{"ip":"38.248.172.52","total_events":6,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["6 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"1,245 bytes sent","bytes_sent":1245,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-07T23:13:45","last_seen":"2026-09-07T23:26:35","events_24h":0,"events_7d":6,"geo":{"country_code":"VE","country_name":"Venezuela","region":"Lara","city":"Barquisimeto","lat":10.0664,"lon":-69.3586,"asn":272809,"org":"THUNDERNET, C.A."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as272809","label":"THUNDERNET C.A.","category":"isp","url":"https://www.peeringdb.com/asn/272809"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":6}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-07","count":6}],"recent_events":[{"timestamp":"2026-09-07T23:26:35","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�V\u0018n��\u0002\u001c\u0007L�dM�7q�|s*�Բ��`4�'\n��G�&\u000fdv�uz��U�F9^��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"73ce89ef-2f02-431f-8e5b-dae54c4c7ee0","seq":1,"duration_ms":100,"bytes_in":268,"bytes_out":13,"enriched":{"digest":"10624d4007916e7c","strings":["HGA B","mTY6","(PHr","!H!_D","vIQv"]}},{"timestamp":"2026-09-07T23:19:21","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�G�=\u0010҆\u0016q6U\u000eAɾX����d��\u001f~z�\u000f*�,\u0010��\u0006:C_R��D\u001aQqv`�Q","payload_hex":"d7613a3abcf5431461bc5620f9dda724fafbcdc05202390207ef9d674910a4914f3319bdd9d86e052fc58cf9fbddd2e0aa0ac6ec3344da295183e6c77726621a7df045c68956612dac5b40f38d2145b6b7f1053d100e306c543aa0aa09d65ef4eaacd2d1d8731f3056ce4de1dda5ef62dc3c890db70586aa62e5bc7dabac547e0f45e1bc1b51342f406e2bd77bc7b24497243c37e63e47df3d10d286167136550e41c9be588fb38699648b821f7e7af40f2a992c10f5a3063a435f5286be441a51717660ae51","method":"","user_agent":"","ja3":"","session":"00256822-9887-4e2f-a294-4d77132aa790","seq":1,"duration_ms":100,"bytes_in":198,"bytes_out":13,"enriched":{"digest":"0c81c7a1fab87570","strings":["0lT:","Q4/@n+",":C_R","Qqv`"]}},{"timestamp":"2026-09-07T23:13:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�\u0005��y�[�j�k�Pj��?W�\u0019_���>^F|\u000f���Z��{�)�WҖ��1�V��\n�s\u000e��տ_��K}ߺ-�S��ݒ;�:�\u0000f��}��\u001a�?\u0010��Hq��5�\u001b\u0012A/�_qK1\u0019T3�5�U�\u0000���\u0016G���\u001d즋>h����","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"17f6a817-69b7-4def-9339-a6ff277bbcf0","seq":1,"duration_ms":100,"bytes_in":575,"bytes_out":13,"enriched":{"digest":"cbb0ce55a6617e76","strings":["*fhQ","Yx8[","2hJw","h-Ku",">^F|","_qK1"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T10:05:33.530760+00:00"}