{"ip":"106.222.209.227","total_events":29,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["29 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 5,598 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"5,598 bytes sent","bytes_sent":5598,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-26T19:51:17","last_seen":"2026-09-26T20:26:07","events_24h":0,"events_7d":29,"geo":{"country_code":"IN","country_name":"India","region":"Maharashtra","city":"Mumbai","lat":19.0748,"lon":72.8856,"asn":24560,"org":"Bharti Airtel Ltd., Telemedia Services"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":29}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-26","count":29}],"recent_events":[{"timestamp":"2026-09-26T20:26:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5120-lf-dXECIWhEL","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353132302d6c662d64584543495768454c","method":"","user_agent":"","ja3":"","session":"15eef24e-fc46-4ebd-a8a9-719cf5919606","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"16eb18655d924d48","strings":["BitTorrent protocol","<-qB5120-lf-dXECIWhEL"]}},{"timestamp":"2026-09-26T20:24:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u00195���k���}���,�BO�o�L\u000b����_��v(���\u001c�7�*���q�\"$%h���<�4y�t�\u001f\u0001%\u0017:\u0004\tѨ'h137��Lfse܁�:u\u001e����P\r�R�W�Q\u00073\u0013\u0018G�_6��Y\t\u001d\u0000���R�9Lwy]�\u0016��v\u0011(���v��`�B0�\u001fV,U��\u0017�-�\u0019\u0007��'��\u0006�\u0002���\u0012�d�%��\u000f��:�]���@5\u00068ȝ�u�؉\u0018X��Y�6\"\u0012�\u001b\u0013 ����1\u001c�R��뛞���}��E\u001d�A��Z�b�\u0010uK\u001b5�\u000e�\u0002<:�\u0004/�iz\r�\u000f�����勁^\n3W\u0000P�<I\"����&�r���\u001ea�7n\u000e�\u001d\u0004DZ���]��H4,[���{R��z\u0015`�T�\u001f�)\"��r�\u001e\u000b\"\"�\u0013u�����u\bv2���$�\t����I~;o+�\\K����9�����B\u0015�g�Ғ�I���)�\u0006��6]+���6�������]k�D�{��Xp�h�O�bW�\nB�ghF�\u0006�5�\u0014�\u0012�\u0000�\u000f\u001d���:\u001b~\u0007H�$��?T\u0001\u000f'�L\\�=Y�Թ�Pw�m�\u0011)��e�\u001c���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"7d61a9f5-310e-4b0b-8f0a-eb73d5144782","seq":1,"duration_ms":100,"bytes_in":476,"bytes_out":15,"enriched":{"digest":"fb8e17cd55e2db94","strings":["\"$%h","'h137","Lfse","9Lwy]","H4,[","I~;o+"]}},{"timestamp":"2026-09-26T20:23:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5120-eFCsfGKULYee","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353132302d6546437366474b554c596565","method":"","user_agent":"","ja3":"","session":"a483c34b-7d0f-4682-93a4-40838f8c8864","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"dfad683733e9d9ad","strings":["BitTorrent protocol","<-qB5120-eFCsfGKULYee"]}},{"timestamp":"2026-09-26T20:21:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"#/G\u0017�Ч>��]\u001d���m�\u0013\u000f��wy��PX������713�/\u000b��x@/�X��x�b\u0011\u000f{�>��eb��htH���1�����\r����[�MN��\u0006\r�3v��!k���MĞ��|.\u001fu0��6�*\n<ה�u�B�\u0011ͥ���\u0014(\u0002*m )�\u0015S��Ƣ�\u0013lsb�8�j$�ʎx��j\u001f�^\n7\u000bY\u000b\t9\u0003�T���)�*0<\u001d\n�O\u0003�\u0004^�&Z�n,�~T|Ҿ��\u001a�Sj\u0003�w{{ �.O\u0016��L\u001c\u0017\u0012�]���zJH=�{����b:\u001eg�$_tF\n\u0011\u000b����($��>4\u0014\f��j��T�1��s�\u0017�PY\u001e��OM�۫�\u0000=�v$WCܨ�\\z4��ԝ��'�\\��[\u0014��u�����\u001f��/!