{"ip":"131.0.196.230","total_events":156,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["156 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 32,129 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"32,129 bytes sent","bytes_sent":32129,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-01T02:37:23","last_seen":"2026-10-02T16:44:28","events_24h":0,"events_7d":156,"geo":{"country_code":"BO","country_name":"Bolivia","region":"La Paz Department","city":"La Paz","lat":-16.5002,"lon":-68.1493,"asn":27882,"org":"Telefonica Celular de Bolivia S.A."},"source_domain":"SCZ-131-0-196-00230.tigo.bo","known_scanners":[],"scanner_tag":{"key":"peeringdb:as27882","label":"Telefónica Celular de Bolivia","category":"isp","url":"https://www.peeringdb.com/asn/27882"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":156}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-01","count":145},{"date":"2026-10-02","count":11}],"recent_events":[{"timestamp":"2026-10-02T16:44:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-Sjyw_pYIe~s!","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d536a79775f705949657e7321","method":"","user_agent":"","ja3":"","session":"a2812943-59b9-4d7e-84d9-2acfaea78a9a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"01039872acadfcd0","strings":["BitTorrent protocol","<-UW160N-Sjyw_pYIe~s!"]}},{"timestamp":"2026-10-02T16:43:17","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"V9\u0015�\u001d�VN�m�9H_d�=�8P��\"�exR\u000fW�t��\u0010T�O��\bQ���\u001d\u0016k�{\u000f%\u0012e�V��\u0005r�QC�6��,�@��D�[k���SE���ΟZU�s������>�\u0015�Ko҄���ʧKC�\u0001�P�X�jB\u001b;V���H\u000b�\u0010\\�o���\u0001�q�U\u0004x�;��~�\u0012h\b\u001aW�����\u001fV�D\u001e�Zz\t��V΃_b�ֳkS��a�t\u000b���+�g��!�_\r*�����w^~�@�ݫ\u0005��\bq����>��=ξp\u001c��������W�i","payload_hex":"563915ef1df9564eea6dad39485f64f13dc2385083f222fb6578520f57fd7481c51054d04f81c20851e9afcc1d166bcb7b0f251265f256cbe805729a5143bd36b1da2c9f4097c444d85b6ba1fa975345bac7c7ce9f5a55957385fbe0f7d6fa3e8b15854b6fd284bffa9fcaa74b439701c3509858d16a421b3b568d9fe7480bc4105cf56faadfdf01e871e0550478d13b8fcc7e871268081a57b18f8f9be91f56bb441e855a7a0999e356ce835f62fdd6b36b53b98e61f4740bf391e12bbf67a69921875f0d2ab1b7f5a6a8775e7ef240f4ddab05d0d00871a7a6c0cb3ee7b53dcebe701caaa39ba7998184ed578669","method":"","user_agent":"","ja3":"","session":"90d927ca-de54-4374-9289-1009857c0067","seq":1,"duration_ms":100,"bytes_in":239,"bytes_out":13,"enriched":{"digest":"a8b46e3efcaacb56","strings":["9H_d"]}},{"timestamp":"2026-10-02T16:41:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-OaGRZBX.TQms","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4f6147525a42582e54516d73","method":"","user_agent":"","ja3":"","session":"ed68d3c4-9810-46ba-9f7b-b362e8cb23c0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"8c491f2d55a649bd","strings":["BitTorrent