{"ip":"160.119.76.46","total_events":2187,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"445+ ports swept","confidence":"medium","network_type":"residential ISP","why":["No exploit payloads observed.","Swept 445 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"69,609 bytes sent","bytes_sent":69609,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-30T15:17:55","last_seen":"2026-09-02T16:47:42","events_24h":0,"events_7d":1673,"geo":{"country_code":"SC","country_name":"Seychelles","region":"","city":"","lat":-4.5833,"lon":55.6667,"asn":49870,"org":"Alsycon B.V."},"source_domain":"160-119-76-46.ptr.as49870.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as49870","label":"Alsycon AS49870","category":"isp","url":"https://www.peeringdb.com/asn/49870"},"cve_matches":[],"malware":[],"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":16},{"port":1020,"proto":"tcp","label":"","count":16},{"port":43389,"proto":"tcp","label":"","count":14},{"port":3395,"proto":"tcp","label":"","count":14},{"port":33890,"proto":"tcp","label":"","count":13},{"port":4000,"proto":"tcp","label":"","count":13},{"port":5633,"proto":"tcp","label":"","count":12},{"port":59389,"proto":"tcp","label":"","count":12},{"port":50006,"proto":"tcp","label":"","count":12},{"port":9833,"proto":"tcp","label":"","count":11},{"port":50250,"proto":"tcp","label":"","count":11},{"port":63389,"proto":"tcp","label":"","count":11},{"port":33389,"proto":"tcp","label":"","count":11},{"port":33893,"proto":"tcp","label":"","count":11},{"port":4489,"proto":"tcp","label":"","count":11}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-30","count":89},{"date":"2026-07-31","count":60},{"date":"2026-08-01","count":3},{"date":"2026-08-27","count":118},{"date":"2026-08-28","count":244},{"date":"2026-09-02","count":1673}],"recent_events":[{"timestamp":"2026-09-02T16:47:42","port":32110,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"127ae9e5-025f-4e4b-9ad2-d240e91b756c","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":13},{"timestamp":"2026-09-02T16:47:42","port":51009,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"7ae6fef0-00b7-4640-b7ad-5c7033fbface","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":13},{"timestamp":"2026-09-02T16:47:41","port":7485,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"9aa1c8cd-fdc9-498b-9edf-10ea29402e2d","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":13},{"timestamp":"2026-09-02T16:47:41","port":47573,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"8ac4264e-02dc-4b9b-819d-ff37e0ed9fb9","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":13},{"timestamp":"2026-09-02T16:47:41","port":37341,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"07c993ec-b23a-4259-a23c-935e187f93b4","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":13},{"timestamp":"2026-09-02T16:47:41","port":33201,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"42b7c01d-b4db-45e5-a6ad-576d09126ac0","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":13},{"timestamp":"2026-09-02T16:47:40","port":4455,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"54d00ef0-3f04-49a4-a59a-c9a166e768c3","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":13},{"timestamp":"2026-09-02T16:47:40","port":44777,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"3af3b9e9-eddf-4f34-9f3a-0948f77b0d20","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":13},{"timestamp":"2026-09-02T16:47:40","port":43388,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"33bdad70-72b0-4a43-a53b-28554f306af8","seq":1,"duration_ms":100,"bytes_in":47,"bytes_out":13},{"timestamp":"2026-09-02T16:47:40","port":57435,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0012\u0001\u0000/\u0000\u0000\u0001\u0000\u0000\u0000\u001a\u0000\u0006\u0001\u0000 \u0000\u0001\u0002\u0000!\u0000\u0001\u0003\u0000\"\u0000\u0004\u0004\u0000&\u0000\u0001�\u000e\u0000\u0007�\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"1201002f0000010000001a00060100200001020021000103002200040400260001ff0e0007d0000002000000000000","method":"","user_agent":"","ja3":"","session":"a2ebcec3-ee21-45b0-aebc-0d964fc67c71","seq":1,"duration_ms":101,"bytes_in":47,"bytes_out":13}],"http_methods":[],"distinct_ports_total":445,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-04T21:03:36.555271+00:00"}