{"ip":"125.120.107.209","observed":true,"total_events":309,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["309 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 64,235 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"64,235 bytes sent","bytes_sent":64235,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-16T16:42:06","last_seen":"2026-10-16T23:15:55","events_24h":309,"events_7d":309,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"CN","country_name":"China","region":"Zhejiang","city":"Hangzhou","lat":30.2943,"lon":120.1663,"asn":4134,"org":"Chinanet"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as4134","label":"China Telecom","category":"isp","url":"https://www.peeringdb.com/asn/4134"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":2,"protocols":[{"protocol":"udp","events":2}],"ports":[{"port":16663,"events":2}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-16T16:41:58","last_seen":"2026-10-16T16:42:01","recent":[{"timestamp":"2026-10-16T16:42:01","port":16663,"src_port":53487,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000��׼��\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000","payload_hex":"4100aa88d7bc8fe30000000000000000dee00000","sni":"","session":"14497682-da8a-477a-8878-81559946cf59","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-16T16:41:58","port":16663,"src_port":53487,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:t���y��mI�D��:\u001b��ɑ�9:info_hash20:t����|�_��Kl8�!I-pa\u000fe1:q9:get_peers1:t2:�\u00021:v4:LT\u0002\r1:y1:qe","payload_hex":"64313a6164323a696432303a7490b1ed79a0c06d49e444b4c63a1b8bb2c9918f393a696e666f5f6861736832303a7490b2f5cb7ce85fe6fd4b6c38b421492d70610f65313a71393a6765745f7065657273313a74323af502313a76343a4c54020d313a79313a7165","sni":"","session":"aa24b064-a157-4cba-b411-4d7afc75eafd","bytes_in":104,"source_verified":false,"enriched":{"digest":"7a53ef7781d453d6","strings":["d1:ad2:id20:t","9:info_hash20:t","!I-pa","e1:q9:get_peers1:t2:","1:v4:LT","1:y1:qe"]}}]},"interaction":null,"top_ports":[{"port":16663,"proto":"tcp","label":"","count":309}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-16","count":309}],"recent_events":[{"timestamp":"2026-10-16T23:15:55","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001f-���؈��[�V\u0005�\t�0q�*-qB5230-aoqBrnX31Ula","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051f2d83cde5d888afdf5b8256059809973071862a2d7142353233302d616f7142726e583331556c61","method":"","user_agent":"","ja3":"","session":"c995dc39-0881-4863-a254-7bc060d5d1a0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"f60c882efe845199","strings":["BitTorrent protocol","*-qB5230-aoqBrnX31Ula"]}},{"timestamp":"2026-10-16T23:14:43","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"o�\t�\u0002�˫������o�\u0001��\f�F��>.\r4�Ë�KyDb�\u0014��Yi\u0017\u00105\u0010�_\u0015�ޫ9p�\u0014>;W<��+�\u001b\u0001\u0005q\u0015�4�T�\u001c��\u001a�^�mV\u000fɖ������0\u001c\u000f0�y+z�����sU}\u001eQMmF��q��\u000b\n=I�^��P\u000eY�ܭ펒\u0015��(�i��)\u000f\u0013�\u0000��ʶ\u0016\u0013�f�]w�P����n\u001fَ�n��ãg��8�d\u0018O���*@C8TO\u000f�\u001eyձ��\u0000\u0011��%&�Ÿ)\u0004)���ʴ��yT6BUe����k�v�\t��eK��Q��}�ŏ���M��F���O�댚E��F@+e�#��b��\u001cӹ\u0006\u0016��\u0001>hw�c�P���?z\u0013�\u000fc�Z�\u0013�%Ģ.