{"ip":"138.255.249.28","data_as_of":"2026-10-28T17:40:15+00:00","observed":true,"total_events":1,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["1 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"581 bytes sent","bytes_sent":581,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-27T01:26:47","last_seen":"2026-10-27T01:26:47","events_24h":0,"events_7d":1,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Espaillat Province","city":"Moca","lat":19.3929,"lon":-70.5235,"asn":264605,"org":"TELEVIADUCTO S.R.L."},"source_domain":"138-255-249-28.cgnat.televiaducto.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as264605","label":"TELEVIADUCTO","category":"isp","url":"https://www.peeringdb.com/asn/264605"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-27","count":1}],"recent_events":[{"timestamp":"2026-10-27T01:26:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"j{\u0017/��!��Bӿ�O�\u001e@�����Y��{����t\u0001\u0013\u0015�8��C'۱�g^��[G�)\u0011\u0010�MU�_�\u001a\n�\u0000%\u0002���ݗ<��=��\t��t_\u0010���oj\u0011�+\u0006�L*bl�:{9�*e'tb��+��\u0018�Fi�<�=\"r��B �$�#�E��N�\u0012�J�=���c\u0016,�#��A\u0012�&����\u0003A{��M�\u0000E\u0002,�*�Zc�,멶�f$(�\u000f�F;B��j��ġ��J`]\u0014�)\r��\u0013�H���Kl�\r\u00005\u0017n�d��\u001ei&�������l\f�ج�O�Щ�9\f{k�\u0006,!{\n�x\u0010D8�`F\u0012;�\b�\u001ffl��D�\\\\\u0015���\f�\n\u0007�z1�\\O�ݷ�v��ƺS��3A�\u0019�\u0003��P�U6g\u001d�~2��;^�i�\u0002�Y�=\u0003{$ҡ�\u0015(I\u0000X.C�+�V\u0001x���B�t���~\u0004Ed����\u0017�&�*o�1�p9B2�)Fh�S�]yg�V36��=ae������Hykl��]�3��˥\u0000\r\u0010Wx\t���\u0005��\u0004\\W�\u0005�\u001e\u0012�R&y�8\u0000I���'�g�\u0007C�\u001b؏F\u0010�.��#��?΁?T�\u00042a0?�q�ri�̧��\u001c{Gɽ=t�tf�F0X\u001c=\u001eВ'�\u0004UV)\"p'v���sc2\u0011�R8�3KJ���}��9\u001cp���3��G��ğ\u000e`]7(=2\u001fQ\u001eK�OKá","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"03f2b699-d273-42af-a5e5-54f0b7ae0aac","seq":1,"duration_ms":100,"bytes_in":581,"bytes_out":14,"enriched":{"digest":"06c93a157070ff42","strings":["L*bl","*e'tb","p9B2","Hykl","2a0?","UV)\"p'v","7(=2","(IX."]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[]}