{"ip":"179.29.65.63","total_events":4,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["4 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."]},"first_seen":"2026-07-12T12:42:47","last_seen":"2026-07-12T12:49:20","events_24h":0,"events_7d":0,"geo":{"country_code":"UY","country_name":"Uruguay","region":"Montevideo Department","city":"Montevideo","lat":-34.9055,"lon":-56.1944,"asn":6057,"org":"Administracion Nacional de Telecomunicaciones"},"source_domain":"r179-29-65-63.dialup.mobile.ancel.net.uy","known_scanners":[],"scanner_tag":{"key":"peeringdb:as6057","label":"ANTEL","category":"isp","url":"https://www.peeringdb.com/asn/6057"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":4}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-07-12","count":4}],"recent_events":[{"timestamp":"2026-07-12T12:49:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��O��\u0016\u0013�:d;��-゘�I\f\u000f�'kK\\J�j���\u0003\r�L��\u0017R�\u001f5�\n�\u0011\\K\u0016��lG8�\u001a��'������x\u0006FϦ� ��l���B\n�rϏ\u00162�Am�7�n�G`\u0006�\u001aS�u\u0017=E���B��xr�)/%ċl�m���M�^�\u0019e�&*�\u0001��&��Z�>k~&\u0014ⓞ�ܞ�M\u0005��\u0010|\u000f\u0018r¹�����\u0006ʣ��������\u001b8��\u001f$\u001b��X�<�\u001dr�|�lC>���<\u0011\u0010�e��~Ӝ6DI�e����R�Z���-","payload_hex":"a1f64ff2ba1613fa3a643b83e32de38298fc490c0f80276b4b5c4aa46a9cb8f6030db64c8cf91752ee1f35ad0ae6115c4b168ba36c4738c91aedae27e5c1849dafab780646cfa6d220fb886c848d83420ab272cf8f1632f5416dc837b66ecb476006b71a53d175173d459db0aa42ee897872c0292f25c48b6c826d91a69f4df55efb19659f262abd01c1d726b09f5a833e6b7e2614e2939ef5dc9eac4d05e0e0107c0f1872c2b98cbad1e5b706caa39be1f98ef1d8f0ef1b38add41f241ba5cd58df3cdd1d728d7cbe6c433ea3a2f93c1110da65f2f87ed39c364449ec65e1abf68552fa5ad0fba52d","method":"","user_agent":"","community_id":"1:ditEJ0tEDnV2g8Ehj3MuWwwSKfI=","ja3":"","session":"bc63059c-0a4a-45f8-b48d-e6b696d99e55","seq":1,"duration_ms":100,"bytes_in":233,"bytes_out":12,"enriched":{"digest":"2529b578fee4090e","strings":["'kK\\J",">k~&"]}},{"timestamp":"2026-07-12T12:49:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0004\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-MO3102-167138651066","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000041bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4d4f333130322d313637313338363531303636","method":"","user_agent":"","community_id":"1:YcQK10CLgWuzlXDOGDLaaQIdiQs=","ja3":"","session":"ede526d2-192f-4414-8bc9-ddf4ad23161e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"484290cda6cb1bb4","strings":["BitTorrent protocol","<-MO3102-167138651066"]}},{"timestamp":"2026-07-12T12:42:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"w��{f?^�G�t��\u0011��4�~��Em;���\u0015��Ey�c�>� 2s��\u0019\u001b��S���@Q��\u0017��6�\u0003lU�W��xn�y�CN��\u001d��\u0010(���hU\u0001��f���o!s��)T�,�\u0016�\u001e�l����6��X�^�ⵧ\u0013���.y$���6\u0012�d\u000e�0<\u0019�z�ż�p U@��I'|5�F�%�����\u0018��1\u0010X�=��E�3\u001f���%O�Hg���V���V:�\u0015���\u0005��`�\u0014���B\u0010�S\u0013AdW�߻�[ia���\u0012�̜i\u000b��om�yѾ�T�Xk�ɤ\u0007/դ+G\u0010�:�?�J@C��§M����1۽q�\u0011f��d�O\u0011zU\u001b�� �MD\u0007+;�\u001b�fT\n�J","payload_hex":"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","method":"","user_agent":"","community_id":"1:yp9JJeyOvTErSSZSJ1pB45haohw=","ja3":"","session":"2af493a8-0411-49da-a278-804a861b49d8","seq":1,"duration_ms":100,"bytes_in":308,"bytes_out":12,"enriched":{"digest":"c882518fa4803073","strings":["{f?^","p U@","I'|5"]}},{"timestamp":"2026-07-12T12:42:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0004\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-MO3102-167138651066","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000041bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d4d4f333130322d313637313338363531303636","method":"","user_agent":"","community_id":"1:aXZuUrM4FcV9/kiK62E2CtTkP+Y=","ja3":"","session":"4a45ba6f-ccbe-4d54-a819-80ae9a691a3d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"484290cda6cb1bb4","strings":["BitTorrent protocol","<-MO3102-167138651066"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-25T23:48:29.654022+00:00"}