{"ip":"130.250.229.114","total_events":334,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["334 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 68,832 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"68,832 bytes sent","bytes_sent":68832,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-18T17:55:46","last_seen":"2026-09-21T06:31:25","events_24h":274,"events_7d":334,"geo":{"country_code":"CO","country_name":"Colombia","region":"Tolima Department","city":"Ibague","lat":4.4337,"lon":-75.2374,"asn":270035,"org":"CELSIA INTERNET S.A.S."},"source_domain":"gpon-130.250.229.114-celsiainternet.com","known_scanners":[],"scanner_tag":{"key":"peeringdb:as270035","label":"CELSIA INTERNET","category":"isp","url":"https://www.peeringdb.com/asn/270035"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":334}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-18","count":60},{"date":"2026-09-20","count":164},{"date":"2026-09-21","count":110}],"recent_events":[{"timestamp":"2026-09-21T06:31:25","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"P\u001a�`���\u001b��]�� \u0017{�G�\u0011H�HDB�����(�\u0001�H\u000b=d�9\u0003�m-����=`V*.Ry����\fU��co������-�\u001dg�ԡ�b�\u0011��u|��\u001c?E�8\u00074ߋ���0�h�X\u0013=���Qqȍ��뙛_�v�̧�_��m�S0�sD\u001fQ�z,�\f���p�,��{Yo���j�5aE1\u0004����Օ=���a��&y�ｰ�C�ې�����.�a�vr�Sƍ>9=gq:��d���6�\u000e�!�\u0006\u0004D\u001bE�o��\u0002g�VS\b��\fl�\f`���H�z�2\u0001\u0014�Y\u0018$����T��,G��M���<&�Q�i�$M����?3�\n�#\u0006F�\u000f��*�c\u0002\u001f�8\u0016I{�|T54Q�����R��k��<��FQ}0ff}\u0004L��PU\u0002#\r9���\u0003w-Z��1�1�9=gq:","|T54Q","FQ}0ff}","OW(qT","]ALb","3#t8"]}},{"timestamp":"2026-09-21T06:28:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-6etj34BqDQyp","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d3665746a3334427144517970","method":"","user_agent":"","ja3":"","session":"90f93ed7-3fe8-4ab3-b1e8-acfa0923e83d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"f4fe1c3283dbd161","strings":["BitTorrent protocol","<-UW160N-6etj34BqDQyp"]}},{"timestamp":"2026-09-21T06:26:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001a��3��KY��P���G:�.��@\"��\u001b�x�y�\u001f���Y�}+m���'7���5��G�{E�Z���\rΩ\u000b��R&�I�\u0010\rMZ}�,뮠{�\r�k�2V�H�\u0011��c���","payload_hex":"1a9f8333a4954b59e4d450cae0d8473af02ee4b64022c8de1bfe78c679cf1f8898c7598d7d2b6de9ebf627378adbe035bebf47ce7b45d35ac1bbe90dcea90bffc25226f349fa100d4d5a7deb2cebaea07b920da06bc532568848cb11f8ee63a5b3f6","method":"","user_agent":"","ja3":"","session":"a0d9935f-e59a-4343-b548-14fd51de37fe","seq":1,"duration_ms":100,"bytes_in":98,"bytes_out":15},{"timestamp":"2026-09-21T06:24:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-.d1BjM-xGncQ","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d2e6431426a4d2d78476e6351","method":"","user_agent":"","ja3":"","session":"d9f31d5f-6cdf-43da-8e64-a81ecc865353","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"fbb75c7c02c5232b","strings":["BitTorrent protocol","<-UW160N-.d1BjM-xGncQ"]}},{"timestamp":"2026-09-21T06:22:03","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�?�\u001f�z����,��~\u0003?���o���n`\u0006�ګ�\u001f�yȆԯ�3�\u0010��K잤x}!8\b���\f7�h�\u0014\u0004�t�F�\u001a�7�\u0002]�3\u0018JXM\u000f�\u0004�'��\nk�a����l >\u0001�^\f�������\u0003^\u0019��G\u000fF*^k.