{"ip":"181.66.128.26","total_events":76,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["76 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 15,634 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"15,634 bytes sent","bytes_sent":15634,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-05T16:25:01","last_seen":"2026-10-05T18:05:21","events_24h":76,"events_7d":76,"geo":{"country_code":"PE","country_name":"Peru","region":"Lima Province","city":"Lima","lat":-12.046,"lon":-77.0305,"asn":6147,"org":"INTEGRATEL PERU S.A.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as6147","label":"Telefonica Del Perú","category":"isp","url":"https://www.peeringdb.com/asn/6147"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":6,"protocols":[{"protocol":"udp","events":6}],"ports":[{"port":39131,"events":6}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T16:24:56","last_seen":"2026-10-05T16:38:20","recent":[{"timestamp":"2026-10-05T16:38:20","port":39131,"src_port":6881,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:Y\u0005��\u0011D���@O�j�\u000bӫ���9:info_hash20:Y\u0005Џ�~b��!�Xw�����u�e1:q9:get_peers1:t2:F�1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a5905f1f511448abbce404fb06aa90bd3ab8f87e5393a696e666f5f6861736832303a5905d08fb97e62f48c21f15877eee5e9a7f1758d65313a71393a6765745f7065657273313a74323a46c8313a76343a4c540102313a79313a7165","sni":"","session":"e6556394-f2a6-48a5-89ea-d3d0b6eca88f","bytes_in":104,"source_verified":false,"enriched":{"digest":"844529c7cb95467f","strings":["d1:ad2:id20:Y","9:info_hash20:Y","e1:q9:get_peers1:t2:F","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-05T16:35:31","port":39131,"src_port":6881,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:Y\u0005��\u0011D���@O�j�\u000bӫ���9:info_hash20:Y\u0005��?\u0003�f1\u0012h\u0007M<�gn��6e1:q9:get_peers1:t2:])1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a5905f1f511448abbce404fb06aa90bd3ab8f87e5393a696e666f5f6861736832303a5905f3903f039a66311268074d3cff676ea1e63665313a71393a6765745f7065657273313a74323a5d29313a76343a4c540102313a79313a7165","sni":"","session":"d798bef1-f6f3-42e5-8c0c-538aa209a3a5","bytes_in":104,"source_verified":false,"enriched":{"digest":"4f5e68efb84ce289","strings":["d1:ad2:id20:Y","9:info_hash20:Y","6e1:q9:get_peers1:t2:])1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-05T16:32:23","port":39131,"src_port":6881,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:Y\u0005��\u0011D���@O�j�\u000bӫ���9:info_hash20:Y\u0005��\u000e\u000f-�i[FM]�`z\r���e1:q9:get_peers1:t2:E�1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a5905f1f511448abbce404fb06aa90bd3ab8f87e5393a696e666f5f6861736832303a5905f4880e0f2dfa695b464d5dc3607a0d9aab8e65313a71393a6765745f7065657273313a74323a45ee313a76343a4c540102313a79313a7165","sni":"","session":"d7b7c3c7-7795-4442-b8ca-384ae58bcbe1","bytes_in":104,"source_verified":false,"enriched":{"digest":"9727c071f440b2bc","strings":["d1:ad2:id20:Y","9:info_hash20:Y","i[FM]","e1:q9:get_peers1:t2:E","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-05T16:29:17","port":39131,"src_port":6881,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:Y\u0005��\u0011D���@O�j�\u000bӫ���9:info_hash20:Y\u0005����z޲Ƈ�R#kť\u0005\u00177e1:q9:get_peers1:t2:1A1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a5905f1f511448abbce404fb06aa90bd3ab8f87e5393a696e666f5f6861736832303a5905f391c1cb7adeb2c687c452236bc5a505173765313a71393a6765745f7065657273313a74323a3141313a76343a4c540102313a79313a7165","sni":"","session":"e6b66dd2-ed56-4e3f-90f0-0e4357e7f7b7","bytes_in":104,"source_verified":false,"enriched":{"digest":"1