{"ip":"181.54.0.6","total_events":181,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["181 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 38,919 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"38,919 bytes sent","bytes_sent":38919,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-12T20:46:09","last_seen":"2026-08-13T18:07:18","events_24h":0,"events_7d":181,"geo":{"country_code":"CO","country_name":"Colombia","region":"Valle del Cauca Department","city":"Cali","lat":3.4385,"lon":-76.523,"asn":10620,"org":"Telmex Colombia S.A."},"source_domain":"static-ip-18154006.cable.net.co","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":181}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-12","count":93},{"date":"2026-08-13","count":88}],"recent_events":[{"timestamp":"2026-08-13T18:07:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"R��;�X�s�z�J\bA4���PB�O�\u0001\u0014/̯6�yϦ?�Di�H���xO4��\b�\"�A���m��\u0015���/l>\u0016(��\b���\u001a�/_(��\u001e؏PQH�4�͛\u0003O�9�1�[��}\u0010Ƭβ⛆���K��6�?9S&'#�}z\u000e\u000b4�� ��w\u0007�ՠ�\u001c?�/\u001a�$�\u0014D\u000f`������<�9�ר�zY*�\u000b]��s<3\u0019�&w(\u0004p�\n��>�#ɶ��%s�\u0001\u00044hF\u001c��]�g�476����6","payload_hex":"5286d53be058bf73947af44a084134b8a1ca5042d54f9301142fccaf36b379cfa63fce4469904882b881784f3483a9088b229e418deaed6dade715ae83972f6c3e1628ffd708f1b8871acb2f5f28bfde1ed88f505148e13484cd9b034fb339a931ba5b94d47d10c6acceb2e29b86a3c9ef4be6ec36b53f3953262723be7d7a0e0b34f6ff20f7ff7707e0d5a0ae1c3fd02f1aab248c14440f6087bff6aae0c63c9139ccd7a8a77a592a850b5de4f1733c3319892677280470a40a8c8a3ec423c9b6f4802573db01043468461c86d15de267b33437368fcff1d036","method":"","user_agent":"","ja3":"","session":"3ee1e3a6-c53c-4fd8-842a-b71f7a30e4cd","seq":1,"duration_ms":101,"bytes_in":218,"bytes_out":10,"enriched":{"digest":"ee55ea7f4d65c469","strings":["?9S&'#"]}},{"timestamp":"2026-08-13T18:03:46","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-ccq(H(~(zftX","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d6363712848287e287a667458","method":"","user_agent":"","ja3":"","session":"0a7c8ad4-175b-4660-b213-0b560cb412eb","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":10,"enriched":{"digest":"bc0a5f29ad48d351","strings":["BitTorrent protocol","<-qB5230-ccq(H(~(zftX"]}},{"timestamp":"2026-08-13T17:56:42","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"+���?|/��L(Q�3�i\u000f�\u000b����\t�\u0000\u0000̗��^���H+�5޾�\u0010#ϴ�C>o�\u0006�R��s\u0012��n\u0019�G_��\u0006ѓ��� ^zW���؋\u0010�\u0011�/p�\u001aO�n\fG�\\l@��� V���v�I�疓����Y��5R�z��Pb�7I\u0003���\u000f��`�\u001fRM\u001b\"�έ�\u0014�f\u001a|��տ{%�Ni�!ܜ�tØ\\��؇_{����`�F\u0006+��|�*�WÂk\u001f�p�\u0012;.\bD&l������\u000f\u0012���d��Z�G\f��'��q\u0006th���&\u0007��R�r�����:&�<��xm�� X�+\u0007D\u0003{\u0006\tTv�Ň\u0011�x�U�\b�s����x\u000e\u0001�!�B�4S�8���N\b��l45v��\b���n\u001a��R�Y6�;��I��t��\u0001�UB8�tr\n3����@~6�q��,��˫��\u000b�������e7�nG7������W�\u001d����|�EK��;\u0005Z\u0016�=\u0011�0t��WV�NW�� Y�t󫸷��l:7D��\r�52�o�u�s���8�x��\u0019\u0010�w��Y��_\u001f��Uԯ\u001a\u0005�{�\u0018�W","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"dea0409b-8b0e-426e-86a2-de736d702438","seq":1,"duration_ms":100,"bytes_in":439,"bytes_out":10,"enriched":{"digest":"11df2d145154b969","strings":["XUgg","l45v","l:7D"]}},{"timestamp":"2026-08-13T17:36:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-wlNZTBNSe9GU","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d776c4e5a54424e5365394755","method":"","user_agent":"","ja3":"","session":"b987d72d-cef7-4533-a7fb-84cc37c19812","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":10,"enriched":{"digest":"c74812ac658f31f5","strings":["BitTorrent protocol","<-qB5230-wlNZTBNSe9GU"]}},{"timestamp":"2026-08-13T17:29:19","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Âa9��WȄІ������V��tBV��iGį���9|5�_�����\u0015�X�kS�x����F�=#i���\u001a+|�n8(��Lu\n���<\u000b���5;�p���\u0014��Nw�\u0012�h`���}���J޾g.X)\u0016>�4X+���p_\u0011+�C��l�e��\u0003��T_��he�I?t�L��4��v�=`�Ó\u0014��CC�J\"����m�ͯ\u0011ay��^�~�L��xO*A,[gNK=�ު��X3��Trmtg��\u0014kt�FEl��L�>!|�'W��4\u001d�َD\u0004\u0016�O���\u0003\u0018\u0016߇b�N`_����ď��\u0001N�/�r\\A,��:���ձ��M�!g�TA�Yp�U\u0010\u0003����pxl�\u001f\u0010�1��3�|����^A���oL��[|ԛ \u000f����\u0000\u000e�����\u0014mi2�\u0011��H��H1Ҏ�噸\u0002ߌ�J\u0017�\u0018A�Y�^�T\rB�ڸ���14�ČA6^\u001d�aU\u0013K4Q�ܢ\u0018���^�b7���\u0012w���@(�g�y��Qd�i���]\ri8�e5\u001b\u0014��[�����\u00130+��!dj_�˗���\u0001>�G\u0015���D�۠u�I��=W:z�\u0011�e`��\u0005�[z%�R�n\u001dǞ��ou�r�\u0004���\u0016\u0000K�̿��cc��\u0019�mZ\rY\u000e�]`�.s�o\u0004�\u000bs\u0012�2�\u001a��_3˘^\u0007�s�z\u001bX\u001fɁ����F�P","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"bb120c1a-9ee0-4e1b-b996-3413123e0c64","seq":1,"duration_ms":100,"bytes_in":583,"bytes_out":10,"enriched":{"digest":"fb3712bd90c7366b","strings":["g.X)","xO*A,[gNK=","Trmtg","r\\A,","!dj_","=W:z"]}},{"timestamp":"2026-08-13T17:15:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-qB5230-plBp_02kGAC2","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d7142353233302d706c42705f30326b47414332","method":"","user_agent":"","ja3":"","session":"00f51814-888b-4fb3-8394-2ee5db5eddd0","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":10,"enriched":{"digest":"c39a40e16c0a1a2d","strings":["BitTorrent protocol","<-qB5230-plBp_02kGAC2"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-15T08:45:48.302409+00:00"}