{"ip":"130.250.228.145","total_events":365,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["365 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 73,434 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"73,434 bytes sent","bytes_sent":73434,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-12T04:09:27","last_seen":"2026-09-15T03:09:27","events_24h":0,"events_7d":32,"geo":{"country_code":"CO","country_name":"Colombia","region":"Tolima Department","city":"Ibague","lat":4.4337,"lon":-75.2374,"asn":270035,"org":"CELSIA INTERNET S.A.S."},"source_domain":"gpon-130.250.228.145-celsiainternet.com","known_scanners":[],"scanner_tag":{"key":"peeringdb:as270035","label":"CELSIA INTERNET","category":"isp","url":"https://www.peeringdb.com/asn/270035"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":365}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-12","count":219},{"date":"2026-09-14","count":114},{"date":"2026-09-15","count":32}],"recent_events":[{"timestamp":"2026-09-15T03:09:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-og2EnfTDl6oo","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6f6732456e6654446c366f6f","method":"","user_agent":"","ja3":"","session":"3384dca8-0eb5-4237-a5d8-5507ce4f351a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"de62ed596a7f20ad","strings":["BitTorrent protocol","<-UW160N-og2EnfTDl6oo"]}},{"timestamp":"2026-09-15T03:08:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"(�p\u0004���{��\u0017PR��#3k\u0004o�V���F\"��\b\u000f\r]\u0003I*#ߓ]�\u001d��%W@��\u0013��\u0018C\u0000��AHz�Ϯ�G���~�f���G\u001a&;���`\u0005�L5#ʴ>4g\u001ePG#�2N\u00197�%4��k\u0019pʭ�\n\u0003,3\u000be����\u001f����B�w\u001a?�k��B�9廤|KIa{\b/\u000b�0D�3\"v������+e_O����֖��$\u0010�u\b;�\u0014�t�:����\r��F��\f�W���7�\b+���t����l�P����\"/���\u001e,��\u0014w�!/6�V����\u0010��Q�Hg\u0019�V�/�����8jK�o�=����?�,�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b9d90425-e9cc-4203-beeb-1c115e651be4","seq":1,"duration_ms":100,"bytes_in":278,"bytes_out":15,"enriched":{"digest":"5435c597ed3f61c6","strings":["|KIa{","+e_O"]}},{"timestamp":"2026-09-15T03:06:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N--ipXZ2CROC1B","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d2d6970585a3243524f433142","method":"","user_agent":"","ja3":"","session":"bb46dddc-231b-454b-9184-a37c6e68baa4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"d531aa02a289d9e5","strings":["BitTorrent protocol","<-UW160N--ipXZ2CROC1B"]}},{"timestamp":"2026-09-15T03:05:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u00199V�\u000f\u0017�~OX����F;Zow��4�D�\u0017ߘp�\u0012!�\u000e&J{��ε,�[��[uO�l�\u000f\u0005��\u0001s��V��Y�Dv]NK7�p;8H\u0015:\u0011�Z�W+���W\u0004�qs�0��\u0001V\u001d݄���C�\u0004=�\u0011�dX�\u0005�/��แG�\u000b6pp�H3�n�","payload_hex":"193956a60f17f57e4f58fea7b5bb463b5a6f779cdc34ca44b117df98708d1221f70e264a7bdfc6ceb52cd85bc0be5b754fab6ce20f058aca0173eca356b5e2599b44765d4e4b37d3703b3848153a118a5ac9572bbab5ff5704e87173c530af9c01561ddd84eb8cd243f3043dbd11c664589e05fc2ffc9ae0b981478e0b3670709b4833b06ef7","method":"","user_agent":"","ja3":"","session":"b353cd2c-6a3c-4d21-89f2-7e46383bb2e1","seq":1,"duration_ms":100,"bytes_in":134,"bytes_out":15,"enriched":{"digest":"25f98875508aa279","strings":["F;Zow","Dv]NK7","p;8H"]}},{"timestamp":"2026-09-15T03:04:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-WpjigCh~IMi!","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d57706a696743687e494d6921","method":"","user_agent":"","ja3":"","session":"15b386fc-3e1b-4d72-945b-b98e911c0b30","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"b8889c8449ca54e7","strings":["BitTorrent protocol","<-UW160N-WpjigCh~IMi!"]}},{"timestamp":"2026-09-15T03:02:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��i�\u001f\u0006Y6H�+~�8�\u0003VU�h��HB`d�gxj\u001eh�>_,\u001d��=���~.��P�\u001d@�XC~�\u001d74G�g��\r���6�z\u001bA\u0005���g�:N�)j��`ǫwF���f\u000b����=����T�KA?�\u0013\u0019zյ�\u0018�\u0003\u001b\u0002{f����\u0015+R���\u001fQ\u0006c���w��O�U���jC�)��g�@�2�'����z\t\u001f\u0012\"\u0010�ny�靍��9�\u000b\u0010���j�����[\u0000J���LV^��W\u000e1�.