����afm\u0012","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"9a88c63e-aa11-4f27-b6fe-14314d8b8802","seq":1,"duration_ms":100,"bytes_in":318,"bytes_out":15,"enriched":{"digest":"0c143867055f11fa","strings":["KyDb",">;W<","QMmF","*@C8TO","yT6BUe","F@+e"]}},{"timestamp":"2026-10-16T22:56:49","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001f-���؈��[�V\u0005�\t�0q�*-qB5230-y5pg3748J1SP","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051f2d83cde5d888afdf5b8256059809973071862a2d7142353233302d79357067333734384a315350","method":"","user_agent":"","ja3":"","session":"946dcb95-56ac-4c9d-a427-00beeeeb4844","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"c4bef91bf248a82b","strings":["BitTorrent protocol","*-qB5230-y5pg3748J1SP"]}},{"timestamp":"2026-10-16T22:55:36","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*����\u0002g��^���\u000eۡ����\u001cV\u001e?\u0014�~m\u001e�\u001d����t�\u000f�\u0006U\u0013�\f9ᘇ�����A ��:v�S�?�\ns~y���f�\u001f�%{\u001b�~�-!{��\u000fl�\u0002��z�>iƺZ��W�ƽ�\u0014[B��䧏 PB+�*\u0002����xp��)f\u000b����T\u0010\u0013���(\u0005�d��xĸ��js�)\u0015\u000e�\u0017��7\u0018\u0003�N�\\7)�\tʓ����\t!Ev;�\u0003Ȕ1�M[}��h�P�\nS�\u0012����7���tc~�{\u0014�^\u0007�y\u0002�� �\u0017\f4�&I���]R�\b��Ŵ��ñ�@�f��\u0014c0���b`~6x�h2��u�D絶e{��\u0011��@����`\u0006|-K�Q�v�A\u001b<�\u0003,G)z��\u0016#3�C6eq���\\�tl�T�_�v_zI\u0018`Zq�\u0002�V����\r&\b�9�\u0018v?5\u000f�*j\u0001>���\b,M)�\u0015�m\u0013���[�o4L��@�\t;�{\f� �������@#��4q�9�\u0006D�\u0018�ƕI3�Wc>ؒ�ip ��\u0016@f@W�*-Z\"�lU����&������I)�[\u0005�&\u0003�\u001c���\u0013\u0010'VQz�s����,\u000e\u0007�\u0002\u001dF�r��\u001a\u001ff\u0011��n�[��y\u0015�^Y��.ܽ\u000f� �#\u000f6�-A���\"h)8ync茴�|�/F;\u0007�","payload_hex":"2a8dbdc5d50267a49d5e94fee70edba18f92c6e11c561e3f14be7e6d1efa1daabe87ce74890f8e065513890c39e19887e7b9f689cb412098b43a76b253913fa10a737e79d8fed066a61fcd257b1bde7e952d217be5dd0f6c9402ec947ab23e69c6ba5a9ada57e2c6bde7145b4290b7e4a78f2050422ba82a02bdff8c9278709dd129660bbc94f897541013f0d3d02805f864d9c978c4b8ea866a73b729150eac17f7ce371803f44e9f5c37299109ca93c4eacfcb092145763bd703c89431a37f4d5b7daaf868ea508c0a538912fbf3c4df37fea98274637e8e7b14ef5e07d27902b4ac209c170c34ca2649b6b0b05d52e208fcb1c5b4ea95c3b1bb40ad66b0b114633093b0a062607e3678906832d3cf759a44e7b5b6657bf4ee94ab8211fedf40a0ad98f360067c2d4bef51bf76a8411b3c97032c47297aaec8162333a143366571d2e58c5ce0746cf4548b5fe3765f7a4918605a71eb02c056ae9881b20d2608f3399d18763f350f902a6a013eb29bdc082c4d29bf159f6d13e1ec8a5bca6f344cf5ba40a1093bd87b0cf0208384bf8cb9fbc04023d0c43471cf39fc0644cc188dc6954933ee57633ed892ce6970208ea31640664057bd2a2d5a22bc6c55d0d6f38e2687918d8499874929cc5b05f22603f51cc0c9c513102756517ae373ced5d1f72c0e07f2021d469672fed71a1f661191ea6ef95bf2f379159e5e59cecd2edcbd0ff920b8230f36952d4187898f22682938796e63e88cb4ad7ceb2f463b07be","method":"","user_agent":"","ja3":"","session":"2c44ca0d-080f-455d-8c84-6e8262ee4411","seq":1,"duration_ms":100,"bytes_in":546,"bytes_out":15,"enriched":{"digest":"b602f1232ee07379","label":"Redis (RESP)","strings":["!Ev;","b`~6x",",G)z","C6eq","v_zI","@f@W","*-Z\"","'VQz","\"h)8ync"]}},{"timestamp":"2026-10-16T22:54:24","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001f-���؈��[�V\u0005�\t�0q�*-qB5230-1p1SeyUa8U27","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051f2d83cde5d888afdf5b8256059809973071862a2d7142353233302d317031536579556138553237","method":"","user_agent":"","ja3":"","session":"d755ff80-1443-4415-bd0b-2becb45f3b33","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"7e4783c88e375768","strings":["BitTorrent protocol","*-qB5230-1p1SeyUa8U27"]}},{"timestamp":"2026-10-16T22:53:12","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�Ύ��!խm\u0002<]�J;\u0003\u001d����8�b���Lh5͚��^*�YT�\u0001�\u0004�ݰ�A����J\u0016�tsa`��1K�e^���3-\u000e����}���1E���1��-��\fzԩl�\u000e˛���0\u0011\u000fN�|\u0003�r�G���\"|~:۴B\u0000耭m(�H�j��/\u0018���,�\r��T.�\bf\u0011�a�!\\P���t�b��\u0003�<\u0017m���_)\u0017����?ra�\u0001\u0001���\u001f���/���ǚ;��y�/vk��Mo.��\u0012�{�\u0002z~\u0013;\u0005�\u0007z�\u001f��CU�\u0005��k|\u0006ʠ�N}\n|��qX\b�E<��3�\t��\u001aN�Đ�o�\u0007U\u0017��)\u0016KhЕ�j-c7PٟJ\b�����\u001f��\f��n���#1S\u0006К��`\u0006�N�\u0018I]up�\u0004Z�>;\u001e?LL��m��>\u000b�z���:k�7�C�9�`��?����\u0000�,��x�\u001f��ڽ�@o�\u00110 Kc�^Be�\u001dp�\u0014�\"�e\u0011Q���O��:Z�[��E�w���1�O�RF\f��\u001c��4��=��u�mXg�g$e\u001c\u0005����\u0005����(f�� ઄����","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"1733ac16-b4b7-488d-b4c7-ed6f92dc4ed7","seq":1,"duration_ms":100,"bytes_in":469,"bytes_out":15,"enriched":{"digest":"27b5a205a0a83489","strings":["tsa`","j-c7P","I]up","0 Kc"]}},{"timestamp":"2026-10-16T22:52:00","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001f-���؈��[�V\u0005�\t�0q�*-qB5230-w0hYA7na~gP9","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051f2d83cde5d888afdf5b8256059809973071862a2d7142353233302d7730685941376e617e675039","method":"","user_agent":"","ja3":"","session":"13d64139-05a8-4875-8ac3-78b1b653e5d2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"4f0dfe94c8ded47c","strings":["BitTorrent protocol","*-qB5230-w0hYA7na~gP9"]}},{"timestamp":"2026-10-16T22:50:47","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015��XӃ�\u00192�uFh\u001b�\u0003�H�D�q\u0016؝���P�`����o\u0000?��qZ��L4T6��l}��\"��j�TD~WQ�$�\u001b�R�ȨŘ�?�F�y�V�,�sw�\u000b(6�9\u0010\u0012�6Nxg\u0016P��@���fp�\u001c���M=�w��\u000e\u0013���\u0004�O(�V���J)\f��.�\"6�� \u001aK�wҜ�i\u0011��\u001c]'�'�n\u0015o\u001fq|##\r�0�+���\u000b\u0001\u0004\u001c�<+�m��5\u0015l�II�1^4���v����G�'\u0016 s\u0005�.\u0000VE(ՄL�ϫP,G�qvD��<�X� L\b�\u001c�\u001d�\b�E������ݿ\"�<����5\u0011�6��� m}g��鳚��C\u0010؂\b�<��\t\u001e $\u0003p\u0016,��0��Z\u001a���*4�\u000e+z\\\u000e};T��˗�J[d��΋.xc0�4\u0002\u0005����Y\u0000C'\u001b��b�s\t5���#���Z�ŕ����\"|/\u0013U\u0006j\u0006���\u001c�րGa�7����A��-��%6>Lȼ\u001c�\u0014]Q�|\u0010��kD�\u0010�\bi:��R�ׅ�D͸7��3.