{"ip":"131.0.197.250","total_events":368,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["368 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 76,947 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"76,947 bytes sent","bytes_sent":76947,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-25T21:44:34","last_seen":"2026-08-16T03:21:26","events_24h":0,"events_7d":220,"geo":{"country_code":"BO","country_name":"Bolivia","region":"La Paz Department","city":"La Paz","lat":-16.5002,"lon":-68.1493,"asn":27882,"org":"Telefonica Celular de Bolivia S.A."},"source_domain":"SCZ-131-0-197-00250.tigo.bo","known_scanners":[],"scanner_tag":{"key":"peeringdb:as27882","label":"Telefónica Celular de Bolivia","category":"isp","url":"https://www.peeringdb.com/asn/27882"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":368}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-25","count":26},{"date":"2026-07-27","count":12},{"date":"2026-08-02","count":24},{"date":"2026-08-03","count":46},{"date":"2026-08-09","count":39},{"date":"2026-08-10","count":1},{"date":"2026-08-15","count":183},{"date":"2026-08-16","count":37}],"recent_events":[{"timestamp":"2026-08-16T03:21:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-M10.r94*0xJP","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d4d31302e7239342a30784a50","method":"","user_agent":"","ja3":"","session":"806aaf65-397d-4070-8617-31519d460ab8","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"99359f177fac07c3","strings":["BitTorrent protocol","<-UW1609-M10.r94*0xJP"]}},{"timestamp":"2026-08-16T03:18:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001d\"����_�\u0012��U�EhT���@W>)Q�s<����ɎV��*$\u001b�kc-�]T\\O��q\u000e�A�\u001bg�����̧\u0006V��j�G|L��mDt\bO�\u001e�lg>j7������y���7�9\u0010�����F���wQ��L��&\u0013�F�����\u0019�\"b~���J~\u0019wQ? �\u00108ƩѮ��^","payload_hex":"1d22a28f96ab5fcb12e7ca55ce456854dadad540573e2951fd733cd0eeb6d5c98e568da42a241bec6b632db85d545c4fbad8710efc41ce1b67e9d7c2d1c6cca70656b9f36ab6477c4c8e826d4474084f9e1e906c673e6a3790f88ba8e4b979dfe09c37b3391086f6f2eeff46b2abe2775183aa4c8ec82613864697bf7f9dfab519bb22627eb9b2924a7e1977513f20d31038c6a9d1aef9e75e","method":"","user_agent":"","ja3":"","session":"3b11c726-d48a-4640-a2e0-a9220dedfe52","seq":1,"duration_ms":100,"bytes_in":153,"bytes_out":13,"enriched":{"digest":"15844a40ca1383f9","strings":["@W>)Q","]T\\O","lg>j7"]}},{"timestamp":"2026-08-16T03:14:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-)(1SpVICx(FR","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d292831537056494378284652","method":"","user_agent":"","ja3":"","session":"0337964a-08ae-445d-bce4-5d9c13ab21d8","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"0c6e40b9c8a7bac2","strings":["BitTorrent protocol","<-UW1609-)(1SpVICx(FR"]}},{"timestamp":"2026-08-16T03:11:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"+��\rY�5�Z�w$\u0002K��#�\f�m�f�8>\u0015���$1歔+g�u�f\u0003\r-/*B�u`\u0006E0W\\�%��Bb�\u0011��i��\u00198o��ҌY_��Q�\u000b=`ň�\u0018�҆\t��\u0012��6��u�Ŀ�����TO�C�s�\n\t�୶��\u001e!