���:]�%�\u001c\u0018�\rQIsg;T\u000e�D��\u0001��6J׫�]�bGZ\t�Z�\u0012@�!1��m�_�;mrb+N\u0013Z���1�����\u0017��w;\r<�v��M���V�R�,Ȥ{m\u001a�y\u0014e]�X��-&�V߰0/%\u0003f�\\SA6Z��܆��\u001fw��@YYV\u000e�\u0010�\u0002s�m�w�b��u�B>�?���Y�����e'������[��^��?b�t�\u0015��(K�wQ�\u001bH�ڹ�\u001c�\\�R�-��4�8b\u000fK<�*\b�~�$��xZ7�-�C�\u001b�q��#Y\u000b؍�H\u001e2�j��","payload_hex":"232f4717abd0a73ebef75d1dd4f6886dc9130f86997779acb550588fc29db8839c95d3373133e32f0bdce978402fbc58bdc578a862110f7be53eb3e76562e7da6874487fe5e29231a798abd5f70d81e890fb5bbc4d4e8892060de93376919a216b8eb8a04dc49ef3c97c2e1f7530aac136ac2a0a3cd794a175ef428611cda5fce2fb1428022a6d2029a4155386dac6a28d136c73629f38e86a248aca8e7892c06a1f975e0a370b590b093903a15489b6a029df2a303c1d0a834f03a1045eb3265ae16e2cae7e547cd2be92dd1aeb536a0389777b7b20952e4f169b864c1c1712d15db484947a4a483d9a7b84e9e79b7f623a1e67cd245f74460a110b91b8d47f99282488bc3e34140cf3fe6a909c54cd31ebc073d317ac50591eb2e74f4dcddbab9f003dfa76245743dca8c95c7a3486b3d49df1ee27bd5ccdcf5b14aaf675b99389ea8a1f9a8c2f219eaed03a5da025ba1c18ad0d514973673b540efc44cbca01adbf364ad7ab855de862475a09db5acc1240a22131f0f36dd55fd83b6d72622b4e135aa0bf9631b292eef4b117ef85773b0d3cc676e1ca4db2b59556bd52cd2cc8a47b6d1ac77914655dc858a2b32d26b356dfb0302f250366b95c5341365ae290dc8690c61f77f7c8405959560eb310dd0273fb6d9e7f778262f5f475a4423ea13f87ffac59b9bdf0aca6652799eecdf2a0d15ba8875e969f3f62fb74e61592e9284bc877518c1b48a3dab9c61ca95ca0528a2dbbae34df38620f4b3c9b2a08be7ebf24dfe3785a37c92df043d11bf371e0bf23590bd88db4481e32e06ab3e2","method":"","user_agent":"","ja3":"","session":"83fdbed0-f2d4-43e6-8d82-c7f2a292700c","seq":1,"duration_ms":100,"bytes_in":577,"bytes_out":15,"enriched":{"digest":"d076d587f5cf5f67","strings":["*m )","zJH=","$_tF","v$WC","QIsg;T",";mrb+N","\\SA6Z","@YYV"]}},{"timestamp":"2026-09-26T20:20:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5120-*H1a9do-tOhf","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353132302d2a48316139646f2d744f6866","method":"","user_agent":"","ja3":"","session":"a843a3df-0bb1-48af-9d24-981d3b23e3ea","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"3d4587cd37da687b","strings":["BitTorrent protocol","<-qB5120-*H1a9do-tOhf"]}},{"timestamp":"2026-09-26T20:18:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"j]\u0017���:`\"B��#`�[��yȋG�#�.�\u0012�z`%�\u0013<ꇰEU�^H{w\u0006cUQRCo��\u0011�j��>\u001eiq非9*\u0016�\u0001\u0002\u001c�\u0006\u0002�j��\u0007\u0019�Z�E���W��Q��6�\u0006-j�~T� ����u�p�$�b8�͏�6}�\f\u000b\t$t@J��\u0007a0�T\u001dO⿱��,6�å��]\u0003����}\u001ew\u000b����L�,*5�{QA\b)��}4�b��[fe'�հ\\�\u0014�ݪ�w�%Z{�\r'թ�","payload_hex":"6a5d17a8ede53a6022428fef23609d5bef8879c88b47ee23a02eec129c7a6025e2133cea87b045559c5e487b770663555152436fb8f011d26aaddd3e1e6971e99d9e392a169301021ce50602e16aa8be0719b25ad145bed3f857e5a551c2fd36fb062d6aaa7e54a020fafa99b575c9709c248562389ccd8faa367db70c0b092474404a92da076130a7541d4fe2bfb1e2be2c36c3c3a5c1fa5d03e7f2d5d47d1e770bff839c8b4ce72c2a35d57b5141082996bf7d34dc629ee35b666527a6d5b05ca114a7ddaabf77d3255a7bb90d27d5a9b5","method":"","user_agent":"","ja3":"","session":"2b914785-3d3c-43e8-8cd3-fc653f54a461","seq":1,"duration_ms":100,"bytes_in":210,"bytes_out":15,"enriched":{"digest":"434ffc29c1c9d69d","strings":[":`\"B","^H{w","cUQRCo","$t@J","[fe'"]}},{"timestamp":"2026-09-26T20:17:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5120-LZsngoVjkTvn","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353132302d4c5a736e676f566a6b54766e","method":"","user_agent":"","ja3":"","session":"eca99dbc-307e-4d51-9bee-d218756af757","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"1b133d058f4562d9","strings":["BitTorrent protocol","<-qB5120-LZsngoVjkTvn"]}},{"timestamp":"2026-09-26T20:16:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\n�-.