{"ip":"166.114.139.229","total_events":114,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["114 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 24,494 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"24,494 bytes sent","bytes_sent":24494,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-29T20:20:48","last_seen":"2026-08-29T22:50:59","events_24h":0,"events_7d":114,"geo":{"country_code":"BO","country_name":"Bolivia","region":"La Paz Department","city":"La Paz","lat":-16.5002,"lon":-68.1493,"asn":6568,"org":"EMPRESA NACIONAL DE TELECOMUNICACIONES SOCIEDAD ANONIMA"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":114}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-29","count":114}],"recent_events":[{"timestamp":"2026-08-29T22:50:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"K2���\u0011���\u001d>��f�]$�61@N�\u0013LSU\u001f�T,�ˏ��#�yٮ�A��\u0006����[�&\u0002�$�cP��A0����|QI\nJ��5A��.\u0018\u0017�򰗻\nz%�\u0014\u0016�pH��Ը\u001e�`C_I��`m)�E��L\u0004t'�q�r8w��0\\�4� 8\b�s�r*�E\u001bu�K\u0014�4����E�2\r�H�\u0006��*��V�-M\"T��w���)�}�|\u0016ψN��<l��\u0004[�Q��-��mMW\u0004��\u001d\u000f�O:��)��:�\u0007q��\u001b���\u001bk��ˤGy��`��;�\u0019�\u0012J(�\u001f�-�Ѽ@\u0015\u0004V��vh�gm9E�n�t�T�I��#���\u0014\u0007\u001a]=U�\u000b)�\u001dHk�X\u0016-�\u001d�e��9/2���vI�3\u0017,d6\u0014zJ\u00191���P�\u0006��gA��@q��@tS����&\u001e\u0015]�w�\u000f���'G���\u001c\u00055,���\b�������MKk�o^�$�M�\u001c��a�\u0011\u0019�߽�!u�np��L$Z\u0012d�9�V��7\u0005Cq��\u0002\u001d��\u0006!=>�y����S\u001dc\u0003�'\u0003R�#�����>-���<����D�vM_�\u000bP\u0016�7��A���\u0011Nky�@�\\%��\u000e��uh߫LGN��͈HR�-�1b{a'�yA\fa5x��;�\u0001��S<⟠\u0000�\\�ϑ�׀����<�\f�@\u0014\u001a�D\\\n�n�C��ܾ�\u0004\u0001m�s�ޗ\u000eJi�\u001b���6��\u001b�\u0015j�\u000b\u0017�,�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"2a98a7a4-290f-49c5-a411-2f94470d5bec","seq":1,"duration_ms":101,"bytes_in":595,"bytes_out":15,"enriched":{"digest":"0613b26ae23c2426","strings":["61@N","`C_I","-M\"T","gm9E","1b{a'"]}},{"timestamp":"2026-08-29T22:49:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-YQurbmmUIxXP","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d59517572626d6d5549785850","method":"","user_agent":"","ja3":"","session":"b0050633-6eea-44a5-a4ab-9b14c71eef97","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"ee7d7a95c6a0fe9b","strings":["BitTorrent protocol","<-UT8360-YQurbmmUIxXP"]}},{"timestamp":"2026-08-29T22:48:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�.�\u001c\"_%\u0010��L��\t�\u000f�R�F/(\u0002V�\\\u0017B�ĸ�rS���\u0019\u0010�b\\?RƇ� Q\u001d�_O\u00153���,\u0010�j��O/^8�\u000bc%ᇴ!*9{\u001a|1����g4,�]&��`swt�JOR9�\u000e\u0017|{\u0001���M\u000f>5�.�h��֍�`�?D\u0004���\u001a���v�ZX�c%r(�{�c�\u001b.w�;\f�\u0000�pL��\u001bE<�\u0006_���ld��|�\"��ћ�[@��\u0013å�|�P�\u0001�k�\u000f\u0014,���%�6?��.��w�V@8cѸR\u001c��\u0007�2\u0003�","payload_hex":"dd2eb21c225f251080944c9cf509d30fb352de462f280256f45c17428cc4b8f87253b0b0841910bb625c3f52c6878320511dae5f4f153385aa9c2c10c06a98b54f2f5e38d60b6325e187b4212a397b1a7c318b849acd67342ce05d26a2db60737774cd4a4f5239ac0e177c7b01f8b9d94d0f3e35a62efa688d94d68dee60d53f440494a5951ae9c18676cf5a5882632572289d7bb263fb1b2e77843b0ca700ba704c869e1b453cd4065ff38c886c6490b87cd822d5fad19b845b40faaa13c3a5ed7caa508a01f36bef0f142cebfb9f25a4363fc3ea2ea8d1779c56403863d1b8521cc8fa07cf32038c","method":"","user_agent":"","ja3":"","session":"6c0c9158-f743-4dad-997b-033e696b5a61","seq":1,"duration_ms":101,"bytes_in":233,"bytes_out":15,"enriched":{"digest":"67d0ddf301c8c3be","strings":["b\\?R","O/^8","!*9{","`swt","JOR9","c%r(","V@8c"]}},{"timestamp":"2026-08-29T22:46:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-qQb__zKKOkHQ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d7151625f5f7a4b4b4f6b4851","method":"","user_agent":"","ja3":"","session":"b58d677f-bfcf-49eb-9783-f26c4854bc70","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"24f208e1ce88d87d","strings":["BitTorrent protocol","<-UT8360-qQb__zKKOkHQ"]}},{"timestamp":"2026-08-29T22:45:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"!