��/����\u001fm������.�̀��4���Sؼ�\u001a�7I_$ڄ;�\u001f��m�ۥ��:�a\u0016��\u0001C2�-\b�y0�M��VI��[\u0005��?�������L_�svƹ!\u0013QL�-���6�\u0004m�4�\b��u\u0016Z�J�k\u001d�[�zG��R���}{Q\u0002@e=�?\u000bD���\u001c&80��\u001a��\u0010D��5��.���8'��\u0012i�)\u0005҅^�U��x\u001c��+kz:*-׹�\u0004\u0001�\u000f���k�o2�~\u0001��/&�\u000e�_�\u0015�L���Si,�^Ś�\u0015*|<\bƖ\u001d��A�ے�4�#F�q��&�%{%t���v�f�\u000e]���X�K6*\u0018���p��=�NV��7.8'\u0004�Fa'r5�!lf��\f�$:","payload_hex":"2b87ed0d598835d85a9a7724024b989d23e80cc86daa6687383e15c3f9a22431e6ad942b67fc75a966030d2d2f2a42ce7560064530575ca725aa8c42629b11bece69bbb219386fffafd28c595fa0cf51b30b3d60c588d118c2d28609dbfa12c6d936ccc275bac4bfb8ad9f81ad544fe243b9739c0a0987e0adb6ef8a1e21e1bb2ff498fa801f6d85edbc9adcf22e85cc80949b34e591e153d8bc991ad137495f24da843bc21f9b8f6dd0dba59ccf3aa46116ba8e014332c52d089e7930864de8ae5649edb35b058cca3ff998fdcbd3f4e64c5ff57376c6b92113514cc22d969dbe368a046d9a34b708849d75165ac14ab76b1dcc5bca7a477f8b9c52ad96ad7d7b510240653de13f0b44aaa0e81c2638309aad1a9bdb1044e9b235c8f02e8ee0f73827fcc11269892905d2855eeb55c0ed781ca0e52b6b7a3a2a2dd7b9870401a00fd1d3c96bcc6f32aa7e01b8f92f7f26bc0ea65fef15b04cb6e0bb53692cc35ec59a92152a7c3c08c6961de19b41e5db92be34a02346df71b28826de257b2574879fd076c466fc0e5dd8f4b258d34b362a189e8ba67089823daa4e56a9d9372e3827048d4661277235ac216c66b5d00ca2243a","method":"","user_agent":"","ja3":"","session":"62dac19d-97a0-4a1f-bded-d7b49172aefa","seq":1,"duration_ms":100,"bytes_in":436,"bytes_out":13,"enriched":{"digest":"3491e3b46c701bd8","strings":["-/*B","E0W\\","7I_$","+kz:*-","%{%t","7.8'","Fa'r5"]}},{"timestamp":"2026-08-16T03:08:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-IxraStns(lqR","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d4978726153746e73286c7152","method":"","user_agent":"","ja3":"","session":"725563c9-fdc6-4034-a45f-9c39daffd70c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"693f063881b230ad","strings":["BitTorrent protocol","<-UW1609-IxraStns(lqR"]}},{"timestamp":"2026-08-16T03:04:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"2S�\u0017\u001e��P�� �²��m�\u0019@�\u00137�-31\u0000\u0014�\u000e\u0016�\u001a\u0017ךd���6\u0010g�I�v<���H�8\u001eԱ�����!���\u00160Q\u0002��\b[L�Qn�6\u0005?�\u000eޱ\u000f-�����T�1|g�&�!�3�t-u�-�=Vѻ6�3\u0018���\u0013p����w�M+���܆ݽ\u0018\u0000\u0002m\u000e��\u0004�`���Ӓ'%�j^����-�Z0\u0000�*ğu�)M��6D>��\u001f|9jj%��\u001auu���\u0002Qi�,delb:���M$\u001a�kl��4$ԡ�.5R�ϥ�\u000fw\t�v9��p�s\u0013\f�x��M�w�v<\u0005@\u0000/��i5y���\u001a�**Zڜ���\u0000�u\u001a\u0019\u001a�1\u0001��U1\u0017C��h\u0013��\u00076i\u001bL�\u0016��1�4�(��-@��\u0002?�t�%?