���^i\u001b��v�02��¤�3-@��B�AS�⯔V���T���Sz2\"�-�ч��s�D�WX��:�6�=W�\u0003�(V�v\u0001\u0016\\}GZ�����EZɻ Rb^\u0006\u001dy\r\u001bd-\u0010�?�a�\f�4&*��l\u0018�d�+�8,�Gy(���rr�������FI?�����eֈ\u001fe�2��\u001b�\u0018g7�����O�\n_�6���\f�f��E2Y����vi�\u0010�\u0010a�1��1�PbLj9����\u0013fgF\u0018\u000b��\u0019,3o�o�j�\u0007\u0011�¸-l\u0010i�x,���\u0015�\u001fW}5�P���hƶ<1#��1B��\u0015m'�����H��\u00056��h\u000e�IXO��a!�I`�^i�(�\u0011���K��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"a7c03e2d-afa0-4a82-be25-4b649c634673","seq":1,"duration_ms":100,"bytes_in":420,"bytes_out":15,"enriched":{"digest":"92f0ee498e7133ee","strings":["x}!8","F*^k.","Sz2\"","\\}GZ","PbLj9"]}},{"timestamp":"2026-09-21T06:19:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-!D~PmPmQ5cwd","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d21447e506d506d5135637764","method":"","user_agent":"","ja3":"","session":"2c6c41b6-968e-4191-9cf6-238aa660a3b0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"81371dff65d50775","strings":["BitTorrent protocol","<-UW160N-!D~PmPmQ5cwd"]}},{"timestamp":"2026-09-21T06:17:22","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*\u001f�-��\u001f��?N�\u0019��Yuh��\u0000a\u0004qږ�_�4���|@k��\rq��2��O�y�1k_�z��Tƚ��ި\u0006U�\u000b�-`^?�Og/uy���_\u0012��;㉢�f��RJ���O�d�\u0013��2�v�G�\u0016�r�����/8\u0011�`���j\u0013-�\u0003�xƀ\u0004�d\u0001�Zb�,*?Z�Ef툒\u0002�U�,","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"dfbd692e-58e5-4dab-a0a7-40dedf2ae52a","seq":1,"duration_ms":100,"bytes_in":257,"bytes_out":15,"enriched":{"digest":"0269dee2c3f66198","label":"Redis (RESP)","strings":["&YQD","","Og/uy",",*?Z"]}},{"timestamp":"2026-09-21T06:14:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-juUl3Thk6S9e","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6a75556c3354686b36533965","method":"","user_agent":"","ja3":"","session":"770bbb7f-6566-4467-90b4-c23c7d66466c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"34198159d51b39db","strings":["BitTorrent protocol","<-UW160N-juUl3Thk6S9e"]}},{"timestamp":"2026-09-21T06:12:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�XH�(�\u0014Qҫ��rn!�ow�>�\u0002�p_��\t\u0013�Ϫ\u0003DT\u0019�腺���v\u000e�X#ȯ�I\u000f�/c|�\u001f�\u0001.\u0003{F�8\u0000��\u0006\u0016Z�\u001a)��V��a�͘Q����dN����Q�كDǓ�F\u0007|��C\r�\u001f2?�\u001d\u001e��M�~��2�\u0019�A��凘\u0007�,�G����>җ�\u0019q\u0013a��H�q�XR\u0012�au���آ,��߈����}�O犌\u000b萣��,nrʞ�s�S�\u000b�<�.`�1@q�\u0016�?A�S�v��j�Y]�o��>]���sO�0�+i4\u001dAt�e�I�~�R��[O\u0019�<\bs�K\u0019�Ղ\u000f�r�\r��#B\b\u001a�7�=�\u00037\u0016J\u0003_W!��ڦ%\rk�\u0013�2K�Iw����\u0010MU\u0003���i�����\u0012�^�ޡU\u0012O���&","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"14d95d8d-271e-4f80-a4a5-28af36e93ef7","seq":1,"duration_ms":100,"bytes_in":339,"bytes_out":15},{"timestamp":"2026-09-21T06:10:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-c96YYuqdJd!2","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d63393659597571644a642132","method":"","user_agent":"","ja3":"","session":"c1ab1b93-5087-4301-8abb-3b83afb8a238","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"c6a12b3d3a442b47","strings":["BitTorrent protocol","<-UW160N-c96YYuqdJd!2"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-21T07:31:42.714010+00:00"}