{"ip":"181.174.13.241","total_events":153,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["153 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 30,078 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"30,078 bytes sent","bytes_sent":30078,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-30T14:01:05","last_seen":"2026-08-31T01:21:52","events_24h":0,"events_7d":0,"geo":{"country_code":"CO","country_name":"Colombia","region":"Santander Department","city":"Bucaramanga","lat":7.1274,"lon":-73.1191,"asn":3816,"org":"COLOMBIA TELECOMUNICACIONES S.A. ESP BIC"},"source_domain":"181-174-13-241.telebucaramanga.net.co","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":153}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-30","count":144},{"date":"2026-08-31","count":9}],"recent_events":[{"timestamp":"2026-08-31T01:21:52","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-dSZ2_Vd2_BgM","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d64535a325f5664325f42674d","method":"","user_agent":"","ja3":"","session":"d1f25f67-8def-4e18-8f93-f9c2b2bcd056","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"52bd94ce894011a0","strings":["BitTorrent protocol","<-qB5230-dSZ2_Vd2_BgM"]}},{"timestamp":"2026-08-31T01:14:02","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"`�i�Nq*��O,8�+����UWW�a���\u001b��px?���܄-�j����e������*Ӓ\u001e�V�\u001d� g3�'�*�U�\t�ۘl\u0018ζl:\u0011�\u001a�#q�\u0013\u0005X��F�b��R\u001f!|\fE�oZ(�NC\u0014����v\u001f��G�5�'�n�ۘ�6b=\u000ep�[ـ�\u0005�[�i\u001fR�V���x�I��_ʣ8k�,�JH\u0000�\u000e\u0017ܓޱ9�Pv���aX��KL�8��좃m�S'\u0013��i��H>��A\u0001�Ӧ���QK�%F����\u000b��Sl��G�\u0017�y|\\�\u0007�y\u0004\u0011\f\u0010'�W�\u0018A:FB�\u0015�D�Wȹ����`��t�u�Y\u0002�Z\b��j�4�\r��s�ʖ�J6,�������\u0011y���Q\u001a\u000f�٠�;X\u001cv�>�=���s�J5\u000bmZ�Ǐ�?�Xˏ\fݽ��$#)�A��?n�*�\u0017�\u0016*�$O\u0016&\u0010\u0004˦�eKV����\u0005|�gB��'\u0011��8�IJ�Mx�A*=��\n8�p�\t���!�^�l\u0003\n��0�!_�މlj","payload_hex":"60c569bf4e712ae7e14f2c38b12b9dacb2a3555757ea61b69be41be7c570783fd6e2c7dc842dc56acaffe9a665aaac9ab4aba42ad3921e9056f81da0206733bc27e02a81559a09c1db986c18ceb66c3a7f11a81ae07f237189130558e59646b162b6f1521f217c0c45f46f5a28e44e43148ad9d4ec761fc8dc478835ec278e6e9ddb98d636623d0e70b45bd980ca05bc5bf6691f52e156e4c5f878d949b9d65fcaa3386bda2cf94a4800a20e17dc93deb139f5507699ebc36158f5f04b4cd338cefaeca2836d9153271399d069d1d0483eadc0410195d3a695e289514b812546a8f18b8f0b9cc6536cc19047df17a2797c5c8807fa7904110c1027e757e218413a4642db15e844af57c8b9d5cef6ad60f6df74af75d55902e65a08a1956ab334f50d9cca7380ca96c54a362ca299aeb3a68da01179a592d1511a0f91d9a0cb3b581c76de3ea73dcbeb9b73864a7f350b6d5a91c78ff83ffa58cb8f0cddbdaca6242329d241cdf93f6ed22a8f17db162aa6244f16261004cba6ac654b56f5bad4e2057ce56742ddf5271184f03891c4b2ab4d78c9412a3dea880a389770e20983f49521c65ee26c030a96e830e0215f8fde896c6a","method":"","user_agent":"","ja3":"","session":"8f718ad8-1a8c-468f-bff5-a733b5d66e45","seq":1,"duration_ms":101,"bytes_in":436,"bytes_out":14,"enriched":{"digest":"cffbec42c9d92f0b","strings":["A:FB"]}},{"timestamp":"2026-08-31T01:06:49","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-p60P8f)SH_ux","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d7036305038662953485f7578","method":"","user_agent":"","ja3":"","session":"962b6378-dd8e-41da-9e7e-b94ae5f3e779","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"ede3b0ac54477e21","strings":["BitTorrent