{"ip":"130.250.228.176","total_events":172,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["172 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 35,859 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"35,859 bytes sent","bytes_sent":35859,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-16T20:55:40","last_seen":"2026-09-17T19:58:11","events_24h":0,"events_7d":172,"geo":{"country_code":"CO","country_name":"Colombia","region":"Tolima Department","city":"Ibague","lat":4.4337,"lon":-75.2374,"asn":270035,"org":"CELSIA INTERNET S.A.S."},"source_domain":"gpon-130.250.228.176-celsiainternet.com","known_scanners":[],"scanner_tag":{"key":"peeringdb:as270035","label":"CELSIA INTERNET","category":"isp","url":"https://www.peeringdb.com/asn/270035"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":172}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-16","count":56},{"date":"2026-09-17","count":116}],"recent_events":[{"timestamp":"2026-09-17T19:58:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-8gXN55BjkwYb","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d3867584e3535426a6b775962","method":"","user_agent":"","ja3":"","session":"25ec7354-dc4b-4733-ba70-1e6ccc5c70aa","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"c3776243d97a9466","strings":["BitTorrent protocol","<-UW160N-8gXN55BjkwYb"]}},{"timestamp":"2026-09-17T19:57:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":")�;��Q����|��\\����\u0018ى�|e��s��q9�P��V\\�\nl�A<��B�FN�ϹF�S��Ab�Sw��C�\u0004���T������RaƖϩݦw�5l{S��h�:�(\u000e�<���q�\u001c\u0018\u0018/}�Gٌ�~4I=�\u0002G��:��d��>\u0017��h��G#��!�\u0010QW�t*\"","payload_hex":"29f53baec851ffe9c8c67caff95cb99486df18d9899f7c65d7e373b8bd7139f6509796565cab0a6cbc413c8f954286464efccfb946b853a8824162905377ecb043c304fdaf8754a5a3fee28eff5261c696cfa9dda677ef356c7b53a8ae68df3a9b280ee53cd7ebfd71ff1c18182f7dfb47d98c877e34493dca0247d2d93a82b064f19a3e17f9cc68ffc547238dd421fe105157c1742a22","method":"","user_agent":"","ja3":"","session":"f034b3ee-65ac-4bc4-a0ca-5c21d08bdca9","seq":1,"duration_ms":100,"bytes_in":151,"bytes_out":15,"enriched":{"digest":"c268d9e408287c1c","strings":["5l{S","~4I="]}},{"timestamp":"2026-09-17T19:55:30","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-aUwQyiqiUENe","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d615577517969716955454e65","method":"","user_agent":"","ja3":"","session":"df6e0626-d88d-491e-80cf-417fc041e3c4","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"7689c32e6fe12fde","strings":["BitTorrent protocol","<-UW160N-aUwQyiqiUENe"]}},{"timestamp":"2026-09-17T19:54:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"L,g�)-���\u00144���Z}Mnb�\fd�󘖄D��.\u000fT\u0006�FU�v�@��,�m�\u001a\rxzu��fl��$}ؤ9&Q=�Ųޙ>]�׆}\b�-��.Q��]�7��EnQA��l��\u000bM>�������$�YG]�\fQ.fM�-;i���L�܊b[\u0003-[\\��\"^����.�=B�\nz{�<�M�/o#�?