{"ip":"43.106.48.85","total_events":73,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"73+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 73 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"515 bytes sent","bytes_sent":515,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-12T10:05:54","last_seen":"2026-08-12T10:06:23","events_24h":0,"events_7d":73,"geo":{"country_code":"SG","country_name":"Singapore","region":"","city":"","lat":1.3667,"lon":103.8,"asn":45102,"org":"Alibaba (US) Technology Co., Ltd."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as45102","label":"Alibaba","category":"cdn","url":"https://www.peeringdb.com/asn/45102"},"cve_matches":[],"malware":[],"top_ports":[{"port":8188,"proto":"tcp","label":"","count":1},{"port":3080,"proto":"tcp","label":"","count":1},{"port":50000,"proto":"tcp","label":"SAP","count":1},{"port":42110,"proto":"tcp","label":"","count":1},{"port":8079,"proto":"tcp","label":"","count":1},{"port":8554,"proto":"tcp","label":"","count":1},{"port":31380,"proto":"tcp","label":"","count":1},{"port":3001,"proto":"tcp","label":"","count":1},{"port":8283,"proto":"tcp","label":"","count":1},{"port":11235,"proto":"tcp","label":"","count":1},{"port":21001,"proto":"tcp","label":"","count":1},{"port":7946,"proto":"tcp","label":"","count":1},{"port":4789,"proto":"tcp","label":"","count":1},{"port":7091,"proto":"tcp","label":"","count":1},{"port":6006,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-12","count":73}],"recent_events":[{"timestamp":"2026-08-12T10:06:23","port":8868,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"22f88473-77fc-43ed-89cd-91740ba7061d","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":12},{"timestamp":"2026-08-12T10:06:22","port":3210,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"ed292e0d-d9ec-4d07-a771-a5aaeb1d88cf","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":12},{"timestamp":"2026-08-12T10:06:22","port":19530,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"fbd95276-1a86-4db1-a8c2-2a26a6950092","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":12},{"timestamp":"2026-08-12T10:06:22","port":8978,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"cf6304ce-ea2c-4f17-a321-6a2a628b9349","seq":1,"duration_ms":101,"bytes_in":4,"bytes_out":12},{"timestamp":"2026-08-12T10:06:21","port":2718,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"471d2c06-3f9a-4d1e-b943-c0b72cf8716b","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":12},{"timestamp":"2026-08-12T10:06:21","port":42110,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"9c9fb147-ee5b-40b9-b97a-b6b0de2d5253","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":12},{"timestamp":"2026-08-12T10:06:20","port":2342,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"05c9dd5b-d07b-43e3-954c-85ec6ec3bf09","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":12},{"timestamp":"2026-08-12T10:06:20","port":11434,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"d20e0b5d-41bc-48d4-82f5-74e68297fb57","seq":1,"duration_ms":101,"bytes_in":4,"bytes_out":12},{"timestamp":"2026-08-12T10:06:20","port":7860,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"292d1caa-1383-4397-ac6a-937ffa2309c9","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":12},{"timestamp":"2026-08-12T10:06:19","port":3080,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"9df74d93-f631-4cd8-81f1-ee75d060cc3f","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":12}],"http_methods":[],"distinct_ports_total":73,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T19:40:07.488475+00:00"}