{"ip":"60.170.19.10","total_events":4,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["4 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"957 bytes sent","bytes_sent":957,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-10T19:28:39","last_seen":"2026-09-11T08:16:13","events_24h":4,"events_7d":4,"geo":{"country_code":"CN","country_name":"China","region":"","city":"","lat":34.7732,"lon":113.722,"asn":4134,"org":"Chinanet"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as4134","label":"China Telecom","category":"isp","url":"https://www.peeringdb.com/asn/4134"},"cve_matches":[],"malware":[],"top_ports":[{"port":1054,"proto":"tcp","label":"","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-10","count":2},{"date":"2026-09-11","count":2}],"recent_events":[{"timestamp":"2026-09-11T08:16:13","port":1054,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�1�N�}#�N42��.�wD�@���f�(\u0003wV����o;B\u001aV��R`m�\bbN{\\p�S����0����\u000f��\u0019�͈���`��8�w����EV9z\u0007\b\t2�#\u0012\u0003v��:B�/�U-�\u0016y¶-���>\u0014�\u0012\u0012�\u0006\u0016�t\u0004x��輫��\u001d;D�)�m�)����O<P��+Ҕ^���\u0014��\u0002-\u000e>\u001d\u0012\u001b�\u0000-^�L��^��\u0005ͨ�{��&Z�x�~��<\u0018\n�ohH&��\\��M�&P��AY\u0017\u000f:�I�wd��(��s�G9�\u0002\u000fW�y�\u001f��P�����4+D��iS\u0001��\u000e��� ׆����\u0006��=k$\u001e\u0017\u0017m�.���4t����A5TdI\u0010R\b�\n�7�����ji�n���\b�\u0012�}�FE��P�bƤ�C����\u0002��\u000fm��\u0002\u001bV4S(02�9_�u.\u0011P��o\\��](�W��7��^}L�C�{��l�1}g�\n�\u0014 �w�:q1��A#��qo�WXem����\u0012D��h@\u0001H\u0010j�\u001e'n�>q)��+P��hܘ��QlkI���l\u0016�?\u001d�\bBb������\u0016��\u001f\u000bh�#��`F��u,Q��-����λ\b��\u001c)���\u001d\u000e\u0003�G1��\t�\u001eR</�ׂ;f�\u0011_F��x���\u0012��QV","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"24a35336-6e64-4b2c-90a2-2bc6fe791c0d","seq":1,"duration_ms":101,"bytes_in":535,"bytes_out":12,"enriched":{"digest":"73c095f50bbab70a","strings":["bN{\\p","EV9z","ohH&","A5TdI","V4S(02","WXem","QlkI"]}},{"timestamp":"2026-09-11T03:34:38","port":1054,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005O\u001a9oC\u0019x\u0017K�������p�d�-XL0019-7��\b��zMe�5�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000054f1a396f431978174bb8b1b58cb28a8a709d64f62d584c303031392d37f0a80897c67a4d65f735c3","method":"","user_agent":"","ja3":"","session":"32fdb47c-3051-439d-bedc-bd604eb19ca8","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"488348c7db897c4f","strings":["BitTorrent protocol","-XL0019-7"]}},{"timestamp":"2026-09-10T21:27:38","port":1054,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�E����O]o`�:� c@�-J����*\u0003$��gc��G$Uvs�l&�ANKg�\u0017���\u0019\u0010?\u0003\u0007����Ap�� \u0011�f��\u0016�B\u0014��z�.-�V����f��\u0015��k0�<�S\u0010IaO�Nq�Y�}NZ�4\u0017��ꫴ��ž^�\u0016p6\u001c-I�0��Њ1f�z�������\u0011\u0018(�-\u001b\u0007�V����=Ϡ�1��|\\��,\u000f��DT�ϋ��x���3;�O�p\u0003��9��\u000fz(/Ⱥ�\u0010Y9g\u0001Z�\u001b����\u000b\u0014cx\t��\u0007G�f\u001cžE׭���\r�,��r�)���Q�\u0001�ZU9\u0001)�ȴ�����m�j\u001e�����\f�\u001et\u001c繟\u0014�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"ca87607d-9d24-449d-96b2-94c75b389dfb","seq":1,"duration_ms":100,"bytes_in":286,"bytes_out":12,"enriched":{"digest":"3e4521d3d85ada52","strings":["O]o`","G$Uvs","ANKg"]}},{"timestamp":"2026-09-10T19:28:39","port":1054,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005O\u001a9oC\u0019x\u0017K�������p�d�-XL0019-7��\b��zMe�5�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000054f1a396f431978174bb8b1b58cb28a8a709d64f62d584c303031392d37f0a80897c67a4d65f735c3","method":"","user_agent":"","ja3":"","session":"5dbd9101-c80d-4470-87de-601937c40aca","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"488348c7db897c4f","strings":["BitTorrent protocol","-XL0019-7"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T10:28:51.885163+00:00"}