{"ip":"38.250.158.190","total_events":489,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["489 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 96,934 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"96,934 bytes sent","bytes_sent":96934,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-14T21:24:03","last_seen":"2026-08-17T02:20:50","events_24h":0,"events_7d":489,"geo":{"country_code":"PE","country_name":"Peru","region":"Tacna","city":"Tacna","lat":-18.0052,"lon":-70.2489,"asn":270068,"org":"DESARROLLO DE INFRAESTRUCTURA DE TELECOMUNICACIONES PERU S.A.C. (INFRATEL)"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":489}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-14","count":73},{"date":"2026-08-15","count":76},{"date":"2026-08-16","count":304},{"date":"2026-08-17","count":36}],"recent_events":[{"timestamp":"2026-08-17T02:20:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"&�@1\t�\u0004Ǔ�\u0013�d\u0007ɣ�\u0012�\u0001���w1Pɲyח�\u000e��# ��L\u0002C��\u0011\r!��\u000b�<Ԋ^W46\t����r����MhJ�E@�ݐ�!� ���_G�fb2D��./�\u0016�ů(�������;c���S�e�J�H�B�1\u000fB�*.~Ah\u0018��EѪ,\u0017_�dm\u001a��|w�#\"c��\b���0��Z��NK7�4X�\u0002�?_D.���&","payload_hex":"26d7403109cf04c7939b13856407c9a38e12c001ada794773150c9b279d797fe0e9f932320b6ed4c02439c8e110d2191c70bcd3cd48a5e57343609f58ba88072a3bd85f74d684ac64540bbdd90e321cc20ab96c75f47ab666232448ff82e2f84169dc5af28a786969fbef5dd3b63a7f5b3539f65cc4abb48d34299310f42d02a2e7e416818999345d1aa2c175fce646d1aaefa7c77a42322638ecd0888c6d730deed5a80af4e4b37fd34589f02d13f5f442eeab9fe26","method":"","user_agent":"","ja3":"","session":"097b0659-fe3e-47f0-825b-273781afff22","seq":1,"duration_ms":100,"bytes_in":182,"bytes_out":14,"enriched":{"digest":"398108487f239289","strings":["^W46","fb2D","*.~Ah","?_D."]}},{"timestamp":"2026-08-17T02:19:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-tDYteHHlhEaX","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d744459746548486c68456158","method":"","user_agent":"","ja3":"","session":"c364b368-11e1-4971-86c5-90c30abc5493","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"1bbbad6b6e4cf0cb","strings":["BitTorrent protocol","<-UW1605-tDYteHHlhEaX"]}},{"timestamp":"2026-08-17T02:18:08","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�E���\u0003i��=L�H^�[\u0017�:!��uP{(4Y\u0003\u0019 ���\u000e�P���J��m�\u0007\u0005¤\u001b}'9\u00052�@\u0018\u000f�!g�x#�Ɒ�(lͩ8���hP�\\H-����&����ֵ���J1!���e����\u0017�\u0019��X���cH�w�0S0�o�\u001b\u0004{#34�k�H<<�|���\u001bA4G���}�u\u0007uи\u001f�b����V��\u0001\u0001\b��j�ܝ�\u001dzt�e��9�Ɍ��\u0015�q���Da\u000f�?��B\n)q�S$�b���EYF�*����M���@��~u�1�$��Ms�\"ú�\u0013g��4�\u0000�(&�4\u0005�g\"�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"a457a4d4-8c74-4374-8a6f-c56e356fa78e","seq":1,"duration_ms":100,"bytes_in":487,"bytes_out":14,"enriched":{"digest":"ffdee9635d5198cb","strings":["uP{(4Y","{#34","N:VS",",t=~","?s*$"]}},{"timestamp":"2026-08-17T02:16:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-wjdDtsZs)acl","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d776a644474735a732961636c","method":"","user_agent":"","ja3":"","session":"8670d400-ad2e-4d5c-8053-aa47ba068f1a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"e6d33cd7780779b8","strings":["BitTorrent protocol","<-UW1605-wjdDtsZs)acl"]}},{"timestamp":"2026-08-17T02:15:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001e\u0010Y$�Gnn¼X��]M\u0018�\u000e�\u0002��?