{"ip":"181.133.149.164","total_events":173,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["173 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 37,244 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"37,244 bytes sent","bytes_sent":37244,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-05T02:29:10","last_seen":"2026-09-05T20:11:13","events_24h":0,"events_7d":173,"geo":{"country_code":"CO","country_name":"Colombia","region":"Antioquia","city":"Rionegro","lat":6.1523,"lon":-75.3707,"asn":13489,"org":"UNE EPM TELECOMUNICACIONES S.A."},"source_domain":"cable-181-133-149-164.une.net.co","known_scanners":[],"scanner_tag":{"key":"peeringdb:as13489","label":"TigoUne","category":"isp","url":"https://www.peeringdb.com/asn/13489"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":173}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-05","count":173}],"recent_events":[{"timestamp":"2026-09-05T20:11:13","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�ʼn��E�R����*��\u0015j}�ޮc��(b��k�#�\u0002\u001e�\u001f��6�v��\u0002�t���\u001b\u0010-�JC�I\u0017�c]!���p�?�ߐt�����'�nm� \u0007�v���W�\u0000\u0003�\u001b�9�/�Ǒ\u00192�s�\u001fT�2e���{З9�[�#��G\u0017&�1��!�0sI�����e��E\u0002��\u0013�L�\u0015��ڶɄ���b�E�\u0001jUVY��q��/m�*�=�O\u0012�q\t\u0000q�\u0011�\u0019�\f��v�?&\u000e4��EX�G��G��ґu\u000f\u001bQ�gK\u0015�w\u000e�\r&�@�(��X9�\u001e�\u001e[�$#����;�%���R>�TPnh\u001b�3�\u0003���g�f�\u0005\u0006�(h�@\u0004�\u0014/�\u0012\u0007�iY8��]>DU���H�5�4J�4G\u001c\u001e�ƺ���r6\u0013�x�\u0007b���\u0012�\n�a�@�� �ZF�YVM\u000e;�s\u001c��\u0013�x","payload_hex":"c5c589c19845b552e2f0bf8d2afb88156a7da0deae63e5f22862faf66bf323f9021ee41ffce136f276849102cc74ea92cf1b102dba4a43e14917fd635d21aaf39c70d73fdedf9074bfe8e5bbf227d26e6de12007fb76c8f1ee57a00003c41bb539f12f89c79119328073a41f54ae3265efd1dd7bd09739805bf023d1ff471726ee31d3ec21b1307349fbf5f4d5f665a6fc4502a6a5139a4cf5158e91dab6c984f88196628845b0016a55565986ba71eae32f6df12ac13df54f12d871090071da118b19be0c95b376e03f260e349da14558e047f8f547d8f8d291750f1b51ab674b15ba770e8a0d26c240dd28e5a05839dd1e991e5ba52423b2faf0af3b812599f684523ee554506e681b9533a503be9fdb67ec66b00506d52868c64004c3142fc11207a1695938b3d75d3e4455a2c8f248ea35d0344ae034471c1eefc6bad1c4ee723613b278880762cee0ea12820ae061be40b7ef20bd5a46d759564d0e3bdf731c93b9138b78","method":"","user_agent":"","ja3":"","session":"6dd90318-154a-446b-b0fc-0fc11fd9ab09","seq":1,"duration_ms":101,"bytes_in":359,"bytes_out":15,"enriched":{"digest":"a2f2d2fb6ae2b98f","strings":["jUVY","TPnh","]>DU"]}},{"timestamp":"2026-09-05T20:09:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-2atM1WX~xo_k","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d3261744d3157587e786f5f6b","method":"","user_agent":"","ja3":"","session":"ca81cc30-8798-40bb-9ca4-25e2cb78ea51","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"88cad0719be98095","strings":["BitTorrent protocol","<-UW160N-2atM1WX~xo_k"]}},{"timestamp":"2026-09-05T20:08:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u001d\u001a��\u0012A|ыD���=\u00112b�˅{�����Rd^��@�ֈn_9k��Z>7\u0017�ۊl�\u000e�I�\u0001A�2\u0010\u0015�\u0017���\u0004t\u000e\u000eNN�\u00191V\u000b`\u0017'/IR��W2\u001c�X��\u0004�ȩ��e8\u0002k�\u0001�vW\u0001�\"�e�ɏ�Ro`\b�6�� �����\u001e�<9�B\u0011�\r\u001e\u001e�6����\r�Q��tkj)'���uݝ)-̪��L�@��\u0006=\u0006<���o+\\B[�4T��\u00014�!