��;��'\"��V-o�����(2�̪���z��@��ao:\u0007EgCY���Mi\u0017","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b167cdad-c1cf-40c3-9043-7d4bd4f8b0ae","seq":1,"duration_ms":100,"bytes_in":373,"bytes_out":13,"enriched":{"digest":"fc00cace7ea2f46f","strings":["|9jj%",",delb:","EgCY"]}},{"timestamp":"2026-08-16T03:01:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-v2E(Q7_hQ09g","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d7632452851375f6851303967","method":"","user_agent":"","ja3":"","session":"b820c64b-e116-4c7e-941c-1a374ef57c6b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"02fa30c56d14b386","strings":["BitTorrent protocol","<-UW1609-v2E(Q7_hQ09g"]}},{"timestamp":"2026-08-16T02:58:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"&O�>a�����[+�֗��I���0��\u000b��B��e�=- &=�uH���\r�i��?\f��y�\u0012O�yf�?\u000f\u0005r#QF=xL\u0006\u001b�Js.B�?@%߫Q\u0016La�>@\u0015ݘo.A�dž��;���++�uU�\u0002��H%b�\u000b\u0016�D�oU�pș�L�H��f�28a��\u0018�4�m>xm����+#���R��'[�B\u000fG\f)\u0010��oNb$ѝ>�W\u000f��P0�Jg\u0017<�\u001ck�,�\u001e$-\u0018\u001a��ޫ\u001eZ]\u0015�'\bXt�,M\u001eU��\u001c_\u00012ZU���!J�V����ߨ��b�#�s�\u001c�u���w�!F�\u0013����¦HȀ�\u0012����\u0013*\u001f��]b �}��%=\u0006mQ��3�x_b���\u0018\u0011$���\u0014��1����6�O����]�Ҽ���\u0002��\u0013\u001d�\u000f�5-A؜���F*ʙ[��>��w\u0007Q\u0000�A�b�\tL�>��\u000eR�q\u0015����\u000b","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"462affdf-f5d4-4675-b269-870813034df7","seq":1,"duration_ms":100,"bytes_in":385,"bytes_out":13,"enriched":{"digest":"a62f5f755ea20052","strings":["r#QF=xL","Js.B","m>xm","oNb$"]}},{"timestamp":"2026-08-16T02:54:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1609-z5_fWkmcL-xB","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630392d7a355f66576b6d634c2d7842","method":"","user_agent":"","ja3":"","session":"eb8f20a9-0181-4add-8335-4a66f3c7da7e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"36239f98af415480","strings":["BitTorrent protocol","<-UW1609-z5_fWkmcL-xB"]}},{"timestamp":"2026-08-16T02:51:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u0003Z�T�j�\"�h�{�J��N�o����\u000b���(�g���\u00143��(B���\n�p\u001e \u0006\",\u001a�Mq%UA���\u0000����49��_�X��\u000b\u0016\t.�\u0002����\u001c��\u0007]\u0006\u000f��6��3о]\u0007\t��k| S>���m�ܱ+���M��M�'C\u0005�N�f��m>��Q�w�6�)\u0004��\u001d���{�Ib\b����P��w��\u0013de���j�\u0006+P����\u001a��=H4?�+����R�s�$)J�M6o\u0005`�\u001aۯj�tMz�y����ű��7���\u001a0%U�������\r+�:�=\u000f<�\u0010�,~��w��\u001f~�\u0019��x*\t�ۧ\u0004y�\u000f;��#��\u0016��>��\u0015\u001a\u0006��ͦ3�y��y��,���30��|��G�\u0005���K����\u0000z���wSNl�\u0014�_��7\u0016y�9'��\u0003_�g�n�]\u0011\u0001ӿ��;���(�{EU�����4A�u����)��|�\bv7�KG��'��آ�lL��&��J�ϊ����1�Q\u0007F\u0002:�c�\u0000b\u000b�r\u0014��_p����\u0007׆\u0010)����B\u0013'�\ręf�$@9��Ir`^����3L���Vw����:T�{B\t�<�\u0014�Iz�0�]L�Y�L\u0015�մ����\u0019\u0004�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"5537620a-7eb7-4ac1-b976-921a50cea205","seq":1,"duration_ms":100,"bytes_in":519,"bytes_out":13,"enriched":{"digest":"0676bc1af4301bf0","strings":["Mq%UA","k| S>","=H4?","wSNl","Ir`^"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T19:29:36.791775+00:00"}