{"ip":"186.122.104.213","total_events":468,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["468 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 98,681 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"98,681 bytes sent","bytes_sent":98681,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-03T18:28:32","last_seen":"2026-10-05T11:16:00","events_24h":135,"events_7d":468,"geo":{"country_code":"AR","country_name":"Argentina","region":"Chaco","city":"Resistencia","lat":-27.4652,"lon":-58.987,"asn":11664,"org":"Techtel LMDS Comunicaciones Interactivas S.A."},"source_domain":"host213.186-122-104.telmex.net.ar","known_scanners":[],"scanner_tag":{"key":"peeringdb:as11664","label":"CLARO ARGENTINA","category":"isp","url":"https://www.peeringdb.com/asn/11664"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":468}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-03","count":60},{"date":"2026-10-04","count":273},{"date":"2026-10-05","count":135}],"recent_events":[{"timestamp":"2026-10-05T11:16:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\"�\nI�-@�\u00168�\u0018���a{� ��\u0011\u0011��\u001b�ɏY\u001c����F��a�\u0016�\u0010�\u001e��[����1�7\r\u001f�IJ=\u0012D�28ȮT��E� \r-&;�%�t�˽|��?�b�W)�LYC\u0003%@\u0014�q\\b����a2��8\\w�j�\u0000R��F�t���Ͻ�F�}���TMFoU.bJ�>��k �jB\b\u001a�\u001c��J\u0004\u0014�\u00146����A�\u001a�S�*\u000fq#\u0012�>.w�O�*���w����۩�)yh;��\"C��\u001a�\u0002�i�鉰8[NෟCB��\u0006A���\u0012H���p���o��\u001e^PO�xQ\u001f\u0000OɃ�h�I��\u0002&\u0016$�;.V��f�\u0012U?�ֳ�r`��\u0005�\u0014����$�4\u0018Kz�\u001e�","payload_hex":"c1e622de0a49a22d40c41638ba18f3cceb617b7fc6209bc0111180e61bd3c98f591c8adeebd546b2d661ab16cc10cf1eff8c5baaf5daed31e4370d1f8cc4b23d1244c63238c8ae54c09b45e9200d2d263bdf25a674e2cbbd7ca9ba3f9962f25729e04c594303254014ae715c62edea87d161327f98e9385c77bf6ac7005295d3469f7493988bcfbdda46af7d92f9c5544d466f552e624ac23e99ba6b20cf6a42081ab11cbcd74a0414e7143699f8a18941e01ad3538d2a0f712312f43e2e77d14fc62acee5a577fdbf9bfcdba9ca2979683ba9d92243bca31aa802da69b2e989b0385b4ee0b79f434287da06418796f21248bbd0f570e4bec46fc2d51e5e504fdd78511f004fc983bc68ef4981ed02261624bf3b2e56dfec66f712553f94d6b3e77260a7f305ce14e5edf1cb24ad34184b7ac51ed4","method":"","user_agent":"","ja3":"","session":"c0c8ae63-1cb9-48e5-a467-d27442fd7e1d","seq":1,"duration_ms":101,"bytes_in":309,"bytes_out":15,"enriched":{"digest":"ad25c3091dbb237f","strings":["TMFoU.bJ",")yh;"],"iocs":{"domains":["tmfou.bj"]}}},{"timestamp":"2026-10-05T11:13:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-e2_5N.V6.HXT","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d65325f354e2e56362e485854","method":"","user_agent":"","ja3":"","session":"988af45a-a3df-4956-bc75-f86afaf7e499","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"5e9d70d5b365a564","strings":["BitTorrent protocol","<-UW160N-e2_5N.V6.HXT"],"iocs":{"domains":["v6.hxt"]}}},{"timestamp":"2026-10-05T11:11:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�r��EzLF�\u0002�������8�\u000f�W�\r��$u�F+\u0012�\u0010�\f\u0015-�pF��a=��W��A�\u0005cVs���iO \u001bE~O��w\u0004dBWfi:��=\u000f�t\tm�\u001b�h�\u0015���fJ\u0004��\u000bW�<��\u0004���\u0010|\u0003u��8�G2{��ǖ�>���pŮ�\"$Qt�\br\u0015E�M�t�2ǵ�!