\u0007\u001a\u0011��@� +�~|d�x�u^�F(�~9\u000f\u001dL��~H\u001f��*�E\u000b���\u0018�^3@\r]i�2$�\r�\u0012b\u0017�G\u0016V�\u000b����T�>�>R��\u0017�~uD�u�:�\t","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"b57c4125-b6c1-4091-859f-125aafd2fca4","seq":1,"duration_ms":100,"bytes_in":251,"bytes_out":15,"enriched":{"digest":"baa510df3b0f24f9","strings":["Z}Mnb","9&Q=","EnQA","Q.fM"],"iocs":{"domains":["q.fm"]}}},{"timestamp":"2026-09-17T19:52:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-ugEpYR9TtHTK","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d75674570595239547448544b","method":"","user_agent":"","ja3":"","session":"9e713820-d863-495e-91ca-aed9129a1492","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"f3fd23c86c6a4a88","strings":["BitTorrent protocol","<-UW160N-ugEpYR9TtHTK"]}},{"timestamp":"2026-09-17T19:52:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"M\u0012IQ\u0000��{�\u0002=#G6�W�~~M�\u001a\u0004F H�Ժ�`����\n)O��ۃ�g���&\u0017Rt\"�8Ba���\u0005`���OhB�.�\r�?\u0001՞o�S����ʓ2��D!�ό\u000f\u0007;%���\u0000�u\u0017��\u0014n�#qػP�_Q܎�!�C�'��N�\u0012S\u001ay\\\u0013ocŎ��:cT\u0019��\n\u0016!�AD\u0002ُ���$�S�@��\u001a�f/�\u00160r٣C��\u0000r�]��\u000b6L~�1��x�#8�\u000f+\rӹ+��c�\u000b�0R��W�䶜�i_\u0005ۿ��+\u0018�p�H�O*�y����;������\"�=���3\f[�+ZS�Z�\u000f6ev\u0017�\r[w5�%��B3\"\nl�J\t��r�i���_V1���ڛ-��\u0001�(�L\f�>\u001d���\r�������\u00153h��_�\u001a:�ޖ鳳��\u0002Y,1}����J;�7�\r\u001f�@>_6\u0004m�A\t\n&��\u0001����\r�\nx\\�Dr���f��$m\ft����e\u0017��n�����*�\u0011a��҄cX(","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"28f3b7f7-09c6-4723-9e8a-1a1add9e1675","seq":1,"duration_ms":100,"bytes_in":422,"bytes_out":15,"enriched":{"digest":"abd4837c917998c1","strings":["=#G6","Y,1}","@>_6"]}},{"timestamp":"2026-09-17T19:51:06","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N--7QE4zmz!9Pq","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d2d375145347a6d7a21395071","method":"","user_agent":"","ja3":"","session":"6ad0df7d-e8f4-4f1c-84a9-e511c105f07e","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"a0ef404a53c3b8e9","strings":["BitTorrent protocol","<-UW160N--7QE4zmz!9Pq"]}},{"timestamp":"2026-09-17T19:32:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-P-xpwkEUJ5nS","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d502d7870776b45554a356e53","method":"","user_agent":"","ja3":"","session":"9a8bb9d8-1b59-40cb-87f3-91c2eb9db3c5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"c74e3cd1b8dfb70d","strings":["BitTorrent protocol","<-UW160N-P-xpwkEUJ5nS"]}},{"timestamp":"2026-09-17T19:31:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"88ʼn��@��\u001c!��d#ڈ�\u0005$�����\u000f\u0014\fﮦ��p�>���Δ���\u0016q\b�\u0019�\u000f-k|7��σPt8No�\r�X���>D\u0013\t_�o\u0002)W�n��8Y��������\u001c��=�\bO偪[s�׮\u0018h�Z5��m�9\u0007{��<�mG�vn�\u001fHF0�ɪ��-������,2'U��s~\u0011��ӟfA��\u0011d]}�hj�+~�؍������*F�����.\u0007K���\u001a\u0019oy�.�\u0007.0�\u0015��w�v=����\u0011��!�yϋ\fRh=��ϼ�\u0018�G�?\u0018������g�3\u0006,��6��p�>q�N��s�\\\u0011�і","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"9a1bc6df-b9c4-420b-ad5e-0b4a6b7e655a","seq":1,"duration_ms":101,"bytes_in":276,"bytes_out":15,"enriched":{"digest":"fbfec0d24f146236","strings":["-k|7","Pt8No",",2'U"]}},{"timestamp":"2026-09-17T19:29:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-BSxE3dmgscnv","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4253784533646d6773636e76","method":"","user_agent":"","ja3":"","session":"2c598d4f-b875-410d-84e7-e5dfc3a77a12","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"e221a42fe0203dc8","strings":["BitTorrent protocol","<-UW160N-BSxE3dmgscnv"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-21T07:31:28.197499+00:00"}