{"ip":"38.187.27.144","total_events":346,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"nsp","why":["346 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 72,478 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"72,478 bytes sent","bytes_sent":72478,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-09T01:00:29","last_seen":"2026-09-10T12:08:45","events_24h":48,"events_7d":346,"geo":{"country_code":"PE","country_name":"Peru","region":"Lima Province","city":"Lima","lat":-12.046,"lon":-77.0305,"asn":271814,"org":"NEXTNET SAC"},"source_domain":"customer-38-187-27-144.nubyx.pe","known_scanners":[],"scanner_tag":{"key":"peeringdb:as271814","label":"NEXTNET","category":"isp","url":"https://www.peeringdb.com/asn/271814"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":346}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-09","count":298},{"date":"2026-09-10","count":48}],"recent_events":[{"timestamp":"2026-09-10T12:08:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-.Ek1OK_f130s","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d2e456b314f4b5f6631333073","method":"","user_agent":"","ja3":"","session":"82b1e3ba-6a3a-40ec-a0a1-58201f3643a3","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"951a10d638eac4f0","strings":["BitTorrent protocol","<-UW160N-.Ek1OK_f130s"]}},{"timestamp":"2026-09-10T12:07:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"G7\")��i�!8G���;\u0013㺒�G*۾i�*���I�=S����0�o\u0019�\u000f(Ljn>.�\u0007P��GK��{y9e\r6�b�\u0004�I����ә\u0011\u0015\u0006��v:U�2]9\u0005����Fa|�y�.","{y9e","m_`S","Ymrf","W@[S","Al{Y","@KIl","|{y}"]}},{"timestamp":"2026-09-10T12:06:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-6)_15zHk(l!-","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d36295f31357a486b286c212d","method":"","user_agent":"","ja3":"","session":"9428e6fe-62bd-4fba-a2ca-0ffa9985df24","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"e908a4ac3d978a50","strings":["BitTorrent protocol","<-UW160N-6)_15zHk(l!-"]}},{"timestamp":"2026-09-10T12:04:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�A����0�]�e�r\u0012?�eQ�Rf�/hp�Q�05�B���T\u0003�\u0002\t���?U�\u000fc�!���\u001e�帖ޕ��\u001a�`�Q\u000f(:� 7\b5e�=b��I���yU�YTE����r�>�΁[�)$7\u000e{�u�b\u0010��׭o*z�ᬾ~��2�f���=\u0019�Xm2;G��^\u0013}e#T'��\u0002⬌\u000e�س\u0015��\u001bY�(\u0016J\\��Cp�3g\u0014L�]'�֝ȩx����9����=�\u0007��,5;C�\nUY�Ǘ���x(�6�~:��N�o\u0005Q���q}�c\u0017%Ak\u0001\u0010\u0011\u000e�]��\u0007��_\u0004\rQ�i?��V�ɵ�\u0005��\u0004�N\u001f�\u0011I���\u0016�B\"]�L���G�m�z0��-j\u001af;�%�Y2\\�ֿIPI\u0012�K\u0010��e��걻\u00035\"��'��~\u0000���zk�\u0004���Hi]8�F�IP\u0000�x~:>\u0019���C��Z\u001d`}�����!��#�K8d\u0012>b�*��������v�Oqf�Q��(�\r��seE��:zT��N��B-ɓ\u001c�mg\u0005��\u0002N�\u0005.