protocol","<-UW160N-OaGRZBX.TQms"],"iocs":{"domains":["uw160n-oagrzbx.tqms"]}}},{"timestamp":"2026-10-02T16:40:36","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005�Sp�Ub�\u0002��^�����-T>Ǫ�B\u000b�{���\u0006k}��Q��0����F2 Ãj���6��f��\u000b�\u001c�K��Y\u0004b!\u0007`Z�4%1\u001b@\bS1����I�/�[�\u0005h<�0/�\u000b���N����\"����\u001ex�K�\\z��VNj\u0015��\u001f\u0013���0 \u0015��Y\u001ck�??�8�=]Pqɓ�\u0004�$�73\u001a\u0010r\t\u0003\u0010�W�N\\��ҒmH���R��+n\r�S@��D\u000b\u0018\u0014\u001b�:ԕ�,����v�\u0001�\u001e\t�Ÿ�Kq���\r]��\ni�\u0017\\r�h�����i�)�Ӓ�j��\u000ev��/U�3d��'f�\u0011�\"��1�hN^\u0012�!�����2#�wQ�TT���X�\b�X^����\u0016�m>}�\t=�К�!�\r�<��z�D\u001e�#��\u0018e���ЫuEQ����[߸�BH���s%��\u0014|�K9�1\"T9�:})4еi��}\"�\u0012�C�E3���*<=#����\u0012]n�\u001aE\u0017�\u001a�8G։�}Z�\u001f��\u0018��5k<�&1�\u001a�z\u00143Ր\u0014<\b�T\r;B��\\��G^s��1\u0006�8��y�c��xS<\u0005𘚶9�!��\u0000��k�\u000eE��\u0015�KWW$wr�\u0014��\u0012'����k�\u00137�\u0015K2d�\u000e�h��\b�\u0007�����3\u0012$2]�s��\u0012�2\u0017\t��N\u001b>�X���L��Œm�ƼƂsڇ��;�@�\u0016��2E","payload_hex":"05d35370c35562eb02f0fe5ea8aaccf7a02d543ec7aaab420bf87bbba19c066b7de48951ace830c8feade6463220c3836af09c8336afbc66b0c70bb31ca44bcbfe5904622107605acd3425311b4008533182e4efd3499e2fe15bd905683ca4302f800baf93bc4ea192b39b228af980e01e78854b9d5c7ad6dd56c78b15e19d1f13b0ecc9302015e384591c6b853f3f8d388d3d5d5071c993c9048424e137331a1072090310da57ce4e5c8085d2926d48f8d6d552bcd32b6e0d955340bfcb440b18141bc83ad495f62cabf3a2fb76d801bb1e09c3c5b8834b7187938b0d5dd3c10a69e5175c72cd68e0def5ecf569ab2980d392ec6af8b10e76c1a82f55c63364fc852766aa11d8229da6318c684e5e128221c2c5fda58f3223fc7751b65454a7ecb6588e08be585e91bbb7a316cd6d3e7db9093df4d09ae521820d913ccad47aad441ebf23b2e41865e3f483d0ab7545519e93b7f75bdfb88a42489cf89d7325a78a147cdd4b39c931225439ec3a7d2934d0b569e68b7d22d9128b43b2453388d5d02a3c3d23cefc8ec0125d6e901a4517cb1a993847d689d37d5ae71ffde918e28e356b3c812631f01aa67a1433d590143c08c6540d3b4298e25ce1aa475e73c3ed3106b8389dfb799c63d2c478533c05f0989ab639c021be8f009dcd6b910e45a5cd15ea4b5757247772a314ddea1227fbc6eae46ba91337a7154b3264ab0eda68a7b3088907a4b1f6aaf9331224325dcd73edf612c7321709a8884e1b3e845881ad9c4c95a2c28c6dc5c6bcc68273da87e7a33b9a40ac16fc933245","method":"","user_agent":"","ja3":"","session":"3c3783e6-d140-4009-bf5e-05c83ea5ed31","seq":1,"duration_ms":100,"bytes_in":573,"bytes_out":13,"enriched":{"digest":"0f777d2f759db967","strings":["=]Pq","1\"T9",":})4","KWW$wr"]}},{"timestamp":"2026-10-02T16:39:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-1sslXYS35N4S","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d3173736c58595333354e3453","method":"","user_agent":"","ja3":"","session":"781490c0-1bed-42f7-a2f3-656080ab1e5f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"b32b13eb2f70dfd6","strings":["BitTorrent