{"ip":"190.43.252.242","total_events":147,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["147 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 31,652 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"31,652 bytes sent","bytes_sent":31652,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-15T02:02:57","last_seen":"2026-08-15T05:13:11","events_24h":0,"events_7d":147,"geo":{"country_code":"PE","country_name":"Peru","region":"Huánuco Department","city":"Huánuco","lat":-9.9295,"lon":-76.2397,"asn":6147,"org":"INTEGRATEL PERU S.A.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as6147","label":"Telefonica Del Perú","category":"isp","url":"https://www.peeringdb.com/asn/6147"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":147}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-15","count":147}],"recent_events":[{"timestamp":"2026-08-15T05:13:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-led~u9JQBjy*","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6c65647e75394a51426a792a","method":"","user_agent":"","ja3":"","session":"1abedd37-efcf-4204-82b4-38c9e6b56c53","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"af2f11e6686c73c1","strings":["BitTorrent protocol","<-UW1605-led~u9JQBjy*"]}},{"timestamp":"2026-08-15T05:12:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"1L���Y��p\f�wo�:�C9��!�yQ��\u0010\u0000nK2١1\u001d�[�\u0011;�0dtϠ\u0006\r����$��hb�\u0014�)ȀK��,n��\r�RĨ`�r���\u00156��@\u0004�g�Ϥ�\u000b�Qvy�j6J��P\u0011�\u001d\u0004\u000e\u0017HZM��T�ig�\u0006)e3QL'�\u001f\u0012��\u0013���(sVR>\u0016{��\r�1��������\naܩ\u0014C\u001b�c}�{�\r�]�S�D�W�N�������0]3l\u001cJR�XW�E,�|��Ks;�\u000e���<8\bz�R�yxYe\u001f\u001bN�����\u0017��\u0011��UǞ:\u0012�u\n�*Ώ��;��l(A(���`\r]��^\u0011�X\u001c:�O~��\"᫵\u0006It�[��o�=�5=�6KdN��Ļ�g�","payload_hex":"314c8891b059f184700c8c776fa73a8e433991f321f27951a18510006e4b32d9a1311deb5b9d113b87306474cfa0060d9dbeb494249b866862c814e07f29c8804b9db12c6ea0820dd252c4a860a072c1a6dd1536d8d44004d267fecfa4a70bcb517679b46a364ab4b05011ff1d040e17485a4d8ce6548e6967c406296533514c27ce1f12858d1389fef4287356523e167b9cbf0dab3183c9fbc087b7d2c00a61dca914431bfa637dcb7b9f0db25dba53c444db57c54e98a5fa89f7b0d6305d336c1c4a52bf58579e452c967ce7a34b733ba10eaafbe63c38087a8652a2797859651f1b4ef58dd3edf717f9aa11edaf55c79e3a12fc750ac52ace8fefd43ba28e6c284128a98e9b600d5df4e35e11f1581c3ad34f7eba8922e1abb5064974975b8ce16fa83dd1353d9b364b644ef7c6c4bbd26780","method":"","user_agent":"","ja3":"","session":"5d2b3385-d4a1-4493-a011-3dd399b9ad3e","seq":1,"duration_ms":100,"bytes_in":308,"bytes_out":14,"enriched":{"digest":"8b34423063c1c56e","strings":[")e3QL'","(sVR>","0]3l","yxYe","l(A(","6KdN"]}},{"timestamp":"2026-08-15T05:10:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-03BgaVHk8lkp","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d303342676156486b386c6b70","method":"","user_agent":"","ja3":"","session":"070f02bf-750f-4189-a599-c3ac905f44c9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"4ae42ff45dd39137","strings":["BitTorrent protocol","<-UW1605-03BgaVHk8lkp"]}},{"timestamp":"2026-08-15T05:09:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�б�^O�\u0013\\��ZaP������U�%��\u0019\u0012���E\u001a\bݵ��3�W�\u001f�!Z�.