{"ip":"47.84.198.182","total_events":69,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"69+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 69 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"499 bytes sent","bytes_sent":499,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-30T06:39:23","last_seen":"2026-09-30T06:39:51","events_24h":0,"events_7d":69,"geo":{"country_code":"SG","country_name":"Singapore","region":"","city":"","lat":1.3667,"lon":103.8,"asn":45102,"org":"Alibaba (US) Technology Co., Ltd."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as45102","label":"Alibaba","category":"cdn","url":"https://www.peeringdb.com/asn/45102"},"cve_matches":[],"malware":[],"top_ports":[{"port":8978,"proto":"tcp","label":"","count":1},{"port":8188,"proto":"tcp","label":"","count":1},{"port":3080,"proto":"tcp","label":"","count":1},{"port":8079,"proto":"tcp","label":"","count":1},{"port":21001,"proto":"tcp","label":"","count":1},{"port":8554,"proto":"tcp","label":"","count":1},{"port":31380,"proto":"tcp","label":"","count":1},{"port":3001,"proto":"tcp","label":"","count":1},{"port":8283,"proto":"tcp","label":"","count":1},{"port":42110,"proto":"tcp","label":"","count":1},{"port":11235,"proto":"tcp","label":"","count":1},{"port":6006,"proto":"tcp","label":"","count":1},{"port":4789,"proto":"tcp","label":"","count":1},{"port":7946,"proto":"tcp","label":"","count":1},{"port":7091,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-30","count":69}],"recent_events":[{"timestamp":"2026-09-30T06:39:51","port":8868,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"d5296c12-0e5b-4472-8258-eacbcda97af2","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":13},{"timestamp":"2026-09-30T06:39:51","port":19530,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"3a93f141-2cc2-42d2-b453-00c18cfff497","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":13},{"timestamp":"2026-09-30T06:39:51","port":3210,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"37869a61-699c-4cbf-8209-7791306fea2b","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":13},{"timestamp":"2026-09-30T06:39:50","port":2342,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"adec69be-93d4-4d21-a0f4-30b51f4eadc1","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":13},{"timestamp":"2026-09-30T06:39:50","port":42110,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"c6835c42-1a94-433f-85b9-7281d25d6fd5","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":13},{"timestamp":"2026-09-30T06:39:49","port":3080,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"40fb4b39-9f8b-4d5e-b2ea-996474a04226","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":13},{"timestamp":"2026-09-30T06:39:49","port":7860,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"614ccde8-b658-4683-b5da-8882c349062c","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":13},{"timestamp":"2026-09-30T06:39:49","port":11434,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"f69a8278-2534-467c-99cb-7f4a3ab3e818","seq":1,"duration_ms":101,"bytes_in":4,"bytes_out":13},{"timestamp":"2026-09-30T06:39:48","port":8265,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"18e48c7f-8260-406d-86d2-74a51152d92d","seq":1,"duration_ms":101,"bytes_in":4,"bytes_out":13},{"timestamp":"2026-09-30T06:39:48","port":8283,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"383a6515-614d-4d1c-b348-263bf6defd1c","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":13}],"http_methods":[],"distinct_ports_total":69,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-01T14:36:57.548909+00:00"}