��� �n15\u0012�흞���o{�\u0007���N�TI��=\u0000)<\u0017V��P�fn�4��7K.�a>\b5\u0010\u0018��j�\u001aij��G�ɭMͶ���5�lB��9ް7��>�����n�谚��3\u0015k�;�a1�?\u0016�\f\f�L�GH����<�\u001bw%\u0010���&Y�Ό��=Þ\u0007V��\u0019S�p9\t|�\u0013a�x���\u0012�.ъO��o��_���!�>�\t\u001e�f�f�w�4��i\u0010\u001c�Ôץ���s?�\u000f��!����k\u0017\u001aJ�(h1�\u0011(\u0006h��G���`��7G/��z����=\u0013C����g�$.e(j\u0007�\u0011$vK�N\u0002M��\u001f{i��tٲ��\b�b<�ᮘ�v","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"e2c73c3a-c864-44b0-9970-c8a2be010c12","seq":1,"duration_ms":100,"bytes_in":293,"bytes_out":15,"enriched":{"digest":"58edc8714cc29cd5","strings":["$.e(j"]}},{"timestamp":"2026-08-29T22:44:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-Ljia6BM.4zfL","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d4c6a696136424d2e347a664c","method":"","user_agent":"","ja3":"","session":"5a295486-847d-424a-b2f4-1034246b21a7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"f48c1c4e230a4acb","strings":["BitTorrent protocol","<-UT8360-Ljia6BM.4zfL"]}},{"timestamp":"2026-08-29T22:42:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"G\u001d�\u0015�0�\u0019�\u0001����|��{yA�@�\u0018#�{�K�0W_]������)�w��7�NM\u0014\u001a����R�eu_\u0014�m�;�U�D�g�@�cy\u001b���ar�d���\u0002.,�\u0005�7�Ȕ�V�[�\f�]y6���q,Kl\u000b]9�px^�\u000f�Fy�\r\"�9\"�\t���6��#l9q߃�f�}d��m�^��$�5\u0000P\u0007��D2�o\u001dnm��� ��\u0007�3Qv��1�����2\u0010\u000f\u000e�ŕ\u00122'\u0012��","payload_hex":"471d9c159f30e519a301bff895b67cbee57b7941f840e218239c7b8a4bd430575f5dbb8fed95fece29bc77cec037c04e4d141a9cbeb198528365755f14d46df13bd455ca44f567f940df63791be39df661729364afa3dd022e2ca105ea3793c8948f56a75bb70cbe5d79368a938d712c4b6c0b5d39f170785e930ffd4679da0d228b3922a0098298fe36bc8e236c3971df83a266cd7d64cec86d9c5e96f624d735005007e8934432de6f1d6e6d86d1d920ea8107fb3351769cb331bbf2aec2c932100f0eebc59512322712a0fc","method":"","user_agent":"","ja3":"","session":"51a73b5b-3b44-4416-b2d5-975b47476815","seq":1,"duration_ms":100,"bytes_in":205,"bytes_out":15,"enriched":{"digest":"8bfc2aba5561df7a","strings":["0W_]","q,Kl","#l9q"]}},{"timestamp":"2026-08-29T22:41:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-rp0aodthL3.b","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d727030616f6474684c332e62","method":"","user_agent":"","ja3":"","session":"1c9e7834-e501-4bb1-bd2b-0fb0c1aeee11","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"401f8b230842dfc7","strings":["BitTorrent protocol","<-UT8360-rp0aodthL3.b"]}},{"timestamp":"2026-08-29T22:40:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\b��\u0007�\u0007��E����ӥ����4��:���a_H\b����8\u001aIdI�e�D�o�̖�fq�\u001a�Mh���W\u0006b�\u001f\u0018\u000f\u0007����3�G��\u0006�6\u0010X�3�i�\tM;����:�����o�ظ�O��8��h��i~8+�\u000e�o���S8�MT�g�-\fL1�ڋ\b$�N��y�\u00025�\u0016B�\u0004t�떁7QYf�\t&0�D#i�\u0010�\u0002`l�qJ��3[���~���\\`��r�\\��Q\t3\u001fni)?�&��gY`�\u0005\n\u0002���\u0011�5�\"\u0006�p�\r@����\u001d\bA�\u0013�0b��YS�����\u000f~k�ǀ����D��n�(^rd�\u0012u���c���lAٍ��l\u0019�\u0007Ǿ\u0011_�p\u0001z:�%��.J�ʏ�M���\u001f���!)훮\u0010�\u0017\u0014�ҩk�����?�\u0003\u0013L-�\u0003D�즸'&ڢ�ɳ\f�c��*�ҝ���\\O\u0013�P\u000b�\u0001<4\u0006�q�̀~�\b@���)","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"9b2d35ba-0205-4aee-9f42-e4929b7868d3","seq":1,"duration_ms":100,"bytes_in":394,"bytes_out":15,"enriched":{"digest":"2f0e3e18b2f0427f","strings":["i~8+","7QYf","ni)?","(^rd"]}},{"timestamp":"2026-08-29T22:38:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT8360-le2lfJdCJg4W","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554383336302d6c65326c664a64434a673457","method":"","user_agent":"","ja3":"","session":"9d60b981-3817-4063-87f8-79886c2e972b","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"0cc582a679cf7ba1","strings":["BitTorrent protocol","<-UT8360-le2lfJdCJg4W"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-31T23:17:46.288502+00:00"}