protocol","<-qB5230-p60P8f)SH_ux"]}},{"timestamp":"2026-08-31T00:59:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u000b\u001dQ0��\u001d<�f\n��R\u001c�1Y%�5�Cv\u0019?���(��$i�\u0013�!�\u0015�8q�e�TQ�z�Kc���\u001d�>�\u001c+}��\u0003W]L�u\u001et6���f�-l�)�MѬ��h\\\u0013���/]�Ղs'��\u0003\u00106�e�ڠ\u0007\bbL5M�=3\\g��\u0013�^�ރ�x����\u001b�\u0000�\u0010�o���\u0010�f�\u001b��w=\u001b��u8E��^�/\t��ym2\u001eirWQ�q\u0014y=����!\u0015aq�҇0bFjy~���Hv\u001b���lb\u0016\u0018��o\u000f���^\u0016�P�\u000biH��!�:�C[�����?��S��hD��ζY]]#�.\u00068W��\u001a���F���l��6<\u0010{�{��[Z\u0013��#\u00112�\u001a��kB#�=6H�:Hn�|�\\��V�O�'�!���$���g�p���I@Y���Z����fL�����4=��R��rI�\u000f8��\u0014l��ZH̘�\u00001\\a6��\b�F\u0003P4����(���\r\u001eg]��$㩩���5���=�`X�\u001b��T�k��DF|\tF\u0001\u0015�GjK\u0014���\u0002ff�\u000e|�do퇑��\u0000����l2D\u0001Uh��1El\u0013\u0004�\u0001ܽ+�\u00120�\u0006�է\u0006\u0019��H̥)\\z�����f�;�'g\u0000y�\u0015Mn���o�oi_�\u00179�����w~e�\b^� a��W�J\"�\u0014qx���]��_,�\u0002f\u0017�J�p�~�\u0013du��mڢ+��E\n�k�{��Ta\u001a�yo�\u001d٨�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"a01824ca-4658-429f-8b56-009c83ee83b8","seq":1,"duration_ms":100,"bytes_in":601,"bytes_out":14,"enriched":{"digest":"cfe9512b23d8fe16","strings":["bL5M","=3\\g","irWQ","0bFjy~","1\\a6"]}},{"timestamp":"2026-08-31T00:47:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-Xlc!-wc~*KB8","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d586c63212d77637e2a4b4238","method":"","user_agent":"","ja3":"","session":"9eea9bf1-2d23-4606-b867-bf62f80a11a9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"7ea648a67fd7c2a0","strings":["BitTorrent protocol","<-qB5230-Xlc!-wc~*KB8"]}},{"timestamp":"2026-08-31T00:42:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"@��zP�\u001do�W�j\u0005w-\u001b�ϱ�b]�J0\u001cpLg8�Xm�ǜ�����^_DdK�s���{��b�\u001fĽͯK��4V\u0007��\u0015ݽ�S���q���O��=`��\u0019��O���\\�������\u000e�A\"�_\u000f8|o6���s\"#�d\u0016\u001a�L\u0010\u0016oT�Q)'h�\u0014Ä��=�\u0010Y�nq�Ј��h~m:ڶ_�w���V���ߚ���\u001e�\u0005�̛\\�������\rN�:���N\u0003k���\u0001w7�g�{��\u001a�\u000e�\u0019��\u0017\u0005\nAWA�a�B��@wy\u0006","payload_hex":"40f4fe7a50fb1d6faa57816a05772d1bb4cfb1cb625dd94a301c704c6738c4586de6c79cbaf8d2e6c15e5f44644bcc73acf0b97bb0c662801fc4bdcdaf4bd7ca345607b4ab15ddbdee53aaa5cf71a3b1ef4fbcb13d609ed019fd884ffcb6be5ce0d9c0f895f9e20ef74122c65f0f387c6f3690d5f27322239864161a854c10166f5490512927689014c384b6da3dfa1059c86e7197d08895c4687e6d3adab65fa2778fd5db56a5809cdf9af983ba1e8305efcc9b5cfe89b97fa7e5bce20d4ec33aaf91804e036ba099a50177379567fb7bdaeb1afe0ee71982cc17050a415741b261cc42d0d440777906","method":"","user_agent":"","ja3":"","session":"767b99b2-c08d-48f4-9185-7476f285cace","seq":1,"duration_ms":101,"bytes