{"ip":"118.216.31.14","observed":true,"total_events":2,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["2 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"136 bytes sent","bytes_sent":136,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-16T16:42:35","last_seen":"2026-10-16T16:43:56","events_24h":0,"events_7d":2,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"KR","country_name":"South Korea","region":"Gyeongsangbuk-do","city":"Andong","lat":36.5742,"lon":128.7133,"asn":9318,"org":"SK Broadband Co Ltd"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as9318","label":"SK Broadband","category":"isp","url":"https://www.peeringdb.com/asn/9318"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":5,"protocols":[{"protocol":"udp","events":5}],"ports":[{"port":16663,"events":5}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-16T16:42:35","last_seen":"2026-10-16T16:44:18","recent":[{"timestamp":"2026-10-16T16:44:18","port":16663,"src_port":31582,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000S��1|J\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000>~\u0000\u0000","payload_hex":"410053cdcf317c4a00000000001000003e7e0000","sni":"","session":"0fdebf5a-d61a-4627-8109-b1e05d8d9bf6","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-16T16:44:12","port":16663,"src_port":31582,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000S���y�\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000>~\u0000\u0000","payload_hex":"410053cdced5798300000000001000003e7e0000","sni":"","session":"b0405fb0-f1bb-49e3-801b-3ac081d6c0fc","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-16T16:42:44","port":16663,"src_port":31582,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000��ɖ?\u001b\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000D\u001b\u0000\u0000","payload_hex":"41008188c9963f1b0000000000100000441b0000","sni":"","session":"6fbf915f-3c57-4ef1-8432-fd92a167019e","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-16T16:42:38","port":16663,"src_port":31582,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000���9�z\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000D\u001b\u0000\u0000","payload_hex":"41008188c939e67a0000000000100000441b0000","sni":"","session":"87e751ee-f7fc-4cd3-ad09-c3f046a0010d","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-16T16:42:35","port":16663,"src_port":31582,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000���\f%\f\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000D\u001b\u0000\u0000","payload_hex":"41008188c90c250c0000000000100000441b0000","sni":"","session":"90873d04-88d2-4050-b491-09dfc47a6747","bytes_in":20,"source_verified":false}]},"interaction":null,"top_ports":[{"port":16663,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-16","count":2}],"recent_events":[{"timestamp":"2026-10-16T16:43:56","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001f-���؈��[�V\u0005�\t�0q�*-UT360W-J�_��\\+2���O","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051f2d83cde5d888afdf5b8256059809973071862a2d5554333630572d4ab85f91f25c2b328fd8e84f","method":"","user_agent":"","ja3":"","session":"5b996b1d-a93a-4d80-8ba6-902557a9c96e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"0e783860d354f751","strings":["BitTorrent protocol","*-UT360W-J"]}},{"timestamp":"2026-10-16T16:42:35","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001f-���؈��[�V\u0005�\t�0q�*-UT360W-J��B�P���>LE","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051f2d83cde5d888afdf5b8256059809973071862a2d5554333630572d4ab8c4428950d0daf73e4c45","method":"","user_agent":"","ja3":"","session":"70c096fe-9127-49f9-ae7d-3fb6ad02d51c","seq":1,"duration_ms":110,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"5a702408389de4b5","strings":["BitTorrent protocol","*-UT360W-J"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-18T08:24:30.247979+00:00"}