`q��\u0010��c\u001ao�\u0010p���Z�\u001eX,��qfd+�Ʈ\u001b[��y:[e�,�ڦkb��Jppv<%�<\u0003��W�$�>A-jLG\u0001\\\u000bߖF�-\u0006�h]��IHl��RM�\u0001�D.\u001c�9���h�X9�&p���_`bh�����l�1e�OQ�Y�O?o\r$��E4�x@�\u0005����#\b�[<Ё>Ȋ����[e\u0016��S\u0005$\u0007G0\u0014�\u0007fN�\u001a/�e�'|\u0000������\u001f�\u001f�@�\u001cO�dqc�Q��\\<@Uɹpő�\u001d/�\u0018��\u0007��Nu�����\b��8q����\t��\u0015tܠx�^���$�]�\u0002�=j�\u0019d\\؝\u000b[΃\u0004�;n̶���^�Qn\u0004�����+�ydp��b�c�g�h�p�\u0006�W�C�C�ʼ����Z\u001e�0\u001e��q~��r�֓$\u0018�a�9\u001b8�\u0006��6���DU��<�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"a0d6a101-0aaf-469a-bb39-6f67a765c8e5","seq":1,"duration_ms":100,"bytes_in":561,"bytes_out":15,"enriched":{"digest":"68f564e33c6c40e0","strings":["n_9k","'/IR","tkj)'","o+\\B[","qfd+","y:[e","Jppv<%",">A-jLG","_`bh","\\<@U"]}},{"timestamp":"2026-09-05T20:07:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-Sw.IfOu)mZeK","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d53772e49664f75296d5a654b","method":"","user_agent":"","ja3":"","session":"b91d4a68-da2c-4ee3-8f75-c4e901535a56","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"b72bf9c3326946c8","strings":["BitTorrent protocol","<-UW160N-Sw.IfOu)mZeK"],"iocs":{"domains":["uw160n-sw.ifou"]}}},{"timestamp":"2026-09-05T20:05:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"X��\u001fC���\u0013Y���g�f\u0003�il\u001a\u0017iTS\u000b��mNT����IC��\t����I<�O��\u001e��\rIM'��:k�\u0010\u001f��Q\u0005h�S�O3�\f���\f��o��3I�)�ܪ�Uur��\r�V\"�O�gH�х\u0014��\n��m�\u001aq�\f'��fn\u0018x4�����X'�,��k>�U��LHzVe�y:\u0015ڦ�O!\u0019\u0001��\u0010�h�\u0011O��\u0006N[\u0018q\u0019�P��񂈇?g�����[�Ԋ�\\\u0012u��-\u0017�xO)\u001d\n�2\u0017\u0003�","payload_hex":"58b6b91f43beae911359b7eeb967b86603ce696c1a176954530bed8f6d4e54bcb3dae64943aeb409b1e3b1e6493cf14fcecf1e8dda0d494d2785a33a6b7faf101f9bb9510568ad53864f33f00cf1addf0ca5916f94f03349ca29b3dcaae1557572f3fe0de95622b04fb96748fed18514a4910ab4b76db31a71a00c2789b4666e187834c19d80e0b158279d2ca6da6b3ef15595e74c487a566595793a15daa6d64f211901e78510dd68e3114ffcc9064e5b1871198c50b9e2f18288873f67a7bcfabd8a5bb0d48a895c1275deff2d17c3784f291d0ac3321703e7","method":"","user_agent":"","ja3":"","session":"d0827280-a91a-4238-a753-2320f0b720b8","seq":1,"duration_ms":100,"bytes_in":218,"bytes_out":15,"enriched":{"digest":"75b4431a6d8a1b83","strings":["LHzVe"]}},{"timestamp":"2026-09-05T20:04:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-FGai~0yRyboS","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d464761697e30795279626f53","method":"","user_agent":"","ja3":"","session":"8245b1a1-37de-45ec-9302-3ed5dd89495f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"ab74ff224172b3e5","strings":["BitTorrent