{"ip":"181.42.130.104","total_events":245,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["245 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 52,360 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"52,360 bytes sent","bytes_sent":52360,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-10T16:08:07","last_seen":"2026-09-11T02:33:47","events_24h":245,"events_7d":245,"geo":{"country_code":"CL","country_name":"Chile","region":"Santiago Metropolitan","city":"Santiago","lat":-33.4521,"lon":-70.6536,"asn":27651,"org":"ENTEL CHILE S.A."},"source_domain":"client-181-42-130-104.imovil.entelpcs.cl","known_scanners":[],"scanner_tag":{"key":"peeringdb:as27651","label":"entel MPLS","category":"isp","url":"https://www.peeringdb.com/asn/27651"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":245}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-10","count":137},{"date":"2026-09-11","count":108}],"recent_events":[{"timestamp":"2026-09-11T02:33:47","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-YhZ7dpsNqLLM","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d59685a376470734e714c4c4d","method":"","user_agent":"","ja3":"","session":"f473259d-1abd-4352-9a9c-f74eb3d950d9","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"60d6df1b95650c7c","strings":["BitTorrent protocol","<-UW160N-YhZ7dpsNqLLM"]}},{"timestamp":"2026-09-11T02:32:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�8�cN�8\u001aK\n�G+È��\u001e\u0015W]�a���������M\f���\u001f��%�ot�EaW�\u0019QI��\u001d�\u000e\u0013�\u0002�\u0015�dD(��\r\f��HL\u0003Z��4��8!+O��\u0013:F�P�,���\"�\u0000u\u001ez+y�,��YL�?� vƪ�\u000bQm��eqI5<\u0001�\u000b��KT+i��V\u0006�\u0017�\\E7���#�c0�k,%��-~��WD�������{�\u0017�#�����<����f���\u0015:�����n�T\u0013\u0013�n�t�A�撛I@k\u000fc\u001e\u000e5o���\u001e���\u000f��\u001b'BJi��\bА\"�\u0000���\u000eeX'5r�����\u0006�.e�o\u0006��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"7c19ae14-eaac-42bf-93e4-28aa11f4d96e","seq":1,"duration_ms":101,"bytes_in":271,"bytes_out":14,"enriched":{"digest":"4e4f5d18e258693f","strings":["8!+O","eqI5<","KT+i","'BJi","eX'5r"]}},{"timestamp":"2026-09-11T02:30:54","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-kkU6HOey~MME","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6b6b5536484f65797e4d4d45","method":"","user_agent":"","ja3":"","session":"92d0ec59-8965-4402-a187-df939783596d","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"5151ca16c1d60803","strings":["BitTorrent protocol","<-UW160N-kkU6HOey~MME"]}},{"timestamp":"2026-09-11T02:29:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\t���\u001e�6<@��]\u001cy�S\u000f���e��U�\u0013\u0012��4�yD+\tϕ�@�j�ِ\u0016�~�ǀXY�CUr�Vkm���Y\u0007\u001dx\u000b1��q���\u000el\u0017\u001aҡq[0�\n��\u0000\u0005x<\u0017�T{ږ8<��c0��M\u0001�5(\u0004����l\u001c�X�\u000euT>�\u000b�$]�cbTDT�*������Мc�S�\\��K��\u000b\u001f%�\b\u0011g�\u0005L�\u00151,o����ÜE/���!d\u0019pf�\u0010Csc�eT\u00170�\u001a�\rw��E\u0004��C9�B(\b޵Ts\u0000��\u0006�n���Z����eh$���s���r��\b�����\u000b��&���m�#�X��2�:\u0011�����ʆv�@Q��> '�썾���z\u001cc���\u0000z:�\u0006��[�D�\u0004J'A\u0017��aI��_3�R��\r�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"863482df-9ebd-4ec1-8a48-385dd97bf010","seq":1,"duration_ms":100,"bytes_in":328,"bytes_out":14,"enriched":{"digest":"31dcb42d6c71d11e","strings":["cbTDT"]}},{"timestamp":"2026-09-11T02:28:09","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-Hx(YKGJwimRD","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d487828594b474a77696d5244","method":"","user_agent":"","ja3":"","session":"b585a761-843a-44de-8747-d93e220644fb","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"6cd1888f7fcafbd3","strings":["BitTorrent protocol","<-UW160N-Hx(YKGJwimRD"]}},{"timestamp":"2026-09-11T02:26:57","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�E�\u000e�\u0017L\u0010�\u001b\u000f�E�\u0017č\u0011��\u0000\u0018\u0000�����\u000f���m�\u0014��2��T�$\u0011-�Y��\u0003��\u000b����OѮ\u0004=x-\\��\u0014L�\u0015��s/)��n��W���eU�'\u00100[U��\u0012'-\\*�}:ڀ�\n�f����Ξ�|�i��]늧AκN�i�a!