�&�MŘ�c1��\u0001���\u000e�r�if1�XY��/qA�+{~�\u0015�z��\u000b\u0018�\u0010+τl`0L���;?F\u0016�;��\u001drf�٢\u0017�\u000fT�u�� �\u001bYK\u0012Mm��X\f�f���\u00169i-с�\u0017�TI\u00157ۺ�:��~�Vp�y:�����J��t]|G��O\u0000�.��R}\u001d�/w�I���������1��\u0004%2�&�N���\r�3\u0005\u000fi>U\u000b\b\b�(�:�U�'\u000b�������V�Ņ�\\��n�)���R�k�ۑ","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"66dad8ba-e782-4d8b-b4b9-5549b656be0c","seq":1,"duration_ms":101,"bytes_in":604,"bytes_out":14,"enriched":{"digest":"1caabb5f51603674","strings":["VB!;","XcX^","x/$<","l`0L","t]|G"]}},{"timestamp":"2026-08-17T02:11:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-AnZQE)ueUwcK","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d416e5a51452975655577634b","method":"","user_agent":"","ja3":"","session":"d0348567-7d80-42fd-be44-e285bf2c4573","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"861ff671915633c3","strings":["BitTorrent protocol","<-UW1605-AnZQE)ueUwcK"]}},{"timestamp":"2026-08-17T02:10:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"[.���m�ө)\u000e��f ٗ!r�\u0003�Q�_��\u001d�M��%�?�F��y���\u0007�vG\u0018\u0007�u�l\u0013��0%�\n�;/I�����\t��(4\"�~�&�Ҝs\u001f:�7�Ry��\u0004�?�aS�Λ^�}�l��ۨb�]�\u001dW<�\u0016���6.����ܸ��`��zG�\\lo�/؝����\u0003�<{�~V&��™:�����Հ93R^���7��V�\u0015\t��X���ӈH�Rp��jF�Q\u001a7��c�#\u0004\u0012W��\u000e \u001dX[��P.��G�w��\u0019��S�zP^c�h+$���B","payload_hex":"5b2ea989cb6d8dd3a97f290e969a6620d9972172da03ca51935fe9f31d8a4df9d025dc3f9046a1b979defd8607df76471807ef75e96c13e3e33025860ad73b2f498afda5eadf09bae9283422a57ed226fbd29c731f3ab837f05279b5a804ad3fd361539bce9b5eaf7d8a6ca0c3dba862ab5dc61d573c9116e0d8c9362eadbee0c2dcb8b8a1609dcb7a47855c6c6f892fd89dacf3e89803ca3c7bad7e56269db0c2993a92b4bf94abd5803933525ef090b637f98856f53c6911126b3a5a8f631388542e33b8d6928dce5662db2673ffe0f2c1f31002121d483013afd0ab3ba4aacfee3af359adfa5865092c6f25e6330f20a58b39f46c2e46e5a5014f3ab87cafe959853e1509f5a958dcedd3d38848bc5270a0936a46bd511a37bcef63e0230412578b880e201d585b9dc6502eeaa4479e7792f119e2fa53b47a505e63e9682b24fcb98142","method":"","user_agent":"","ja3":"","session":"0fc3cdd9-a629-4140-b6ef-9bd195435455","seq":1,"duration_ms":100,"bytes_in":325,"bytes_out":14,"enriched":{"digest":"c7ae394be349979d","strings":["93R^","zP^c"]}},{"timestamp":"2026-08-17T02:08:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-UIwM7mIPnSKH","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d5549774d376d49506e534b48","method":"","user_agent":"","ja3":"","session":"38acffc5-d65f-4294-9a84-4764d6cc5171","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"5d35d71c8c9a0566","strings":["BitTorrent protocol","<-UW1605-UIwM7mIPnSKH"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-21T13:46:26.124766+00:00"}