{"ip":"179.6.26.90","total_events":411,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["411 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 85,387 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"85,387 bytes sent","bytes_sent":85387,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-28T01:50:27","last_seen":"2026-09-30T21:16:31","events_24h":0,"events_7d":82,"geo":{"country_code":"PE","country_name":"Peru","region":"Lima Province","city":"Lima","lat":-12.046,"lon":-77.0305,"asn":12252,"org":"America Movil Peru S.A.C."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as12252","label":"CLARO PERU","category":"isp","url":"https://www.peeringdb.com/asn/12252"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":411}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-28","count":190},{"date":"2026-09-29","count":142},{"date":"2026-09-30","count":79}],"recent_events":[{"timestamp":"2026-09-30T21:16:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-xikSH4Q2*7lq","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d78696b53483451322a376c71","method":"","user_agent":"","ja3":"","session":"a6058f7f-eed8-4954-985a-63f2abec53a2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":11,"enriched":{"digest":"05812ef319dcbbfe","strings":["BitTorrent protocol","<-UW160N-xikSH4Q2*7lq"]}},{"timestamp":"2026-09-30T21:14:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u000bB.|\u0010Fh��i��U;K�n�p&#��\r~ùO\u00062��$���H���|�(\u000fZ.���$\u001d�\u000eQ�sg\u0004�%\n�^\u0017�w���£\u0007\u0017�\"/\u001aB\u0004rB�\fCׄ���ZB��S���\u001cjh1�\"���T�.�ݺ[�\u0007�� �EP΁9r\u000eD��3>k������������RxR�M�&�-yO��j\u001f�w����Vն¿\u001a=C\u001c&�9��λەb������G�ԓ�j�����x��Q��ec\u0016�TBŴܴ����>Ǔ�F1��� �\u0004!\bљ\u000e�)����M%�Y�;T�V;�R#��\u001c+����\u0012�#�Q�� x��>%�(M�\u0010�貒��\u0017���\u000eOj��y��ϱ��g�8`�q��+@%\u0004�W��)\u0000�`�����-Ix{�!�4A��M�Cj��ɹ�\u0019[.E�����\u0003u�V�X'ػ�^�0sW\u0014�_Q��\"�}4\u0001*��\\�@��t\u0017��b�Ry��.l��\t�<��B�U�ik�(��o%u�s�b=�\u001c�<��\u0002��n\"�rZOsÌ�n��v~��$?�j\u0018���׊ނ��mwJ�\u0005�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"6e9c1822-094a-459e-8ebb-8a49d1fef3d5","seq":1,"duration_ms":100,"bytes_in":351,"bytes_out":11,"enriched":{"digest":"0605780963e5fba2","strings":[")fY/Y","Tp