protocol","<-UW160N-1sslXYS35N4S"]}},{"timestamp":"2026-10-02T16:38:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":",�ѝ\u0017�O\u001b��ϰ\u0017�i`��=6*¿�\u0001�v�c\u001eu��K\u0004<��O-��7Sd�2ڲ�%��T\u0003�\b����W��ë�MI4�\u001f\u0006��z}�5G3�\u0015\\���z��\u0003Br�\r\u0013�\u0019<�Feq�\n\u0011o�\u0016!�������\u000bW^�|u�8t\u000673��v��#m�(�uX?}��\u0001��m�4�ػ�K�lP�","payload_hex":"2cc6d19d17c74f1b83b6cfb017e96960e7f73d362ac2bfb0019976fe631e75bbcf4b043ce9aa4f2d8082375364b932dab2de2593f07f5403d008ff8ce7b75788b2c3abe64d4934b81f06b1ba7a7da735473382155c83e0997ad9cc034272f10d13a2193cb1466571840a116ff61621fba8fbcdede0e00b575e8b7c75db3874063733bde5768ed1236df428fa75583f7d9caf01baa56ddd34cbd8bb8d4be06c50f1","method":"","user_agent":"","ja3":"","session":"f0de17be-5f16-4aad-94e6-73c8592495ef","seq":1,"duration_ms":100,"bytes_in":161,"bytes_out":13,"enriched":{"digest":"c0f65e25a9b967fa","strings":["uX?}"]}},{"timestamp":"2026-10-02T16:37:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-tzYl6Ew5ar~q","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d747a596c3645773561727e71","method":"","user_agent":"","ja3":"","session":"90a8c5c9-bb58-43b4-9750-b2d6fe0e2e5f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"88ca6e8f560a1f0d","strings":["BitTorrent protocol","<-UW160N-tzYl6Ew5ar~q"]}},{"timestamp":"2026-10-02T02:48:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�;/׬r������{\u000f\r�c\"8�!Z�T��1��_�x���\u001d�t,i�B\u0014:\u001c'��b\\.;UC�kG��R�׹�hF��\r�)'Ί�o\u001cXu\u0005�i8��XV?�\u0017\u000e���\u001e=�4:-R��>����@��a�f�0\"�y$K�VOO�@��`7���I��\u0006�bo�Hl\f\u0017���ѓ\u000e�\u0019\u0002#S\f\u0011���\u000e,M��N=���M���\u001e�U\u0000@�2\u000b��R1i��Ym��\u0003`k>�b79��xwR��ts�\u001c^.o�\u001dܲ�\u0007\u001b�eCH�s�3t��tG@�E\u0007 �5&m���9U\u0007O\u0015&J�<�D9��'t�F\u0011i\b/�\u0012B�\bӂ��J�ƻF�\u0007�~5Ic\u001b���9�\u0017�\u0011N\bø!6�I\u0000�>��`�L�Q\u00104��F����\r�ߙ�j6�kvVzV�,*�i�f��\u001c���H&\u000f�5�4!�„\u001f\t҂���gu��(\tg%�&n�RCjqm�\u0007̟\u0001\u0012W��\u000eIٶ$�/xټ�\u0010\b?