{"ip":"39.123.238.245","observed":true,"total_events":2,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["2 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"802 bytes sent","bytes_sent":802,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-16T16:41:59","last_seen":"2026-10-16T16:43:10","events_24h":2,"events_7d":2,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"KR","country_name":"South Korea","region":"Seoul","city":"Gangnam-gu","lat":37.5245,"lon":127.0354,"asn":9318,"org":"SK Broadband Co Ltd"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as9318","label":"SK Broadband","category":"isp","url":"https://www.peeringdb.com/asn/9318"},"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":16663,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-16","count":2}],"recent_events":[{"timestamp":"2026-10-16T16:43:10","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\fW�>\u001e\\*���|��\u0010ߖlC�&f�\u000e��TC����\u0011uиZ,z\u0015��Ix\u0019��R<�u.<�~��Z\u001eT��OD����]~,�u�=\u0012\u0016,\u001d\u0006�������G�my�>M*\u0007T�р\u0011�����\u0005i{vW%�@�։r�$ܙ���|�G罧X���/�w�\u001ft��!\u001e0\u001b�\u0011����!Y����!�ݩH�\\�O\n~��\u000e��:���w��\u001d\u0016����.37�Z��d�N�b�z�ѭo�Ϟ)Hm�L�s�\u001eޞ\u0013(�P�i�\u0010�w�\u0016��b���k�ʿt%Kb�\u0004ă����/\u000b�ۮ89�e�\f��+����U\u0011��2��=\u001e��nO\\\u0013;��s\n�Ev��ѳ-!G�\u000f�\u001b�h��\frUӌ40�K*\u0012�\t\u001e~z��H�.n�7����UL<������� #\u001c�ﮨQ%����\u0006���ko;���Y���j�p�U�L�`�\u0012@��\u0006j\\<�ٝ��B\u0000M6N``�F�n�\u000e�#$C�ۨ�� \u0007T\u0012\u000b�\u001a��/��z���\u0015�����\u0007O��\u000b~i,��b�H�\\\u0006z�kH���H�8\"�\u0002!�\u001a��\u000b�F��\f\r��<B0��k�4�\u001dm���B,V�l�r\u0001���)��8\u0001�\u001b\u0019e�5�'���O\u0011\u0018�˓ܒ���KE�\u0007g\u001f�ӫ7s�]�5\u0012�\u0017��KsÒ\u0019�J�ܑ7ù��ap\u0010�`H6\u0001�ᰎ�.�k2M�M��õ�w","payload_hex":"ea0c57963e1e5c2ac1d1cd7c8bc110df966c43a62666c50ee2eb5443c4f0c4e41175d0b85a2c7a15eba3497819a3df523cbd752e3c907ec1c35a1e54ff9d4f449d84cefa5d7e2ce975bc3d12162c1d0680caf1b193e6c347e56d79cd3e4d2a0754b9d1801189edbeeca405697b7657258240bbd68972f324dc9995b9b47c9e47e7bda758c0c87fda2f9d77ec1f74b6d3211e301b98118182ea8e2159f197eeda21d0dda948cd5cdc4f0a7e81880e8dc83adef0a077fc981d16caf1c9c32e3337ad5abaac64bf4ec662de7afcd1ad6fc7cf9e29486d9f4cd773c01ede9e1328d150c569cf10f377d716b08562a8f9e96b9ccabf74254b62be04c483efb9cbc92f0bbedbae3839e865840ca0ef2bd47fafefd7551191ad32cfe53d1eb1936e4f5c133ba38e730ace457697b9d1b32d2147d10fba1bc068b88e0c7255d38c34308d4b2a12fa091e7e7a9a9548ff2e6e843796aac8c0554c3cbbb18db88af19020231cbdefaea85125a289fad606e1f6d36b6f3bee9dfa5985c0a36ab2708555b64c9a60d4124090c3066a5c3ca0d99def9542004d364e60608746c66edd0ea3232443dbdba8d2fa200754120bad1ae2ff2ff9a97aabaabc15ab8e83eed8074f9d8d0b7e692cad9462cc487fa95c067ac46b48869ca6488b3822f00221d51aced30bde46e8ac0c0d8eda3c4230b9a76bfd34cf1d6de5e1ad422c56e76cd37201d2dddc29ffd33801d61b1965f935c827f3d9c94f1118b4cb93dc92e8fbff4b45a507671f97d3ab3773f25d9f3512a017ba824b73c39219c04abadc9137c3b9f5b9617010d760483601bfe1b08e962ef76b324dd34d95d4c3b5f777","method":"","user_agent":"","ja3":"","session":"da0d8824-8ecb-4785-ad5e-957918afbdcc","seq":1,"duration_ms":100,"bytes_in":601,"bytes_out":14,"enriched":{"digest":"be2ce9d1277c9132","strings":["i{vW%","t%Kb","M6N``","BM6N``"]}},{"timestamp":"2026-10-16T16:41:59","port":16663,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�PC*A<�Y�B�i��!����*]Q#�8�f3Y\u0000\u0017$\u0003/N\n?**+\u0015���\\��\\U,�>#+�H)\u0018�\n?#���Q��f��R���\u0017�#�muf�\u0014tvQ���7�����V��ݒ�n��\u000eZ;\u0018��]u�\u0007\f�$b��u$�]����\u001b��R+��aR$-\u0016������4��\b\u001c��I���anӎ$^\u00168��Yl����\u0001�H�wy�#�\u0010\u001f�H\f-\u001a7Z�f_(a�","payload_hex":"8e50432a413cd559de42886992f121ad8a8fbd2a5d5123f338a6663359001724032f4e0a3f2a2a2b159ca4f15c85dc5c552c833e232bde482918e40a3f23a78fc651fa8f66a6de52bdaee217b023f96d7566ad147476519dbdd2379aa79fa4dd56c5ebdd92b86ebc830e5a3b18eab25d75e0070cb7246291e47524a65db7fe87cf1b84e7522bbebc6152242d16c1ee97bbb0d3fff3af34838b081cc7f649ec8cf9616ed38e245e163898ab596c8bc7f3a601d348ea7779802388101ff5480c2d1a375ad2665f2861a2","method":"","user_agent":"","ja3":"","session":"2daf4348-0a8d-40c9-bc10-028aba1f95b1","seq":1,"duration_ms":100,"bytes_in":201,"bytes_out":14,"enriched":{"digest":"77ea6499ff3259c1","strings":["PC*A<","*]Q#","aR$-","f_(a"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-17T07:13:10.797030+00:00"}