{"ip":"138.84.39.108","total_events":32,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["32 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 6,013 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"6,013 bytes sent","bytes_sent":6013,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-18T19:48:40","last_seen":"2026-08-19T01:32:58","events_24h":0,"events_7d":32,"geo":{"country_code":"PE","country_name":"Peru","region":"","city":"","lat":-12.0439,"lon":-77.0281,"asn":14593,"org":"Space Exploration Technologies Corporation"},"source_domain":"customer.limaper1.isp.starlink.com","known_scanners":[],"scanner_tag":{"key":"peeringdb:as14593","label":"SpaceX Starlink","category":"isp","url":"https://www.peeringdb.com/asn/14593"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":32}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-18","count":30},{"date":"2026-08-19","count":2}],"recent_events":[{"timestamp":"2026-08-19T01:32:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1500-tnpMbiBhnmlQ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313530302d746e704d626942686e6d6c51","method":"","user_agent":"","ja3":"","session":"f7ef14cb-561a-4dad-bca1-d75825968020","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"4090d418ceecd6c3","strings":["BitTorrent protocol","<-UW1500-tnpMbiBhnmlQ"]}},{"timestamp":"2026-08-19T01:16:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0002��-\n�Y����:r���r�N+��B���X�>(0�rCz�%�byT\b����a����A�ɥ�6!��Sck�8ȍ�W�\u0013�\u0017����\u001f8�*9\bk\u001c��(AG|l�:�ɳ:G�2\u000e��R�\u0002l�I\u000b\\Z���","payload_hex":"f702d4ee2d0afd599d8ed0fe3a72fdb98572c24e2bb1ce42c2f1a658a83e2830ff72437abf25b3627954089fd7e17fd66181e788d941e8c9a5b53621b67f8a53636b8438c88da357b713ea17dae297e21f38bc2a39086b1cadd02841477c6cb43abdc9b33a47d6320eb7b252f0026ccd490b5c5a8ef0da","method":"","user_agent":"","ja3":"","session":"87cb042c-a752-4935-9a55-c188330a92ed","seq":1,"duration_ms":100,"bytes_in":119,"bytes_out":13,"enriched":{"digest":"c344eee11b665c04","strings":["(AG|l"]}},{"timestamp":"2026-08-18T23:48:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1500-NPHnDL-8ssYH","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313530302d4e50486e444c2d3873735948","method":"","user_agent":"","ja3":"","session":"202dd987-f4db-461b-b264-d97921c06350","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"c37404e4c3179081","strings":["BitTorrent protocol","<-UW1500-NPHnDL-8ssYH"]}},{"timestamp":"2026-08-18T23:46:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u000fk��S#�\u0001��%�wx��@�9k����;R\u0000!��f\u00074P�P}���<�\u001e�p�F\"�\u0003�\u0001��;M5\u0011��6u�s\u000b��\u000f+\u0018�%\u001d���g�����\u0002@#\u0014�\\z�RQ�\u0010���qp�e��J�\u0012=7qac,\u0019-�Hn\u001f8Q�c����h�6���Cp��w�\u000bn�����@e\rF\u000e\u001d��2��Qa�Cnt�z��_O�d|��JO\u001b���8{��N2�����Ev\r\fMa-�T�����Ԙ�{�<���~�\u0011�hM�\t�\n��\u00169�\u0005�HW�C\u000b\u001f\u0012�\u0007�\u00063wb�!�\u0019K\r.W�\u001bQ�i����K?\r��Z\u000b�\u0001gʴ\u001b.z#\u0012髨:��\r�.�\u001e\u0015�D�e�g/e\u0007[M�tΓ:}�H|�F\u000b\u0019��\r�\u001fe��W�\u001dF\u0017�Qz9pn����Fu��\u0010s�����d�P\u0011|����zz�:���v�m^�{����qM��\u0003#)q�&٬�\"\n�\b�L)�F<~��\u0015\u0006��y�=�\u000fޅ�vP��?��\"@j*\u0017s�o��@�`\u0012�'��\u00152�<-�5��I�DX�3\"���{��4�=�l�\r�\u0007\n\u001d�Q��V��X���O�v��eи��5\u0010��\u0013�#x\u0006�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"e43c1217-88ab-4e80-a283-44ac199b75c3","seq":1,"duration_ms":100,"bytes_in":503,"bytes_out":13,"enriched":{"digest":"dcdaf31c559f411f","strings":["=7qac,","Qz9pn","\"@j*"]}},{"timestamp":"2026-08-18T23:30:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1500-yqb6kmhrkxfN","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313530302d797162366b6d68726b78664e","method":"","user_agent":"","ja3":"","session":"2306ac67-7138-4774-802b-6be84b59c0c1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"e0bc3bef9695dc63","strings":["BitTorrent protocol","<-UW1500-yqb6kmhrkxfN"]}},{"timestamp":"2026-08-18T23:23:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"σ�����hʩM\ta;�\u0003�\u0001�q�7�&�\u0012Xk{W\b/3F�7\u0006P�\u001f<�\u0012�̌�Ǹdԏ�0�a�S�x�|��?N!��=��\"\tH���\u0006���3����橐~�\u0018\u0012>�\u0011��HiD\u0001xw�]���\n�$(V$�\u0007�\u0002g\u0011\u001b�c��9_\u0006~Ŋ���z���=�d���gQ��i9\\�?�'��H\u0001�J\u0017J�\u0002�3�f�c�0\u000e̢�H�_r.\u0016\u0005/+\u001a.��Z�H��a�*\u0011��Z\u001a�h8��+H�\u001cm\r���m�ӗ�h�µ����\u000f�\bSƔ[=���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"ded58a48-34c8-4ad7-9d9a-56941a418ad3","seq":1,"duration_ms":101,"bytes_in":444,"bytes_out":13,"enriched":{"digest":"1358751dc9f96b87","strings":["A)6;","Xk{W","$(V$"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T21:23:16.037059+00:00"}