�\u0006�\u0019^��'Y��y\u0003X\u001c�3o�4\u0002�>�t�\u0001���X�����F�3�h�*\u0001:K��q�\u0001�x��8�Up��W�\u0014�Hr�|����\f�w\u001a��38մ\u001d��Չ\u0003C���;a\b�$\u0011��\u0017�>\u0011x�I�\u000b\u0007\u0019��`~���`�4X�qC�\u0011��\u0010\u001f|���zZ�8)p��m�\u001aJ���Ԑ�<��x�{�7�F�z��'��\b�|v�\u001e��ݦ\u001a)e!\t�M\t��z�\u000b�#�{Q�l>\u0007\u0016\u0012\u0004\u0006\u000b\u0012qW\u001e�8���\r��\u000f\u000eS��r�%�\u0001�\u001f�,`�\t�7P\u0015���\u0012t^> sA/eT������B�y+���e�,�i�\u001a?�\nkk\u0014�����;C�r�\u001cx\u0006�$\bDm�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"3e9c2c58-3b68-4001-8078-2faecb91ba40","seq":1,"duration_ms":100,"bytes_in":452,"bytes_out":15,"enriched":{"digest":"a485821bb6ca40ec","strings":["EzLF","dBWfi:","\"$Qt","t^> sA/eT"]}},{"timestamp":"2026-10-05T11:08:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-N(linK8R_Gb0","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4e286c696e4b38525f476230","method":"","user_agent":"","ja3":"","session":"1b46445a-10ed-435d-a4db-927bf07c7d6f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"6df9f8fd9a7752cd","strings":["BitTorrent protocol","<-UW160N-N(linK8R_Gb0"]}},{"timestamp":"2026-10-05T11:06:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0010|�>:�TA�p\r�Jviͩ\u0000�s�\u0011�\"���MI\u0007Bn�!\u0001�f���4a�W2?Gs,g̊�� Q��\u000f�'W�p��q\u0000�;�CD7^� �o���4��T�WV8\u0010�3U�e\u0016=\u001b5(�5�S4O�#\u0006�\rIq���Ϟ\u001b%I\u0013]\u001cz�\u001c�;�¢���FSʌ�M6��%z�%���\u0018`�\u00040�4�=��X���\u0013�ɬo ��%^���׬�[�]����w���h��\u0013�\u001f󁷷\u0019�9\u000e�^��\u0011�M��b�^��\u00018�\u000f�w2�)v�\t\u0019^�!��E��\t\u0015\u001b�@���\u0000ë�/\u000e�`�؍0\\��.����/6�Q��=�i�D:+xc\u001e��vfcuu�Y+��B�ӗ\u00156G\u0003�\u0015d�\u0010p�\u000e#9o\u0003^.�\u0012Oi�\b���E��.;��ոR�\u000b�\"\u001eq\b1jҦP:��(�n���i'3���\u0004G7�����k4�\u001e3|���\u0012W��Tӥ@�v%�-oN4U��IY�\u0011<ST�\u0014\u0012���\u0013�\u0003��6���`�Ɗj�Ϳ%|\u0003\u001c���(V_Dȋ��׃& �\u0005eS�:[�\u0002�\u0007\u0018","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"51cc0e5d-1387-4585-ac75-556b3c2a318d","seq":1,"duration_ms":100,"bytes_in":468,"bytes_out":15,"enriched":{"digest":"f9eec08d60e55f1b","strings":["W2?Gs,g","CD7^","D:+xc","vfcuu","-oN4U","(V_D"]}},{"timestamp":"2026-10-05T11:04:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-t)j4-VyCyr0u","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d74296a342d56794379723075","method":"","user_agent":"","ja3":"","session":"99c52056-c397-4ad1-a79b-a871367e852e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"a912b54f6979e613","strings":["BitTorrent