{"ip":"181.138.27.73","total_events":136,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["136 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 26,563 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"26,563 bytes sent","bytes_sent":26563,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-03T18:00:19","last_seen":"2026-09-03T22:25:55","events_24h":0,"events_7d":136,"geo":{"country_code":"CO","country_name":"Colombia","region":"Bogota D.C.","city":"Bogotá","lat":4.5694,"lon":-74.1084,"asn":13489,"org":"UNE EPM TELECOMUNICACIONES S.A."},"source_domain":"hfc-181-138-27-73.une.net.co","known_scanners":[],"scanner_tag":{"key":"peeringdb:as13489","label":"TigoUne","category":"isp","url":"https://www.peeringdb.com/asn/13489"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":136}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-03","count":136}],"recent_events":[{"timestamp":"2026-09-03T22:25:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-XYY!FJLGRrK1","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d58595921464a4c4752724b31","method":"","user_agent":"","ja3":"","session":"c9d67946-3002-4e69-94de-be6d8b393e8b","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"d101babb5905ff8b","strings":["BitTorrent protocol","<-UW160N-XYY!FJLGRrK1"]}},{"timestamp":"2026-09-03T22:24:41","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���ՙ<��[���|\u000em~畖\u000e�x���+R���We_\u001b\nX\u0013s\u0002��G�ܪ\u001b�\u0002K�\u0000w}[���\te�;\u0011�SYKw>��5�@��x\u0004�\u000b�ʟb�:�\u001b\u0002C��A�w\u0014�H�\u0015�%\u0014�?�iM�(�H�V�\u000fD~�V�\u001c1�=\b�\u0007�����J\u0019�e<{�`g~_\r�b�N\u0001'�c,\u0001�S\u0014ځ�\u0006�&_�\u0012[�K1��0�����\u0003�\u000f�׾);�\u0018�V#Ll�]ڸ��r�\n�\u0016A�ti]\u001e7\u0010N��&2\"\u0006F�Mq\u0010Q�\u001a��קY�T�SN�\u0014���\u0002�?�\u000e%p^4b�p��hƇ��\r\n�\u0000u$Quɕ[l�q1eL@)sf �3�ᘛ��L��O%x�j�����N�!8\r�!/ֻ����Z}\u001ds\u001b�6N��SO\u000f��7�zE�\u0002+\u0014)\t��\u0014�\b�͢9�<\u001a��p�\u0016�,���","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"a08a136c-91bf-4a10-8eb6-ff50ed8abd4b","seq":1,"duration_ms":100,"bytes_in":369,"bytes_out":13,"enriched":{"digest":"f892280995a7d3cc","strings":["SYKw>","`g~_","V#Ll","%p^4b","u$Qu","q1eL@)sf"]}},{"timestamp":"2026-09-03T22:23:11","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-JGzzSQ_X6d(G","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4a477a7a53515f5836642847","method":"","user_agent":"","ja3":"","session":"9283e6d4-c01d-4a58-861c-070944f8c222","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"3f2e1eee15b32a4a","strings":["BitTorrent protocol","<-UW160N-JGzzSQ_X6d(G"]}},{"timestamp":"2026-09-03T22:21:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�� \u0019��O؜\u001f\u0019�$\u001bK#��*n#���~\u0002Y4\u0000�ʇ���!u\u0014\u001du��\u0004����r��O�\u001e��M���\u0018�;!\u0015�oYR3����CA�!��\u001c���̊��\u00117;�\u000f=�\u0015܄RFxT�YFaQf�}=��]�\\�\n","payload_hex":"ed9c20199a974fd89c1f19da241b4b23a5ff2a6e23e6cfe07e02593400cfca87e6ace72175141d75f9aa048fb6b7e77299a34fd21ec1fd4d98e69518943b2115b06f595233b1a3e9e04341b921e9a31cc6d1f5cc8ae08b11373bf40f3da515dc8452467854d25946615166c07d3ddac05dc15cff0a","method":"","user_agent":"","ja3":"","session":"c0ca78a6-2637-4b6d-b032-c009aef976b3","seq":1,"duration_ms":100,"bytes_in":117,"bytes_out":13,"enriched":{"digest":"c59c826389d8f769","strings":["oYR3","RFxT","YFaQf"]}},{"timestamp":"2026-09-03T22:20:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-bprDeGMuVqF.","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6270724465474d755671462e","method":"","user_agent":"","ja3":"","session":"710e4b8b-870c-434c-82f2-3431b92dd2a9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"e7a4e035a122228a","strings":["BitTorrent protocol","<-UW160N-bprDeGMuVqF."]