{"ip":"168.196.24.26","total_events":359,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["359 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 24,412 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"24,412 bytes sent","bytes_sent":24412,"session_seconds":0,"persistent":false}},"first_seen":"2026-07-23T23:19:48","last_seen":"2026-09-11T07:16:07","events_24h":168,"events_7d":211,"geo":{"country_code":"AR","country_name":"Argentina","region":"Rio Negro","city":"San Antonio Oeste","lat":-40.7281,"lon":-64.9252,"asn":264758,"org":"ISP GROUP SRL"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as264758","label":"ISP GROUP SRL","category":"isp","url":"https://www.peeringdb.com/asn/264758"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":359}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-23","count":8},{"date":"2026-07-24","count":97},{"date":"2026-08-02","count":41},{"date":"2026-08-03","count":2},{"date":"2026-09-09","count":35},{"date":"2026-09-10","count":152},{"date":"2026-09-11","count":24}],"recent_events":[{"timestamp":"2026-09-11T07:16:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|���\"���O6�c","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb8e5bb22b7b9a84f36bf63","method":"","user_agent":"","ja3":"","session":"075d343a-1dea-47b2-b236-fc2f370ba5ab","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"bbaea681d43f4657","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-09-11T07:09:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|�z�>]U���#�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb87ad73e5d559ffaf823c2","method":"","user_agent":"","ja3":"","session":"d046cf9f-d5e5-425a-8626-c5d6aae7d067","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"1826c421d7ae8037","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-09-11T07:04:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|�\u0015Q�\u0001mhC��a","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb81551ee016d684387d961","method":"","user_agent":"","ja3":"","session":"8cac2f4d-0d07-4065-a77b-b9f9ada23afd","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"0cdd42061af6ede9","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-09-11T07:02:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|�'��4����$�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb827b1c9348cbba0ef2493","method":"","user_agent":"","ja3":"","session":"20ae1c4f-6bf5-4dd1-846b-f49cfee089b9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"57a48ef22d6714a7","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-09-11T06:59:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|���Ŧ�\"���*","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb8c8dec5a6ca229dccd02a","method":"","user_agent":"","ja3":"","session":"b0cf30f1-51ef-4abb-be25-9752d913fce4","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"8dc3ccdd5d1119b9","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-09-11T06:57:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|��0,>�u���y","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb8d0302c3e9c75c1f28779","method":"","user_agent":"","ja3":"","session":"21c49f17-00b9-49ed-a579-7b7862615893","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"706ae418e9d14ce6","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-09-11T06:56:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|��{�9��y","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb8897bc739ee968383c679","method":"","user_agent":"","ja3":"","session":"94832d13-5b58-4c7f-9088-6e8b0393c5fd","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"aa0c0b4570516711","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-09-11T06:54:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|���i��̟�O�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb8e5fd6983b7cc9fc64f96","method":"","user_agent":"","ja3":"","session":"aecc7384-3db4-42db-bd01-fd7b79078fce","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"84745223cd346332","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-09-11T06:52:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|�N:9�yAe\u00072+","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb84e3a39fb79416507322b","method":"","user_agent":"","ja3":"","session":"13d3db00-b2b6-4999-9477-2bf702f36aa9","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"6590fbc4243549f3","strings":["BitTorrent protocol","<-UT360W-|"]}},{"timestamp":"2026-09-11T06:51:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-|�P\n(\u001dU���\u0014!","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d7cb8500a281d5599a8dc1421","method":"","user_agent":"","ja3":"","session":"b085bc02-cd09-4a37-a4cc-52076a168928","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"2184eaa6ec146747","strings":["BitTorrent protocol","<-UT360W-|"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T09:52:34.368774+00:00"}