�\n�\u0004��kT��\u0004��tp\u0017�x,��2R\u0007Vj�'�\f��Fw�\u0018At6\t��\u0011\t�ޯ&�8�|Z.U-��]���V�\n��û&,U��q\r�q��\u0005D\u0018����Y���\u001f�\f�\u0019n��S6���\r����\u000f���5`\u0015Ⓚ���","payload_hex":"e3d0b1ff5e4fc8135cffcb5a6150f5d9d7ffa68055d72597fb1912bfa3d8451a08ddb5ff8a33d057af7f1f86215aed2eb20aaa0495a56b54bcd504abcc747017e8782ceecf325207566acf278d0cedfb4677b51841743609ea931109f7deaf269538917c5a2e552df78a5da8f9cd56e70af0c0c3bb262c55f6ea710d9f71f2d8054418e2c1aed259d0c0d81fca0cc4196eacb45336ef96d60d99f682e50fe9f0a5356015e2938097c6c0","method":"","user_agent":"","ja3":"","session":"ef5afc0a-3c01-4fe0-8168-13a60789fe0e","seq":1,"duration_ms":100,"bytes_in":170,"bytes_out":14,"enriched":{"digest":"14e21c92e5f5d0bd","strings":["|Z.U-"]}},{"timestamp":"2026-08-15T05:07:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-PSauMmifGWbq","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d505361754d6d696647576271","method":"","user_agent":"","ja3":"","session":"9db36c91-a255-43de-b939-698403240b40","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"b9d5861a5d2d20d5","strings":["BitTorrent protocol","<-UW1605-PSauMmifGWbq"]}},{"timestamp":"2026-08-15T05:06:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"b\r�\"܌\u001f=\u001f���I x&|�fz�S�_?�xj����s�#\u0018�\f��q{�7�f�fH�h�.X��_ �&\u000f\b\u001f��sR��\u001b��Y52tuD�\u0010�Ԋ>.)-��1�b!\u001b�W���!9%:&���{\u001a\u0017�N�(��6�b����f�hU���M\u001f�H\u0004\u001a�H�\na�J�\u0015���|g�\u001bi����\u0016�;\n�`�\u0003F,^�i���8���d�\u0004W�T��4q�RR���7=�Sn1�l!�g亘�m0�.�0���\u0003J2�tuY�5\u0000��8�}����!S��8~��Z�]\u0002�\u0014C�\u001b&\u001bo\b�D�W\\�g��O�r�ς��.�o��\u0011\u000663G�s�G�HJ���\u0000\u001a����\u001b\u000b���eV\\[6r������v�\u0000R8��\u0007�1\u0002֫��L�(Q�\u001adž\u001a\u000e���dM��tZ��\bߦ֘\u001b5�4�I��\u0004޸��6��r\b\u0016Ĥ�\u001e肈�\u0011˸\t�1��O\u000bS���\u000e]w3m�*���Ť�g\u0016D�+���kn�\u00104I��N���pD_ߟ/�����c\u0019\u0015�X7����\n�mՋ�'r�\u0018\u000eX���`Z~<�S�\u0016��B;�6<��%\u0007\u001a\u0014�b#(s'xN��&����e��\rB���\u000e�\u0002LT�Kk","payload_hex":"620dd522dc8c1f3d1feed0c6492078267cdd667adf53bd5f3fe5786ab589e68e73922318f80ce98d717be437c366d06648e868aa2e58adfe5f7f2082260f081fe1d07352b5d01ba2f6593532747544fa10e1d48a3e2e292de9bb318c62211bd457f298992139253a26848db97b1a17b14eb02889a036ff628b9acffb66fd6855d7ebae4d1fea48041a9348c90a61cc4af51593f1bc7c67d21b6981bab9f016c73b0ac960ed03462c5e9a6995eed538c5e69a64c00457d554a0f434719852529f90aa373de5536e318d6c219767e4ba98f96d30dc2ef130b0cde0034a32bf747559f13500899f38997db596f5902153ece0387f7e8c965aa75d02a71443bb1b261b6f08d544eb575c9f67bac54fd072c5cf82f8b82ecd6fbecc11063633478c73d547a6484af1f8ef001aab80fefb1b0be29ceb657f565c5b3672b283dcc088e476ab005238e2cf07b63102d6ab99a54cf62851f01ac7861a0eb286c8644df6f5745a94c308dfa6d6981b359334e849acbb04deb8c1c83682b2720816c4a49f1ee88288d711cbb809ca318aaf4f0b53e8f8fa0e5d77336de82a899df6c5a4f0671644dd2b84e3c16b6ede103449949c4eaf9ee270445fdf9f2f889bc5e7e2631915b85837fde5e6cc0a8e6dd58be42772cb180e58ba85e7605a7e3ca67f53a416e1a4423baf363ce0c625071a14996223287327784eaae72684ade58665b8da0d42c18dd00ea4024c54a14b6b","method":"","user_agent":"","ja3":"","session":"8c6e64e1-9ecc-4dc0-b827-d9c0788e3b3a","seq":1,"duration_ms":100,"bytes_in":524,"bytes_out":14,"enriched":{"digest":"55a53e20741a61d9","strings":["I