��V\u0000��WISl�SY��\u001e\u0018fl��\u0002�z\n0�\u0001��h����1\u0014P�4����V���,�pG�","payload_hex":"dd41fee986db30d25db565a472123fcd6551a85266ef2f6870d8518e3035a542f497c35403f3020999e1ad3f55e30f63fe21bcdee41ee7e5b896de95e5d51ae060ca510f283ad02037083565ad3d62968949f5b8c37955b7595445fd92dce972e53ec1ce815b9a2924370e7bac75b66210eaa2d7ad6f2a7ab8e1acbe7eabb332cf6682ff993d19d9586d323b47b6e05e137d65235427f48e02e2ac8c0ea6d8b315a7a91b59ab28164a5c93894370c73367144cc45d27a9d69dc8a978c5caf8f239c8e0c2d53d9c07abb12c353b43ba0a5559acc797bae9ed7828a336d77e3ac7f74ebb6f0551cbe5c2717d8a631725416b0110110ed55db4f3079eac5f040d5197693fe1ac56b1c9b5d705f6f004904e1f811149a3a7e616fd42225de64cead6ed47e06d807a30e3d42d6a1a663b81258159325cf7d6bf49504912f74b109fd465dee3eab1bb033522acd22792957e00b581907a6b8d04a9c08148695d38ca46fd49500081787e3a3e199885e743e9865a1d607df6a6c9dcc621fbaa23f34b3864123e62ce2aafd9f1889df7e5b476b24f71669b51d6fb28e70ddff1736545e5873a7a54b38c4ea6e3422dc9931ca86d6705a6f5024ec4052ecfef5600f5d15749536cf45359f7811e18666cf4a202da7a0a309101a7af68b1bef3f931147f508134f5dccde856a0bac02cf87047f57f","method":"","user_agent":"","ja3":"","session":"d8150603-d9c9-40cc-96a7-be832eae2a50","seq":1,"duration_ms":100,"bytes_in":496,"bytes_out":13,"enriched":{"digest":"e23879ed90a00d22","strings":["Xm2;G","}e#T'",",5;C","Hi]8","x~:>","WISl"]}},{"timestamp":"2026-09-10T12:03:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-fqZO~nm.yKqL","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d66715a4f7e6e6d2e794b714c","method":"","user_agent":"","ja3":"","session":"cf7600d4-e40c-430f-a17d-aa038d1408bd","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"c037ea50d0a3c9ce","strings":["BitTorrent protocol","<-UW160N-fqZO~nm.yKqL"],"iocs":{"domains":["nm.ykql"]}}},{"timestamp":"2026-09-10T12:02:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u0000\u0011\\���ϱ��\u000f�\n\u0011�\u0005\n��,�G\u0007v\u001b\u0013�\u001dN�\u000b��\u0006:c�\n\u000b.Wy\u0005�!�m�\u0015��؜�n��V�-'�3\u001b�`��e*��*���E�D�`������\u0006�!�_[�F�k]�׼$��D\u0001����u\n�]__��'��ZN�98�����\u000fX�\u0014O�6\u0014��f�~Pe}�\u0018ރ�M.\u0012��߻\f<�Z��͸��',`°|\u001c�h�#C�Ӎ\u0003���!��0q'�M.\u0006Ś�B\u000f\u0015�\u000egQ���%3`0\b�S�w+��\u000e�\\��L\u0012\\\u0001`�sR*as���]����r�\u0002����Y�����4�@���F�7����CS�N\n\u0012Q�����cU\bl�0��+\u0006\u000b\u0005Y�dd\u0011���^�Sˤ\"b\u0003<��Zw�\f\u0015�\r�\u001a�Ň�\u0015�\"\u000e\u0011�T3\u000b�ȂCr\u0005����.�","payload_hex":"81ae00115ce3fe9ccfb188fa0f990a11c0050af1f32cd34707761b13d21d4e940bfdfd063a639d0a0b2e5779058321d46df815cef6d89cc76e98f256ff2d27fb331bc460f4ff652ac5db2a9bc1fa45fd44e360aa8ea696b0a2069621e15f5bfc468d6b5dc2d7bc2487984401bb949cc3750ace5d5f5ffdf927fc9b5a4eb33938d9edb79ee60f589d7f144f9136148ca366ed7e50657d9118de839a4d2e12a19adfbb0c3c985ae1becdb8f8bb272c60c2b07c1cab68a92343f3d38d0387a4cc219491307127a94d2e06c59ada420f15b50e6751e58fe4253360300880537faa772bf3800ee35c88bb4c125c0160dd73522a6173e5d3d95df1f7e78672b702b0a1a0d259f49dafcde834cb409bfa9346ef3788f6e3c74353b54e0a1251c1bebe9de96355086c9b30f6c22b060b0559fa646411d2ff7fc85ec853cba42262033c83db5a77d40c15f10da71ab1c587e415fb220e118f54330bc0c8824372058483b1f22efc","method":"","user_agent":"","ja3":"","session":"b93