{"ip":"148.101.198.231","observed":true,"total_events":387,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["387 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 26,316 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"26,316 bytes sent","bytes_sent":26316,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-12T20:24:01","last_seen":"2026-10-14T16:59:08","events_24h":0,"events_7d":387,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"DO","country_name":"Dominican Republic","region":"Santiago Province","city":"Santiago de los Caballeros","lat":19.4857,"lon":-70.7362,"asn":6400,"org":"Compania Dominicana de Telefonos S. A."},"source_domain":"231.198.101.148.d.dyn.claro.net.do","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":441,"protocols":[{"protocol":"udp","events":441}],"ports":[{"port":39131,"events":441}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-12T19:16:12","last_seen":"2026-10-14T16:59:17","recent":[{"timestamp":"2026-10-14T16:59:17","port":39131,"src_port":14377,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000��<�߬\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000��\u0000\u0000","payload_hex":"4100efe13ccbdfac0000000000100000899c0000","sni":"","session":"5036b6d7-ace2-4e8c-a30b-93719eb7efe9","bytes_in":20,"source_verified":false},{"timestamp":"2026-10-14T16:59:11","port":39131,"src_port":14377,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000��