}},{"timestamp":"2026-09-03T22:19:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�&�(�j�����FK�y\u0002�'Ba%\r�(�\u0001k��-LCaX��u��q�nM�s�D\u001b�u$��![��\u0016�:\u0014\u0002|��$\u001d*\u001al��Զ�gʙF�G��Oqٳ`4M2n�M1�V\r\u0007|�<î\f�׉����\u0010\u001c�6{��\\)��.9���A�}�l^K��dt>\u000es���ԫ���\u0018�\u0000�\f�\u0006\u0017���)@�\u0005���3�'���7�[\u001aJ\nDg��\u000b�\u0018\f�U\t�g:�vgm\b�\f�L���PȞ��3���/�w���3;G\u0000�ks�/\u0001�6M�\u0005�˺/Ӂ�}Ƈ\u0004�\u001f%�w���\r\u001aVKؔ-D�\u001eU^�WڞXs��4q�\u00156wG\u0001�ՏH�!�=W<�<�\u0006�Sp���\u000e�h��3�����l$\u0001\u0001fPїg\u0000����K\u001cZ\tD��l\u0004o7�\f���'!;�'","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"ab865d19-4ef6-4386-8004-ab9ebc42b6af","seq":1,"duration_ms":100,"bytes_in":350,"bytes_out":13,"enriched":{"digest":"7a295f5e9fe9d8ee","strings":["'Ba%","-LCaX","`4M2n"]}},{"timestamp":"2026-09-03T22:17:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-KS!Y39p_FcaV","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4b5321593339705f46636156","method":"","user_agent":"","ja3":"","session":"a1e7bb0a-9aac-4569-8893-3d32c68a0dca","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"bf10382999c2df34","strings":["BitTorrent protocol","<-UW160N-KS!Y39p_FcaV"]}},{"timestamp":"2026-09-03T22:16:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0004���������+��g��\u0011��s�\u001b�5�'@g�\u0014|F\u0018���8C�o����\u0013C�K>�8͸��%y�\u000f�Yh�$�����i��d��\u001eX���\u0010\u0000g�\u0001\u0016ĝ\u0016��b7\u001f��^�)M^\u001eo�A�)\tD|�J����\u0012b��\u000e�m\u0019�J�\u0000qcEp_��25�Ҙ�?�\u0006����}��D::�N\u000f��%\u001f�s�\"bO��Я\u0012QC�S�\u0002���o*�c)d�\f�;ޞ���C���='�o����-��\u0002�e\u0019T\"c���V\u001bt�n��\u0013P<\u0015S���������DNXu�Z\u000f��8\u001eGf=ҷ\u001a\u00057\u0016���҅\u0014�G\u0002'\u0007V�݁t�V�%��\\iM�6\u0002��%7Q���\u0004�\u0018�ɜ\"c6ѭb�c�����|�MJ&\"�tGD�ҁz4\f�#i�q\u000f��\u001e�K�\u001b\u0007#��\u001e\\��ɱq\u0010X�\u0017�!ވ3Zv��FY���y��%W6\\\u0016���ώ+\u0012\u001d�w��3�%Ǚ\u0001�0Dh��\t\u0006�˘","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"41044d5d-c125-472d-8c7e-979075496acf","seq":1,"duration_ms":100,"bytes_in":418,"bytes_out":13,"enriched":{"digest":"d794c04940a38584","strings":["qcEp_","DNXu","MJ&\"","%W6\\"]}},{"timestamp":"2026-09-03T22:15:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-o*tHS9kDjAnR","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6f2a744853396b446a416e52","method":"","user_agent":"","ja3":"","session":"15090b07-5e26-4bf0-b27d-2e3a0c21ccce","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":13,"enriched":{"digest":"50dd8349237db997","strings":["BitTorrent protocol","<-UW160N-o*tHS9kDjAnR"]}},{"timestamp":"2026-09-03T22:13:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0006�;���i\u0006��ƽQ�pƤ\u000ek������\u0017\u0006]�L9\u001aJ\u001e�k�_�%��=\r�^\n�\u001c������W_E�k��Yܬ�z2\u0004\u0011>1�E1�\r�]J.4�@�q}�Pa\u000f�It/�/�c\u00016a\u000b:`����T�\u0001�=���z=)�9R$��\u0004�C�L�c_^\u0000?R^��,p7v��C�4y\b\u001f�wS#'~\u0005�\u0002F�\u0016��;\u00060�3N<���w�N��,\u0003��n\u0002�,��\\�O�b)\u000f����","payload_hex":"06e63b9dd0eb6906d6f7c6bd51e870c6a40e6bc4d2eedfcad817065da44c391a4a1ef46b885fb12588f23d0de85e0ad41c90d3e08ca1e0575f45916be4d659dcac987a3204113e31a64531a20db45d4a2e348c4087717df550610fc849742fbb2fc3630136610b3a60b7f28ffb54d501823dbe89977a3d2989395224c8d804bf438f4cf8635f5e003f525eba912c703776eef743ba3479081fcf775323277e05f00246cc1692eb3b063086334e3cb691f377d74ee58b2c03edef6e02c22cf8d25c894ff762290fcae4b1f6","method":"","user_agent":"","ja3":"","session":"208220dc-4448-413b-95dc-20f89eed4991","seq":1,"duration_ms":100,"bytes_in":203,"bytes_out":13,"enriched":{"digest":"04501e81d262f3ff","strings":["]J.4",",p7v","wS#'~","c_^?R^"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-09T06:45:07.656063+00:00"}