�C��O ���X?�9\u0011\u0018ʕ{��\u001aU��\u0006W�\nqș��\"�������h���vl53\u0017G����`��u����2Oi��\rRn_gj�\u001f`��\u0013P�G�\u00126sn�\u0011\u0005'^\u0005�\u0012���\u001ah�\u000f����7�|b�+Ĭ�\u0005%d�\u0006�\u0011�)LtOT�4\u0002(\u0001˥e�-�a7\u0010��H9�\"H��z y�/̂H\u001c�{�ş�X��$�W\u001c��GS[���","payload_hex":"fe0af42d2ed543bf864f208dbbb6583ffa391118ca957b88d31a55aece0657b40a71c899c5f72285d8f7f69fe58368fee2d1766c35331747f8c08df760e798758deed3f6324f69b5ff0d526e5f676aba1f60eab31350d647de1236736ec61105275e05c812d4f3881a68da0fba8f9aed37ad7c628a2bc4acc8052564db06e511af294c744f54fc34022801cba565d12de3613710e39f4839b8224886a67a2079a92fcc82481ca07b89c59fba5898b624b5571ca8c647535ba4aa8d","method":"","user_agent":"","ja3":"","session":"e606c36d-9ef2-4134-9836-5b875e2ac125","seq":1,"duration_ms":100,"bytes_in":187,"bytes_out":15,"enriched":{"digest":"9033ee43ef55f889","strings":["vl53","Rn_gj",")LtOT"]}},{"timestamp":"2026-09-26T20:14:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5120-nL7lZV0NLVtI","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353132302d6e4c376c5a56304e4c567449","method":"","user_agent":"","ja3":"","session":"2b1759c3-9f41-4e53-9f08-c573c7c431e2","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"4647387a6c22367a","strings":["BitTorrent protocol","<-qB5120-nL7lZV0NLVtI"]}},{"timestamp":"2026-09-26T20:13:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001d)�\u0007*H\u0016\\\u0002��nH�\u000b�;\u000f̏\u0000#�\u001d\u001d�\u0012!f\nҢq�Q��VH���ӓ�ܒ[��\u000b��\u0006�f딆��e�\\��E�c\u0014}\u0003q\u0003�q\"H��޴�'H�m~/e�+���G@G\u000e�ǰ��%�Tz);��#�\u00163a\u000bT^\u0001���y�x�\"gz��\u0002;NV��Fi?�kU�\u0019B\fN�DQ��\u0004�Z��\u0007QQ�Sy,�i�l\u001ai�_�\u000f�J��c\nP�]1�ѡ��}(����a|8\n�>��l�V�S��H�mx\u001e�\u0006�e��u\u00101�R���'���yGX��\u0000��\u0007@�������ߔ�e�\u0002�%�ʔ_*]���\u000bY�e��[M��6�,c��C�J\u001e�Z\u0015������-,\u0000eg�V}>ʜ\u0006BkM.�����\nnJ�k��\u0011�k�5\u0004�a!\u0013�jU���}","payload_hex":"1d29a9072a48165c0295816e48dd0bfc3b0fcc8f0023a81d1db11221660ad2a2719051b0835648fd8ef8d393d4dc925b94c50bcdc306a666eb9486a0db65d75c91b845ac63147d037103b87122488bc5deb4c22748866d7e2f65c92bdbecd04740470ebbc7b081d925e4547a293bc2cc23881633610b545e01fde3cb7985789e22677ac4de023b4e56c18146693fc56b55af19420c4ebe4451b88104cf5afed7075151b453792cc469a66c1a69955ff10fb84aa281630a50ff5d31acd1a1879a7d288baea3af617c380aa93efecc6c8056c57f5380a948c56d781e86068b659ef8751031d152f6b6f427f4b8a87947589ec600b5c207409d97c5e4f4ee82df94f565de02892590ca945f2a5dd6c6e10b59fd65ddf35b4da7a036ce2c63b3a543d24a1eed5a1589999e9fd2fc2d2c006567cb567d3eca9c06426b4d2e8ad2f2c1bb0a6e4ae96bd4ed11a46be63504c1612113fa6a55a6a7f17d","method":"","user_agent":"","ja3":"","session":"51f7a1a5-46f3-423f-892c-ae5c3072a4ec","seq":1,"duration_ms":100,"bytes_in":345,"bytes_out":15,"enriched":{"digest":"35316f5e2fb4fba6","strings":["m~/e","Tz);","BkM.","-,eg"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-01T19:37:06.384909+00:00"}