dd49966ed08324b","strings":["d1:ad2:id20:Y","9:info_hash20:Y","7e1:q9:get_peers1:t2:1A1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-05T16:24:56","port":39131,"src_port":6881,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"d1:ad2:id20:Y\u0005��\u0011D���@O�j�\u000bӫ���9:info_hash20:Y\u0005��G�f��{\u0004��3\u0016��)\u0015�e1:q9:get_peers1:t2:e�1:v4:LT\u0001\u00021:y1:qe","payload_hex":"64313a6164323a696432303a5905f1f511448abbce404fb06aa90bd3ab8f87e5393a696e666f5f6861736832303a5905eba847c366adb07b04d5f43316a4fb2915cd65313a71393a6765745f7065657273313a74323a65f3313a76343a4c540102313a79313a7165","sni":"","session":"48a3afe7-d706-4b57-b947-657563ce8736","bytes_in":104,"source_verified":false,"enriched":{"digest":"243da8c62d2a9df3","strings":["d1:ad2:id20:Y","9:info_hash20:Y","e1:q9:get_peers1:t2:e","1:v4:LT","1:y1:qe"]}},{"timestamp":"2026-10-05T16:24:56","port":39131,"src_port":58744,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000 uTd��\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0019�\u0000\u0000","payload_hex":"410020755464f4c3000000000000000019df0000","sni":"","session":"c242e10d-3905-4d3b-a54f-6b13a2485327","bytes_in":20,"source_verified":false,"enriched":{"digest":"af7788642b19852f","strings":["A uTd"]}}]},"top_ports":[{"port":39131,"proto":"tcp","label":"","count":76}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-05","count":76}],"recent_events":[{"timestamp":"2026-10-05T18:05:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"5��W7i@\u000b��\u0011���\f�-�s\"�i��q�\n��D`\t)\n@4�\r�\"&N>\u0018g�\f\u000f�\u0007\u001c�/�^����j�G�᥆l@����Z�;�9HAQ���\u001bp�\u0003�B�ɣ\u001d̖ϷƆ��\u001by��g��t�$���\u001bT\u000b�\u0000�a� �\t��Q?5ߤY�꼯\u0010��LX�\u000e�\u0014��J�Y�G\u0001��ޕ","payload_hex":"35a4ae573769400bf9b011e4f19a0c972d927322d8698d9171820ab48a446009290a4034990d9122264e3e1867950c0fba071cf72fb45ef8b2b2856a9e47ede1a5866c408f989fb55ac73bf539484151fca7b21b70c703df42ecc9a31dcc96cfb7c686e4ed1b79fa8067f6ce749024edabbf1b540b7fd800fc61c620b809d2fb513f35dfa45997eabcaf10dff24c58c10ead1481bb4a8959c14701938cde95","method":"","user_agent":"","ja3":"","session":"dc960aa7-a886-4a4f-8563-9e1c8f49ce40","seq":1,"duration_ms":100,"bytes_in":159,"bytes_out":13,"enriched":{"digest":"e8ef0e74ba8c9de1","strings":["W7i@","\"&N>","9HAQ"]}},{"timestamp":"2026-10-05T18:03:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-4da0NWlpMkql","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d346461304e576c704d6b716c","method":"","user_agent":"","ja3":"","session":"ff116875-c7bc-48fd-9c99-b9ae3daa1c4c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"cfcb591670263708","strings":["BitTorrent protocol","<-UW160N-4da0NWlpMkql"]}},{"timestamp":"2026-10-05T18:02:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"J�J��|�O�<��U�[��(\u001c�<�4��c\u001a���\u0019�*�\u0017c��I�����,$��{9m��\u0017��\u0006sR\u000f�aR\u00053Hǜ\u0005^|&0G����\rg����,�Z�4.�R\tj��A���g����7�f5��>�z͡\t\u0006*Kf���3�\u0004�Gy�\u0017^y�ߘ��T�\"�6��H\u0011󢩘�I��\u001c\u0013`�?��j+�f���\u0013\r�R��%�up\b�#�b���\u001c\\)��\f�<�<0�P~$*�\u0019`a\u0013_mpg\u0013�\u0007��m�oqg���V��wGB}�\u0015\u0019^uS�w�t\u0005\rdӵ)�Ai�����'[���&��<�Ŏ2\u0014� }wvae�\u0002�����r�h n��v�_\u0007�\u000f�������b�$��~�ױS�Q","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"3f896837-950d-478a-b90f-d9e336a3f102","seq":1,"duration_ms":101,"bytes_in":319,"bytes_out":13,"enriched":{"digest":"7fc3a1d35022140d","strings":["^|&0G","P~$*","_mpg","wGB}","}wvae"]}},{"timestamp":"2026-10-05T18:01:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-)jsEDLZ!0-Mk","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d296a7345444c5a21302d4d6b","method":"","user_agent":"","ja3":"","session":"8e920cc6-ba5d-4e08-8e1c-b7e04497acfd","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"b10618c787d18972","strings":["BitTorrent