�\u001f�w","payload_hex":"9d9369c71f06593648b32b7e8038ad035655f768d7c248426064d367786a1e68e33e5f2c1dc7c63de9d1f67e2ebf9b50b71d408458437ee61d373447bc67e1890d81d5c136dc7a1b4105bb97bc679a3a4e8e296a83f060c7ab7746b6bbdf660ba6f7aff43de09fbbe954ec4b413f9013197ad5b5df1893031b027b66b5fba4e0152b52fcdbd61f510663fe95e577b0944fe5559bb0ce6a438c2982e467d940a332a927dcf1c7e27a091f122210d76e79b07fe99d8d8bb139ff0b10c1efc46aa3adfec3c95b004ad6f7924c565e8fad570e31d52ed91fad77","method":"","user_agent":"","ja3":"","session":"2fe7f971-7d37-4d60-8e38-08e1b039cecb","seq":1,"duration_ms":100,"bytes_in":216,"bytes_out":15,"enriched":{"digest":"7efe6a3cceabd4d6","strings":["HB`d"]}},{"timestamp":"2026-09-15T03:01:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-n*5KT_7~xX(0","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6e2a354b545f377e78582830","method":"","user_agent":"","ja3":"","session":"8dfdddc2-a77b-4f5b-a3ef-d239d407fd9b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"fb9abd6543205135","strings":["BitTorrent protocol","<-UW160N-n*5KT_7~xX(0"]}},{"timestamp":"2026-09-15T03:01:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-n*5KT_7~xX(0","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6e2a354b545f377e78582830","method":"","user_agent":"","ja3":"","session":"8dfdddc2-a77b-4f5b-a3ef-d239d407fd9b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"fb9abd6543205135","strings":["BitTorrent protocol","<-UW160N-n*5KT_7~xX(0"]}},{"timestamp":"2026-09-15T03:00:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��b:�\u0003\u001e?���w�\u0015���\u0010���~�N�o>\u0013c���'R���BZ�E�\u0014Z�%ݯƚw`�z�%�������.�W�O\u0019�4w��;ڮ��f���\u0005#��l�\u001d��b~��Y�~U�O��_]��\u0003R��\u0016��3����3`���Ue8���|�\u0011�\u0006i\\^�\u0006\f���Ntys\u0015�P��03������\u001dW�\u001cQ\t����)�ߎ�h��C�q����V��\b�>\u0004��k\u0017��*Tl2j�!dGͯ\nG�p\u0018���w<��5gI�����>\u0004��f�F��%����\u001e\u001bȚT\u0017\u0014zޢ�m�h����Jk�\u000f��|��ra�k1\u0015�\u0017E�B�(��Z�}�ܐq,��։\u000f=*�J�n�<�\u001a��\"��A��\u0002�*���7�_#�߳�وݟ����\u001bdB.���nc!�~�0�\u0004�6v�HQW���5�i�&E�h\u001cP�������ņ��꿮���?�16t+\b�����\u0005�\u000f`�(��C�f�\u0015LHhzF�M\u000e�����ō\u0004\u001dk.�Q\u000br�\\�\u0006��n1�� �y���b�ܐ��2,<��߼��w��{�P-$){�vU\u0000\u0013R5,VB�J6�\"}��!0f��������\u0006\u0003��Mds\u0004V����%V0�^��8�E\u001d\n-�v4)�\ni\b.�[��x2����/Y\u000f\u0010`��\u001a�~�3�\u000fS\u0004\u0002P`��M\u0001�\u0011�\"�� ��(.�\u000ej\f\u0014���","payload_hex":"ff9b623ae6031e3fa9959277e5159aef8410a7d6e17eeb4eab6f3e1363989b8e2752b5a4cf425af845d2145adc25ddafc69a7760c77ae025b6e592fff085a92edc57b04f19d23477e1d33bdaaefffb66bfb69e052390a36cce1de9b1627ee7cb59c17e55fd4f8e9c5f5df2a30352b2a916dbc933d2e3f2db3360a585e255653885dbd07cbd118c06695c5ede060cfdcee94e74797315ac508eb93033b09fc0f8af861d57eb1c510999b4e1cc29d4df8ee6688ce643bd71cddac3da56918108aa3e04f59b6b17c2de2a546c326a96216447cdaf0a47a270189d81bc773c92c0356749a38ffaff8e3e04a09266ed46b6f12590f8e8a31e1bc89a5417147adea2f86db468b9909bda4a6bbb0facf87cf8c27261ac6b3115a1174582429d28bcb35aa87d97dc90712c92c7d6890f3d2a824af96e903caa1af1a122bfdd41bbc402bf2ab3f6a437a25f23e8dfb39dd988dd9f87adcdc71b64422e9492b06e63218e7e8230d204a2367685485157f0e7b4358169db2645ac681c5092fbf6c3edfcdac586b6f1eabfae928fee3ff53136742b08aa8af8bbd305900f60ab2885d2438866e2154c48687a469f4d0ea1b2d4c5e8c58d041d6b2eab510b72f95c8906eff76e31ab8120ab79baabd66297dc90dde7322c3c8bacdfbcb5b777a9997bce502d24297b7f9f7655001352352c5642f34a3680227dd9e0213066f78d86e2c0b5a59e0603a0e24d64730456adbba9d8255630b45eb0f038a0451d0a2da1763429820a69082ee65baeee78329191a0ee2f597f0f106089c31ad77ef633c00f5304025060968d4d01d211ee2296f82093da282ec90e6a0c14f8c7e1","method":"","user_agent":"","ja3":"","session":"9f6eaf89-9e10-4de0-9055-db20cabab46d","seq":1,"duration_ms":101,"bytes_in":600,"bytes_out":15,"enriched":{"digest":"55aeb5fc7209f68e","strings":["Ntys","*Tl2j","16t+","LHhzF","P-$){","R5,VB"]}},{"timestamp":"2026-09-15T02:58:39","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-Givo~ObWQqqp","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4769766f7e4f625751717170","method":"","user_agent":"","ja3":"","session":"2331813f-e259-4171-a991-6ff0f885b6eb","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"593333ad8dbe92f1","strings":["BitTorrent protocol","<-UW160N-Givo~ObWQqqp"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-21T07:31:27.300098+00:00"}