{"ip":"186.131.136.97","total_events":11,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"enterprise","why":["11 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"2,325 bytes sent","bytes_sent":2325,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-04T17:45:22","last_seen":"2026-10-05T15:23:25","events_24h":9,"events_7d":11,"geo":{"country_code":"AR","country_name":"Argentina","region":"Buenos Aires","city":"Quilmes Oeste","lat":-34.684,"lon":-58.3192,"asn":22927,"org":"Telefonica de Argentina"},"source_domain":"186-131-136-97.mrse.com.ar","known_scanners":[],"scanner_tag":{"key":"peeringdb:as22927","label":"Telefonica de Argentina","category":"enterprise","url":"https://www.peeringdb.com/asn/22927"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":39131,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T12:49:31","last_seen":"2026-10-05T12:49:31","recent":[{"timestamp":"2026-10-05T12:49:31","port":39131,"src_port":1170,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000�#.�-7\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000}(\u0000\u0000","payload_hex":"4100ff232ed72d3700000000000000007d280000","sni":"","session":"5a51d111-0da9-4535-9c82-7c379f374f60","bytes_in":20,"source_verified":false,"enriched":{"digest":"6a0c13b15cdc5c6c","strings":["-7}("]}}]},"top_ports":[{"port":39131,"proto":"tcp","label":"","count":11}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-04","count":2},{"date":"2026-10-05","count":9}],"recent_events":[{"timestamp":"2026-10-05T15:23:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�aɩ�;O\b����fS�P\u0017\u0002\"|m}~\u001cEaԜ�g\n�&��\u001c\b1t!Ҕ�e\\u`\u0004P\u0015L\u0012\u0016\u0003�\"#Ųdza�L��\u000e%���#V�\u0019�O|<���\u0003�IT]v\u0007\u0010E�\bկ�Ň��\\bN","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"da9b1873-caf2-497b-a06d-4d339fc82d85","seq":1,"duration_ms":101,"bytes_in":454,"bytes_out":14,"enriched":{"digest":"69cec142c08cd6d1","strings":["[]Ti","^q.q","F1u),","^`y)^b0","}l +","\"|m}~","IT]v"]}},{"timestamp":"2026-10-05T14:11:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O��'�Ǥ\u001b+��qe�)��\n�IƐ\\Em��\u0005YUUZ�Qz����l��^�Y\t(\f�\t�\u0007\f�2m�q�8Q\u0017O\u0001\u001d���\u0016���\f\u0003#�ɏj�ɪ��\u0015\u0017�%����e��N��\u001c����L�����yvM$'F[gO|�}�:e�>W\u000bV�0S\f�M����'���z�rE�F�t;,��N�N�p7�a cX�=I\u0001�x�%Ew�׊6�\nӞ\u0006��R�[��J�~��\u001f͗\\x}\b笅\u001e�;M'�䍋\\I�����9��� �y�FVrˌ��\u0015ʞT\u000eT�bpV\u0018�e\u0013E�tk���\u00164�]\n����`G��\u0002�9��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"1deabb82-9952-4737-a77f-92d2b273c786","seq":1,"duration_ms":100,"bytes_in":429,"bytes_out":14,"enriched":{"digest":"84ef9f7917a62515","strings":["c\\=Y","]:UUr","#'DCO","YUUZ","yvM$'F[gO|","a cX"]}},{"timestamp":"2026-10-05T13:44:01","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�L�C\rk���A�\u0005B++�>\u000e���(U\u0002�E�\u000e�F����ܮ�h$׈�lf\u0005\u0012W5��ξ����\bs{EѲU��>�ҫ��\u001a�z�/A����\u0007o��d��ܡ(�����\u0006��=���E�>��#��\t�\u0007��OW;���{<�����FНj\u001c�Z�&������ٟ����.,r�˛\u0012\u00115(k�\u0006\u0005V�@�q\u0010�����ͼw\u0004E�`��7�+Ax�j��k⮢��Ǎ�Bc(�H�=E���+�E0$�]\u0004\r��\u000f&;ʥ�udP\u0003��\u000f\u001a%�\u0002�o\u0014��\u0018�^�*J���Z","payload_hex":"eef98fe8745b56ca4cc12154b910a2250ce5d1153b661c0d0c511c5e23d73d07ef0f7d6974f5a3e00a48302d8bf7196ba8b6b4b408ab1d0df19f4a22a3896552bef62210f2f434110c2e5a28f294ef56dd2aeb8f41a1d12315bc327478337d366cbccc9fb9a918021dba73c8138840527a5f7420dad4edd29f52bf4c8904dd393e4ca4430d6bd4fba341b705422b2bff3e0e85baec285502ab458f0eb946d7d9e5e6dcae986824d788bc6c66051257358aeccebe9a83e2ca08737b45d1b255fffa3edfd2abf6a31aad7aa82f41bca8cff7076f82e964ac90dca128f7af97a8a80685af3d9da9fa45d43e8cf523bc9309df07a58c4f573bf6f0d07b3cab98e1a8c546d09d6a1cd05a922699bec8ee9cf9d99ff7b4e6842e2c72b3cb9b121135286bef0605569c40ef7110ebd8effa96cdbc770445d960c4d337db2b4178d26a9caf6be2aea28897c78da9426328bf48c03d45eaaacb2bc6453024bf5d040ddcd80f263bcaa5be75645003a89b0f1a25db02c56f14a2e818ab5ee42a4a9bdecb5a","method":"","user_agent":"","ja3":"","session":"3515f818-1170-410a-8b4d-c48313482fa7","seq":1,"duration_ms":100,"bytes_in":384,"bytes_out":14,"enriched":{"digest":"35c584ce16995eeb","strings":["2tx3}6l","@Rz_t"]}},{"timestamp":"2026-10-05T13:01:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�\u0011�`�d��)�\u001b�$r�����:'2�|\f'���lZ�X�T�)�YY��TXoI e>��eK���˶V��t��\u001eG��|�R�s�;2�g\u0000�w��x����,\u0010���^[","payload_hex":"1d8c7b204301800da6be7596fb9761e33d628979ae3e11d460a9649b9e29d91bed2472d5d2ebd53c6eef625e88f906c9af9f3f54304d45c1c344e1d4132680106d93242c8cd139e355b969b905f70f5e8106a1057059f0b8631baa1a56ad4e67f17f09efc028abbe61ca460f332f4be4c8079f79b9af5105464b1f5ad8c71900b451a52402b48d2f77d0c81b4361fe75864dc9b03c98ab3eb73a2732f97c0c278280b16c5ad158cb54fd29bd5959e7b854586f4920653ec3cc654b8dd8facbb65685bb7482c51e47e6957cca52d373ea3b32fa6700fd77b98878b9ffeb852c10e9cbf35e5b","method":"","user_agent":"","ja3":"","session":"81ab698e-467a-4c4d-938b-d6e32ef03421","seq":1,"duration_ms":100,"bytes_in":229,"bytes_out":14,"enriched":{"digest":"7f1735a8813584d4","strings":["?T0ME","TXoI e>"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T18:50:43.300696+00:00"}