f51ae-33a2-4336-ac97-8eb8f7523f4a","seq":1,"duration_ms":100,"bytes_in":355,"bytes_out":13,"enriched":{"digest":"51ddb6b46870f2b6","strings":["~Pe}","%3`0","sR*as"]}},{"timestamp":"2026-09-10T12:00:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-nH_B~~s33xoe","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6e485f427e7e733333786f65","method":"","user_agent":"","ja3":"","session":"387aefc8-8544-4809-995e-4117323a037e","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"497dfb912bfe378c","strings":["BitTorrent protocol","<-UW160N-nH_B~~s33xoe"]}},{"timestamp":"2026-09-10T11:59:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�M,iu�s\u0015r;N��\bZY��ܾջ]Fd��)�\u001fV��R�� �c�A�\u0014S��\u0015���\u0016\u0016\nЗ�C���\u0002aK�\u0005ꦢ?\u0014�\u0001^\u0011�jա���/�49��\u0005]\u0006�nƝ�(+�,��΢3�ۼq�\"\r�|]�?��h��W[��d]�/כ݄q96\u0007�P5����rS~l9����`�}[��8H�\u0014:�tI�߶$��J��\"�Q��i\u0004Cc��1\"����\u0003���\u0003%��';0�ְ\u0017���\u0019�\u001a��f�@�ｦ��f���\u0004�}�\u000f&�kp�l\u001d�\u001e��\u0013��\u0017��m\u0011P7}�\t�17�?��m��?%w�?1�\u001cވ�����E��lJ���,�\b\u001e�\u0003�_~GJ;�J�f���U\u001d\t�M�� \nT���3B\u001a����I�2���{�h-rd\u0000�\u0016e���U���>�Df���:љ�PQ4�y��\u00109�|hW`��2 �%eT]���\u000b�F����\u0005�92z��(��\u0017\u001a}2�M��\u0001\u0011\f2\u0000�U\r�u�k��ʱ�\u0019_��/��a\t���A\u001d�w�\u000b}����v��\"����\u0014\u0007\u001eä\u0016-�Ub\u0018_�j�=\u001a�\"\u001e2","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"e72fbb50-7b83-43ea-9ef0-ac53155341ae","seq":1,"duration_ms":100,"bytes_in":489,"bytes_out":13,"enriched":{"digest":"f6a613ba3be8e02b","strings":["M,iu","rS~l9","_~GJ;","h-rd","|hW`","%eT]"]}},{"timestamp":"2026-09-10T11:57:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-YU8hI.W(B8lS","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d59553868492e572842386c53","method":"","user_agent":"","ja3":"","session":"d827c58f-2002-4fa6-ba8a-7622f5775c1a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d322f451cd3002b7","strings":["BitTorrent protocol","<-UW160N-YU8hI.W(B8lS"]}},{"timestamp":"2026-09-10T11:56:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\t�L{7���d�~\r�]y�V��̀��m�{�N�5�$�*yf\"�m5������P\u0019\u0019\u0007��Y��*%a$]B� ��\tAWМ�0�\u001f\t;�.��$U\u0001瑑V�<\nE\u001bFYބҡz�T-\u000e\u000e\\K]�����M�C�\u0012\u0002G��5[Z�o�\ff�\u0018q��DG�32W@An(��������z�F�71����s����R\r��\u001f\u0001��7�!������ȇ%J:^�$$�2�\u001a@\r;�3��8\u000b�����֓4��6���/5��2����\u000bu\u0012�7\u0005/�C\u0012~�=T{=�/�Y\u0013b�N�8'\fd�7v��|\u0015���鴮̻d>�p����p�*\u0002,B'T�2c=D���G;c�4%,��P�[�(y�>�m�}ǂ\u001bɍp>�˒C9��K��%~D\u0013W3�\u0015��A\u001b;,�:\u001e\f7\u0002�`ʝE\u0016��\u000e{�\u0012�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"96a43d2c-19c0-4a8f-8124-6fbced228ab8","seq":1,"duration_ms":100,"bytes_in":369,"bytes_out":13,"enriched":{"digest":"e1adddf1818dc788","strings":["*yf\"","*%a$]B","32W@An(","%J:^","=T{=",",B'T","2c=D"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-10T21:23:19.570224+00:00"}