{"ip":"190.232.113.95","total_events":151,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["151 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 19,117 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"19,117 bytes sent","bytes_sent":19117,"session_seconds":1,"persistent":false}},"first_seen":"2026-10-01T02:50:10","last_seen":"2026-10-01T06:14:40","events_24h":0,"events_7d":151,"geo":{"country_code":"PE","country_name":"Peru","region":"Lima region","city":"","lat":-11.85,"lon":-76.45,"asn":6147,"org":"INTEGRATEL PERU S.A.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as6147","label":"Telefonica Del Perú","category":"isp","url":"https://www.peeringdb.com/asn/6147"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":151}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-01","count":151}],"recent_events":[{"timestamp":"2026-10-01T06:14:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�)\u0016\f�(G\u001b_�_��+q\u0011��dYYd�����\b��}�TĈ��kV�8\u001e�/h\u0004�0A֭��Dr�@�\u0006-Ԛf۟�\u0012��J���큥�\u000f�h�5t","payload_hex":"c929160cd928471b5fc35fe3d12b7111e2ce64595964dbc1caf79908b9f07da754c488b39f6b5698381e922f6804d23041d6adebb44472f840f8062dd49a66db9fa112b9d14aa781dded81a5a70fac68b43574","method":"","user_agent":"","ja3":"","session":"ab30c666-6544-463f-9907-dc83820a7c44","seq":1,"duration_ms":100,"bytes_in":83,"bytes_out":14,"enriched":{"digest":"9394fa3012525b53","strings":["dYYd"]}},{"timestamp":"2026-10-01T06:14:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"8(b�j�4\b\u0003\tC-\u001b��W\u0013ha��T|\"G\u0006TH\\�\u0015�&\u0011a����5��X�*�������\u0017�Z��h�P�l��+\u000fլV����Ew wZ�B��9�����e�\u000e@��S�xg\u001b����\u0018�U�m\u001b2���","payload_hex":"382862af6ad534080309432d1bf8ea57136861d3dc547c22470654485c8515c0261161a0cae7d735cfe858f92a8bb0bffdebed9117bd5a99a068b850c16c9fd22b0fd5ac7f56dcf2b6ff457720775a8e42f09d39a7a7e8b7dd65df0e40cee553a478671baaddc7ea18c255c96d1b32dbd2d2","method":"","user_agent":"","ja3":"","session":"ab30c666-6544-463f-9907-dc83820a7c44","seq":2,"duration_ms":227,"bytes_in":197,"bytes_out":28,"enriched":{"digest":"f2ed87feb2e8bff0","strings":["T|\"G","Ew wZ"]}},{"timestamp":"2026-10-01T06:08:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360S-����\t�h���TT","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630532db4b7bacb09fe68bf9cfa5454","method":"","user_agent":"","ja3":"","session":"aa84bdd9-efd6-40df-8314-3cb6387b2f0e","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"5344f81b8a443f23","strings":["BitTorrent protocol","<-UT360S-"]}},{"timestamp":"2026-10-01T06:07:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"ϭR�x�{���s>�\u0013g��R��a��EžTui������\u0019x\u0016�1]`\u0005��pu B\u0016\r�{�r�\u0003�{%#W�\bp�\u0004��l\u000fq�?\u001b�\u0011��?\t9�{���K�y\u0013\t�l$","payload_hex":"cfad52a478cc7b8e90cf733eb913679997529ad861f3a345c29e5475698c86bce7a6ce19781688315d6005959870752042160d9f7bbc72b0038a7b252357fc08709e0480996c0f71a33f1b8a11f2863f0939d57bf8a6be4bbe791309d16c24","method":"","user_agent":"","ja3":"","session":"45fa2ab6-b827-4b41-9a0b-0f35ac88e14e","seq":1,"duration_ms":100,"bytes_in":95,"bytes_out":14,"enriched":{"digest":"80307db0eee2e513","strings":["pu B","{%#W"]}},{"timestamp":"2026-10-01T06:07:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"F\u0006��1r�2Vl;`?��4�1s�'D�a��E��o$�\u0002i7[�","payload_hex":"460694c93172f932566c3b3c73224e0d66a37a28ecfa640833b48e50e6a44e9273c4cb1b604c2782fb57e37fba93e4f88f00cf59955471ac57ae9ec7d56635e134b2c2c40742f4d70980e1ff52596af5eee6eed4201e5d3e603f91d934bb3173ea27449e61a5db7f4585e96f24b00269375be7","method":"","user_agent":"","ja3":"","session":"45fa2ab6-b827-4b41-9a0b-0f35ac88e14e","seq":2,"duration_ms":232,"bytes_in":210,"bytes_out":28,"enriched":{"digest":"612143d3f7831ae0","strings":["2Vl;�p?ȿ�nL+�k'\u0017��x,߳�Q\r\u000f#�'|H��pCNȹml\u001e\u0015���������6�'xI*+y�","payload_hex":"bf18c29dd6fdea8c39f06781b05bbf37bce612ba4f5843b77652f6ef3ea8703fc8bf946e4c2bc46b2717dde2782cdfb3d3510d0f23aa277c48fcb070434ec8b96d6c1e159f8da1c1bfa6f9a1a336b82778492a2b79fe","method":"","user_agent":"","ja3":"","session":"bd2c6665-1c93-4a9c-8b1e-893476c7634a","seq":1,"duration_ms":100,"bytes_in":86,"bytes_out":14,"enriched":{"digest":"eff0035940e38902","strings":["'xI*+y"]}},{"timestamp":"2026-10-01T06:02:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360S-��(�\u0001�Gcv��$","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630532db4b7288e01c0476376aca724","method":"","user_agent":"","ja3":"","session":"9a655942-4330-428f-aba6-18575ff1bfff","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"b30b391aaf5ebe95","strings":["BitTorrent protocol","<-UT360S-"]}},{"timestamp":"2026-10-01T06:02:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\"\u0002��P�\u000e t\\0\u0018��\u001ew�ڼ�>D8\u001f�G4+�`\u0017�y�}\u0013�\u001f�+e?�\u0005�<�U#��!�\u001a\u0017\u0007x�\u001b8�%�c\u0005�J���̵\u0011\u000e���Y\u0018��4�y�","payload_hex":"e02202e1a450e40e20745c3018ebfe1e77a1dabc8b3e44381f7fb247342bbc601781797fbd7d13811fb02b653fdb058b3c8f55239e8a21cf1a170778db1b38a725fd6305bd4a9790a9ccb5110e82b2e55918f18e349379f6","method":"","user_agent":"","ja3":"","session":"f2aa2ff4-0d3b-4a73-a9ef-c1fa2bcfc8b8","seq":2,"duration_ms":311,"bytes_in":180,"bytes_out":28}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T19:36:27.512950+00:00"}