protocol","<-UW160N-t)j4-VyCyr0u"]}},{"timestamp":"2026-10-05T11:01:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001c|-s��C\b\\6ki������B'�x!u�}�ˍ�k'k7d�-\u001b�|�j���e��M��.:\u0015����+\u0010��н,��uٌ���4�-ͤ��x���h\nA�����죡BfF�\u000e��\u0003��G�I|L�\u001f�\u0015\u000e\u001b(��yv\u0016E6䭳:��5�tH\u001d�f�}/_���T�����\u0012\u0001���\u0019F\u0012o}l�Jxa*�iM-\u0006խ\n<�a544�YiR��Lp\u0011�\u0006+em7��AN��(�\u001c���\u001f�oɳi_p��@�HITJ�W�)u\u0007W\u0001��{1\u001dVN����R�(��\u0004N�r7#��ἇ��\u001fw�;���","payload_hex":"1c7c2d739bc343085c366b6987bf84d7c0a642278b782175f77db8cb8de66b276b3764ab2d1bc67cd26ad6ddf465f7e04dba8a2e3a15e492e7de2b10f8e6d0bd7f2cc0fe75d98cbabb8b34bc2dcda4dcdd78f285c8680a41bbb8bc9a94eca3a1426646980efdf503e0b3478e497c4c861f98150e1b28e1e47976164536e4adb33ae5f535a974487f1d9066917d2f5ffba6fd54d7d8fc8faa1201a28dee1946126f7d6cbb4a78612ab5694d2d06d5ad0a3c8d61353434de5969527f9bb74c7011d3062b656d37b2ed414ee9b028e81c83c1b11fa06fc9b3695f7094ff40d34849544a8b579f29750757019df47b311d564ec8ec9dd1528828b9b4044ef9723723ec8ce1bc87bb971f77df3bb480cd","method":"","user_agent":"","ja3":"","session":"6e467fbf-78b3-415c-ab1a-d5694d1e6b40","seq":1,"duration_ms":100,"bytes_in":270,"bytes_out":15,"enriched":{"digest":"37c1bde4d2b35c06","strings":["\\6ki","k'k7d","Jxa*","a544","+em7","HITJ"]}},{"timestamp":"2026-10-05T10:59:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-.)f1GknTDtfk","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d2e296631476b6e544474666b","method":"","user_agent":"","ja3":"","session":"30639a9e-a9ca-4be5-8ae5-275a651ec1e2","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"2a0117239f683834","strings":["BitTorrent protocol","<-UW160N-.)f1GknTDtfk"]}},{"timestamp":"2026-10-05T10:57:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"C;m��\u0011O��50\u000b��Hm�G\u0012`\u0007g\u0012�G��%t~��o���t\n��3-��2DA�\u0010=���tl�M��\u001d��*�I��q��5M�C�r�k�1d�\u00168O΂6��\u001c�:ف�\u001d�4�4�\u000fs\u0010x\u0000��|_v\u0017��ļm|�Dn\u0002�}c��O3�,�>4���&��\u0006���K��-�o\u00104�w�)K���t}�-���\u00021���$2�8{�\u0007��hˤ3$�Ɩ{F��Z@�Q5��%��+\u0004�\u0006z\u00176����B��M�R��Jj��E�/\r���:��P%m�\u0010t\u001e�@:�3\u0000u��6�\u0014��@�0JGA\u001c\u0004x\u0007i��^QB/;�j\u0014uq4�~~?����7j�'y�Tt\u0006��\r�\u0019\u0012�e�pS˔�M�f\u0015�e�9d\"P��)��-����\u000b-��1�̺\u001c\b.��Ԍ����\u000e�M�\u001b6y��\u001dk4��Sf��!���w��\u0001���F\r+\u0003\u00123?��uܲ��_���sF\u0003�u\u001f|J�ٟO<b\u0019\u0015�8�6��\u0000����88!\u000fw�Yk(bg","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"36a28480-f5a3-41e4-83b3-b0eef2582e8f","seq":1,"duration_ms":100,"bytes_in":442,"bytes_out":15,"enriched":{"digest":"6900737cef651bf5","strings":["^QB/;","9d\"P","Yk(bg"]}},{"timestamp":"2026-10-05T10:54:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-iy.p1)ffX1LQ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d69792e703129666658314c51","method":"","user_agent":"","ja3":"","session":"6e45b807-def8-4e76-8131-b05588b9f86c","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"56bdfe41983e29ab","strings":["BitTorrent protocol","<-UW160N-iy.p1)ffX1LQ"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T20:54:15.716853+00:00"}