_in":234,"bytes_out":14,"enriched":{"digest":"a5a938003c77e14d","strings":["pLg8","^_DdK","8|o6","Q)'h","h~m:"]}},{"timestamp":"2026-08-31T00:32:40","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-!fpyZOB(pzo!","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d216670795a4f4228707a6f21","method":"","user_agent":"","ja3":"","session":"0c65745c-e4b0-43a8-9280-673b0ed4b672","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"c766975a0b3b9ec0","strings":["BitTorrent protocol","<-qB5230-!fpyZOB(pzo!"]}},{"timestamp":"2026-08-31T00:19:50","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�ڸ���>��,\b$�Ȋ\u0003\u000e�&\u00031\u0019��,�g6#f���\u001b��Nk`���#��<�o$��\u0011�/0�]%��㬨\n;����5֢B��2�h�ڬC᲎w ̕�D\\��:硜\u0011[���>6�Q�.�\u000eN���m\u0013\u0014rj_s\u0001�78%\u0003�.��\t\u0007ѥ�D�-�Nr�88��\u0001��]\f�d4a\u0007r��\u0010\u001dv�7��]�d~�ﱷ����]~}q\u0005�[�\u0014Hcd�.z�\u001c9��\u0014�a�@�\u000e��s����tl�H�\u0011KsC�\b�\u0011夣���c\u001fh��\u0019-*���[�\u0005�G\u0004��\u001b�i�\u0006@�����\u001d�S���R��P�\u001c�^\u001b����\b1|\u0003b�h^�ǍW\u001c\u0007.y�3Wd���(\u0005�꽳�\u001e��~q�q�}����pP�o��\u0006X$�\rJ�U�.���e\u0016-Ĩ~\u001e�\u0015_Be\u0001\\}\u001e�K�(X/l�]�\u0014B�S]��9!C��~�@ ����\u0016Wjv\t9{&G��<Ƞe�Z\u00110+8N?�5{��Xy�\u0017\u0003�1�'A\nOu�\u000b\u0010u������.3\"�\b�=(�ʰ��O\u0018�x�=f\u0004��֎��J����\u0010��PA","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"24734988-bbbe-49a6-bb78-b942cede00da","seq":1,"duration_ms":100,"bytes_in":478,"bytes_out":14,"enriched":{"digest":"9e60f29d2d979e32","strings":["g6#f","rj_s","]~}q","(X/l","9{&G","0+8N?"]}},{"timestamp":"2026-08-31T00:15:23","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-Y!UKNHcS-bXI","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d5921554b4e4863532d625849","method":"","user_agent":"","ja3":"","session":"462a7ff2-74a0-4dc1-995e-ddeb72a97721","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"a4c361077a30e573","strings":["BitTorrent protocol","<-qB5230-Y!UKNHcS-bXI"]}},{"timestamp":"2026-08-30T23:54:53","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���Ķ�M�|Oj�\nf\u000e��\u001fꇞ\u0015\u00044!\tD=4�jyju< \u0002�BFm`Wqm�\t��d\nP�2d$W΢;\u0000���&&\u000f/+Q�\u000e��\u0019К��c���L��\u000f���،�(�|K���]��\u0018y\t�'�7N8Zz\u0011�\u000e�F��Q��(\u001c����W`{\u0007���R���G�ՓiӮQ��En��\u000e\u0016V\u001a>K�t\rG\u001a\u0006\u0007(���'�H�3\u001aT�","payload_hex":"afc8d1c4b6ec4dbd7c4f6ab90a660e8a8f1fea879e1504342109443d34f06a796a753c2002b942466d6057716dab0991a0640a508d32642457cea23b00e881ea26260f2f2b518b0ec0b419d09af7d863f7def24c9f9d0f8ed2fed88cc728b97c4bffacbd5dcfda187909de27d7374e385a7a119c0e8d46acdc517f8785281c8fece08457607b07d3eae452c08cb647fad59369d3ae5191ca456eb8ec0e16561a3e4bf0740d7f471a0607289eb48227b748e2331a548e","method":"","user_agent":"","ja3":"","session":"122022f3-bab2-4abc-8df5-8621820e2d7a","seq":1,"duration_ms":100,"bytes_in":182,"bytes_out":14,"enriched":{"digest":"e749ab5872f4a0a1","strings":["jyju<","BFm`Wqm","2d$W","7N8Zz"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-21T10:42:30.849283+00:00"}