{"ip":"190.161.200.14","total_events":136,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["136 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 29,439 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"29,439 bytes sent","bytes_sent":29439,"session_seconds":0,"persistent":false}},"first_seen":"2026-10-04T02:41:38","last_seen":"2026-10-05T01:29:49","events_24h":0,"events_7d":42,"geo":{"country_code":"CL","country_name":"Chile","region":"Santiago Metropolitan","city":"Santiago","lat":-33.4521,"lon":-70.6536,"asn":22047,"org":"VTR BANDA ANCHA S.A."},"source_domain":"pc-14-200-161-190.cm.vtr.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as22047","label":"VTR Global COM S.A.","category":"isp","url":"https://www.peeringdb.com/asn/22047"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":136}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-04","count":125},{"date":"2026-10-05","count":11}],"recent_events":[{"timestamp":"2026-10-05T01:29:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"|��C�����,7C�2�\u0017ۄ/�n\u0005����[&ӂ�]�8-|��'�����\b����[��<\t�TԽ�����\\���F���\t(�ٶ�L�ZA�\u0006�\u000f u#]� ��U��(`׃(�X����lr��\u0002�_\u0007�KbM\u0006���N�����\n\u0010��","payload_hex":"7ca2d643809da4b1c12c3743e0329917db842ff66e059394aa885b26d382915dac382d7c949b27bca581a98b089087bf945bf4c63c09a954d4bdbfcbfb8d985ca3baed46fdd5f309288fd9b6b24ce05a41bf06ca0f2075235dba7f20f4a955eeb72860d78328ff5885b8f1e56c72ceef02d25f07fd4b624d06dccfd04e9aa3f497e10a108dc5","method":"","user_agent":"","ja3":"","session":"709ac1a4-e5e0-485c-ae83-035202866fe5","seq":1,"duration_ms":100,"bytes_in":134,"bytes_out":14},{"timestamp":"2026-10-05T01:27:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB4650-waT7NR)KS6ZD","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142343635302d776154374e52294b53365a44","method":"","user_agent":"","ja3":"","session":"6ceab1e6-eba6-46bb-90da-79e6ea83dd9f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"3344e48796b24e3e","strings":["BitTorrent protocol","<-qB4650-waT7NR)KS6ZD"]}},{"timestamp":"2026-10-05T01:25:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004a�|��>N|��V��\u0019�s�E�bU6�����\f����\u0017�wH95�\b����\"���J{��@Q��g����ݲ\\ĵ�\u000bE�`u|絑\f�F'TЭ>d��p#| \u000f(�N�\u0010:�\u0000\u001b�&G���BH�,��,��\u0013 S��z�\u0006\u0000F��$��4ҞD�K~½����\"ok�,곐�n���T��IJ\u0002��\u0001�ܸ�P�\u001f�}\u000e�\u0002>�1�Mnݧ7=�s5%$�\u001bB��","payload_hex":"0461fe7cecbc3e4e7cfda056a4cb19c1739e45aa625536b984ffb6d70cd8c0fab417f377483935cf08a283e0fa228fa8954a7bebb840517fd5c9679eeacef6ddb25cc4b5f00b45e360757ce7b5910ce2462754d0ad3e6493f670237c200f28d04eeb103abd001bdc26478094d34248c42cb7e72cf9f9132053acf37ae4060046fec524a2b934d29e44fd4b7ec2bdefaad5fc226f6bf72ceab390cd6e8385da54e7afc4b202befb01d6dcb8cc509f1f8c7d0e8e023ec531e34d6edda7373d9f7f73352524f41b42fea2","method":"","user_agent":"","ja3":"","session":"afde632f-891b-41e6-9ad7-740d9ead5123","seq":1,"duration_ms":100,"bytes_in":201,"bytes_out":14,"enriched":{"digest":"06e1b5325cb9e30d","strings":["wH95","s5%$"]}},{"timestamp":"2026-10-05T01:22:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB4650-yoTVTqJWmPYh","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142343635302d796f545654714a576d505968","method":"","user_agent":"","ja3":"","session":"0816ac7a-29f1-48ef-a73d-370ee5a0fb47","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"fde83c7001528184","strings":["BitTorrent protocol","<-qB4650-yoTVTqJWmPYh"]}},{"timestamp":"2026-10-05T01:12:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"{�Zw�{x\n��O���\u001f^�w\\W<sG��3��Mu����<�sq++‘\tt���\u0012�$�in�^4\n�G�\u0011�=->&W4yj����R��껸h'A{}�\u0011\bW!R{\"�\u0018��ƅ�\"gN~c ��a�2v\u0015����_��+8�\u0011�i{��\u0012�=\n&:]������}��.