title: "Sneaky Infra Scan"
sites:
  - name: "Production Web Servers"
    ips:
      - address: "10.10.20.4"
        expected:
          ping: true
          tcp_ports: [22, 53, 80]
          udp_ports: [53]
          # Optional: specify expected services (detected automatically)
          services: ["ssh", "domain", "http"]
      - address: "10.10.20.11"
        expected:
          ping: true
          tcp_ports: [22, 111, 3128, 8006]
          udp_ports: []