{"ip":"38.56.214.29","total_events":494,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["494 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 33,592 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"33,592 bytes sent","bytes_sent":33592,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-01T02:34:22","last_seen":"2026-09-11T07:18:22","events_24h":40,"events_7d":296,"geo":{"country_code":"PE","country_name":"Peru","region":"Lima Province","city":"Lima","lat":-12.046,"lon":-77.0305,"asn":272836,"org":"CALA SERVICIOS INTEGRALES E.I.R.L."},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as272836","label":"CALA SERVICIOS INTEGRALES S.A.C","category":"isp","url":"https://www.peeringdb.com/asn/272836"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":494}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-01","count":33},{"date":"2026-09-03","count":127},{"date":"2026-09-04","count":60},{"date":"2026-09-05","count":78},{"date":"2026-09-06","count":8},{"date":"2026-09-07","count":77},{"date":"2026-09-08","count":11},{"date":"2026-09-09","count":32},{"date":"2026-09-10","count":40},{"date":"2026-09-11","count":28}],"recent_events":[{"timestamp":"2026-09-11T07:18:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-�����Fod\u0002�\u001c","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8989985466f647f029d1c","method":"","user_agent":"","ja3":"","session":"b1526a59-1375-4966-8261-5276029184e7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"35ddfad75adccf99","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-11T07:11:38","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��{�\u0014W�f\\lѐ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b87ba61457f4665c6cd190","method":"","user_agent":"","ja3":"","session":"24196166-4fd9-415f-9bad-fcf96eb518c6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"0ae664299867848a","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-11T07:06:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��u�|}\u000e����\u000b","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b875ee7c7d0e858ff1cc0b","method":"","user_agent":"","ja3":"","session":"eb8391c2-3905-4409-8969-ae8fecf6cc58","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"e168b6f6a5753c53","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-11T07:04:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���@>�n�a�-�","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8e6403eec6eaa61c22d8e","method":"","user_agent":"","ja3":"","session":"37dd2a67-c645-4d2b-8c7f-2cbf6d3846cb","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"dd9feab91129ebfe","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-11T07:01:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-����9��Vm���","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8d0c839c1b7566daca583","method":"","user_agent":"","ja3":"","session":"c6c79a0c-9aff-45fb-9370-5ed2c736c731","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"0fb5059b386acf37","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-11T06:59:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u001bw}4�Ir��.","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b81b777d34e64972a78b2e","method":"","user_agent":"","ja3":"","session":"5338fede-3b26-44a3-bb7a-4c3b4a3900c6","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"ed5008d470b65fcc","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-11T06:58:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��������9\bVj","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8adf594fcb0d73908566a","method":"","user_agent":"","ja3":"","session":"b28e99d9-ca4b-492f-924c-385b0bc7549b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"f34f58cbc812858c","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-11T06:56:43","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��\u0005\u001f�\"�B �DB","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8051fc622a04220bc4442","method":"","user_agent":"","ja3":"","session":"a6303926-07b2-4929-ab5d-a4168939138b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"641e36d2ff2b020b","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-11T06:54:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-��������\u0019�,\t","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b88eddd4eee69e19ef2c09","method":"","user_agent":"","ja3":"","session":"611cb729-9585-4d5a-bd16-a148e74c1c82","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"61a3877e93fa3e84","strings":["BitTorrent protocol","<-UT360W-"]}},{"timestamp":"2026-09-11T06:53:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UT360W-���W\u001dȆհ��\f","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001000051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5554333630572d96b8d3571dc886d5b0a88e0c","method":"","user_agent":"","ja3":"","session":"fe46628a-723b-4792-8027-342f8f1e476b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":12,"enriched":{"digest":"e63e054b9d8f54e3","strings":["BitTorrent protocol","<-UT360W-"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T10:03:39.853686+00:00"}