{"ip":"166.114.137.246","total_events":36,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["36 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 7,214 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"7,214 bytes sent","bytes_sent":7214,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-30T15:43:01","last_seen":"2026-08-30T16:32:50","events_24h":0,"events_7d":36,"geo":{"country_code":"BO","country_name":"Bolivia","region":"La Paz Department","city":"La Paz","lat":-16.5002,"lon":-68.1493,"asn":6568,"org":"EMPRESA NACIONAL DE TELECOMUNICACIONES SOCIEDAD ANONIMA"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":36}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-30","count":36}],"recent_events":[{"timestamp":"2026-08-30T16:32:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-FDaZb4X9X(ua","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d4644615a6234583958287561","method":"","user_agent":"","ja3":"","session":"1ca192dd-a47e-4b75-99a0-7d7458649528","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"de6f77820705b7f8","strings":["BitTorrent protocol","<-UT8360-FDaZb4X9X(ua"]}},{"timestamp":"2026-08-30T16:31:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r_k\u0016��6�e�|x@9T�\u000fO��H\u000f*5Q3,\u0002�;�����f\u0019uS�B�aɜ>���Z\f\u0002�ڽ�9\u001b�U��\u001f��\n�R��\u0007�q(��\u001aLc&L����֣�qq\u001b��cZA\n��S+�lm�NVaH��!4���~�Y\u0017�@hs��l_�\u001e\u0019\u0004��Ny�\u0006�\u0011R�,\u0003M�j���6[�7\u001a��b2\u0018�\\�\u0004\u0007\u001e\u0004�h&\u0004����R��E�\u001cBY�K�[ �\u001ev���\u0015\u001b��)�\t\u0004�'��M=1��\u0004jE���.8q��*6_\u000fD\u0013p�V�\t�i\\��'\u0006D�o�\u0014r�BTeb�M�i�Rק��\u001c\u0006��mvU�����F�=\u0015v�ǔu\f�\u0012�Q�y���\rc�Ay�\b�妺�v�����ljv3���?\u0002�9Z,1�3���[�\u0007��)zx9p�@'\u000b\t�RE��:WI�r\u001b��\\�D'n�4�&��\u0013�R+0�%7F��4�-�4'\n0i\u0019)-or�Ў��c�ÜWBh�1\u001aC�LRV��m��\u00041����A��&tk��1S���⋻J��!\r�m�1D�Ӌ\u001f��>nY4\t\u0013^?\f\u0004e�/z$�\u0000�A��nY4","GCLU"]}},{"timestamp":"2026-08-30T16:30:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-1AOPbbYCynCV","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d31414f5062625943796e4356","method":"","user_agent":"","ja3":"","session":"3238aac7-24a2-4f83-b483-78596b262e2c","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"179edf3b5ccf1cd6","strings":["BitTorrent protocol","<-UT8360-1AOPbbYCynCV"]}},{"timestamp":"2026-08-30T16:28:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�]�2�,�$:c\u001f�^ӝ��*�Id�z1�Ѽ$�]\u001ez����V\u0004\u0018$\u001c�}�;��\u0003\f\u0014̝�����*H\u000b:C\u0013�|��\"�\r�\u000b<\u001b����\r��IDs�\u00121,�\u0018����p/���e�\u0006�svz�tC�mԫ�;\u0011�W\u0001��N��K���j�FJO�K�p��2�\u0019+HoW\u0016��**����\t\u0019�y�\u000f\u001e��'\u001e��YAH�0X\u0012R�\n���x����A\u001dDN=�{3\u001cr����9\u001f#��k�\u0017\u0001K�W�\u000e\u0011\u001d-]�2���%k\u0013���5�t��\u001b(�i> \u000e={I+8@\u0015|�yr����y�\u00171�\u0005�~��\u0013�r�2:�\u0006p����lP��\\�PFI?�λ�\u001fliT_�[�T�x\u0003\u00198��d�}J�\b��Q�7�\u0017�p�gֹЦ\u001a�\u001b�!u\u0010H�\u001c�r4HeQ��\r�%#��\f��\"}\u0012�XC`��]ƨ����\u0011�HbB����D�$�h\u0007���m(`�渟%9\u00016��JE��Q{HS��\u0004�h���\u0011�&��^����dfuwX\u0000�e>\u0019Y�TȽ�_i%�f\r��&EDx]ˇ�26�\u0004�\u0011\u0007Ox}��6 )Uŷ)\u0002�����\u001b\u0016�_un5��z\u0005�\u0015�[kjV\bǞrJ���r�j\u000b(�","payload_hex":"f1fa4bb373962f6d6df02c65511857ceaf983e286082e6b89f25390136dccc4a45c1b4517b4853fff204ee68a6cff711c826a1bd5eb2bdfdc2646675775800c6653e1959d954c8bded5f6925ad660d87b4ee959c264544785dcb87af3236d104d611074f787de1a636202955c5b72902b9e39fc5ea1b169f5f756e35ec8c7a058215be5b6b6a5608c79e724ae8fbab72a46a0b28d5","method":"","user_agent":"","ja3":"","session":"304fa449-62cd-47f4-b376-0ec4fcce365d","seq":1,"duration_ms":101,"bytes_in":149,"bytes_out":15,"enriched":{"digest":"775e0f737c38e0ff","strings":["Q{HS","dfuwX","&EDx]","6 )U","_un5","[kjV"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-31T23:16:38.012494+00:00"}