x&|","Y52tuD","!9%:&","V\\[6r","]w3m","`Z~<","b#(s'xN"]}},{"timestamp":"2026-08-15T05:05:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-4BM9iN3hO8o6","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d34424d39694e33684f386f36","method":"","user_agent":"","ja3":"","session":"6a778138-2fa2-4572-ba2b-d67501903e42","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"6f7aa8725e6f8b18","strings":["BitTorrent protocol","<-UW1605-4BM9iN3hO8o6"]}},{"timestamp":"2026-08-15T05:03:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��K6��~R��ڀl�%қ��hDC�vCE�\u001b�?Ar��\u0015qDs��ԍ�c5�cqR�Va_Ӛi��\t-p�5ع�M'���(䬌��ÛK��V�EC���\u0004Т��<��B������\n\u001c@�ڀ��D�������Z�v7�n���퓇\tv�C2{��D\u001c��z�Ή\u0007�����#3�\u000bSD�>W�{��`\u0010S|\u0007��O)\u001f)\u000bb���<& \u0001-U#���\u0013��b�ު����=޽\u0017P�\bۡH�Hv�OP��wF���O��Qz�\u0010���J\u0015�P�{쇠��\n0��={�\\��!��{\u0006L�r��1@�\u0015\u0017�����\u001br�:�hK���\u0010\bA�Z��y�z�\u00111��2\u0005�Gw�%�m�C#�\u000e7;u\u000e�p��C俸�\u001b�'�1Ty(§^���ӉFf�\u000e��q! =f\u0000��<9ͅ���q�\"���\u001e���i�����g�4\u0000�%�>N��L��8\u001cp\u0012���[��\u0006ĸÈ�w+5","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b049d8cf-cf11-4943-abb2-f0f03d44bb75","seq":1,"duration_ms":100,"bytes_in":420,"bytes_out":14,"enriched":{"digest":"e23cc25c01b5335b","strings":["1Ty(","q! =f"]}},{"timestamp":"2026-08-15T05:02:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-uza9p.FkLPwh","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d757a6139702e466b4c507768","method":"","user_agent":"","ja3":"","session":"bbd50377-488c-41f9-b909-7dda7d3e1c27","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"3bbcc3451e8225c9","strings":["BitTorrent protocol","<-UW1605-uza9p.FkLPwh"],"iocs":{"domains":["uw1605-uza9p.fklpwh"]}}},{"timestamp":"2026-08-15T05:01:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��--�y\t�.����\bΦc\u0013Ø��\u0015���/ӡ�E�v\u001c]��;��r�\u0010�L\u0010D�\fEj96P��q�]�g�\u0018�\u001b�g�Cf��b�BcM\u0011A\\�y\u001a@^�����A8\u0013��b*�\u0010�$48�F�/7�먄(\u0000\u001c�#\b.\u0014�c����;��GIHP\u001e�C�Db<��`���íV��7\u0014M*�,r�c�svS\u0004�\u000eb�T��\u001e�S\t>�\u000e�҈Jc/\ru�K���f\u001a4n\u0016\"U\u0015��;\"����!\u000e��]\u0007�>h3�y�\u0011'0V0\u0011�T\u0019|\u0015�ˈU{�?\u001cQ�Fˤ�fS�~��5��N�J��H\"�jbۄ��6�5���!��i��\u0012 l#\r���B^\u0018��\u0018\u0000�)\u0015��\u000fV����-\u000f����O\u0001[,E\u001f#�\u0013� �.��SLh\u000ellO\u001e\u000e����D_\"\u001f4i��3����\t����pl@\u001a�'F��UY�pdZH�����\u001fGM1�窏�[���$j����BY��\u001e\u001bC�����ߙ*j[F��_WWZ�4x�\u000e��sŃ�4y{�5����k嬘\u0005���n���>�i\u0011X3ibF�\u0012\u001c�ms5\u0010��ª\u0005�������\u0015��sE/\u0007⿟a��\u0003�س6\u0011�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b91735b1-f35a-4b93-9d38-988320bceb66","seq":1,"duration_ms":100,"bytes_in":506,"bytes_out":14,"enriched":{"digest":"ac72c93543aa9a11","strings":["Ej96P","GIHP","'0V0","pdZH","*j[F","_WWZ","X3ibF"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T21:23:03.562042+00:00"}