\rV\u0002��6g�*V�M�Y\u0006��So\u000b\n\u0016'�\\'X?E��݉��h=�mʝ��\u001b;z�\u0010�B>-3����*�s%X��i��I�d9����\u0007��i�\u000e�b(׽� ����0Ⱦܬ�#\u0017\u0019\u0015��\u0011\u001d�0�\bH\u0002���㝬�U","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"bea4f9cb-6b37-4be3-89bf-1575a18d8ff5","seq":1,"duration_ms":100,"bytes_in":269,"bytes_out":14,"enriched":{"digest":"2faf61624e0c4f2e","strings":["w\\W<sG","=->&W4yj","h'A{}","W!R{\"","\"gN~c","\\'X?E","B>-3"]}},{"timestamp":"2026-10-05T00:56:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB4650-s1fLcLSlsR1p","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142343635302d7331664c634c536c73523170","method":"","user_agent":"","ja3":"","session":"c4ed3ff6-f73e-41a5-8467-545a4002e797","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"82ae29e94ab5b9bf","strings":["BitTorrent protocol","<-qB4650-s1fLcLSlsR1p"]}},{"timestamp":"2026-10-05T00:51:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��M�|)�O\u0015�m8���ղ����\u0000\t��(�o;��H�\u0015\u001c\u0015��T���\u001b*��\u0010!�C:�I:z\u00070���ܩ\u00157ppYW�\u0003�lJ N��\u0018��KXfb�/\u0004KhB\u0014N\u000f^�ALjjY��q�3q+ד�:x�Oח\u0003\u000b�YB�~f����#�`\b�F� ��w\u000fO[����w���Zޡ�m>9��\u0016��>����Hi�[��PX{����%�mit�/��°�����\u0017\u0003�.�wM�L�Q�{\"������1(�h\u0016<�8�ˇ�Hs*j�\u0011�QW}��ޮ5\u0005�4Ʀ�B�\u00155�&�\u0005GO-���: \u0013�X��lR\u001e���}ڑ�TV���&�p)������Œ�\u0012\u0016��<��=��q�X4��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"7ffc69c8-f8b6-4900-8c0b-8bfa5862023d","seq":1,"duration_ms":100,"bytes_in":314,"bytes_out":14,"enriched":{"digest":"727ccbb06fb58fab","strings":["7ppYW","lJ N","KXfb","ALjjY","Hs*j"]}},{"timestamp":"2026-10-05T00:41:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB4650-dYj(ou3n-I6v","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142343635302d64596a286f75336e2d493676","method":"","user_agent":"","ja3":"","session":"7fa28c37-abb8-4b36-808d-c0fce07b0ca0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"ddca152e08f0811c","strings":["BitTorrent protocol","<-qB4650-dYj(ou3n-I6v"]}},{"timestamp":"2026-10-05T00:26:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"� ���;st/��V*�N\n\u0005\u0016��n��.\u0005��D�\u0003�5�\u0016��:*d�Nڭ�6$Xn�zi(�\u0017�v���\u0012eKZI��zy�c��/�8�C\u001a�\nu+��h�F�\u0012�l�\u0001�{^!\u0012�A�N�0�=Z������\u0007�z�C����қ�\u0015\u0004y�<H�\u001c\u0003?\b�O`��B��6���߉�\u001e<��_��\u0019/\tQOI8?T�\u0007\b*\u000bU��!,&�IF$=\\B\u0018n�8\u000f\u0003\u0011�{�}�7/���R��F\u001bǢљ�����\u0002���N��(ms\u0018�[V�\u0017�r���\u001a���7SAZ\u0012����K@s�\u0013��[,\f#��{%g�%J�\u0018�\u0018�I�\u001f\u001d&w�'\u001f��f��ǝX\u0006y���\u000b���k�j*��$��\u001fL-���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"18f1edb8-ff1e-4d0a-b87d-6f2634bdcba8","seq":1,"duration_ms":100,"bytes_in":315,"bytes_out":14,"enriched":{"digest":"bd8a2bb9ee610dab","strings":[";st/","6$Xn","eKZI","QOI8?T","IF$=\\B","7SAZ"]}},{"timestamp":"2026-10-05T00:21:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB4650-Ipsip9Oso.d6","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142343635302d4970736970394f736f2e6436","method":"","user_agent":"","ja3":"","session":"e132c46b-21a9-4b94-807a-edc46d32579d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"0665c8683ab3856d","strings":["BitTorrent protocol","<-qB4650-Ipsip9Oso.d6"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-11T13:35:35.386798+00:00"}