{"ip":"14.177.212.188","total_events":64,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["64 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 13,561 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"13,561 bytes sent","bytes_sent":13561,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-27T16:47:24","last_seen":"2026-09-28T13:12:27","events_24h":0,"events_7d":64,"geo":{"country_code":"VN","country_name":"Vietnam","region":"Hanoi","city":"Hanoi","lat":21.0184,"lon":105.8461,"asn":45899,"org":"VNPT Corp"},"source_domain":"static.vnpt.vn","known_scanners":[],"scanner_tag":{"key":"peeringdb:as45899","label":"VNPT","category":"isp","url":"https://www.peeringdb.com/asn/45899"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":64}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-27","count":54},{"date":"2026-09-28","count":10}],"recent_events":[{"timestamp":"2026-09-28T13:12:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1����Jc���>��ؿ���V������s;�i:�y\u001eE\t�\u0001������c|�<�;Z�?��:k\u0005���4�\u0012\u0000��W�e��z�g\u0016��n������H�ed�']�{�0�����\u0004���,��}��W\f�\u0012N�{���C\u0019U��\u001e�`\u001b��\u0002w\\dM��$���\u0013�\u0018C\r����w�\u0011�p\u0001���\u0013h��\u001f��X�:\u000e�����kf�%|d9m\"��#TS\u0017��ZL.��q\u001a&��>����0�\u0015k\f=�ݖ(9��b2�l�[op�m��|\u001a}����ОC�Ҏ���p\u0013�?�j!d��J\u00022�yR\f�\u000f\u001cn\tl\u001e\u0013��O&6��\\?��b�\n��܉�BŦ1�]ؖ柂�\u001a\u0013�\u0015�7_2\f���~\u0003��{L�u��Ϋ�P�\u0013t[������#u��2�5\r�v��\u0011�%��p�IL��<�6r�̵Y���&Te.o[`�N\u0015E�\u000b� b*#)y}\u001a\u00160n�]��M��&��x\u0014�'N.u�v�����0��=�c���[�\u0015S\r���ʷQ���\u0002y�y���`�U�\u0000�}��f\u0003�Pq}�xDI\u0000w�\u0007�H��d�\u0003\u0014@�Ve\u0000%l\u001cHN�{�œ\"�g4\t������N\u0006�\u0019v��8��\u0012W\u001a\u0016\u0018~�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"806dc0db-a55f-454b-97c5-ac56bc7d97e4","seq":1,"duration_ms":100,"bytes_in":530,"bytes_out":14,"enriched":{"digest":"4aa4108f442df219","strings":["w\\dM","%|d9m\"","&Te.o[`","b*#)y}","'N.u","xDIw"]}},{"timestamp":"2026-09-28T13:10:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-5.fE6VGUZxsr","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d352e6645365647555a787372","method":"","user_agent":"","ja3":"","session":"0c19d126-4157-46de-a79b-f4569f5bb8a4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"f14947b5184fe249","strings":["BitTorrent protocol","<-UW160N-5.fE6VGUZxsr"]}},{"timestamp":"2026-09-28T13:09:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"+e\u001b�3�\u001d��_�ZlC�E�\b��0�([]\\�e�A���p�O��[\u000eL�s��G�e����\u0015�5�؜)�a+�C�\f�)�\f�G_��������\u0010�\u0019\u001f�6�pbb\u0011~CTZb�Y�\u0014�%\u0011�ɑ�\u0013��-\u0004%�9k�'�I\u00183�Jl6�\u0015^yF�w;t\n��a+w���N��\u0001C\u0018�%���W\u0001��_D�P��=�˛+�-�jY�I�up�K�\u001f+����\u0018�s�;M�\n��f�\u0017�0+�Pt)4]?