47,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"api.ipify.org","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"api.ipify.org\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://api.ipify.org/","summary":"","payload_hex":"47455420687474703a2f2f6170692e69706966792e6f72672f20485454502f312e310d0a486f73743a206170692e69706966792e6f72670d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"80313b80-cb6b-4074-a1af-9795ab1126c4","seq":1,"duration_ms":100,"bytes_in":188,"bytes_out":79},{"timestamp":"2026-10-22T09:23:51","port":45,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"api.ipify.org","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"api.ipify.org\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://api.ipify.org/","summary":"","payload_hex":"47455420687474703a2f2f6170692e69706966792e6f72672f20485454502f312e310d0a486f73743a206170692e69706966792e6f72670d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"4d444f1f-eb57-4446-a82a-c5a33cbf6a32","seq":1,"duration_ms":104,"bytes_in":188,"bytes_out":79},{"timestamp":"2026-10-15T05:27:38","port":32,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"api.ipify.org","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"api.ipify.org\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://api.ipify.org/","summary":"","payload_hex":"47455420687474703a2f2f6170692e69706966792e6f72672f20485454502f312e310d0a486f73743a206170692e69706966792e6f72670d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"f3b61312-a7a2-404b-887a-4a0f41e6e703","seq":1,"duration_ms":100,"bytes_in":188,"bytes_out":79},{"timestamp":"2026-10-10T21:56:02","port":27,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"api.ipify.org","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"api.ipify.org\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://api.ipify.org/","summary":"","payload_hex":"47455420687474703a2f2f6170692e69706966792e6f72672f20485454502f312e310d0a486f73743a206170692e69706966792e6f72670d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"178aa4ca-70b7-4dd7-9820-b7760ed3dcca","seq":1,"duration_ms":100,"bytes_in":188,"bytes_out":79},{"timestamp":"2026-10-10T13:11:39","port":27,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"api.ipify.org","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"api.ipify.org\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://api.ipify.org/","summary":"","payload_hex":"47455420687474703a2f2f6170692e69706966792e6f72672f20485454502f312e310d0a486f73743a206170692e69706966792e6f72670d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"93ce9ac2-bdef-4ea2-9ca3-1f490255dd31","seq":1,"duration_ms":100,"bytes_in":188,"bytes_out":79},{"timestamp":"2026-10-10T13:11:33","port":27,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"api.ipify.org","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"api.ipify.org\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://api.ipify.org/","summary":"","payload_hex":"47455420687474703a2f2f6170692e69706966792e6f72672f20485454502f312e310d0a486f73743a206170692e69706966792e6f72670d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"971cb4ea-ba10-4481-b409-0e16d5cf5f3c","seq":1,"duration_ms":100,"bytes_in":188,"bytes_out":79},{"timestamp":"2026-10-10T13:11:29","port":27,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"api.ipify.org","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"api.ipify.org\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://api.ipify.org/","summary":"","payload_hex":"47455420687474703a2f2f6170692e69706966792e6f72672f20485454502f312e310d0a486f73743a206170692e69706966792e6f72670d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"23758fd2-4e27-445b-8e7f-50d64c5bac41","seq":1,"duration_ms":100,"bytes_in":188,"bytes_out":79},{"timestamp":"2026-10-10T13:11:26","port":27,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"api.ipify.org","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"api.ipify.org\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://api.ipify.org/","summary":"","payload_hex":"47455420687474703a2f2f6170692e69706966792e6f72672f20485454502f312e310d0a486f73743a206170692e69706966792e6f72670d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"40ed26e8-2884-4c8d-aae6-3a69c20632d1","seq":1,"duration_ms":100,"bytes_in":188,"bytes_out":79},{"timestamp":"2026-10-10T13:11:23","port":27,"proto":"tcp","app_proto":"","app_protocol":"http_proxy","host":"api.ipify.org","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"api.ipify.org\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"http://api.ipify.org/","summary":"","payload_hex":"47455420687474703a2f2f6170692e69706966792e6f72672f20485454502f312e310d0a486f73743a206170692e69706966792e6f72670d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e33360d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a20636c6f73650d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","ja3":"","session":"835e192a-31e7-4dda-9cd9-9e072da77fdb","seq":1,"duration_ms":100,"bytes_in":188,"bytes_out":79}],"http_methods":[{"method":"GET","count":18}],"distinct_ports_total":8,"top_paths":[{"path":"http://api.ipify.org/","count":18,"ports":7}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[{"value":"api.ipify.org","count":18}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"api.ipify.org","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[]}