ώ9���z\u0003�@�\fUa|�w*>�\b�C�R���\"���\u0010S�r\u0011իC\u001dǥߗ��y4���/�\b�>�ĝ�~��jx\u000f��\u000b\u0007�Ƅ��'���\u0015�\u0006+i#m�k^�d]\u0000�+�r��\u00121��\u0000�im��G\b\u0006#���z�Ŏ>��\u0010","payload_hex":"8d3b2fd7ac72ffc3d4cbe1bd7b0f0dd6632238fc215a8d54efb331a1945fe878f6ff881d9a742c69e842143a1c27e187625c2e3b5543d96b47c18c52ebd7b9c6684685c30de32927ce8ae16f1c5875059c693897c258563f83170ec7e4b51e3de7343a2d5294c03ebfbb82bc408ba261bd669d3022a979244b95564f4ffb408ee86037fbcced49b8aa06d3626fc5486c0c17b394aad1930efe190223530c1198ea820e2c4d99cf4e3dbe94b54da0a8ed1ef7550040da320bbed552316981fb596d9dd603606b3eea623739f6ae787752dfc27473841c5e2e6f8d1ddcb2ad071b956543489a73b233748986744740d0450720d97f35266de8de7fd23955074f15264aba3cb04439d5d527749f461169082fb21242e708d382b6954abfc6bb46ac079c7e35eeaba249631bfefc89398f17f5114e08c3b82136e24900a03ea8ac60814cfc511034dfee468bb3d4df0dc8df99b46a36856b76567a56872c2ac969a766a1d31cf0edfd48260f9835d83421c4c2841f09d282dcd0cb6775c5c028096725ea266eef52436a716de707cc9f011257d4eb0e49d9b624852f78d9bced10083fcf8e39e9c3ef7a03fc40940c55617c98772a3ef408a343a452b699f4229694c51053917211d5ab431dc7a5df97d2f37934aa9df12fc808ac3ee7c49ddc7efdab6a780ffdab0b07f1c684f2e7278bbb9015a5062b69236db56b5ecd645d00dc2ba672ffea1231b3c700ec696dbfd84708062389b0807ac3c58e3eded910","method":"","user_agent":"","ja3":"","session":"d028f08e-7185-4bc9-846b-90a96a80a7b2","seq":1,"duration_ms":100,"bytes_in":542,"bytes_out":13,"enriched":{"digest":"d235330c54ae3ffd","strings":["b\\.;UC","4:-R","kvVzV","RCjqm","+i#m"]}},{"timestamp":"2026-10-02T02:46:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-njTk~RJ0wvoc","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6e6a546b7e524a3077766f63","method":"","user_agent":"","ja3":"","session":"62dfeb17-0b21-4f6d-8233-d44d99c3f3c6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"0d8cbec17de13f12","strings":["BitTorrent protocol","<-UW160N-njTk~RJ0wvoc"]}},{"timestamp":"2026-10-02T02:46:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�v�Q�O�3��8\t�\u0005�\u0000��M�c]V���wu��\u001b\u0007[�F�K�h4\u0000`u���Q�ˠ�лS$\u000f�ed����\u000f�\b��_������\t�~�3��z�f��%B�^PJ�*5�\u0015�C���\u0006\u0014¢� S��as����_�w��\u0003֙^�`'����8���ޠ�D�@\u0003�q\u0002p�\u0019��o� w,�\u0013\u001dӛ1C\u0013�W�\u0014��c$\f:�6�����g/\u0006\u0013ԧh�mE�s{uR�dt\t�a#n7T̺","payload_hex":"ac76c951f44ff133a2c53809ec05b900a4ef4dbf635d56fcd9c77775efd21b075b9946d44ba66834006075bfefe251fccba0e7d0bb53240f8e6564f58bada30ff308e5a55ff5c5f4fdbbf009fa7eff33eeaf7a9166d9d025428c5e504a992a35ce15db4392b5f70614c2a2c82053f6a26173c0ddecd55ff877cdfb03d6995efb6027fccde6e338a8a1cbdea0b944954003e67102708c19f2e36fb020772c84131dd39b31431382579614dccd63240c3aba368282b0e09c672f0613d4a768f96d45b6737b75528b647409b561236e3754ccba","method":"","user_agent":"","ja3":"","session":"c59454f1-bf3e-4371-9df5-a1fe76ad0f76","seq":1,"duration_ms":100,"bytes_in":210,"bytes_out":13,"enriched":{"digest":"686c35393aa365f6","strings":["s{uR","a#n7T","h4`u"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T19:36:25.566639+00:00"}