���z����T#rI-\\\n\u000e�\u0001�_\u0017��ɡ��#=��䠅F���j���\u0017H2�Ԏ*(n�V��]�\u0018���\u0003%+`���CIK���.m͏����ʰU�ef1P������j6R�c���������\u0013un|�A_\u000b�F���\n�.\u001e0���\u000e�d�ya\r3���n�n\u001b��t6p�n��'�эf%Q�\u000e'�G\u001eJ\u001b�*�J��c��r��~�\u001f�b��u�\u001a�\u0019�h���\u0010����,6\u0013B��?�uh��C�j","payload_hex":"2b651bb033a21dcacc5fc95a6c43ea45f908b4b7309f285b5d5cc665fb41ebe1c070a44ff3c65b0e4cfe73b1d547e0659dbfc0f615cf35b9d89c2992612bc643e30c8a29a90ca4475f81a2ded1fdb994ac10b2191fac36aa706262117e43545a62fd59a614c22511dac991dc13a4ca2d0425dc396bd72787491833884a6c36b8155e7946b6773b740a9fcf612b77c3caca4e8890014318db25cbedf95701b3c55f44fc50ee963d9ecb9b2baa2daa6a599449ae7570cf4ba71f2b9d9495eb18af73c13b4dae0ad6de66e217f0302b81507429345d3f83a5b07a9ee7c6e1542372492d5c0a0eb401fe5f17e8dcc9a1a386233ddcebe4a085463c70b547f06e2319c1372d9ed05227abe10701af40b78ac420349e138208925111f8e137a2f1be0990d7a63750dc44554bf272b051db3ab9f712b8f71cc36a7837823ce74c7c44d61497290f017f869e274e8117bc4ffa690bbea5ba0fa56a5112303cc32c76d6bc60aa8669dc5176baa17508ccaedcb12f7de94cabf675f1f7994bc832012de1baf80e27a2e8790cb43ea7c1c16ab7afe9174832b6d48e2a286ee85693d95dbf18888cfa03252b609be89543494be4c7d32e6dcd8fd5fbb8ebcab0558365663150a39eadc3ef9f6a3652e563dcc4ff8ad7e1d2fc8b13756e7cdf415f0bfc46e7bedd0a892e1e30b5eefd0ef664b479610d33c1a2d76eaf6e1b89d3743670b57f6ebef627d1d18d662551e50e27b4471e4a1b942aa74a7fa1f663898f728ba27ee71fdb62e9ce75ad1aa019e068e9f3a3109c9e9ba22c361342bd8f3fa97568e19643c16a","method":"","user_agent":"","ja3":"","session":"866784f2-ccfd-44d2-8876-821950585a4f","seq":1,"duration_ms":101,"bytes_in":579,"bytes_out":14,"enriched":{"digest":"9ea19cc506568f05","strings":["~CTZb","Pt)4]?","T#rI-\\","ef1P"]}},{"timestamp":"2026-09-28T13:08:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-L!FV~O)BnKmY","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4c2146567e4f29426e4b6d59","method":"","user_agent":"","ja3":"","session":"2d1823f7-98aa-49d5-abc1-b52513091950","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1d9a74df887e33ba","strings":["BitTorrent protocol","<-UW160N-L!FV~O)BnKmY"]}},{"timestamp":"2026-09-28T13:07:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"'V摙\ft�%���5\"8�\fخD��v,��ܨ���K�\u0014e\b�U>MƷ\u0002����{�\r��<�҃*\u001d�,5�\u001a\u000fF@\u000e�T�����ňӜ�ڼI'�D��\u000b�`�V\u0003L������\u0004���!;\n86�\u0002�\u001f���c�4���l鎜M557�L6�7�S��a-��p���t\u001b�B������G0\u001e","payload_hex":"2756e691990c74872591afff352238cb0cd8ae44b9fc762cf7d8dca89ff0f44bd9146508df553e4dc6b702e989f5b77bd00d81903cded2832a1dbb2c35b31a0f46400ecf5487fb99f4edc588d39cb1dabc49278e44aaad0bc7609156034cdfcdc7d2c9c504acacad213b0a3836e302c31f86c4e263b734eaf6d76ce98e9c4d353537df4c36bf37fb53bed1612df88d70f6f0db741bcf42809ae5fd84bf47301e","method":"","user_agent":"","ja3":"","session":"183d1684-fc3c-499e-bf53-878e6c3b201b","seq":1,"duration_ms":100,"bytes_in":160,"bytes_out":14,"enriched":{"digest":"c190588adf1affff","strings":["M557"]}},{"timestamp":"2026-09-28T13:05:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-cH-y*ijvRi~w","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d63482d792a696a7652697e77","method":"","user_agent":"","ja3":"","session":"8fc5fa5a-9dca-427d-a38a-909a6ed71505","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"0eab3612241ac899","strings":["BitTorrent protocol","<-UW160N-cH-y*ijvRi~w"]}},{"timestamp":"2026-09-28T13:04:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"_=�/�I�!DcȆOQ\u0007���8\u0003r�\rT\u0019g&ᦻ\u000bo�N\u001b��+��+v�ݒ�oj�u�cpûfNb+�,m2@Ɏ�b�\rJ�\\[�\u0000� �W�+�<�;�\u0018�*n�^��j\u001f]s��#�\u0005ZW\u001e͐ਖ}UK6A����\u0018�����\u001e\u0017���)�JI\u001a��B]8]ZP��*,8h��&&Z���C �N透@�'��","payload_hex":"5f3d9a2fb349d4214463c8864f5107cdeeaa380372c70d54196726e1a6bb0b6fd94e1b8cec2b8bb02b76f2dd92c56f6ad475f46370c3bb664e622ba72c6d3240c98ec562ad0d4aa35c5bb00096209c57b52bc53ce33bd618ae2a6ef55eb1ba6a1f5d73ed8a23c8055a571ecd90e0a8967d554b3641849c80ea18be859c80c71e17968ebd29eb4a491a9a80425d385d5a50a2852a2c3868d6cd26265a9297e64320ff7f4ee9808f40bf27a582","method":"","user_agent":"","ja3":"","session":"104bc877-a6bb-4cf3-8ca2-330450fe5929","seq":1,"duration_ms":100,"bytes_in":172,"bytes_out":14,"enriched":{"digest":"b6419b1e4b749d08","strings":["fNb+",",m2@","}UK6A","B]8]ZP","*,8h"]}},{"timestamp":"2026-09-28T13:02:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-siA!!DfYWW!v","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d736941212144665957572176","method":"","user_agent":"","ja3":"","session":"fb13e5d9-48aa-4125-8e43-4e8b26d26408","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"87ecc578afdcf226","strings":["BitTorrent protocol","<-UW160N-siA!!DfYWW!v"]}},{"timestamp":"2026-09-28T13:02:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\b�\u0018{g��1���\u001a\u0018Q\u0011��]0�O��2Cڊ�\u001a�������n\u0002����\u001b(�^`�R��p���J�󀙳�C������g���\u001dj�\b_�?��\u0012��i K�]P�w=\u0019F��\u0002","payload_hex":"08ed187b679bf131c4fd961a185111beaa5d30e54fab853243da8ad51abda4ffb2d6e6fb6e0289b881f71b28d45e60ed52ad9b70e1fabc4ad1f38099b39643e3ccdbc0f29f67ee80ea1d6abf085ff73fe0a712e5c269204b9c5d50b2773d1946a5d302","method":"","user_agent":"","ja3":"","session":"31f662fa-e169-4853-bdf2-92c30856308b","seq":1,"duration_ms":100,"bytes_in":99,"bytes_out":14},{"timestamp":"2026-09-28T13:01:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-4hoxs*PpkR86","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d34686f78732a50706b523836","method":"","user_agent":"","ja3":"","session":"28b92b71-3043-4391-9ca5-729d97126609","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"543b3d4501f0b5b9","strings":["BitTorrent protocol","<-UW160N-4hoxs*PpkR86"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-30T04:32:46.969161+00:00"}