-�M����v�M\u0014ea�0u��W\u0000��Se���^�<�+\u0012\u001fFM��M\u0018���É2�]�A/��-�In�|�x\u0012pӝ�q�.'o��?C\bP-�,\u0018���","payload_hex":"f645dc0ed0174c10831b0fcb45f217c48d11f5d7001800a7f49db4be0feaf0a56df714a1ce32f8d654dd24112dc65993d003f1c80b83beb2dd4fd1ae043d782d5c86cc144ca115aaa5732f29fd916ebcc75785f3bc6555f02710305b55cdf412272d5c2a7f907d3ada80f40afe6694c8ef8086f0f9ce9e9f7cdf69fce75deb8aa741ceba4ed369f561212d8d4dc5dcfcd876eb4d146561f630759af15700ffc9536584b6c85eda3cbb2b121f464d92fe4d18c0a1e2c38932b55d97412f92d52df1496ea07cb7781270d39d8d718e2e276fe0de3f7f4308502da42c18efeeb6","method":"","user_agent":"","ja3":"","session":"0410f1f8-2048-4e3d-ae70-08c87130c051","seq":1,"duration_ms":100,"bytes_in":223,"bytes_out":14,"enriched":{"digest":"15c9e0e0b60d8860","strings":["=x-\\"]}},{"timestamp":"2026-09-11T02:25:27","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-pu2HCsSd0ytP","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d707532484373536430797450","method":"","user_agent":"","ja3":"","session":"84b77fa4-b93b-44db-b8c4-30ab8c2b49c5","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"2ad1d2fa75b470cf","strings":["BitTorrent protocol","<-UW160N-pu2HCsSd0ytP"]}},{"timestamp":"2026-09-11T02:24:15","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�v�\u0018��C3+�ի�O}����\u00174�f\tA:��&H$(���x��|Bw���x��(���\u0018�Z\b^\u0010��!��P��^\u000eU��|{��\u001dq�\u001e���\u0018\u0003���\u0011o=<����j�Ul�<���g��=�a0��A�n\u0019�������3;\u001b\u0007���}\b1�4���\u0010R���\u0007��\u0000Z��`9\u001e�\t�\u000f\t:\u000f|�F<r�`:k4�[�_)V�x�K��ƿ(g@�U�Dl���\u0007\u001f�\u0013�3ӊ\u000e�\u000fF��*1hA#�\u0016�/T2]��,��,�n�x�\u0001��q�{:��f���\u0012��\u0014\u0010F\u001ey�b�� �3�q*�>��~�����1ļ����o����g�T+V\u0007�k�\u0007��\u0016\u001ek��XŢ�8v�7Ͼ�e��|�'6�����\u0019j�\u0011D���Y�|y��S�X\u0004<լ\b\u000e�ϯ\u000f샀�֜�1e�s�sq�Z*��dN��\u001b�������זPIC�C-\u0018�Ǟu�I' �\n>\u001d�\u0000�C_$��%`Zz,�^\b�q��`H�w��}4Y�^Fr�� Fv��$��\u001a�2\u0004��'O\u000f\u0015�\u000f������4\u0010-f47!p��Z��2��Ҩ�p��<\tn�m�`k�����7��\u0017���q�(��M�!dž\u0000�����i�3��\u0012����Ȥ�b[Pas\r\u0003i�\f*\u000b|T","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"785cd3d6-dc15-46b0-90c6-1eed47b128f1","seq":1,"duration_ms":100,"bytes_in":552,"bytes_out":14,"enriched":{"digest":"76f53b8c6e02b1b6","strings":["&H$(","`:k4","*1hA#","/T2]","%`Zz,","-f47!p","b[Pas"]}},{"timestamp":"2026-09-11T02:22:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-KOQ0wCys7AUK","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4b4f5130774379733741554b","method":"","user_agent":"","ja3":"","session":"3fbb7cee-9587-41cb-9ade-b48b31c63c61","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"2ff0216236ff3eea","strings":["BitTorrent protocol","<-UW160N-KOQ0wCys7AUK"]}},{"timestamp":"2026-09-11T02:21:34","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�S�\u0012A��c\\�7-���.\u001cw����Į�~��\u0001�q_\u0006�M�r�~8\u0003�-��t�C]a].�ڣ�hl�e��Q�\u000b}z`e8��Z�!j�S�\u0002\u0001S�r����\u0006J�\u000fO�3�k\u0003��8���f�Jz�ضHwΎMH\"O\u0016\u0014�Ǫ�\u0006��\br\u0011��gt\u001c�\b6�����pOa�܀�\u000b7�\u0017ޜ�\u0016���w��^vF\\Ƀ���j\u0000\u0017�p�����H\u000e\t��_��R���\u0011gڸj�b�3x","payload_hex":"ea53d71241c4e8635c98372de596cd2e1c7781f5c2fac4aeb27ebdb801b9715f06ba4d9072947e3803a52d92f174f7435d615d2ed2daa3d6686cb26587e351c50b7d7a606538b68b5a87216afd53a1020153bf727f93d4fac6064aad0f4feb33da6b0386cd3881af8666a54a7ac9d8b64877ce8e4d48224f1614e7c7aa8f06d9d20872119ab267741c820836a7979bb6ca704f61b1dc80e30b378917de9cc016a0fcea77e7b65e76465cc983bcf98a6a0017a5709f93c8f0c5480e09cdd65fb59152d8c9de1167dab86ac262bf3378","method":"","user_agent":"","ja3":"","session":"86c460f7-48b5-4ae7-be1b-cac59cd3a347","seq":1,"duration_ms":100,"bytes_in":207,"bytes_out":14,"enriched":{"digest":"a971a01acd42549e","strings":["C]a].","}z`e8","MH\"O","^vF\\"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T10:00:05.972482+00:00"}