protocol","<-UW160N-FGai~0yRyboS"]}},{"timestamp":"2026-09-05T20:03:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"9%\n�\n��)�_\u0018#\"�5�Àd��f���\u0010��oC�F�c��_6��ц1ML>g�`\"%��U����$ZBU�T��{\"�m�\b�\u0011��ND�b\u0001�tY����\u0018�e\u001dv�����9�A3˗�=v�\u001c����mR��ѶB퀫8t-\u001c\u0012�❙\u0018�\t��\u001d��n2c\b��c�?$� b�T��[<\n�-��Z��*�L��\u0015�,m�\b�\u0002��)����?�^��XX8E��>�/�fYn���E�Q���\b���'\u0017�=Ҥ�����\u0000\u000e�z��\\�a&|�T\u001az\u0001k;-\u0003C��Q�o�\fu�����mR����\u0004'�! �ǃ��lJV���eR�n��.��7;j-4^\u0011/\\U�KP*���\u000ei@\u0019Sԓ\u0016�<�㧼o�\u0001,����E�\u0019�5U\u0004���\u0013�\u001a-r�^\n���f���Z����&'�{�-W��\u000b��\u0007ӆ��\u0007�X��9�X����\u0018#X��ѶG�l�.)��L��%\u0017��&ᙁ�\u001e�܍��� ���g��\u001b!Ƒ�t7����YA��ϕ��yoy�mn�a������3{����\u001e�Z��\u000583IY�?��Ҋۋ΃��6\u0019.���e","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"526323f4-5b5e-47e7-953e-461beb97d0ba","seq":1,"duration_ms":100,"bytes_in":502,"bytes_out":15,"enriched":{"digest":"4865c018a2554dbc","strings":["1ML>g","$ZBU","XX8E","7;j-4^","83IY"]}},{"timestamp":"2026-09-05T20:01:31","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-nnSwRp6P!0*5","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6e6e53775270365021302a35","method":"","user_agent":"","ja3":"","session":"5f353d6e-a84b-4c01-a812-21e6a085ace8","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"8be079284e4cbcd4","strings":["BitTorrent protocol","<-UW160N-nnSwRp6P!0*5"]}},{"timestamp":"2026-09-05T20:00:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"@�\f�#�H�K˃x\u0006�Dc\u0017��w�\b����{�f\u000fL�)�v\"�\u001d?K\u0013o�V��X����\b\u0000�D�wt�z�b,\u0013��\"&�\u0003$�\u000fB\u0007\u000fw�J\u0017�\u0011PK�~GB�!\u000b\"\u001d���+�2b-2�a��?YI,�\u0001�Nq\u0000�‚�\u0010us���g�_��\u0002,���+�\u0015K҇��\r�r�G�\u0002[�؋˼o6�sC�����r\u0015\u0013X����X���p٥�㪲\u0002�-�\u001c�Yh\u0017�?\u0014,?O6O��-\u0012�\"�ˈ��Ɍ^\u000en]D��Z���\u000e�3��n\t�\u0018���o\u0005�-]�~M��� ٰ����P+C��:�\u001dy� \u0004��y\"\u0001\",nZ����eF`�#����\u0002d���F","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"15c8d53f-bfe1-4d56-8811-df76203428ae","seq":1,"duration_ms":100,"bytes_in":297,"bytes_out":15,"enriched":{"digest":"4aaf3ea9e4e7ce49","strings":["2b-2","?YI,",",?O6O","\",nZ"]}},{"timestamp":"2026-09-05T19:58:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-akzdOA0q-eSW","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d616b7a644f4130712d655357","method":"","user_agent":"","ja3":"","session":"7db9f122-82df-42ad-ac33-58504c5ea077","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":15,"enriched":{"digest":"c5cf7359c0451b35","strings":["BitTorrent protocol","<-UW160N-akzdOA0q-eSW"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-09T06:41:38.738906+00:00"}