protocol","<-UW160N-)jsEDLZ!0-Mk"]}},{"timestamp":"2026-10-05T17:59:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"@$�\u001e��J@\u0001��$�J���P3\u0001�'�r��Y����\u0014�0B��P�\b\u0014����\n4��G�L��)�\b\u0010-��\u001as\u0006*����\u001e=���/m�b��vQ7L\u00061\u0000��,x��\u0012��Ti7+\u001c�M|���r\u0007E-�|¼x�ӆp�8h�ƒҭ}�[\u0018�8x�E��j������\fE\u0014�R�� P��|��W��ak#�^��7i7MX��򀆏��� �����~&�t�P���2\u001b��\r?��\u0012Y-�roc5�������\u0006��EǛ�O\u001a5\u001b�sr�F�?�\u0018y\u001dJf\"���Aq\u0003\u0012��be��\r\u0013f����\u001f]z8y�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"9741a3f6-1ff0-459e-b839-be05b020113a","seq":1,"duration_ms":101,"bytes_in":317,"bytes_out":13,"enriched":{"digest":"146fcf9d7302320b","strings":["vQ7L","Ti7+","7i7MX","roc5","]z8y"]}},{"timestamp":"2026-10-05T17:55:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-dbuf9F*IC~eP","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6462756639462a49437e6550","method":"","user_agent":"","ja3":"","session":"094cb86b-9c0e-479a-b536-0b6ee9c5033c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"1728da61ef9b62cd","strings":["BitTorrent protocol","<-UW160N-dbuf9F*IC~eP"]}},{"timestamp":"2026-10-05T17:54:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"����iG\u001aX�j��Y,�*\u0003w�\u0019�Jn�qF�\u0007hM�\u0019&\u000e\u001f���C�y-|�]���\u0003�\u00191R�����;~o/`�JnfP�\u0011��z���W\u0011�Q�怉[�p֔����Y\u001c��\u000b\n\u0005�͌���\u0014\u0003�hSb\u001a�\u0010\u0003\u0010��%��T���%�\u0002DC�\u0003�R\u0003�'I�t��TE�\u0012\u001f6S�\u0018��y[�Im�\u0014�\u0013\u000eރ���q��\u0003慵}\u0005^,U�uY�utg��\b�\u0012D�5\u0019�+\rl���D�9�8��1\u000b��i\u0012}�9�H�\u001a#\u0014\u0018-\u001f���c�rê\u001bzSg͌����i�ʩ��&��~h\bP�&\u001c�s��<\f�\u001d[�&\u001bT‹�E��\u001c���K\u000b���\u000e;�w\u001b2�g��Q=AgP�|�t����\u001e�ܭ�tH�\f��%pޠ�\u0005J$�\u0014�\u0014��'@̸���\u0003���߾Xy�\u000b��`��3~�Q\u0004��[H�\\�\u001f^Ib�-wET(�Y�>s������","payload_hex":"eab2d7f169471a589e6aa78e592cf92a0377b319834a6eb571468d07684de219260e1f86c6e343e6792d7cce5dedc1ae03e6193152bfccfb81a13b7e6f2f60f24a6e6650ad11d9ca7ae9d2c25711825184e680895bba70d6949cbdc3c4591cf3ff0b0a05d6cd8ca0a0cc1403d26853621a9410031085f62584b45490c18925810244438e03b55203fd27499d749fe95445ac121f3653a918f881795bf5496dc51480130ede838befd071dacc03e685b57d055e2c55ba7559f2757467f9b308851244993519ee2b0d6ccbd2fb448939da38b0b3310be49769127dd439b348c81a2314182d1f9dd7c8638772c3aa1b7a5367cd8ca3f0bfca69a0caa9a2c926ad977e680850aa261cdb73ded53c0c971d5b95261b54c28bf845d4d41cdce2df4b0bc0ee8d0e3b98771b32a467e3ab513d416750f87cd874f2f38b881ee2dcadea7448a30ce4c72570dea0fc054a24bb14e414f5d62740ccb8e2c9e50385aabadfbe58799a0bbdac6084be337ecd5104e1c65b48e85c801f5e4962f02d77455428a559ed3e7382efa9faedbc","method":"","user_agent":"","ja3":"","session":"db04e9a5-017f-4754-a6ac-78e9a0f15668","seq":1,"duration_ms":100,"bytes_in":394,"bytes_out":13,"enriched":{"digest":"260458ac3f510ec9","strings":[";~o/`","JnfP","Q=AgP","-wET("]}},{"timestamp":"2026-10-05T17:53:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-anLMAcQGKeNv","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d616e4c4d416351474b654e76","method":"","user_agent":"","ja3":"","session":"5dd3e51a-728b-4e14-8a4b-632407214b30","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"1ca94e91727827a5","strings":["BitTorrent protocol","<-UW160N-anLMAcQGKeNv"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T18:51:48.209899+00:00"}