�$���\"9\u0018\u0012*(W\u0001\u000eІ=����\u0003�cVd��\f","payload_hex":"15cbce58d383861932827546681bd1038448e244dc7116d89d969fd050e160a3d4f4e36f003f8cf5715ab99b4c345436a7986c7d928322b3eb6aa754447e5751e824f91beb52b4c8a8c598af3f9046e279c756bc2ce47377c80b28368f391012d0364e78671650a8c34080adb76670a11cb18f8f4d3dc077a6d20e13e5eed404fc4f28e3569dfac84a290c8aa32ece2236c3e3201a4bd177d29cfc6911a0e91c5d278e27ef6e156f1f717c23230dfc30b02b9c8cbd0b01041c9b3c2ba36df0af35156cac4949f3315e34c4def876ded1e7a247962716207305892e00564528d5844c99cfab502c47ee717644acda3ca25883204c08be1cf61d9c08c045a9fea887a98dddbf22bd3cfdaadce135118836f9dfce206d7d6786f8e9b39af2884310d882089f3cc1e3091e20240370162c85d330fcef5a1aedb2f92a34bc0e2b7a5c0e7d3b54dcf7cb97894a5b64a5a2ce8b2e786330e6340205abdcf6c6590043271b81f562fb73093592f6f823efc0e15a9fc5959c88c0e2227c2f1355066a06fd98cc1cfdd6804761d737f6c18bf341e1d42daf9d25363e4cc8bc1ce6145d51a37c10c5c06b44e210ae08693a88f552dfd785f644cdb837e4d0332ed724b392cc223918122a2857010ed0863df98c9fe503b17f635664899d0c","method":"","user_agent":"","ja3":"","session":"4e066765-3991-4e00-913f-69c7656f11e7","seq":1,"duration_ms":100,"bytes_in":473,"bytes_out":15,"enriched":{"digest":"30a76644f08c7074","strings":["L4T6","TD~WQ","6Nxg","q|##",".xc0","%6>L",".VE("]}},{"timestamp":"2026-10-16T22:49:34","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001f-���؈��[�V\u0005�\t�0q�*-qB5230-(J3u(a2CQ~QM","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051f2d83cde5d888afdf5b8256059809973071862a2d7142353233302d284a337528613243517e514d","method":"","user_agent":"","ja3":"","session":"83195d0a-dbd1-4cd3-9f60-d7baf6a9fce7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"59c7f185331315fc","strings":["BitTorrent protocol","*-qB5230-(J3u(a2CQ~QM"]}},{"timestamp":"2026-10-16T22:48:22","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"%���D�g\u0019,u�ܴ�7��q���l'�\t�]\u0014�Җ�6\u000b\t�g㷻:%+tc\u001a�E�!O\u0015�EM����4\u0017\u0000e��8�\\���z\u0010�I\f��\bC\u0001�C!\r\u001b\t9^\u001c�[�eBߛ)\u0016�tY��y\b�����&��*������X=��\u0013���d�w@\u001cL1�2{�!D��P��\u000e�\\�\u0014���ܥ�\u001d?/\u001c(��Xs=���\t��@C�D\u001c$X\u001c\u0015�}���m�\f��CX~�@K\u0007:�ͥ�.+_.��H�\u0007�����M\u0002�","payload_hex":"25b5e0dc44f167192c7593dcb4e837f6f671dbef926c27ea09ca5d14c3d2969b360b09eb67e3b7bb3a252b74631a8045d2214f1596454db4a87fa8a734170065b4ea38915c95b7827a10ab490cb1be0843019343210d1b09395e1c865be36542df9b2916e674598adf7908b3aaa390ea26f6cb2aa5a9d3c192dc583d948913f6e5f264f377401c4c31e4327bc821448fbf50a5f10eab5cc514c8ffdddca5e01d3f2f1c28e5eb58733de4e7d209a5d74043f0441c24581c15e77d94fbfe6db20ce1d443587ea6404b073a9acda5912e2b5f2ef28a48bb0788aac4c2fb4d02f5","method":"","user_agent":"","ja3":"","session":"73d3c3ff-e850-4067-8204-a71ea5de4b1f","seq":1,"duration_ms":100,"bytes_in":223,"bytes_out":15,"enriched":{"digest":"99f455a2bd35162b","strings":[":%+tc"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-17T08:05:25.500810+00:00"}